Hi there and welcome to the Free Art Show, the show where I draw whatever you want and release it for free use. I'm Kim Holm and with me is my giggling wife, Beanie, and first but not least, we have a bit of a situation with the postcards because I thought it was a great idea to have a contest to drive more people to YouTube by saying, hey, you can win this postcard by commenting and subscribing on YouTube. And then I thought, wait a minute, that's a bit shitty. So we're going to stop doing that and we're going to start giving away postcards based on who has the best request for me to draw. We will choose six different requests they need to be good. Then we'll roll the dice and whoever wins gets his request drawn, also gets his postcard. That's a much cooler idea, but that means we have to give away two postcards this week. So, yes, otherwise it doesn't add up. Oh, but I thought the postcard, this postcard would be given away next week to the next week. No, no, no, no, we need to get it. We need to get this straight. So in order to get this straight, we give away two postcards. First, we gave away last week's postcard to one of our two YouTube commenters, Gunn and Popovici. And Gunn is heads. What's heads on this coin? This is head. Head. The head. The head is head. Gunn is King Harald and Tails, the Viking ship, is Popovici. So let me see if I can do this. And the winner is, can you see? It's Popovici. Congratulations. Congratulations. So you will get this postcard and then the freshly drawn postcard we will have to decide which of the this week's suggestions. And we got over 20 suggestions this week as well. So Kim had to pick some of the ones, yes, but mainly you had to pick the ones that are drawable and fun. Drawable and fun. So we got a bit of different types of suggestions.  I don't think it's a butt pill. I think it's a spoon. I think it's a sort of a joke because Tyr loses his hand when he has put it in the mouth of Fenris when they tie him down before Ragnarok because it gets too big and mean. Okay, I see the joke. There is a joke there. Yes, yes. But it's a bit difficult to draw the deworming cure, the deworming drink. Isn't it just a spoonful of sugar? Yeah, but how do you see that it's deworming? That's the problem we have to face.  This is so logic. Okay, then how do we get, you know, this is a discussion we'll take if number one if the dragon shows. Then we have Jimmy suggesting me eating my own entrails. That's self-explanatory. It's a good image. And Jimmy is an old friend of the show, so we even know how he looks. And Demetis suggested my own take on Erlaya. And yeah, I've done Erlaya many times in some form, but why not do it again? And then we have T.P.Sko, T.E.P.Sko, suggesting the very last mammoth staring out. Jimmy Cowell says, yeah, he really wants to see himself eating himself. But this is a very sad image of the last mammoth. Died away 2000 BC, something like that. On an island, which was, this was a part of the suggestion, but we didn't write it up. But yeah, I can see it. Then we have Mus Bogdan suggesting a samurai honing his own mental blade while meditating. Yes, that can be nice. And additionally he says, if I draw it, he will get a tattoo of it. And that is... So I will draw it really crappy. No, you won't. You don't have to get a tattoo.  Wave that. That wasn't a wave. All right. And Udorable suggests Gere and Freke with Hugen and Munin. And actually, Muna also suggested Gere and Freke and Hugen and Munin. So it was double suggestion, but Udorable got it because she got it first. Okay, so are we ready to roll the dice? Those are them all. Now blow on the dice. Now it's her fault. Erlaya. We're going to draw Erlaya. So geeky. It is geeky. We are geeky. And we'll, we'll, we'll, I, this is one of the ones that are exciting. Just go with it. Figure it out. We'll start like this. That doesn't look like Erlaya. Come on. Oh, that's better. Where is Erlaya here? Yes, I can see it. Oh, no, that wasn't, yeah, like this. Okay, so now we have some towers and spires. And we have this, this. Okay, I'm done. Can't get better than this. Do you have to roll the dice again then? I'm not done. I will dry this up. Now we have the basic shape of Erlaya. And I think I'm going to need some acrylic color. But first, oh yes, I'll need acrylic color and I'll need it first. Not last. We'll take some Viridian. That sounds ocean-y. And we'll take some liquid blue, tail blue, so that's really a heavy blue. And we'll take some. Tonight XPC says hi. Love your art. Greetings from Chile. Greetings to Chile. We're, 50% of us in the room are Chilean. The 50%, that's not me. Yes, that's me. Oh, we're mixing up, hopefully, a nice color. I'm sorry. That was a bit darker than I had hoped. But we'll find the towers again. Okay. The towers are there. They're just hidden. Somewhere, not over the rainbow, is, are they? Are they? You know, under the ocean, somewhere under the ocean, the abyss is blue or black.  So, see you on DB Kitchener. Thank you. Kim Ross, that's his name. Yes. I actually, this fall, I started learning the Bob Ross technique just because I love learning techniques. I'm not going to be a Bob Ross painter, but I wanted to learn the technique. I can sort of see the towers here. I can remember them. I can see them in my mind's eye. That's the joy of painting.  I admit it. So, let's see. Here we get them back. Yes, lovely. So, I started learning the Bob Ross technique, but I only did one painting. But now, in my artist's studio, it's an art collective, so we have a lot of different artists. And one of them is primarily working in woodworking. Working in woodworking. So, he used to have a window by his workbench. And it wasn't a window with a good view. It was a window to another rule, but it was a view. And now he lost his view because we remodeled.  So, that's one of my next hobby projects. Just to learn the technique. It's good to have a reason to learn techniques. Well, now we have the towers back, but we need more. We will get some towers in blue as well. Now, if you're going to look at Lovecraft's descriptions of a lion, I will share it somewhere. It will probably not be a part of my free art project where I I share the rights to my work so everyone can use my work for free, commercially or personally, because I root for the pirates. It will not be a part of that, because I don't know. That feels weird. But I will share pictures at least on my Instagram. Maybe I'll do a Bob Ross with video. I'm starting to get the plan now. And I'm hoping this one will be hoping to do it a bit rougher than most of my acrylic pieces. I lost the brush. See on rope? I don't know what it wrote. Did it disappear? No. I think it's an emoji. Mmm. That is devil horns. Oh, nice. Thank you. I thought maybe it was somebody cheering, but then I didn't understand why his head wasn't there. Haven't you seen the devil horns emoji before? A moticon? Apparently not. It's so metal.   So far. I don't know if that's positive or negative. I don't know. But right now I'm still flailing about not quite knowing what I'm doing. And I wonder if a Chilean friend wants to know what kind of paint you use. Yeah. Right now I'm using acrylic painting. So I'm using a mixture of these really good golden high flow acrylics and golden fluid acrylics, which are expensive. And then I'm also mixing them with these shitty, uh, it's not a thrift store, but it's a cheap brand, sang acrylics, regular acrylics. So it's a good mix. And there's nothing wrong in using cheap color. It's good to sort of losing my brush again and again. That's not good. It's, um, it's good. You have to tape it on your fingers. Yeah. It's good to test out new colors and stuff. But what you get with cheap paint is you get a lot of medium and very little actual color. So, so that's the difference. The expensive paint has a lot of color, a lot of pigment. So you only have to use a teeny bit? Yeah. But still, um, when I buy this set of 18 or 30 cheap colors, I get a lot of variety to test around with.  But, um, when I buy expensive colors, I'd better know what I'm going to do with them. Yes, but these are really expensive. These? Yeah, these are really expensive. This is one of the... How much are they for a bottle? A bottle like this is 200. That's not very expensive. No, but I'm guessing you can find more expensive. Acrylic? Probably, yeah, but not that much. No, they're a really good brand. Or so people who know this tell me. I'm pretty new to acrylic, really new to... And the cheap thing is... Let's go. The cheap... So this is 200 corner for this bottle, and this is for 18 or 20 for something of these. It's under 200 corners. Yes, but they're tiny. Yes. Interesting. But it's basically the more pigment, pigment costs. And also the any good brand of acrylic or oil, the prices will differ so that a titanium white will be a lot less expensive than a let's say a Taylor blue or a cadmium red. And also the most expensive are you even get poison. Poison. This is some of them are poisons. Not that poisons. Because the good colors are heavy chemicals. So do you know what Urlaya is, my dear wife? It's a city under the sea. And who... It's where the little mermaid lives. Yes, who lives in Urlaya? I just answered that. Not the little mermaid. It's the guy with all the tentacles. Yes, it's the guy with all the tentacles. Kutulu, that's the guy. Kutulu is the guy who lives in Urlaya. That's correct. Very good. Poison. Lollis is my Australian friend tonight. And Jimmy Tolle says silently, I presume. No, cadmium is... It's not that... It's not a poison, but it's toxic. So it's not poison. Yeah, and there's also these debates in the oil painting communities. Because now all you buy is titanium white or zinc white. And while lead white, which is based on lead, is apparently a lot more durable. So... But people don't want to paint with lead anymore. And one of the reasons why the colors of old Renaissance paintings are still so good is because they were apparently painted with lead. Jimmy says, I figure. Because there used to be signage in the blue paint. People used to paint at kitchens, like in the olden days. That might be... I haven't heard about cyanide in... That seems like a silly thing to do. But it stays in the paint. Does it? Yes, it does. Probably. But then we're talking about lead paint that houses used to have. But they were poisonous as well because... Okay. Slowly giving people cancer and stuff. Yeah. Cancer? Man, sir. I don't want to... I do not want to paint with dangerous paints because I always end up eating my brush. This is an awkward silence while my dear lovely wife is staring at me. And shaking my head because... Come on! No, it's actually a thing. But it explains all the painting spirit from time to time. So yes. It's actually a thing that a lot of ink artists do in order to get a good point on the brush you use your spit. Um, but oil... I don't know, just water around your fingers. No, but there are things in your spit that makes that point better. Then put spit on your fingers. That would also be an idea, but we're not all smart like you. It's an age-old tradition. Yes, artists. That explains so much. Keeping really rough. It still looks like nothing. I'm sorry. And I've seen... Z answers. DNA makes the painting better. Yes. If somebody is thinking about identity theft, most of my paintings have both my DNA and my fingerprints. And some of them even have my likeness. So it's...  