In the name of Allah, the Lord of Mercy, the giver of mercy and prayers and blessings be on his beloved Prophet Muhammad SAW. The companion that I get to talk about today, Alhamdulillah, is a woman by the name of Lubava bint Al-Harith, radiallahu anha. So I'm just going to talk about her name for a second. So Lub is the essence or the core of something. And I remember as a child, anytime my mom would be doing something, my mom wants me to stop, she'd shoot me this look. And she would quote this line to me and it says, Certainly the person with intellect, with a core that is grounded, can understand from just a sign. And I knew that that meant that I was going to stop doing whatever I was doing, Alhamdulillah. It's funny, my brother at some point called and he's like, you know how mama would like just look at us and just stop? And I'm like, yeah. And he's like, I stared at my son, he stared right back. I don't think I'm doing it right, man. I'm like, no dude, I don't think you're doing it right. Like, what do we do? Like, practice in the mirror, like, try to figure out and do it just right. Alhamdulillah. Masha'Allah. May Allah reward my mom, Alhamdulillah, and everyone's mom. Alhamdulillah. So Lubaba bint Al-Harith, her kunya was Umm Al-Fad. And this is not something that we really do right now, but it's like you're... I don't want to say your stage name because it wasn't a stage. But it was, this is what she was known for. And it was because her eldest son was named Al-Fad. And she was known as Umm Al-Fadl, the mother of Al-Fadl. But in the Arabic language, when you would call someone Umm something or Abu something, you're actually also attributing more to them than that. And she is so deserving of this. So Fadl is more than just... It's a form of excellence. Like when we say Fadlullah, Allah SWT, Allah SWT's Fadl on us. It's not like your needs are met, it's your needs are met and then so much more. It's someone that is so generous, giving from such an endless bounty. That's what Fadl means. It's one of the highest levels of excellence, SubhanAllah. And her eldest son was named Al-Fadl and so she was known as Umm Al-Fadl, the mother of Al-Fadl. Also, she was Umm Al-Fadl not just as a mother to her son, but also in terms of her character, Ralliullah Anha. So the first thing I want you to know about her is that she was Khadija Ralliullah Anha's best friend. Which, I mean SubhanAllah, the Prophet SAW says, You have the same religion as your Khalil. And the word Khalil, it actually has the same word as khil, as deficiency. That when this person is missing, you feel like something's wrong. Right? You know how you do something, you're like, Oh, am I going to call? And then the first person you call. So she was Khadija Ralliullah Anha's best friend. And what an incredible best friend. So based on her narration, she said, I took my Shahada the same day as Khadija Ralliullah Anha. Who was the first person to become Muslim? Khadija Ralliullah Anha, that's completely agreed upon. There is zero dispute over who the first Muslim was, it was Khadija Ralliullah Anha. And she's saying I took my Shahada the first same day as my friend Khadija Ralliullah Anha. So by all accounts, she is the second woman to become Muslim. And then we don't know, was there any of the men that became Muslim before her or not? We don't actually know. So she could have been the second Muslim outside of the family, the Prophet Sallallahu Alaihi Wasallam, of course, just period. When we say the first and the second, we don't meet like, of course, his daughter Fatima Ralliullah Anha's daughter, Ruqayah Zainab, and Umqothum Ralliullah Anha, the people in the household of the Prophet Sallallahu Alaihi Wasallam. Subhanallah. But outside of the house of the Prophet Sallallahu Alaihi Wasallam, she was the second woman to ever become, she was, became Muslim after her friend, Khadija Ralliullah Anha. Her husband, Al-Abbas, was the Prophet Sallallahu Alaihi Wasallam's uncle. He was three years older than the Prophet Sallallahu Alaihi Wasallam. And if, those are your family friends. You know how you get married and you have couple friends? These were their couple friends. They had kids that were of similar age. They were just, Subhanallah, really, really, really close friends. My, one of my closest friends, she used to live right next door to me. We used to drink coffee together every morning. Like, we were friends, friends. And some of the narrations about her, the Prophet Sallallahu Alaihi Wasallam used to go visit her and used to take naps at her house. That's how close they were. Like, my friend, I go drink coffee at her house. I'm like, oh, I have to do this. I'm just gonna sit on your couch.  I live next door. Like, I don't need to nap on her couch. But I felt comfortable enough napping on her couch, Subhanallah. And you can imagine the Prophet Sallahu Alaihi Wasallam doing this in the house of Um Al-Fadr Ralliullah Anha. In the house of his uncle, Abbas Sallallahu Alaihi Wasallam who was only actually only three years older than him. Al-Abbas Sallallahu Alaihi Wasallam who was tasked with As-Sikaya wa Al-Imara Al-Hujjaj. So when people would come to Mecca from all these different places intending to visit the Ka'ba, Al-Abbas Sallallahu Alaihi Wasallam was actually responsible for giving them water. And they would give them water from the well of Zemzem. Does anyone know where we got the word Zemzem? Yes, someone said yes. Who came up with the name? Hajar Alaihi As-Salam. So we know the story of how she was making Dua'at. She was going back and forth between the Safa and the Marwa. She's making all this Dua'at. She's working really hard. And every time someone goes to Hajar Umrah they follow in the footsteps of our mother Hajar Alaihi As-Salam. I'm not saying this just because I'm Egyptian but she is from the land of the Nile. Palliullah Anha our mother Hajar Alaihi As-Salam. But the reason that's significant is when the water started gushing out and people started, she tried to collect it and she kept saying Zumi Zumi, collect, collect. This is where we got the word Zemzem. And the other tribes came in and they said we want a portion of the water. She says, yes, but I manage it because none of you know how to manage a water resource. I'm from the land of the Nile. I know how to manage a water resource. And when we think of Luba'ab, she is the inheritor of our mother Hajar Alaihi As-Salam. She's best friends with Khadija, but also in this role an inheritor of our foremother. Subhanallah. So something that's, I just wanted to stop for a second just talking about Mecca. Mecca was the city of our prophet Muhammad Sallallahu Alaihi Wasallam and Ibrahim Alaihi Wasallam. Neither one of them is actually buried in Mecca. Ibrahim Alaihi Wasallam is buried in Khalil in Palestine and the prophet Sallallahu Alaihi Wasallam is buried in Medina. The two people that are actually buried in Mecca that are holding