Hi everyone. Thanks for being here. My name is Fx, I'll final it. And we're going to talk about analyzing complex systems, which is essentially like when you want to hack something that's a little bit bigger than your arbitrary broken Windows server or something. How you're going to go about that, how you should approach that. And we're like shown that on the case of our research on Blackberries. So when you start looking at something a bit more complex, the first thing you do, you have to do is get an idea of what the entire picture is. Here's the reason why. Or there's actually, yeah, the core reason being you see something, and in our case it was those little devices in the hands of people in way too expensive suits used all over the place. And you see those devices and you think, wow, that got a CPU in it and it's used by people I don't like so I want to hack it. It is a very good motivation, but you should not just go ahead and like beat someone up and like steal his device and try to hack this device. I'm not saying that like beating up people is bad. I'm saying that you should not go for the obvious part of the system because there has to be more to it. Obviously, like if you have a device like a Blackberry, there has to be some infrastructure existing that this thing is running on. It's not a standalone system. So what you see is also probably the thing that whoever made this device concentrated on when they tried to put some security in there. So basically the defending side was probably also focusing on what everyone sees, what everyone has in hand, in this case, the device. You have to look at the bigger picture to really see what is a promising attack vector. The problem is like if you have a complex system that contains lots of stuff like many servers, many infrastructure elements and so on and you don't, you're not a three-letter agency, then you don't have unlimited resources. We all have lives like even hackers have to sleep and have to get drunk and stuff. So we don't have unlimited resources for research. So we have to focus on something and that's better something that gets you somewhere. Also, you need additional resources apart from yourself and your brain which is required for hacking just for the record. You need hardware. In the case of Blackberries, you actually like obviously need a Blackberry. You need software possibly. You need infrastructure and accounts. So again, in the case of Blackberries, you have to have an account on some system that you can forward your email to. Of course, you need to obtain this account. I'm not saying you need to buy it. You need to obtain an account that you can work with so you can actually see how the system works. Getting what you need might actually take time and there are consequences to that which should be considered before you go on. So can you afford to invest money?  How much can you afford? Are you crossing legal lines if you're getting stuff? Like when we got our hands on the software to look at like the enterprise server, it wasn't strictly legal because we didn't strictly buy it. The next very important thing is can you afford that your potential target knows that it's under attack? For example, if you're looking for vulnerabilities in let's say Gmail and you're writing a fuzzer for email content and you're sending lots of crappy emails to Gmail and Gmail goes down, it is fairly likely that day after like the fifth or sixth system crash start investigating, so your target in this case would know it's under attack. And all that like especially the target knowing to be under attack and crossing the legal lines, there's also the question of do you care? It doesn't make any difference to you. So the big picture for RIM is you start with identifying all components in the system. So first you're getting official data that's the big picture that RIM puts out in documents. So you have handhelds like the native handhelds and you have third-party handhelds running RIM stuff. You have several data networks, GSM and other mobile networks.  And then you have all the server infrastructure on a potentially corporate site. So you have the wireless services, you have like the email servers on the left, you have application servers, web application, all that. When you see stuff like this, when you obtain documentation about your potential target, go ahead and build an abstract view of that. Like don't eat the data you're fed, just try to get your own picture. So that's the abstract idea of a RIM network set up here. So you have the evil blackberry to the right, then you have the GSM network, we're German so we're living in like GSM land. You have provider site servers that are obviously somehow specialized. It's something related to RIM. Then you have the RIM secret network over here and the border systems, they're called SRP in different countries, UK, Canada, somewhere else. Then you have a corporate network site with an enterprise server and the enterprise server management software to that. So that's again something in a system, there's always some part of management software because none of the software you can buy today is actually carefree. Most of it is actually quite a hassle to get to work. And there's always some poor guy administrating this and he's always having some poor Windows system and that needs to be considered as well because it is a potential attack vector. And then you have a connection from the corporate networks somehow over to RIM. So when you break this down then you get like handheld devices, mobile network, RIM network, internet-based communication which is this little communication line that we've seen here and you potentially want to know what the protocols are. You have a Blackberry enterprise server, the connectors to the mail servers and you have the management tools. So you can reclassify them because unless you know exactly what you're dealing with you need to classify the elements, you need to find out what you're actually looking at. So the handheld device is for example an embedded system. It's obviously proprietary hardware. It has a real-time operating system because that's required to run a GSM engine and it obviously has Java because the applications are slow. You have a mobile network, GSM 2.5 or 3G GSM network. You have a RIM network of which you don't know anything but it's fairly likely that it's IP-based. You have the internet-based communication which is certainly going to be IP but there is some proprietary stuff going on in there. You have the enterprise server connectors and connectors which is like Windows-based service software. It's closed source but it is a Windows environment so we know how to debug it, how to disassemble it and the same holds true for the management tools. And then you need to look at the accessibility. Like can you get your hands on the stuff? Handheld devices for example. Well, it's doable. As I said, you can take them off people you don't like or you just buy one. The mobile network, the GSM network, while it's obviously a well-defended network, it is hard but it is possible to break into a GSM network and take it over. That would be an attack vector. The RIM network is probably a lot more doable to get in. Like do you just have a bunch of ODays sitting around breaking into the RIM network but it is illegal. Internet-based communication accessibility is there so if you have a working installation of an enterprise server you can sniff obviously the traffic and start reverse-engineering it. The BlackBerry Enterprise server and connectors accessibility is there. There are tons of companies running this stuff. This is why we are looking at it. So you just call someone up and friendly ask can I have this CD please. And then like accessibility in more details is IDA so disassembling it, that's doable and the same for the management tools. And then the most interesting part of that is what's the impact? Like use it down, consume whatever drugs you really like and imagine you're already done. And think of what's the impact if I like on this attack vector are successful and implement a successful attack. So for the handheld devices for example it means you potentially have information disclosure in the form of reading some CEO's email and potentially you have remote control over the device so you can maybe you can put up point screen savers or something but it is a attack that's targeted on a single user definitely because it's a single device. For the mobile network well you could do a lot of stuff in the GSM network but then again yeah that's maybe just a little bit a too big attack factor just to own a blackberry. For the RIM network if you take over the RIM network or the core systems you become RIM so you can do whatever you want. For the internet based communication if you successfully hack that and reverse engineer that then you can implement the protocol so you can talk to RIM and you can talk to the enterprise service. Which enables you to for example do brute force attacks we still don't know if there's a password in this protocol or not but if you talk to protocol then you actually have the ability to write your own tools and to automate your attacks. For the blackberry enterprise servers if you have a vulnerability there and you can exploit it then you get code