So mostly I use water to dilute the acrylic and you can use... On good acrylic you can use about up to a lot of water, more than 50% water. Without a problem. On bad acrylics you should use a bit less. But if you're smart you will varnish or put some other type of coating on the drawing afterwards. And then you don't have to worry about flaking or other stuff. That might happen when you diluted too much with water. You can also use a retarder. And I can say retarder because it says retarder. It's okay. Which makes the drying time for the acrylic slightly longer. And I've experimented with that and that's good if you're, for instance, painting outside and you don't want the hassle of mixing new colors all the time. And then that's good because it gives you a little more leeway when... It's turning up beautifully. Thank you. See, Jan says. And tonight says, sorry to change the DNA subject. And Mona says, oh I see the castle from inside a grotto. Yeah, it's something like that. It's a city under the sea. And it's a cyclopean city. Okay, I have Little Mermaid's song going around in my head and then I only know the one. There are some Cthulhu Little Mermaid made mashups, of course. Otherwise I would lose faith in humanity. Is actually Ursula Cthulhu Little Mermaid mashup in all her tentatilness? Perhaps. I don't think Lovecraft can take credit for everything tentacled. But a lot of it, yeah. Yeah, but well. Okay, Mona says, city autocorrect. I see the castle from inside a city, maybe. Or I see the city from inside a grotto. I don't know. Which word was autocorrected, Mona? I see the castle from city a grotto. I'm going for that. Yeah, city a grotto. City a grotto indeed. It's a... The thing is, the problem with... The blue paint looks like a baby seal. That one, yeah, I see it. The problem with drawing Erlia is that the description of it is that it's cyclopean and that it's full of angles that do not add up. So, it's angles that are impossible. It's full of optical illusions or actually bending space and probabilist time. So you can't actually draw it, but you can give a hint, I think. And that's what we have to do here. So, we have to find some angles and just enhance some of them like this. We're just going around, trying to find shapes that are already there, but need to... But city not castle, says Mona Nygo. City in a grotto, perhaps, yeah. I see the city from inside a grotto. Yeah. Thank you, Mona. Try to give a lot of small windows here and there and openings. And... Is there a castle in there as well? There probably is. Some were in one of the Lovecraft stories that refers to Cthulhu as the High Priest of Erlia. So there should be a sort of a temple or that type of stuff. But the thing with the Lovecraft deities or entities is that it's not really clear what's factual about what Lovecraft characters write about them and what is just human misunderstanding of cosmic forces. So the whole High Priest thing may be just a misunderstanding. It's not necessarily true that the Star Spawn, as they are referred to once in a while, would have anything that we think of as a religion, but they would have some sort of technological, magical relationships to cosmic forces such as Asatoth and Yogsototh and Nirlathletap even. So there is sort of connections that we will interpret as religious, but that's the question. Is Cthulhu even religious? Is he an atheist?  Now the thing I'm saying is that... Are there people who actually view this as an actual religion? Yes, there are. There are at least two different... Are they called cultists? Yes. Or are they called cultists? There are at least two different schools of... Two different organized attempts of making religions out of Lovecraft's writings. Why? Well, I know that one claim is that Lovecraft thought he was writing fiction, but being inspired by his dreams, it was actually the elder forces talking through him. I do like that. I do enjoy that. And I think that one of the most influential happenings in getting Lovecraft into the realm of new religion is the Church of Satan, where in Anton Lavais' Satanic Bible they only view Satan as a metaphor. So in order to illustrate it, in one chapter they exchange Satan for Cthulhu. So they have a ritual for Cthulhu in the Satanic Bible. Why? Because it's a metaphor. So that's one of the thoughts. The Church of Satan isn't a religion, it's a set of rituals and a philosophy. So that might be one way to view it. And the other is that these are real forces that Lovecraft thought he was making up. That's another way. Slightly silly. No, don't be silly. Billy, whatever you want. And also it's the chaos magic idea. In chaos magic you can worship whatever you want, because it's all part of chaos. And Cthulhu and the like are manifestations of chaos. So it's very easy to see why it would work in that setting. Don't you see? My dear lovely wife thinks I'm talking about the most boring thing in the world. Yes, I wasn't paying attention. I'm sorry. It is not very fascinating, no. I know you think so. There are some fascinating ideas in Lovecraft's work. And it's not the worst thing that a modern religion has been based on, to say it like that. It's not a worst thing an old religion has been based on either. And I think that Lovecraft, who was very much anti-religious, would find some of this rather amusing. I'm not quite certain where I'm going with if I can make the effect that I want now. It's hard, because you don't want to put too much in, because then everything is obvious. And then it's obvious that it's not so as detailed. And you don't want to put too little in, because then it's just messy. It's a sunken city, so it's in ruins as well. We've got some ruins here. And that's good. That creates depth. That's good. We need that. And of course, as some of you probably know, that attempts at making a religion out of Lovecraft even includes writing the Necronomicon, the fictitious book that Lovecraft mentioned, and publishing it as if real, which has happened many times, or at least a few times. Is that the book from The Evil Dead? That is the book from The Evil Dead. Now, in Lovecraft, it doesn't mention Clowter Verata Niktu. It doesn't mention that it's bound in human skin. And just as a sort of bummer for all those who thought it was real, the author of the Necronomicon is Abdul al-Hasred. Now, Abdul is not a name, because Abdullah is a name. Abdullah, the servant of Allah, Abdullah. Abdul is not a name, but Abdul al-Hasred was a nickname for Lovecraft when he was a kid, given to him by an uncle, because he had read all the books, including A Thousand and One Nights. He was Abdul al-Hasred. And yeah, that's why... This, I have to live with this. I have to live with this. You're talking to people watching me draw. I feel generally certain that they appreciate my geekiness. No, I actually like that story. Yes, it is good. Tonight says Necronomicon part, and then she says, wow. Yes, you know I enjoy some geekiness. Yes, you enjoy me. This is a deeply problematic image. Try to capture it here. I feel a lot is going right, but I don't know if I can... Tonight says geeking out about Lovecraft is always a good thing. Oh, indeed. One day I might read my first Lovecraft book, but probably not. Well, you're going to have a problem reading your first Lovecraft book. Novel, dingy. No novels. One novel, actually. And it's a short novel. Why would I... It's short stories. That's all of them. All of them short stories. Okay, so he could be bothered to write a proper book. He wrote two books and tried to throw them away, but they are published now. But yeah, it was short stories. Okay, I think we're going to go in with white ink and a bit of the bluish. It's going to pick up some of the bluish, no matter what. But this is a very green color. We'll see how that works. Some light. Just create a bit of space between the shapes. And to tone it down, do that with water. And it will settle in and will be a lot less extreme. Again, just following the shapes that are already there, caring too much about what it actually is. See. See the... I don't know if you can see it on the live stream, but it's... It creates that instantly. Very satisfied. And this should probably be in front as well. And what I imagine this actually as being is sort of a city in the hydrophermal vents, but there should be some bubbles going up. But I don't really want to do that too clearly because... Or it can... The foreground, it can happen. Because if I do bubbles back here, then it will make the city look tiny. And that's not what we want. That's the sort of considerations you have to make pretty much on the fly when doing something like this. But I hope that you guys at home can appreciate how much depth these tiny touches of green turkeys turquoise turquoise turquoise turquoise turquoise turquoise are giving the image. We're going to mix them up with more white and more green. And we're going to... Oh, too much. Too much, too much out of the light in the foreground as well. Yes, it looks very gloomy now, so see on. Gloomy in... Yeah, it should be a gloomy city. It's not exactly Las Vegas. Oh. Or maybe it was. It's a city of poor, unfortunate souls. So who? You said... The little girl made. That's Ursula City. She collects poor, unfortunate souls. Oh, all right. The Little Mermaid has always been one of the Disney movies that I don't get. I'm sure that's prejudice just from the time it came out. But I know it's considered as a part of the Disney renaissance, but it's not up there. I do like most of the other films of the Disney renaissance. I like it. I enjoy it. The Little Mermaid made? Yes. Yeah, it's got... I'm actually not... I haven't seen it in many years. I remember we tried to watch Peter Pan. Yeah? It was kind of racist. The Peter Pan... No, it's got the Indian scene. It's not a very fortunate depiction of Indians. It's a good movie. And today we saw Mulan with the kids, which got the incredibly racist depictions of the Huns who are also completely badass. So on the one hand, they are walking gorilla beasts.  So if you are... They all really look evil. Oh yes. And you have to do stuff like that. You can't have an occasional bad guy looking like a good guy. Frozen does it well. A lot of other movies do it well. You have to have the stereotypical, really evil looking people. And you have those of all varieties. They're never blonde. Yes, they are. Yeah. Huns, no.  