Good morning. Welcome to my presentation. 1.21 gigawatts. This is a talking talk on hacking and solar panel controllers I am professor Plum. I am a security research researcher for stage two Usually we do pen tests and IoT audits this one though. This one wasn't a customer request This is just kind of something I did on my own on the side a little background What got me started on this path everyone in 2020 right found themselves maybe at home a little more Maybe with a little extra free time and about that same time or a little earlier My neighbor got this new solar panel system control installed on his house and as they was telling me about it There's some features or things it did that kind of piqued my interest And so I thought this would be a good project to do while I'm stuck at home So it's kind of started me down this path I'm gonna talk as I go through this presentation and kind of say What kind of things the vendor did to better improve their security over typical IoT stuff We'll see versus what kind of things they did to weaken their security just kind of a plus-minus win-loss Scenario and with that I'll just kind of jump right into it. So whenever we do IoT work or ever I research something it's always open-source research first, right? We want to see how far we can get with the data that's available online before you even purchase or acquire or touch the hardware And so in this case, I did the research on the product and how it's set up The particular solution that they had was the in-phase solution where you can see here from their their own slides in phases slides They've got a number of solar panel controllers up there at the top They're all connected to this in phase IQ Controller system, which is over on the left and that controller system is what? sends the output information the consumption the power production up to in phase cloud container and at the cloud then your iPad device or your browser can kind of see what kind of data your solar system is producing Or what kind of data what kind of production numbers you're getting etc What I also found interesting is that it's installed via a mobile app And so the mobile app wirelessly talks to the in-phase controller in some sort of way So that was something I wanted to look at and Then the cloud component also peaked my interest. So I want to kind of play with those to see what see what was there So like I said first I grabbed the mobile apps these there's two mobile apps There's the installer toolkit, which is what the installer uses when they're setting up your system And then there's the enlightened manager app, which is used by the end user to View power production and see how well they're doing based on weather You know, etc. How much power they generated over the last 24 hours days weeks, whatever The installer toolkit though what's kind of interesting to me is that you pressed a button on the in phase Or as the manual says so you press a button on the in phase and then the installer would just automatically connect to it And so there's no real kind of authentication there, which really was surprising to me And so I started looking into the app and what the app is it's actually a dot net application So for Android, it's like Java that's wrapping dot net, but then that dot net application will call into a native assembly DLL for these password functions and That always gets me excited when I see something like that Typically when I see in an app It called into a native function It's almost like it's trying to hide something and so it puts it in this native application I think many developers understand that dot net or Java code is very easy to decompile And so they think well, I'm gonna write this in assembly or C code And because that gets compiled on a machine code and that's harder to disassemble, but it's almost like For for me as a reverser when I see something compiled on the machine code It's like oh look here for the secrets because they obviously are trying to hide something and so they wrote a machine code So that's the first place I look when I see something calling into an assembly DLL I'll look into that and sure enough right it right here. There's a few exports to you that are Java You see C code that's ported for Java But you see get mobile password get password for serial number Get public password and all these functions kind of boil down to the same thing Which is it basically it'll take in a string. It'll do an md5 of that string plus this token string you see in phase energy there on the screenshot and Then it computes an md5 of that that hex digest is then ran through I wouldn't say it's a CRC algorithm It basically is just replacing ones and zeros and other characters that are that are confusing sometimes with More distinct characters, so it's basically just taking part of that in d5 Modifies it slightly and but that's the password. That's the installer password I'll talk more about this in the future, but this is This is kind of a big problem with these guys where they kind of do their own Password system and we'll talk about the little bit that the input to this is the serial number for the device So if you have the serial number then you can get the installer password for that device Another thing I found when I was looking at the app is that all the firmware packages are On an s3 bucket and so I use my command s3 command line tools Just kind of poke at the bucket and we can see that the buckets wide open You have to do an LS on the bucket and list all the firmware packages there along with those firmware packages There's XML files which explain which firmware products apply to which devices And there's even some installer scripts in there as well to kind of give me an idea of what the system's doing So that was awesome. I thought I had everything I needed However, if you'll notice there a lot of those files have the EE PKG extension This is an extension. I haven't seen before and when I tried to look for the files It turned out that that all these files were encrypted So although the data was up there. It was all encrypted One of the install scripts did reference into decryption tool called EE crypt You can see this online seven seven one there But this EE crypt tool wasn't to be found it. I'm assuming it's a file on the firmware So here I am now stuck with a catch 22 I have the firmware images, but they're encrypted and to be able to decrypt the firmware images I need a file off the firmware images this one thing kind of sent me back a little bit and I'll talk about that a little bit more later, but Suffice it to say I have firmware images, but I need to find a way to decrypt them before I can really start to do heavy analysis So with that I have an installer password. I have some way to go forward, but I needed the device That's about as far as I could go With the open source security. So I acquired one of these devices off of ebay and started poking at it Here's a screenshot of the device Let's see if I You can look at this with me real quick So there's this line that divides the board in half the bottom left side is the high power side That's where your 10 110 or 220 voltage is running through it And then there's these chips here which will convert that into it'll track how many amps are running through there and can and calculate power consumption and power production that has passed to this Custom in-phase chip here and then that communicates with the main system on a chip here. This is an arm processor Complete system on a chip. It has an external RAM here and this E emce Data storage here that which is the ext4 file system. There's also a Wi-Fi chip an Ethernet port USB ports on this device So there's a lot of a lot of functions and features available for attack on this And then if you'll notice here, there's these headers that broken out This is the UART header and here is the JTAG headers So many many attack opportunities available and then also on the backside of this device There's also a flash SPI chip and not shown here So what I'm gonna do in this talk, I want to talk about some of the standard attacks We would make on a typical eliminated Linux embedded system There's kind of the boot process that goes through and I'm gonna list the attacks that we can do at each of those stages But I'm gonna list them from reverse order. So I'm gonna start at a fully booted system and work backwards So it seems like I'm going backwards But that seems to make the most sense to me because we're gonna start with what most people are familiar with and then work Slowly backwards from there So starting at the bottom, right? That's when the system's fully boot up. You've got basically just a Linux kernel running So your typical attacks against a Linux OS work here as well where you're looking for what ports are open What services it's running? What attacks do I have against those? Like is there a talent running right isn't an old version SSH is there any HTTP vulnerabilities on anything that's hosting there those typical things are always available to attack at this run level It's basically just a running Linux system Hardware-wise, there's also your these attacks against the you are in the J tag They're not specific to this boot process, right? They J tag can really be attempted at any time them chip is running However, I'm gonna list it here just because right it's the first it's the first stop So J tag on this particular device was disabled I'm not sure if it was via fuse or if it was collines, but I was not able to get J tag or SWD working on this on chip So that was a good plus for them. The you are did output, but it would not accept any input from the command line Some it's always worth a shot right to connect to that And maybe if you press an almost