execution on a host OS and you're owning a centrally placed server which sounds pretty useful and for the management tools you can modify the policies that are pushed on the handhelds you can send messages to everyone whatever that's worth and you could remotely install software on the handhelds. So when you draw this all up into into one diagram then you can see the ease of access and the impact of what you do and essentially place every single item and then look at the connections how those things are connected to each other and then it's absolutely clear that you should not just concentrate on the handheld but you should concentrate on the enterprise server. Now after all this abstract thing short summary why you should go for the enterprise server the enterprise server is sitting in the corporate network right next to the mail server because it needs to be connected to the mail server. It talks to the outside it handles email which is a communication vector that we all know how to use and we all know that like the sender can be modified and there is absolutely no way for the enterprise server to not take someone's email because well it is an email system so it's supposed to handle email and if you own it then you get like everything. So after you have the abstract picture get the details. So it is important to figure out if like how feasible is a attack like sending email is very feasible breaking into a gsm network probably not what you need we already covered that and how illegal it is and even here sending email is like the more preferred way because it might be illegal if the email actually contains an exploit but let's face it you're hard to get. So for the handheld devices what we did to verify the details we checked what's there in terms of software so there is a simulation environment available of rims so you get an emulator you get a developer SDK the current version is for java the older version is for c so it's obviously more interesting but it was limited and to people in the US and Canada and that's again an accessibility question yes even I know people in the US and Canada and yes I can call them and say come on send this fax over to rim and get me the software which someone did so here again accessibility is not always a big problem then we have desktop software available there is sync software and this third party code there products that you can put on your BlackBerry so you can take this code and look into it and find out what the API calls are how powerful the API is because the product has to use the API to actually make something do something and the more powerful the product is the more features this product offers the more interfacing into the operating system of the handheld has to be there and by looking at the third party product you can actually figure out how much there is for the protocols you look on how many communication channels are used who initiates the communication is it UDP is a TCP how much encapsulation are you looking at the encapsulation and how variable the protocol is it's very important for finding vulnerabilities in it because if it's like a multi-level encapsulation stuff then you can assume they're going to be multi-level pausers in the software which are maybe not written by the same person so you have potentially interfacing problems between one layer and the other we've all seen that and other products happening if it's a flat protocol design like one huge structure then the code for that is probably looking the same and it's probably like written by one crazy Russian and no variable has more than two characters and stuff which indicates different bug classes the same for the variableness of the protocol like if you have multiple length fields and it can be like you have yeah length fields are really important or you have different encodings then there's lots of stuff that can go wrong for example on SAP the protocols are all fixed sites like everything is pretty much like eight characters white you don't find overflows in something that's fixed to eight characters and then of course you have to look at how the software is designed like is it running in user land is it running kernel is it running system service how much components how many components are you looking at and especially what are those components doing again if you have a piece of software let open support in user land and you have another piece of software that opens support as a kernel as a service as a system service then you should look at the one opening a port as a system service because if you own it then you get higher privileges and what are the building blocks of the software what libraries are used who develop which component is everything like by this one vendor or not what programming language is used for example in reverse engineering it really sucks if you take a a server software part and then you realize it's Delphi because IDA is just like failing on you and nothing works anymore and all your tools don't work anymore so and of course where's the interesting stuff stored like does it have its own crypto containers or does it just throw everything into registry and blah blah blah more things to look for is history how old is the stuff like where does the component come from when was the first release was there any major rewrite check the press releases they're going to tell you um someone walked up yesterday to me and said another very interesting source is um you shouldn't go to them if they like have patents for their stuff um especially for the communication protocols and stuff um then you can go to the public website and download the patents and actually see how this whole thing works um and the documentation like what are the setup requirements what is troubleshooting officially how it is supposed to work and what are people actually using like check the forums um see if some lame ass administrator said yeah this is the troubleshooting procedure but it never works so I just reboot the box or this this and that procedure actually does work um because it again tells you who are you dealing with if those people managing the systems are let's put it this way less talented um then it's less likely that they're going to notice another administrative account on their system step three um work this is just um yeah there's there's nothing to say about that um it has to be done so reverse engineering takes time um taken apart networks and protocols takes time so and then you get results so the first thing that we did with the handheld um was stripping it it's it's pretty much the same approach as like getting married um you you know you want to see what you get so so this is um this is the back view um it actually has an um it actually has a uh what's the fun what's going on here bye bye applause for the guys come on got a lot of dev con so it was cool so essentially by taking the stuff uh taking the cover itself we actually figured out what cpu is in there because like the the csdk that we um downloaded and we wanted to work with indicated that it's actually in x 83 x 3 x 86 is the cpu name um turns out it's actually arm so they're running on an arm cpu um in analog devices chip and then there's another very interesting part on this picture um we suspected that where's my laser pointer okay so like next to the you see where the gsm card is supposed to go in um next to that there are a few little pins um our suspicion was this might actually be jtech so um it is again a possible attack vector that's the backside um no the front side that's pretty boring so as I said turns out its arm um it actually has different in real time operating system kernels so um when we took the first one apart um we found a katak amx4 kernel katak is a um company that sells real-time operating system kernels and when we later talked to rim and it was a big surprise to them um and I'm like wait a minute it's your product um but it turns out like every single device actually might have its own kernel so this again shows you that the device as an attack vector is probably not very good because we have a situation like where sysco where every single device has a different core so if you find a vulnerability and you've write an exploit for it it's going to take you a lot of time and you can only own one type one series of devices and when they come out with a new series of devices your exploit doesn't work anymore um then it turns out that the way they built the operating system is you have a core operating system binary that's called rimos exe um and it's actually a real pecov format like on windows like exe and dl files just compile for arm and then everything else like the java virtual machine are modules in a form of dl files linked into this main exe file so the entire operating system in terms of memory setup looks um like one like one process like one application on a window system the java virtual machine as I said is loaded as one um binary module it's actually the largest one and I think in the recent black barriers it's the only binary module that's loaded um from the kernel um it is actually made by rim so they're they're different java virtual machine implementations like from sun and from hp and from ibm and so on and rim did their own implementation so it's actually worthwhile to look