I'm not going to get up on this stage. I do a little bit better when I'm wondering around and able to hold a massive phallic symbol up to my face for some reason. Even, thank you. Thank you, even though I, well never mind. I could go off on a whole thing on that. Last year I did do a talk that had lots of flashy graphics and I did music, soundtrack, and the whole bit. I'm not doing as much of that as I did last year. I'm not doing that much this year. And well, just a couple of quick things. About me, I'm with an affiliate with a group known as NMRC. And that's roughly what you could say, the speaking capacity. That's who I'm speaking as, as an NMRC person, as opposed to my, in the interest of full disclosure, my daytime employer, BindView. As you see through, as we go through on some of the slides, some of the images may be somewhat questionable for a corporate type talk. So I'm not going to be speaking as that. But I do work for BindView on the Razor team. The skills you'll need for this to be able to understand what's going on in this talk, basically, what you're going to need to know is, hopefully, a little bit about computer security, you know what an IP address is, that kind of stuff. I am going to cover some areas that do get somewhat technical. And if you have technical questions that you didn't quite understand, that you want to talk to me about later, then feel free to grab me later. I am going to cover a lot of social and political related issues as we go through this as well, though. And also, we're going to have a few, I wouldn't really call them surprises, but just some interesting things that will let you know that kind of go along with the entire theme. And also, if there are any questions doing this, I must ask one of the question. It must be in the form of an answer, OK? Because that really, really simplifies my job here, OK? First off, I wanted to talk a little bit about what's gone on in the past year. Of course, the DMCA muscle was flexed about a year ago as it stands. Poor Dimitri was grabbed up after giving a speech, not exactly after, not right after. They didn't just pump them in handcuffs, as he said, thank you or anything. But nonetheless, it was that muscle was flexed. And we saw a little bit of an example of what the DMCA was all about for whatever it was worth. That was kind of a frightening thing for a lot of people, simply because of the implications for security and security research. There are a lot of provisions in there that say, OK, researchers are exempt from this or that or the other, but then there's not a lot of clarifications just to exactly what entails research, what entails reverse engineering. So there's some scary things there. Another one was something that absolutely ruined my birthday, which is September 11th, an event that happened that just really screwed things up. That has resulted in a whole bunch of emphasis on security. But again, what's happening with our legislation, our leaders and whatnot, if you want to call them that, these supposed people that are running the government, it led them to pass a whole series of what I would call basic major-type legislation. The primary one that I would bring up would be a USA patriot, OK? And I hope everyone here saw Jennifer Granix talk yesterday. Did everyone see that? OK. That was a very, very good and interesting talk. I was very pleased that she did that, and I was somewhat rather frightened. I know she tried to give a little balanced thing, but I mean, there are some serious implications for some of that. She also talked a little bit about some upcoming laws. The one in particular is the Cybersecurity Enhancement Act. This is the one which basically takes most of your penalties for cyber-related crimes and doubles them, and has some interesting provisions so that if you were busted on some type of hacking-related thing, and then you go out and you have a whole lot of elite skills, the higher your skill set, the higher your sentence is the way I read it. Now, maybe reading it incorrectly, but that's how it looks to me. More skills involved in doing the attack, and then that increases your length of time in with a brother in a jail cell, which is kind of sad. Everyone's that are coming up that are kind of scary. You've got this stuff going on in Europe where we're talking about retention of communications, internet communications. This one's kind of creepy. I can't remember the exact one. This one is really, really, really bad because apparently they're all proponents within our government. They actually think it's really, really, really good. The premise is this.  