Well, good morning. Welcome. Thank you very much for coming on this beautiful August morning. I tried to get the temperature down a little bit, but it's not possible on these days. But I will tell you that it's... I appreciate you coming out today. And thank you for joining us to celebrate the opening of the vase with nine flowers. And Mr. Sorrells, James Sorrells, we're delighted to have this exhibit here. And more about that in a few minutes, but I wanted to recognize you and your partner Charmaine. Thank you very much for attending. We appreciate it very much. This work of public art is kind of, for me, a kind of refreshing respite, I guess, from what we've been dealing with, as Betsy will tell you that throughout the city. But this is... public art is something that makes us smile and feel a little lighter in the day as we kick off our day and drive down this boulevard, which we finally, finally, finally, finally got finished. So thank you very much for that, Mayor, and we'll move right along on that. But I wanted to tell you that this piece of public art will certainly enhance this boulevard both visually and culturally. I think it's the 137th, is that what it is? Is that right? 137th piece of public art in our city. And more to come, but creativity and, like I said, the ability to enlighten our minds just a little bit is what it's all about. And that's what we enjoy about it. The ethnic diversity of our art, all of the wonderful thought processes that I cannot creatively put my mind out. But thank you again, Mr. Sarls, for making it possible that we would have this wonderful piece here in our city. And kind of as the entrance from one side of this cultural district. There are several community members that have a lengthy list here who have given their time and talent to this project. And I'd like to recognize them by name. So it's Mike Groomer, Karen Wiley, Van Romans, Patricia Riley, Eric Lee from the Kimball, Maggie Adler, Andrea Carnes, Lee Hallman, Susan Urschel, Sam Duncan, Jennifer Kassler Price, Bill Campbell, who's here this morning, Kirk Slaughter, our city consultant Todd Buckingham, and city staff Mike Weiss. All of those folks and many more have had the opportunity to jump into this program. And it's certainly well worth their effort and certainly well worth my time and your time to express our appreciation to them. It's indeed also my pleasure this morning to introduce our mayor, which we had a long evening last night again, but we're up here ready to go again this morning. So Betsy, thank you for coming out this morning and give you the microphone here just for a second. That's long enough.  It's great entertainment, Dennis, thank you. Well, howdy. It's been much since I've been able to say howdy. You know, that's what I say to everybody in person. I wish we could have more people, but at least we're here in social distancing. Jameson's remain welcome to Fort Worth. We're thrilled to have you. And, you know, we're in the pandemic and things are different, but business and art goes on. And particularly art because it enriches our life as Dennis said so much. Our cultural and arts program and our institutions of art here in Fort Worth are bar none the best in the world. World-class museums, world-class art. I'm incredibly proud of our public art program and what all of you have helped us accomplish. This project is a part of the 2004 bond election. You know, sometimes we move slow, but when we move slow, we get the best products right now. And right now there are 49 additional public art projects underway in the city. And I can't wait to see each and every one of them. James created the perfect gateway for the cultural district. We're really excited about it. There's a saying in Texas that most things will sting you, stick you or prick you. This is designed to be a little bit reminiscent of some of our prickly cactus flowers and other flowers, but I don't think it's going to prick you. I just think it's going to delight you. James Searles is an internationally recognized artist and strong Texas roots. You were born in Tarrell, Texas, right? And Charmaine Locke is with us today, his wife here in Fort Worth. And she in her own right is a renowned artist. So we were pleased to have both of you working on this. James has received the Texas Medal of the Arts and Visual from the Texas Cultural Trust, the Texas State of the Arts from the Texas Commission on Arts and many, many other awards. Public art shows that the community is indeed investing in the life of their citizens. And every project that we add does that. And every few years we get our public arts catalog. And I am so pleased to be able to share that with other mayors across the nation. And many of them go, hmm, we thought ours was good, but it's nothing like Fort Worth. So James, thank you for sharing your talents with us here in Fort Worth and for sharing this collection. It's my pleasure now to introduce Bill Campbell, the Commissioner for the Fort Worth Arts. Well, welcome everybody and thank you Dennis for the weather. We've got to be glad to be here this morning. Exactly. We really are delighted to have such an internationally recognized sculptor as James here. And he was terrifically good to us to make this available to us at a time that we were frankly in a conundrum before all of this started. But as Dennis said, there's projects have gone on for a long time and there were quite a few bumps along the road. But anyway, we got it. And Mayor Price covered most of the things that I was going to say. I don't know if you knew, but that's right. But James is in many, many fantastic museums around the world, including the Central Culture de Arta Contemporario in Mexico City, the Smithsonian in Washington D.C., Solomon Cougenheim in New York, the Whitney in New York, and the Amen Carter Museum here in Fort Worth. And we're just thrilled to have this. It really elevates the city's collection and I think it'll be loved for many, many years. James. Thank you guys. I'm moving a little slow. I was using a chainsaw and kind of did something I shouldn't have done. I think, you know, in 1984, Time Magazine critic wrote an article or a review of me and I rushed out to get it the next morning. Our man and I were in New York in Soho and when I rushed out, there was a Time Magazine laying in the middle of Broome Street and the wind had blown it open to the page that my piece was.  I saw it run over it and it just tire printed it and mashed it flat. And I thought, boy, you better just stick to what you do and don't get involved in anything else, you know. I love making art. I love making art. I get up in the morning and I get to make art. I have been in many, many ways psychologically freed to do that because of a relationship I've had for 45 years with Charmaine Locke. It is nice having someone with you who can get you where you cannot get by yourself, you know. And I really, really appreciate that. She pushes me constantly. We'll walk out of the house to go somewhere and she'll look at me and say, are you going to wear that? And I'll say, well, I was. It's a vase. It's a picture. It's a vessel. It's a container. It's a bowl. It's a platter, you know. It has carried the symbolic references for the female since humans have been recording things.  It's the cup that clay. You made out of clay.  That's the nature of what a vessel does.  You know, that's what it is. The flowers that come out of it. Listen, we've been in Texas a long time.  It's the nature of being here. If you can't do it here, you can't do it. You know, that's been my feeling and my attitude. And it's been a very free-wheeling place for me to function and to operate and to live. I got a lot of rewards, psychological rewards for it, and lived the way the creative life that I wanted to live. Dick Cavett asked Steve McQueen once if he wasn't a little embarrassed about making a movie called The Blob. And Steve McQueen looked at him and in all seriousness says, No, I'm not embarrassed about that. That's the best I could do at the time. And I thought, man, if we all just did the best we could do at the time, you know, that's really all a community can ask of someone. To have this here is truly an honor. I think it'll be here long, long, long after I am gone. I make art now to go outside that will last. It will last as long as you love it. And it'll be here a long, long time. And I think that when cities, institutions, museums, entities of that magnitude and nature, when they get something, they take care of it. You know, it's like giving it a home. It's going somewhere safe. It's in the safe zone for history. And I really, really am appreciative of that. And I am aware of when this started. It's been a long journey. This was not what you would call just a easy rolling path for something of this magnitude to take place. But once it started, I was patient and was patient. It moved. It got done. And it's here. And I am really, really thankful for that. And I love it. And God bless you for it worth. You're my friend. And so we should probably have a large ribbon here or a bottle of champagne since we have neither. Thank you so much for coming. Thank you very much for spending a few minutes with us this morning. And please pass along the fact that we are now open for viewing on this great piece of public art. So thanks very much.


