No. So we have the latest, the latest version of the, do we have a latest version here? Yes. It should have 2.1. Okay. 2.1. And I've got a copy that here is the, it's changed substantially since the last couple of times we've talked about it. All reference to admission options. Yes. But other than that, I thought it was pretty, and then we got the quotes better. Well, it also puts the focus on Vermont's long time leadership and opposing spread of nuclear weapons, which I think is something that people in this building will relate to as well as people outside the building, obviously. Yeah. But I think reminding them that the General Assembly voted for nuclear, abolition of nuclear weapons is a good reminder for people to have with them. I think that we've made it more appealing to the Senate while keeping it on target pollution, use that phrase. Well, while keeping it with the spirit that the citizens wanted it to be when they originally proposed it. Right. Yes, it consists with our resolution of many years ago. In 1999. So this is sort of, you know, it's 20 years later. This is the update. Well, part of the problem is talking to somebody about it. We also closed Vermont Yankee, obviously, part of it, because we were concerned about the effects of nuclear power. But we've got it so used to us as Americans living in a constant state of war, like all this bad stuff going on around us so much that I think that we've forgotten about it. We have not thought enough about nuclear weapons in a long time, I think. Right. This is a good reminder. Wake up, call that. This threat has not come away. In fact, it's coming. You could argue we're closer than ever. And yes, in fact, it's going to be insidiously embedded unless we do something and stand up and say no. Right. So a procedural question. We will vote it out today. We'll bring it up. It'll be in the calendar tomorrow. Right. I don't know that the resolutions do the same thing. They go unnoticed. OK. So they'll go unnoticed tomorrow. And tomorrow is tomorrow Thursday. So Friday, it'll be voted on. I don't know. We generally don't read resolutions. Right. Steve just read the resolution. Yes. But that was very special. We hardly ever read resolutions. Right. So the question is, given the fact that a lot of people have committed to vote for it, do we really want to read it? And do we want to encourage not having a roll call vote? I would ask my two questions. I think those are good questions. I would prefer to have it read. It's not that long. And I would prefer to not have a roll call vote. I thought, I could be wrong, obviously, but I thought that since it was treated as a bill, treated like a bill sent to committee, that we were presented like a bill on the floor. Oh, interesting. That's just my assumption that they treated as a bill sent to committee. That's because there's any policy, or even if there isn't a policy, and if they don't want to put it right on that calendar that they treated as a bill. So I think we have to ask John Bloomer. We should. So let's chat, because actually it would be wonderful if you presented it, or either one of you presented it, it would be, I would think that would be great, better than it being read, quite frankly. Sure. It will be distributed to everybody's desks, because it's so different, obviously, from what was initially presented, introduced. So I think it would be much better if we explained it briefly inside of it being read. Right. Well, if I would, so check with Bloomer, and if it's treated like a bill, then there would be a report on it, and the reference to the committee vote. And however you want to do that. And I would ask that you present it. You've been more involved in it, and you were one of the original sponsors, I was not. It's true, you were not. We're glad you've come along. And I did have that. Okay. And out of difference, I can speak with, well, I don't know who might be on either side. I can speak with people that might be on the side I'm going to find myself on, not to request a roll call. That's why I would not request a roll call. I've been asking people when they either say yes or no. Oh, please don't. Okay. Right. And I won't ask them. Yeah. Yeah. Can I go find Chris? Do we know where Chris is? He's in a conference. Oh, I know. I didn't hear that. Yeah. So, but we can keep it open. Yeah. For him, because we know he's, he was a reluctant maybe at the beginning as it was I. And I think the both of us have come around. Okay. And I have to say I've come around because of all the work that's been done on it. I would not have come around to the original resolution. Well, I think two things were, as I watched, I mean, because I was in early. But I think what impacted us all was the hearing. The committee hearing was very powerful, I thought. And I thought that was great. And I'm really grateful that you pushed forward on that, Jeanette. Thank you. Yeah. I think we'd be in a whole different place if it wasn't for the hearing. Yeah. Pretty powerful. Yeah. It was powerful. And wow. So, is there a, I'd make a motion that we move, that we vote out SR5 as amended. What would that do? We amend SR5 with draft 2.1. That's the first thing. And so, Bray is not here. Clarkson, yes. Call, Callmour? Polina? Yes. White? Yes. Okay. And the second motion is to pass out SR5 as amended. And Bray is still missing. Clarkson is a yes. Callmour is no. Polina? Yes. White? Yes. Great. Thanks. And I'll get Chris on those two votes. Good. Good work. Thank you. Thank you. Well, and to move forward, not just to stick with it, but to move forward, because that was the big decision.


What's going on guys, welcome to another video. I'm actually going to bass push-ups today gonna pick up some tackle I'm taking you guys along with me. You guys like the last one, so why not make another one? It's good Man, I could just snooze on this guy right here What am I doing bass push-up gets me every time I just gotta walk away That is a beautiful bit right there I got some cranker I got three Katie's actually with me Uh That one DT six. Oh god That right there. They just restocked them over. They have the good color That's the good color belt. They're out right there These are here that there's expense. I've been breaking like every one of them, but we just got some bombers Last time I went out. Is this right here? I got all of them. They got just cuz Yeah Well we got going right now I got she got one of these DT sixes I broke off so many of those is why I'm scared to buy them so expensive But two of those for these bomber one of these bandits I know they've been tearing. I mean really any of these crankies they're gonna tear up if they dive six to eight foot They're just beginning. I'm pretty good Right here. I mean, maybe that's the speed curl. That's black and red. That's probably good Black and red over black and blue. Yeah, I like it I lost one of my good ones It's too small So light Yeah, well, you're talking about You're talking about the reaction ones I had they don't sell them here, but This right here's what I would get I've actually used these Sacrulophati We're gonna be punching that be good too, but the black and black and red Yeah, but I threw this as a Texas, and you could put that on like a jig Get these two it's half ounce Listen listen listen Good again So like my money going away right there Oh, I think I'm on a yeah Think I'm gonna get it Give me one spinner rate to Promises is gonna be another over $50 purchase. I Did the past two weeks I literally spent like 300 bucks in this place, but I got a 25 off We use that but I can't win All right guys, that's it So I thought I said I was gonna spend over 50 bucks Well, I ended up it ended up being 40 bucks. I had a $25 gift card and I got $13 off because of points It's gonna be in $2. That's the best I've got out of basketball shots But I just wanted to do like a little video, you know over so I was gonna go pick up some tackle and stuff for you Know river fishing so be sure to check out that series be sure to check out my other best Percival videos, but thank you guys so much for watching enjoyed the video Please hit the like button comment below and I'll catch you guys And the next one


Hi y'all. She was seven and back Okay, so this video comes from An experience that I just had okay, and y'all know I'm a card reader, right? I read cards. I read tarot cards. I read oracle cards and such My card reader I have a website and it has all the different card readings that I do Okay So I've had these cards since I was 13 years old. I'm very connected to them Okay, I I get messages from spirit through the cards, okay? I work with cards because I'm very opinionated as a person and The cards guide me To you know, you know the cards wherever the cards lay whatever is on the card is what I say I don't pull nothing out the sky. I don't try to guess. I don't try to tap in or anything I'm just reading the cards. Okay Hi channel through cards. I communicate through parts. So This lady asked me if I could do a Blind reading which is like using no cards just pulling stuff out of the sky what I feel what I see, right? And I don't do blind readings y'all For one reason I'm too opinionated like my eyes will deceive me And that is it's not a flaw But that is a character trait that I do have and I'm not ashamed to admit that like I judge people a lot Not not judging them in a bad way, but by what I see and usually, you know It could be right or it could be wrong because it's my perception with the cards. It's not my perception It's just what he is that you know the law of chance So I did this lady's blind reading y'all and it was so wrong and guess what she was she was upset and She wanted me to do the card reading after the blind reading it Which I had taken 20 minutes to do the blind reading, you know pulling stuff out of