Alright, so on Thursday, we talked about UDP. So what was the entire point of UDP? Why do we need UDP? We already have nice ways to be able to send a packet of data from one IP address to another IP address. Once the packet gets here, so when the IP packet gets there, it needs to know what application it needs to go to. So how does UDP solve that problem? It specifies which gateway to go to, more specifically where the packet should go. Yeah, so it's just a number, right? So the important thing is a port is not anything special or specific. It's just a number. It says 16-bit number that specifies the source port of the application as such that it sends it, and the destination port of where this packet should go. So then what in this UDP packet specifies that the IP address that's sending this packet is actually the IP address that is able to send this packet? So where's the authorization and the authentication about this UDP packet? It doesn't have it. It doesn't have it? It seems bad. Is that bad? Yes, that's bad. That's definitely bad. I mean, in a sense of security, right? So we have UDP basically provides nothing on top of IP, right? It is connectionless, unreliable, best effort. It adds the port abstraction, but it doesn't provide us with anything more, really. Which means that all of the attacks that we looked at with IP still work on UDP. So specifically here IP spoofing. So if we're an attacker and we want to send a UDP packet to the server pretending to be the client, how would we do that? So create an IP packet with the source IP as the trusted client. What do we have to destination IP? The server, and then what about the UDP player? Whatever we want to send the UDP packet. So it would be the source port of the program that's listening on the server that we want to pretend to be the client form. And so we send now this spoofed UDP request. And again, the important thing to remember is when the server is in this packet, it hasn't know where it came from. What does it use to try to figure out where it came from? The source IP. The source IP, right? So when it replies to this, what's that packet going to look like? The destination will be the original source. The destination will be what? So the destination IP, the attacker? No. What's it going to mean? The trusted client. And the source IP? The server. The server, right? So is the attacker going to see that packet? Not in his current setup, right? Possibly, but we know, and again this is where, why we looked at exactly how packets travel and how E-directors is directly delivering those. When the server sends this, maybe you reply back. It goes through some hops and it keeps going until it gets back to the trusted client. So an important thing to check ourselves is does the attacker need to be either on a local network of this trusted client or on the server to send a spoofed UDP packet? To send. No. No. Right? Why? Yeah, so we looked at all those steps, right? So this attacker here is talking to some switch that's connected to another switch that's connected to another switch, right? Or rather those are the packets that are going to go on between there. It actually seems kind of crazy when you think about it. So here we have this, you can see this, right? So we have a switch here, right? So this attacker is now sending a packet to its gateway, right? Spoofing a source ID to be this client. Why doesn't this router drop that? Does the router have enough information to drop that packet? No. Seems fine. No, why not? Because for all it knows, it can just be being passed on. It can just be like being, like for all it does, it came from the client and then went through a couple different hops and then got to this one. So one way to look at it would be, well it doesn't really know, right? Because maybe the client is connected here somehow with the attacker and that's where it's going through. If this was, let's say, your ISP, so this is you at your house as an attacker. This is your ISP's router. Does the ISP know what IP address you got? Yeah, they gave you that IP address, right? The attacker knows, the ISP knows exactly what your IP address is. Could they drop that packet? It makes sense, right? Why would they let you? They know exactly what your IP address is. Why would they let you send a packet out of that spoof? But many ISPs don't. So why? You're about to do what you want from the attacker. You're about to do, and then they have to police it and that's where it comes into view. They don't police it so much. Yeah, so maybe that puts them in the role of like trying to decide what packets are allowed or not allowed, which they may not want to do. Is it legal to drop packets or to spoof packets? Yeah, we're just adding on to the thing that's like customs. I think people would just, like if they were to do that people would think that they're also reading whatever you're sending. It's just a privacy thing. Yeah, what about like you have to add more stuff here, right? You have to do more work. You have to keep track of for all your customers what IP address range is and who they have to do. Maybe you have to actually implement new equipment or technology or whatever that could raise and fail, okay? So there's also interesting business reasons of why you wouldn't want necessarily new business. Anyway, so very few places actually do this. It's called the egress filtering. So filtering out packets coming out of your network, but the source IP is only in your IP address range. It also doesn't necessarily, so we're talking about depending at the ASU level, I mean sure I can't spoof my packets as coming from some other network, but if this was a huge network in here I could spoof my IP addresses coming from any of the other internal IPs and the packet still comes out and nobody knows that I actually sent that packet. All right, cool. Another type of attack that we can look at that has the analogy in IP is hijacking, right? So we want to, so in this case let's go briefly over DNS. The whole parts of the internet was its job. The way it names two IP addresses, right? So you go to Google.com. We already know we've looked at exactly how the internet works. Google.com is useless to the internet, right? You cannot route an IP packet to Google.com. What do you need to route an IP packet? An IP address, but you need something that maps this domain name Google.com to an IP address. I'm not connected to the internet. Let's do it now because I want to show you this briefly. Okay, so you need some way to get this information. Think about this from a security perspective. So if you were trying to go to Google.com, what's the stop you from? So you wanted to go to Google.com. You're going to use DNS to say that, okay, there's Google's IP, but what if I actually am able to trick you as an attacker to go to my IP address? What can I do then? Intercept your packet. I can intercept all the packets you sent me to Google. What else? I can send you to a different web page, what else? It doesn't seem like sending you to a different web page. I'm like, have you been here talking credentials? Yeah, maybe not even a different web page. What if I showed you exactly the Google.com login page? And then you want to roll bar at the top, says Google.com because that's what you put in. And the login page is saying, oh, you're logging my Google account. So I can use a password, can enter that I sent to me as an attacker, and now I'm still on your Google username and password. So the security here is really important of mapping domain names to IP addresses. And DNS essentially uses UDP to do DNS queries and then give you the response back. So this is, I just ask what's Google.com and I got this IP address. So whenever your machine tries to do this, it's going to then ask, we can see what server told me this, 8, 8, 8, 8, 8, 8, 8, 8, because of I think some settings I have or something. Different servers, and yes, there we go. Different IP addresses back. Is that a good thing or a bad thing? This is .4, .174, this is .6, .78. Oh, it's in the same network. How do you know? We don't know the method. Yeah. Do you like some sort of load balancing or it's made sense to have a server on a short plus? Yeah, so the other thing is that it's very complicated, right? So Google can actually decide based on where you are geolocated of what DNS, what IP address you go to. So this may be an IP address on the west coast somewhere that gets us there closer, whereas if we did a DNS request from a different location, we'll get a different thing because Google has, again, right, it's just how do you get to Google.com. Google has a bunch of servers all around the world and they can figure out where to wrap your traffic internally within their own network. Anyway, it's nice to say it's very complicated but you would not want an attacker-controlled IP address to show up. Yeah. So how is something like this distributed? There's so many network-hard domain providers. How do they all sync up? So it's like a hierarchical level. So usually when you join a network, you get an IP address and you get a DNS address, which will usually be your router. So most of your home routers run DNS on there. So basically you ask that DNS server, hey, what's Google.com? If it has a cached result, it'll return it. Otherwise, it'll ask you that it's up strange whether your ISP is DNS. What's Google.com? If they have a cached response, it'll return it and then it'll go all the way up to what's called the root DNS queries. I don't really know exactly how it works but yes, there's a lot of redundancy up at that level to get and answer DNS queries. And there's different ones for .com.net. All the way. Cool. Imagine now we have a situation where we want to pull off the attacker we just looked at. So the client is making a UDP request for, hey, a DNS query to say, hey, what is the IP address of Google.com? And we want to be able as an attacker to spoof and hijack that reply. So how do we do that? Say again? Who replies to the request when you ask for what Google's IP is? So the server replies. So here, in this case, the server's the DNS server. So the client is asking the DNS server. What's the IP address of Google.com? So Google's server, is you're asking for any server? That doesn't matter for this case, but it could be Google's server or it could be our local DNS server. Question, how would the attacker know that the client's infected with UDP requests is not going to pollute the server? Exactly. That would probably similar to what we're talking about earlier. Just spam, send the message from the DNS server we think you're asking and say, this is Google's domain. This is Google's home. This is Google's home. Just spam that over and over again from whatever we think we're going to ask and wait for them to ask and then receive it. Yes. Let's look at something real quick. Okay. What does this UDP request look like in terms of headers, not the actual data? Right? So UDP has two important fields What were they? Source AP. Source and destination ports. Yes. So source port and destination port I should just do UDP port and S port but it doesn't matter. Okay. So, man, what's the UDP port? I'm going to go crazy if I'm wrong. I know which is a a pretty great one. Let's do that. Me here. Cool. All right. This UDP request. So, one key question is how does the client know when he gets a response back? Response back has to go back to the port of the center. So, there's just like IP addresses, IP source, IP destination. When you want to reply back, you just flip both of those. So, you say that, okay, great, this is the and then there's source IP, destination IP. So, fundamentally, this was just mentioned, if we don't know this request is made, well, what's the one piece of information that we don't know about this request? So, the thing about this, do we know the destination IP against the server, right? We know the server's IP. We assume we know the source IP of the client. We don't know. What about the destination port? DNS runs on the same port. I'm going to look that up. Got to tell one of you to do it. 53. 53? Okay, great. So, yeah, so, the destination port's going to be 53. It's DNS. It needs to be that. So, we know this part. What about the source port? Who generates the source port? The application. The application. So, yeah, for the, I guess technically the OS of the client, for all extensive purposes, you can think that the client chooses a random source port in the range of ports. 65,000 possibilities to the 16th, roughly. And so, how can we create a reply without that information? Could we guess? 