Today's topic is inspired by a video that's been circulating for a few weeks now in which a Jeet Kune Do student gets into a confrontation with a Wing Chun instructor and that made me think about the topic of dojo storming and is it good or bad for the martial arts? So I'm sure that many of you have seen this video already, it's been covered by many channels and it's been a topic of a lot of recent discussion and if you're not familiar with it I put it in the description below if you want to take a look. But bottom line is to give you know long story short a Wing Chun instructor was teaching a private class in his backyard when just a passerby off the street came in who was supposedly a Jeet Kune Do student and he was watching and he decided to interject his opinion into the lessons and correct the Wing Chun teacher and teach him what was right and what wasn't and of course the instructor took offense to this and you know called him out and said why don't you come up and show me how it's done correctly and there was a discussion going and honestly bottom line is you could see right off the bat the instructor was not impressed and the challenger couldn't even really articulate what he was trying to say you know he was stammering he was stuttering he wasn't really clarifying what he was trying to say but the incident escalated to the point of throwing blows to each other and you know I started thinking about this you know what was the purpose of this video my my impression was this was unnecessary because the kid who's kind of claiming to the property came into the class he went there apparently with the intent to cause a problem or maybe just to inject his wisdom on someone else's class and of course when the instructor took him up on it said let's demonstrate it let's let's do a test the guy's like oh no no no no let's forget that because I would have to kick you for real when I'm not doing it without any sparring gear and when the sparring gear was offered again it just escalated to the point where it went to a throw down now was anything proven in this video no obviously the challenger the Jeet Kune Do student didn't really validate his art because he got trashed and I won't even say he's a good representation of the art he was just some kid off the street now on the Wing Chun guy side was he validated either no because honestly his technique went out the window and the whole thing really kind of came down to more of just a street brawl there really wasn't many elements of either art in play and overall I don't think the whole experience was worth it all it did was cause a confrontation so where does this fall into the whole idea of dojo storming is dojo storming even the valid you know it goes back a long way and it was often an old-school way for academies to challenge each other superiority in the arts and it was often between members of rival schools now there are a lot of polarized opinions on dojo storming and I have seen the occasional comment on this channel pop up on how some of our viewers claim to challenge other schools or they want to so I thought this was worth discussing why would someone want to go to another school and drop a challenge anyway two primary reasons first to validate their own art or training over others and two to weed out the frauds and fake arts challenging another school or instructor in order to validate your training or to establish superiority over the school is a very real thing we typically see this today between practitioners of some of the more contemporary arts such as boxing BJJ and MMA themed arts there seems to be a subculture of this in Brazilian jiu-jitsu and with good reason BJJ as a community holds themselves to a very high standard with regards to training and skill in my observation BJJ is one of the few martial arts with the most consistency and belt rankings and expectations across various schools and organizations in the art earning a black belt in Brazilian jiu-jitsu often requires 10 to 15 years of hard training and is taken very seriously within this community if you are a BJJ practitioner and you have a black belt around your waist you better believe you will be expected to uphold that and are more than likely to be tested than a lot of other arts that being said there are a lot of schools out there with instructors claiming to be BJJ black belts who are clearly not and there are many YouTube videos of them being tested and revealed so many people feel that dojo storming will reveal these fraudulent instructors many also feel that they are doing the community of service by exposing the fake arts and preventing them from spreading bad teaching for example Chinese martial artists Jiu Jiu Dong is well known for this challenging many self-proclaimed masters of the respective arts and then destroying them there are also many videos out there of the mystical arts and the no-touch systems being challenged and debunked so it's very easy to see why dojo storming is a popular and common way to test the school or instructor because sometimes it can be hard to argue the results however I'm going to do just that and like any other controversial topic that we cover here we need to look at the other side of the coin first there could be any number of reasons a challenger can defeat an instructor of another school maybe you truly are a better fighter and had better training maybe their school isn't up to par with what they're claiming but context is everything is the school even a fighting school not everyone practices or teaches martial arts for the purpose of fighting some schools are tournament and sport focused other self-defense others lifestyle and culturally focused or some schools are just offering strength and exercise some schools simply just don't spar you can like it or hate it but that's a reality and not every school is a fighting school is instructor in top fighting shape you know they could be older have injuries or health concerns not immediately apparent to you or maybe they could have their fighting days behind them and they focus more on teaching it could also be a matter of a bad day versus a good day you know my last camp instructor would mop the floor with me every single time we sparred but there was one day one day I was clicking with the material and he was having a little bit of an off day and I dominated the sparring match out of like 10 years of training with him that was the only time it happened my point though is just because you defeat an instructor of another school does not automatically invalidate them or the art maybe you are just a better fighter maybe they aren't that good of a school or maybe there are other reasons to play and speaking of context the rule set is in play as well if you were challenging a different art than yours what are the rules are you expecting them to play and fight only by your rules or you willing to fight by theirs so is dojo storming even worth it here's my take I think that challenges and competition between schools can be very healthy but there's a productive and unproductive way to go about it now the video that we talked about in the beginning is a good example of an unproductive approach walking up unannounced and crashing someone else's class especially in their own yard and trying to interject your methods in training is a recipe for trouble if you just walking off the street and you disrupt a class and you drop a challenge one don't expect the school to even entertain that if they refuse to accept your challenge and in that scenario that is more likely that doesn't mean you've won or proven a point or that they're too scared to fight it means that you are an outside aggressor now trespassing and there are a lot of unknown variables at play they don't know you or know if you have a weapon on you or if you're on something or a dangerous individual or the slip it around liability most schools that have open mats and challenges between schools will usually require a liability waiver you coming in off the street you could be a very dangerous person or perhaps the opposite maybe you have a health concern or injury or aren't as good as you're proposing and they can be afraid of hurting you as well and that would be a very big liability especially on their own property so any instructor that would welcome and entertain this random challenge off the street is taking on some major risks the more likely and honestly appropriate response would be having the authorities called it's also a good way to get someone hurt there was a famous case back in 1970 when the martial artist known as Count Dante which is a topic for another time took part in dojo storming between schools and one of his colleagues was killed in the process just walking in off the street unannounced disrupting the class in progress insulting and challenging the instructor or top students doesn't earn you any moral high ground it doesn't prove anything except that you are a bully that being said however there are better ways to approach this if you truly want to challenge or test the school you can approach the instructor after a class and talk to them respectfully they might be more open to conduct