That's kind of a vague term, but what they're meaning is they're meaning email, they're meaning web, probably something along the lines of instant messaging or whatever, but basically grab that information and then store it so that it's available in case someone needs to go back and do subpoenas and searches and whatnot. This actually is starting. This idea is starting to gain some momentum. I believe it's the house that has been suggesting. I don't know the latest on this. The house has been kind of toying with this whole idea. I'll try to speak over the planes as they go over. And it's where they want to retain, let's say, email for 90 days. OK, now think about that. Copies of all your email retained by your ISP for 90 days. Of course, I think that most of the ISPs would be extremely pissed off at that because that means they're going to have to have more storage, more backups, and everything else. I have a somewhat interesting solution for it. It would be to, for every one of us that wants a mail server, if this does come into law, for every one of us that wants a mail server, just go in there and open up the relaying to go to house.gov and senate.gov. And that way, they can get all the spam, and they can have it. And if you want to be really aggressive, just bounce all your spam to those systems. And then you can just say, hey, man, retain that. You motherfuckers, you go ahead and just have that. Now, what will, of course, be interesting is then you start doing your freedom of information requests and say, I want to know all the senators who are getting bestiality porn email. Well, that's just kind of a fantasy there. But anyway, so there's bad stuff, OK? There's bad stuff on the way. There are things you can do, and I'll kind of go into that at the end. That's the other thing. Trying not to be cynical, I've been talking a lot.  And I wonder, or I've been talking with lots of people here. I see some people here that I've been talking with. And they say, what are you going to be talking about? And I tell them, and I just threw out all my notes. I wrote a few down, but I thrown out all my notes because it's just everything is changing so fast. Everything is happening so fast, and we have so many odd things going on. The big criticism I had from last year's talk was that I heard this from probably the people that have helped put on security conferences on down. They said, this is the security conference. This is a hacking conference. Why are you bringing up politics? What does politics have to do with any of this? Someone said everything. That's exactly true. Now, it may not have been true before, but it is true now. There are now extremely serious consequences for your actions, much more serious than before, OK? Well, let me give you some examples. Let's take full disclosure, or just the concept of full disclosure. What are we talking about here? We're talking about, let's say you're going to put a post out on bug track. You found a vulnerability. You're going to put a post out on VellWatch. You've got to advise what's going on. OK, let's say, did you give the vendor enough time? OK, that's debatable as to what that amount of time is. Did you give the vendor any time at all? If you didn't give the vendor enough time, there are people that will flame you. The press will come down on you for being bad things that are said about you. OK, that's one area. If you wait too long, it says, I notified the vendor 35 months ago, and now they're ready to go to the patch. Then you'll be, oh, you waited too long. You left us vulnerable for too long a time, all right? If the patch isn't available in a timely fashion, I mean, in other words, the work arounds don't work. There's all kinds of ramifications that are tied to that, OK? And it doesn't really help when you've got various governmental type agencies and various software vendors who seem to be trying to work together to at least limit the disclosure itself and using what weaknesses they can find as a whole argument to go ahead and meet you on agenda. Let me give you a very quick example of that that's happening right here at this conference. There's a panel, I don't know if it's happened yet or not. I really didn't pay attention to the schedule. Something to do with disclosure, what the feds think? That's today? OK. What the feds think?  I really want to know that. I want to know. Someone asked that. I can't go to the talk. I'll end up trying to inside a riot or something. But I mean, that's a very, very telling sign when you think about it, all right? You have a major corporation who's got a vested interest in the control of disclosure. And they're sitting on a panel with feds. The same, maybe not the exact feds, but the same federal government they had gone after them previously on any trust.  I want to know when the government says we've contacted security experts and industry experts about this kind of stuff, saying we need to come up with a policy on such things as disclosure or in such things as some of the various tenants of the Cyber Security Enhancement Act and whatnot, why you're continually going to such groups as the major software vendors who have their interest in it is purely financial in the outcome of that. Someone needs to hear, well, I guess we all, raising that question. Someone go there and ask them not at that top. Another thing with why things are political, sorry, or pitiful or whatever you want to do. Releasing a vulnerability 10 years ago, we didn't seem to have nearly as much of an impact as it does now. The amount of computers and network devices is rapidly increasing. And it's just a highly accelerated rate. So now if you release some type of vulnerability information that affects 10% of all systems, 10 years ago you would have attracted a fair amount of attention, probably nothing mainstream. Now, you're bringing down large corporations who have basically, they're doing that whole B2B thing and you've got peer-to-peer stuff happening here and there. You've got intranets, wireless, all kinds of open access points to all kinds of technology, all right? So whenever you release vulnerability information, not even necessarily a vulnerability code itself but just details, and then someone writes a worm that goes out there. You're having a massive impact as a result of your actions. And so you have to rethink this. An example would be Code Red, especially now since some of these laws have been talking about.    