65, 16 minutes, a lot less than brute-forcing seven-character passwords. Oh, yes. Yeah, a lot less. But you also need to get it right. But the easiest way is, what if we get a copy of this request? Right? How do we do that as an attacker? Convince a client that you are the server? We don't necessarily have to do that. I mean, if we did, yes, we would have to get it, but what else? Convince, like, where a mandatory, like, hop. Yeah, so, if we're out of any of the local networks between each of these components, right, or each of the client or the server, and we do, for instance, an arpine mapping, right, then we can get that traffic to flow through us and we can see this UDP request. Then, we need to create a spoof UDP reply that gets there before the server's reply. And now, again, the interesting thing here is that when the client gets this UDP reply, how does it know that it came from the attacker and not the server? What's that? It doesn't. It doesn't, right? There's fundamentally nothing here for the client to be able to tell which is which. Please. When the attacker sends it, does it say it's source site UDP? Say it louder. So, when the attacker sends a UDP reply back, does it pack and say, it's source site UDP is the server? Yes. So, yeah, just like the spoofed instance here in the sense that we're hydracking this communication. We still need to spoof this UDP reply so that the, so exactly the opposite, let me not exactly the opposite, but flipping around source and destination for the ports and the IP addresses for that UDP request, which is essentially exactly what the server would have done, right? And so, here we're able to spoof this reply and now we've essentially, in the case of DNS, now we've tricked this machine into thinking that Google's IP address is somewhere else. Maybe we have need control, right? We've actually given the attacker's IP address now and now they've connected us. They think the user thinks they're going to Google.com but they're really going to us. Yeah. Wait, so, if you're an attacker, in order to get that UDP request initially, you have to be on some local network. Either the client or the server or any of the hops in between. So, you could just span, effectively span replies, finding all the different combinations or does that just come on Facebook? This is more sure to work. So, yes, I would say it's potentially unfeasible. It's also very noisy. You're generating a lot of traffic because you're not sure exactly when they're going to make a request. It's different if you could maybe induce and trick the client into making a request that you can then inject. All right. Yep. So, the client needs to be expecting your response in order to accept the request. Exactly. It's not like ARP where clients are constantly listening for ARP replies and updating their internal cache. Here, unless you make a UDP request, you're not expecting a reply. So, if you just got a DNS response out of the blue and say, well, forget this. I'm not waiting on anything. I've got nothing. No application is listening for this reply. Yeah. So, the attacker must get a copy of a packet. So, they either need to guess it magically, or get very lucky to guess it, or they get a copy of that UDP request. Yeah. I'm a little confused on the cost of the ports and the client side. It's like a simple computer.  It's like four. So, AI is saying, what's the difference between a client and a server? The client is just one that requests data and the server gives it. Not necessarily. I mean, the client is the one that initiates the connection. But in terms of establishing communications, a client could both be a server and a client at the same time. So, there's no real reason to restrict it, in that sense. I think it'll make more sense when we look at TCP and what's going on. It also... So, let's say I'm making a thousand DNS requests to this server, because I've just opened up a web page that's got a bunch of domain names that I need to go resolve and then get IP addresses to go fetch. I need at least a thousand ports to keep all the replies consistent between each request. So, it gives you flexibility in that sense. I'll need over perhaps 2,000-5,000 UDP requests open at one time, but that gives you kind of SOL on that point. Yeah. We've got two cool questions. So, how often would the client then resend a UDP request to check, or, like, refresh their IPs on there? So, like, how often is the attachment going to have to continually spoof that UDP? It depends a lot on the application. So, actually, those DNS entries have a T... Anybody set up a DNS before? Like, on GoDaddy or something like for domain? Yeah. So, when you set up the IP address there, you can set up the time to live, like, the time that that DNS response is valid for. It can be as short as minutes or it can be as long as days. So, it depends on... So, if you're an attacker, if you really want to poison their DNS response, you would set a huge TTL that says, keep this for weeks or as long as possible. Or, you could take another tax that says, do it for a very short duration so that I can scan you once and there's no evidence of it. You're back to talkingtogoogle.com. So, you kind of go both ways. But, yeah, it's really application dependent on what specifically you're speaking of. The fault is that if the client is expecting the attacker to be Google.com, right, wouldn't the attacker have to provide content from Google.com? So, like, you can't just... Yeah, but how do you get content from Google.com? You just, like, forward it over. You can forward it over that way one way or you could just go to their web page, download, like, you can go to the web page, file, save as HTML, you download a copy of that website. You can then serve that to other people. You can then put it there at Google.com. Yeah, it kind of knows exactly how you want to do it for your particular scam. It can just connect to you and then get no content back while they think you're Google. Exactly. Yes, exactly. That would be silly. So, this is why, and this is just, like, we're getting there of, like, why do we need HTTPS? Because that is what actually validates that it's Google.com. With HTTPS, we're asking when we make a web request to any machine, we're saying, okay, this is essentially true that you have the private key of Google.com. And in this case, even though I've been able to trick someone into going to the attacker, the attacker doesn't have Google's private key that can't impersonate Google. So, is HTTPS used on top of UDP or is UDP kind of just not used anymore? UDP is used in DNS so it's used all the time. So, if you go to the web page and you're typing an angel name, that's UDP that... So, HTTPS is just on top. HTTPS is on top of UDP but the same concept here. Connections and everything. Cool. Okay. So, if it is real, if you, like, if you're rerouting the attacker to take your Google code and rerout it to the attacker, it's a complicated question. So, I think they're going away from there's a header that you can set that basically says no HTTP, only HTTPS. So, I believe in the case of specifically Google.com they use that header so it wouldn't even allow you to go to the HTTP version of the site.  So, yeah, you would be hopefully blocked from visiting their site which like Google put so much effort into doing that. Because this happens all the time. Do you have two different versions of the HTTPS? Yes. It actually comes back to ports. So, on TCP port 80 is HTTP port. HTTPS is 443. And so, that tells your browser which one you want to use. A little bit, still on the same topic. Do we talk about... networking into a bank? No. The last place? I mean forever this attack. Oh, yeah. Yeah. We did, right? What's the first step? Watch a lot of movies and then the second step. What do you learn from those movies? Gain information. Gain information, right? Reconnaissance. So, similar thing. We're talking about network applications. So, from a security perspective. In other scenarios, let's say we're a pen tester we're trying to break into a company. So, we know what IP addresses they have available. We're interested in one specific machine. So, there's some machine there. We... conceptually... So, we think about it. How do we... If we're not on the local network of this machine or somewhere else we know there's many hops from us to X. How are you trying to break into that machine? We're in one of the switches but we don't control these switches. These are ISPs in between us and them. We're not giving permission from the ISPs to try to break into their devices. So, it's a company that has given us permission to break into... one of the hops. Like between two hops. Yeah, I don't want to man the middle anything in the middle because I don't have legal permission to do that. So, I want to avoid jail. Conceptually. Okay, so... There's a server. What's happening on this machine? Machines, right? It's available directly on the internet and that's not in the address. It's probably talking to other machines. What is it talking? 1's and 0's, I guess it's technically correct. Yeah. UDP replies. Would the server ever send requests? Maybe. Who knows? What kind of server is it? What types of servers aren't there and what type of server is this? FTP server, how do you know that? Okay, so FTP is one type of server. What else? What's going on earlier? DNS? Web? Web server? Right, HTTP, web. Maybe it's a file server, NFS. Could be a mail server with... Yeah, something to be... I'm at RPC. RPC? How do we know which one it is? And in fact, more deeply, what does this mean? So if I say it's a web server, what does that mean about that server? So if I told you this is a web server, what does this mean about this machine? Yes, I'm not just saying that. Web software that is listening on those ports that are talking like the web protocol. We'll talk about that for now. So there are certain ports that correspond to web. We actually just mentioned them 80 and 443 53 21 23 23 Put that down. 21 Is 20 telling that? I don't know these ones, so we can just like that. So in each of these cases, you have a program running on this machine. So this is an FTP server. There's a program running on this machine called FTPP that's listening on port 21. And it doesn't matter at this point that this is TCP or UDP. We'll get to that in a second. So how many possible services could be running on this machine listening? It was 2 to the 16th, right? Minus 1, maybe? I don't know. I don't think you can use port 0, but I'm not 100% certain. So how do you know which one of these services are running on that machine? So actually we had a better question. If we knew that FTP was running on this machine, could we use that information to maybe break into it? We look and try to find out, identify what FTP server is, like what version of software is, are there any known vulnerabilities in that, and then we could launch an exploit against that FTP server that has local access to this machine. But we're missing a step. So how do we go from random machine on the internet that just exists somewhere to knowing, oh, this is an FTP server and a web server? Could you just send requests to all the ports so that they don't reply? It's not a news? Yeah, so in some sense we need to know what ports is this machine listening on, right? What? And specifically when we say listening, we mean not necessarily well-programmed, but of the programs running on this server or this machine which ones are listening to which ports and accepting connections. Because if we can say, oh, this server is listening to port 21 and it's port 53, then we know, oh, it's a DNS server and an FTP server, probably. Does that make sense? So this ability to be able to tell from a remote machine what it's listening on and what it has available gives us important essentially reconnaissance and intelligence about what's running on that machine. Yeah. Yes, that's already working. But we need to know how that works. That's just a tool. So essentially what we want to do is we want to be able to run this called a port scan. So we want to be able to scan the machine and determine what, in this sense, UDP ports are open and what are available to be listened to. So, we had one idea where we send UDP packets to every port and then what? It's a ladder. If we get a reply back, then we know it's open. What if we don't get any reply back? Yeah, maybe it's slow. Maybe we didn't send the right request. So this is one of these interesting things where there's different tricks and techniques of different types of packets that we can send and you need to be able to distinguish between