the air wherever it came from and trying my best, but She said it was all wrong. So I was like, well, that's why I use cards because I'm guided by the cards I'm I said I I never said I was psychic. I just said that I was intuitive and I was a card reader and so she was like well, I'm a medium myself and Uh, you don't pick up anything else. I'm like no because I don't do blind readings I just use the cards because I'm too opinionated. Uh, so I'm embarrassed because um Basically, I told her she was single. She was still looking for love Uh, she had a big heart. She was protecting herself She gives more than she receives just this and that and Like that's all I could pick up on her was that she was kind of insecure. She gives more than she gets That's basically what I gave her and I since I didn't mention anything about her kids or her man or Whatever she thought It was all wrong, but I didn't see her kids or her man. I was like she asked me about her. Okay, so It turns out because I went to go look on the group page and it turns out That she's having issues with her man And she wanted that to come out through the reading, right? And Y'all the reason she's having issues with her man is because he looks 10 times better than she does And uh Yeah, we all know what that's about. Um, I keep telling y'all y'all get no man that looks better than y'all because y'all will have issues Anyway, um When you're having that type of issue like first of all ladies I keep telling y'all this over and over if you know that you aren't the number If you know that you ain't the best-looking thing in the world And you got a man that's a nine or a ten And he's with you Don't think it's because he Don't think it's because you're his number one choice In what a woman would he likes? It's not it's it's something else. Um Also You know Be realistic be realistic Okay, sometimes guys get with women who aren't very attractive because they're secretly gay Any house to like understand the signs and know the signs? um If they have more accessories and scarves than you chances are they might be You know if they take longer in the bathroom than you do chances are they might be if they look 10 times better than you You're the decoy. Okay. Um Let me see. I gotta put on my glasses y'all because I never looked this picture again. Hold on Oh, yeah, okay. I just had to I just had to take a second look.  Um So, yeah, that's that's your problem is lady Um, I'm sorry.   Oh my god. Okay.   No man like him would really get with you. You need to check you need to check Because he could be on the download. Okay Um, I don't I'm not making fun of this lady. Uh, I'm keeping her identity concealed. I do take Uh things from my real life and I use them. I don't reveal names or whatever whatever. So If I don't know if she's watching this, I hope not but if she is I'm sorry Um And it's not about the reading, you know, it's about The situation, okay Um So ladies, yeah, if you suspect your man of being gay Chances are you're probably If you suspect your man of cheating And he looks 10 times better than you And you have no business being with him. He's probably gay Or using you either one so That's why I tell a lot of these ladies I know it's it's hard and you know, you might not be the most attractive female in the world but You need to be like very suspicious of a very very attractive man You know getting with it because you usually it's a trick and it's a decoy and if if you really think about it You should be more suspicious than impressed or Uh infatuated. I know I would if if boy's cojo came out of the blue and and he wanted to marry me Or or get with me. I'll be like what what's the catch? What's the catch?  I don't care He's still it's still not this is not happening.  It's That's just how it is. Um I know plenty of girls who have done that and they pay for it in the future because That guy gets comfortable And then he starts going after his real type be it gay or a different type of woman um so unattractive ladies Who are obviously like I'm not I'm not saying you're unattractive I'm saying that if the man is like a model and you're just you know Okay, you have you got to look into that and Any woman can become attractive. Okay, any woman could slap on a wig and makeup and A waste censure and put on designer clothes and heels and lashes any woman can be beautiful. Okay, that's not the problem The problem is knowing your limitations Okay, just like It's just obvious, you know, you know A super model is not going to want someone who looks a certain way. You just that's just obvious common sense so if you're dating someone that's like That gorgeous of a man and you're like plain plain plain super You know just Not glamorous at all.  So I'm I'm just keeping it real. I'm sorry I mean a lot of women can probably vouch for this And tell me I'm right, you know, that's why I don't I never dated no pretty boys I did actually when I was young and I learned my lesson Because I would never date anybody that looks better than me. Mm-hmm. Can't do it I did before and don't work Believe me Now if y'all both look the same, you know, like y'all both a perfect ten then y'all probably just probably Will be like Boris and his wife, you know They're both gorgeous people and they probably don't even see their own beauty anymore.   That's why y'all having trouble Okay, y'all I'm gonna cut it short comment what y'all think below and I'll see y'all later thumbs up


but I feel like if a man can no longer provide the way that he was providing before or don't provide in the way that she would want her man to, if another man come along and say, Hey, I could show you this lifestyle. You could have this. This is what it would be like being with me. I guarantee you she may not tiptoe right in the near, but it will place a nugget in her head like, Dang, I'm with this dude, but I'm getting offered this. You know what I'm saying? I think that little bit of nugget can cause a woman to tiptoe into another terrier to her.


Hello and welcome to the session in which we would look at impairment of value for that investment. What is the big idea? Well, simply put when you make an investment in a debt simply put when you lend money This is what what do we mean by investment in debt when you lend money when you buy a bond There's always a risk of not receiving your money. What does that mean? It means when you lend someone money that individual may not pay you for many reasons Maybe the company goes out of business. Maybe do the economic condition their industry is suffering Whatever the reason is you may not be able to get your money. It's the same concept as selling on credit What do we mean by selling on credit? Well, remember every time we saw long we sell on credit There's a risk of not receiving the full amount or a partial amount of our money The best way to kind of start this discussion is to review the impairment of receivable Because once you review the impairment of receivable, you understand how the impairment of that instrument work simply put We make a sale for let's just for the sake of simplicity a sale for ten thousand dollar to ABC company We debit account receivable we credit sales for ten thousand and we hope we are going to receive this amount There at some point at the end of the year We might have to estimate bad Expense and let's assume we estimated $50,000 of bad that expense for the company and we credit allowance for 50,000 allowance for bad debt there at some point after we estimate We may figure out that ABC company will not be paying us once ABC company once we determine It's not gonna pay us. We are going to debit the allowance and credit the account receivable for ABC company, which is ten thousand And ten thousand so what happened is this receivable? Simply becomes is is is written off and became an expense as part of the fifty thousand So this is how we do the impairment for the receivable. Okay, and what we did is we learned about the the current Expected credit loss or seesaw model to measure the impairment of receivable. Okay for that investment anything That's you know that investment that securities and loans simply put the account receivable is a form of a loan They are that are reported at amortized cost, which is they are follow the same approach as receivable So it's very similar approach, which is the current expected credit loss model That model takes into account current conditions. So how do you determine how much losses to book past experience? Future expectation so on and so forth in the literature There's no specific instruction on how much to write to write off how much to estimate because each industry is different Each company is different the economy the economic situation Evolves over time in this topic impairment of receipt impairment of that investment became a front Front-page issue when we had the financial crisis during 2007 2008 were out of nowhere Many of these debt investments became worthless. So that's why now they want you to look at Current condition past experience and look at future expectation When you are determining try to guess determining the amount of the loss that you have to write The amount of the loss, I'm sorry The accounting treatment depends on the asset being measured and we're gonna break our assets into three different types of assets The first will be receivables which we which we looked at loans Which is kind of similar to receivable like notes receivable and debt Securities but those debt securities are held to maturity HTM because we could have that to maturity is HTM We could have that to maturity is available for sale and we could have that to maturity is trading now If you don't know what held to maturity when you want to go back to held to maturity investment But simply put if we have receivable loans and debt securities HTM They