And you've got the very evil Uber Aryan. That's definitely a stereotype. It definitely works. And living in Norway, being from Norway, I've met a few people who are so pale that it's creepy. It's a good look for being creepy. Yes, in the wintertime some of you are see-through. Yes, it's very good. You're actually blue. Yes. I don't know how much more I'm going to do with this, because if I do more, then I will probably start losing some of the mystery that is there. I will do some spatter, because I am me. And first we're going to do very high above, just to get a few some dust in the water. And then we're going back with some black. And you probably, you can see this on the YouTube video, but you probably cannot see this on the live stream, but the little dots are making a difference. A slight difference, but a difference indeed. It gets impressions of figures in the foreground, it's a seon. Excellent. What's thinking, maybe you should try it when you're finished. Try to, can you lower the camera slowly? So you can actually zoom in on the picture. No, we can try. Are you finished? Yeah, I think I'm finished, I need to sign. You know there's a white dot all the way down there. There? Yes. Yeah, yeah, that's okay. It's supposed to be there. It's supposed to be there. Or white instead. There, there, it's okay. This is the foreground. Okay, this is tricky. Things might fall apart, things might not work, but I'll try to lower the camera. Advanced zooming. Yeah, this doesn't work. No, it doesn't work. This is shaky. Yeah, and it also gets out of focus. Okay. It is work-ish. Work-ish. It worked for one of the cameras, not for the YouTube one, but for the other one. What didn't it work for the YouTube camera? Because then that doesn't see the whole image anymore.  This was an experiment. So you're going to have to lift it up. Yeah, that would be smarter. But the other one would have been more professional-ish. Yeah, again that doesn't work for the YouTube. We're so sorry about that. Um, how long have we been going? I don't know. Do you have any energy? Do you, should we do- I have no idea what time it is. Meme neither. Should we try to do the samurai one as well? What time it is? I do not know. It's 10 o'clock. I think we've been going long enough time. I did want to do the samurai one because I did want someone to get it tattooed on themselves. But yes, we've been going long enough. Maybe you can do it as warm up some other time. Yeah. Mora Nigos says she loves it. And tonight, Telsus, we've been on about one hour. Thank you. That seems about right. That seems about right. And yeah, my head is a bit fried. If I were to try to draw the samurai thing now, it would probably look something like this. See, Telsus, that's amazing. Thank you. Here is the samurai. Now he's got the samurai here. Why is he so sad? Because I'm tired. So that's why I'm not drawing that now. But generally, if- and now he asks you to get this tattooed. Generally, if you're going to use the drawing for something, it gets you a lot better chance at getting it. How about this? I want to draw the samurai for him so he can tattoo it on himself. So maybe we'll put it on next week as well and let the dice decide. Oh, yeah. That's reasonable. And some weeks we might do two drawings, but then we have to be a bit more awake. He really wants someone to put his ink on themselves. Someone has. I know. You want more. Yeah, I want more. Okay, if you enjoyed watching our show. Take away the sad samurai please. If you enjoyed watching our show, then please share it. And I will be posting this art in a couple of days for free use under a creative comments attribution license so you can use it for whatever you want as long as you put my name on it or with it and please use it and share it if you're part of a Lovecraft group or if you have friends who like Lovecraft or if you have friends that like art. Share it. That helps us. And also go to YouTube and subscribe. We will give you all the links in the end. Now, if you like it even more, then you can buy this original for a hundred euro including international shipping till next week or till next weekend. So, by the time the next free art show is live, this one is either sold or off the market. Last week's sketch was depression and it got sold. So that's excellent.  If you want to follow me, then I'm den unge her Holm on Facebook, den unge her Holm on Twitter, den unge her Holm on Instagram, den unge her Holm on YouTube. And if you want to support me even more, then I have a dead, no sleeping but not dead, dead but streaming a little bit dormant Patreon campaign that will be up shortly at patreon.com slash Kim Holm. And I think that's everything we have for today. Thank you for watching. Hope you enjoyed today's show. Bye.


I'm sitting back here drinking a bit except for me Got rogue out the rock purging him rock. They want to go meet big time Get sheet maybe see me Major block major block She's gonna get sheep. I use death. I use death for sheep. You'll see these your city is breaking breaking Gonna heal now you know blind me drinking Big hill that he's gonna keep getting me. I need peel if you can nice sheep. Nice sheep. So good sheep


Cool. All right. It's six o'clock. Let's rock and roll got a seven of our best friends here and So, yeah, hey everyone good to see everyone again. It's a Wednesday March 3rd that we're recording this One of the so I'm gonna first talk about assignment three. So hopefully you all have Forgiving each other from maybe past transgressions Maybe potential scam some enterprising student tried to message me on discord and try to get me to sign their key. It did not work because I did not have a key for them to sign. So I thought that was pretty funny. It was a good try. So yeah, the will be grading assignment three probably in the next week or so we need to wait for all every one of the keys to get in. But yeah, hopefully you got a little bit of a, you know, if you developed a little bit of paranoia about who people are and thought about ways to scam people and to prevent yourselves from getting scammed. And I think a really interesting thing. And usually what we do is will Talk about I'll try to ask some of the people that have that did really well on the assignment. To try to get them to tell us their techniques because it's probably things that you hadn't even thought of I had a couple semesters ago the students Created their own certificate authority. So they had two of them that control the Google doc that had real names of people that they verified and they each would check their IDs. But one person super enterprising person got hacked their way onto the list. I think just like social engineered them basically and pretended to be their adversarial key and they got 20 or 30 adversarial keys signatures from everyone that was on that list. So usually and I don't know it for this class yet, but usually there's a long like Powered like a long tail power distribution of scamming where there's a few really good scammers and the rest of them are really tapers off so And it's usually not that one person gets scams a lot either usually the scans are pretty even but We'll we'll see that. So yeah, anyways, okay, so that's assignment three. That'll be done. I hope that was a little fun change of pace. Now, of course, the second topic that you are Concerned about is the midterm right so the practice CTF site is down right now because we're setting everything up for the midterm so you will not be seeing the practice site is going away. Will be releasing the midterm CTF site sometime time between the end of the class and midnight tonight. Who knows it could take longer if you've ever Dealt with computer stuff, you know that sometimes it can take longer depending on weird problems that show up. So we'll do our best to get that to you. I'm not going to tell you any information about it because you'll know soon enough, like if I tell you anything about it of how many challenges, whatever, whatever that's not going to change in the next three or four hours until it's released or whatever. So, yeah, I'll announce on Piazza. So just be On the lookout for Piazza also have a write up there. The important thing that I'll put in that write up that I'll also mention here is Kind of the fun part about having this CTF style midterm is that you can kind of See everybody's progress and as they're breaking levels and challenges and one of the really cool things is then you can target yourself to try to solve the easier challenges because you can see what challenges have been solved by the most people. So that's pretty cool. And so that helps you target the flip side is of course we have a scoreboard with how everyone's doing and since this is a You know, this it'll be a one to one correlation between your grade and what you're seeing on the CTF.  All your user IDs went away. So Those are all gone. You'll create new ones. So then when you create your hacker alias if you don't want to be associated with you just do something random if you do whatever do that, but it's up to you. So I'll make that clear. On the post, but I think that's all we're going to say about this now. Cool. All right. And yeah, so we're going to get started and start on network security. So we got a lot to cover here. We're going to And the goal here. So you've gone over a lot of different topics and that's kind of the goal of this class of 365 Is that we're trying to expose you to many different areas of security. You went through Crypto and authentication and authorization and access control and All kinds of cool stuff. So Now we're going to turn to network security. So we are going to go into the details of how networking works. We're not going to go into every detail. So we're not going So deep that like you would do in a networking course because obviously we don't have a whole course to cover this, but we you will understand how packets are moving. Throughout the network from, let's say me to you to other levels. So this will build a good base for you for for that. And it really comes down to and this is the yeah, what's up. Is that question. Okay, cool. So The kind of and the really interesting thing is so what I love about networking is we basically have like So we have this problem where and I'll use a zoom since we have this right so there's me there's zoom right I'm on zoom I And how are the pack. Sorry, I don't think you guys have actually suffered through my handwriting yet. So I apologize right off the bat. But somehow and we can see this is happening right somehow data is coming from me from my machine here is going out on the internet from here to zoom and then going to all of your home so that's That's you know it's something that's kind of crazy to think about so we're going to study how this actually happens and by the end of this you will understand how data moves on that route so And we're going to look at all the things and the really cool thing and what I like about networking is it's there's nothing magical here there's you know should we should dispel you of the notion that there's any kind of magic and computing it's all Everything is all knowable and so So in networking request for