the cases where nothing is listening on that port or something is listening on that port. So one of the ways we can do this is a zero link. So it's actually the inverse. So rather than see what replies we get, we send a bunch of packets and we receive, so there's an IP message that another machine can tell us that that port was unreachable. There was nobody there. So what we do is we send a UDP packet to every port and we see where do we get these port-unavailable messages back and then those places where we didn't get that message, then we will assume to be available. This is one type of UDP port scan. You can scan this whole range and then we can tell which ones. Of course, and this is where it gets really tricky because depending on the specific machine it may have different limitations. So for instance, on Linux you get 80 messages every 4 seconds of this port-unreachable. So you can scan at most 80 ports every 4 seconds and so you have to do this very slowly to test this whole range. So what would you do in that case? Okay, one way would be do a lot of machines and do it at once unless this is a global limit across all connections. What else? The only target ports that you really care about? Yeah, so just like password-cramming, you want to target the most common ports first to see what's on there and then maybe if you have time you scan all the rest of the ports. Other ways would be maybe there's different techniques you can use to detect UDP ports. We're not going to go into all these techniques. So as mentioned there are tools that you can use to best say, second best on ITCP done in terms of usefulness of network analysis tools is NNAP. So NNAP will in this case the dash S capital U scan means scan for UDP on that specific IT address. So this is that scenario we have a target <IP_ADDRESS> scan it for UDP ports. Did we specify the range of ports to scan? No, we did not. So by default NNAP has this limit where it's only going to scan so it scans the 1,445 ports and so it will show you that I found port 137 UDP open that is usually the service NNBIOS port 138 that is another NNBIOS and so it will tell you that it scans this. So you can use this on your own devices to scan to see what services are running you might be surprised as to what's running on there for printers or other weird things on your network so you can see what's running there. So this would be a local IT 192.168 network is a local IP address so this would be a local machine on the network that we're trying to figure out what's running there. How do we get to the server? Oh, same you just put there IP address and you'll scan it.  I think it's so port scans are very easy to detect because you need that response back so you can't exclude your IP address you need to know exactly what your IP address is they are very easy to detect because you make in 4 seconds we made a 1,445 UDP request right that's very easy to detect I'm not a lawyer my opinion would say that port scanning is illegal it's just not friendly if that makes sense imagine in your neighborhood or if you live in an apartment complex if somebody is going around jiggling handles to see which handles are lost technically you're not going inside so you're not breaking any laws but if you saw somebody doing that it's like that's not good that's sketchy so I regret doing this only on stuff that you know and have control over and permission of is my general recommendation what if you came into a VPN still the same thing still it's not nice or friendly or would they just would the server just get a VPN address there's no actual connection to where it came from yes unless they really wanted to press charges or whatever they could subpoena the VPN somebody could subpoena the VPN and say who was using this at that time and then that would link back to you to the server just to know you're doing this and be like we just don't want to talk to your ad address anymore possibly, yeah this happens not necessarily here but in other cases so like when I was doing my PHD I ran a crawler that was trying to download all the apps on the Google Play Store and I ran it from our labs IP address and then Google banned our lab type address so nobody with an Android phone could update apps or do anything for like a week while we were still banned so yeah similar concept but yeah yeah routers complicate things so we haven't talked about them yet so in this case we're assuming everything is publicly available but yes if you plug your machine directly onto your network most computers won't have anything shouldn't have anything accessible or running but you can always change that like you can set up SSH servers you can SSH into your laptop all this kind of stuff so it's possible I'd say unlikely other interesting thing I'll mention here is when you're doing a pen test you should specify the entire port range because you never know what could be running there so when I did a pen test at a company we scanned some of their internal networks and saw that on one of their servers they had the IPMI port open on their servers which means that that's the management portal port and through there you can upload a kernel so we investigated this I got super excited and then we talked to them and showed them what we found like upload a kernel so you can get access to their system and get onto that machine and they said oh that's our credit card processing machine please do not touch that as a live server and they were really pissed because they had people that were running scans of their network and they missed it and it's because they didn't set the flags correctly to scan all UDP all ports so port scanning is not necessarily a bad or good thing organizations use it internally to identify what ports are moving on what services which is a really good thing any questions on this moving on to TCP alright so TCP is similar to UDP a transport level protocol so it still has the concept of ports so that's why we start with UDP UDP is a lot simpler but TCP adds on a lot of nice features that we want specifically it is connection oriented so we can have a conversation with another side it is reliable in some sense where not necessarily that it can guarantee delivery if your wifi goes out it can't guarantee that your packet gets delivered but you have two programs talking on the network one side will know what the other side has received its data so that's in the sense of a liable it also means that you get no duplication no transmission error errors and the other side gets the data that you're sending in the correct order are these good things? very good things if I send you a request to say hey give me google.com I don't want the package google.com give me and the other side says I don't know what you're talking about go away we need to be able to have send data from one side to the other and the other side gets that in exactly the same order that we received it so it provides the port abstraction it's a really critical thing TZP is a two way street once we establish a connection both sides can send data to the other the important concept that specifies this connection in this idea of basically a four tuple source IP, destination IP, source port destination port which is kind of similar to what we talked about in UDP if you send the packet out and you're listening on a certain port for data to come back so similar here we'll see different concepts of TZP of okay establish a new connection to that machine then once a connection is established either side can send data and either side can tear it down and the entire reason why you know that you're talking in the same machine is this four tuple of source IP, destination IP source port, destination port both sides can talk this is also called a socket four tuple cool let's dig into the details because this is a very interesting to look at this so we have again source port destination port makes sense these are the same size it would be very weird if they were different we have the same transport level protocols we have next so think about this conceptually is TZP offering more than UDP connection oriented in the library no duplication that's all stuff that we had with UDP we had potential loss, potential duplication all of that so in some sense it makes sense that they're less UDP had source port, destination port that was it so we would expect that TZP has additional information because it's doing more in that sense it has to have some way to deal with this and to get that you can't get that for free of reliable communication and we'll see the mechanisms of how that actually works but we're going to first look at the detail of the header and then we'll come out to see how that works so two important essentially maybe one way to think about this is like a bookmark or is that too old of a term is anyone never seen a bookmark in a physical book bookmark or do you feel super old what's a book? it's the thing you print by the kindle okay we even know a place in our communication right so both sides need to know where they are in communicating just like a where the bookmark saves your place in the book so that you can go back and you know exactly how far you've read and how much you still have left to read similarly, we need two different important numbers here a sequence number and an acknowledgement number that are both 32 bits those as we'll see are ways of essentially specifying where our place is and where we think their place is and we'll see specifically how that works lengths of the header, some reserve some flags windows are interesting we won't go into them but basically you have this for now checksums, so again we're using checksums to make sure that we don't have any weird header options padding, data any questions on the format here we don't have to go into every detail here so you think about it like UDP plus right so we have UDP reports plus additional information that's going to let us establish communication and just like before we have our TCP packet with the UDP header TCP data with the TCP header encapsulated inside the IP data with the IP header encapsulated inside Ethernet on every top hole okay Alice is here Alice has the IP address of Alice what kind of server do you want Bob to be how about just a regular web server what was that mail server I'm sorry I already picked I don't have the ports okay so Alice and Bob so Alice and Bob Alice has the IP address of Alice Bob has the IP address of Bob we know how to get IP packets from one to the other so we touched on this a little bit Alice is a client she wants to initiate a TCP connection to Bob and you can go over DNS a little bit how did let's say she went to mob.com in her browser IP address so Alice's machine needed to use UDP to ask a DNS server what is the IP address of Bob.com it says oh IP address of Bob so now Alice knows the IP address of Bob that she wants to make a connection to Bob it was established that connection so we have Alice needs to send a packet to basically tell Bob hey I want to initiate a connection it's sometimes special because Bob needs to know is this part of a communication and are you guys with Alice is it not so we need some way to tell Bob hey I would like to start a new connection and so IP level we know this packet is going to be sent from Alice and Bob what's the source IP of the destination IP IP of Alice and the destination IP of Bob IP of Bob great now in the TCP packet what is the destination port yeah HPDP so it's going to be port 80 and the source port so just like UDP Alice is going to create some random so it's going to give me a 3 digit number and that is 999 Alice needs a way to say also needs a way to tell Bob hey I want to establish a new connection with you so this is through there's a number of flags that we saw in the header this is through the send flag that says I would like to establish a new connection with you then so okay the goal of this protocol is that both sides so then Alice can start sending data to Bob probably would seem like that idea why because Bob needs to respond to that and confirm the connection yeah Bob may not be listening on port 80 there may be no application listening on port 80 Bob may tell Alice go away I don't know what you're talking about so to send a bunch of data before you actually know if anybody is there listening would be very rude and a waste of network bandwidth so now Bob gets this packet is Bob listening on port 80 yeah it's a web server listening on port 80 great new person who wants to talk some web to me awesome so I need to reply back to Alice and say that I would like to establish this