are treated the same as receivable which is losses are recognized in their income What does that mean? It means we estimate that expense and we credit the allowance So this is when we estimate the bet that expense This is where it hits the income statement Then eventually we will debit allowance and credit the asset itself, which we'll see in an example So simply put held to maturity debit by that expense credit allowance We will work an example to show you how we write down the asset itself The second asset class are that investment that goes through other comprehensive income through other Other comprehensive income it means the gains and the losses the unrealized gain and unrealized losses We booked them through other comprehensive income the category specifically is called available for sale now available for sale They use a different model. Here's how we book the impairment for available for sale if the fair value is Greater or equal to the amortized cost. Well, then we don't have to worry about anything We don't have to book any losses any credit losses if the fair value is less Then the amortized cost then the expected the credit loss is recognized in that income Therefore the loss will be recognized in credit in net income However, we have to keep in mind the credit losses are limited So you cannot book between you cannot book more than the difference between the fair value and the amortized cost Don't worry. We'll see an example But if you're not write this down write it down So the credit losses are limited between the fair value and the amortized cost now the third category are trading securities and equity securities where gain and losses go through income statement, obviously Any credit losses goes through the income statement as well So impairment loss measure as the difference between the lower of amortized cost and fair value for dealing with that securities Lower of cost or fair value of dealing with equity security simply put you look at the cost or amortized cost for that You compare it at a fair value you book the difference in net income Now the best way to illustrate those concept is to actually look at an example with journal entries Before we look at the example I would like to remind you whether you are an accounting student or a CPA candidate to take a look at my website Farhat lectures calm. I don't replace your CPA review course. I am Supply I provide you supplemental material my motto saving CPA candidates and accounting student one at a time But I provide you with additional resources such as lectures multiple choice through false questions This is a partial list of all the accounting courses that I have my CPA resources are aligned with your backer Wiley, Roger and gleam. So it's very easy to go back and forth as well as surgeon between my course and your CPA review course I give you access to 1,500 previously released AICPA questions with their original format original questions with detailed solution If you have not connected with me on LinkedIn, please do so take a look at my LinkedIn recommendation Like this recording share it with other connect with me on Instagram Facebook Twitter and Reddit especially on Instagram I'm trying to grow my following on Instagram. Let's take a look at the first example and this is going to be held to maturity Adam company holds held to maturity bond securities with a pair value Power value and amortized cost 1.5. So amortized costs 1.5 the fair value of these securities is 1.3 What does that mean? It means we think we can only collect 1.3 million of this amount Well, here we are using again the allowance method. Therefore once we know that that's it We're gonna have with that's it. We're gonna have to write down the investment. We debit the allowance 200,000 Credit the debt investment 200,000 simply put we wrote down the investment and we reduce the allowance Remember sometime in the past so sometime before this entry we had bad debt expense recorded Okay, so keep in mind that we had some amount of bad debt expense and some amount of allowance And now all we're doing is we're reducing the allowance and writing off the account So this is how we write down Impair the asset itself now debt investments available for sale again. We have different rules Let's review them real quick if the fair value greater than the amortized cost. No credit losses is recognized if Not if it's not means if fair value is less is less than the amortized cost Well, then we have we have a loss and the impairment loss is limited to the amount that the fair value is less than the amortized cost The best way to illustrate these concepts is to look at any an example So we're gonna be looking at three different independent situation a b and c and those are available for sale securities in Situation a we have amortized cost of two million fair value two million 120 Well, the first thing what we notice is fair value is greater than amortized cost Therefore, we have no impairment of value. We are told there's an expected credit losses. There's a good chance. We may not receive 120,000, that's fine. I mean if we don't receive that 120,000, we're gonna go back to our amortized cost but we are also told that there's an unrealized holding gain of 120,000 well if we have an unrealized holding game, we're gonna have to book the unrealized holding game we're gonna debit fair value adjustment of of 120,000 and we're gonna credit unrealized holding gain we have holding gain of 120,000 simply put we don't have any impairment in this example if anything we have a gain and we booked the gain for 120,000 which is great. Let's take a look at the second scenario scenario b We have amortized cost of two million fair value of one million nine hundred and sixty. Well, the difference is 40,000 remember the loss will be limited to that total loss Expected credit loss of 120 and expected credit loss recognized in that income is 40,000 Well, what does that mean? It means the the customer may not pay up to 120,000 for the two million Okay, that's fine But today right now we can sell the asset if we want to because this is available for sale securities We can sell it for one million nine hundred and sixty therefore our losses should be limited to one million nine hundred and sixty Therefore we debit bed that expense forty thousand credit allowance forty thousand for situation B Remember available for sale securities there available for sale It means we can sell them if we choose to we can sell them any time we would like to well Guess what if we know let's assume that's a real situation We know that the customer is not going to pay one hundred and twenty thousand But right now we can get out of the investment sell it for one million nine hundred and sixty We get out of it rather than losing one twenty one twenty We would just sell it for forty thousand less than the Amortized cost now. Why do we debit bed that expense credit allowance because This situation might reverse. Maybe this maybe the credit worthiness Might improve the economic situation might improve and we can reverse it where we call debit allowance credit by that expense, but the point is The only thing you will look is the forty thousand, okay? Now situation C Amortized cost two million fair value one million eight hundred and sixty now we have a total losses of One hundred and forty thousand and here's what we are told of this amount The credit losses portion is One hundred and twenty one hundred and twenty and this should be loss Credit losses one hundred and twenty so the expected credit loss recognized in that income is one hundred and twenty And this has to do with the credit loss credit loss means the customer is not going to pay that much Now here we have basically we have to break down because we have to book one hundred and forty We are limited to one hundred and forty, but we have to break it between two type of losses We have one hundred and twenty thousand due to credit losses. It means the customers will not going to pay Okay, this is one twenty just like the previous like just like in the previous scenario be the credit losses are forty thousand and We have a loss of twenty thousand We have a loss of twenty thousand that has to do with other than the credit loss economic condition general economic condition in Interest rate overall interest rate Industry conditions something has nothing to do with the credit loss of the borrower and lender therefore we debit unrealized holding loss of twenty thousand credit fair value adjustment twenty thousand simply put this entry here situation Situation see other than credit losses is the opposite of a and a we had a gain on this available for sale investment here We have an unrealized loss What should you do? You should go to farhatlectures.com and look at additional mcqs to learn more about this topic It's very important that you understand this work work examples Look at it additional resources. Don't shortchange yourself. Your CPA is important. Your CPA is critical to your success It's a long-term investment. Good luck study hard and of course stay safe