right skill be presented with a command line I haven't I've seen that before but in this case the kernel was not accepting any input from you are it would Output to the you are so why the kernel would booting was booting. It would show some messages there By way, okay, so the next attack level is while it's booting I mentioned that you are showing me debug messages or kernel boot messages. We're just somewhat helpful But nothing in there was Easily broke the thing down One things you can do though is you can try to interrupt the boot, right? You can hit certain keys to try to stop the links kernel from booting Maybe if you can change the boot arguments You can have it boot into single kernel or single user mode or the change the init level so that doesn't run all its scripts But then again that requires system accepting you are input in this case It did not so I couldn't really affect the boot process there Another thing I could try which I did try was glitching So glitching is where you can cause an Data errors in between communications. So for example, this used an external MMC chip for its EXT for boot partition So it's full partition actually and so if you can affect the boot lines in between the two Then when the kernel tries to mount that EXT for partition You can you know tie one of those lines to ground so the communication fails and then you're hoping that the kernel is going to Say oh, I couldn't mount this partition and drop you to some kind of limited shell At which point you have a shell and you can stop glitching the line mount the system yourself and muck around with it That wasn't the case here The kernel did a panic when it can't mount the EXT for file system And that's kind of the right approach when you're developing embedded systems, right? You know exactly what hardware you're expecting and so if anything varies from that you should just panic You don't want to kind of fail open and that's what this guy these guys did So that was a good design decision by them It meant I had to look lower down in the boot process for another attack method And that's the next stage before that would be the second level boot loader This is very often you boot not always the case But in most products we see you boot is the tool used and what you boot is it's a very lightweight Boot level that knows how to read external EXT for file systems So what it can do is it can read the EXT for file system find the kernel image Copy it into memory and then jump and pass execution to that kernel That's basically what you the you boot a stager is whole purpose is to do is to find the EXT for file system read the kernel image off of it and then boot to it pass the execution there The you boot itself has some parameters that it affects that it passes to the kernel And it also by default has like this three second delay where you can get to this very limited you boot console And change some of these parameters These guys had disabled that three boot boot delay second delay so I couldn't just press a key and Get to that you boot stager. I wasn't able to get there The the you boot itself though if you have ways of mucking with it You can actually boot off of a TFTP image right like you can tell it Hey, there's an image out here kernel image use that image rather than the limits You're told to find so what if you have access to the console you get a lot of You get a lot of control and you could probably break the system in some way or another But I needed to find a way into that you boot image and I wasn't able to get there at the stage I'll actually come back to this and say the work around there And so the very earliest levels is the first stage boot loader This is typically some very small flash embedded in this system on a chip itself and this flash is too small to hold the you boot loader itself and But it's too small to be able to just read in the xt file system And load the kernel in an image it it's basically like a mini first stage Which is responsible for finding the you boot image and then jumping to it Because it can't read the xt file system and it's too small to have the you boot image It has to find the you boot image somewhere else And so in this case it was an SPI flash chip to the side On the backside of the board that flash chip so this little flash image can read that SPI flash It'll read the you boot image and environment variables from there and then jump to the you boot image This flash chip we could reflash it. However, this is kind of a dangerous or excuse me The first stage boot loader which is running on the system on a chip We could reflash that but if we broke that or if we mess that image up You've now break the device because that's your first stage. That's all you have to access So it's a high risk, but possibly high reward area That's not what I wanted to attack What I when I realized that this was reading the you boot image office separate SPI flash chip, then that's what I attacked Here's an image of me with my gator clips attaching to the SPI flash chip And I'm reading off that flash and on that flash contains the you boot image itself and the environment Variables for that you boot image one of those environment variables was the one that specifies No boot delay. So on the left side of the screen here You can see I've got this highlighted this boot delay equals zero that was in that firmware image And so all I need to do is just change that bit the zero to like a five or something And then I can have a chance to enter the the boot console and start mucking with the device However with SPI flash chips, you can't just change one device You it only supports writing pages at a time and before you write a page you have to erase that page So there's a little bit of a risk there, right? You're gonna erase the page and then reflash it and something goes wrong You've kind of broke it But that's that worked for me I was able to change that bit you erase the flash and then rewrite it and so I changed this fireman variable However, what I missed is that the environment variables for you boot are There's a CRC attached to the beginning of it that says hey if this has been broken or if it's been altered with Don't trust these environment variables And so when I changed that boot delay parameter, I didn't change the CRC that went with it And so it was marked invalid Luckily for me though you boot when it found that the environment variable was corrupt It went back to its failsafe mode and its failsafe mode had a three-second delay So I was still able to get in once I got on I was able to restore the original environment variables or just fix the CRC So now I had access to the U-boot command line and on the U-boot command line. There's a command called ext for load And which will mount which will read a file of an ext file system into memory And then I can view the contents of that memory So on the right side of the screen you see that I've read in the contents of Etsy shadow, right? Like now I can see the root users password hash if I crack that hash Then I can just s h into the box and that that was really exciting. That was my hope However, I was never able to crack this hash if you do crack that hash I'd love to hear what it is, but as you'll see in the future. It doesn't even really matter what the hash is So getting the Etsy shadow file was no help to me However, I mean mentioned earlier on the slides that I needed the ee crypt tool I was able to read the ee crypt tool out like this to this hex dump and just use like xxd to extract that ee crypt tool to a binary and start looking at that binary and As I looked at that binary I was looking for what it does to decrypt the firmware I never saw on the command line a key passed into that tool So I figured it had maybe the key hard-coded inside Turns out it didn't have the key hard-coded per se However, it generated the key in a hard-coded fashion So on the left side of the screen here are four different d-word values And what the tool does is it will generate a shaw on those values You know funky way So there's these blocks on the left side and it's just it starts to generate a shaw value by Hashing block one two three four and then block four three two one and block two three four one You know just hashes them in in multiple times and just a random order But then the output of that hash is the key now it was really kind of interesting Why did they decide to do this right like I think there was somewhere in their mindset. We know it's bad idea to Include a key hard-coded key in a binary But instead so instead they're gonna generate the key based on some hard-coded values The end result is the same I still have your key right like it didn't help anything It just obfuscated it slightly and so I don't know I don't know if they realized that this was really a no-op for that for a reverse engineer So having that key I was then able to decrypt for more images and start looking at the files on disk And so here I am on slide 19 the whole all the slides up to this was really me leading up to getting access to the firmware As soon as I had access to the firmware within the first hour of just looking at the files I found in my first I found my first RCE on this here is a Upgrade function that's exposed via the HTTP interface and it calls it makes a system call And you can see the args parameter takes URL parameters and just depends it without doing any kind of user sanitation So we can append commands to this and run things on the target and so With this I had now an execution on the target. However, it's through the spunky upgrade process and it's it's slightly blind So I didn't I wanted a cleaner way to get execution I wanted to be able to just like SSH into the box and so what I did is I changed the