down the fort are actually our mothers Hajar Alaihi Wasallam and Khadija radiullah anha. So the amount of loyalty that Luba'aba radiullah anha had to her friend Khadija was so incredible. And every time I think of her, I think of Baraka radiullah anha who, insha'Allah Dr. Rani will talk about next. She was friends with Amina and continued on being a mother to the prophet Sallallahu Alaihi Wasallam long after Amna radiullah anha passed. And Luba'aba radiullah anha, if you can imagine the role Khadija radiullah anha had. After her friend passed away, that was the role that she took on. To honor her friend Khadija radiullah anha being a mother to the Ummah. We think of the prophet Sallallahu Alaihi Wasallam as the father to the Ummah and Ummah had the Mu'minin, the mothers of the believers and the mothers of the Ummah. And they carried us through after the passing of the prophet Sallallahu Alaihi Wasallam when you lose a parent, you rely on the other. We relied on the mothers of the believers radiullah anha. And Luba'aba radiullah anha has served a similar role to her best friend Khadija radiullah anha. So, I just, Subhanallah, I'm sorry, sister, the Saddam Mariam, the Saddam Mariam had mentioned this where she was talking about some of her in-laws. And there is a narration, wallahu alam, it's not a strong narration, but it's still a narration where the prophet Sallallahu Alaihi Wasallam says al-akhawat al-mu'minat, the believing sisters. And he lists them. He says Maimouna, the wife of the prophet Sallallahu Alaihi Wasallam, her sister Umm Al-Fadl. So Maimouna and Umm Al-Fadl actually shared both parents. And then the other two sisters, Asmaa and Salma, the wife of, excuse me, Asmaa bint Umais, radiullah anha, who Mariam had just spoke about, and her sister, Salmaa bint Umais, who were actually, they shared a mother, but didn't share a father with Umm Al-Fadl, Luba'aba radiullah anha. So they were half sisters, Subhanallah. I just want to add that it doesn't actually end there because they had another half sister, Zainab radiullah anha, who actually married the prophet Sallallahu Alaihi Wasallam in the third year of the Hijrah and passed away within a few months. Zainab bint Khuzayma radiullah anha. So she has two sisters who married the prophet Sallallahu Alaihi Wasallam, a half sister and a full sister, Subhanallah. The other person, she also had a younger sister named Luba'aba radiullah, Luba'aba Sughra. So they, they loved the name so much. They said Luba'aba the older and Luba'aba the younger. Luba'aba the younger was actually the mother of Khalan Waleed radiullah anha.  Subhanallah. Those four sisters are actually part of what bound all of these leaders of Mecca together. If you think of sisterhood, we should be thinking of these four women. Subhanallah. And part of what's fascinating about sisterhood is that women in general, the way that women lead is very different from how men lead. For the men to lead, you have to have one person standing at the front and it's clear there's the person leading. With women, the leader actually stands in the middle. I remember the first time I had to lead Sallallahu Alaihi Wasallam, I was so scared. My friends like, I'm going to support you. I'm like, how are you going to support me? Like either you're leading or I'm leading. And she's like, I'll stand next to you. And I'm like, okay, that's, that is true. And she says hafgambik, which also means like I'll support you. But I'm like, it literally means I'm just going to stand next to you. And I'm like, well, cool. Alhamdulillah. She did stand next to me. It was very helpful. This, this is how women lead. Subhanallah. And they're raising this generation of people together. So Luba'aba radiullah became Muslim all the way at the beginning. And we know from the Seerah of the Prophet Sallallahu Alaihi Wasallam, there were three years that they were doing da'wah. The Prophet Sallallahu Alaihi Wasallam was doing da'wah in secret. And she is someone that had to keep that secret for a long time. Her husband, Abbas, did not become Muslim material years later. Subhanallah. He was actually one of the only two of the uncles of the Prophet Sallallahu Alaihi Wasallam, Hamza and Abbas, Sallallahu Alaihi Wasallam. Subhanallah. And Subhanallah that these two sisters were married to those brothers. Subhanallah. So Luba'aba radiullah becomes Muslim within the first year of the, of the, of the behalf of the Prophet Sallallahu Alaihi Wasallam, within the first year of the Prophet Sallallahu Alaihi Wasallam receiving revelation.  So the Prophet Sallallahu Alaihi Wasallam hosts a family gathering at his house. He invites all of them over. And they all have this huge meal. And right as he is about to talk, mind you the Prophet Sallallahu Alaihi Wasallam has spoken to his family members before. They know what he's talking about. And there's one person in particular, one of his uncles, Abul Ahab, who before this point had been very supportive of the Prophet Sallallahu Alaihi Wasallam. He loved the Prophet Sallallahu Alaihi Wasallam. He's actually the one who paid for his Aqeeqah. You know when the child was born and someone donates the animal and has the dinner and all like Abul Ahab actually did that. And initially when the Prophet Sallallahu Alaihi Wasallam told him about Islam, he actually is like, yeah, this is a cool thing. And then he looked and in a slave demand, he said, me and him will be equal. I don't want what you're selling. Imagine how hurtful that is. It was really, it was literally his arrogance that got him. May Allah protect us from arrogance. And may Allah protect us from ever looking at another human being and saying, I'm better than them. Because that destroyed Abul Ahab. The Prophet Sallallahu Alaihi Wasallam invites everyone over.  He says, if we don't stop him, all of the Arabs are going to fight us. And he ruins the Prophet Sallallahu Alaihi Wasallam's dinner. The Prophet Sallallahu Alaihi Wasallam will go home. He calls another dinner. Lubab A.R. is there. La Abbas A.R. is there. She's part of the family. She's probably helping her friend Khadija A.R. She's her best friend. Every time my best friend hosted a huge dinner, I was there cooking with her. This is what your friends do. They had another one. Everyone comes over before they finish the meal to pre-empt Abul Ahab. The Prophet Sallallahu Alaihi Wasallam starts calling to his family. He tells them, if I'm going to lie to anyone, I wouldn't lie to you. You're my people. You're my family. And Subhanallah La Abbas A.R. He turned away. He didn't assault the Prophet Sallallahu Alaihi Wasallam, but he wasn't ready. And we know this famous moment where Ali A.R. He says, I'm going to do it. He was 10 years old. Subhanallah. We talked about Asmaa A.R. and converting when she was 11. How many young people in our community are like, oh, what do they know? Oh, what did Ali A.R. know? Again, don't be the person that dismisses Ali A.R. May Allah protect us from ever being that. But she's there. She's a witness to all of these things. Finally, the Prophet Sallallahu Alaihi Wasallam stands on the mountain of Saffa. He calls out to everyone. And again, Abul Ahab is the one who insults the Prophet Sallallahu Alaihi Wasallam. And Subhanallah. He said, he told the Prophet Sallallahu Alaihi Wasallam, tabban naka sa'ir al-yaw. May you be cursed the rest of the day. And the Quran was revealed, may the hands of Abul Ahab become cursed. Subhanallah. May Allah protect us from that.  