an open mat challenge this way perhaps join them in the class and ask for time to be allocated at the end for a match a challenge should be mutually agreed on and conducted in a way that should demonstrate effectiveness in better context even Joe Jadong as we mentioned earlier he likes to challenge masters and weed out the frauds but he doesn't just march into the school and start fighting challenges are issued and a special exhibition match is set up both sides are willing participants with set rules and witnesses and judging so that it's a much safer and more effective way to go about it if your intent is to put your skills to the test that's one thing but if your goal is to humiliate cause trouble and beat up someone else because you don't like them or the school is learning entirely that is a complete lack of respect and a major disturbance to the integrity of the martial arts if you respectfully issue a challenge and it is refused honestly just accept it move on you don't have to like the school but you also don't have the right to but if you truly feel that the school is fraudulent or teaching something dangerous or detrimental and there are other ways of exposing them you know reporting them to the authorities or the media or other ways of putting the spotlight on them might be more effective but if you decide to storm into their school and cause trouble you're the one in the wrong and you're creating the conditions for something really bad to happen so tell me what you guys think about this I have a feeling that we're going to have a wide range of opinions on this and that's awesome and I invite the discussion for the comments but please let's keep it respectful and constructive and I'm also asking that people do not establish challenges on this channel that has been an issue in the past or been comments that have heated up to the point where people actually tried to set up you know back alley matches that will not be tolerated here that is not the point of the channel our point of this channel is to help each other exchange ideas and share perspectives so as long as you could do that all discussion is welcome thank you guys so much and we will see you next week


My name is Iris, we are TC949, and this is OCTF, five years and 50 minutes. You're on the right place, guys. It's like gym class. And five years ago, we invented and implemented a little game called, well, originally it was called Amateur Capture the Flag, and then it became Open Capture the Flag. And I guess we'll just have everybody stand up instead of names or, you know, so we know who we're talking to. Adrian Adam. CP. Jeff Ball. Frank Tu. Aprilette. Ah, history. So, five years ago, me and this guy over here, the redhead, Adam, we walk around DEF CON. This is many moons ago. DEF CON was at the Alexis Park. And there wasn't a whole, right now there's many DEF CON contests. There's Mystery Box, there's contests and badges and ninja party stuff you can take apart. And everybody else who has a party has a badge and takes stuff apart. And there's karaoke and there's more contests than I can possibly even remember. But it wasn't always that way. There was only maybe three or four contests originally. So there wasn't a whole lot of structured activities for attendees to do.  You know, you could talk, which is not bad. But obviously, the cornerstone contest of, you know, DEF CON forever is CTF. And CTF is really cool, but it suffers from one real nail, which is not everybody can play, right? I mean, CTF is awesome. Everybody would love to bash their brains up against some of the smartest guys out there on the net. But, you know, resources are limited. Not everybody can play their game. So over half intoxicated banter one day, me and Adam had a conversation and I kind of tossed the idea. I was like, yo, what if we made a game that was like CTF, but everybody could play? And he kind of looked at me and said, well, that's really cool. There's nothing about doing that. You want to do that? And I was like, no, we should go find somebody to do it. So we spent a year looking for somebody else to host this contest that would be fun for us to play. It would be like CTF, but everybody could play in this giant room and, you know, it would all have crazy hacker good times. And nobody wanted to do it. Everybody said, oh, that sounds like a good idea. You should do it.     And like, I think it was like an aluminum or iron case or something heavy as hell. We tried to host it over Wi-Fi the first year. That was really smart. And we set out to host this contest. And it had a million problems and was hardly ever up and had all kinds of... The finger of God was like flicking us off that day. It was not friendly. But the few people that came out to play had a lot of fun. And at the close of the contest, people walked up to us and said, wow, that was really cool. You guys had some serious problems. You should fix it. Oh, that's not the response I wanted. But that's what we got. So, yeah, it started really fledgling. And then a few years later, we were still doing it. And by the time we ended, what we thought would be very simple, originally amateur-esque services, games turned into just these monster, monster challenges that would literally take years to create. I mean, by OCTF 3, which is I think where we changed the name from amateur to open, the reason we changed the name is because other people would walk up to us and say, why do you guys call this amateur? This is not easy. I mean, not that I would claim to be some super legat-style programmer. But I mean, it was unique enough to where somebody else felt that we needed to change the name. So we did. So I guess the rest of the panel is over the years we've gotten a whole lot of really nasty complaints of stuff we did to people's computer. So I figure we'll just stand up and... Or we'll sit. Yeah, you guys want to sit. Make me stand. I see how it is. And just go over, I guess, some of the milestone services, some of the ones that were really popular, the ones that people remember. And then at any real time, if anybody's got anything they wanted to know or questions they've had over the years or is really upset about me blowing up their computer in year three, it's a panel. So feel free to get involved. Thank you. Thanks for interrupting. Stage Ninja. Stage Ninja.  Just real quick, guys. Anyone in here actually play in Open CTF for the last five years? Oh, wow. So I was expecting no one, so my next anecdote's not going to work. So yeah, we're going to cover some services. And then kind of towards the end there, I think we're going to have a lot of time left, ask questions, maybe services you would like to understand how we did the back end or what things we did and why we did them. And probably a lot about happy dance. Feel free to throw things at me. All right. One of the things that I liked running the contest was there was always a good range of services.  You could come here, try and hack something and have fun. Some of the stuff that I did throughout the years have been crypto related and some of it was simple, you know, talented into this and it gives you an encoded text with some custom algorithm, anything from rotation to transposition, like all kinds of different stuff. And basically you had to solve that. And there weren't any hints. It was just, here's a cypher text, give me back the plain text. And one of the other challenges that we had was it had to get harder as the contest progressed. I mean, if people were just battling back and forth, you know, two people know how to solve it, they're just going to script it and then, you know, the server is going to get tossed. So what we had to do was we had to make the challenges get more difficult over time at, you know, a reasonable rate so that people would always be able to try and have fun. So the crypto was a whole lot of fun.  And there were some different, it was web-based, you could do some different injection attacks and stuff like that. Or you could just try and play Hangman and win.  What else did I do? One year we had a whole economy set up because one of the things we got from, I think it was year three, someone came up and was like, you know, I really like your contest, and it's a great challenge, but it's not really like, you know, real life.  It's giving me a crypto thing. It's just not going to happen.  So, like, I'm not going to give you that, and it's more or less impossible. And if you do break it, you know, you're not going to release it here at OCTF, so you're probably going to do something else with it. So, what we did was we set up an entire economy.  And we had different flags, you know, hidden within, and, you know, basically all the websites you could hack or, you know, you could just try and manipulate the system to get what you want, more money, more credit, more stuff at the auction.  