root user's password However, I still couldn't SSH into the box. So I checked the settings for SSH to make sure you root user could log in and root user could log in with the password But it was surprising to me that I couldn't log in even after I changed the password I knew what the password was And it turns out as I did some more dicky digging into them Module that they have their own custom PAM authentication module in line So for those who are not familiar or just a refresher, right PAM is what's responsible for doing authentication on Linux And so you could write a custom module to handle custom authentication this custom module that they wrote intercepts all Authentication attempts it looks at what type of attempt it is and then takes a different kind of path based on that But it doesn't pass the attempted on down the line So if it says it fails, then it doesn't try the typical Etsy shadow user password. It'll just fail So that means that I could change the Etsy servers Etsy shadow password and has no effect Because this module intercepts the request and that's why it didn't matter at all if I cracked that hash or had the root user Password because this is what I needed to match to to get authentication as I looked at this tool when it does for an authentication was very similar to the Mobile operators tool it will take your you it will take your serial number and your username It'll generate a string based on that so it's like username at and phase energy comm hashtag serial number It'll compute an empty five of that and that hex digest is the actual password So once I had this I then had SSH access into the device And that was it I was at SSH access. It was really quite interesting. However, you notice here It's not just SSH authentication of this affects it affects the HTTP login it attacks It affects other things and this is really a bad issue Because this means as soon as you know the serial number, you know the password for any one of these devices Furthermore, you root anybody who owns one of these devices can't change their password They're stuck with that hard-coded password that the module uses you can't remove that module It'll break a number of the services that the in-phase controller relies on so that that One decision of theirs led to three different CVEs in addition to the other that I found before I'm all having to deal with poor password management choices and it made me wonder Why why did they do something to cripple the security of this so poorly? And I can't speak for the developers. I don't know what they were thinking But I can make some assumptions and here's what I think the issue was as I looked at this I think they knew hard-coded passwords are bad ideas and they knew we can't have one password for all the devices That's a bad security issue So they devised a system where each device has a unique password But they didn't realize the other things they broke when they came up with this system And so it was kind of a oh we fixed this one problem, but made for others, right? It's um, I Think it's a we know that thou shalt not do X But they didn't they were just following the letter of the laws and not really understanding why that's there And so their workarounds actually weakened the system in a lot of different ways So Really to hack the device is all I need is the serial number And that serial number is available on the board itself It's both available as a number right here or as a small qr code right there Or you can also get the serial number on the back of the box itself. It's on the bottom of the box itself It's on the inside cover of the service panel It's also on the shipping on the outside of the shipping box that they shipped to you And then if those aren't enough there's an XML page that's publicly available where you can get the serial number It's on the home page of the device and then finally if you can't find it there It's also put in the title bar of the home page all of this unauthenticated So the serial number is everywhere and with that serial number you can log into these devices. So What does that mean right like what can we do with this? Well Probably could be turned into a large botnet or something or or you know a DDoS tool Let's typically what we see IOT for but I was trying to see what else could be done with this one thing I found interesting is there's an option for the device to make a Open VPN tunnel back to in face and that's so that they can then you know SSH into your box What's shady about that is that that means? in face has a SSH open VPN tunnel into your home network or Business network, whatever the case may be which some people may be a little Uncomfortable with I what I didn't check however if that tunnel means that you have a open VPN tunnel back into in faces network I don't know if that's isolated or not. It would be something worth looking into but I didn't want to get into any legal troubles So I didn't poke at that myself And moreover. I found something slightly more interesting that that piqued my attention As I was reading about this I learned about the solar energy Credits basically as you're producing solar energy you in some states you can earn these solar credits a lot of companies Need to meet certain regulation about how much clean energy they're using and so these solar credits are something that's tradable on the private market so if you're able to alter the device you can potentially Claim to be making more solar credits and you're actually generating and then trade those on the black market for money Right, you're basically laundering your own money or printing your own money if you have access to one of these devices so I played with that a little bit and Here is where I decided to muck with how much energy I'm producing you can see I wasn't producing very much Energy until the 25th when I suddenly started producing 900 kilowatts of electricity and so I was like, oh, this is awesome And this is their online system here. This is their cloud monitoring base So my my device have reported this information up to their cloud their cloud accepted it and says yep This is what he's been generating for the last few days every hour of the day even at night The system didn't seem to complain at all But I thought okay, okay. Well, if I can go that far why stop there let's produce 101.21 gigawatts, you know like a bolt of lightning constantly coming through my household That should generate a lot of solar credits Now to be fair. I didn't ever assign I signed up for the solar credits I produced this energy or the cloud says I produced this energy, but I didn't sign up for the solar credits I didn't want to get any kind of legal trouble. Hopefully there's some kind of process in place Which would kind of vet how much credits I it says I'm awarded and I mean no home solar system Should be able to produce 1.21 gigawatts of power But who knows maybe there's something there maybe not We reported these issues to the vendor a while ago. They said they have a fix for them I have not seen that yet, but Yeah, it's definitely something that is concerning and I definitely want to I would look into Just as an apply side is it going to white away slide? By the looks of this and what we're seeing in other products embedded hardware security is improving a lot of the easy wins Aren't there right like the telnet's gone the you are at port being opens gone j tags being locked down a lot of The things that we've been harping on for the longest time are improving However, the industry still has a long way to go to make fully insecure systems a lot of the time Hardware attacks are becoming more difficult as a lot of things are being disabled However, they're still glitching. They're still the tax where you can pull the firmware off of SPI chips like I did that can Can still ruin your your setup This one I just have to say it just because I see it so much Never never roll your own crypto if you think you have a problem that's unique Like just just just think for a second. Am I really the first person to ever have this issue? Am I really the first person to design an IOT device where I don't want the same password for all the devices? because You're not and so look at the industry best standards and see what they're using rather than coming up with your own solution coming up with your own solution rarely rarely works and Then just that last point I want to point out that encrypting protecting your firmware images really goes a long way to prevent attackers From looking at things not necessarily doesn't make your system secure But it does prevent the casual observers or those researchers from doing a quick gander and pulling some easy wins So protecting your firmware does go a lot to keep things secret with that I appreciate You guys taking your time to listen if you have questions or ideas you can reach out to me That's my email address. There's my Twitter handle professor plumb There's two underscores there because I was really late to the Twitter scene But I'd love to hear comments or questions or thoughts or things you want or suggest I want to look at in the future and I have some free time. I love the kind of doing this kind of stuff on my side as well So I hope you guys have a great death con and I will see you around. Thanks