It's a short surah. So like five year olds in the ummah are learning it till the day of judgment. Do not mess with the Prophet. Like, don't ever do that Sallallahu Alaihi Wasallam. But she's a witness to all of these things.  There are people that have left. Subhanallah. There was a moment where we know when the Prophet Sallallahu Alaihi Wasallam was a young child, when after the passing of his mother and the passing of his grandfather, the Prophet Sallallahu Alaihi Wasallam, his grandfather asked his uncle, Abul Mutalib, to take care of him. And he, in fact, lived in the house of Abul Mutalib. And then at some point, Abul Mutalib became so overwhelmed. He had 10 children. He couldn't support all of his children. So, Al-Abbas and the Prophet Sallallahu Alaihi Wasallam said, let's take some of his children and take care of all of their needs and all of their finances. And that's actually how Sayyidina Ali, ended up in the house of the Prophet Sallallahu Alaihi Wasallam. Jaffa, we talked about, who was married to his wife, his Asmaa, he grew up in the house of Al-Abbas, where Lubaba was a mother to him. He wasn't her biological child, but she raised him in her own house. And we know that Jaffa, was the closest person to the Prophet Sallallahu Alaihi Wasallam in looks and in characters. Subhanallah. This was the Prophet Sallallahu Alaihi Wasallam telling him this, by the sixth year, since the beginning of the revelation, now at this point, the Prophet Sallallahu Alaihi Wasallam in his words, the Quran that he was reciting and the truth that he was giving people became so powerful, they decided they're going to boycott them. And mind you, when they're boycotting them, they're not boycotting the Muslims. The majority of the Muslims, some of the Muslims ran away to Abyssinia. In modern day Ethiopia, some of the Muslims, which Subhanallah Najash is the first king to ever become Muslim. Subhanallah. Some of them are hiding their Islam. They can't go anywhere. And then the entire family of the Prophet Sallallahu Alaihi Wasallam gets forced into a place called Shah-e-Bani Qalb. And they were between like, between the mountains, no one was allowed to trade with them. And the majority of them I want to point out were not Muslim. They were standing on principle. They were not actually Muslim. And you can imagine the guilt the Prophet Sallallahu Alaihi Wasallam is feeling. His entire family is getting pushed out. Can you like, his uncle made him sleep in a different place every night. Out of fear that someone would betray him and sell him out from hunger. In the midst of all of this, Lubaba is witnessing her best friend, Khadija, Rabiullah, and I get weaker and weaker. And Subhanallah, everyone's really struggling. And it was actually then that Allah gifted her, her son, Abdullah bin Al-Abbas, Sallallahu Alaihi Wasallam. Can you imagine being the person that is bringing this joyous news to the Prophet Sallallahu Alaihi Wasallam? And I want to point out that her son, Abdullah bin Al-Abbas, they call him, Hibra, Hadi, Al-Ummah. He is the scholar of the Ummah, which I mean, wow, he's the scholar of the Ummah. She made dua that Allah gifted him knowledge. And he was the one that carried on the legacy of so much of the family of the Prophet Sallallahu Alaihi Wasallam. He carried on the legacy of Hadith. There's so many stories about him that when the, he would like, the Sahaba, the elder Sahaba, they said, they, he said, he realized he told his friends, he's like, the Sahaba are starting to pass away. I need to go ask them stuff.  The Sahaba, he'd open his door in the morning.  Subhanallah. That was her son. And this is the moment when he was born, giving hope to the Ummah. And when he was born, we talked about this idea of tahneek, where you, you take the date. They didn't have a date.  Subhanallah. Alhamdulillah, the boycott is lifted. The next year is actually called the Year of Sorrow. Because Khadija, Abdullah bin Al-Abbas passes away. And the uncle of the Prophet Sallallahu Alaihi Wasallam was protecting him, passes away. So two things happened. The protection of the Prophet Sallallahu Alaihi Wasallam moved on to Al-Abbas, to his other uncle. So again, even though he was not Muslim, he was protecting the Prophet Sallallahu Alaihi Wasallam. And can you imagine what Lubaba took from her friend Khadija? To continue protecting, she was known when you are stuck in Mecca, and you can't get out when you're Muslim, and you need help that Lubaba, Rada Allah, is the person that you go to. And everyone knew this. This is what she was known for, out of loyalty to her friend Khadija, Rada Allah, Subhanallah. When the time of the hijra comes, she's Muslim. She can't leave. Her husband is not Muslim. Her Islam is a secret. And even Abdullah bin Abbas Sallallahu Alaihi Wasallam, he said, My mother and I were from those who were oppressed in Mecca, that couldn't leave. But she was given a task by the Prophet Sallallahu Alaihi Wasallam to protect everyone else that was stuck in Mecca, that also couldn't leave. And she did this with loyalty for years. And it's one thing to be like, Masha Allah, we talked about the people that went to Abbasini, they're the people of the two hijra. Lubaba, Rada Allah, was stuck in Mecca, in the center of it all. Watching them raise an army against the Prophet Sallallahu Alaihi Wasallam. During the battle of Badr, her husband, Abbas, was actually forced into the battle against the Muslims. And she's watching him go to join an army to fight the Prophet Sallallahu Alaihi Wasallam. Like imagine what she is going through. As she's witnessing this, Subhanallah, the Muslims, we know the Muslims won in Badr. The Meccans had never imagined that. They were undefeated. Badr was such like blew everybody's minds. People could not unfathom. Like actually, Subhanallah, the Quran calls it Yom Al-Fulqad. It is the day where truth has become evidence, Subhanallah, in the battle of Badr. So the battle of Badr happens. The disbelievers are running back to Mecca. And there's one, only one leader of Mecca that didn't leave with them. He was a coward. And his name is, we talked about him already. Who's the coward that didn't go? Abu Lahab. He paid someone else to go on his behalf. He's like, you owe me a debt.  