You know the story of Thanksgiving happy Thanksgiving everybody. It's Thanksgiving, which means that we eat things And be thankful unless you don't live in the US then you maybe eat other things How well do I know the story of Thanksgiving? That's what we're going to find out today I am on my favorite website of all time Clickhole, and we're gonna be taking some quizzes today about Thanksgiving so with that fear the odd view Let's do it. You may love gobbling up turkey But how much do you really know about the story behind Thanksgiving take this quiz to find out? Let's do it. Why did the Pilgrims leave Europe for the new world to escape the firepope? They won North America in a bet and wanted to collect they just woke up on the boat or To move closer to the firepope. I know it has to do with the firepope for sure I'm pretty sure they were trying to escape Wrong the pilgrims woke up on the Mayflower when it was already halfway across the Atlantic They had no memory of how they got there or who put them in those pilgrim clothes who built Plymouth Rock and with what? Christopher Columbus using bricks Druids using sticks the Vikings using Viking helmets or Frank Plymouth using using the bones of his Own arm. Well, it was obviously that I was wrong Plymouth Rock was actually constructed by Vikings led by Leif Erickson Who built the rock entirely of their own helmets some more, you know guys Incredible which pilgrim ruined all the food and put the colony at grave risk of starvation Aaron Greg Sheila or Avery I think it was Greg, right?  It's all going out the drain How are the Native Americans summoned an ornate silver gravy boat a plain brass gravy boat a Child's wish or knocking three times on the sacred tree. I believe it was child's wish.  I like skipping memory guys my Thanksgiving memory how thankful were the pilgrims pretty thankful extremely thankful Somewhat thankful just normal thing damn they were pretty thankful Definitely thankful enough without overdoing it. Why do we eat turkey doing Thanksgiving?  What was the original name of Thanksgiving the big thing pilgrim Fest food? Ultimate thanks food Christmas correct the pilgrims and Native Americans called it food Christmas Which is still the holidays official name you're barely thankful You know almost nothing about Thanksgiving you can't even sing the theme song if we didn't know better We'd guess you were the you were firepoping disguise because he's the only one who doesn't give thanks damn guys What if I am firepope how many of these Thanksgiving traditions do you do with your family all right? Let's do another quiz. How do you do turkey day? Huh? How do you let me know in the comments below?  Well, we definitely do that one for sure Shit, what else do we do?   It's about a specific pumpkin pie. We've kept a pumpkin pie in my family I think that pie is from 2002 it's starting to have a certain scent I can't quite describe it the only way that I that I could describe it was the death of Yoda When he falls away in into his into his into his robes It's similar to what the robes must have smelled like I believe Andy Grace with can't live with him can't live without him We do do that. Although we only do silly Silly prayers we do end it with that. Yeah, that's that's pretty much all of them. You know, we're not a huge Thanksgiving family We're more of a Christmas family, but you know food Christmas is important It is a fun time of the year, but you know, we we do very few of the we're not a super traditional family You know, we we just kind of have a normal Thanksgiving. We don't do all of the All of the traditions, but you know, we do a few of them So you do some Thanksgiving traditions. There we go.  You're probably an interesting person in other ways But when it comes to the all-important category of number of traditions performed with a family on Thanksgiving, you're just okay Very middle of the road. Thank you for spending your time clicking on boxes Thank you so much for spending the time to make the boxes. This isn't a quiz This is more of a sort of a lifestyle article seven patches. You'll want on your Thanksgiving dream coat I've been looking for new patches for my dream code. So, you know, this will be good Everyone has a Thanksgiving dream code But what patches do you need to get on your coat this year the bravery patch? Of course Can you imagine how proud your family would be to see you sporting the bravery patch on your Thanksgiving dream coat? There are a few patches as sought-after as this one for wearing it You'll be permitted three honks on the Thanksgiving horn and an extra helping of juice.  Then you've got to have just the skin, please patch people will see your patch and know to keep Mounds and mounds of slippery turkey skin on your plate because you just can't get enough of that savory skin That's me. I do have a just the skin, please patch the Philip C. Glenwood Memorial patch for good Thanksgiving behavior Philip C. Glenwood made his history with his record for best behavior at the most consecutive Thanksgiving by wearing his this patch. You'll honor his memory and also imply that you too will be well-behaved this Thanksgiving This is both a great privilege and a great responsibility Keep that in mind if you choose to don the Philip C. Glenwood Memorial patch for Thanksgiving for good Thanksgiving behavior Marksmanship patch classic as well if you can hit all three targets within 30 seconds, you'll No one steals Thanksgiving food from someone with a marksmanship patch on their Thanksgiving dream code No one in their right mind at least the misfits patch ah You see you see my brother don this on his Thanksgiving dream code year after year after year your Thanksgiving dream code Wouldn't you be complete without the misfits patch most dream codes come with this patch already soon on but just in case make sure you have One on yours. Yeah, you know his his or the hand me down the tradable patch after everyone's eating their Thanksgiving meal It's time for one of America's most celebrated Thanksgiving traditions the patch trade make sure you have the tradable patch Under Thanksgiving dream code this year so you can swap matches with someone else and participated in this beloved American ritual And last but not least the green patch my personal favorite Wow the green patch Possibly the best patch this one is green if you wear the green patch your relatives will say grace to you instead of their God That is the power of the green patch do not abuse it, you know And that's why I love it because I have a God complex all right guys Well, I'm gonna end this one here. Let me know what patches you have Let me know what kind of Thanksgiving traditions you have if you take the quiz Let me know what you've got in the quiz. Maybe you're more thankful than I am You know, I just that Thanksgiving amnesia It got it got me so thank you guys so much for watching. Hope you enjoyed happy Thanksgiving, and I will see you


The study presents a methodology for selecting the optimal burn severity index from a suite of calculation and validation options to produce data for more rigorously comparing ecological effects of fire that occur in contrasting phenologies, demonstrating the utility of the approach and providing evidence for the use of CBI as a field-based index over WCBI. This article was authored by Michael Agalaga, Nicholas S. Skowronski, Richard G. Lathrop, and others.


I have two problems, exactly. Great, okay, any of you have any questions before we start? Questions on the assignment, painting, make an answer? On the default installed by default, are you guys going to have it all by default, or are we going to provide packages for that? The default, so whatever is not installed by default when you first install it going to, then I believe yes. Any place we might look to know if we wanted to use Java or something, what packages you actually need to. That's a good question. Is it on the, yes, let me know. I have more pollution on the dial on that. Do what? Pollution on the dial. One, seven, probably. Is that, yeah, I think me or Eric, because it doesn't matter to me, it matters to you, right? Yeah. I mean, it's the Ubuntu 14.04 64 bit, so whatever is on there, that's fine. Yeah, it's not. So yeah, that's a good question. Anybody else know, is there a question? And what would the permission of the, like the user be having when you're running the program? So it would be having a root permission? Why? Was the morse for it? Did the morse for it have a root permission? No, it didn't need to. Oh, not necessarily, right? So yeah, that's why I said you have to be careful and code. Regarding the permissions. Exactly. Yeah. And you have to just make sure, and it's, you know, not to explicitly check, but you need to make sure that when you encounter permission issues, your app doesn't crash, right? You can't assume that you can just read any file on the system. Okay, back to the question. I don't know. I'll try to look up. If anybody finds it, if there's a list of the default packages that's sorted in Gootube, I think I can find it somewhere. I think I can run the command in the testing environment to dump out all the packages that are installed. So I do install some things, like build essentials, some C stuff. So I'm actually still setting it up. So if you have any, some, you have something that specifically, I think it's a little tricky with Java though, I think that there are different packages. So that's why. It has to be the open one. Right. Okay. The work will be again. Yeah, it should be, not a problem. People did it last time I used the system, so. But yeah, if you send me an email, I'll try and find out, find the list and post it so that you can know. Yeah. Official download in the website is 14.04.3. Yes, that's fine. Any other questions? Yeah, there's a line. Hey, hey, hey. Try and answer questions. Yeah. Can we presume that the files are valid? Got it. So the valid data is in the files, because you're most familiar with all those. Can we presume that the data is valid? Can you presume that the data is valid? Because, can you ever presume that data is valid? Yeah, I think it's a one. It's a what, say? Yeah, I think it's a one. You don't need to work with it. Exactly. Yeah, you shouldn't, yeah, you don't have to check that it's syntactically valid or whatever, right? So, yeah, you should, you know, yeah, exactly. You're a worm, so you should do best effort and try to find as many things as possible, even if the stuff is bad. On the flip side, though, right, you want to make sure you're grabbing the correct things. You know, you don't want to spread to unknown hosts and waste your energy, right? So, if there's a file format that has comments, for instance, right? You probably don't want to grab stuff in there, even if it looks like a host name, because it's a comment, right? It's not actually a valid host name that's used by the file. Yeah. So if you follow the file format guidelines as in most languages, which should be set. Yes, okay. Yes, so that's part of, part of the project, right, is that you're the Morris Worm Writer. The only thing you have available to you to find these things is the docs, right? How does it actually work? How does the file format work? So you have to be able to read it, understand it, and actually implement it. I know you said programming language is completely optional, but I also think- Well, it's not optional, it should help for everything. Yeah, I mean, does it, does, what if it's suspicious if a worm would install, like, 10 packages? True. But you're not actually installing packages, right?  