comments or RFCs are where you can find all the information and details about these networking components and how they work. So you can literally just read that to see how things work so We're going to start with and what we're going to be looking at is basically when we think of the internet. So what is the internet. What does an internet mean. Yeah, somebody want to put in the chat. Yeah, so actually internet stands for that's great and interconnected network right so And intranet is like your local so think about your local area network in your house if you have a Wi Fi router that you connected to that's your local area network And you're connected to an ISP so actually we can start filling out this diagram even with things that we know currently so we have my machine here. I have a I'm going to draw like this. This is my Wi Fi router. So I'm connected to my Wi Fi router. There's other stuff here like my phone. I don't know other devices and and all of this is under my ISP right so your internet service provider you're providing some service and then so what are they doing so they if if it was just think about So I have right now have Cox so if I had just if the internet was just everyone who had Cox, which is kind of how actually early days of AOL had where you could access and talk to other users of AOL but accessing the internet was actually really difficult. So the internet comes in where all of the ISPs are connected to each other so I'm going to draw kind of as nebulous clouds here so somehow my dad is going from My machine to my router out on my modem to Cox which then sends it somewhere else and there'll be some other thing that goes in there goes somewhere else bang bang to somewhere else and then finally over to zoom and then maybe back to you. So this is the reality of networking. And so how this all works is the internet protocol suite and if you think about it this is a crazy difficult problem because how many. So how many different operating systems and machines does everyone have let's say talking to the internet right now in your home, like I have a Mac, I have my iPhone, I have my iPad right now. Somebody has a Windows machine, I hope I have a Linux box somewhere in there that I use. I have my watch my Apple watch. What else does anybody. Yeah, I'm thinking of different types of operating systems and all of those machines have to be able to talk to each other and exchange data over yeah good consoles Xbox to switch at ps4. Some people have refrigerators Chromecast and Alexa, all these things are devices that need to be able to talk to each other. And so you have to have this is one of the really interesting things you have to have well defined protocols of how data actually gets sent otherwise you can't have any communication. You would only be able to imagine how horrible it would be if only Apple devices could talk to Apple devices are only Linux devices could talk to Linux devices that would cause massive problems. And so the suite of of protocols are all kind of known as the TCP IP protocol suite and we'll talk about this in a bit and the really nice thing here and one of the things I want you to be thinking about as we study the design here is thinking about these levels of abstraction and encapsulation so these. The IP stack is kind of built on these levels of different levels of abstraction and each level and protocol handles a different thing, but again everything is noble so there's protocols that handle at the link layer so specifically like actually my machine I'm using now is wired connection so it's a wired connection to my router. So how does the data that I'm sending go on the wire from my machine to the router. And then you have the question of how do we then cross packets so that's how it goes maybe one hop how does it go multiple hops out of there. How does data get transported and finally we have applications at the top so all is kind of the classic model when thinking about the TCP IP stacks. So at the bottom we have the physical layer on the top of that we have the link layer. Above that we have the essentially the internet or the internet protocol like the IP layer. Above that we have the transport layer and then finally we have applications on top of this so this is kind of a crazy thing to think about is to even get data from one machine to the other, you need to implement and handle all of these different cases. And then only when you do that can you do things like HTTP and DNS and NFS and SMTP. And one of the important things of this diagram should hammer home one of my. Massive pet peeves and something you can do to make it very clear that you don't know what you're talking about is to call the web the internet or the internet the web. So the web is basically HTTP and hyperlinks and that's just one application that runs on the internet. So, and just like so SMTP does any of you know what SMTP is for. Yeah mail so that's great so it's a simple mail transport protocol so emails don't don't act emails actually predate the web the web didn't come into existence until the early 90s I think like 92 basically, whereas we had SMTP. Before that people were sending emails before they could ever visit a website which is super cool. And now there's actually a lot of complexity in here of how all of these things work. So going back to this diagram. We basically have kind of at the link layer trying to understand how data gets from your machine to anything else on the local network, the IP. As we'll see is about how to get data between from one machine to the other. So basically TCP and UDP are different ways that we can transfer data and we'll talk about that in a second. Yeah, so people are talking about blockchain. I think the, the, the pitch is that, let's say, or the goal what people want is for blockchain to be another layer on top of here, especially if you think about Ethereum and smart contracts and those kinds of things would be another layer that people want to be on top of. I believe, I mean it's got to be using TCP basically to do everything that it needs to do, especially Bitcoin so Bitcoin has got to be at the application layer under TCP. Cool. All right. So, sorry, I'm skimming ahead. You're all already know this stuff right. Okay, cool, cool, cool, cool. All right, that makes sense. That's amazing. Yeah, I was wondering about the order of this but now it makes sense. Okay. Cool. So, the very first thing we need. So, let's think about this, like this diagram. So, I'll simplify it by getting rid of all that crap that I just added to it. You have me, right, you have me, my machine here, and we have zoom all the way on this other side. So, you're designing some system for machines to talk to each other. What do you need to know first. Yeah, you need some note, you need some notion of where do I send this data, right. So, how do I get, so when I say zoom, right, I just said me and I said zoom, but how do I actually get that data from me to zoom and actually a really good analogy that helps with this is think about has any of you ever sent a letter in your life, like mailed it with stamp and everything. Okay, thank gosh, I was a little bit worried. You have an envelope, right, so you have the envelope and on the front. So what are the things that you put on an envelope. So this will be the front. Yeah, so you need a stamp, you need to pay for it somehow. What else. The address you're trying to send it to and the name of the person. Since we're computer people will send this to foobar, blah, blah, blah, blah, blah, blah, blah, blah, how specific do you have to be on your redress. Has any of you ever tested this. I guess that's by the house of the location right so in the cities the state. Actually there's a fun fact. It used to be when towns were really small and this probably still exists in a small town. You could because the postmaster would know everyone's house so you could say, oh I'm sending this to foobar who's at the, the big red house past the cornfields, and they would. The local postmaster would probably be able to figure it out or ask around about who has who knows how to get to that letter so anyways it's kind of an interesting thing that we lost a little bit along the way. But so we can add this information right we can put a stamp we can put the name we can put the address and here the address would have to have things like in kind of a large hierarchy right what state. What city what zip code and what street, what street number on number on that street and what maybe what apartment number even so going more granular. Now this person so foobar got our letter they want to send us something back. How do they know where to send that response to. Yeah, we're missing a return address right so I'll put myself here and I'll put squiggles for my address, and I put now put my return address and so this this actually has two features right. So it's so that the person we send the letter to knows how to send it back to us what's the second feature. Yeah so who sent it is the first what's another feature. Yeah wrong address right so that the male system can actually give it back to you. So that's actually the second thing if the letter, let's say foobar doesn't exist or that place doesn't exist that letter can come back to you, and they know where to send it because it has your address on it Okay, awesome. We have exactly the same problem here in these computer systems we have two computers. We want to send data from one to the other and we can even think of data in this case as an envelope that we want to send. We want to send data from one machine to the other. What do we need. So, do we need a stamp. Yeah, not really. There have been some proposals for doing like micro transactions on data that you send or whatever but we need. So we don't necessarily pay for it, right. But what do we need. We need to pay for it when we use the internet exactly and actually if you want to think of how expensive. The internet was. I was just doing some research is why I'm full of AOL details but in like 95 an hour of internet from AOL at insanely slow pace that would make you gouge your eyes out, like 56 K modem was 350 an hour which I believe now is like slightly higher than it's like six and a half an hour, an hour for internet for slow internet. It's crazy. So think about that, you know now when you're complaining about your ISP and I definitely do as well so we okay so. So we need so we have our let's say, and let's you know, we can I like this little envelope thing so we have our envelope here. What do we need to do to send this to zoom. I need to some address right I need to say hey I want to do it like this. So I need some way to say hey I want to send this data to zoom and here's how to get to zoom. And I also probably want a return addresses well right I want to say hey here's how to get to m and this. And we'll actually see that this is super cool and all of the pieces that we've kind of been studying will click into place to and allow this to happen. So