I don't want to go. So he's the only leader of Mecca that didn't go. And Subhanallah, the Muslims win such a resounding victory that now there are people that are just running, trickling back into Mecca. It's not a celebratory army that's coming back with a parade or anything like people are just running back into Mecca. So they run back into Mecca and everyone's saying, we lost, we lost. But I was just like, wait, what? What are you talking about? More and more people kept coming in until finally a man came in and Abu Lahab held him. He's like, tell me what happened? And he started describing the battle to him. He told him there were these men that were wearing all white. They were on horses that were between the heavens and the earth. He's describing the angels. And he said they would strike someone and the wound wouldn't be red. It would be green. And Subhanallah, there was a, there was a a mullah and enslaved a man that was living in her house. Who was also Muslim. And his Islam was a secret. He started, he couldn't contain himself. He's like the angels, the angels. Abu Lahab was furious. Took this man. He started to beat him. Like even the narration said he was literally on top of him hitting him. And I want you to picture this because who has power in that moment? Abu Lahab does. Who has the clout and the authority in that moment? Abu Lahab does. And I don't mean to like in America, we all know this. If you see an officer standing over a man beating him, who has the power in that moment? How terrifying is it to stand up to that person who clearly has no problem using all of their power and all of their authority to physically harm someone. Luwada, picked up one of the poles of the tent, which I can't even imagine like the adrenaline that she must be going through her body and the physical strength that she had. She went and she whacked Abu Lahab on the head. That was the only way to get him off. You know, when someone's crazed and won't let go, she knew it and she whacked him. Yeah. Oh, she has a boss lady and she told Abu Lahab because you think because the Abbas is not here that you can do this to a member of our household. I want you to also understand in that position she's also a member of the Abbas's household. Clearly Abu Lahab had no problem beating anyone in the house of the Abbas and she took that stand anyway. It's one thing when it's subhanallah because now we watch all these videos. You were unfortunately there's some horrendous videos that you witness and there are other videos where you see another cop that stood up to a cop and said, Hey, we're not doing this. This was another person that stood up and said, I'm just as vulnerable as him as I'm going to stand up for him anyway. Within seven days Abu Lahab had passed away not from that hit but actually from an infection that he got from it. So even though Lubab al-Ghalan was not part of the battle of bed the remaining leader of Mecca that was fighting the Prophet's life she's actually the one that got him. And she got him defending another person Subhanallah someone that Mecca had decided was was vulnerable enough and not worth fighting for Subhanallah she stood up and fought them Subhanallah by the third year of the hijra that's the point where her sister, her half sister, Zayna bint Khuzayma married the Prophet's As-Salam after her husband was murdered and within a few months she passed away by the fifth year of the hijra all this she stuck in Mecca everybody's like all the stuff is happening now Sul-Hurdebi they're coming they're doing they're creating this treaty with the Prophet's As-Salam they were coming to do Umrah they get sent back from the Umrah they sign the treaty by the sixth year of the hijra they're doing something called Umrat al-Qadah where the year after they came back to do their Umrah during that Umrah everyone in Mecca emptied out because they didn't even want to witness the Prophet's As-Salam coming in all of his glory they actually started sorry, I don't know how much time do we have Okay, Alhamdulillah they started this rumor about the Muslims they're like oh they've gotten diseased and now they're sick in Medina and they're not okay do you has anyone how many people have been to Umrah? few people you know that part in the Sa'a where there's like the the green lights and people run faster that was the only part that the disbelievers could see them the Muslims doing their Sa'a so the Prophet's As-Salam told them in this portion I need you to run faster and that's why we run faster of like oh you're calling us sick we're doing our Sa'a and we're running in the Sa'a like man we're really strong Subhanallah but the Lubaba and the Abbas they were still living in Mecca and her sister Maymuna was actually living in her house until the Prophet's As-Salam came and proposed to her and that's actually where the wedding happened it happened in those three days in Mecca and the Abbas and the Lubaba were actually the ones who hosted this wedding where she is her full sister Maymuna is marrying the Prophet's As-Salam and she was the last woman to actually marry the Prophet's As-Salam who was the last of the mothers of the believers Subhanallah in the eighth year of the Hijrah that's how long it took finally Alhamdulillah the Abbas became Muslim he became Muslim he took a Shahada he decided to do Hijrah he is actually counted as the very last Muhajir because for you to be a Muhajir you have to you have to take your Shahada and go towards the Prophet's As-Salam before the conquest of Mecca he leaves Mecca with the intention of joining the Prophet's As-Salam and lo and behold the Prophet's As-Salam the Sahaba are all just outside of Mecca now coming for the conquest of Mecca Subhanallah so the Prophet's As-Salam comes in they conquer Mecca and the Prophet's As-Salam there's so many moments like it wasn't just her it was her and a few other people that the Prophet's As-Salam As-Salam the As-Salam she's like you've been with these people for a long time who are they? like there are some important dignitaries it's this or it's that he says we're remembering the good old days of Khadija he's coming home to his house where Khadija Rabi'Allah was buried it's now a decade later this was her friend and the Prophet's As-Salam is just excited to see her Subhanallah after that moment she actually her and Abbas and their whole family actually joins the Prophet's As-Salam in Medina and he was in those last two years of them of the life of the Prophet's As-Salam when they're living in Medina that we now get all of the narrations about her and her interactions with the Prophet's As-Salam she narrates and she narrates actually a few hadith from him and her son Abdullah bin Abbas Abdullah who's known as a narrator of hadith he actually narrates from his mother Lubaba Rabi'Allah Um Al-Fatl there are two narrations one of them that I think is hilarious so when Al-Husayn Rabi'Allah and the grandson of the Prophet's As-Salam was born Luaba actually nursed him so she was a nurse mom to Al-Husayn Rabi'Allah