That's more of just submission system environment.  We're just focusing on one portion of the worm's functionality to try to emulate that. But, you know, environment so that we can all test it and all that stuff. Or you can do it kind of crazy, do it like, have multiple VMs and have it all obfuscated and do all kinds of stuff like that, but that's, it's a different class. That's more about, like, malware rather than vulnerabilities, so. More questions? Yeah. To the me, why, why, why do you have reading the script that would have sort of access? Because my request would have been solely for you. No. So you shouldn't, you're, don't, you make files, but definitely not run as pseudo or anything like that, right? That's why you have the packages files that would install in the packages that you need. If you, anything else, right, you have to include as part of your source code in any kind of library or something like that. I would shy away from that. But if you have questions or problems, talk to me. I hope we'll be able to work them out near the TAs. All right, I, hopefully shortly after this, so I got this submission website up. It's just not actually hooked into anything and nothing actually tests anything. But you'll be able to sign up with your ASU ID. I'll send out an email later today. You should have external access. It's just internal for now. So yeah, that should be up very shortly. So it should be good. Any other questions? So many of you are. All right. Let's get right back to the network teams. So we looked at the IP datagram and we've been talking about Retranit. So to refresh everyone, right? We're trying to study the IP, we're trying to study the network team stack so we can understand what the points of attack are, how we can attack it and where the vulnerabilities are. And this is very helpful when you're, you're analyzing a network or analyzing and trying to understand what types of attacks are possible. Right, you have to understand how applications are communicating with each other, what types of things they're using, what types of games you play. So we looked at the header in case you forgot, this is kind of what it looks like. So the IP header is composed of, so bring it down a little bit more. Normally it's 20 bytes if there's no options. It has a version, so the version is four bits, four or six, we're ready to talk about that. A header length, which describes the number of 32 bit words in the header, including the options. The type of service, so this are bits that are used to flag priority or quality of service or there's actually an unused bit in here. Why did you include an unused bit in something that's so important like the IP protocol? Every packet that is sent on all of our millions and billions of devices is including this unused bit. Cash lines? Tricky, maybe. What was that? Future purpose? Yeah, future purpose, exactly. Once you just find something like this, it's very hard to change it or go back on things. Maybe you leave in a little bit of space so that way later on you can say, let's use this flag for some other purpose. To indicate, I don't know, we want to switch to IPv6 or something. Okay, then the total length, so we need to know the total length including not just the header, but also the data of the packet. Because of this, this is where we see a technical description actually influences the protocol. So we have 16 bits in here, so it's the length in bytes, so the maximum of an IP packet is 65,000 bytes. Actually a lot. An ID? So a unique identifier for a data grant. So cool. And you can kind of talk, why would you want an ID? An IP packet, we really care. Just send in packets. Ordering and unordering. Ordering and unordering? IP doesn't give us anything about ordering or unordering. It makes absolutely no guarantees. Can we use it in fragmentation? In fragmentation? So, when we join back the packet, we need some order. Yeah, so what's fragmentation? Why do we need it? The MQ size of the adapter is not big enough to fast enter packets. Right, so we gotta remember where on the stack we are, right? We could be, we're pretty low, but we're not actually on the physical layer. So let's say a host wants to send, I don't know, the max size to 65,000 bytes, right? But you're on a, whatever, a physical host where you can't actually send that many bytes, right? Physically that link layer has not support packets of that size. Well, fragmentation allows you to do is to rip apart the packets into sizes that are appropriate for the link layer size, and then you send me to those packets, and then this ID tells the other end, okay, this packet's been fragmented, and every fragment with this ID goes at certain offsets, and that's how it's able to reassemble the packet. I think we'll look at that tonight, because that's actually an important thing. Yeah, so the flags and the offsets, so these are used for fragmentation, let's say if this packet's been fragmented, what offset it goes on? Time to live, so this isn't like a speed thing or like a bomb that's about to go off. So why do we need a time to live? The number of hops it can be. What was that? It's the number of hops. The number of hops, why do we need it though? Does it work like the one next to the bias? Yes, right, so we're trying to get a packet from one host to another host using however many intermediaries, right? We don't actually know how many there are in between, but so there's absolutely no guarantee on what path our packet's gonna take, how it's gonna move through the network, where things are gonna move, right? So the idea is if we just send a packet out and let's say there's a routing error where it goes into a loop, do we want this packet to just keep looping forever as like a ghost in the matrix? It just like keeps going and going and going. No, we want it to stop at some time, right? If it's not able to get to the host. So the idea is when the host sends out the IP packet, it sets the TTL however it wants to the max or whatever and every hop along the way is gonna decrement that number and change and send the packet. And so that way when it gets to zero, the router knows it can drop the packet on the floor and not send it anymore. Okay, then this is where we get, we break some kind of abstraction in the upper layer. So this is where we specify if the IP packet is a TCP packet or a UDP packet. Then we have a check sum. So we do the check sum over the header to make sure that there weren't any transmission errors or anything there. And then we have our two addresses. So we have the source address and the destination address. Remember 32-bit addresses, so they take up 32 bits in our headers. Any questions on that? So the IP headers includes the options section, right? And so this is variable in length. It can get more or less. They're actually, they're identified so the first byte defines what option it is and then it could have an optional length after that. I was hoping something I knew would be here. I mean, I know a lot of you. Anybody in security or military operations know if they actually use this byte still? The IP options. So they have one of the options specifies the security clearance level of the packet. So that way at the network level, the military could drop a packet if somehow a confidential packet got out good on an open public network. Okay, or you can't say. I understand. It used to have, and maybe I actually want to look at it and see if they actually do this now. Some of these IP options are actually for debugging purposes. You're an administrator, you're trying, right? The internet is an incredibly complicated system of hosts of hosts and networks of networks, right?  