this gets us back to the address so we need to have and we call it an IP address right this is what people talk about when they say an IP address is exactly what they're talking about so each host. To be accessible each host needs one or more IP addresses on each of its network interfaces. So here when we say network interface and network interface could be an Ethernet port that you plug in Ethernet, or it could be your Wi Fi adapter, could be any number of things. So you've probably seen IPv4 addresses this we're going to focus on we won't touch IPv6 but IPv4 addresses are composed of 32 bits. What does that mean and how many number of IP addresses are there possible. Yeah, two to the 32 right perfect awesome. Yeah, this is kind of classic CS math right so we have 32 bits of information we can store up to from all zeros to all ones. So two to the 32 is the number of different IP addresses. Actually in practice it turns out to be less than that for several different reasons which will briefly touch on. And it's typically this these 32 bits so this is actually if we go back here, what we're doing if we were to zoom in on this letter. Right, so here I have my letter. I'm sending this letter to zoom. I'm not actually putting zoom. Right, I'm putting some IP address right so one zero zero one one zero zero one zero zero one zero zero one. It'd be really cool if I just wrote down 32 bits there. But anyways, so 32 bits here is actually what I'm sending. It's really cool so this is kind of crazy. So you can think about to talk to any machine on the internet all you need to know is a 32 bit integer. But how does that actually look in practice would it be super fun to write out the bits one zero one one zero one zero zero zero one zero one. Is everyone happy to write out binary. And no we don't want to do that. So actually it's like a weird happen stance. The 32 bits is separated into eight bit octets, and then we represent in decimal notation, each of the different octets so the first eight bits get represented at the start and turn to the decimal so this is the <IP_ADDRESS>. So you've actually, as everyone has anyone, hopefully you've seen an IP address before, maybe, I mean people are putting them in chat so I guess if you're completely ignoring chat you haven't seen it. Yeah so here's a crazy thing. So that actually that IP address doesn't actually mean anything to the computer right the computer has to translate it into an, and an integer. Not just by translating them like you do a very fun fact so people were talking about. There's some special addresses like no wait no that's not the one I wanted. Right, so this is this is actually the entire and we'll talk about this in a second but I think it's a slash eight. It's anything that starts with 127 is your local machine. So this means this current machine that I'm on so this is why if somebody is tricking you and saying like oh yeah hack into me this is my IP address, they're actually hacking into themselves. Now the super funny thing is many web services will block and say if I see an address that's 127.001 I'm going to block it. Unfortunately there's actually a lot of different ways to represent IP addresses. I don't know it off hand, but if you convert this into a decimal number right so 127 is a certain number of bits 12345678 that's definitely not right but whatever 16 zeros and then five zeros and then a one, whatever that number actually represents. It's going to be something big<PHONE_NUMBER> whatever whatever that so translating it between there into an integer will actually in a lot of software will get you to local host so you can bypass filters that are looking for blacklisting 127001, which is pretty cool. Cool, so this is the base of all addresses so and part of the problem is organizations need a range of IP addresses to use so but but but we're going to kind of skip over some of this but anyways. So, I'm going to go with an example for this. Okay. Another 192.1. This is I know a slash 24, I think. I think it's 16. Anyways, okay. So, I'm going to see if I want to do this here do this later. Okay. Yeah, we'll we'll do this at right now. So, okay, what we want to do. So, we're an organization, we want all of our IP addresses to be in a similar range and we want to be able to tell what IP addresses are ours and what IP addresses are other peoples. So, that's like when I said here that <IP_ADDRESS>. Let's say if I had a network where where everything with the exact same first eight bits are all inside my organization and controlled by my organization. I would call that a slash eight. So I'd say the first eight bits of the IP address are the network ID. So it means my network ID and the rest of them identifies the hosts inside my network. So if the first eight bits are fixed, how many hosts can I have in my network? Yeah, so somebody said a couple of people said two to the 24. Why would it be two to the 24? So we want to justify it. Yeah, so eight are unchanged. So eight are fixed out of 32. 32 minus eight is 24. And so all these are bits. So we know it's two to the 24. That's how many hosts we can have. Awesome. Maybe in a different network like my local network, I have the first 16 bits have to be the same. So what I do is I'd call that a slash 16 network. And I would so everything that's part of my network starts with the same first 16 bits. So it has to be 192.168 and everything else is in there. So how many hosts would I have in that network? Good to the 16. Awesome. What is that two to the 16? That should be something that we can calculate and somebody can put in my keyboards too far away. Yeah, 65. Yeah, that makes sense. That'll come up later. Right. And then we can have even smaller networks. We can have <IP_ADDRESS> and I can call it a slash 24. How many on that network? 256. Yeah, two to the eight, which is equal to 256. And the cool thing is, and it becomes a little bit more. So I chose these, these eight bit boundaries, right, which essentially line up with the decimal here, the decimal here, and the decimal here. Because they're easier to think about, but this could actually the boundary here between the host bits and the network bits and the host bits can be put arbitrarily. So you can have, you can have like a 10 is the other 0.113.0 slash you can have in a slash 11 network or whatever that that it can be. Let's see. No, it can be more than that. Anyways, can be placed at any bit there. These slides are wrong. I should update them. But anyways, the point is, you can put that kind of because this represents a binary address, you can put that anywhere. Let's see, I chose these. Oh, no, no, that's right. The 172.168. I can't remember what that is. Anyways, the reason why I picked these and has anyone seen IP addresses like this, like, let's start with 192.168.something.something usually.0.1 or 10.0 or 172. Yeah, what context have you seen those in? Yeah, and your local, your local network, right? So these are all, no, not local, it's called the private IP ranges. So you can look this up and and all of these are private IP ranges that so this means that what that means is there will be on the whole entire internet. There is no host that responds to <IP_ADDRESS>. It's guaranteed that there should be no host that does that. The same with the 10 range and the same with, I can't remember the 172.168. Someone will have to look up exactly what that host and net ID is. Oh, Jan is calling me while I'm in the middle class. Thanks, Jan. I guess found a super, there we go. Do not disturb. Okay. No, you always send Jan to voicemail. Come on, what's wrong with you people? All right. So anyways, that's kind of an interesting point that this is why these IP addresses are used inside of your network because we know it's not possible to go out of there. Yeah, so how do you create an IP address? That is a super interesting question. You basically have to ask for one. So you have to and this is about a, so this should tell you because I said there's no 192.168.0. whatever on the wide internet. That means you nobody else can actually talk to your local machines, which actually ends up being a good thing, but we'll talk about that later. But yeah, you get a so for instance back up to the diagram. I have a public IP here from Cox. If you go to something like actually like IP chicken, but whatever you want, there's websites where you can see it. Don't post your IP address in the chat. It's, I don't know, it's better to avoid that but Cox gives you an IP address when you connect. And similarly zoom has an IP address and actually we'll see I need to and I'll get this into in a second. We'll dig in a little bit more, but it's not exactly zoom.com but let's say it is zoom.com. So through the protocol and I was going to say magic but I stopped myself of DNS DNS is a protocol that translates a name like zoom.com into an IP address. So this is why we don't have to remember IP addresses, think about how annoying it would be to remember the IP address of Google or Apple or Facebook or whatever right that would be incredibly annoying. So you DNS exists such that we don't actually have to worry about that. Cool. Okay, so we have that how to get addresses. Cool, let's pop back over here. So we're going to start with the IP protocol and look at how packets get on to the network from one thing to the other. So we're going to kind of do it in a little weird way we're going to start in the middle of the diagram and then we're going to pop down to look at the details there and then kind of pop back up. But since we talked about IP addresses so IP addresses are important to understand that there's addresses everywhere on the internet, and the IP protocol really represents kind of the glue. So it provides and I'm quoting here I believe from the RFC. It provides a connectionless unreliable best effort datagram delivery service. So what this means is best F so datagram is just packet is what that means so we call it a packet in networking. It really is just an envelope of data you can actually think of it like that it's just some data that you're sending from your machine to the next machine. Okay, what does connectionless mean. Sorry, not connected. Yeah there is no physical connection, but yeah this means. It means I don't have to have a pre established communication and connection with the other host that I'm trying to send data to I don't have to establish a connection so if you can all my analogies a lot of my analogies are phone based. I'm trying to actually remember does your cell phone have a dial tone when you like when you just know just a dial something right. I guess that doesn't work. Yeah. Anyways, the point is, you don't have to establish a connection to the remote system, you can just send a packet of information you don't have to actually establish a connection, which is kind of interesting. It's unreliable. What does that mean. Yeah, it just means exactly what it is it's kind of like the mail actually right like the mail does best effort it tries to deliver