Hi, I'm Kim Blister-Martis, and I'm the convener of the APEC Business Mobility Group. I'm excited to welcome you to the new Virtual APEC Business Travel Card, also known as the Virtual ABTC, a new and secure method for presenting your ABTC using a smart device. The Virtual ABTC has been developed to allow approved card holders from fully participating APEC member economies to securely display their ABTC on their smart device, removing the need to carry a physical ABTC. It transitions the ABTC scheme into the modern and digitised era of global travel. The Virtual ABTC also employs additional features for greater security and confidence, including generating a unique application number for all newly approved ABTC applicants and ensuring that their credentials are authenticated and verified when logging onto the Virtual ABTC app. To access and use the Virtual ABTC, you must be an approved ABTC holder from a fully participating APEC member economy whose home economy provides access to the Virtual ABTC service for its card holders. All economies, including transitional members, will accept the Virtual ABTC for use at international ports of entries from the 1st of March 2021. Each economy will determine its own timeline in transitioning to the use of the Virtual ABTC for its card holders. Please consult with your home economy for further details. As you pass through an international port, you will be required to present your Virtual ABTC on your smart device using the Virtual ABTC app. Current entry and exit processes remain the same, regardless of whether you are using your Virtual ABTC or the physical card. The Virtual ABTC is simply a digital version of the physical card. As your Virtual ABTC is linked to the ABTC system, any changes and updates to your ABTC status will be reflected in real time on your Virtual ABTC. So once pre-clearance to enter an economy has been approved, this will be immediately updated and displayed on the Virtual ABTC. This allows you to begin using your Virtual ABTC right away without having to wait for every economy to provide their pre-clearance assessment. It is important before travelling to ensure that your ABTC remains valid for your entry, departure and for the duration of your stay in the economy you intend to travel to. This is easy to do by opening your Virtual ABTC on your smart device and looking at the clearance status for each economy. The information here is updated and displayed automatically when you are connected to the internet. You can also check the status online using the ABTC pre-clearance status tracker, which can also be accessed by clicking on the link in the Virtual ABTC app. The Virtual ABTC's connectivity to real-time data is dependent on an internet connection on your smart device. However, if you are unable to connect your smart device to the internet while travelling, you will still be able to display the most recent data on your Virtual ABTC on arrival at your destination economy.  The Virtual ABTC will also display a date and timestamp of your last login and refresh. To ensure the stored information is as accurate as possible, it is important that you log in to the Virtual ABTC app as close as possible to your departing flight and keep your smart device sufficiently charged. You can easily access links to additional information including Frequently Asked Questions and the APEC.org website and terms and conditions for using the Virtual ABTC app. If you experience any difficulties with your Virtual ABTC, lose your smart device or there is missing or incomplete information on the Virtual ABTC, please contact your home economy in the first instance. For any technical issues with the use of your Virtual ABTC and the app, please contact the Office of the APEC Business Mobility Group Convener by emailing apecathomeaffairs.gov.au


The Cavalcade of America, presented by Dupont. This evening, the Cavalcade of America brings you the story of a man who has become to be the symbol of the early days of the West, William F. Cody, Indian fighter, pony express rider, buffalo hunter and army scout, known best as Buffalo Bill. This week is an especially appropriate time to do something about the appearance of your car. Because it is being observed throughout the United States as national used car exchange week, dealers and manufacturers everywhere are presenting unusual inducements for you to drive a better automobile by offering late model reconditioned cars at extremely low prices. Here too, chemistry plays a part by enhancing the value of good used cars, for many of them are refinished and touched up with the same Dupont finishes with which they left the factory. If you're keeping your present model, you can restore that showroom beauty and recapture that original thrill of new car ownership by having it refinished at any one of the thousands of refinishing stations in the United States that use Dupont finishes. You'll find a new pleasure and satisfaction in the old bus when it blossoms out in a bright new coat of Duco, Dulux or Pyrolux finish. As an overture, Don Voorhees and the Dupont Cavalcade Orchestra will play the ever popular wagon wheel. Dupont Cavalcade moves forward. Born February 26, 1846 in Scott County, Iowa. When he was eight, the family migrated to Kansas. The boy lived the adventurous life of the west of that day. He herded cattle, hunted buffalo, rode pony express and served as a private during the Civil War. In 1865, while visiting in St. Louis, he met Louise Federici, who was later to become his wife. We find them on the deck of an old Mississippi steamer on its way up the river to the town of Leavenworth, Kansas. The boat, which is tied up for the landing to take on wood for the boiler, is about to depart. Lou Down, afraid? Afraid? What's there to be afraid of? Oh, nothing, I guess. Only now that we're married, you're coming away with me. I'm suddenly realizing what I'm asking you to sacrifice. What are you asking? Well, I'm taking you to a new life. Asking you to face hardships, dangers, maybe? Living a wild, strange country away from everyone you've ever known or cared for? I'll have you, won't I? Well, yes. Well, I knew all the rest before. Well, who are those men on the bank? Oh, that's just a bunch of men unloading the cargo. No, no, I don't mean those. I mean the men on the horseback. Waiting at us. Lou, stand behind me quick. What is it? Get back quick. Be quiet, don't move. We're flying off away from the dock now, I guess. I say, find advantage to take up a man when he can't take his gun and get down to face him. What's the matter now? Sorry now, darling. Nothing to be afraid of. I'm sorry. Poor baby. Some of Jesse James's gang, I had a little trouble with them once before. Jesse James? The robber? Yeah. Lou, I'm sorry you were fighting.  Oh, it's nothing. I'll be all right in a minute. Well, I wasn't expecting it. Lou, darling, I want to ask you something. Do you want to turn back? Why? Because, darling, if it's too much for you, if you think you aren't going to be able to stand my life, I'll try to stand yours.  The world isn't big enough for everybody that's in it. They've got to spread out, and they'll come this way. You mean people will settle out here? Hundreds of them. They wagon trains start across the plains, and they're building railroads in Kansas. And they need men who know the West to clear the path. They're building this now, but someday there will be towns out here as big as St. Louis. Oh, Will. It's true, darling. In this country that I love, I'll be working for tomorrow. And I want you to help me. But if you don't want to take the risk, we'll go back. Oh, sweetheart, what do you say? Do you remember what the minister said when we were standing there, being married? He said, give me the ring, and I couldn't find it. No, no, I don't mean that. I mean, what he said about always being together. Till death us do part. Yes. I remember that. Well, I meant that, Will. I want to be with you, always. But Will Cody went back to the West he knew and loved when he was first hired as a buffalo hunter by the Kansas Pacific Railroad. Hunting bison was a dangerous job which required great skill, but the animals were needed for food. Cody became famous for his ability and daring and won the nickname of Buffalo Bill. Then Cody became government scout under General Sheridan and soon gained the rank of colonel. He was taken captive by the Comanche Chief, Satanta, and barely escaped with his life. On the evening of his rescue, we find him in the log cabin which was his home, holding his baby daughter, Arta. Buffalo Bill, Buffalo Bill, never misses and never will. Always aims and shoots to kill and the company pays his Buffalo Bill. Ridiculous, not a lie. Well, they wrote it about me and I think my daughter should hear it. Look, she liked it. Sound asleep. Sleeping just as sound as though she hadn't almost been left an awesome. Oh, Will. I'm still shaking as a part of this. When I came down from the fort to tell you to escape me, Patanta, in the Denver gym and as men rescued you and the Indians are right at your heels. Well, it's the worst here you've given me yet. To send the gin hadn't found you on the day. Right, a bit of dead scout. Riding that mule, I didn't have a chance. And that's positively the last time I go scouting on a donkey. Well... Well... Golly, I'm tired. You must be dead for sure. Go to bed now, Will. Cody! Cody! What is that? What is going? I guess it's coming down from the fort. Cody! Open the door! Let him in, Mama. Engines, Bill. Commanches and coyotes on the path again. General Hazen wants you to take word to General Sharton at Fort Hayes. Fort Hayes? Well, you can't do it. Well, you're exhausted and they're 65 miles away. Let one of the other scouts go. Well, the chief put it up to them. Nobody wants to. It's a pretty hostile country and Sharton's got to have the dispatches by morning. So, Satanta's saddened earnest, huh? Well, here, take the baby loom. Oh, well, you're worn out. You mustn't go out in this storm. He's the only man who can do it, Mrs. Cody. I'll tell you, honey. I'll go over and make General Hazen a proposition. I am pretty sleepy, but I'll go if he gives me a horse. I don't propose to be chased again today by engines while I'm riding the government mule. So will Cody road all night through the storm, carrying the dispatches. Twice he was thrown from his horse, but he persisted. And we find him early next morning. Come on, lady. Come on. Nearly there. Just a little more, and we'll get some food and some sleep. Oh! Who's there? Colonel Cody. Messages from General Hazen at Larnan. Are you going to enter Colonel Cody? I got to see General Sheridan immediately. Oh, will himself. Come in, Colonel Cody. Come in. Here, just in time for breakfast. I've brought dispatches from General Hazen. Now, get to the fireman. You must be frozen. Let's see. It's a tent, eh? Well, it's a bad business. Colonel Cody. Yes, General Sheridan? I'm in serious straits. These orders must go to Fort Dodge at once. Fort Dodge is 95 miles from here, General Sheridan.  