So one option says record the route, every router along the way, put a timestamp on the packet to say where it was and how it got there at one time. Presumably so you can help debug connection problems. I think, I have to say, so is this good from a security perspective? No, why no? Because even the hacker wouldn't probably know which part the packet is taking. Yeah, right? So you're giving out information to somebody who's outside of your network just because they ask nice, nicely, right? They put this option and the switch says yeah. Hang on, I'm the switch. I saw it at this date. So it's gonna actually allow an attacker to help mask your entire network and try to see what are all the hosts and what are all the switches in your network. It can timestamp, so not just record the IP address but also do the time that it got there. Source routing is actually really interesting. So this specifies a list of IP addresses. This actually was sourced, right? This IP packet tries to specify the exact router that the packet should take. Is this a security problem? Could be. Could be, yeah. Why? Because the hacker could set the route in such a way that it goes by his machines and he gets to know the data. Yeah, it could go by his machines. One of the things he could do about it. Overload a machine. One of your switches, right? I wanna take off on a good DOS attack. I'll set all of my sources to all go through your one switch and that one switch fails and then everything behind it fails. Right, essentially it's another case where you're actually giving an external entity control over your network and where packets flow in your network. So I'm also fairly certain that nobody actually respects these headers anymore. It'd be fun to play around with this. And there's actually a lot more of these headers that are defined. Oh, but why didn't they include it? So we say it's bad, right? Why would you include this source route thing when you're defining IP options? Maybe you want to test if a route is down or not. Yeah, maybe you want to test if a route is down or maybe reliability, right? When these things are first established. Who knows, maybe you know a better route than the admins do or somebody else's network does. So you can specify exactly how. Can we, for the speed up thing? Yeah, could be a speed up thing. Yeah, maybe you know a shortcut, right? In the network. Like, oh, I can go through this host and then go out that way. Yeah. Okay, so IP, what's below IP? You got the data? The data, the link layer, yeah, exactly, right? So the IP packet, right, is actually encapsulated. So the IP header and the IP data are all encapsulated in the frame. So the link layer frame, right? And that's the payload of the link layer frame. It has some header before it that specifies all of its options. Okay, but the question is, okay, I want to send a packet to somebody and we're on the same subnetwork, right? So what does it mean being on the same subnetwork? Okay. What is it? You don't have to pass it beautifully. Yeah, if we're on the same subnetwork, it means there's no hops in between us, right? We're all on the same little network. So anytime I send a packet out, you should get back if we're on the same subnet. For instance, if we had to subnet 11, 10, 20, right? So what does it mean when I define a subnet like this? Is this an ID address? Why not? Now, missing the last octet, right? So what does it mean? Any of the last 32 is the host on your network. Right, so it's basically defining a prefix, right? So it's saying that 11, 20, 10 is a prefix. So anything zero through 255, right, of the last octet, that's in the same subnet. So the idea is we have a computer here that's 11, 10, 21, 21 with a physical address, right, of something, wants to send a packet to 111, 10, 2014, which has some physical address. And I did, so we want to send this IP packet, right, from one machine to the other. But really, we have to encapsulate that, right, in a link layer packet. We can't just send this IP packet out on the wire and expect anything to happen. So really, we have to encapsulate that in another packet that is from our physical address to their physical address, right?  So how does that work? So Ethernet is actually a little bit simpler than IP. This is a link level thing, just between you and the next machine. So it doesn't have to be so complicated that it has to work across the entire internet, right? So we first have the, so these are in bytes. So we have the destination host in six bytes. We have our source Ethernet address in six bytes. We have a type, some data, variable length of data, up to 1500 bytes, and a CRC. So it checks them at the end, right, to make sure there wasn't any transmission errors at that level. And so there's various types. So this is one, another thing, right, where the types kind of matter. So if the type is in hex 08, there's zero. This means that we have an IP datagram. If it's 806, it means it's an ARP request, which we'll look at in a second. If it's 808, it means that it's a reverse ARP request, and so on and so forth. There's a whole list that you can go through and understand exactly what each of these types are and what they mean. So just for looking at this, what does this mean about the length of packets that Ethernet can carry? You can just add it up too. You're gonna have to add, right? So we only care about the data. We care about using it as a transmission protocol, right? So as long as it's able to carry our IP packets from one source Ethernet address to a destination Ethernet address, I don't really care what it's doing. But the important thing, right, is this 1500. So the Ethernet length is only 1500 bytes, right? But our IP packet can be up to 65,000 bytes, right? So that's where we have that mismatch. So Ethernet, just like a brief rundown. It's very widely used. Everybody has plugged in a computer into Ethernet.  But anyway, it's very fast, very efficient for networking people. It does what they call carrier sense, multi-axis with collision detection, which means when you're actually transmitting over the Ethernet link, you're listening to see if anybody else is transmitting. And then if you are, you will stop and try to restart and try again. So this way you don't have collisions like with 802.11, right, and wireless. It's really easy because of the physical capabilities, right? We could both be on opposite sides of the router, such that I don't see your signal and you don't see mine. So you never know that we're overlapping. So destination address is 48 bits as we saw. It's represented like this. So if you've never seen what the colon dotted Ethernet addresses, MAC addresses, right, it'll look like source address for 48 bits, the type, some data, and check, CRC check. Okay, now the question is going back to our diagram, right? We want to send a packet, we're on a local network. So now we're not even talking about routing or trying to get our packet from one area of the internet to the other. It's just the local internet, right? We want to get a packet from one machine to the other. So what piece of information, what do we need to know to send an IP packet from one machine to another here? Let's say you're one to one. What do you need to know? Is that something I want? The physical address. The physical address of what? Your physical address? The physical address. We can get something to do here. Before that, before that. Sorry. Well, first you need to know the IP address, right? It has the same network prefix. Yeah, and then we see it has the same network prefix. Then the router table that you read. Which we looked at, yeah. So we know this is our subnet, so we can know that this is clearly in our subnet. But yeah, then we need to know the destination, right? We want to send this yellow packet here. Well, this yellow packet has our physical internet address, which is easy to find out. And, but we want to send this to somebody else's. But all we know about them is their IP address. We have been able to show that our item has a mapping with the physical and our IP address. Close, it's not the router, but yes. But the idea is we need, so these things, even though they're completely different protocols, right? So even though IP is completely separate from Ethernet, right, here we get more coupling where, okay, we're kind of chicken and egg problem. It's like, okay, I know what your IP address is, so I want to talk to you. But to talk to you, I need your physical MAC address, like your physical Ethernet address. But if I knew that, then I, so I could send a packet to talk to you on your physical MAC address to ask what it is. But if I knew that, then I could just send it to you in the first place, right? And then I would have to go through this thing. So they have a protocol specifically, ARP is what's called an address resolution protocol, and this is actually incredibly security critical. So this turns basically IP addresses into Ethernet addresses. And so that's the basic idea. It gives us a way to say, hey, what's the MAC address for, I forgot the network, 11, 10, 20, 121, good memories. Yeah, so we want to say, hey, who has this MAC address? And then that node will respond and say, hey, I'm this net, I'm this host, I have this IP address, here's my MAC address, and now we can start an IP conversation. Before that, we have no idea where to send that packet to. It broadcasts in the subnet, right? I will say, but yeah, it would be a broadcast, right? We'll get to it. Talking out of track, can you read it? I guess, I feel like in this group. Yeah, yeah, yeah, yeah, yeah, yeah, yeah, yeah, yeah. We'll get to it, don't worry, don't worry. So, so it's actually sort of a link level. So that's why when we saw the Ethernet frames, right? Depending on the different type. So there's type of IP address, there's type of ARP, type of reverse ARP, or RARP. And so when the type is one of those ARP replies, sorry, when the type is ARP, then that means that we're making some kind of request. So, you know, but now we're also kind of a chicken and egg problem here, right? It's like, okay, we need to ask essentially everybody on the network, if they know on our subnet, right, who has this IP address, right? And so the way to do that, there's a special address to broadcast, which means, okay, here's an Ethernet packet, send it out to everybody as possible. We want to figure out, I have a message to deliver to everybody. And so everybody gets this packet, and then the host that you're trying to talk to with that IP address responds and says, yes, here's my link level address. And then, so if we did this every time we wanted to send a packet, that would be incredibly slow and inefficient, right? We, our network would be flooded for every one packet you wanted to send, you'd have to send two packets, right? Say, who has this? And then they'd say, I have this, right? So you'd have to send two to every one, which would just be outrageous. So that's why we keep a