for virtual machine box in a java virtual machine um and see if you can make something happen on a device unfortunately um there is with the java classes um there is not a full set so you don't have the reflection api for example and for that you get like tons of rim classes the rim classes are used to communicate with the device to like show something on a display or get some user input or like talk gsm or send an email or whatnot and as soon as you want to instantiate a object out of the rim classes it actually checks the signature of your application and your application has to be signed by rim now how that works is um you write a piece of code and then the development environment is going to um take a hash of your um job package and then this hash needs to be sent to rim and you need to get an account with rim that costs you a hundred bucks once one time um and you pay this by credit card the idea behind this is where our suspicion is that um they say well if we ever have a binary that's doing evil shit on our blackberries like they have a blackberry warm or something then we have the hash of the binary and since the guy paid with his credit card we know who it is and we can bust him um which works in a world that doesn't have stolen credit cards um so yeah um it's not gonna do that but anyway that's the procedure we didn't find a way to get around um the signature checking of the binaries um also the firmware is checked um is signature checked so what happens is when you load the firmware um the loader software on the pc side will actually verify the signature and i'm like okay this is easy um so here is the shortest ida manual ever if you want to crack this site of the um authentication um then you just go search for the string um signature cross reference at once and you find the code situation and then like this is this is the jump that you need to not take um unfortunately the device itself is going to check the signature again so um we after finding that out we had a device sitting there just blinking red and not doing anything else anymore um we found uh vulnerabilities in the jut parsing it's actually not a bad thing but it it's funny because um i think it's three years ago i talked about embedded systems and i mentioned a semen's phone that would crash if you would access a jut file with a long midnight name or vendor name and it turns out the same happened for the blackberry browser i just found that's really funny other things are as i said jtech is a hardware debugging mechanism um that's in embedded systems widely used um where you can do sub cpu debugging um of course finding jtech on a blackberry is an interesting thing because you could circumvent the signature checking and get your own software on it um looking for jvm bugs looking for bluetooth um vulnerabilities um and like accessing memory on the device via the loader the jtech this is actually work in progress this picture was taken before we flew over um so hunts actually developed a jtech finder and at ph neutral we actually found the jtech connectors so the pins i showed you earlier are actually jtech and so i had someone build me a jtech cable for that and this is my new wired up blackberry um unfortunately as i said that's brand new so we haven't done any work on that and the problem is when i power it on it goes like um so i think there is still some something at miss with the with the electronics um the protocols i'm gonna skip a bit over them because we we're running out of time i guess um they're not too interesting actually um it turns out it's a multi-level encapsulation so um the other side is srp chunks like um you have a srp header and then you have several chunks in a protocol and then you have a tailor and that's it um they have two different types um we looked at them and and saw okay there is one type um that's called 53 hex and one type that's 49 hex and then we saw that we're dealing with integers and um so we went on and later on when we looked at the decodings we actually realized um it's a capital um s and a capital i for string and integer uh da so that's in that's a case where that shows you that when you reverse engineering stuff sometimes the obvious solution is actually the right solution um this is here srp opcodes um this is also stuff that still needs to be played with because um we didn't so far um there are many things that we find fairly interesting especially um stuff like config or info um that's the communication between the enterprise server and rim so um yeah i assume you cannot remotely config rim but probably there is some functionality in there that still it's worth playing with this is the session setup when an enterprise server gets online and wants to talk to rim um it goes ahead and like the client in this case the enterprise server talks to the rim server and sends a system id and gets a server challenge back um and then sets a client challenge over there and it gets hmec sha1 transformed srp key um and that's basically the authentication so what happens here is you have a thing that's called srp key that you have to configure in the enterprise server it looks like the cd key it's actually like it's going to ask you during the installation please enter the srp key here um which looks like xxx dash xxx and so on and then um when the server is up and running and setup then you see in the main dialogue this srp key always displayed so everyone assumes it's like your typical cd key um from like everything else like when you install the game or something that's not the case it's actually the secret between your company and rim many people don't get that um which has a very interesting effect um because they don't consider that a secret so um we googled a bit and we found presentations from people um showing like this is how we installed the blackberry enterprise server version 4 uh on screenshots of course including their srp key um which will enable you to like become this company in when you talk to rim and like take over their entire email communication um and that's very interesting because um this key is used for like everything authenticating the company to rim and back everything is based off this srp key we're going to see re re cd srp keys several times on this presentation um but the most interesting thing is just like a communication or wrong communication um of rim site to their customers it is their secret it is their password then in a protocol um for a message you have the gateway message envelope um that's the routing information so you have the source um sender and the destination where the message goes and those are in the form of pins when we talk about pins here it's not personal identification number um but what does pin stand for okay the rim guy doesn't know um it's actually the device number so every every device product identification number okay every device every rim handheld um has a pin it's quite a long number it's hex i think 16 characters or something and this is how they do the identification of the device so like the mobile messages the pin messages have a source and a destination pin and a message id and it looks like email this is the format i'm going to skip that it's in a slide in case someone wants to heck with that um application layer information is on top of that so it's going to tell you if it's a message c-mime or if it's a calendar update or if it's a it policy update the it admin messages also um have um capabilities to reconfigure the devices the handhelds they also have the capability to remotely wipe the device um so if you can spoof one of those messages it's really really good but you need the srp key for that then we found out that specific pin messages are not encrypted pin messages are device to device messages by per se and those are encrypted but if you're sending a pin message from an enterprise server to a blackberry then it's not encrypted and there's also if you're sending a pin message out of the um blackberry api from the device to another device you can easily make it wrong and it's not encrypted so if a third party product tells you there is encryption going on because we're using pin messages it's usual question that um so this is the c-mime format so the whole thing looks like this um you have the is or um des encryption you have the key id in clear text you have the session key encrypted with the device key um the message is compressed and decrypted with a session key um actually the compression is quite something weird we looked at it um not a hundred percent sure we figured out what it is but it's not something standard um and we successfully implemented a packet dump message um um yeah i got a let's be there bye honey time difference she's from Germany um so we incommended a um message decryption script uh beer free beer so if you have the srp key if you successfully stole an srp key of someone um then we can give you a pearl script so you can read just someone's email um what about the crypto um apparently this crypto is pretty good it's certified um we looked at the implementation the implementation looks pretty solid um on the enterprise server as well as on the handheld um we are no crypto people so um the crypto details need to be um revised and and rechecked by someone else this is how the dumps look decoded