But I haven't a scout capable of making the trip. You know the country? You've eyes like field glasses. It's a lot to ask of you, I know. The only stop is Coon Creek. Can I get a fresh horse there? Horse? Sure. There's a troop of cavalry stationed there. Well, if you're sure of that, I'll go. Thank you, Colonel Cody. It's risky. Oh, I don't mind the risk, General. I'll just be jiggered if I'll do any more scouting on a government mule. At 10 o'clock that night, Colonel Cody arrived at Fort Dodge to learn that there had been another Indian outbreak on the Arkansas River near Fort Leonard. Again, he was the only scout who would undertake the trip back across the prairies to Fort Leonard and carry the warning. After a short sleep, he reports to commanding officer.  Colonel Cody, we haven't a horse available. I have to give you a mule. What? I'm sorry. Then I don't make the trip. I won't ride one of those concerned things again. But Colonel Cody... I'll ride no mule. The outbreak on the Arkansas River is extremely violent. General Hazen must be notified at once. What? Well? Bring on your mule. I'll take just one more chance. And so on a government mule, Colonel Cody started back again toward Fort Leonard. The animal was hard-mouthed and stubborn, and riding him was very difficult. At the end of the first 30 miles, Cody dismounted to get a drink of water at Coombe Creek. Oh, you brute. I want to get a drink.  I can crack the ice. I'll give you a drink, too. Oh, stand still. You blasted animal. Wait till I get you. Wait! From Coombe Creek back to Fort Leonard, the last lap was 30 miles. Cody made it on foot following the mule, which kept just ahead of him all the way. As the sun rose, Cody entered the gates of the fort, having traveled 350 miles in 54 hours. Sentry, hello. Hello there. You see that blasted mule? He came in just ahead of you, Colonel. Did he run away? Did he run away? Did he run away? We thought you were a scout. A scout. I've been playing tag with a jackass. Give General Hayes some of these dispatches, and tell him to congratulate Fort Hayes on having the toughest, meanest mule in the United States Army. I'm going to bed. Well, Cody, they've chased the command to south of the Arkansas, but there are more emergency messages for General Sheridan. You'll have to go back to Fort Hayes with him. Fort Hayes? Well, I won't need any sleep at all once I get the hang of it. All right, Regan, get me a horse. I'm sorry, Cody, but there aren't any horses. General Hayeson suggested that since it's an emergency, you might ride a gunman mule. A gun... A nu-raison! As the years passed, Colonel William Cody, Chief of Scouts, became one of the great dramatic figures of the West. He was a justice of the peace, then a state legislator. But he remained at heart, muffled old Bill the Plainsman. Finally, there came a demand that he go east to appear in a dramatized version of the days of the Old West. For the success of these appearances came the idea of the Wild West show. We find him in conversation with Mrs. Cody, little Johnny Baker, a boy of whom he was extremely fond, and Major John Burke, his devoted press agent.  But the idea of a Wild West show got me. I can't sleep nights, we're thinking about. Well, the public certainly like you in the Western, please. Then things. Shucks running around on a two-by-four stage, pretending to shoot Chicago Indians who fell down before the gun went off. That's no way to give the folks an idea of the West. I want to give them a real show, Major. Riding, marksmanship, blasphemy. I want them to see the West as it used to be with Indians holding up the stagecoach and scout chasing them. But you can't do that on a stage, Colonel Cody. You said anything about a stage. I'm not going to use any stage. Oh, you're going to have an attempt like a circus? No, no, Johnny. Intended before the bullet holes, no time. I'm going to have it right outdoors. Canvas sidewalls, maybe. But plenty of room for the horses. A place where we can really ride. Ground up buffalo. Sounds wonderful, Bill, but sort of impossible. Nothing's impossible. I could gather together a show like that in a month. Where'd you get your Indians? Right here. No more of that back East kind. I can go out to the Pine Ridge Engine Agency today and get all I want. Chase the stagecoach, do their dances. You'd want a real stagecoach. And I can get a real one. The old Deadwood stagecoach. It was held up so many times. Full of holes to see it. I got a new one now. I could buy that old one cheap. Will it be wonderful? Good. Can I go along, Colonel Cody? Go along? Sure, Johnny.  A champion? Sure. You have the makin' to the champion. Why, we got a whole show already. You and little Missy. You mean Annie Oakley, that girl? Annie Oakley may be only a girl, but she can shoot. She came to me when she was with the circus and begged me to give her a trial and she's good, Bert. She's good. She's pretty, too. The men like her for that. Yes, and the women will like her because seeing her will help them get over being scared at the sound of shooting. We'll put her on early and catch her interest. It's all a shame of her. We can get the performers. We can get the stars. We can get the engines. We can get the horses. There's just one thing more we got to get. All the whole thing to bust. What's that, Colonel? You. Me. That's right. You, Major Bert. My way of thinking, you're the best publicity man in the world. And if I can't have you for advance agents, the deal's off. Why? It's a gamble, I know it. These little shows have been different, but this, oh, I'm asking you to take a risk, Bert, and I haven't any right to do it. Colonel, I want to tell you something. First time I ever saw you, I thought you were the handsomest, straightest, finest man I'd ever seen in all my life. I still think so. When it comes to telling the world, it'll be a pleasure. There's nothing I'd like better, Colonel, than to make Buffalo Bill's Wild West Show the greatest show on earth. And so held up by Major John Burke, the most famous press agent of his day, Buffalo Bill's Wild West Show was formed and grew greater and greater. It played triumphantly at the Columbian Exposition in Chicago in 1893 to six million people. But Cody the showman was forced to yield once more to Cody the scout. Out in Nevada there was a sewer rising. With General Miles, Cody hurried westward. But before they arrived there had been the historic fight at Wounded Knee. General Miles immediately called the great council. I'm sorry you didn't get here sooner, Cody. The battle at Wounded Knee was a massacre. I believe you could have prevented it. Yeah, the Indians would have listened to me, I think. Well, it's too late now. Important thing is to prevent another like it. We've got to hold these Indian Braves who are prisoners as hostages so that the Indian wars are over forever. It's time for the council to call them to assembly. Hello, Connie. Hey, Opu. Hello, Connie. Hey, Opu. Hey, Opu. Hey, Opu. Hey, Opu. Hey, Opu. Hey, Opu. Hey, Opu. Hey, Opu. Hey, Opu. Hey, Opu. Hey, Opu. Hey, Opu. Hey, Opu. Hey, Opu. Apsker, your friend wants you to listen. Apsker speaks. The Indian wants peace. Fightman wants peace. Apsker speaks the truth. Mee Horncloud speaks for shot ball. He want only peace.  Our chiefs are captive. Shortbowl, he says, fight no more. Now he's silent. Shortbowl is silent. And it's too late to bring back those braves who are dead. But the white man would dwell with you now in peace. To make sure there is no more war, your braves stay with us. If your promise fails, their lives are forfeit. What do they say, Orenkaard? Chiefs say they will come with you, Bahaska. Live with you. No, no, you don't understand. Not with me, not with Bahaska. Well, why not? You're the logical person to take them, Colonel Cody. Keep them with you. Take them to Europe with your wild whistle. Orenkaard, who would go with me over the waters to strange countries? How many would go, Bahaska? Kicking bear, black-heart, long-wolf, and shortbowl. Shortbowl, eh? All right, General Miles, I'll accept your offer. If you follow the path of peace, I give you my promise. I will take your braves with me, and I will be kind to them. Bring them back to you safely. Orenkaard, tell your braves these chiefs go with Bahaska as a sign that fighting between the white man and the red man is ended forever. I officially place these men in your charge, Brigadier General Cody. Brigadier General. That title still sounds funny to an old Indian fighter like me. It's a tribute to a man who symbolizes the great west of the past, Cody. You've made this day possible, this day and this pipe of peace. Don't you want to be called Brigadier General? Yes, I'm proud as a strutting peacock when you say it in front of the boys. Well, when we're alone, General. I think I'd rather you just say Buffalo Bill. William Frederick Cody died on January 10th, 1917, and was buried