cache. So, host A will keep that answer in the cache, and so net going forward, anytime upon talks to host B, it knows the Ethernet frame. And so it's kind of another optimization. So basically, when A sends its request, it returns, it includes its own IP address. How does this act as an optimization? And host B, it's going to have to do all their fifths of operation as well. Exactly. Yeah, that way, and not only host B, but any other host, right? Be like, me shouting, like, I don't know. I'm trying to talk to B, I'm A, and I have this physical address. And now everybody who hears it can write that down and they can know exactly how to talk to me and we can skip a step. Send its own IP address or its own physical address? Ballroom, because you need that mapping, right? That's what an ARP maps IP addresses to physical addresses, exactly. Yeah, from A, A is sending what's the request, its own IP address and its own host? Yes. So it says IP address because it includes its IP address in there. The ARP request itself has the source that it came from. So that's how we're going to extract that mapping. Okay, so then we're going to look at the format of an ARP message. So there's first the hardware type, there's different types of hardware, protocol type, the size, the protocol size, and it specifies the link addresses to be mapped. The op field says if it's a reply or a request. Yeah, go back. Say situations are very different systems, are you using the same IP address? So how would the ARP resolve that situation? S, very terribly, if you remember that situation. So I've, at my lab in Santa Barbara we frequently would have those problems where, and the symptoms are very annoying because it's like intermittent SSH access that will sometimes go down and then you try pinging it and it'll come up. Essentially what happens, it would be like we have any overlaps of names, but it would be like if I said, I don't know, who's Adam?  It's the same thing that happens here. So I say, hey, who's host B? And I get two packets back that say, I'm host B and I'm host B. Well the table only has one entry so I just put the last entry I got in there. I put that in the table and then that's who I talked to. And so it's very, very annoying. So what if an attacker actually sends you the packet last and make sure that you map his physical address to the IP? We'll see what happens. Okay. That's what we're talking about. Okay. There's a hand over it. Like a networking question, what does MAC addresses give that IP card? I mean, why would we actually need MAC addresses? Because just asking IP should have also a good question. Oh, it's in the room. Why do we need MAC addresses? Why do we not have IP addresses? Or the other way around, why do we need, why do we need, yeah, why do we need, yeah, why do we get rid of MACs and just use IPs? Because MACs are probably, they're probably attached to your system and IPs are connected to your device. So the MAC is the physical address, right? What's the other reason? Yeah, it's hard burn address on the PC or the machine, but IP keeps on changing. Once you go out of the network and connect it again, we might be getting a different IP address. Do we need it? Do we need it? Do we need it? We can still go to a different network and give us an IP address and then we just use that IP address. Why do we need a MAC address? Yeah, but it needs a handshake connection again. They just stop by this machine. What was that? You need to identify each machine and even for the same address. Yes, you can change your MAC address. You can change whatever you want. But it's illegal, I guess. Is it? That's my machine, why would I? It's the same as changing the IMEI number of phones. So on internet, there will be two MAC address of the same, yeah, two network of the same MAC address. So I guess we need to identify each machine I guess we need to make a point. So the MAC address, who needs to know about my MAC address? On the same network, just my subnet. So one reason would be, nobody else needs to know about my MAC address. MAC only use to talk to the people in your subnet, nobody else. Everybody on that physical link with you. Once it goes outside of there, then IP takes over and that's how your packet gets from one host to the other. But we can still use IP to go on the same subnet, right? What was that? We can still use IP to go on the same subnet, right? Sure, okay, you can study this idea. So maybe it's an encapsulation thing. We don't necessarily want to use IP as the upper protocol. Exactly. I think that's more the reason. I feel like it goes more in that direction where it's the physical protocol could completely change, right? The physical protocol can be wired, it can be Ethernet, it can be wireless, it could be over a serial link, it could be over a fiber optic cable, right? The point is that IP address is a higher level of abstraction over that and the MAC address is something different. Plus, oh, and I was going to say the other thing, well, maybe one of you is going to say this, so I don't want to say it, but the other thing that came to my mind was, well, you can have one MAC address, right, with multiple IP addresses, right? And so then you can also go the other way. Can you go the other way? No, you don't want to go that way. Yeah. But you can have one machine with multiple MAC addresses, each with different IP addresses, right? Plus the linker protocol provides other services like CRC, which the IP address doesn't provide. Those are essential for data communication without errors and stuff. Yeah, it adds other stuff. Potentially created separately as well. Good question. I think so. Even if it came a little bit later, there's like Token Ring and a bunch of other older network technologies. Wait, just like Token Ring. No, yeah. Because you've got the star networks and all sorts of other different ways that they use to connect different things. Yeah, it used to be, what was it? Token Ring where you would get a packet and then pass it on to the person in your class because that's how your packet would get on the local network. Right, go around. It's all like BNC connectors. They run physically together and then they have to pass away. Crazy, yeah. Yeah, okay. What would it be for the security purpose like you can write down which machine has to go through which thing because IP keeps on changing. You have the IP address, you can connect to the network, but the administrator don't have a knowledge which machine is using or which machine is accessing what things. I think it's what it's used for. I wouldn't say it was necessarily designed for that, but yeah, that's what they will frequently do if you're caught abusing something, right? The way to prove that is to say, look, we got these packets of you, of this certain Ethernet running a torrent stream on ASU's network, and they'd go and be like, hmm, your computer has this exact same MAC address, right? They don't. They're very clever. You can follow your friends. They don't get that. It's not ethical ring. Cool. All right. Okay, so then we want to send, okay, so we put our, you know, when we make a request, we put our IP address in there, right, to speed up into that optimization. You know, we don't know the target Ethernet address. We also don't know, or the target IP is the IP that we're trying to map, right? We want to know who has this physical address. So now what it looks like. So on your machines, you can do this on a Linux machine. So ARP is the command to look at and manipulate your routing table in, I'm saying most Unix machines, but definitely Linux machines. So ARP.A in this case lists your routing table. It lists all the entries in your routing table. And in this case, there's nothing. So we start off, there's absolutely nothing. So we're on host A, right? Host A's IP address is <IP_ADDRESS>, and it wants to talk to host B, which is <IP_ADDRESS>. So it knows it's MAC address, right? But it doesn't know host B's MAC address. So it's going to, so what's the ping command do? It's a level on mark. Yeah, so it's actually an IP level thing. So it's sending an IP packet with an ICMP message type to say, hey, are you up? And then if that puts up, it's supposed to reply back with what we sent to that host. So the ping command uses this ICMP message to test if a host is able to receive us. It's a networking tool. It's not 100% always reliable, just because the other machine doesn't have to actually reply to our pangs. So it's not actually a great indicator that the machine is down. They just drop the ICMP packets. Actually, I think Google. If you're pinged, Google, you won't get the reply back. I think it's other way around. You usually can ping Google, you can't ping Microsoft. The problem is if you do it from ASU's network, ASU drops all of it. I don't know if it's a request or a reply, but... Yeah, I did it from my home. It was dropping the mic. I use Google.com to ping all the time. Yeah, that's the problem is it depends on your network, right? It's not a definitive indicator that things are actually up. It's just an evidence that... Okay, so when we do this ping, right, the very first packet that's going to be sent is an ARP request. So this is a TCP output of this. So the first thing that we need to do is we say, okay, we know the IP address of the machine we want to talk to. We know this machine's on our subnetwork, right? Because we're on the subnet of 192.168.1. We didn't say anywhere, but we'll say it here. So now we need to send an ARP request, a broadcast ARP request. So this is how when you see this all Fs here, what does that mean bit-wise? All ones. Yeah, all ones, and that means go to everybody. And the important thing here, right, is this is link layer, so it's Ethernet. So this means all the switches on the hubs in between also understand this, and when they