What else do we have? I was like, and what's great about the economy is like the real economy, it kind of crashed and fell apart. That was before it. Yeah. What else did I do? Oh, a letter drop. That one? Yeah, that one. I did a really interesting crypto one where normally you substitute one letter for another. Well, with this one, it wasn't that at all. You just rearranged the letters and you got your plain text. And that one, did anyone get that one? I think someone got it, but it was like, everyone thought it was super hard and it's like, all you have to do is rearrange the letters, guys, it's an anagram. It's not that tough. It was like 12 characters. Come on. So it was really interesting to see, you know, you do things like that that you think, oh, this is going to get, you know, smashed in the first 10 minutes.   You're like, okay, I don't know why they're trying that, but, you know, good luck. Anyways, it's been a lot of fun. I've learned a lot. Had good times with all the contestants. Pretty much know them all by name now. And we had a great run. And hopefully I'm going to go check out what the two boarders are doing over there after I get done talking. Who's next? So, well, I only recently joined the 949 crew and, you know, when they say that anybody can just come up and help them out, they're not lying about that. My first DEF CON was DEF CON 16. And I saw OCTF and I was like, this is really cool. And these are some cool guys. I'm going to go meet up with them. Then the very next year I was actually with OCTF and it was a whole lot of fun to work with them. So I only had one service, but it was a big, massive service. Are any of you guys familiar with the text game Zork? Okay, here's a few people. Good. So basically what mine was was Zork with a zero, you know, because hackers love numbers.  So you put them in a prison hosted by the NIST or MITRE or whoever you really want to call it.   And what you're going to do is all the guards are out at DEF CON right now, because they love DEF CON too.  He helps you break out of prison. And the entire idea is for you to not necessarily break out of prison entirely, but to go to the yard and deface the flag with your team name. So what this involved was basically, it was exactly like a text-based adventure. You would have to pick your way out of your cell, then navigate the text-based maze and try to figure out how to go from one level to the next.  You had to find out how to perform an exploit on the door in some way or another. You had to get a key card and then a thumb drive so you could add an exploit onto your key card and then put it in the lock. The lock would run the exploit, and then you would get through the next level. Then there was a final door, which is basically kind of like a key gen in a way, where it was basically a challenge response where you would have to download the lock and reverse engineer and try to figure out the algorithm. So when it gave you a question, you would have to give it a response. So as the game progressed, it would get harder and harder and harder. The exploits would get a lot more difficult to perform or more difficult to figure out. Sometimes you would have to figure out where the address was going. What else was there? Yeah, and the key generator got more and more obfuscated with every time. And how many of you guys play pen and paper games like D20 games? If the DM told you explicitly to go somewhere and really, really, really told you to go somewhere, would you follow them? Why would you follow them? That's so gullible. So here's what happened. Before you get to the library, which has a lot of key components, the descriptions of the rooms tell you, hey, by the way, you might want to go to the locker room. There's a lot of interesting things in the locker room. I actually got compliments on the writing of it, at least. So I mean... Yeah, and that was basically how Zork went. And that was just a whole lot of fun to write. Who's next? So I think these guys kind of understate the wacky antics that contestants do during the game. That was seriously like 80% of the fun every year that we ran it. It was just seeing the hairball schemes people would pull in the middle of the game. Like Adam was over there talking about deaf economy and oh yeah, it was funny because it crashed. What was really funny is after a while when people couldn't figure out a way to beat it to modify money, they just get up, walk around the room, start walking up to people's laptops and if it was open to their banking website, they just go, change. And then people would argue with us about it cheating. Not my fault. Oh man, all kinds of crazy... We had a mistake one year where we in all classic fashion left the login to a box as root root. Which is embarrassing for multiple reasons. A, because well, you know, we left the boxes root, root. You know, dood-de-dee. Secondly, because nobody found it for like an hour. Which is just sad. And then when somebody did find it, they didn't patch the box up so somebody else took it from them.  But they decided they would be crafty so when they gave us the box back since we didn't want to reset it, they left a nice little cron job that would look for every... We would look for the string that we tagged all of our flags with in every file on the computer and change it to their team name. The problem is their cron job didn't check to see which type of files it was modifying so at some point it started going through like libraries in the computer, you know, like G-Lib-C and just screwing crap up. But I'm scoring, the box just dies and it starts screaming at us, what did you do?  I didn't do it. Anyway, it's hard to just talk about my own service because my favorite services are stuff everybody else wrote because they're really cool. One of my fun little gems that I wrote was called Global Thermal Nuclear War. I hope at least one person in this room has seen war games and guessed the joke. Thank you. So Global Thermal Nuclear War was this webpage that you would go visit and there would be a little password field and there would be a button and the button would say, download Unlocker because that's not ominous at all.  So what this binary was is it was a three-card Monty. You'd run it and you'd see three options and you could play chess, you could play Tic-Tac-Toe or you could play Global Thermal Nuclear War. If you played Tic-Tac-Toe I actually wrote a really crappy terminal version of Tic-Tac-Toe that you could play and win and eventually if you did win it would display a rock 13 coded message at the bottom of the screen that would mutate every three times that you ran it and if you decoded all of them and put them together in a giant string excuse me it would just tell you this is a red herring why are you looking here and a lot of people spend time on that I really don't know why they did it it's rock 13 it's not hard and some people actually decoded it and then thought there was something else in it instead of looking at it for hours the chess game was just literally a link to a Windows chess game that people downloaded and eventually people like rooted that site and did all kinds of horrible things to that company I don't even know who it was I just picked it at random it was the first link on Google when I looked at chess so sorry for them and if you hit Global Thermal Nuclear War it would show you another three options and those three options would say okay you're playing Global Thermal Nuclear War which set of cities would you like to attack first and I actually took the orders from the movies so Seattle was in there you could decide if you were going to be the Russians the Americans and you'd pick one and each of these was the game itself there were three options one option would echo the correct password to slash def null which is about as close as you were going to get to having it give you the answer and the other two options would initiate malware payload one of the malware payloads would overwrite the first 512 bytes of every device attached to your computer with a really nasty bootloader that would just say in giant ASCII art letters and like a giant middle finger the only winning move is not to play and if you modified that firmware then you got another firmware because it detects the threat that the binary is modified and it just said har har and you know kind of laughed at you and the other payload would restart your computer so you have this binary and you run it and if you're not s-tracing it it just exits if you get it right so what are you going to do? you're going to run it again so you were very very likely to try to run it against both horrible payloads and it would hurt your machine and I hoped people would run it in the VM and most people did and I know at least one kid didn't because it was this first def con and I had this conversation with this 16 year old kid who was crying in a corner because his box was nuked and he was like but I just formatted it because I thought it was screwed so I'm a horrible person and again with the wacky antics so the coolest thing about that service I think was how the guys who beat it ended up beating it we had two teams from Korea Van and D-Dep so the binary, the way that it was created the only obfuscation it is the key was really stupid series of times tables and rather than try to out binary foo people that were trying to reverse it I think I packed it too it did something stupid every time that you downloaded it it was