and she was carrying the baby and she goes to the visit the Prophet's As-Salam she hands the Al-Husayn Rabi'Allah to the Prophet's As-Salam and this is just funny because it's I don't know human and then Al-Husayn Rabi'Allah over the Prophet's As-Salam I mean they're just normal human everyday things babies do this she tells the Prophet's As-Salam you know if you go change I can I can wash it for you this is actually where we get the Fikr ruling where the Prophet's As-Salam says for a new born boy you can actually just sprinkle water on it it doesn't ruin your tahara but for for if it's a new born girl then you actually have to wash the garment and there's yeah I'm not gonna get into the Fikr that because it's too long Abdullah but I just think it's really fascinating SubhanAllah again it's everyday things the reason we know how to make us is because her sister my moon is the one that told us all day long like who else is going to watch the Prophet's As-Salam make us all have to be his wife the narration was from my moon on all day long that's how we know how to make us this is the value of these women SubhanAllah she went with the Prophet's As-Salam during Hajj Wada' and during during the Hajj there were people that were having a discussion they're like is the Prophet's As-Salam fasting is the day of Arafah is he fasting is he not fasting what do we do and she knew he wasn't fasting but she did something that was very subtle and very smart she just took some milk went to the Prophet's As-Salam handed him the bowl he stopped drank the milk in front of everyone and everyone was like okay not fasting that's how we know that ruling and the reason I mentioned how she did it is in that subtlety we might miss that it was a woman's wisdom that gave us this ruling no one when you read the fukh banan lubaba radiullah has the reason we don't like she's not necessarily listed in those books but we know it was her wisdom that did this just because we don't know the stories and the women and our mothers and our four mothers that came before us doesn't mean that Allah did not see them I remember going to my teacher Allah alhamdu shaykh ayyum I would get so frustrated about things he's like why do you care Allah knows I'm like oh but she asked someone's taking credit for blah, blah, blah, blah, blah, blah and I'd get so mad and he's like why do you care Allah knows I need Allah to know I don't need everybody else to know I just think it's so beautiful subhanallah there's another how much time do I have okay all right alhamdulillah there was one of my favorite narrations from the time where the prophet because part of this is lubaba radiullah and besides making dua for her son Abdullah al-Abbas is she's now taking him to actually have access to the prophet say well if you're if you're on campus welcome Halqa on Thursday is this hadith heads up but al-Abbas Allah and he's saying one of the days where I was riding with the prophet sallallahu alayhi sallam they're famous like can you imagine like and then we were driving and I was riding shotgun and the prophet sallallahu alayhi sallam was driving you know you know as you do just riding with the prophet sallallahu alayhi sallam and the prophet sallallahu alayhi sallam looks at him he says oh young man I'm going to teach you these words selling him like watch attention pay attention watch this this is important listen up and he tells him to jidh be facing you will will like personally be taken care of you if if you are rely rely on Allah and know that if the whole Ummah got together with something to benefit you with something they can't benefit you with something except that Allah has already pre-written for you and if they all get together to harm you with something they can't harm you with something except that Allah has already written for you. The pens have been lifted and the ink is dried. SubhanAllah. Her being in Medina means that we have this hadith so her son can learn it from the Prophet's, her son was actually an advisor he was 13 years old when the Prophet's I sent him passed away again we can't dismiss the young people SubhanAllah. So much okay way too much I'm just gonna try to wrap up. Lubaba Rally Allah passed away during the time of Sayyidina Usman Rally Allah continued to be a support for different people in the Ummah Rally Allah. I just wanted to stop in for a second and point out that Hassan Abdullah ibn Abbas was known for his knowledge in the Ummah. Her nephew Khalilul Waleed Rally Allah was known for his military might and in one of the narrations from the narration I don't know what's happening with the microphone. Well we should have done that a long time ago. Safiyan ibn Ayayna in one of the narrations says that the women of Hilal they mothered so many of these leaders of Makkah some of them had political power some of them had military power some of them had knowledge which in and of itself is power and she's the mother of the one that actually had the knowledge and I want to like SubhanAllah this is a form of power we don't realize the power that knowledge gives us it can make every like an entire like our communities are made of people if we change our behaviors and all become different that the ayah says Allah doesn't change what is with the people until they change what is within themselves we look at these huge systems how are we supposed to end systemic racism system was made by people will change the people and will change the system SubhanAllah that's how the system has actually become changed that I don't know if that was a cheer but who and Hamdulillah Allah okay wait I'm not done yet last thing I just want to say that community building in and of itself is a form of knowledge and this is the knowledge that Luba about her the one who is known of her wisdom the one whose name actually means the core in the essence the calb this is what her name means that is the wisdom that she she possessed that a loss panel gifted her community building is a form of knowledge it's a form of scholarship when we talk about scholarship a lot of the times we think who can quote all the deformer that have been this and that knows all the delay that is a form of scholarship community building is also a form of scholarship and I say this because sometimes you walk into you go into different Muslim spaces and a lot of the times it's unthanked women that are the ones that are actually building the community that are calling who's who's in trouble let me call her who needs this let's figure out let's what's happening it's usually the women I want us to know that that in and of itself is a form of knowledge it's a form of and it's a form of scholarship and that was the scholarship of our mother Luba but I'll do a lot of law like this panel law she inherited it from her friend Khadija to be the mother of the one of the mothers of the whether she birth that child or not subhan Allah may Allah accept from us all the male law allow us to leave along the footsteps of sayyidah Luba but only a lot