connection so then what is Bob's packet going to look like so at the I.T. level because that's to be the same thing but flip so I.P. so source I.P. and destination I.P. is what's the source I.P. I.P. I.P.B, I.P. and Bob and the destination I.P. I.P. I.P.A I.P. and Alice and then okay great so then we have source port B and the destination port 365 cool so think about it from each of their perspectives right I.P. at that point when she sends this packet again remember all of this is using I.P. there's absolutely no guarantee that packet ever gets to Bob right that packet gets to Bob he says great I would love to talk he sends he does some knowledge this is a sin act so it gets a sin request sends back a sin act so now when Alice gets that packet what does she know she can start talking right because Bob has acknowledged her packet right she said a packet Bob responds and says yeah that's good let's start a communication so can she start sending data from Alice's perspective but what about from Bob's perspective yeah so he doesn't know right so if you look Bob got one packet to initiate the connection to sin packet replied with a sin act packet back to Alice but now he doesn't know what's happening he doesn't know if Alice is okay with this communication maybe Alice went away maybe the wifi dropped out he has no way of knowing that this packet actually got sent to Alice so what does he need yeah so he needs an acknowledgement to his acknowledgement right and then at that point both sides have confirmed yes we are good to talk both sides have agreed to it now they can start sharing data and actually communicating so where does the concept of a sequence number come in so we'll get to it we're going to get to it right now so now we need the final packet so we've already used sin we've already used sin act it'll just use an act we'll get rid of sin source IP source IP is going to be IP of Alice then IP of Bob source port source is 365 destination is 80 so now when Bob gets this he knows oh and then sorry and then an act so this is the super important I mean from networking this is like the key to TCP is understanding the sin act act three way called a three way handshake you need to send three packets back and forth before the connection is actually established and then at that point you can communicate now with the web or wouldn't it be more common for the I guess Bob in this analogy we probably talk first after the communication because we have to load the web agent before you use the sender to take so practically we can use Bob in a sense to do that first no so the way ACD viewers is the client says I would like to get this URL because the server needs to know what URL you need to get so there's an HTTP request that the client sends and then the server sends back those ones okay cool every good sin act what does sin do the very first packet so that's the to initiate the connection packet that's the very first one so like SYN and it's named after the flags that are set in the TCP packet so we can look at one example here so now we have this problem of so we've established this connection and so when Bob receives a packet now how does he know that it's part of this connection Bob receives some packet he has multiple connections with multiple people how does he know which connection it's a part of we have a unique identifying for tough source IP destination IP source core destination for so that's how what it enables Bob to figure out exactly all the different kinds that allows Alice to make multiple requests to Bob right because she'll have different source ports and each of those communications will be different so if you add your web browser it will be a different source port from you exactly even yes it can get even more elevated alright so now we want to exchange data that's the whole reason why we're here Alice wants to send some requests to Bob so Alice can now we know everything I'm going to ignore the IP information 365 destination for 80 get for instance that would be the very bare bone I mean the barest of bones that Tom and I would usually request to Bob wants to reply to this Bob says great here's your web page another packet similar thing the HTML deport 365 however so Alice gets back to this page how does Alice know that Bob actually got this request because we go back to what we needed to do with TCP what do we want here a reliable string delivery service means no loss, no ordering, no transition errors so we want to be able to know what the other side got in our path so now we need some way for Alice to say for Bob to say hey I've heard you up till byte X so essentially this is where we have so technically okay this is where we're going to be I'm going to make it slightly simpler the Stephen Summers start at zero Stephen Summers are done randomly and incremented for roll over but that's not really important right now let's say we start at zero and we're going to send how many bytes in this 1, 2, 3, 4, 5 now Bob's going to do so for every packet that you send not either connection the acknowledgement is how many of your bookmarks how many of their bytes that you've seen up to acknowledging so this one when Alice received this packet Bob is acknowledging that he's expecting byte 6 right so start at zero read 5 bytes that means he's expecting the 6th byte so now if Alice is aiming more to send she can send that on the next one knowing for a fact that Bob has already received these first 5 bytes would you get the 5 bytes size for get get space slash oh god the size of the data that I'm trying to send so like for example let's take that for a second so let's say that this request never got to Bob it was dropped along the way this request never received a Bob but Bob is sending something to Alice so then what's the acknowledgement that Bob has seen up to zero but where did this zero come from we need to establish it in the in the three way handshake right so we need to establish what our starting sequence numbers are on either side so that we can know where we're expected to go we'll get to that in a second but now when Alice sees this acknowledgement from Bob of zero what does she know at this point yeah Bob has never seen I know that I've sent these 5 bytes but Bob never received them so I can re-send it which means doubling this packet let's say Bob gets both of these packets is this going to cause a problem so imagine a long strip so starting at zero where did these 5 bytes go starting at sequence number zero can we put these bytes here yeah 0 to 5 get space slash and then we're here so if I get 2 of these packets I can ignore them but I started at sequence zero so if I get 2 of these packets it would just overwrite itself yeah either overwrite itself or I can just ignore it because now I know I've read up until there so now I'm actually expecting sequence number 6 so anything before that I can ignore because I've read up to that we get this process and this happens both sides so every packet has both a sequence and an acknowledgement number and this allows either side to send that to the other and the other side to acknowledge where it received traffic where it's got tired from the important thing that we're missing here is the establishment of these sequence numbers so and this is actually something that I really love about networking so in this packet there will be an initial sequence number we'll call it sequence A so Alice's sequence number essentially and we'll get to why in a second she randomly chooses an initial sequence number 0 to 2 to 32 then Bob has to acknowledge that so Bob chooses first his own sequence number so the SIN comes in from Alice has her initial sequence number now Bob is going to reply back with a SIN act he needs to establish his own sequence number so he generates a new one of the sequence number, Bob and then he needs to acknowledge Alice's sequence number so does he one way to do this would be he's acknowledging the sequence of Alice so just put sequence of Alice and then in this part here what does Alice acknowledge so Alice hasn't sent any data yet so the sequence number is the same what does she acknowledge is not like this what Bob acknowledges is the sequence number of Alice plus 1 you don't include these packets this is just on setup which makes it very annoying so sequence number here 32 bits if I gave you a sequence number and I asked you a person would you be able to turn it into an integer specifically which byte is the most significant byte which byte is the least significant byte why maybe it's for this right so the end in this here actually matters which byte is the most significant byte which byte is the least significant byte to be perfect I believe probably the reason for that I think network is big indian almost x86 and everything is little indian so the interesting thing was they added this so doing this replacement of get data from this packet and then copy and paste it into this acknowledgment number it means that the other side knows how to speak the network byte order that you would expect so it's actually an interesting check that they added into here to say if you can add one to this number and I understand that you added one to this number we know we're both speaking the same indian in this which is the same for all of this networking but it's just that interesting and kind of historical thing so the acknowledgment here is the sequence number of A plus 1 and the act here is the sequence of A plus 1 and this should be the sequence of A plus 1 and then this is what they use going forward so this is their zero for this conversation and they just increment these numbers as they exchange data packets this is a nice service this is something that if you intercepted one of these packets of these three conversations and say I know a little bit about it but I can look at the four tuples that I've identified and I can look at their conversations after that you know they're at attack or something if I replicate that send it back but with a with a conversational place being like one thousand or a million suddenly it won't we really ignore all our packets and so you get above a thousand so it's going to just ignore everything for a little time yeah it won't be a really long time it'll time out it'll kill the connection as in not to restart long back there's another stuff that you can do better just as insidious okay we talked about the other flags so we talked about sin, act, thin is requesting to shut down one side of the connection so one side can say I'm no longer going to talk but I'll still receive data from you reset basically means we messed up let's start over from the beginning so I'm going to kill this connection so if I got that v-sync I think eventually it would be possible to reset it back up so this stuff's not important we talked about basically all this we have a three-way hand shape you can go through this example make sure that everything makes sense as far as sequence numbers and intelligent numbers we talked about the data exchange so here you can see that the client has sent 25 bytes with a sequence number 75 and the acknowledgement number is saying this is the next bytes that we expect and they sent 30 bytes so the interesting thing here that we didn't talk about is if you have nothing to send you still need to acknowledge what somebody sent so this is a zero byte acknowledgement packet where the server sent 30 bytes to the client the client has nothing to say but the server needs to know that I got received otherwise it will keep sending so this acknowledgement packet to the server now everyone knows exactly how much data has been sent and all the applications can process that data we'll go break this through shut down it's pretty easy it's not anything crazy the fin so you set the fin flag the other side says great we'll stop talking and then the server when it wants to close the connection sends a package with the fin flag and it sends it to someone acknowledges so this happens every time you visit any website any time you make any connection all of this communication happens so remember SIN and SINAC actions are the really important things for the networks


Realize you grew old with the wrong woman because she was a pretty face. There's two mating strategies Dr. Bust teaches. Long term, short term. From the day you're born as a man, always optimize for long term. Because when you optimize for long term, you'll still get the fun short term. But you might accidentally get a girl pregnant and pregnant forever.  Because that beautiful face, that's crazy. I've seen it almost take down every top man.