with honors in the resting place he himself had selected on top of Lookout Mountain near Denver, Colorado. In Cody, Wyoming, a bronze statue of him has been erected, and a museum holds his gun, his gay coats, his broad brimmed hats, and his silver-mounted bridles, preserving to America the memories and traditions of the dangerous thrilling days when the west was young. DuPont salutes this era by paying tribute to Buffalo Bill, brave leader in the cavalcade of America. Many of us remember that back in the days of Buffalo Bill, a favorite spring tonic was sulfur and molasses. Today, chemistry uses sulfur in making hundreds of products for your comfort and convenience. It goes into sprays that protect our food crops from insects. It helps give raw rubber the toughness needed for tires and countless other articles. When burned in air, sulfur dioxide is formed, and this gas is used to give cotton and leather fabrics a snowy whiteness. In compressed form, sulfur dioxide serves as a refrigerant. The principal use of this gas is in the manufacture of sulfuric acid, an important DuPont product. Sulfuric acid is often called the king of chemicals because such great qualities are consumed in making so many other articles of daily use. Sulfuric acid is what enables the storage battery of your car to supply power for the light and self-starter. It is used in refining petroleum and in making fertilizers, commercial explosives, paper, rayon, and colorful dyes. Every woman who owns an organ-de-dress can thank sulfuric acid because that is what gives organ-de fabric its permanent crispness. For years, great deposits of sulfur lay embedded deep under the earth's surface in Texas and Louisiana out of the reach of man because no one knew how to mine it. Then a chemist named Herman Frash said to himself, if we can't go to the sulfur, we'll make the sulfur come to us. And that's exactly what he did. Frash developed a method whereby a large pipe is driven into the ground with smaller pipes inside it. Hot water, steam, and compressed air are then forced into the deposit, melting the sulfur and forcing it to flow as a liquid to the surface. The sulfur then solidifies and is ready to serve many industries. Had it not been for the ingenuity of this chemist, the valuable deposits of sulfur in our Gulf states might still be lying untouched, thus forcing American industry to rely upon foreign countries for this vital substance that helps so much to realize the DuPont pledge, better things for better living through chemistry. The story of Captain Robert Gray, American navigator, whose discovery of the Columbia River gave the United States one of its strongest planes to the Oregon Territory. Those lands which now make up the three states of Oregon, Washington and Idaho, will be the subject of our broadcast when next week, at this same time, DuPont again presents the Cadillacade of America. This is the Columbia Broadcasting System.


Hello everyone, welcome back to SuperCloud 4 here live in our Palo Alto studios, my name is Dave Vellante and you know, you hear a lot about the arms race for GPUs and talent, but not enough talk about the arms race for data. I'm here with Rob Streche. Andy Pernsteiner is also here. He's the CTO of Vast Data. Andy, good to see you. Thanks for coming in. Hey, thanks for having me. Yeah, so arms race for data, right? Quality data, right? When you talk to customers, they say that they're spending a lot of time trying to get their data act together. They got to do that before they can actually really take advantage of LLMs. Chris Miller just wrote a really interesting article on this idea of model collapse. You were prominently featured in it. What's the basic premise behind that article and some of your thinking at Vast? Well, honestly, what we've been finding at least with the customers that we talk to is that their main goal right now is obviously to capture as much of the data as they're generating as possible and keep it as long as they can, but also to curate and cleanse it so that it's useful for training against. And I was actually kind of having a hypothesis and it's not one that I'm the only one having, right? So I've also done a little bit of research on model collapse and there's different camps that either believe in it or don't believe in it. And honestly, it's probably well beyond my realm of expertise to say whether it's mathematically likely or not likely, but the premise is basically that based on the fact that much of data being generated now is being generated by generative AI technologies like GPT-4 and others, that the data that's being proliferated into the world is now data that isn't really useful for training on. And I think that even open AI and other organizations are having to purchase and acquire real data because they don't want to be left in a place where they're only left with training against data that is synthetic. And that's why at least my assertion and other people that I've spoken with can share this kind of thought process is that organizations, no matter what kind of organization it is with manufacturing, retail, finance, there's data that's being generated either about their customers, their supply chain processes, all of the intellectual property, that's real data and it can be used either to generate models that they can then use to improve their processes, but ultimately the way that I see it is that they're going to start creating data products. Not only data products in terms of data they can sell, but also data products in the sense of creating models that they can sell and allow people to refine on their own. So that's where we sort of see things happening and the proliferation of the amount of people investing very heavily in LLM training is kind of proof of that to me. And then the model collapse concept is because it tends to over rotate of synthetic, if there's too much synthetic data tends to over rotate on the highly probable and then basically under count the improbable, is that right? Yes, and I think there's ways that the people developing the models can work around it or fine tune against it, but it's extra effort as opposed to training against real data. So if everything you're getting is synthetic, then it's challenging to know if that's a real signal or a fake signal and it's very easy to get bias into the models. It's very easy for the models to become polluted over time. And I think that's one of the challenges to prevent model hallucinations especially, is that the input has to be quality. It can't be something garbage. Yeah, I think that what we're seeing when we're talking to customers that are building data products. So they're building these data products for what is a customer and here's how customer journey goes along and how we're gonna model that customer journey and they look at that as, hey, here's what we think they go and do and they're starting to look into that. So they're gathering signals from all over the place, trying to cleanse them, understand how that works, from mobile, from on laptops and what have you and they're looking at these signals and bringing it in. I think what they're seeing is it's the improbability, that the fact that the theory of improbability, almost like gambling on Baccarat where the improbable is probably going to happen. So if you keep going down that path and I think to your point about model collapse, that seems to actually validate that, right? The improbable is what you're really looking for because that's when people are exiting, saying you're abandoned shopping cart or something like that. Are you seeing as vast really is underpinning a lot of these large AI cloud service providers now? Are you seeing them get into that data cleansing business and leveraging the platform that you guys have? I think they are. The evidence that we see is that a lot of the effort, imagine it this way, you're gonna go rent GPUs from a cloud service provider, whether it be someone like CoreWeave or G42 or Lambda or any one of these new AI focused cloud service providers. Your goal as someone who's paying money for something is to only pay for something you're actually using as much as possible. And the challenge is that to get data to a state where you can actually use it for training is very difficult. And you don't wanna waste all of your time where you're renting these precious GPU hours spent cleansing and prepping the data. So a lot of effort right now is focused on that area. There are technologies that can actually leverage GPUs to do data prep and ETL. And so that's another area where we're seeing people start to try and refine their processes to make it so they get the most out of these GPUs because not only they're expensive or they can be expensive at scale but they're also somewhat hard to come by. And so when you're in the state where it's hard to get something and it costs a lot of money, you better be ready for it when you have it. So you guys have had some success with these specialized cloud service providers. You mentioned CoreWeave and I think you just signed up some others recently. Hit the news. I think that's public. It is, otherwise I'm not allowed to say it. Okay, so explain why these sort of emergent CSPs are more viable than the cloud CSPs because the traditional big cloud players are so sort of virtualization focused. One system, many customers. Can't they pivot to be as good as a specialist? Explain your thinking on that. I think they can do that to some extent. And I think what it comes down to is scale, right? So I was recently speaking in London at a talk and it's all data scientists, data engineers and people who are in theory involved in AI deep learning and machine learning and the track that we were on was a generative AI track. And