So this is really sad. OK, now you're a cyber-terrorist, OK? That's the big difference. Now, you can go ahead and say, well, the exploit code that I wrote, the summoner dotted into a worm, it was intended to show people, to demonstrate to people that things were vulnerable, someone would come back and say, I was able to use this in a worm and go and damage all these systems. Therefore, I got it from you. You used somewhat held accountable, potentially. This is still all unclear. It may not come to that. I hope it doesn't. But it's heading in that direction. If you're planning on doing anything, and I don't do this anymore. I haven't done this since USA Patriot, just out of paranoia and nervousness. How many people here scan on the internet?  The idea is that I do, as I did, as part of research. OK? It's interesting when you can do fun things like, say, scan the entire address space of China, and then we're up to see how many vulnerable web servers they have, which, by the way, is pretty much all of them, all right? It's interesting to do that. It's wondrous when you find a box that I had no idea that a single server could have 14 different CGI vulnerabilities on it. But somehow, someone managed to do that. But you can't be going around doing that kind of stuff anymore. You really can't, because you might be interpreted as someone performing some type of hostile action. Particularly if we're involved with, when I say we, I mean the United States, are involved with some type of political, diplomatic craziness going on with them. Maybe we're getting ready to go bomb them in our war on whatever that we're warring on that week. See, basically, I wanted to bring up the point that hacking is political. OK? That's the main thing I wanted to get across to everyone. The other criticism I had from last year was that I gave a lot of theory, sorry, the dangers of having long hair. I gave a lot of theory, but I really didn't point anyone in any particular direction. I just said, things are bad, go get them, you know? And that really didn't help much. So because, really, I mean, a technical audience, OK, it's fine to talk in theory and everything. And hopefully, most of you are not still drunk enough from the previous night that some of this is sinking in.  And you don't know, that makes my job easier. But nonetheless, I've got to think that at least some of you are sober. I'm going to propose a problem, OK? And I don't know if you can read the red tithe, but I keep forgetting that I may end up on the roof. Even though I do enjoy it, does everyone like the sauna? What's going on? Is there a radio? Yeah. And by the way, that's really the sauna tent thing. That's really Jeff's way of saying, look, are you white, pasty, overweight hackers? We're going to take a couple of pounds off of you, because DEFCON believes in giving back, making people healthy. In 95, there was a paper written called Programming Satan's Computer.  I'm trying to make a point. But basically, how can you trust the code that you're running if you don't control the underlying operating system itself? How do you try and provide safe code on Satan's Computer? The problem that I'll propose today is I call it Packeteering Satan's Network, OK? How do we move packets from point A to point B on the internet without private communications and then make sure that Satan, and in this example I'll be using, and by the way, I'd like to say that out of my NSA friends that are here. In this example, I will be using, for the most part, using the NSA in the role of Satan. And it's probably the fact that many of you will agree, and you can go ahead and fill in your own evil organization, such as the government of the People's Republic of China or some other repressive regime. And just while I'm at it, while I'm staying up here, since we do have representatives from the US government here, I do want to make clear that I do really think that the US does have a pretty good thing going. If I had to pick, and I did actually go through the whole list of countries that signed the WIPO Treaty deciding where I could live and with my MP3s in peace somewhere and couldn't find a country on a planet, I decided, well, I might as well just live here then because I might be here, and it is pretty good. They pay well here and everything.   