your letter, but they're not going to keep delivering it forever they're not going to hold it around until it finally can be delivered, your letters can be lost so this is what the internet protocol provides is it or I said shouldn't say it provides unreliable service, but it does not guarantee reliability what's the difference between that between guaranteeing reliability and being possibly unreliable. Yeah, the just kind of sends it without putting any protections. You have to do that yourself. Yeah, so it just it's. And we'll talk about this in a second but yeah it does it best effort right if it was completely unreliable who would ever actually use this right it's kind of. It's silly we wouldn't, you know, think about how much of our life uses the internet and if any of you I'm sure, especially during coven times if you've had an internet outage, when you're trying to attend classes that can be insanely frustrating, or even worse is when you have unreliable internet where packets get lost, like, I don't know I had it where it's happening 10 to 30% of the time of packets were lost, but intermittently it wouldn't happen constantly so I call the cable company to complain and they would say we did some stuff on our end did that fix it and we would say yeah it looks like it fixed it and then of course an hour later the same problem happened so that was crazy. Actually, yeah somebody has a question about a power outage or not a question but a comment about a power outage during a final. Do you guys know fish, probably not because he taught this class last semester. The power went out in his apartment complex and then he sent us a screenshot of his phone and the Wi Fi around him, and his was the only Wi Fi network that was on because he has his own backup power ups system. So he was still able to work and get internet during a bracket blackout so yeah that was pretty funny and it also made us realize that like, oh, the cable company actually must have a different power service right and then the building itself so. Yeah, that was super interesting if you ever want to learn about fish okay so unreliable best effort. But now think about this okay so it's the glue of the internet let's go back what does glue mean. I wish I could go to these slides faster. So let's go here. So IP is in the middle right it's actually how the packets get from one place to the other. It seems kind of crazy so you think about it so if I were to tell you, hey, I'm going to give you a couple. Let's say billion dollars now you're going to design for me a protocol that's going to be used by literally billions of not just devices but people so multiple billions of devices with multiple people who are accessing this protocol. What's your core going to be.  So this means so this means is I'm not even going to guarantee that your that letter that you sent ever gets to the target. I'm not going to guarantee that what you sent gets to the target right integrity what we talked about there's no guarantee that the packet that you send actually arrives in exactly the right way, or exactly how you intended it ordering. I am not going to guarantee if I send one letter and then the second letter, it could be that the recipient gets the second one first and then the first one. I won't even guarantee that I won't just make up accidentally multiple letters that instead the other side you send one letter but the other side gets 10 letters and bandwidth I'm also not going to guarantee bandwidth. So, if you're now put yourself in the funder shoes.  So it's kind of. It seems silly what I mean propose this way and it's kind of intentionally so that's why I did that. But, but the question is, and we should think about it. What applications am I running on top of that. Right, so I have my internet protocol. What types of things do I have on top of that. Okay, so I have, let's think about these properties would you want, let's say you're browsing your banks website. Do you want something that's unreliable and best effort. Yeah, no, that would be very bad you wouldn't want to click. Yes, I'd like to buy GameStop stock 10 shares of GameStop stock, and actually 1000 of those requests actually arrive on the other side.  Now, now, but think about other protocols let's think about actually this call we're on right now with zoom. Right, so on this zoom call. So think about what's actually happening right now frames of my video are going out from me to zoom and then back and each let's say each frame currently is a packet right these packets come out. What happens to our communication right now if a packet is lost. Yeah, why nothing. Would you even notice. Yeah, there's so many packets right they're going one after the other and my audio is going as well so maybe if a video call frame is dropped. You wouldn't even be able to tell, maybe if my audio drops you could actually pick up based on my mouth what I'm trying to say right. So, and would you want a video service that guaranteed that every frame got there, even if it meant. So when there was a network problem and a packet and a packet got lost, then all my other video waited and waited until you finally got that one frame and then the other frames came up. Right, no you wouldn't want that that would actually be a really terrible video service so this is actually one of these things that's actually brilliant about this Internet protocol it actually doesn't provide a lot of these services and what that allows. And I'm going to go back to these slides. What it allows is because this IP layer doesn't guarantee anything. It means that other applications on the top so I can build a video chat application on the top and not require that every packet always arrive. Think about the other thing games right so the other thing is games right how do games essentially work. There's a central server that's keeping track of the entire state of the game. There's all these clients that are sending their status of what they're doing to the server and then the server sending them updates on where all the status is. Right. And so if, if I have to wait because somebody else dropped their packet and I'm not getting any other status updates by the time that packet gets there it may already be too late maybe the users already done something different. So it seems like at first glance a kind of a crazy thing of why would you want the core of your networking layer to not provide these really good things. I'd say the one thing it probably they definitely overlooked that they shouldn't have was integrity that's something that we would want. They gave us the flexibility to build other types of protocols and we can actually pick and choose what we need do we need reliability do we not need reliability it's actually it's super cool so it's something that looks silly when on the face of it but actually is very cool. Yeah, and so the whole idea is at the IP level if I have a an IP address that means I can send a packet to you. So any two nodes as long as they have an IP address and implement this protocol correctly and all the other protocols on the stack as we'll see, they can talk to each other. And that's the magic of the internet. Okay. Cool. And so now I'm going to show you this is so I mentioned the RFC is the request for comments. This is a diagram directly from RFC RFC 791. And this is what an IP datagram looks like. And so this is in 32 bits from the 0th bit to the 32nd bit. And we're going to look at this and try to understand and this is really what when we looked at this diagram. This is what gets put here in the in the address column so to be able to send it we need to send a bunch of information. So the very first thing we send is the version of IP that we're sending so it's the first four bits. And this is why is the version the first thing wouldn't you think that the thing I care about is the destination where is this this envelope going. So that should be the first thing is what's the address. Yeah, so there's some good stuff in the chat exactly so yeah, and this is a really good example of really good engineering of protocols. Okay, you need to read those first four bits in order to even understand the rest of the packet and this allows us in place upgrades so we can upgrade to a different version like IPv6, which completely changes how I parse the rest of the packet but as long as I parse those first four bits. Now I know how to parse the rest of it. It's super cool. Okay, so there's a bunch of stuff in here. I'm not going to get into everything you can actually read the RFC and learn exactly what everything's for. We have the total length and bytes of the of the message. We have an identifier which I'm not sure how deep we'll get into but we'll see that in a bit. Possibly, we have some flags that can get set. Okay, so the identifier and the fragment. What happens is, when you have that beautiful layers, you the, the marketing. Hello. Okay, so the marketing here is aha. At that level, you only need to care about IP. So an IP packet can be as big as I think it's 65,000 bytes. So it was 16 bits right so to the 16th was 65,000. So it can be 65,000 bytes. Now, the question is, can, can your actual layers that transport that information can Wi Fi packets and frames be up to 65,000 bytes. Maybe it's not bites maybe it's bits but whatever. It doesn't matter for the point here. It seems like it's too big right and actually Ethernet so you think Ethernet. I don't know about you but as soon as we like the pandemic started I basically switched everything over to Ethernet. I should have like massive cords running throughout my house. Since I'm on zoom constantly all day I don't want to deal with any jitter from Wi Fi or anything. So, but IP Ethernet frames are capped at 1500 bytes total. What actually happens is the IP layer tries to send a packet, and then the link layer says hey I can't send or the physical layer even will say I can't send this this is way too big. So IP itself has to have a mechanism to deal with it so that is where we get the. That's where we get the identifier in the fragment so there's actually a way that the operating system can say oh this packet's too big I'm going to split it up into a number of different so it's like taking a huge envelope that you're trying to send and cutting it up and now you need to put on that envelope okay which one was the first one and they're all from the same envelope so I'm going to put the identifier here that identifies that each of these fragments are part of the same envelope. And then I need to know the offset so the one at the start will be the zero with offset, the one 10 bytes or 1500 bytes after there will be the 1500 bytes and anyway so that those information can all go out and then the other side can get it and receive all of them. We have another field which sounds really cool and that kind of is the time to live. So, you know we talked about that the mail doesn't just like hang on to letters forever I guess why doesn't the mail system hang on to letters and just