dynamically compiled I actually had a web script that would look through the source code of the file, change the statically encoded key in the C source compile it just for you the key was totally random there wasn't a way to read the algorithm out of the binary because it didn't exist so the guys who ended up just really reaming the hell out of that service figured this out and they wrote a python interpreter to read and unpack the binary and suck the key out of memory when it would run and then dynamically score the game every minute which is just fucking awesome I asked them for the script they still haven't sent to me if you guys see this, I want that script it's pretty cool that was one of my favorites I'm going to do happy dance last guys because I'm probably going to get some stuff thrown at me awesome service quota that's the one I'm trying to think of which one was quota movie quotes so people who played last year yeah do you guys remember the one with the animated gifts yeah I love you too so this was kind of an interesting service and I always pride myself when writing open CTS services to just kind of go completely out the window with it and just go for something great this time around it was animated gifts from movies oh that's not a big deal right you go to web page you see an animated gift from a random scene of a random movie and there's a text box I don't remember what it said read my lips and that was it if you were able to insert the text dialogue of that scene in the movie you would score so let's say you see Neo watching Morpheus jump across the buildings and he's whoa if you were to respond with whoa you would score and literally what it was is I wrote a series of M player scripts and M encoder scripts that would take entire movie files convert them to raw because of the frame-seeking behavior so I filled out my terabyte drive in an hour but holy shit movies convert to raw then I would take these sub-tale SRT files which I had a Python script parse out all the time stamps from the Python file SRT file and then M encode those few seconds from each video so I ended up with something like 30,000 animated gifts so if anyone wants the entire movie like The Matrix or Gone with the Wind or Passion of the Christ in animated gift format I have that and it was pretty fun so there was this random Russian Alice in Wonderland animated cartoon and I heard about this and I couldn't find it anywhere and I searched and searched and searched the intertubes to find this thing because I figured this would be fantastic no one's ever going to find this and I finally find it in a hole in the wall forum and it was posted on RapidShare so I downloaded off RapidShare I checked it out it is bizarre it's just creepy and it's got subtitles so now that I have this file I proceeded to contact RapidShare to a copyright holder and had them take it down so maybe it existed somewhere else but probably not over the two days of DEF CON and Quota was a lot of fun I hope you had fun with that I guess one of the things you had to do to beat that would be to did anyone actually script a response or to just watch the movie and like pull out the subtitle I think he said this now no one actually scripted awesome I figured the best way to do it in a scripted fashion would be to do some sort of frame seeking behavior and look at the different frames of the GIF and then seek through the video file and look for the same files or same frames but I don't fucking know how to do that so Tosear which one was that OCR did anyone play two years ago when there was the custom alphabet written in div tags I don't know how to describe it better than that give me a break here so you go to a page and you see a word or a sentence and I think it got longer with time and it basically was a custom alphabet that I wrote wow in JavaScript with Ajax so I could draw on my screen and create an entire alphabet and then print it back to you it was basically an OCR challenge but the characters had different sizes backwards and quake logo for the Q a few other weird things but what's great about it was the best way to do this logic would be to look at the source code and figure out what the characters are and what the problem is the alphabets are drawn on the screen using floating div tags in a random order God bless you so this I suppose you could extrapolate the points and write something that would put it all together and figure it out but again I don't know how to do that so to even get to the source code if you tried to look at the source code it used a series of client side obfuscation techniques that I developed for a previous talk on hacking with firefox and using firefox as a scraping platform it had flash flash one time padding flash encryption which just hooked into the javascript no the hook function javascripts and that one was alright enjoy it do I have to do them all at once? spread them out a little bit guys so did anybody play like three years ago who played an audio service called banshee you remember that listen to the wacky portal sound so nobody got it the person who came closest no? alright somebody did I don't remember I don't think anybody solved it so banshee was an internet well okay it was a way file you download this way file and it was the portal song and it was really static and if you listen to it the static would only appear in the intervals in the song it would be constant throughout the song but the intervals between each tick in the static were deliberate because the static was an mp3 file in the way file and if you took all of the data of all of the static out of the file which you should have been able to do because the distances between the ticks were the same it was at exactly 44,000 and one killer it so every one and it was a big binary blob and the first chunk of it was an mp3 file and the second chunk of it was the first half of a one time pad the second half of that one time pad was read to you by a computer in that mp3 file so you'd have to listen to it and type it this was supposed to be really simple at first because it only used four characters so to type these four characters and so on together and have the answer and every time that somebody scored the code that created the way file would recalculate everything that I just explained so the idea is that the message would get longer so the longest message that it would ever use is the Microsoft Sam voice reading the entire Hackers Manifesto backwards and you'd have to type all that and then it would compute but I don't think anybody ever got it so I'm curious as to how it worked that's how it worked can we get the laptop on the screen here put CB's laptop on thanks, alright from the service I did it was really simple looking you just get the red dot to the green dot put in left, right, up or down not hard it's at the beginning you get 40 seconds to do a 10 by 10 maze so really simple then it progressively got harder you see there that's level 50 out of 300 you just, right now it would start out black and white then it goes to the colors are off by like one red green blue value so you're not doing it by hand and then you also got like 40 at the beginning and down to 10 seconds at the end and so after that I figured it was too easy so I started to draw some lines and circles on it and then people might be looking at the difference in the walls in the background color so then I started drawing alpha transparent rectangles on it because really I didn't want it to be easy so and then I also started changing file formats in case that made a difference some people were telling me they just threw out any JPEGs and kept refreshing so they kind of tried to combine them all, who knows eventually it got too easy even after all the rectangles so I figured I'll just take one of the pixels and just throw them out and just start drawing different colors all over the place I actually, there were two teams that scripted it up pretty nicely although they know that I bumped the level up to 300 at the end and neither of them could score so it's kind of sad about that I would like to see the source of the bots if anybody's got it I enjoyed writing several services for host CTF over the years let's see they were in no order almost FTP'd HT DVD BVDB but it's so much funnier if I say it quickly it's even more funny if CP says it it doesn't so much better than I can I believe the challenge name was HDDVDBVDBD yes exactly and just the joy that I would feel in my heart hearing CP say that inspired me to write this service so what this service was there was this daemon that would just kind of output a video file and the poor recipient of the video file would have to figure out what in the heck is in there they'd have to break it down see what text or clues is in there to get the input necessary to flag and score originally I just was making all these videos by hand but after speaking to CP one night when I was almost done that kind of stinks you should probably make it so that it gets a little harder every time automatically otherwise we're going to run out of levels and people will be sad and then I was pretty tired and wanted to stop working on this