All right, let's move on to happier things now. Let me get a drink. I hope that's a laser pointer. What can Satan sniff? All right, if we're going to be packaging on Satan's net, what can Satan sniff? I'm not going to read these slides because I hate presentations where you get some boso up there that has an outline and just basically reads the slides to the audience. So these are on the, this presentation is supposed to be on the CD that you got when you signed it unless, of course, you social engineered your way into DEF CON and didn't pay anything. Basically, this is, that's the other thing that's kind of interesting with this talk. I keep referring to things that are really old, all right? Now think about that, paper 95, and I'll first stuff even older than that later on. In 1996, a presentation was made regarding anonymous e-mailers by a man named Paul Strassman, National Defense University, and a gentleman named William Marlowe, who also had some impressive credentials of some kind. Anyway, these guys, during the question and answer session of their talk, did mention that our government, and I believe it was the CIA that they possibly referred to, and you can go back and I put in the web addresses of where these posts are, we can find out more information on this, did say the CIA is running e-mailers, anonymous e-mailers, you remember that whole anonymous e-mailers thing that hardly anyone uses for various reasons. I think probably just out of laziness, myself included. But nonetheless, they also mentioned that the NSA had successfully developed technology to break crypto below 1,000-bit on the key size, and that they themselves personally used at least 10, 24-bit, OK? Now that's an interesting thing. Think about that. That's 96 that they made that statement. Of course, once the press found out about these statements that were made at this presentation, everyone denied everything. Everyone denied these questions were even asked, and that these answers were even given at that presentation. But nonetheless, you had to step up that kind of leaked out. So let's just assume, just for the sake of argument, because we're cautious, paranoid people, OK, that it might possibly be true. Now, moving on, come on. The heat may be getting to this. Hopefully it won't freeze up, because I got really pretty graphics here. There we go. Hopefully won't jump ahead on another slide. Email from a private email from a former Spook. Quoted some stuff, said BGP, and basically pretty much every available crypto that's available to us as individuals is breakable. And roughly between that and a few other informal sources that I've heard, anything that's out there can either be broken through some type of brute force or through some type of flaw in the implementation of the crypto itself. I'm not calling this proof. I'm just letting you know what I heard. So all I'm doing. And the thing is, is that there's been other times in informal communications with me. I had a very interesting conversation last year with three gentlemen who, at the time, they said they were NSA. Now I don't know who they were, but who confirmed some of this type of stuff to me. But of course, then they were saying, but of course, we could be lying. And you'll never know. And you'll waste all your time trying to figure out whether you're telling the truth or not. And no one will believe you anyway. So I've heard that. I've heard it from other researchers who I wanted to name their names, but they don't want their name associated with this type of information. So let's just say that every once in a while in circles you run into someone who's heard some of the same type of rumors. What are they monitoring? All right, let's talk about the types of, and how are they monitoring? What are the techniques that are used? This is leading up to some points, by the way. So I scare you if they can crack everything. Now let's talk about how they're going to monitor those packets that are flying across the network. You've got basically three types of monitoring. You've got invasive, you've got non-invasive, and they're what I call stealth. Non-invasive is extremely obvious where the monitoring nodes are. Okay, you're going through a proxy server and it slows to a crawl, okay? There's, actually I think I skipped a whole slide. This should be the invasive one that's up and not the non-invasive. But invasive things slow to a crawl, very easy to spot the stuff and you can get around. Non-invasive, of course, so there's a minimal amount of impact to what's going on, okay? But they had to wrap you around a certain way to make sure that they can sniff traffic. You know, maybe you know what I'm talking about. This also has to do with, like, say, cache servers and proxies and whatnot. But, and those things are actually fairly easy to avoid. The one that's tough to avoid is the stealth monitoring. And we all know the power of a sniffer. Okay, you put a sniffer in the right place and you're going to get all the traffic. And that's one of the reasons why we do things like we encrypt when we send stuff. And it's fairly hard to avoid. Types of communication, man, you cannot see the text on that screen in the background, I'm betting. Or in the front, in the very front row. Basically, there's not much text in these slides, by the way. Just look at the pictures, okay? Oh, and I do that on purpose. Cause that's why I'm down here, so I can see people's reactions and I can know how to roughly adjust as I go along. There's point to point communications, such as email. I think we all understand that. There's also a broadcast. Usenet is a good example of that. Pressing to a news group is a real good example of type of communication. You do have the anonymous sender. And that's a type of communication where you're going through one of those re-mailers that we mentioned earlier for the CIA peels off a pilot copy. And then you have another thing I call traffic pattern masking. And this is like, a quick example is Loki that came out in the frack. Google is your friend, look it up if you're curious. To avoid our stealth monitoring that's going on by Satan, we're going to have to use some stealth communication techniques ourselves, okay? And this stealth communication, that's basically what we want to be able to use for the sender and the receiver are unknown or close to being unknown. That the communication is not going to be particularly obvious. It's going to look like a regular part of traffic.  