keep trying to deliver them. Yeah get full right so now think about I'm sending packets into the internet and it's just like floating around or what actually yeah can happen is an infinite loop where packets actually go back to the same place and they get stuck in this loop. And you know technically they could just like stay there forever but eventually they'll overflow things and packets will drop. So to prevent that there's a field called the time to live field that's actually used for network reconnaissance which we'll talk about later. But the idea is this is the number of hops so specifically like here a hop would be from from my machine to the router and then the router to Cox and then Cox somewhere else and over here. All of these and will you know you'll you know you understand networking when you really in your bones understand exactly what happens in each of these hops and we will go over that in this class of what's going on here so. At every hop that time to live value is decremented so it starts high and then at a high level and then gets decremented down, and then when it hits zero. The router that has it like drops that packet and says okay I'm not going to deal with this packet anymore because it's time to live value is too low. So we have something that says the protocol and we have a check some of this header so. We'll talk about that in a second, and then we have the source IP address and the destination IP address these are just like the letters that were used to talking about in the mail. We have a 32 but in this case it's a 32 bit number with source IP and a destination IP. We have some options and padding and then finally the data of the header. So you can see we actually have a decent amount of overhead on this packet of information that has to be there so the header thing has to be there. I claimed that there was no integrity on at the IP level, yet I see there's a header checksum so what's the difference between a checksum and like an integrity check. So checksum is so checksum is some kind of algorithm that let's say XORs all the bits of the packet and make sure that at the end it's one that would be one type of header checksum. So the way this works is it XORs everything together and make sure that it equals what's ever in the header checksum, but basically what it means and checksums are good at detecting if one bit is flipped and actually anybody do any work or deal with credit cards Yeah, so credit card numbers themselves have a I think it's a loon check LUHN or something like that. Somebody can link it in the chat. The loon check is a way that you can actually verify if a credit card is a valid looking credit cards but that way people can detect when a, if somebody has accidentally input the wrong credit card. The other algorithm is basically a checksum. So checksums are good for a specific, you know, testing if a bit is flipped but part of the problem with a lot of them if one bit flips one way and the other bit flips the other way it's, it doesn't detect that and fundamentally, an attacker can overwrite the header checksum or do anything they want to do to this packet. Cool. Okay. So we have this. Okay, cool. And so this is all that information that goes onto your packet. Wait for me to skip. I got to figure out this iPad better. Anyways, okay. So the way this basically works is your IP packet will then get incorporated into the lower levels and we'll actually look at what those look like in a second. So we have your so your IP header and your IP data go into the, the link layer so they become the frame data and your frame data adds another frame header. So what actually arrives has all of these headers on it with the actual data as part of it. Okay, now we're going to look at the case of. So now we know, roughly, we have a rough idea and understanding of, okay, this looks pretty easy, right. I know if I have. If I know my IP address, and I know zooms IP address, I could make a packet using all that information I just said, and send it out and get a packet to them. Right. We're not quite there, but we have our goals in mind, right, we want to be able to send a packet there. But what we need to take care of first. So, as the packet goes from us to zoom, it has to first go from us to our router, or ours, or a switch and and that is called direct delivery. So, and this gets back into. It actually gets back into these IP address ranges so when a machine so you're a machine your machine boots up, we won't get into it but there's a. So DHCP is just a protocol where your machine when it boots up can say your computer says hey, I need an IP address I don't have an IP address, and then your router will actually listen for that and respond and say okay. Hey, new machine your IP address is this, and it will give you an IP address, or you can configure your computer with a static IP address so you can say in your settings. My IP address is one nine two one six eight and we'll talk about all the information you need. Can you hear me now. I was like us be lost on what happened, maybe I accidentally unplugged my mic. Okay. Alright, so for our. So, for us to exist on the network we must have an IP address. So, I have my machine boots up. I use DHCP and I say hey I need an IP address I don't know what my IP address is and it the somebody responds one nine two dot one six eight zero dot 10 will go with 10. That's one piece of information I need. What is my IP address. Now, going back to this diagram. So, I have my IP address great, but I need to know when I'm sending data. Am I sending it. Am I sending it to my, my, let's say my Xbox on my local network, am I sending it to my switch or my sorry my router. Who am I sending it to or am I sending it to zoom. And the difference as we'll see, basically the difference is, who's on my local network where I can to send packets to directly versus who do I have to send it so that it hops to some other network. So, what we also need is a way to tell who's on my local network versus who's not on my local network. And that's with the this exact thing that we just talked about of these IP addresses so your computer, your, sorry, the DHCP address or if you're setting up static networking will say this is your IP address so it'll tell you the IP address, and it'll tell you the network now. I'll go the slash 24 for now. So, this has a couple different names which can be very confusing. It could be if you're looking at it net mask, or sider is one term that you, we, you'll see. But it's basically a way we'll always do it in this format because it's very easy the net mask version actually shows you all the bits that are one. It could be all eight ones is 255 so be 255 dot 255 dot to almost got it 255 dot zero. And what this net mask means is, if you take that integer, and you and it with an address that tells you if it's if with your address that tells you what your network is. So the first 24 bits are all one, but the most common way of seeing it is in this kind of slash 24. Let me look at my computer real quick and see how it shows it. You may have to go into like advanced TCP IP. Yeah, so mine has my IPv4 address and my subnet mask which shows me 255 255 255 dot zero which exactly what I thought it would be. So now with this information. So now if I know, okay, this is my IP address, and this is my net mask slash 24. Now I can, my computer has all the information it needs to be able to answer the question like, and it's so now anytime my computer wants to send a packet. So it says, Okay, hey, I have a letter here for you. So the destination IP here is 192 dot 132 dot zero dot 100. And so now my computer has to ask local. So is this IP address on my local network. If no or if yes why stick to your guns. So it starts with 192. 24 means where's the network boundary right here on this octet so this means this is the network local network. And this is the host. So this means the first four bit 24 bits have to be exactly right. Yeah, great. So we'd look here we'd say is this the same one and two one six eight zero one and two one three two zero no. So it's a not local. And then we'd figure out what to do there we'll talk about it in its in the second. Okay, great. What about like up there. What about I want to send a packet now to <IP_ADDRESS>. Is it local. No. <IP_ADDRESS> 10. Yes. Okay, cool. And you can see that by changing you know I could change. Now if I change this to a slash eight. Would this be a local address. Sorry, you can't see where I'm posting. Now we'll ask these questions again. So is if it now it's a slash eight is <IP_ADDRESS> local. Yes, what about <IP_ADDRESS>. Yep. And <IP_ADDRESS>.10. Yep, all three are. And I'm going to do this one more time just to drive this home. Or actually I'll just leave this here and you can figure it out so now if it's a slash 16 which of these are in and which ones are out. Okay, cool. So you're understanding the first step of look of networking so I want to send a packet I know the address I want to send an IP packet. I need to know is it a local address or not. And this is how we can tell, because if it's local, then we do direct delivery. So yeah here's an example. So the network says another way a third way of representing the net mass this is saying the sub network is 111.10.20 this means. In our parlance we'd say this is a slash 24 because everything that begins with 111.10.20 is in the same net. Okay, so we have a we'll get into the MAC addresses in a bit. Actually, just in a second. So I'm machine <IP_ADDRESS>. I want to talk to <IP_ADDRESS>. And so I'm going to make that IP packet just like we talked about I'm going to say great, you're I know you're on my local network that means I can send this packet directly to you. So anyone on my local network I should be able to send a packet to and they should be able to receive it. But I need to know how to actually send that to them. I actually so those other numbers underneath is. So the subnet mask needs to be the same for every machine on our net. Otherwise we won't be able to talk to each other. So the subnet mask is for all the machines so they all are in a slash 24 so they know from their IP address they can derive their sub the subnet work. I need to actually send it at the link layer because we've only been talking about IP so we're going to get into these other we actually have another type of addresses that address address your your essentially your network card at the link layer. So that has to get out so now we need to go dig into the link layer to figure out how to do that. I usually never do this but I will send you got a midterm coming out today I will let you out early. Feels weird. I feel like I don't like it. Now everyone come back in we'll keep going. I'm just kidding. All right, so we'll stop here at ethernet frame and we'll. Now we got a lot to dig in here I don't think it makes sense to power through. We'll come back here and I'll see y'all on here on Monday and I'll see the people who are watching this on Thursday on Tuesday.