that night so I was kind of giving them some flack about that but I called Adam that night to get a second opinion and he said yeah that kind of stinks you should probably take care of that so at that point I pretty much rewrote the whole thing so that it would take a video convert it compress it render text onto each frame and then output that get a little harder each time it would do all these weird transitions like it would do kind of Rubik's Cube style filters on the videos and change various aspects about it it was fun to do though because it was really educational in those several hours that it got rewritten in I had to learn how to have how to write a program that would render text onto a custom video format and how to mess it up Rubik's Cube style and all sorts of jazz like that then the night before maybe it was two nights before I think it was the night before we actually left California for DEF CON I realized the hard way that the banner command which is what I was using to render text onto these videos is apparently not the same banner command all the time there's apparently a BSD banner and there's a GNU banner the one I based the program on was BSD banner in Slackware and the contest was running on Debian which had the GNU banner command and so there was more education there and let's see here I wrote a chat program as I think part of the ice cream shop clue delivery kind of strategy it gave you some good clues and some misinformation as well and half of the chat and banter that was in there came from Adam and I just being in a Yahoo chat one night just some hacker chat room and so we just pull out random quotes change the names to protect the innocent and enhance some of the more boring quotes to make them interesting and a lot of them didn't even need to be modified so there was one quote to this day I still can't understand now correct me if I'm wrong wasn't it what he's looking at me yeah I'm looking at him you get out of the way wasn't it a forklift will shift it goo it was they had the most ridiculous things that yeah they didn't make any sense at all it was great and that was just fun because apparently you can make a chat program and our chat server and I don't know like four lines of bash I don't know that by the way we're gonna release a bunch of our stuff so that you can actually see his videos as opposed to just hearing a description of them and you get to play with all the other stuff like stuff that nukes your boot sector and stuff CP made and I had a backdoor in my chat program which didn't really go very far because of the previous years where we're messing with everyone they kind of knew if you download code from us you should probably take some precautions before you run it so yeah um Adrian I helped out with the service last year there was IRC based Merlin wrote most of it so he deserves most of the credit but he's not here right now so I'm gonna do the best I can we had a couple IRC services and we we tried to encourage people that hang out in IRC with us and we were gonna give them hints about how to score and what to do but as it turns out a lot of people had their own custom IRC clients and even a couple of teams that were doing really well in the contest couldn't stay in our IRC channel because they trusted the server too much and we ended up crashing a couple of computers by just catting a 10 megabyte ASCII art of long cat and this actually brought down a couple of computers I believe from the Facebook guys so we found that pretty amusing I think Big Pimp at Thugalots was one of the few teams that actually managed to stay in our server for most of the time without getting disconnected and they scored most of our, I think they scored most of the IRC points can't even remember what most of the flags were and how they worked alright does anyone remember Happy Dance Happy Dance was probably the best service I ever wrote it took me 8 months total cause I didn't really know anything about firefox development and it was it was too faced you go to web page and you're presented with what was that movie boondock saints there's an animated gif of not yet anyway I don't remember you go to the web page you try an attempt to log in and it tells you you're missing something and just under the text that says you're missing something is a link to it so you go there and because it looks like adamsbuilder.org firefox implicitly trusts it and it takes one little click for you to install the Happy Dance authentication extension which authenticates you to Happy Dance authentication portals and I was really kind of surprised how many people did this I think it was just about everyone playing the contest and they install it, restart firefox and it comes back on I got that link after I went to this service, I'm going to go back to this service I'm going to log in again well this time you fail the login and you get told why, your password is wrong you have no access but something is different and you go back like what's the most basic thing I can do to a login form sql injection so use the typical textbook example of sql injection and there you go you scored you own the flag shit that was easy why was that so easy well because as soon as you installed the extension and restarted firefox it would send a plaintext ajax call back to a local server with all the stored passwords in the firefox password manager keyword plaintext which means it was on the whole game and nobody said anything all you had to do was sniff and wonder why your passwords were leaving your box and nobody did this including you feds who got raped I'm only a dog I only know things like sit and food and rape so yeah the ajax call would go out send all your passwords to our local server in plaintext and the return data would be arbitrary commands that would execute on the system at first it didn't really do anything and it would just send all your passwords so every time a new window opens every time firefox starts it does this so the traffic increases like 20% with plaintext passwords going back and forth and after a while and I feel we're at a hacker con we're playing in a hacking contest these are hackers they're not going to be dumb they're not going to have stored passwords in firefox they're not going to log in from work boxes that have stored credentials that they use for work on major company websites like oh I don't know Cisco or Sun or Oracle or universal gateways like <IP_ADDRESS> on their corporate networks and it was a lot of fun because it was so fucking easy oh you scored yeah you scored you win and no one really looked at the source code because they kind of fricking couldn't it was obfuscated out to about 47 pages if you were to print it out of size 2 text because this whole custom obfuscation in Python a bunch of other stuff that was all in math like cosine and sine waves and it just decoded to actual text and no one actually solved it in fact I believe one or two teams tried to decode it manually by hand and I think they got pretty far after the first day I think one person did get it by the end because all you really had to do was wrap the whole thing in document.write and it vows out and will print out the original source code someone goes hey CP you got the source code of the firefox extension I knew this was going to happen so I reached down there you go handed them the stack of printed out source code it was a lot of fun you're an asshole I don't have it on me but one of the things happy dance did like I said was the arbitrary command execution I could tell it to send another password back to me or send up an alert box every now and then you're like alright I'm going to just make it say CP is thirsty and every now and then someone will bring me a drink like what the hell was that about like oh you must be compromised and one guy is like hey how did you do that I'm like well I don't know you tell me and after a while we made it so every time you scored it would remove the javascript limitation from your browser so there's no script escape we'd load up goatsie or meat spin rather and then we freeze your browser so every time you scored yeah you got points but now you got to restart your browser which by the way sends your password back and checks for more commands to run well that was a lot of fun so one of the command trips five minutes all the command tricks I was doing was I'd send it new location data so the browser would just go jump around the screen that's pretty fun a big deal but the greatest part the greatest one was sending the restart command to firefox see the gears turning firefox turns on sends passwords, checks for command to run runs command, oh restart so you see firefox popping in and out popping in and out again plain text nobody saw it dozens of times a second 300 people have their laptops turning on and off firefox turning on and off and there's this kid I still remember this because I feel kind of bad about it but he's sitting here on his windows XP box with his head in his hands just not able to do anything because firefox is popping in and out he uninstalls firefox he reinstalls firefox it's still there because he didn't delete his profile additionally the extension removed itself from the installed add-ons list you couldn't uninstall it unless you were in safe mode quick I think we'll be outside if anyone wants to do Q&A there's like a room over there like a room in that way in our old direction yeah so thank you guys so much we had a lot of fun doing open CTF for the last five years it was an amazing learning experience an amazing teaching experience and a very exhausting experience so check out the new guys word of the wise those of you who ever intend on running a contest at DEF CON take the amount of time you think it's going to take you to make it and then triple it you might get close by the way real quick check out the new OCTF and his crew the tube warriors have taken it over now and expect really good things from them thank you guys