I want to talk about several different types of concepts. Some of these are real world examples and adaptations. I'm going to go through four of them. One of them I'm going to have someone come up and give me some help on. But I want to go through and give you some examples. And actually only one of them I'm actually officially writing code on. But I want to go into a little bit of detail into some of these. And this is where I'm talking about direction. It's just saying go get her, here's some things that maybe we can work on as a community that might help. And hopefully it just doesn't help first some evil legislation down upon us. But nonetheless, maybe we should go ahead and do that anyway and just poke the beast and see what happens. The first one, did you get a drop box? Does everyone understand what a drop box is as far as that spook spy stuff? They get the spot under the bridge. I'm going to hide my package for the other guy. Yeah, a dead drop is a good example. Yeah, that's essentially the same type of thing. Okay, so I'm talking about a digital version. What would be a good way to do a digital version of this? To give an example of this, let me explain a piece of software called Whole Punch. A colleague I work with at a blind view named Paul Ashton, who I don't know if he's here or not, in the room. But if he is, he's probably going to be pissed off because he hasn't released the software yet. It's not quite ready, but maybe this will help push him along. And send Paul some emails saying, Paul, where the hell is Whole Punch? She has something I'm not telling me all about it, so you're getting ready to come out with it any day now. And maybe he'll get going on it. What Whole Punch does essentially, and this is a good idea, good things to think about, is let's say you have a system set up with no ports open, okay? But you have something running on there, a demon listening, you send in a packet, it's got some crypto type material in there that's going to identify it as, I'm the one that's going to do this thing and inside it in the command structure, of course, all this is all encrypted and everything, and you have to be authenticated as you go in there. This says open up port 22 from this IP address in your built-in IP tables type rules for 60 seconds starting now. Let me see this packet. So it's a really clever way of saying, okay, boom, I'm in, and then with the packet, and then I fire it up with a connection. He's added some extra features in it, including methods of being able to trigger another instance of Whole Punch to route to yet another system. So if you're out somewhere on the internet and you can send a package in, in this packet, it goes through a firewall to a box, but then goes over and then reboots some system that needs to be rebooted or whatever the commanders you need to have done. So it's a cruel thing.  And certainly hopefully it'll help inspire a few others as well. Steg, stegontography, this is going to be a fun one. I love talking about this stuff. This stuff is cruel. And you know who else likes talking about it? The press. The press loves Steg. It's so cruel. It's so sexy. Okay, why? Because they don't like to admit it. Because we can talk about porn when we talk about stegontography. And that's the example I'm going to use right now.  I was telling everyone as what Steg is, basically I take a message and I hide it in the, in some of the unused bits in a serographic file or a sound file or something. It's like an hide a message in there and it's all encrypted and hidden into the naked eye or naked ear, depending on what the type of file is. You don't know if there's actually a message in there. The example I'll give for stealth communications is one that has been theorized yet it hasn't been proven yet by various media outlets. We're going to talk about like say if I was some evil guy wanting to communicate to my minion out there. And I got a copy of AdGuess. Again, maybe it's your friend. So you can find AdGuess.  It's, you know, whatever the evil thing is we're going to do. And when you think about it, that would be evil, you know, that would be evil.  I mean, oh my God, that'd be terrible to have to be subjected to that. Yeah. Yeah, the whole thing is in visual basic. Yeah, tell it, it's just, oh, oh my God. Okay, anyway, nice to comment from someone over there yelling out encouragements. Thank you. If you can provide jokes especially in front I'll pass them on. I get some porn, all right? I get a hoax and porn. I put my message in the porn, okay? And believe it or not, I've actually done research into this. I know you're shocked, but in the interest of science and the interest of you, I've gone out and I've collected a shitload of porn. Okay? No, someone asked us to vote on the CD. For Christ's sake, we got a room full of hackers as you guys can't figure out how to get free porn.  