I am a United States sailor. I will support and defend the Constitution of the United States of America and I will obey the orders of those appointed over me. I represent the fighting spirit of the Navy and those who have gone before me to defend freedom and democracy around the world. I proudly serve my country's Navy combat team with honor, courage and commitment. I am committed to excellence and the fair treatment of all. I am a sailor.


Okey, jadi... Selamat pagi, Defcon Terima kasih banyak untuk mengambil masa untuk berada di sini dan saya harap anda akan berjalan dari bintang ini telah belajar sesuatu yang menarik dan baru dan jika anda ada, tolong beritahu saya tentangnya Jadi, apa yang bintang ini tentang?  Ia tidak terlalu banyak untuk menggantikan pembinaan berkumpul tetapi apakah ia tidak menarik untuk menggantikan lock? Saya Vincent Saya dari Sani Singapore currently a security consultant at MWR dan mempunyai mobile dan wireless In this talk, I'll first give a quick overview of the bike sharing economy and the locks used on shared bicycles I'll do a quick recap of BLE for those of you who are unfamiliar Then I'll move on to walking you through how I analyze communications between my iOS device and the BLE lock what worked, what didn't and how a key can be built from what I've learned and a small demo of an app I've built to get rights for free So I'm sure by now we all know that smart locks are rubbish The state of security now is terrible because and I could be wrong companies only care about features and getting the market as soon as possible They don't care about designing a scale lock and they aren't performing any test to validate the security of their solution Take for example, tap lock the latest smart lock to be hacked It talks about having all these incredible security features such as encrypted fingerprint reader AES 128-bit encryption anti-taff alarm but ultimately it got hacked in 2 seconds So what is the situation with these guys? These are the 3 largest bike sharing companies in Singapore O4 and MoBike being companies from China and O-Bike a local Singapore startup which unfortunately has just failed for bankruptcy not too long ago These guys have operations all over the world and have pretty high valuations Across all companies the cost of renting a bike is $0.50 per half hour which roughly equates to $0.37 USD So before all the juicy bits a quick refresher on what Bluetooth Low Energy aka BLE is There are 2 key things to know to navigate your way around The first is GAP or Generic Access Profile This basically defines what the device is Devices are split into 2 categories A peripheral device and a central device A peripheral device is a low powered device It could be a bicycle lock or a pacemaker and the central device is your high powered device such as your mobile phone or your laptop Then comes the Generic Attribute Profile or GAP This defines the way that 2 Bluetooth Low Energy devices communicate with each other Each BLE device will have 1 or more services and within each service it will have 1 or more characteristics Services are groups of characteristics and characteristic is a data point both of which are identified by a 16-bit or 128-bit UUID In the case of a treadmill for example a data point can be the step-climber data speed, inclination, or heart rate and in the case of a Bluetooth lock the data could be the battery life or the unlock mechanism So let me give you an example an idea of what the bicycle lock is and how it looks like and how it operates How do you pick a lock when you don't actually own the lock? My first hurdle came when it was time to figure out properly how a bike lock would work Since I have pretty much zero experience in Bluetooth or lock mechanisms I decided I should go buy one instead Quick search on China's beloved shopping site Taobao quickly came upon this I could have my own smart bike lock appears to operate the same way and apparently the company also OEMs the entire solution to bike sharing companies maybe one of my targets would use it In essence, this is how the entire process of renting a bike works you download one of the apps O4, mobile bike, whatever you enable Bluetooth find your account scan the QR code on the bike and the bike will automatically unlock These bikes have a small solar panel to charge the battery in the lock and most of the locks do not come with built-in GPS GPS data is provided by your phone Wherever you cycle to and finally lock the bike the app will record it and send it off to the cloud via HTTPS There are of course more expensive locks which do have inbuilt GPS So the first thing I did like any good hacker does is to tear apart upon receiving it This is a tear down The lock with the QR code on the left and the 4 cell battery inside This lock charges via USB This is the logic controller with Bluetooth radio and the moto that releases the lock So it's a spring loaded lock and the lock is held in place with a pin in the notch When the unlock command is received the moto will then engage to release the lock So it's time to actually look at how the lock and app were communicating Again, I had no idea where to begin how Bluetooth worked Etc I turned to a great presentation by Slo Amir Jayzik Sorry if I mispronounce your name where it was effectively man in the milling the Bluetooth connection thus allowing demodification of packets Unfortunately, I wasn't able to get the setup working for that Then I found another fantastic presentation by Anthony Rose and Ben Ramsey from Defcon24 where they used an ubertoof 1 to sniff BLE packets and then used the wireshark to figure out what was going on but for the life of me I couldn't figure out what was happening So this is an example capture that I took This shows a capture from the ubertoof 1 and the BLE write request and response Again, didn't understand what was going on but after this packet was sent the lock opened So I basically replayed the bytes from this packet with no result Again, I have no idea what's going on So back to drawing board I figured I needed two things to be able to help me figure out what was going on First, I needed to figure out how the app communicated with the lock What were the endpoints that it communicated with What were the services and characteristics that the app communicated with And second, how I could intercept the BLE traffic to understand what was going on For the first problem I needed a way to figure out and understand how the app communicated with the lock in the ubertoof After doing a little more googling You may know Evil Socket BLEH You may know Evil Socket as the author of the more famous Better Cap Toolkit So what BLEH does is that it essentially enyumates the services and characteristics of any BLE device This allows one to see in a practical manner what services there are on a device and