so I asked everybody if they knew what an H100 was which is one of NVIDIA's most popular GPUs and nobody knew what it was. Really? So there's this big disconnect between people who are practicing and using the infrastructure but what I think is happening is the people especially at that conference they're focused on smaller scale projects. They're just getting started. And so I think for those cases you can get started pretty much anywhere. You can get started on your laptop, you can get started in one of the major cloud service providers without having to go to one of these specialized ones. But once you find that you're having to scale the amount of data that you're training and the number of GPUs and the orchestration required to keep all of that running in concert that's where you need somebody who's more specialized in it. The networking requirements alone to do deep learning training are well beyond what most of the cloud service providers the general purpose ones have built for. They built for a general purpose world for everybody running all types of applications at once. They didn't build for people running these super high performance very IO intensive deep learning projects. It just wasn't in their thought process. That doesn't mean they can't build these things out but it is also something where they have to also protect their existing customer revenue and not sort of bifurcate their position. So we see the new AI focused cloud service providers as being the ones who can bring scale in a way that allows enterprises and commercial entities the ability to deploy AI machine learning without having to go build the infrastructure themselves. Obviously we have been an infrastructure focused company for several years and we typically sell directly to customers but we're very excited to work with these new cloud service providers because it kind of gets the customers that are trying to start and deploy large scale AI projects. It gives them the ability to do so without having to go and build it all themselves. That was something else that you talked about to Mellor Chris Mellor was the need for turnkey solutions. And so this is something that Rob and I and George have been sort of kicking around is that that need for turnkey integrated versus sort of a more modular approach. And when you see all the action around things like iceberg and Delta and Hoody and these different data types there is that sort of modular stack that's emerging and potentially quite competitive versus the sort of integrated approach that you're I think espousing. Maybe you could talk about that a little bit and help us understand your point of view. Well, so the three technologies you mentioned are relatively focused on analytics. Delta, iceberg and Hoody are all effectively table formats on top of the parquet file format. Traditionally speaking are deployed on cloud service. I'm sorry on cloud storage offerings. AWS S3, Google cloud storage, as well as Azure ADLS. And so I think that there is a distinction though. So those are very heavily focused on analytics which means the data has to be structured to get into it in the first place. Whereas a lot of the LLM based sort of deep learning projects and of course all the multimodal projects are focused on unstructured data to start with. And so I think that the platform that we've developed has the ability to do both. And I think that as customers start to learn more and more about how to actually do unstructured deep learning they're going to need a platform that can handle both. It's not to say that you couldn't do so with what we wouldn't want to call a cloud data lake or data warehouse. But the problem is that you have to put something into a rigid structure at first. You can't put images into the same rigid structure that you can put text, right? And so I think that for LLMs maybe it's possible that you could leverage more of a data warehouse style implementation to be able to do your training but ultimately you're adding a step to the equation if you have to transform all of your data into something that can be inserted into effectively rows and columns in a database. Yeah, I mean, is it that things have changed so? Because deep learning is not new. I mean these problems HPC has been around for high performance computing has been around for quite a while. And the data problem there has been around for a while. I mean, NASA has been, you can see all kinds of things right down the street here at Moffitt Field that they used to use. How is it that things have really changed in how people are using the data and why it's really just ballooned? I think that in the world of HPC, most consumers, most people of the world, even people in my field weren't really aware of what most of these HPC institutions were doing. We didn't know what TAC was up to. You knew to some extent what NASA was doing just because of their name but behind the scenes, nobody really knew what they were up to. I think the difference now is that the data that people are training against and the types of insights they're deriving are from everyday real world data that everybody is generating. And so I think that's one of the big differences. It's almost like, if you would go back a couple of decades before the iPhone existed and you introduced technologies like you're seeing now, it would be so foreign to people that it wouldn't make any sense to them. It would be in the back world of HPC or some very specialized place. But now that the human psyche is prepared for seeing these revolutions in technology and the data that's being trained against is data that they understand. It's data that comes off of the cars that they drive or the pictures they take or the calls that they're on. Now they understand what these things are. And of course, once OpenAI released ChatGPT late last year, they kind of unveiled to the world the fact that this is for everybody now. It's not just for people off in the corner somewhere. Is that bringing HPC into the mainstream or are they going on to harder problems? You know, it's interesting. I find that, so I mentioned TAC for a moment because they're a customer of ours and one of the reasons that they're choosing us is because of our integration with AI and deep learning applications, especially because we have accelerations for GP Direct Storage and we've been proven to be very fast as a NAS platform for being able to do large scale analytics and deep learning. And they're finding that most of the research organizations that use their platform are clamoring for GPUs. They're being used for training and testing. And so whether they want it to or not, I'm sure they want to because they just like to get big grants and get bigger and bigger systems. They are being pulled into this world. And I think the classical HPC engineers, you know, for them it's oftentimes it's just another type of CPU, right? It's a GPU, okay? It has a different letter at the front of it. There are some considerations they're learning that they have to make though because it's not always, you know, the same paradigm that people have been using to do HPC. Now they have to start thinking about things a little bit differently. And so I think that the engineers that have been doing HPC for a long time are embracing GPUs. And if you go to any of the national labs, they're using them in a heavy way. Everybody's using them. And we're starting to see enterprise HPC organizations start to bring them into the fold as well. It's kind of the first question we ask almost every customer now is whether they have projects that involve GPUs. And almost every single one of them says yes. And so you're seeing and just going back to big data London and the personas that were there and you're seeing a disconnect between the folks that are actually building the models and the algorithms and things from that from what infrastructure are they actually running on? And, you know, model ops or ML ops or what have you is really that the place that's plugging that gap for those people? It might be. I think it might even be another layer to down. And a lot of credit goes to the cloud for abstracting people away from the underlying infrastructure. I've been in the infrastructure world for some time but I also realized that most people don't care. In many ways it's the plumbing of the world, right? It's the plumbing of the IT world. No one wants to have to deal with it. No one just assumes that it's dealt with already. And so I think that there is a disconnect between a lot of the people who are coming up with the ideas, asking questions of the data, coming up with the pipelines and the underlying infrastructure. And what we want to do is we want to continue making it invisible to people but we want to give people something that brings them much faster time to insight at a very cost-effective price because that I think is what's going to propel us forward. I don't think that having the fanciest fastest everything is going to do it. It has to be cost-effective. It has to be deployable at scale. It has to be easy to use. And that was a great setup because that is what SuperCloud is all about is that hiding that, abstracting that complexity of the underlying clouds, building value on top of it, data, the data layer is obviously one of those opportunities to do so Andy, thanks so much for coming on. Thank you so much. You've been SuperCloud. Thanks a lot. All right, and keep it right there. John Furrier, Rob Strecce and I will be back. David Glick is up next. He's from Walmart. We've had Walmart guests on before. They've got deep tech expertise and we're going to find out how they're using large language models. Keep it right there. We'll be right back at SuperCloud 4 live from Palo Alto.