You post it to Usenet and then there's this phenomena that happens, okay? Where people grab stuff out of Usenet and then put it on their pay site. Someone else grabs it and puts it on their pay site. And I'm sure no one has ever done this, but there's spots where they've got preview sections on those pay sites, right?  So then all of a sudden some of you almost start appearing in preview type stuff. Now if you had done some sophisticated research, such as myself, into this phenomena, you'll notice that there's certain types of porn that have a repost rate that's higher than others, okay? Asian porn, for example, has an extremely high repost rate. And all you gotta do is make sure that your porn ends up being listed on asianthumbs.org and it's everywhere, everywhere. That's all you gotta do. Throw away GeoCities things set up in Bingo.   It actually is very quick. I've done this. I've posted porn on Newsnet and it's in an Asian news group and Bingo. It's just within a couple of days. It ends up being on Asian thumbs. Interesting. So there you go, you got a distribution method. For those of you in the audience who are of course offended by pornography and I will address all three of you now, let me give you a different scenario, okay? These couple of slides are not in your presentation but I think you'll find them interesting. I love this woman. I love her to death. Sandra Bullock, you can't see this down here at the bottom. It says desktopwallpapers.net, okay? Oh yeah, I love Sandra. So I went out and this is like a couple of years ago I downloaded some backgrounds for my computer of Sandra. Let me get another one up. Cause I just love her to death. Oh yeah, there we go. That's the sweet stuff. The thing is, I actually sent her an invitation to my birthday party and she didn't come. It really made me upset because I went to a lot of trouble. I mean, her name and address were on a bell computer system on an FTP server that was wide open to anonymous access. I just downloaded the data files and looked through their Embingo, found all kinds of people's names and addresses including Sandra and even Michelle Pfeiffer. And you know what, they didn't even show up after I sent them an invitation directly to their house. I can't understand it. But nonetheless, I still care about her, okay? So, yeah, stalker, yeah. No, I'm gonna try to lump it into research is what I'm gonna do. Yeah, I'm researching stalking techniques on the line. What's interesting about this image was I was using Nils Provost's Stead Detect and decided, you know, I'm looking at all my porn and like him, and I've actually found things I thought might be questionable.  I don't know why, because you know, you don't really get irritated when people keep sending you email about stuff and asking stupid questions about your software, but he seemed to enjoy it, okay? He was a good sport. But nonetheless, I didn't find anything in any porn. He hasn't found anything in any porn. Guess what? This image right here, there's Stead in it. The one previous, too. If you don't believe me, go ahead and download Stead Detect. Go to, while it still remains up, go ahead and go to desktopwellpapers.net to go find Sandra Bullock in there. Download these images. I believe this one on there is like Sandra Bullock underscore three, whatever, and the other one's, this one's, this is number five, okay? But they're there. Outguess is the one that's detected as being in there. Okay, now I don't know if you've done a lot of work trying to crack stuff with Stead Break, which is now included with Stead Detect. I've thrown a 40-meg dictionary at both of these things. I haven't been able to find out what the past phrase is, maybe someone else will. I didn't include it in your, it's not included in the CD, mainly because, for all I know, it's got some type of top secret things going on in there. Of course, it may just have nothing in it, I don't know, but nonetheless, this actually turned up as a hit. I don't know what to make of that, but we'll just see what happens. So, as a side project, when you're not scanning your porn for Stag, go ahead and feel free to throw a few CPU cycles at Sandra here. Now we're gonna move on, we're just gonna do it on time. All right, I'm gonna have to speed things up. Stealth traffic pattern masking, and the example I'm gonna give here is something I'm working on called Masquerades.  What I'm trying to do is, I'm taking crypto material and I'm shoving it into the header of email, okay? The message ID in particular, shoving it through there into there and then having it go across that way and I'm trying to decide to where you have a client that can run on not as root. The stuff gets sniffed and picked up and I'm trying to add the option of having it fail during the transmission of the email so that it fails in a way to where things don't get logged. It doesn't get logged on an exchange server, it will get logged on a send mail, but it'll look like an error. And so I'm trying to make everything compliant on that. Another idea, throwing stuff into headers. There's been some presentations that both Block Hat and Def Con and I think they've covered some of this stuff. Hey dude, how you doing? Doing good? All