The Ilarian Zonal Command of the Economic and Financial Crimes Commission has arrested 13 Chinese nationals of offences bordering on illegal mining activities in the state. The Zonal Commander of the Antigraft Agency, Michael Nzikwe, disclosed this while addressing newsmen in Ilarian state capital. The suspects, according to the EFCC, include a female and 12 males who were arrested at the government residential area following credible intelligence about their activities. They were also bordering on allegations of illegal mining and non-payment of royalties to the federal government as required by law. They are 13 in number. If female and 12th male, they were arrested, like I said, for illegal mining. They were mining in areas where they didn't have license to. And they were also into mining stones for quarry. They also breached the provisions of the Money Laundering Act. They don't have a SCUMO certificate, they don't register with SCUMO, they don't pay royalties, there's no evidence of payment of royalties. Other issues are also being handled by immigration, you know, a sister agency. Of the 13 we arrested, we only five have their passports. The other remaining of them don't have passports with them, but we are also bringing the immigration to look at that aspect. As Nzikwe said, the development's potent great security danger for the nation, while also assuring the EFCC's readiness to constantly sanitise the mining sector in Nigeria. Illegal mining comes with so much danger. You know, there's the part of insecurity that this could lead to, especially in states like this. We'll see what is happening in Zanfara and other places. We're trying to also see EFCC how we can give our best to ensure that that sector is sanitised so that legal miners only can take over.


I'll tell you the struggles that these men go through out here and we have those two amazing content creators in the building. They'll be telling us about themselves, what they're up to and we just know how they came to be. So where do we start? Ladies first. John kindly introduce yourself. You tell our people when in nani, una tokawati, una fanya nini. Kamerako roi lepale. Hachani, te smile. Yes, yes, yes. It's a beautiful smile. Well, fine. My name is Joanne Waneke. I'm actress and a student at Dexter University taking a BA in electronic media. What else do you want to know? I think that's enough for now. That's enough for now. Austin kindly introduce yourself. My name is Austin Mugayu Mugayu. What do I do? I'm a stand-up comedian, I'm an actor, I'm a creative, I'm a director. I love to be a student. Although in Shamaliza I'm just waiting to graduate. I'm a fan of the arts and film technology in KU. Alright, so both of you are students. I don't know, I know the world in a change and people need to start hustling from a young age. So what's the kwa kwa joan? How is it that amount of money is balanced studying and doing your acting, creating content and just trying to find money in different ways? Well, I think it's about kujitoma. It's about pushing yourself kujitoma because it's hard to manage doing both because for me school is full time. But then in between I have to find time so that I can start doing my own things, kandona shule. So normally I choose classes on the rise. Not each and every day I have a class. Again I have spaces in between. Kuna classes any online is even in classes. So what I do when I have even in classes I go have my shoots at 5.30 when the class begins. Alright, and do you feel that whatever you're studying we must find electronic media? Will you apply that after you're done with school?  It's my career, I feel like that I apply. Because I did diploma in journalism same thing in yesterday's studies. Sosai na pandabeli too. Ah, mendo ki advance. You practice kidogo and it was really fun for me. So it's not something that I would wish to drop along those classes. It is what I used to wish to do. Like ever since I was a kid journalism was really fun. Is what you wanted to do. Ok, Austin, same thing for you. Koshule, miyura comedian, creator, emcee, nini, nini. How do you strike a balance between creating content, finding time for school as much as you should graduate? Kuz na jua content creation wu janza juzi? Oh, badu zdiya graduate. Chneza confuse mamangwa kiwa palego mahida. Na wu jania miya. So, ku balance ningumu. But though you have to create time wu jwe mostly ni kwa na fanya shoots usiku zi ninaeza. But then ni me shoot sklip. Mi yengia lafu bada yana zi yangali evi na sema ai yaki na kajia. Na shoot ten. Una have ku create time wu jwe when is jwa na available, when are other people available, jwa pii kitu ezi fanya pekiako. So, ya, you have to fix things. Lasma may happen. Lasma ujipangi. And do you feel like you will practice whatever you are studying after wu mesha graduate? Amma uli yanda shule nisha ni. Nipata degree. Niza zia wa chaneli ni. Zibu zibu. Na kumuka ni kisema ni kisema wu, before ni fanya ikos tu na juikos ni. Detach and film technology. Biskali ni pii avitu tu na fanya sayi. So, ni nilupu anbiya wasehub ni anbiya maadze na taku fanya dietach and film. Akha ni anbiya, eh dietach and film, ya ni ni ni? Kambiya ni mambu ya kuakt na ni mambu ya kamera ni ni. Kha ni anbiya, so is that your passion? That's my passion. Taku hi pasu akha kubaling. Kenak mambu anbiya anku ya angu na fanya mambu ya dietach anbiya pause. Dieta, yo mambu ya ikosawa. Mambu ya kushu. So ni, nika mambu ya anko si mambu ya hospitalin mambu ya kuakt anbiya kuakt. Si kuakt ni talent. Nika anbiya eh, but sasa lasmu advance ni ni. Apa ni anbiya, ah tutawana bas so ilikuwa ilikuwa strago kukonbin swase home ni ikitu ni kitu na zafanya so so ni piya ni kifana easy view tu ni kona ili ya ni kona ili kitu back in mind lasma lasma, lasma ni fanya ikitu ni piya ni kuwa inspiration kuwa wa sayi. So sayi wana semanini alisa sasa anko ya ako sayi ya na ona do you know, you know are they more receptive for more receptive sasa lakia angu nimeo na iyo kitu niko sawa but ni at least kuna support from my mam nasama masa angu juzia li ni call na iyo kulia unali yanga wukweli did you know story we want it we want it now now is now get him character get him character eh, like you that's your challenge for the day get him character do something sasa mimi ongilesha vibandio ni ni, ni, ni, ni ok tu na kukumbusha galdi malikata ku alkuja kwa kwa kwa kwa kwa ambiata pucho cha usi juin da fanya usi ni kumbushe yo story tapagani monona tu ongilesha a, a, a tu mi ni na kimi kumbushe yo story mistai iqwanahini kwa mika-kasi rika ay, me milia na misima nai, minia kaku liya utini angaliya na kaku liya noapi mohere na mati doon usi yunge mamu yon yon uti nusura ukasa liki Hey, in real life a, no no no he, pia neza tu on di in real life We are waiting for that day where we see you on a show. That happens. We are waiting for that day where we see you on a show. That happens. We are waiting for that day where we see you on a show. That happens.  So what made you decide that Joana Natsukakufa na kazi na Austin? How did this relationship come to be? This working relationship, let's make this clear. How did this come to be? Okay, mimi na Austin. We've been friends for quite some time. But then, sidwini niliko inafanya to see wakufa moja. But then, ilikwa yo specific day enye. Nimi na toka shule, nini na nika maliza klas. And then nika inasai doa nikuwa. So kilam sayakuna, I want to do these. I want to do these. And then sasa unadjua wa se ujua tu. Like si ujua na utadjua hi na ii na fit this person better. Ii na fit wii mungine better. Like these will do best in these. So that is how it happened. Austin na kasi na hei, situ chape. Stuka. Nandrevo sasa. Okay, what are some of the challenges maybe? I don't know how I understand the challenges of content creation. It's not an easy thing. Tuna nangatu video zuku. Ya me siya semaw ready. Sii video moja me shoota na una. Ii ewezi wa chani delit. Mibuneza mention, some of the challenges you have experienced doing content creation. And working with different people for that matter. Na jo, kama si simi na juwa. Di jineshkia na kuwanga ewi. Na juwa napata na eikila Saturday. Na juwa the other people I work with. Wuneza itu wakt na nani, wakt na nani. What are some of the dynamics kwa such? For me, time is a very personal knowledge comes to me. Na ei na kuwanga a challenge most of the times. Because utapata, my schedule is very tight. So like, miende mahali and we have a shoot. And then sometimes utapata, tuna maniza very late. Kuna, like in a few minutes. Aama na fani rauke mape ma, you know, like piya na zimani hak traffic. Teniki and a shule, most probably. Wuna pata yo time hai ingiya ni kabisa. Na wuneza wuneza ingiya kwa hau zine. Used to reena isha. So for me, sometimes, okay, most of the times, time has always been a challenge. Ku try ku hak, like all those things together. It's really a hard one. That's your major challenge. Austin, what's your major challenge when it comes to content creation? Major challenge. Na joa sayo ingiwa ma sayo, niku pata fitu wuneza wak nau. It is also a challenge for me. But mostly ku baku anguni, mi overthink. Bede, mi na kahaivi chini na angaliya, kaiiki tu saa ni mefana kia, ay, yei yei zi. So na pata na ni mefana vi tumob, alafu na sema, ay, yei apana, yei apana. So neza shoot, like, 50 videos, and then ni atil yei 25. Jiyu ya, ku overthink na ziri. Na watchivi na sema, ay, yei apana. Na watchivi. So na feel, na pata na ni me overwork. Ya. Kiki sema tu ni, ni partly nili choose, so anyway. Itabili ume over come. Ya. Itabili tu ni me over come. So are you guys working on more content per moja? Are you looking to work on more content per moja? Definitely. Okay. What are we expecting? Nezat patia, nini itina expecting? Ya. Jam. Jam. Angok. Okay. All right. So where can people find your content Austin?  Mo activities since I was president, so.boarding. Juna kubua Adat nila! Doy, youtube将 woneki n저 on moneki Like all my social media platforms I use my official names So it's really easy to find me So as you wind up maybe you can give a word of advice to young people out there When I meet ladies ladies who want na jua they ask you I want to be a presenter I want to be nini nini How will I do that? I have always told them Fanya bituzako, you know, shoot your videos and everything. We expect that everything will just be atyungojen malize shuleni nini. Jitu me kwanza miki. So what is your advice to young ladies who are watching you that wants to be in the media industry doing journalism and they also want to do content creation? Well, I'll be very honest. I'll tell them the truth. Kilam siya kuna dream, but this is it. Dreams will never work at any given point. Not unless you work. Like, kutam katu mejipata, you have to work for whatever you're dreaming for. And then hard work has always paid. But without giving up. Jupiyam siya kuna fanya a lot of hard work and then inafikaplesu na give up. So personally, I don't believe in giving up because nge kwa na believe in that, ege fkatu point nge give up kitambosana. But then what I can say, never give up on your dreams. And then they don't work unless you work on them. Okay, that's nice. Austin, a word of advice to young ladies here? To the young ladies here? Yes. Piawa uneza apega advice because I mean you're working with ladies here. To the young ladies? I'm single. Ah, I see. Okay, anyway. To anyone who is young out there, I'm up here old. Ile kitungumu nge wuja hanzo bado. So take a step of starting. Okisha hanzo iwi, iwi tu zitaji alain. God na kwa nga na, if you do believe, but there's God. God na kwa nga na, ni tango hachi. He has a way, he will place you somewhere. Ile kitungumu nge wuja hanzo. Alright, so thank you so much for coming through. I would have loved to endelena story. But that is all the time we had for you guys. I wish you all the best in your journeys and we hope to see you more and more. So yeah, thank you so much for coming through. Umeskia, kitungumu nge wuja hanzo and the dreams do not work unless you work. So you need to work and you need to start to say shindu kise mani na hanzo na hanzo. Just do it, just do it. So up next we have an amazing artist in the building, a gospel artist, David Prince. So stick around for that and remember to go to their social media handles and check out their content, support them, share them. It's really funny so do that.