get a packet, an Ethernet packet destination of all ones, they send it out to every machine as possible. They try to broadcast it as widely as possible. So we can read this, we can, you know, we can decode this pretty well. We can say I'm 804874A3, right? I want to send a broadcast, an ARP packet of who is or a request, and I want to know who is <IP_ADDRESS>. I am <IP_ADDRESS>, right? So now we've given them all the information they need to be able to reply back to us. So we send out this ARP request, right? And on our simple little free network diagram here, both host B and C get this request. So why is that? Broadcast, yeah, sending it everywhere, exactly. That's the whole nature. If the host C didn't get it, then they're basically not on our submit. So now host B is going to reply, and it says I'm 013, whatever, 1D98V8. This is a message for 804874A3. How did that know who to reply to? Yeah, because we gave it an ARP, Ethernet ARP request, right? I'm this, this is an ARP message. It's an ARP reply. I'm replying to <IP_ADDRESS>, or I'm saying that I am <IP_ADDRESS>, and I'm at physical address 0131D98V8. We get that reply, and then we, yeah, and then we can start pinging. So I guess I didn't set this up quite right. We can start pinging, so these are pinging messages. So these are IP pings from, the way to read this is <IP_ADDRESS> to <IP_ADDRESS>. This is an IMC echo request. So this is requesting them to respond to us, and this is their response back where they respond, hey, this is <IP_ADDRESS> responding back to 1.100. Here's the reply. And if we look on host A and we run the ARP command to look at its table, now we can see that actually host B, <IP_ADDRESS>, is at this location, at this MAC address. So our host A has cached the location of A's MAC address, and also host B has also cached, and knows where host A is. Specifically, so only two we have a request, a broadcast request, and one reply, right? It wasn't like the host B had to then set its own broadcast to figure out how to respond and then be able to respond. Everybody get how this works? So now it's attacking. So what are our goals? What do we want to try to break here? What kind of things can we break? I mean, get into the routing cables of hosts. That our goal though, that our end goal. It's our end goal. It could be a trusted computer on the network. To be a trusted computer on the network? It's a good goal. Overwhelm the table. Maybe overwhelm, yeah. You can think about maybe it's an Alice service attack against the table. Yeah, it's a good one. Imports the next time other hosts on the network. Yeah, maybe I can try to impersonate to take advantage of the trust relationship between two hosts, yeah. Ultimately attack everyone in that line. What was it? Ultimately attack everyone in that line. We attack everyone in the local area network. Definitely one option, yeah. So we may want to say how do we figure out who's on the network? Man in the middle. Man in the middle, what's that mean? It means that you're having all traffic forwarded through you. Yeah, so that could be one thing, right? We want to maybe not disrupt anything, right? Or maybe not attack anything. But we want to essentially snoop on all the traffic that happens in between us. You can bring the line down. Was that? Yeah. Sending the dummy packets inside the line so we can bring all the load on the line. Yeah, you can think, you know, if you somehow got into the New York Stock Exchange local area network, you could like take down a host at a very particular time and like sell the stock and the stock drops or something like that, right? That could be a good attack, yeah. It was made to be the DNA of the network Yeah, you could. And that's kind of goes back to the trust, right? So you impersonate a trusted host on the network and then now you're that host, you know, that trust. Yeah, so we want to impersonate a host. We do title of service attacks, right? We can access information. We can tamper with some of the delivery mechanisms, which we'll see. One thing is, right, so what about just listening? What can you do is just listening, sniffing called sniffing, but, you know, listening, is that useful? Is that a security? Oh, yeah. Oh, yeah, why? On prediction information can be on prediction information can be a listening access. Yeah. Conventional creation, unencrypted packets, poorly encrypted packets, maybe they're using a version of something that's vulnerable. Yeah, you know, you think about, it really is information, right? But the whole point is, right, what were the three things about security that you care about? Confidentiality, integrity, availability, right? So, yeah, so sniffing gets around confidentiality, right? I don't know, maybe I have stock market things on the mind, but, you know, if you're able to get on a network and be able to, you're being overtly malicious, but you're sniffing and able to find out, hey, that their quarterly results are going to be so-and-so before everybody else, right? That's, like, actionable information, or if you find out that, I don't know, the network administrator is cheating on his wife with so-and-so, you can then go to him and, like, blackmail him to get more access into the network, right?  You could, hey, you can do all kinds of stuff. There's actually all these attacks now that email, the goal is they'll try and email CFOs, like the chief financial officers in medium-sized companies, like 100 to 500, and they'll say, that is a really important deal, like, we have to sign this thing with this client, I need 50K transferred to this bank account, like, make it happen. And oftentimes they do it, and once you do, like, a wire transfer, that money's gone. So, if you could sniff, write the network, see the emails that are being sent, you could actually impersonate the CEO really well, right? You could include his or her little tag at the bottom, right, or whatever they do. You could see what other crazy, urgent demands they've done in the past and do it similarly like that, like, do they type all uppercase? Do they swear? What do they do in their emails so they can more effectively fish money out of these people? Yeah, we could want to spoof, we could want to pretend to be somebody else. We may want to hijack somebody's connection in the middle thing. So what's the big difference? So now we're on the local area network, right? So now we got to kind of move into the hardware. Like, what is actually wanting a local area network? So what's the difference between a hub and a switch? I'm going to take a role into that. Hubs are just kind of like, it's interesting to take a look. Yes, it's a good way to think about it. Can't remember. Is it also that a switch is typically a gateway from one network to another where the hub's... Not necessarily. I'd say that's more of a router. A router usually has it on the screen. And all switches are very intelligent, they're complicated so you can configure them probably in that way. Actually, I think you have to have a dedicated router. We've gone away from using hubs mostly now. Yes, yes. But it's important to talk about it, yeah. Yeah, switch works on the network here while hub works on the data here. That's another good way to think about it, right? The hub is just basically a done repeater. Right, so... I wish I had a switch around here. Switch around here. Just ports, you plug it in. Anything that comes in one port comes out all the other ports. Right, so super done hub. One packet comes in and just sends everything out. But even the switch works in data link layer and you know that it will do. Switching around here works on the network. Switching and routing. We'll look at that. So, just to verify router's work on layer 3s which is work on layer 2 and work on layer 1. Yes, but why and what do they do and how is it important to this? That's one of the things I care about. Hubs, they kind of share bandwidth so you plug 100 meg Ethernet into a hub and it has 10 ports. It will share 10 megs out each port and as you mentioned the data is sent out all the ports. Switches segment the network 100 meg Ethernet port and it has 10 ports. Each of those get 100 meg Ethernet. That's a big upstream hub, right? What if you're just talking about a local area network? Plug it in. I don't know. The important thing from our perspective is where do the packets go? So in a switch we can control, we can create virtual lands and stuff but in hubs we can't do all those stuff. Yeah, we can do all kinds of crazy stuff and switches, yeah, definitely. For our purposes, we're a malicious person on the local area network, right? All traffic is broadcast to all ports. So anybody that comes in, regardless of if it's a broadcast packet, that's the key thing. So that's another way to think of it. It's just the link layer. It's kind of like plugging all those computers just together. Modern switches.  The idea is they're keeping track of which MAC addresses are coming from which ports and that way when they get a MAC Ethernet packet in it says, hey, this is a packet to a certain MAC address. They know exactly which port to send it out of. And so they're continually mutting their tables of this is the MAC address basically so the switch keeps track of MAC addresses to ports, to physical ports. But the important thing to remember, all broadcast traffic is sent to all connected hosts at some point. Directing traffic is targeted specifically to an individual port that it's seen a packet coming from that network. So they're going to be multiple Ethernet or they're going to be multiple MAC addresses associated with each port. You can connect these switches and hubs and basically all types of crazy configurations. So just because one port does not mean one host. Okay, so we'll stop there and we'll come back and talk about network sending. It was very fun.