um here you also see the i and the s in a in a message chunks and you see the pin messages um the pin ids sender and receiver which of course enables you then um to do traffic analysis if you're reading someone's messages someone's traffic like um their smtp traffic and their srp traffic meaning you own their border router or something and we're here that's doable um then you can actually relate by you send in an email to ceo at evilcompany.com and you see a pin message going out to a certain pin you repeat that three times and it's always going out to the same pin you know the um product identification number of the ceo's device which might be useful in later attacks um protocol based attacks um in the srp session setup you can of course if you have someone else's srp key let's say from as i mentioned it from googling for their presentations um you can of course connect to rimman say hi now i'm this company um what's going to happen is that both sides first of all you have to make um the other connection to drop but that's easy we can do that um for example tcp windows slipping or reset storms you can drop a tcp connection then you connect and then you are this company um and you get their email if um if you have a war because the server is trying to reconnect as well then you're causing a rooting problem because rim cannot decide which one of you two is the right one so it cannot decide how to send the messages or where to send the messages so what happens if you do that more than five times this um this srp key gets blacklisted the interesting thing here is there is no procedure for unblacklisting it automatically or notifying the one who got blacklisted so what by talking to a consultant who's usually setting up um enterprise service he told us see um we had this problem before so they had a test system and a real system and they turned them both on and then they didn't have blackberry for a week and they tried to figure out what's wrong they just couldn't get connection to rim and after a week they called rim and they're like yeah you're blacklisted um we could whitelist you again um but there is no notification procedure so if you played a straight to someone um they don't have email for a week or two um protocol based attacks on the other hand can also have as I said vulnerabilities unfortunately the protocol is not very powerful um but even in a simple protocol they um managed to fuck it up so um the string the string fields have a length field and this length field has an integer overflow so if you put a length value of minus five in there um and you connect um to your enterprise server and send this packet then the enterprise server is running in loops and taking 100% CPU and stuff um since we have clear text pin messages and we know um how to send them because we talked to protocol we can now spam people so we can go sequentially um through all the pins that are on the planet and just send everyone a message um and since it's clear text we can also just spoof the sender so there is um rim is actually coming up with a new version um of the handheld software that's allowing you to block clear text messages because there's right now no other way to prevent spam from happening enterprise server um this is how this enterprise server looks in detail so you have this central machine running on windows having a dispatcher mds alert service attachment service policy service management software hanging off and you have a connector to this mail system and then you have a SQL server down there now the SQL server turns out to be a really juicy thing um but of course if you want to attack something like this you go for what's having the biggest attack surface in this case when you send in email um the highest attack surface is where the email is parsed and the attachment service handles the most complex file formats it handles office documents it handles images that handle zip files so this is of course where the money is and this is where you go attacking it um first you look at what are the accounts that the machine actually that the software actually needs now here we see it needs local logon logon as a service local admin it needs read only administration of the entire exchange system and it reads needs read write administrative access on the exchange mail store in case of exchange installation so once you own this thing this is what you get for free the SQL server um turns out to be the really easiest way to break into an enterprise server especially if you're an internal attacker um with domino for example it's not set up for um integrated authentication um meaning that it would use the domain accounts of windows but it's actually using username and password combination it contains tables with individual messages and the emails all in clear text it contains a table that has the srp authentication key in clear text sitting in a database um it contains tables with all the device keys that's the keys that the device is used for encryption um the previous one the last one just in case you lost it and the new one that's going to be sent out to the device um and those keys can also be used for the traffic decryption and the best thing about it in a default installation it has a username of sa and no password so you can internally just connect um to your SQL server and get everything off it without much hacking when once you got the srp authentication key and this is how it looks like i told you it looks like a cd key um this is the transform that you need to do um before using it in decrypting traffic there's one very nice thing about the updates that rim rolls out for the enterprise server if you get an enterprise server in a default installation release version it of course doesn't have any symbols but once you install a service pack or a hotfix every file that got touched by the hotfix um is actually coming including its pdb file so you get the debug symbols um for your server software and that like makes your ida installation really happy and of course you can bind if the whole thing um and find the bugs they're already fixed looking at the code in a style um it's actually pretty good c++ code um they use massively stl so there's not a lot of string copy going on um the way they implement stuff is like they triple and um double check everything so the receiving function is actually like doing a select calling a function doing a select calling a function doing a select and then finally receiving one byte um and they're generally using signed integers so when you look for vulnerabilities there look for a signed nest box um libraries they used um for the office document parsing it's um ice stream classes then they use microsoft um ms html for for html document parsing ms xml um sdk is installed and there is a parsing product that used to be a company called horizon and then got bought by rim that's actually handling all the parsing for the attachment uh for the other attachment classes um it's parsing pdf and word perfect natively and it's parsing images and zip files um the version we looked at and by now it's it's actually updated and they're running um a recent zlib but the version we looked at is um using zlib and zip d compression was um actually code taken from the contract directory of zlib so everything else is nice and tidy c++ and then out of the sudden you open ida and you see um one thing that goes like just straight c code for pages and pages and you're like oh that that doesn't look right and it turns out it's just copy and paste um and then there is graphics magic graphics magic is in um is used for image parsing and it's um a spin off from image magic and it's fully linked and including deba code and supports a lot of formats and this is um what you can do essentially is officially supported our png and i think gif and stuff um but you can actually um circumvent the main um horizon parser that's trying to fingerprint the file it's just looking for the first three or four bytes once you got around that then you can feed all those formats into um graphics magic because graphics magic is trying to figure out what file format it is for its own following a different pattern the change lock um actually i'm gonna skip that it it just shows that the guys don't know what they're doing um essentially um there have been the expected heap overflows like image width by image height multiplied by 32 um if someone puts in like um 4.2 billion as width and 5 as a height to multiplication overflows you allocate zero amount of memory and then you copy lots of data over that and it's called a heap overflow and you own the machine um same for the png parser um as i said zlib um is used in or was used in a non-recent version um that's by now fixed but um it was exploitable in this version we looked at and then you can do stuff like this so you get um a asshole that's the international esky symbol of an asshole on the internet um sending a evil message with the evil attachment um to the attachment service owning the attachment service which owns the entire machine and then of course you don't want to get a shell i mean you can have just a shell but what you want to do is um you use the existing code in the server to obtain the srp key of the database and then you use the other existing code in a server to