the think tech Hawaii's law across the sea program. Today we're going across the sea to Korea to talk with my good friend Young Moo Shin, the managing partner of SNL Partners, a law firm in Seoul. Young Moo is very knowledgeable and very experienced lawyer. Among his many professional accomplishments, he has been the president of both the Korean Bar Association and the Inter-Pacific Bar Association. I've asked Young Moo to share his inside view of recent events and issues in Korea. Welcome, Young Moo. It's good to see you. How are you? Fine. Thank you, Mark. I'm very honored to be with you today. Well, thank you. I know you're very busy and it's early in the morning in Seoul. Yes, in the morning, yeah. So let's get started because I really want to ask a knowledgeable citizen of Korea, like yourself, about current issues in Korea. Let's first what has life been like in Korea, in Seoul, under COVID, under the pandemic? What is life and the practice of law like in Korea? That is the case in many other countries. Korea enforced, Korean government enforced very strict social distancing requirements. So face-to-face meeting was very limited, but lawyers normally came to office as compared to other employees, office employees, who had some distant working at home. And law practice has been affected, as you can imagine. Face-to-face meeting was very limited, and lawyers, we were not able to make overseas trip. That would be, you can imagine what happened here. Right. How's the economy? How's the South Korean economy? Korean economy was affected severely. Governments put a lot of money into the market. And as a result, we are experiencing very severe inflation because of oversupply of money, as you can imagine.  So it sounds like very similar to the United States and Hawaii, very similar government actions. Are the people of South Korea, how are they dealing with this? Are they holding together? Are they united? Are there divisions? I mean, we experience a lot in that in the United States. Some type of divisiveness as a result, political divisiveness. How is South Korea holding up people-wise? Yeah, we had experienced quite a division, greater division as compared before. In the past, regional division and generation division was an ideology division. That was the main division factors. But recently, gender division became more severe between men and women, especially on younger generation. I'm sorry, what does that mean? I mean, how does that affect people? Because of gender division, the rate of getting married is very low. Men and women, young men and young women, they don't get together very well. Yeah. And are we hoping that things get better? I guess there's still hope, right? Yeah, I think it's up to the government, the leader of the Korea. You know, I noticed that you were a founder of a group called Citizens Coalition for Social Justice. What was that about? Oh, let me explain the background first. I returned to Korea in only 1980 from the US after completing my advanced studies and getting some practical training at the US law firm. From my setup, I studied my own firm in Korea named Shin-En Kim, which grew one of the top three law firms in Korea in a short period of time. At that time, I was actually influenced by the US law firm. Shin-En Kim was the first law firm to adopt Korean law firms, adapting Western-style partnership arrangements. In that agreement, in order to be more attractive to younger attorneys in Korea, I made retirement age at 65, even including founder himself. I was founder. At the age of 65, I retired. After that, I ran for presidency of KBA, Korean Bar Association. And during the two-year term of presidency of KBA, I really enjoyed doing the different job, not law practice for profit or money, but for social justice in a way. Public interest really worked. I really enjoyed the job I performed at that time. That influenced me. Being a senior advisor to Shin-En Kim, I can do something more important thing for Korea. That's why I thought about forming an NGO. At that time, when I was younger, Korea society has more mobility, social mobility. Later on, it gradually decreased and lowered at the point where young people didn't have any free opportunity to compete for success. So, the first priority was to do the NGO called Social Justice, Citizens' Coalition for Social Justice. The first thing is to reduce corruption and the strengths and the rule of law in Korea to even the playing field, especially for younger generation. The second objective was to contribute educational reform in Korea so that youngsters can devote to develop their talent and to enjoy their lives doing whatever they really enjoy, you know, that goes to main objective, the goal of our NGO. But as you may imagine, I am quite frustrated because, you know, rule of law, we share this kind of backwards. Yeah, let me ask you about that because there was been a lot of news recently about South Korea's National Assembly stripping prosecutors of investigatory powers. What's that all about? I mean, is that what you're talking about? Yes, I include that also. That's the worst thing we have experienced today. What is that about?  And they are together with judges in Korea, they are the two important artists implementing very important part of rule of law. And as prosecutors' job has become more important, their power, exercise of power sometimes abused. That's the point where the ruling party wanted to limit their power. But they went too far. The prosecutors have two important jobs. One is investigation. The other one is prosecution, including attendance and ordinary at court. That those powers cannot be reduced or changed in order to maintain rule of law in Korea. But the ruling party and some of them were worried, worried about for themselves. They made some, many people in Korea suspicious about they wanted to avoid prison. Okay, so there's a self-interest within politics, within politicians, and they're worried about the prosecutors finding out some bad things they've done. Now, it's been mentioned that a lot of prosecutors resigned. Are there any prosecutors left? What's the status of prosecutors? Initially, at first stage, a lot of prosecutors wanted to express their resignation. But it was reduced gradually and only a few resigned. And most of them remained.  So they have four months, actually, they wanted to do their job efficiently and effectively during the four months. So they are very eager now to find out, investigate, and prosecute wrongdoings committed. I see. So the legislative act actually rebounded in a way that the legislators weren't anticipating. Of course, I wonder how it'll what the result will ultimately be. Yeah. I hope it will be normalized during this government or later when the majority of the National Assembly is transferred to the ruling party. Now they are possible to amend the law. Well, we'll watch that. That'd be very interesting to see what happens. But it sounds like you've got some dedicated prosecutors that, you know, are really looking to do the right thing. And that's, you know, that's important. Now, you recently had a new president, Yoon Suk Yul, elected. What's that?  Then what's what are his plans for Korea? He has a attorney general on the Moon's government. He, he stand up for justice. He didn't comply with some kind of pressure given by the ruling party or the maybe, maybe he not directed by President Moon, but she didn't follow the intent of the ruling party. So she got quite a respect from the Korean people in short period of time. She got suffered a lot, including some kind of sanction given by the Minister of Justice under President Moon, but he fight against it successfully. So in such a short period of time, a attorney general became a most favorite candidate for President. This is really a good lesson. This would be the first time forever in history in Korea. So he's now the president. And that I mean, what you're telling me is actually very hopeful. And it shows that that Korean people are really watching this closely and that they want somebody respectful and follows the law. That sounds really good. Yes, we are very encouraged and hopeful too. One of the things that President Yoon mentioned was an audacious deal for North Korea. What's that? Oh, that is if North Korea abandon nuclear arms, then South Korea will do its best to have North Korea be successful economically. And North Korean people will enjoy their lives. So it's a proposal. Has it been formalized or is it just that's what he's talking about? Orally committed. But it can be formalized depending on the progress of the situation. Now, President, U.S. President Joe Biden just was in South Korea and met with President Yoon. How did that go? How was that meeting? And how did the people of Korea look at that? It was great actually. The visit of U.S. Biden was timely. Only 10 days after the inauguration of New President. And Biden was very good in making a visit to Samsung Electronics Company and had a meeting with Hyundai Motor in addition to political gesture. He wanted to have both strengthened ties between two countries and give some influence to North Korean government by ensuring the national security of Korea. And economically, the U.S. and Korea will make more stronger alliance. So it sounds like Korean people felt positive about Biden's trip to Korea. It sounds like it was a positive step. Okay, that's good. And the issues basically economic and North Korea, that President Biden, those are important issues for President Biden to address for Korea. Yes, I see. Now, we had a prior president who had a relationship with Kim Jong-un in North Korea. How did the citizens of South Korea think about that, President Trump's relationship with Kim Jong-un? Most Korean people, Trump's effort was not fruitful at all. He was deceived by Kim Jong-un in a way. And his approach was unrealistic. Ah, so he got fooled. He got taken advantage of and he didn't see, and that's the Korean citizen's viewpoint of that. Former President Moon tried to obey Mr. Trump to be a friend of North Korea. I see. It's leaving him. North Korea doesn't have nuclear power, nuclear energy and even if it has, in the process of developing it up to final stage, we can persuade successfully North Korean leader to abandon it. But that's not the case at all. Well, I mean, what do the people of South Korea think about North Korea's goals and strategies on the Korean Peninsula? Do South Koreans believe that North Korea will be a friend or use nuclear weapons? What is the viewpoint? We cannot exclude the possibility of North Korea using nuclear towards South. You know, so we have to be very careful. North Korea cannot compete with South Korea. North Korean people in general are the same as South Korean people, basically. Only the leading group, they enjoy quite a privilege and wealth. They are enjoying their lives under the sacrifice of the general public in North