One of the most common questions with regards to customer journey mapping is where do I start and stop mapping the journey? Well, in this video, I'm going to show you two very straightforward strategies that will help you to answer this question and get on with the real important stuff. Let the show begin. Hi, I'm Mark and welcome to the service design show. This show is all about helping you to design services that have a positive impact on people and are good for business. And customer journey mapping and customer journey maps are a very important tool in that process. And one of the most common questions with regards to customer journey maps and customer journey mapping is how far should the journey go? Where does it start and where does it stop? And if you've ever been part of a workshop where this question arose, you've probably noticed that you can end up in endless discussions if something is still part of the journey and if it isn't. Well, that's usually a waste of your time. And a common mistake I see people making when answering this question, where does a journey start and end is to think of the moment the first time a customer interacts with an organization that that's the moment the journey starts. So for instance, the moment you walk into the airport, that that's the moment the journey of your travel experience starts. Well, that's a common mistake because as you'll see later on, a lot of the clues and answers to improving the user experience, the customer experience lie specifically in the parts before entering an airport or after leaving the airport, as it has been scientifically shown that what we remember the memory we have of the quality of a service is determined by the last part. So if you don't look at the last part of a service after you've maybe even left the airport, you'll miss out on some important opportunities to improve the experience. So the question is, how do we determine where does it start and where does it stop? So the way I think about where a journey ends is to think about the specific goal a customer wants to achieve, not thinking about process maps and what the process map says, but really think about what is the goal your customer wants to achieve. So for instance, if somebody wants to buy a house, then that's the specific end goal. But the question is, how far do you go with that? Because buying a house, you could think about the moment, the specific goal could be signing the mortgage papers, it could be the moment you enter the house or it could be the first time you meet your new neighbors. So how far do you actually go with expanding the journey? How far should you go? Paulin said in his episode on the show that service design is really fractal. So every journey contains endless numbers, probably of smaller journeys. So if we think about buying a house, like I said, think about the end goal. But it also, if you think about the start, how far back should you go? Is a conversation at a birthday party also part of the journey of buying a house until you want to play a role in that as a company, you can make it as big and as small as you'd like. And that can be a real challenge. So how do we approach this? Well, I think and I have two very pragmatic strategies to just answer this question and get on with the real important stuff. So my first approach is really simple and straightforward. Start mapping the journey by looking at what's happening in the middle of your journey. So let's say it's the journey phase. What is the moment your customer interacts with your company that you know for sure? Start with that moment and then just work your way out. And it's up to you how many steps you're going to take to start and end. And at first it's smart to do more steps than less. So just start in the middle and then think of five steps to the left and five steps to the right. I hope you can see this drawing. So this is my first approach. Start in the middle and then start mapping it out to the sides. The second approach is similar to the first one, but it's a little bit different in the way that you define three moments. You define the journey moment and you define an end moment and you define the start moment. And it doesn't really matter what those moments are at first in this stage, but you just pick those three and then you start filling in the gaps in between. So when I would do this in a workshop, I would say what are three interactions, activities, touch points that are in between the start and the journey phase and what are the three touch points that are in between the journey and the end phase. And you start filling in the gaps in that way. And does that mean that you will know for sure if this is the end and the start moment? Nope, you won't. But like I said, it doesn't really matter at first. Just start making the map and then you can always sort of expand and ask the question, okay, is this really the end? Isn't what's going to happen after this moment? But if you just approach it by filling in the gaps, you'll have something to talk about. I think that's the key essence of this approach. You get up to speed, you pick up momentum and you have something to think about. So the first approach was really expand out both ways. And the second approach is fill in the gaps. So you might be wondering or you might get the question, why should we map activities that aren't in the sphere of our service delivery? So why should we map activities outside of the airport? Or why should we map activities that are after the moment that we've signed the mortgage papers? For instance, the birthday party, right? If you're talking to your neighbor about buying a new house, why should we map those activities? Well, the truth is that usually you'll find the most interesting clues on how to improve the user experience, how to improve your service in the before and after phase. Usually those are the really interesting areas to map. Because who knows, maybe you'll find an interesting opportunity, an interesting solution on how you could influence the conversation at a birthday party for people to pick you as a mortgage provider. I don't know how, but you'll see that if you start thinking about what happens outside of the realm of your own service, you'll really get a lot of clues on how to do that. So I guess my key message here is that it doesn't really matter that much what the start and end point of your map are. It's really hard to define that anyway. The best way to think about it is from the perspective of your client. So like I said, or your customer, like I said, think about the specific goal he or she wants to achieve and take that as an end moment. And the start moment, it's really up to you to pick how far you want to go. And my advice would be it's better to go too broad than too narrow, because if you go too broad, you can always narrow down. And if you go broad, the chances are that you'll see some interesting opportunities in that space. But the most important thing is like I said, just start mapping. Make sure you have something on paper that you can talk about with other people and get that discussion going, because that's where the real value lies and not in scientifically determining what the start and end point of your journey is. And if you do it right, if you do customer journey mapping right, it is always an iterative process, you'll always be updating your map, you'll always be expanding the map, you'll always be updating the map. So if you're in debt flow, it doesn't matter that much what the start and end point will be the first time you start mapping. So just just go out and do it. So I hope this video helps you a little bit the next time you need to answer the question where to start and then your customer journey map. And I'm really interested, what is your approach to answering this question, because there are more people like you watching this video and I'm sure your perspective on how to answer this question will be helpful for them. If you'd like to dig deeper into customer journey mapping, I have a whole playlist dedicated on that topic. So make sure you check that out. It should be somewhere over here or here. And if this is your first time here on this channel, I'd love to have you subscribe so we can keep bringing you more videos like this. Thanks so much for watching and I look forward to seeing you in the next video.