send your asshole an email containing the key therefore if you're running an enterprise server uh you better separate the attachment service by now rim actually put out a um white paper that is actually telling you how to do that um so that's highly recommended so assholes cannot um yeah get your keys if you have the separate and if you have the attachment server running separated um you have a control channel that's unauthenticated xml over port 1999 um which is just used for varying um the attachment service and its performance values but you can also set the amount of um the amount of processes that actually parse attachments and someone forget to put in limits there so you can set it to zero um which of course makes it a happy boring not working attachment service or you can try how many processes this window windows machine can support at the same time um mine made it up to 7 000 and then crashed so um when you're done with everything else then um of course there's vendor communication so um in this case it turns out vendor communication was a very useful thing um although it takes some effort um to get together um we managed to get together like rim and phenolate did and the result is really good because rim is reworking the reworked already the attachment service so they're no longer using graphics magic um they're actually testing all the other attachment services now um to figure out if there are more vulnerabilities in there and their customers are actually doing the right thing and like securing the database and moving the attachment service to a different machine yeah and after um you're done with all that then that's the good thing getting drunk and printing offensive t-shirts I think it's time for questions if there still are any questions okay sorry for giving such a bad talk um I was just drinking too much over the days


Hello everybody and welcome back to Jurassic World the game. Wow. Okay, this is the first time I'm recording since I've been back. I haven't recorded in three weeks. If you didn't know, I went away to Japan over the Christmas period and the New Year period as well. I had a lovely time, but we're not gonna talk too much about it because I know that's why you're not here. You're here to see something I missed while I was away. And if we go into here, it's the first ever in the game. We've been waiting for this cross pollination with species and types. You have herbivores, a carnivores, amphibians with flyers, but this is the first time that we're seeing a different kind of, what would you call it? A species type thing. That's because they're all different species. If we go into creatures, now I don't know exactly what its class is. It's probably going to be classes of carnivore. Can I select a hybrid? I would select the hybrid. Let's have a look. Let's have a look. It should be in here. There it is. This thing, the Alonogamous, an allosaurus, rare, with a binogamous tournament creature to create the first ever in the game, aquatic and land. Hybrid creature. And I'm amazed. It's amazing. And we've also got this as well, which actually only takes a level, oh wait, Velocity Gen 2 not ready. Wait, do you need level 40 for that? And in Dominus Rex Gen 2, how are you supposed to get that? Ludia, please, please, answer me this. How is anybody supposed to get an in Dominus Rex Gen 2? Apart from buying packs that were on offer. And even then, I think if you bought the packs, I don't think you'd have a chance of getting it because you only buy so many. So I would love a statement, written, sent, e-mail. Thank you. Tell you what, give me an in Dominus Rex Gen 2, and I'll say you've done a good job. There you go. Is that much for price? No, but I'm really looking forward to this thing. The picture doesn't look too great, like that's got shading on it. This guy, however, has no shading, but the model I think looks really good. So we're gonna jump into Carnivores. We're gonna find our Allosaurus because we only need to get one and fuse it because I am... Well, we've already got things. That's right, because even though I haven't played that, well actually I haven't played this in weeks. Maybe I'll put footage up. I'm not too sure. If I'm, can I be bothered? Probably not. But if I have, there you go, of stuff I did in Japan. Recorded a video while I was over there. Still got to edit that and put that together. Hopefully it's something you'll find interesting.  I'm gonna do that. I'm gonna do that. And I think you guys will find it quite interesting. The story in itself is very interesting as well, but I'm not gonna tell you anything more. You have to wait and see. 4500 for a corner up there? Yeah, no. What's this? 9000 for that? No. If it's the other way around then yes. 22 for one million coin.  Tell you what, give you a trade of coin for a DNA. Hell yeah, we'll do that. And we can try and start working on our levels for the ranks. So if we go into battle here, there shouldn't be anything in particular. Oh, we got test this? Okay, hold on guys. We've got to do this quickly. We've only got 60 minutes and we can win some DNA. So bear with me. We'll do this. So I've seen a lot of people commenting saying that when's Jurassic World the game come back, when's, of course, it is now. I mean, like, what I love about these episodes, and I'm sorry there is no face cam today. I have not had a shape and I look at the years. Plus the cameras, memory cards, SD cards, aren't sorted out, so I can't even record it that way. But the main reason is, I don't want to scare you with my face. Who's got a great big bushy beard? No, I couldn't grow one if I tried, gotta be honest. No, it's interesting when it comes to YouTube, because it's such a such a new industry, and I'm not talking about the medium of creating content online. I'm talking about the psychological impacts and effects that it has on one's person when they every day upload content on YouTube. There's a pressure to always have the content ready to be there, to just, you know, be there for the channel. Let's say something goes wrong, and you're like, well, I can delete that, I can edit that, maybe I can upload this, I can, you know, put out a statement or something, and I don't know, it's just, it's something that when I was going away, and it's a practice that I've always put onto this channel, is that if I ever go away or I go to do something, I don't, I don't tell people. I don't say, oh, I'm going away in so many days. For my, from my own perspective, and my own quote unquote research, when people have done that, the views drop on the channel. And I think this is a correlation between the audience and the creator. There's not a correlation, a connection, that because you guys know that, or the audience knows that the creator isn't there, then they don't feel a, well, a sense of, I don't know, that interaction being there with said creator, because they're not technically there, whether this is true for everybody, of course it's not, I would be amazing, I'd be amazed if it was, but I think that maybe it's not true, but I think partially it is, to some extent, and I, when I was going away, that's one of the reasons why I never made this big, okay, I'm going away, but I will tell you when I come back, because I'm here, but this was the first holiday that I took, that I didn't have things sort of planned, I had a couple of videos, hopefully Spanish was contained there, it doesn't have got the greatest of attack, was three enough? Oh, just, just, just enough, that was close, yeah, the first time I went away they didn't have content ready, which is kind of daunting, because every time I've went away, for the past four or five years I've been doing this channel, whenever I've went away, I've always had content ready, whether it's every day, every other day, it's, it's always there, but this time, I mean, I was, I've been away, I still feel like I'm recovering from all the trips that I did at GamesCon, and the basking shocks in Scotland, and down in London, all these trips that I was, you know, I was grinding to have content ready for when I was away then, that I've never recovered, so that when I went away to Japan, I just, I, I, whether I was just running low on fuel, because I have been, you know, oh, should we do it? Well, do our code 19, go on, let's get some monolophosaurus DNA, may as well, it might be another five years before we get another hybrid, but hey, if we do this, maybe it'll only be two, so yeah, I didn't really have content ready, I did do one series, which is that Jurassic World Evolution series, that was one thing that I had said that I was gonna do, and I was looking forward to doing it, turned out really fun, but I knew if I only have so much time to dedicate to making content before I go away, I was like, okay, what would my audience really like? Of course, you know, everybody has their, oh, damn, I missed it, everyone has their preferred series, where it's Jurassic World the Game, Jurassic World Live, Power World, because I still see that, I still see it in the comments of the guy, he's like, where's Power World? Stayed, okay, leave it, oh, dear, he's always, give him credit, he's tenacious, same with Dragon Riser Burke, I see that every now and again as well, please come back to Dragon Riser Burke, and the thing is, we