Korea, you know. Yeah, so the privileged few of North Korea take advantage of that privilege. Yeah. I see. And do the people in South Korea ever believe that there will be reunification? Or do they really want it? I mean, what's the reality of that picture? Reunification? Yes, no. Do they really want it? Eventually, we will be reunified. We don't know when it will happen, but most Koreans still want to have Korea reunified. If reunified, Korean people will be out of any threat of war. You know, we can develop more efficiently nationally. North Korea has quite a labor, young labor, South capital and technology. So combining it will be very much better. So it's still something that is hoped for the future and bringing the people together with their different talents would be a great thing for all the Korean people. That's what I hear you telling me. Yes, yes. Only the leader of North Korea doesn't want to do that, to enjoy his regime. So there has to be some sort of change in the leadership. And you would, the people of South Korea would welcome reunification on the right terms is what I hear you telling me. Basically, yes. But the younger generation has somewhat different view. Some of them, oh, we, if we reunify, we have to give a lot of economic assistance to North, then we are suffering. We should just get suffering. That is some of the worry younger generation have. But that's the majority, I think. There's still a long way to go, sounds like it's still a hope for the future. Yes. Okay. And it's something that most Koreans, you have this hope, but they realize realistically it'll take a long time. Yeah, I think so. The average North Korean people will be hopeful for reunification because they can be better off on the reunified Korea. The life-living standard will get improved. Let me ask you about North Korea and the COVID pandemic. What do we really know about it? Do you know anything more about it that's happening than we do over here? No. North Korea is a very peculiar country. No free-flow information at all. So we don't know anything about what's happening exactly there. We know there is a COVID. It has acquired an important thing for them to cure. But they don't have good facility and medicine, inspection, equipment, etc. But South Korea has offered to help, right? Yeah, but they didn't say anything yet. No answer yet. Is that a possibility you think, or is that not going to happen? Depending on the progress. They are receiving quite a few assistance from China. If that turns out to be not good enough, then that time they will ask for Korean South Korea to give some help. Do you think they're afraid to do that? Do you think they're worried that if they ask for help it'll make them look weak? They didn't say anything yet. I see. Okay. All right. So that's still out there on the table, possibly that could help to bring Korea's more friendly relationship? Yeah. Now, we have about a minute left and I'd be interested if there are any Korean words of wisdom, like a Korean motto or something from Korea that you could share with us today? A friend is a true friend in difficult times. As we experienced the Korean War and the U.S. led the alliance to help Korea to overcome the war and recovery thereafter of South Korea, we believe U.S. is really a good friend of, true friend of South Korea. And that's Korean words of wisdom? Yes. How do you say that in Korean? Okay. A friend, a true friend is a friend of a real friend. I'm sorry. Say that one more time, please. And in English? English, a direct translation would be a friend at a difficult time is a real friend. I like that. I like that motto. I like that words of wisdom. Thank you very much. Oh, thank you. Young Lucian, I appreciate your time and sharing your knowledge with us and your expertise. So look forward to the next time we can actually see each other in person. Oh yes, either in Hawaii or in Seoul. That'd be great.


Hey guys, it's Nate, AKA the Foot Accountant. Welcome back to the channel. Today we're gonna be talking about new features inside of FIVA 21 Ultimate Team that are going to affect the market. And I haven't heard a lot of people talking about this. So this might be one of the more important videos to get you ready, get your mind right, and get you thinking alongside how the market could be reacting early on and throughout the rest of the year in FIVA 21 Ultimate Team. But there's some stuff that they added to the game this year that obviously we haven't got our hands on yet because we are still eight days away from that web app, almost that EA access timeframe, the time is getting shorter, the days, the number of days is getting lower. We're almost there boys, right? Hold on. But there's a lot of stuff people aren't talking about and there's a lot of market impact that I think we're gonna see from some of these changes that they brought into FIVA 21 Ultimate Team. So we're gonna talk through some of those today. A lot of this revolves around the way that FIVA has really been going in the past two years, specifically the second half of FIVA 19, all of the FIVA 20, and I think it's gonna happen a lot again in FIVA 21 is just the amount of content that we are seeing, the amount of rewards, there's more rewards every year. There's more game modes every year, more opportunity to get better rewards every single year. Even if you don't think there is, honestly, there is. Every single year we've gotten more rewards, more options, more content in terms of gameplay even, and of course promotions and cards and packs and all that kind of stuff. But what I wanna talk with you guys about today is specifically division rivals and squad battles, the changes to those rewards, and especially the tiered amount of coins that you get for each division. When you even, when you play your placement matches, this is big for the first couple of weeks of foot, the first week of FIVA Ultimate Team, EA Access. This is gonna have market implications for this timeframe. So that's why I wanna talk about it with you guys today. We'll also talk about the new team events and the new Top 100 or Top 200 rewards because that's gonna affect the market as well. So let's talk about this really quick. A lot of you guys have been asking me about this and I wanna talk about it, right? Promotion Coin Rewards, that's the biggest thing that's going to affect this market in FIVA 21 right off the bat and this is why it's going to impact it. Well, first of all, you can now qualify and get your placement matches for division rivals through squad battles. You can play a full 30 matches in squad battles. Now, if you're trying to figure out what you're gonna be doing in EA Access, if you're gonna play squad battles, if you're gonna play division rivals and stuff like that, this is what I would tell you, right? I would play division, I would play squad battles up until Sunday rewards. Play as many squad battle games as you can, use your 10 hours on that. I think, I mean, if you can play how many, I don't even know how many squad battle games that you can play in one day, but I think if it's 20 minutes a game and there's 10 hours, you can play three games per hour, 20 minutes is a bit long, but that means you could play about 30 games or so, maybe 30 to 35 games in your 10 hour trial. If all you do is play games, that would get you enough squad battle games to get your division rivals placement, or let's say you played like 20 squad battle games and you played like 10 rivals games and then you played like 10 drafts or something, or a few drafts, I don't know, but all I'm saying is the thing here is you want to get your division rivals placement as soon as possible after, I think, after those Sunday rewards for EA access or right around that timeframe.  So, right here, this is what it is. Division promotion reward, they show division one and they show 10,000 coins, okay? This is a prime example of EA sports doing something, hey, it's cool, we're gonna get coins for division one, but a lot of us look at this and say 10K for winning division one or getting promoted to division one, that's ridiculous, that's not enough. To get promoted to division one, you get a one-time reward of 10,000 coins. That's awful, all right? I can almost guarantee you this will not be 10,000 coins if you get to division one. What I think EA is doing here is they're putting out a new concept so that people are happy and then people might be a little underwhelmed by the amount of coins that you'd be getting for this. So, EA is gonna underwhelm and then overperform and put something out that's better, it still could be even better than what it is but you know what, we'll take it. So, I expect this to be higher for division one but this is the big part, right? This change will ensure that your placement matches are better rewarded than before. As your placement is completed, you'll get coins for each division you pass through. So, if you finish your placement matches in division five, you will get the coins for division 10, nine, eight, seven, six and five all at once, helping you get closer to find the next player for your squad on the transfer market. So, this is where the market implications come in big time right here. If you get division five, division four, division three, you're getting all the coins from division 10, nine, eight, seven, six, five, four, whatever division you're at. All those coins are going to be gifted to you when you place in that division, right? So, let's say you get division five. I think I'm in division five right now. Maybe I'm division six. Okay, it's behind my face cam but I'm in division six, right? So, if I place in division six right off the rip inside of the start of FIFA, right? I'm going to get 10, nine, eight, seven and six rewards, all right? So, that's just going to be, it's probably not going to be a lot of coins to be completely honest with you. If we look at it and we think about it, it's probably not going to be that many coins because it's just the way that it is. That's how EA work. But, you know what? Even if it's 30,000 coins, that's a lot. For the first couple days of FIFA, that's going to impact the market a lot because everybody that gets on and even plays squad battles because squad battles can now qualify you for division rivals placement. If you play all your games, people are going to be getting more coins at the start of the game and that is going to make the market rise quicker. There's going to be more coins available on the market faster at the start of the game. So, what I think we could see here is when EA access comes out, I think the market rise in those first couple of days could be even greater, especially on meta cards. Meta cards, Ronaldo, Messi, some of your icons, some of the new transferred players or position change players, just the meta cards people are going to have in their teams.  