Hello and welcome back to the craft box. My name is Brenton today We are on episode 42 of the completionist crafters series last time if you haven't checked it out already We did spicy chips today. We are doing the taco Again another thing super duper easy. Um, yeah, I need a Shush, please shush shush. Thank you. That was extremely loud. Jeez But yeah, as always on-screen as everything you will need Um, also, I am no longer full of gold. So I don't know what his problem is, but hey, he's just cranky as always But yeah basic crafting station as with the others Simple simple simple recipe deep mushroom simple vial amethyst really really easy to get most of those Deep mushrooms could be a bit of an issue early on But I would suggest heading off to Mushu and finding a whole bunch of those otherwise You can find them basically anywhere really So yeah, we're also just going to take off our mount because we don't need a mountain here. Um, but yeah, that is it. It was a I can't even remember. No, not that not that wrong wrong thing. Ah Wrong thing. I think it is a rank four pit snack rank three pit snack um one intellect two will ice um, so yeah, not Good, but hey, that's just how it goes out of everything that we've crafted so far I think the cherry tomato is definitely the best option to craft Um, the bobberfish is the hardest thing To get but out of all of the things that you can craft we've only got I think one more left Um, the cherry tomato is just the best option because it is a mega snack But anyway, thank you for watching room so that you like and subscribe if you're a subscriber press the weird little bell So you know exactly when I post another video and remember to craft outside the box


Chief of Naval Personnel, Vice Admiral William Moran hosted an all-hands call in Bahrain to address personnel concerns affecting sailors in today's Navy. The biggest focus for me whenever we get out in the fleet is to find out what motivates sailors to serve and to continue to serve. So we're always after trying to determine what things we can do to make the best of staying in the fleet. Moran also gave feedback to sailors' questions during the event. I thought it was really good that they mentioned that they had taken away the P&A points for people making the first class. Well that way when you have more senior enlisted they know more about their job rather than just leadership experience because what we really do need in the end is SMEs at your rate. Reporting from Bahrain, I'm Petty Officer Tatiana Aitman.


that he answered none of those questions. He just gave more unsupported assertions of the question-begging fallacy where he assumes his conclusion. He believes it because he believes it, and that's it. That's as far as we're going, round and round and round, and we're done. Brother, the recital is teaching you how to be the best human you can be. That's the science of the human. I've read it. It teaches the furthest thing from that. It teaches you how to be prejudice, how to judge people unfairly, how God judges people unfairly, how God forces us. God is the one, according to the Quran, right from the second chapter. It begins to talk about how God has decided who will believe and who will not. He has closed the eyes and closed the ears of the unbelievers, and then he's going to punish us for what he forced us into doing. So God is a completely unrighteous judge. We are not being good in any sense. We're judging people as unfairly as God judges us. I've read the Quran. It's trash.


This is the story of my 2022 Brighton 10K. The really gorgeous sunny day. And oh yes, the Brighton 10K is actually in Hove, actually. After a two-year hiatus, the Brighton 10K was back on. And having not gone hard at a 10K race since 2019, I thought I would give this one a go. I had spent most of November lying down and eating cake, so running a 40-minute 10K was going to be a challenge. But who doesn't enjoy a fruitless endeavour every so often? Ben's here. We've got Ben. Ben's not running, but Carla is. I was also joined by a number of my clubmates and other familiar faces from the local running scene. 10Ks are like the worst race in the world. They are horrible. But we're going to give it a go today at the Brighton 10K and see what happens. Some 1,200 runners lined up on the promenade next to Hove lawns. We are off. I'm going to be able to press my watch at the same time as holding the camera. Is that going to work? Here we go. We're off. Oh, I've taken a screenshot. It was good to have Victoria filming while Si was running. So I took a screenshot on my watch rather than starting the watch, so that is not a good start. But let's get going and see how we manage on the Brighton 10K. The race initially heads east along Hove prom for a kilometre before turning and heading into Brighton on the road. In the early kilometres I was concentrating so much on my pace that I completely forgot to get the camera out. By the time I remembered we were four kilometres into the race and about halfway between Brighton's Old West Pier and the Palace Pier. 4K in, 15, 53, but I know I'm not going to make 40. I'm already too tired. So here's the lead runner coming through now. At the sharp end of the race at this point was Gus Withers with a guy called Scott Cousins in second. 5K in 1957, so just under 20 minutes for 5K. The turnaround was halfway along Madeira Drive and up to that point I just about managed to maintain sub 40 goal pace. 6K. The wind is really strong against us now and I am definitely slowing down. By now the leaders were into the last two kilometres and Gus Withers was still in first place but he was being chased down by Will Bryan from Southampton, AC. 7km, that was 424, that kilometre. 28 minutes, 32 seconds. Nice for him ladies and gentlemen. Brighton 10k, 20 quads to the winner. Will Bryan, 30, 31. Gus Withers takes second place for Essex. 33, 44. Harry and Paul from Sussex. 418 for that kilometre. When you pass the peace statue, you know you're going from Brighton into Hove. So there's the peace statue and now we're in Hove actually. After a difficult two kilometres I'd had a word with myself and I pushed on to the finish. 37.01 for 9km. 1K to go. I've run sub 42 or 3 times before but I'm not getting any younger and the racing isn't getting any easier. There were some great performances at Brighton 10k with Dan cruising to 34 minutes and plenty of my club mates going sub 40. It wasn't to be for me this time and I think if I'm going to break any of my PB's in the future I will have to train specifically for those events. Long gone are the days of rocking up to any old distance and smashing out of time. Sure I could simply turn up to races, take it easy and enjoy myself but I do still feel I can improve my time. How did it get on? 40, 49. Naomi Mitchell from Reading AC won it for the ladies and Harriet Bloor was second with Helen Hall in third. Right there it is. 40 minutes working you get that. I can't argue with that can you? I am happy with that I've got to say because I'm not 40 minute fit I'm not sub 40 fit so to get 40 minutes something I'm very happy and the wind on the way back was very very strong. If you are enjoying the video finding it interesting or entertaining then please do hit the thumbs up button and you know subscribing to the channel is free and it really helps us out. Lorna how do you do? Not PB today? No. Ever got a PB? 43 something? Under 43. Under 43 for Everett. Ben and I then waited for Carla to cross the line. So we reckon Carla's going to come in in about 50 minutes. She was trying to stick with the 50 minute pace and then see how she does. That's Carla finishing in 47. What's her PB at the moment? Her road one is just over 50.  Ben and Carla run the time on feet YouTube channel. You came in on the clock in about 47.30 47.40? It depends how long it took you to cross the line. Yeah I really I really dislike 10k's I just can't do them at all. That was that was it was hard up to 5k but I kept kept by pace but then after 5k into the wind and just losing pace lack of fitness. Yeah it was hard work. My official time was 40.55 because I didn't start my watch until about 20 meters into the race. What's your best 10k time? Let me know in the comments down below. So that's it from the Brighton 10k with an absolutely lovely time. Can't argue with 40 minutes 49 seconds given my fitness level. Very happy and it's been a beautiful day in Brighton as well. If you if you want to come to Brighton there's plenty of races you can do in Brighton although the Brighton marathon might not be one of them these days. So yeah come down to Brighton and have a have a run down here. It's absolutely gorgeous by the sea things. Take care if you want to watch the last hard 10k race I did then that is linked just there otherwise we'll see you for the next adventure and we'll see you on the start line next time. Bye bye.