cover so many things on this channel, but to an extent, I have to think of the majority, I have to think of what appeals to the most amount of people, because I can't, you know, if I was, ooh, that's right, you're there, haha, done, yes, oh, it's not a tournament creature anymore, oh, VIP, you bugger, Ludia, you deliberately did that, I bought loads of these guys because they were so good, they were all VIP, and now it's not VIP, I think, or is there another one, is there another one that is VIP, let's have a look, because one was promoted, oh no, it's this guy, no, never mind, they didn't change it, no, I was just, it was just something, I was like, oh, I'll put that in, so, oh yes, come on, we've only got ten minutes, we can do it, put that in, let's go, what was I saying, what was I saying, traveling away, content, oh, yes, that's right, and I was thinking, what could people like, what do they want to see, if they could see any series for me, what would they like to see, and I've died, fantastic, we'll just give up that, oh no, okay, fine, we'll do another one, all right, all right, and I thought the aisle, I can always guarantee that people will like the aisle, so I spent, I spent one day just playing, like literally all day, the aisle, and I never uploaded the whole series, yet it is still to come, and I need to check in whether I'm still, like I still have the dinosaur on that server, because that would suck, is this, this seems like a really quick one, did it, it said like four, four, oh sorry, four or six, that's right, I was like, wait, we only got two left, no, it's the whole thing, I was gonna say, is that this alone, that's six, come on, can we get a perfect score, lots of DNA, Papa needs a new pair of endominus rexes, oh we're done it, and the next one will be a thing at the bottom, but we should be able to get it, oh yes, 150 DNA changed, two, 400 that doubled it, and then some, and we'll, you know what, we got time, we got time, oh this one's going to be a trigger on Metro, it's on, oh, you know, if you have higher or rarer level creatures like, no, like this guy in your park, then you have more of a chance of getting more super DNA, because you only get three a day, I think it is, it's a shame that I missed that, whoa, that was lightning fast, and I'm surprised, I got that, I was red for the majority of that, but I think as long as you follow the path to an extent, no, no, no, come on, this is the hardest one, this type, because there's certain presets, and this one's the hardest one, because you get three times the thing at the bottom, so they will find the land here, yep, yep, there it is, there we go, as long as we end it in the green, we get the 10 that we were promised, so, oh, let's go, let's go, come on, come on, come on, all we need to land is three hits, come on, hit me with two, hit me with two, come on, okay, well let's rest the biscuit, let's go for three, boy block for two, that's it, we're done, we're out of here, so, I mean, I hope you guys, and the thing is as well, just like with anything, you know, people have free time of the weekends, that's when people are more active on YouTube and watching content, in general is doing things that they like to do, and I thought that's when I would put the videos up, it was more, more around the weekend time, so, maybe you didn't, you know, you didn't know I was going away, because hopefully you didn't, I may have kept that secret, and there's, thank you for the support on the channel, oh god, seven minutes, and then we get that one, well, we'll wait, seven minutes to do this one, you're joking, look at that, now, well, well, well, it's about time, we've got something we've been waiting for, for a long time, the Bernagamas, and Alasohiber, now, I think I've seen it start to level 40, and it's pretty darn good, so, let's just speed it up, it's only four hours is it, so here it is, and it's another pleading carnival, oh, 989 health, and 445 attack, damn, that's good, so there it is unlocked, at level 45489 health, and 2,466 attack, that definitely puts it in a top 10, if you get it maxed up, so let's have a look, oh, look at you, you blending, I like it, it's nice, it's nice, you know, it has the Bernagamas, Finn that goes around the side, it does, I like its dinosaur face, the sort of, it's more, I've seen people say it's more like an Alasoh looking than the actual Alasoh in the game, and you're probably right, it does have three fingers I suppose, hey, they fixed the Alasoh, like Alasoh, Alogmus is known to prey on large herbivores like Stegasoh, is it, is it now, Ludi, it certainly doesn't look like it would, looks like it'd be very delicate with that sail, and you know what they say, well, you know what I tell you, if you're gonna get a hybrid, make sure to get two of them, because it's probably worth it, and the only problem is we lose one of our better aquatic creatures for yet another freaking carnival, he does, wow, 53,000 on par with Segnus, for about 500 health you get half the attack almost, is it worth it, no, no, no, no, because for 10,000 or 9,000 extra DNA, you get double the attack and 100 extra health, for 10,000 DNA, and Pachygallosaurus, you could argue Pachygallosaurus is worth it, actually out of all of these creatures, it's not worth it, it is not worth it, you look at Ceresinosaurus, you look at those stats, it's got more health, more attack even, why does it cost less, why is Ceresinosaurus cost less, when it's got more health and more attack, okay this needs a balance, this allonogomus needs a balance, it even needs its price reducing to about 40,000 maybe, or Ceresinosaurus is really good for its money, but it does seem like everything adds up except for allonogomus, allonogomus, it even makes less coin if that's something you're even bothered about, so I'm expecting to see, come on Lidia man, you add like one dinosaur in at a certain time, can you not balance it properly, like look at that, who's looking at this, oh look at it, oh that's right, you know why I'm annoyed because I have to bloom and buy it and spend bucks on it, oh god look at that, I've only got 4,000, well there we go, get that to level 20, 140 and oh god no, decline in what interest-based ads, I agreed to disclose my advertising ID of my device to Lidia to receive interest-based advertisement tailored to me, my any data that is shared is to ensure that I receive a quality game experience and it's something I can always withdraw, so ooh no, no I'm declining it, wait what, I said decline, why you get- why you give me- oh there you go okay so apparently I clicked decline and it still gave me an advert, so I'm hoping that they're not going to be stealing my information, oh god, my data, Lidia you know what it is, you do make some good games, but it just seems like you're focused on Jurassic World Live at the moment and you just- it's like you've just got a free- well we can get away with anything with Jurassic World the game right now, it's like ah just put- let's use their data and put in a speed up feature, let's not look at the balance creatures, just keep- I mean come on, anyway I think I'd save me one book and even then didn't get it done, so we're gonna have to spend more and more and see the result, yeah there we go, okay so hopefully this time we'll get some shadow on this dinosaur, uh no, still no shadow, hmm interesting, well let's claim our food rewards eh, through a land-dwelling creature, although a land-dwelling creature, a lot alagamus aquatic instincts often lead it to shoreline hunting grounds, what does it look like evolution 40, oh we just get to see it, it's not grayed out, oh perfect we're gonna see it all it's on it, so at level 40 its fins are a little bit big, it has some fins on its um what do you call it, that is interesting, yeah they've glitched it, well at least they've forgotten about it, dear man, it's got more spikes on its head, it's got fins on its arms, yeah not too bad, not too bad, but at the moment it has how much attack, 1,924 health and 865 attack take, let's maximum take the 2,242 health and 1,143 attack, oh yes, but can I spend thousands of more books on it, I would have to spend another 3,000 books just to get another um two of them, and then I'm gonna have to speed those up, that would make a level 30, but you know what, level 20 with 1,100 attack for another carnivore dinosaur, I don't think we need it, so I'm not going to do that, whoa what the flips this, oh yeah exclusive excavation that's right, do you get a guaranteed, is pro copter, I miss pro copter, I'm so sorry guys, um little cocoa puff, I was away, and I think it was only 4 VIP members, you know what it is, they wait until I take away my VIP membership and then they make it better, but wait what was that exclusive, hold on, was it not in here, it looked like that was a fish right, the exclusive offer, where is it, it's not in here, you saw that right, that was something else on the right, I don't know what that was hold on, let's have a look, it was an aquatic, it looked like a fish, let's have a look, aquatic creatures, no it was none of those, no no no, nope, no, there it was, it was hyneria, that's right, unlock via special events, so we have hyneria, leezicthes, now I don't know if this has been released yet, I don't, I saw this, I