You're going to be getting more coins in order that, and you're going to go buy some players. We talk about that all the time. If it's EA access timeframe, a lot of the meta players continue to go up for the next month. So, a lot of those guys are going to go out and start buying players. It's going to push the market even higher, even on a lower tier end too. You know, a guy who's maybe in 83 rated. I think Anthony Marshall is 84 rated, but that would be, or Lucas Mora, 83, right? Gareth Bale, 83, wants to watch. My boy, that's who I'm packing with my O2W pack, right? You watch, come on, you spurs. Anyway, all I'm saying is I'm seeing that there's a lot of market rise potential even more than normal because of this change right here. And I think you're going to see it take place this year earlier than ever. And I think that when EA access comes out, it's going to be imperative to get as many coins as you can right away so that you can get your coins and invest in some of those meta cards and the market is going to boom because this, this is different than people, you know, getting, buying and selling a player on the market. People talk about there's no squad fitnesses this year, so that's going to change the market. Yeah, it might change the market a little bit, but every time somebody is selling a squad fitness and making coins off of that, somebody else on the market is buying that card and losing coins. So for every transaction on the market, there is an equal effect, right? Coins are being, you know, gained, coins are being taken away for the item. So this is not the case though because these are packs and these are coin rewards that are gifted that start from nothing. There's nobody that has to spend money to get these packs, they're spending their time, right? So this is value, this is coins, this is supply that is coming onto the market and there's no opposite, you know, degrading or other end of the spectrum transaction taking place. That's why with the rewards getting bigger and the rewards getting better with the inclusion of division rivals rewards last year and even better, I think they did foot champions rewards or even better, I think maybe. I could be talking bad about that and not be correct, but I think you're going to see the prices go up even higher this year. Meta players are probably going to be more expensive off the start because of this especially and because of the top 100 rewards. When we start getting into foot champions, we have the leaderboards for the top 100 and stuff like that. This is going to be a change because for your top tier meta players, top tier icons, Ronaldo's, Messi's, Ben Yetters, the informs that come out that become very, very meta. All of my guys that are top 100 or elite one players, they have more opportunity. There is now every single week, and this is, you know where this is going to show up? This is going to show up huge during team of the season. Team of the season is going to be insane, insane, insane, insane with these top 100 rewards because think about the guaranteed 11 player team of the season packs that they released for top 100 rewards during the year. Think about all, instead of having 100 people get that pack, you're now going to have 200 people per console beginning that pack, right? That's crazy. That is a lot more supply for the higher tier market. That's just a lot more supply of coins and players on the market as well. And especially for the really meta players, again, like I said, with the icons, you know, somebody that I think of from FIFA 20 that was very meta, that a lot of pro players wanted to use was mid-hullet, right? Mid-hullet was a guy that people used throughout the year because he was available off the start. He was great for the entire game and that kind of card is going to be somebody who might be more expensive this year unless EA, of course, counteract this by adjusting pack weight, even the slightest measure, adjusting pack weight over, you know, millions and millions of packs it will be opened, that would be able to put a little more supply on the market and then also, you know, kind of combat that inflation, I guess you could say. So that's something I guess we could think about and, you know, that's up to EA. We don't know how they do that kind of stuff. Pack weight's dynamic anyway, as far as we know. But that was the main gist of what I wanted to talk about today is that these placement matches and getting your coins from Division Rivals is going to give you a boost of coins and it's gonna boost the market up early game. It's also going to possibly make some cards, you know, I always talk about like a Joe Gomez, right? I always talk about Joe. This is my number one example for last year in FIFA of a card that was meta right out the bat and then kind of died because he just wasn't the type of player that people are looking to upgrade in their team right away and especially when Pack start to get opened, he just goes down and he dies in price, right? So a player like Joe Gomez this year was an 83 rated card. He might maintain a higher price because there's not a lot of Premier League center backs. He's very meta with his boosts, his upgrade. It's gonna be rarer this year and not as easy to pack but guys that are like 70, 80 rated, that are not super duper meta, you're gonna see a lot of this, a lot of this and it's gonna be quick. It's gonna be quick because as people get more coins from those division rabble's placements, they're gonna be hopping on the game. They're going to be upgrading their teams faster, quicker, doing more SBCs and this could also mean that investing in SBC fodder could be more applicable early on. I mean, just to speak about a couple things we've seen already, IRL, Hyunmin Sun with a four goal game, a front runner for player of the month which that first player of the month is always pretty cheap. The last two years has been Lucas Mora and Timu Puke, both of those SBCs turned out to be like 40,000 coins and a lot of people used those cards in the past two years to start a FIFA. Imagine a Hyunmin Sun, left mid player of the month, 88 rated or 89 rated to start off FIFA 21. That would be crazy and it wouldn't be that expensive because EA knows that not a ton of people have crazy amount of coins right off the rip so that first player of the month is usually, I guess they could change it this year but that could make SBC fodder more investable this year. Something to think about, this stuff could be moving quicker. If people have more coins, they're more apt to do SBCs. EA could put out more SBCs earlier on. Just a thought, all right? So this is all just kind of theoretical. We're talking about what could happen based on these changes. Now again, a lot of it comes down to EA's pack weight and the way they do things and how many coins we do get from the division rivals because if we're getting like 1,000 coins for division 10, 2,000 for division nine, 3,000 for division eight and that's only gonna add up to like 15K by the time you get to division five or whatever, that's not gonna really be that worth it but if you're getting 30, 40,000 coins for getting your auto placement at division five, a lot of people will get placed around that range. That's a lot of coins, all right? And especially for the upper tier pro players, elite level players in this game, they're gonna be getting possibly 100,000 coins. If they get their placement matches and you get in like division three, you might be looking upwards of like 60, 70, I don't know, maybe even 100,000 coins depending on how generous EA is gonna be. So that is a big thing to think about. Last thing is these team events. I can see team events starting off right away in FIFA 21 if they're gonna do this.  It's gonna be the casuals that decide these in my opinion, 99% of the time because team Pelé or Meridona, I mean the rewards, I don't know, they better, they have to tell you the rewards right away at the start. Maybe they won't. There's gonna be some sort of uncertainty with this as well but the fact that there are coins or packs involved or new customization items, everybody's gonna be looking towards, if they do tell you what the rewards are, they're gonna be looking towards which one is better if there is some sort of edge. We'll see what EA do to make it fair. But again, you wanna be on the winning side, right? Everybody wants to be on the winning side even though there are consolation rewards. Since when have consolation rewards ever been just as good as winning rewards? Never, right? Second place doesn't get the same reward as first place, right? Spurs in the Champions League getting runner up, they didn't win the Champions League, Liverpool did. So the rewards are never the same.  So of course, if there's packs or coins involved, we're gonna have to monitor that situation, really think about that and kind of just envision that and try to almost like, I guess, guess or figure out which team or which event side is gonna be the most hyped up and then therefore the way to go in that mode. So again, the main part of this video today was honestly just to talk about, of course, these division rivals replacements. I talked about it enough, you guys get the gist of it. If you have any questions, drop them down below. But I think this is actually gonna impact the market a decent amount and I haven't heard many people talking about it, but I think it actually is. Now, of course, it does depend on just how many coins EA puts out and gives us, but we'll find that out very soon because we are only eight days away from this game coming out. And then this as well, especially during team of the season and top 100 rewards all year, it's gonna give out a lot more coins to more elite level players. It's going to reward the grind for those guys that are pros.  And I'm pumped for you because a lot of people who got 30 and O this year on the PlayStation in the heat of the year, didn't even get top 100. There were times where top 100, all top 100 guys were 30 and O. Of course, if there's glitches or no lost glitches and stuff that's going on, then that's a problem too that EA needs to fix, but it is what it is. Oh, last thing, there's no demo for FIFA 21. I don't know if you guys saw this tweet today, but don't expect a demo. They're using this time to focus our development's team time on delivering the best full game experience for current and next gen consoles. This tells me they're behind, they need a time to catch up because maybe they should have delayed their game a little bit longer than just one week when a lot of other people delayed their games longer than that. I'm just saying I could be wrong. I don't work at EA. I don't know how things are going inside the company but just my two cents right there. Anyways, if you enjoyed this video, smash the thumbs up on it, comment down below if you have any questions and of course, subscribe to the channel if you're new, it's been Nate, The Foot Accountant. Catch you guys later, peace out.