what characteristics can be written or read from You can see at the bottom the different characteristics that can be read from or written to For my second problem Since I have the app and I have the lock it all comes down to understanding the process of what BLE messages are sent to unlock the lock I turned the Frida and the Frida Trace Tool which would allow me to view in real time what the app was processing We can use Frida before It is a wonderful tool to allow instrumentation of applications across various platforms In particular, the Frida Tool used on the iOS platform allows users in essence to log in relatively real time on objective C classes and methods and C functions which are accessed and executed by the application Since we can use Frida to hook a way to We now need to find which one to hook In iOS the core Bluetooth framework is used to perform Bluetooth communications The CB peripheral and CB peripheral delegate classes are the most interesting and the read value write value and set notify value are methods of interest It is quite obvious what these methods do read value, read to value characteristic write value And another interesting property of BLE is that it is possible to get a peripheral in this case, a lock to push messages to the application This is done through the notify property of the characteristic and it can be enabled by the set notify value We can then capture the push by tracing the update methods of the CB peripheral delegate class So, after a lot of reversing of the app boxing of traffic and recording of BLE reads and writes I've come up with the following process to unlock the bicycle lock that I bought from China Obviously, scan the QR code The app will then get a lock key for the server that makes the server respond to the lock key The app makes a request to the lock for an encrypted token by sending the right request Lock responds with the encrypted token through the notify property The app decrypts the token with the key from the server sends a right request and it unlocks So, this is a challenge and a response process where the lock provide the token and if you have the corresponding key you'll be able to decrypt the token and send the result back to the lock By the way, if it isn't already clear the security of the lock is horrible I can retrieve any key for any lock by just incrementing the lock ID for this company and they make a whole bunch of locks So, let's try this against the real world Now, we've seen how such a lock could work to understand how it works what methods the hook, and what kind of operations the app and the lock may perform How does it compare to an actual lock used by O-Bike For the most part, the hardware looks pretty much the same Someone did a YouTube video tear down of the lock As you can see here, we have a single cell battery the lock hardware and a Texas Instruments CC2541 SoC chip Now, let's find the service and characteristics UUIDs that could be of interest Again, with Blair we know what could be of interest but we don't know how they are used To figure this out I trace the entire flow of the app to identify which characteristics was most used and as it turns out communications went to the FFF6 characteristic To guide you through the next couple of slides I've laid out the flow here to show you the process in unlocking the lock First, you scan the QR code The app checks the lock status with the server and also sends it your coordinates The server responds with the lock status and if okay the app will then proceed to request an unlock token from the lock Within the app and HDB request the server this is known as the key source so the app responds with the key source sorry, the lock responds with the key source the app then uses the key source to request an unlock key from the server so it replies with an unlock key for the lock and the app uses it to unlock the lock So, similar to the lock that I bought off Taobao it appears to use some sort of challenge and response mechanism or that in a little bit more detail Scanning the QR code provides the app with the ID number of the lock and as seen in point 1 the QR code is essentially the URL with the bike ID at the end Assuming you have used the old bike app to scan the QR code a request is made to the server with the lock ID and the current coordinates of where the lock was scanned The server responds to the status check with whether the lock is faulty or not based on reports from other users and if it's not, the app will proceed to the next step Here, the app request for a key source from the lock This can be a little bit confusing so let me explain As I mentioned earlier it is possible for a peripheral device to send push notifications also known as notify in BLE back to the app the app is setting the notify flag in the FFF6 characteristic Next, the app sends a request for the key source to the lock by performing a BLE write In this case, a dump of the BLE write at the memory location shows that the write command is in the form of the following bytes 67, 74, 0, 0, 81, 81 and that it is being sent to the same FFF6 So, the app now waits if the command send was correct and accepted by the lock the lock will respond with the token or the key source This is a response Here, we can see the response through the trace of the update value for characteristic method and within the response the app picks out the key source as shown What the data means I have no idea but I don't need to know because every time this transaction happens the key source is always located in the same location It is always taken from the 9th to the 12th bytes The key source is then sent to the server through the unlock pass API and assuming there are no errors the server responds with a pair of keys So now we've got the keys how are they used The unlock message is constructed and sent to the FFF6 characteristic in two parts As you can see, the two write value messages and below is the dump of how the actual message is or what the actual message is This looks roughly like the message that I tried replaying earlier from the wireshark capture which didn't work So, I dug a little deeper into how the unlock message was constructed and what the different values meant After looking at numerous unlock messages I found the following In the first message the first two bytes are static throughout all messages sent from the app to the lock whether it's an unlock message or any other form of message these two bytes are used The next byte is the length of the message which is static for the unlock algorithm Next byte could be a command byte to unlock the lock together with the key index then the subsequent six bytes are static and the final five bytes of the message are the date time stamp Message 2 contains the key from the server However, this has been truncated to 12 bytes and the last byte is a checksum This is done by performing an XOR of each byte across both messages Now, I