saw this when I went, I can say this now because it's basically released, I saw this when I went to visit the studios and oh it looks so good, I'm so glad that leezicthes is coming to the game, it's one of those creatures that was in Drust Apart Builder, I think when Aquatics first came out and it looked so, it was like oh it's so good and I'm so glad it's a legendary, like it's actually going to be used, hyneria as well, so the only way to get it, special offer is to go, can we go to special offer, oh there you go, we can get a level 10 leezicthes, only a hundred quid, only a hundred, come on linear, okay tell you what, you want to make more money, I might have bought it if it was a tenner, I might have bought it if it was a tenner, just so I could get it early, but then it's a hundred quid, I can't do that, I mean is the theory that well you've got 10 times more chance of you know if you put down to a tenner, but if one person pays a hundred quid for it, well there you go, you've got 10 sales at a 10 quid, is that the theory behind it, ooh it's ruthless and money hungry, but we've come to expect that, what about hyneria, that was the one that had a special offer, oh so you can get it in claim your charity, so what is the special 99 quid for this as well, 99 quid, oh dear, I mean what about sucodus, no there's no way to get sucodus, I think that's a tournament creature though, but it looks like we have an event to possibly get it, so we should do that, whoa are you kidding me, what is with that, where is alonamagus, oh god 1000 attack really puts it quite low on the roster, yeah there he is level 20, around about the same as uncle adokus, really it's not because it's you know her before is way more needed, but I would like to see it, but before we do that I've got a surprise for you, how about ooh let's claim those yes yes yes and let's go over to islasona site b, whoosh, because look at all of the precious john ammons we've got, oh they're glorious yes I'm not level 85 but maybe at the end of this, I will be, so this is what I've been doing my spare time, I've been grinding, any cash that's been left over from getting at the raptor squad things I've been doing this, so hopefully we can at least get one level, I don't know about two just because the amount of XP you need these days is so much, come on, come on we got this, we got this, we got this, oh it's so close, it's so close, oh we've lost connection to the server, so we got 20 books, oh we got some flash factor dn and that's good, oh also I did the lottery so let's see what we got, a lot of food who didn't see that coming, full more food who didn't see that coming the final one, even more food who didn't see that coming, good god I mean I probably ended something like that except it was all food, not really worth it is it, all right let's keep on going is it possible to get level 82 because then we can, oh yeah also people have told me that the unlimited battles or the battle stage infinite now you don't unlock specific creatures and people are annoyed about that, it just seems to be packs that you get so you don't, I mean to be fair it's probably better that you win packs than just a specific creature because then you know you're winning dna and you can use that dna to purchase that creature unless you need to be a certain level to unlock that I'm not too sure, oh it was close I didn't think we would get it but level 81 is close, a little bit of more super dna was there anything that I was, oh yeah I was wanting to collect coins, I may as well collect coins woohoo, 94 million, what's my mission, place a newly hatched pterosaur and that's it how much do I get for that mission, 6,000, sorry 66,000 I don't even know how much I get for a, you know what should we do that, let's get a little anchor, um can we speed up 10 minutes, we may, let's watch an advert, oh here we go, Masrani's gonna be so happy, oh no, oh damn it, sell more, sell more, sell them all, come on, okay collect it and place it, we got this, we got this place, there we go Masrani's so happy with, Masrani's taking some time to test out the new corporate airship, you know, from beyond the grave, so how much dna, oh I'm not gonna see how much xp that got me, she handles like a dream, it's like flying a cloud, that's it, oh we get, oh it really isn't anything at this point, great come back, don't touch nothing if you don't know what it is, how am I supposed to know when the thieves are gonna be this because you're gross like a pig before, don't argue with me, just listen to what I'm doing, maybe if you blah blah buy and place three tarpets, that's it, oh hold on, this is gonna be really easy, hold on guys, let me just uh, let me just place tarpit, um I'm assuming it's a decoration, tarpets, look at all those trophies we've got, oh and the booster legacy, oh I never placed it, or at least I maybe I did, tarpit, tarpit, tarpit, where are you Mr. Derpett, it's the mammoth right, if I remember right it's the mammoth, yep there it is, there's one, the good thing is now we can easily go into the market, put it down like that and there we go, and there's one, there's two, and there you have it, so that's 30 bucks may as well, what was that sound, get inside the plane, I'm all worried about what's outside with this, flight path episode 30, oh my god I haven't done this in so long, I forgot all about this, are you sure that Owen said Ingen, that's the only part of the call that came in loud and clear, the rest was garbled, but that doesn't make any sense, there shouldn't be anything left from Ingen's installations, maybe we didn't dig deep enough, I'll see if I can find the specs from the old park, buy and place five new buildings and collect three million coins for, oh my god there it is there's another one, I can do one easy but the collect three million coins from buildings is a little bit hard, you have to place a lot of buildings, I mean a lot of buildings, quite close to things, I guess something, well I'm going to sell all those, I'm going to sell all them, replant them, but here we go, let's do the Baal stage infinite, and in its infinite glory we can actually, let's choose carnivores, because that should put the aloe thing a lot closer, there it is beauty, and then let's just go to regular Jurassic, fly down a little bit, go for that and then go for that, that should be it, and here we are, yes, oh it looks cool, okay let's slow down the animations, we can kill it in one hit, but hopefully we don't die in two hits, bam, we're gonna die in two hits, oh we're dead in two hits, okay well we're gonna see it die, so that's good, no, bam, there you have it, we saw it, and that's 2600, so we're gonna have to go for two reserves, we're gonna speed up now, it's probably gonna switch in the Apatosaurus, oh he has one attack though I think, doesn't even go for it, so we'll switch into Carnaraptor, and we'll go for four reserves here, oh there you go, well he's gonna switch out again, so he's already wasted two turns, three, oh we can kill me in two though, oh I was hoping he wasn't gonna do it, so he's got, he's got three, we have seven, so one, two, well and then one, two, three, and then one reserve, oh well there you go, I think Apatosaurus still has to go for like three to four hits, I think, probably, probably three, I would assume because it's more like 800 attack it's got, oh no it had to go for four, ooh I probably just survived, although saying that I did have one reserve that's probably why it went for the one extra, so there, oh it's three enough, oh well it didn't even matter because I only had 265 health, I mean attack, so four hits wouldn't have killed me, so 160 DNA plus 6000 DNA, and we get to do the next one which is a Zalmoxie, so what do we have, 7000 DNA, Balsage 82, 7000 DNA, ample DNA pack, and then finally we get a free Aganthostega, so let's do the Zalmoxies, ooh it's a lot of carnivores, something like, should I just have my own carnivores, I'd rather just go for my own carnivores, whoa, Indominus Rex, yeah let's go for one hit, that'll do it, we're against Cerysinosaurus is it, Cerysinosaurus at level 10, really it's nothing to worry about pet, two, you can't kill me, you can't kill me, you have no power, bam, ah who remembers the glory days when Indominus Rex just came out, oh I do, oh I remember those, oh I'm such a little weed whipper snapper, oh Soprana Titan, might as well just go all our way, 1000, 2000, 3000, oh just kill them, that was a lot, 4800, I mean if you add them all up the bonus is so much, so it's another 160, plus you own one Zalmoxies, woohoo, did I just, oh no I've got two now, fantastic, look at that, look at the disgrace that was the bloomin' DNA building, I can't, I can't pay for it, I can't pay for VIP now, because I've lost all of that progress, and Ludia if you're watching, tell you what, I will join VIP back if it's free, okay, I'll do that, so what do we get, is there anything added extra to this, solid gold packs, apart from Panthakus, is there anything there I need, apart from, yeah Panthakus and the Thalakus Milis, that one, and then maybe, I mean I can still do that one, but even for VIP, together woohoo source, it's something like 50,000, so it's really not worth it, the reason why, they don't show you how much that pack costs, is