The journey is from really managing data to managing analytics to managing insight. So when we think about prescriptive and predictive analytics, we know that that's all fueled by data. It's fueled by data in different configurations and at different levels of quality. I think that in terms of the traditional approach to managing data and delivering business intelligence, we're going to see a shift. We're going to see a shift in the way people approach the challenge. We're going to see a shift in the skills required to get the job done. We're going to see a shift in the direction of prescriptive and predictive outcomes.


Here we are in our QuickBooks online test company file using the accountant view as opposed to the business view you can toggle between the two views by going to the cog up top and switch the view down below. Opening some tabs to put reports in like we do every time. Right click in the tab up top to duplicate it. Right click in the tab up top once again to duplicate once again. Back to the tab to the middle and down to the reports on the left hand side. Opening up the balance sheet once again. Tab into the right reports on the left and this time we want the P to the L, the profit to the loss, the income statement. Closing up the hamburger and changing that ranging from going from this time, let's go from 0901 to five to 0932 five. And so I don't have anything in there thus far. That's what we're looking for cause we're going to add stuff for the Amazon sales. Tab into the middle closing the hamburger again. Range the same 0901 to five to 0932 five. Run it to refresh it. And then we're going to tab to the left and we've been working on e-commerce situations where we're selling inventory but not on the ground, not in a store but rather online in the cloud with the help and use of third party platforms. For example, a Shopify or an Amazon. In prior presentations, we've been focusing more on the Shopify. Now we're taking a look at more at an Amazon type situation noting that no matter what the third party platform, the general concepts, the overarching concept is in essence the same. We could use different methods to pull that information in from the third party platform into our system either with the use of just bank feeds or we might have a manual entry system pulling information from the third party platform and bank feeds or we could use the QBO commerce which we'll talk about later or like a third party app that's gonna help to pull in that information. Right now we're focused on the manual entry method and more on an Amazon based situation because some of the line items might be a little bit more or different or more detailed. And then, but this method is not just for the manual method in concept because when we think about applications such as the QBO commerce and some of the third party applications, they're gonna pull in the information in a similar way. They're just gonna kind of do it in an automated fashion so we're still gonna need to know some concepts like clearing accounts when we do some of those integrations that we'll talk about in future presentations. In a prior presentation, we worked a practice problem in Excel where we imagined we're pulling information from Amazon because we're having sales that are taking place on Amazon. We're looking at the deposits or payments that are going from Amazon to us which happens about every two weeks and we're looking to break out the detail of all the activity that's happening on Amazon's side before they send out that deposit. That's the general concept, similar concept to what we would do in a Shopify situation. However, we might have different line items when you're thinking about an Amazon situation possibly more line items depending on your circumstances than you might have in a Shopify type situation. So then we can think of doing our accounting in QuickBooks a couple different ways, the easiest ways to say I'm gonna ignore all this other stuff that breaks out from the deposit and just wait till it hits the bank feeds and then record it as basically income when it hits the bank feeds. Or we could try to get more detail entering a journal entry which is still gonna get to the same deposit amount but we'll break out all of this detail so we have it in our finances. And of course, this second method is similar to what other integrations are trying to do including the QuickBooks basically integration. It's not pulling in every transaction. We're summarizing the transaction and then trying to pull them into our QuickBooks so we have more detailed financial statements although we're not pulling in for example, every customer or tracking every unit of inventory on a perpetual inventory based system. Okay, so the first thing we're gonna do to get this practice problem going is I wanna once again upload some bank feed data so we can see the bank feed come through. So I'm gonna do this two times and we're gonna do it two different ways. So I'm gonna put the date, the amount, the bank memo and then I'm gonna have one in August and one in September for that amount that's gonna go into our bank account, the 391.88. And so once we have this, I'm gonna save it as a CSV file as we've done in the past so I'll do it fairly quickly. Hit in the dropdown, save as and we're gonna save it as, I'll hit the dropdown here, a CSV. So it's not gonna be an Excel file, but a CSV and I'm gonna make it bank feeds number three. So we'll say, okay, boom. And then if I look at it in my folder here, we've got the bank feeds number three right there. Opening it back up, just check it, that's the one. Let's pull that into our QuickBooks. So we're gonna go into the banking and I'm gonna go into the links up top but I'm gonna upload, upload from the file, okay. And then we'll select where we wanna be pulling this information from. So let's see if I can find it. I'm gonna copy the URL here, copy the URL, paste it and bank feed number three. And we'll just pull that in as we've done in the past. This is going into the checking account just like if it was connected to the bank feeds and yes, column, one column. My voice is going MMDD, Y, Y, Y, Y, Y. And then date to date, description goes to the bank memo field, amount to amount, that is it. Let's go okay. There's the two I wanna pull in. I'm gonna select all of them, boom. And continue, save it. Okay, import complete, done. Mui B to the N. So if I go onto the checking account, we've got those two amounts are pulling in in our practice data in the bank feeds. So now if we looked at our first method, we can say, well, I'm just gonna let, I'm just gonna see it hit the bank feeds and then I'm just gonna record it as Amazon sales at that point. So what would be the easiest thing to do? We could say, I'll just wait until it hits the bank feeds like this one and I will just put it into directly Amazon sales. Now I should have changed the memo to be Amazon. This would probably, the memo would probably say like Amazon on the bank feed memo or something. So let's do that. I'll put it into Amazon tab, Amazon, boom. And then I'm gonna put it into a sales like Amazon sales or something like that. So do I have an Amazon, Amazon? I'll just say sales, Amazon. And I'll make a new one, boom. And we'll just call it an income account, income. And it's gonna be sales, Amazon. I'll put it into other primary income, save it. And that's it. I could even make a rule for it to come in automatically and just say, okay. And then if I check it out on my checking, it's gonna be going into the checking account. And we see that here. So that's not it. Oh, I gotta go back a month. Hold on a second, exit. Let's go from 0801 to 5 to 0830 to 530. And then run it. And so there we've got our deposit, boom. And then going back up, the other side's going, exit to the income statement, changing the date again to 0801 to 5 to 0830 to 5 and run it. And so there is our sales. Now remember that one of the obstacles you have with this is that if you get a 1099, it might be for the gross sales amount and Amazon could have taken a substantial amount out.  So if you got a Schedule C at the end of the year, and let's imagine this was for an entire year that was saying 20171, then you would just say, okay, well I'll just take the difference and I'll increase my top line revenue and then I'll record the other side to like fees or something like that. So we could do a journal entry. So this would be like the easiest thing to do. We're making a lot of assumptions here, but we could just then go, okay.