had to jump through a couple of hoops along my journey The first was trying to understand what was sent from the app to the server and as you can see here the messages looked to be encrypted Why the programmers would encrypt the messages and just send to the server is beyond me and they're just wasting their time and my time We're freedah hooking the right messages couldn't be easier I found that the messages were encrypted using AES with a combination of a static string and a version number of the application provided in the HTTP header as seen here For those of you who have noticed there is a string text to the back of the message sent to the server What the heck is that? Again, the developers implemented some form of integrity check for some unknown reason to waste time with further assistance from freedah that string I found was a shawan sum of the following values the data to be processed by the server a static string and the application version now you must be wondering how users get charged after the bike is unlocked the app sends lock status to the server informing it, it has been unlocked and to start a timer once you're done riding the app will then send the lock status again to the server Lastly, you're built for the amount of time that has been used So, if I actually ride my own app to perform the unlock and halt all further communications with the server after unlocking the bike I get free rides after jumping through the hoops and understanding how how the BLE communication works and how the unlock command is built I built my own key sorry the video is a little bit dark but here I am entering the lock ID into my app waiting for the server that's the unlock sound so if you've no doubt noticed opening the lock depends on the connection to the server how can you then unlock it offline Since old bike has recently gone bankrupt someone dismantled the lock from the bike retrieve the chip and sent it over to me My solution was to try and get the dump of the firmware to figure out how the unlock algorithm works offline Unfortunately, the readout fuse was set on the TI chip and it was not possible for me to dump the firmware if anyone of you knows how to get around this ok It was relatively easy to unlock the lock from one bike sharing company should be relatively easy to do it for another no I tested this process against more bike same thing we start off by finding the services and characteristic UUIDs that could be of interest looks to be a lot simpler here only two characteristics and it is obvious which we need to write to to unlock the bike moving on for more bike the process in unlocking the lock is much simpler same as before you scan the QR code you get a bike ID send the lock status to the server also send your coordinates so we respond to the lock status however this time the lock is good the server will also send along the unlock key immediately the app then uses the key to unlock the lock so no challenge as a response mechanism it's just a direct unlock as before let's go through all of that in a little bit more detail similar to a bike after the bike is unlocked lock status send to the server timer starts when you're finished user account is charged again if we cut off the messages after the unlock similarly I encountered various crazy integrity checks implemented by the developers in this the HTTP messages for the obike app there's a sign parameter and there's an EP data how are these formed in this case it's just RSA encryption to encrypt a user ID string together with the current date time and the output of that is used in messages sent to the server the sign parameter is then an MD5 hash of the data that's sent to the server after going through all of that again the process starts out the same user scans the QR code QR code contains a URL with the bike ID at the end assuming you've used the mobike app it's made to the server with the lock ID and the current coordinates of where the lock is scanned however here's the difference the application server will respond with the faulty message if the lock has been reported faulty by a number of users or it will immediately respond with an unlock key if the lock is in good condition this differs from obike in that it doesn't require so what happens with the key from the server first according to the trace the app tells the lock to set it a notification by setting the set notify value to 1 seen here for the FE0 and FE1 UUIDs then the app breaks up the key into 3 9 byte pieces appends a 2 byte header to each and writes it to the lock via bluetooth and it unlocks to make it clearer the key response from the server is broken into 3 9 byte pieces and an incremental header is then added and return to the lock and it unlocks straight forward and simple in testing however i face one problem it seems that the lock was able to keep track of time because every key received so the server for the same lock is always different additionally if there was a delay in sending a key to the lock it would not work so after all that trouble i modified my app and this time around i only program this specific byte id so it would save me time in trouble let's play that again okay so there were 2 types of lock schemes across the 3 locks that i faced the first was a challenge response scheme where a challenge was requested from the lock this data was then sent to the server to process or data was processed on the client side output from this processing was then send to unlock the lock the other type was a direct unlock of the lock based on a key provided by the server so when i started this journey i had no idea how BLE worked and how one would begin looking at BLE devices there was no process or one that i was aware of when i started on how to look at BLE stuff i hope given the following repeatable process anyone who has wanted to start breaking BLE devices would have an easier time as we have any project our attack surface and i found this to be done easily with BLE as shown previously we can use BLE to innovate the services and characteristics of any BLE device and understand what we communicate with then we find out if the device does send notifications to the app and if so we enable notifications by setting the set notify value and we hook into the appropriate read and write methods to figure out what messages are being read from and written to the BLE device and we also hope the did update methods to find out what notifications if any the peripheral devices send to the central device so i didn't make use of any special hardware such as the uber tooth one or develop any special app to innovate a BLE device i use my iphone to help run the app and Frida to help with understanding the communications between the app and the lock that's all from me thank you for listening


early into the paint. He stops and tried to find Tarell. It was intercepted by George Williams. Williams all over the basket.  Oh, spectacular!