because you would go no, even if I had VIP I wouldn't pay it, 50,000, it's too much, so even if I did have VIP, Procopterdon, it's kind of not worth it, oh wait we got another one, how much is it to get thingy back, 12 hours which is, oh hundred and seventy nine, go on I'll do it once, I'll do it once, I won't use this, actually should I use them, I think I can use them, why is that earlofosaurus in there, it's got no health, I guess it's because the attack is similar to earyops, we'll go for a flyer, I'll put you in first, then do that, switch you out, then do Jurassic, and we'll find a flyer that can probably kill it in one hit, maybe pterodactylus, I don't really want to use him though, he's really good and to waste him on this, but there you go, right pterodactylus, oh we can't kill it, maybe you'll switch into the pelicomimus thing, oh he does, oh yeah no wonder, it's a big attack advantage, right let's go for reserves here, it's gone for some reserves, three, I'm gonna put in spider raptor, I'm gonna put in spider raptor because I'm expecting him to die, so one two and then one extra, yep and there it is, you've always played safe, always put, I usually put two extra in, but I didn't have too many reserves there, so I thought one would be enough, so one two three, he's gonna have to go for four to kill me, yep there it is, right come on there it is, oh god it's bioluminescent, all right we're gonna switch into you, I think it might have won, so we'll go for that, we'll go for one extra, aha he did, whoo bush, a lot for sorus now, can't, oh could he kill me in four, I don't think so, it'd be very close though, so let's go for four reserves and one block, see what it does, come on, kill me, kill me, go for six, I want to see, I mean we already know what his animation's gonna be like, solid we're gonna switch him in, we're gonna switch him in whoop, and then how much damage can we do, so I can do 17,000, probably 20,000 if I had my eight, or did two block, look at it, look how it isn't fixed, I don't know how to do, I mean it's been easy to add something into the game, how do you mess it up like that, no shadow, no silhouette to see it's level 40, and its DNA is absolutely broken, so there you go, we've only got one, two, three, four left, if we do this one, oh god that's so tough though, whoa this one's even tougher, ah which one, micro s DNA, we've got to do that one because you just get way better rewards, so here's how we're gonna play it, we've got a level 10 Indoraptor to force in the Nundegasaurus, and then we will pick up the Nundegasaurus with a I think I lost my pterodactylis, and it's got 12,000, oh we need Metrophodon, and then to finish off we need something baller, something like, in fact actually you know I'm just gonna put in two Indoraptors level 20, that's what we need, we need the Indoraptors in the house to kill the stick, because these are really tough opponents, I mean like you can't get these, a freaking level 248 rare pucky Ceratops, jesus, alright okay, oh my god, a 4000 attack, it's insane, but it's good because now they have to, even if they kill my Indoraptor, they're gonna have to switch out Ceratosaurus to get that advantage, and there it is, whoa, walloped, okay okay Metrophodon, you can do this, I believe in you, you only got three battles to do, so one two it's dead, factor in one just in case, and that's it, move one, whoosh, oh you can kill me in two hits, did you have five, you only has three, so we might not even risk it, oh the swap, still has to kill me in two hits, oh only goes for one, he's only got one block, you fool, come in Indoraptor, show him, kill him, why, and one extra and there you go, done and done, so even, I mean the opponents we're facing, apart from the Ceratosaurus were super tough, 12,000 health, jesus, what's, I mean what is the most amount of health a dinosaur can have, like that you can get, 12,000, that's ridiculous, anyway there we go, kills him, oh I didn't even click anything, I just didn't want to show me his death, it was too brutal, too gruesome, two more balls, okay, I'm a Jungasaurus level 2459, can it be stopped, oh the humanity, well um, there's nothing I can be killed in one hit by anything, not even Metrophodon could kill him in one hit, okay, okay, okay, let me think, we need to know the Metrophodon really, the Gorgosuchus and their Metrophodon, Eudon, right okay, I will go for one reserve, then they will switch in their Gorgosuchus, um, I will, I could just use Eudon just to get loads of reserves off, and then if I do that, um, he's, my Jungasaurus is still gonna come in second, so if I put Secondosaurus in there, it doesn't, I mean he can kill it, but then my Jungasaurus is gonna have a huge advantage and kill me in one hit, um, ah, oh it's tough, oh it's really tough, I think that's the best I'm gonna do, um, I mean really you want flyers, but this game just doesn't have any good flyers, just Metrophodon, but Metrophodon costs so bloody much, I think I need to invest in another Metrophodon, I think that's what I need to do, so I'm gonna go for one reserve here, I'm expecting him to switch, now look at this, he could do over 7000 damage in one hit, the Gorgosuchus however couldn't do 7000 damage in one hit, oh my god, oh he might kill me if he goes for it, oh, he's got one block, he's got one freaking block, okay, oh no, oh no, no, no you fool, stop, well that's okay, that's okay, that's okay, he might, he might do it, he might go for it all out of time, yes, okay I meant to do that, I meant to do that, I lured him into that, all right, so I need to go for one hit here, so I go for one, one, two and then three reserves, now the reason why I'm going for two block is because he's going to switch a Metrophodon, a Metrophodon can kill me in two hits, so I need that, there it is, whoa, it's blooming close like, oh he does go for one, okay, now I think that was three, oh it was four, right, so it was an Aesaurus, and switch you in, you're going to go for four here, two will kill it, factor in two, just in case because I haven't been paying attention, and there we go, wallop, and three thousand four, there's really not much attack with the advantage is it, one, two, you probably go for five to kill me I think, yep, there it is, and we've done it, what a win, and we'll just go all out shall we, because he has nothing I don't think, and 28,000, I think it was, was it 2800, either way he's dead, right, and the final one, okay what we got, ooh we got Metrophodon level 26, and it looks like it wants me to go for a second of sutures, and you know what, I'm more than happy to oblige, I'm gonna go for that, sorry this team, there we go, we've secured the victory here, there's no way we could lose, level 700 Suprasaurus and over 600 Quetzal, nah, don't stand a chance, oh amazingly switched that actually, again one hit, but he just wants the type advantage I suppose, or at least a neutral type, two, I want to use my power-ups, can I just not use my power-ups on regular battles, like the mods, that would be so much better, let me use the mods, I mean that's what's good about them, is that, oh maybe I can't do this battle, but with mods I can, if you just have mods exclusively to only other mod battles then it sucks, because then it's like this battle here, these are way overpowered and I'm facing them with my best creatures, and with mods it's like oh well I can use my mods, but they've got really good mods as well, so it's just, it's both are hard battles, I would love, and I've said it before, and this is it within 40 minutes of the video so I'm expecting them not to hear it, but if you do please put it in, mods for regular battles, it just makes it so much, it makes it fun, and that's what you want to do with the game, you want to make it fun, and sure there are people probably working on this game that want to do that, maybe the higher-ups don't let them do that, so I sympathize with you greatly, all right okay, one hit isn't enough, we need to go for two, and then sod it, I'm just gonna go for four reserves, I'm gonna, I'm going all the marbles, all the marbles, can he kill me with four, he can, is he gonna do it, no, oh he does it, good job interrupter has eight, he gets to do his little shark fin impression, it's an interesting camera angle, ready for it, ready, shark fin, and there you have it, we have one micro s DNA, oh lots of you, I'm 40, um Sarkasukas DNA, that's great, I think I needed 770 I think in order to get, am I close to getting any of them, how much do I need for this guy, I don't even Sarkasukas, oh come on, 1,700 for Caprisuchus, do I have it, let's have a look, Caprisuchus, I've gotta be close, Caprisuchus, Caprisuchus level 10, go to hybrid, oh wait what, wait what do I need, hold on, hold on, I can just go in here and go on to super hybrids, right, Spinosasuchus, right it is that guy, okay so it's Spino Raptor, there you are, let's go to you Fuse, I need 2,000, ah damn it, well anyway guys there you have it, oh let's claim, claim the rewards, oh we didn't, we didn't get one for that, oh I get, well I guess you get super DNA, but there you go, it is not dead, we are back and I will be continuously playing this until I die, so if you enjoyed this video leave a like and until next time, I'll see you later, oh bye-bye