यह अदरलिए आप प्श्वाद वीवाद हो देूतः हो थो में वाद रब औब आपूप़दूर। प्रियाई आप ये बी देख सकते हो यह आप देर इस दख्रीज यह ईं उंप्लोई मेंगद अप लेबर प्वोर्स यह अदरलिए चलटर। जब हम बात करते हैं about the composition of agricultural sector तो over time हम यहांपे एक change भी अबजर्व कर रहे हैं अब in the contribution of agricultural sector across crop sector and livestock sector यह अनिशली क्या था crop sector में a larger contribution as compared to livestock लेकिन अब क्या हो रहे है के apki livestock sector is making greater contribution in agriculture GDP as compared to crop sector लेकिन जब हम पाक्सान की कोनमें बात करते हैं it is still the foundation of Pakistan's economy अजी यह यह जो आपके पास agriculture sector है यह अब भी अपके पास second, largest sector after services इसकी contribution, almost 23% हैं in GDP of Pakistan लेकिन जो आपके पास share to output and it's best to drive to growth and development अब over time अपके लेए यह दिमिन शो रही हैं, decline हो रही हैं तेर इसी पैक्तन पेए जो आपका share of employment in agriculture sector है जैसे आरे दी में बता चुकों यह भी over time के और हैं it is declining लेकिन as it is the second largest sector of the economy यह दी में जी खो उज्ठे, यह ऋश्टिक ग़ोट रेग, to promote other sectors of the economy छे जब आपका एक्गर्ट्रिल्ट सेक्टर ग़ो करेगा, तो यह आपके ख़िर्ड्लेल्ट सेक्टर को promote 좀ke it is the agricultural sector that provides raw material to industrial sector उरेलिटीबगी लीडिकोलत होगा पापकिस्ना तु आचीवहा लुधúlt rate. फीर इसी पैक्त्रनपे अगर अपके अग्रिक्ल्तलूड Sec Bali is a growth for the agriculture of the sector. it also affects the growth of non-agricultural sector and one more thing which is very important is that when you have low agricultural growth rate it can lead to rapid rural urban migration when there is no job opportunities in rural areas your labour will move from rural areas to urban areas when there is migration from rural to urban areas it will create large scale of unemployment unemployment at urban areas then there will be urban congestions along with that it will also lead towards the political instability when we talk about challenges of agricultural sector then you have major challenges in the agricultural sector that is the productivity growth and resource degradation over time we say that the productivity of Pakistan that is not compatible with other countries in the region if we compare Pakistan and China then if I take the data of the 1960s about major crops when I talk about wheat, rice, sugar cane and cotton productivity of these crops in China and Pakistan is more or less same if I compare that in today's time period reference then we can observe a significant gap in the productivity of wheat, cotton, sugar cane and rice in China productivity gap that is significant between these crops in China and Pakistan then when you have another major challenge in the agricultural sector that you have urban consumers and they demand for diverse foods but your rural sector that have poorly diversified forms so what do we require it requires a balanced growth and development in the agricultural sector and rural economy now this high growth rate we can achieve this high growth rate by carrying out proper management of land water, soil and energy that you have output that if I talk about production function agriculture output is a function of land, labour, capital and management now if I properly utilize these factors of production then what will happen it will result in a high growth rate if we efficiently use it it will result in high yield of agricultural output then another important role that we can play that is the market that markets can play an important role in the agricultural growth that we should formulate policies and regulations that whatever policies you formulate in the governing of the markets for inputs and output this pattern should be done to grow your agricultural sector to enhance the growth suppose if we talk about if input subsidies are provided there is increase in the usage of those inputs in the production of agricultural output that if subsidies are given to fertilizers there are subsidies on insecticides there are pesticides it will make the farmer will use an optimal quantity of these inputs to produce agricultural output then if there is provision of extension services then what will happen it again have some positive impact on the growth of agricultural sector if timely up procurement price is announced that for next season this crop price will also influence the production of that agricultural output in market then another important thing policy makers should make a focus about the land and your issues and rural enterprise development to encourage growth that when you have a land-to-nure system which is in the form of land-to-nure that you have share-cropper in tenant-forming you have tenants if we regulate them properly that this is the time period for which share-cropper will make a cultivation on this piece of land and this tenancy agreement will extend this will be for a certain time period then what will it do it will take will motivate and to use the optimal methods of production to produce agricultural output then if agricultural productivity increases and has rural economic activities then it is not necessary that it will create it will reduce poverty now further reduction of poverty what is important what will be the role there that the real rural wages there is a declining trend that your real rural wages should not be declined if it is not declined it will reduce rural poverty then on the same pattern if we should start strong social protection program when social protection programs will come it will also reduce poverty in the rural areas then along with this provision of public services education and health care it will also help in the reduction of poverty then one more thing that is very important that if you empower women in poor societies then it will also have some positive impact on the reduction of poverty


Advent wreath, the Advent wreath, or Advent crown, is a Christian tradition that symbolizes the passage of the four weeks of Advent in the liturgical calendar of the Western Church. It is traditionally the Lutheran practice, although it has spread to many other Christian denominations. Advent is usually a horizontal evergreen wreath with four candles, sometimes with a fifth, white candle in the center. Beginning with the first Sunday of Advent, the lighting of a candle can be accompanied by a Bible reading, devotional time and prayers. An additional candle is lit during each subsequent week until, by the last Sunday before Christmas, all four candles are lit. Many Advent wreaths include the fifth, Christ candle which is lit at Christmas Eve or Christmas Day. The custom is observed both in family settings and at public church services.


The study compared the cellular immune responses of older adults to four different trivalent inactivated vaccines, TIVs, for influenza, and found that all for vaccines boosted scitalitic effect to CD8 plus T cells associated with clinical protection against influenza. This article was authored by Arun Kumar, Janeti Makalani, Lisa Walrend, and others.


What's up guys today? I'm going to be reviewing something which is going to be a really Detailed I guess you can say a really comprehensive way of improving your memory now This is something which really does apply to everyone because everyone uses their memory on a daily basis It's one of the most important things, right? And this course is called the magnetic memory method masterclass and it's a bit of a mouthful to say But it's a complete comprehensive memory training program Containing all sorts of things videos articles downloadable templates Worksheets and really anything that you can use to study Any medium of learning I guess you could say it's got audio content everything to teach you how to improve your memory and Be able to improve various aspects of your memory so you can improve your dream recall Right, you can improve your ability to remember people's names when you meet them for the first time you can Literally any any aspect of your memory that you can think of okay? It will help you improve now I'm going to be talking very quickly about what is included And about why you might want to think about getting it Now the first thing you're probably wondering is why do I need to improve my memory, right? Well, it's it's sort of like this right every day you use certain things Regularly like all the time every day these things are The food you eat the quality of the food you eat The way you sleep and so therefore the but you're the bedding you use How comfortable your room is that sort of thing the water you drink and habits that you Act out the habits that you have right these things are things parts of your life that make up your character the quality of your life and these are things that you do every day and A lot of us forget that memory is One of the most important things that you use your mind for right? You remember things every day or don't remember things depending on how good your memory is And it's really something that you need to think about improving because if you don't Then you're going to be is starts to decline after a certain age. You start to remember less things Your memory becomes less powerful than it once was And also you just start to have an association with being a forgetful person It's not really a good thing You want to be the sort of person that can walk into a party or a social event and remember people's names As soon as they tell you them you want the name to be able to sort of stick in your mind Like a magnet hence the name magnetic memory method and you really want to be able to memorize things In a way that you can recall them later Whenever you want and as fast as you want and one of the best and most effective ways of doing this is using what's called a memory Palace now this is something you you have where you You memorize or you know a location in your mind for example your house or somewhere you know and You attach certain Objects or certain things you want to remember two different parts of the memory palace so that as you walk through the palace in your mind You are instantly reminded of the thing you're trying to remember. It's very effective But that is sort of how the memory palace idea works The intricacies of it are many. There's loads of different things you can do. There's different types of Modifications you can make to the memory palace and this is all covered in the masterclass and it really is to sort of not summarized, but to explain more what I'm trying to say here really is an effective way of boosting your memory Being able to remember more and just going really into detail The course covers almost anything to do with memory You've got specific modules and videos in the course which teach you how to memorize a deck of cards for example You've got other ones that tell you how to remember your dreams You've got other ones like how to master specific languages, right? And these are all things that you might want to do Above that or sort of before that I should say there's what's known as the the master plan now This is a video that Anthony the creator of the masterclass has put together To show you and explain sort of where you should start because there's a lot of content in the masterclass Okay It shows you how you should start and what you should do first and this is what I would recommend You getting started with if you become a member and you get access to the course Start with that video, and I think it's actually if my memory serves me correctly It's actually the first video that you're shown is where to where to go next what to do first, right? And that's pretty much it There's a lot of information about the masterclass on the actual page itself, and I don't want to bore you with this video I just want to just give my honest recommendation of the course and just tell you that it does work the technique's shown There are very effective, and if you want to improve your memory. It's definitely worth checking out So yeah, you can find a lot more information about the course using the link below Or you can just go here how to lose the comm forward slash memory And you'll be able to get a lot more information about it there And that's it guys. I'll see you in the next video