right. Okay. I'm getting ready to bring someone up here. I wanna explain this real quickly. This is something that's interesting, very interesting. I don't know how many people are familiar with the paper from 86 I believe, is that correct? Think so. The dining cryptographers problem. The dining cryptographers problem is you have three cryptographers. They've gone to a, we're going out to a dinner. And again, I'm summarizing quickly. I get it wrong. Sorry. They want, one of them is gonna pay for dinner, but they don't want to know which one of them paid for dinner because they're, I guess financially shy, at least some of them. But they wanna make sure if the NSA didn't pay for dinner because the NSA picking up your dinner, that just, that's just apparently a bad thing, at least in this paper it was. So they need to devise a method of being able to communicate between the three of them to ensure that one of them actually paid for dinner. So here's how, this is how the solution works. And that is you flip a coin and you look at it and you only look at yourself and then you show up to the person on your right. Okay, you're with me so far? I'll do a quick example at the end. Now what happens is once the three have done that and they've shown it to the person on the right, everyone does that. So three people, they've each seen two of the coin tosses. They notice where those heads are tails and what they're gonna do is from the two coin tosses that they saw, they're gonna say either same or different. Okay, and they all say that a lot. They're saying whether the two coin tosses were same or different. If you have an odd number of people saying different because the person that paid for dinner is gonna lie. Okay? If you have an odd number of people saying different, then it means that someone at the table paid for dinner. If it's an even amount, means no one at the table paid for dinner and the NSA must have picked up the tab. To give you the little example of this, is all three of them flip heads. Okay? One of the people lies when it comes to saying same and different. They say different. You got one person that said different. That means that one person at that table paid for dinner. Now, you might be saying, oh yeah, well they can determine whether it was heads or tails. No, we're just saying same or different. We didn't say I saw two heads, I saw two tails. Nothing like that. The premise behind the paper that goes into a lot more detail is that you have no way with outside taking a rubber hose and beating people to do any type of traffic analysis on this. Now, what's interesting is when you're sort of applying this on a larger scale, and we know how to reach a good spot. Okay? Okay. We're sort of applying this on a larger scale because with computers, I can start doing things like 256 or 512 coin flips at a single time. And when I'm transmitting my coin flips to the person on my right, I can encrypt them. You know, using RSA or some other thing. That's referred to as a DC net. So I was distracted. The referred to as a DC net. Some of the scaling issues were addressed in a paper that was not too long ago, by the way, there was an extension because I know some of you are probably thinking, what if I purposely participate in that dinner and I, even though I didn't pay for dinner, I lie and say that I did. There was another paper that came out of a year or two after that called The Dining Cryptographers at the Disco which dealing with being interrupted. Now, folks, this is stuff from the 80s. Okay? This is stuff from the 80s that we're talking about here. Now, somewhat fairly recently, some people at Cornell tried to implement a DC net and ran to some scaling issues and tried to solve it using something called Clicknet. And I advise everyone to do a Google search for Clicknet and check that out. And that says, if you can't read in the back, that's a C-O-I-Q-U-E net. Meaning you have small clusters of, you know, let's say seven people or seven or five, whatever they put the cutoff point at. And some of them are adjoining nodes. And then you create this. Now, you can do some pretty cool things with this. Why don't we, I'm going to go and bring up a friend of mine. His name is Jason Larson. He's worked on the hogwash project. And he's going to talk to you just briefly. I'll try to keep this short. But we're probably going to go over it anyway. But nonetheless, he's going to talk a little bit about this in a little more detail. So we're checking for an adapter, since he's using a, actually that's a pretty nice Mac there. Okay. Well, if people didn't like the first two rows, can actually see part of it now. Let's think about things that you could put on top of this if you perfect a DC net. Okay. Think about things you could put on top of this. That's going to become really critical when I ask some questions here at the end of the audience, instead of you asking questions of me. This is somewhat unrehearsed, okay, folks? So bear with this, but I thought it would be fun to get a couple of people up here besides myself to talk about stuff. You want to just go and just talk about it with those slides? So can everybody hear me? Okay, how about now? Okay, simple one over most of it. But basically when you're doing coin flips, that's basically an XOR. So I don't know how many of you guys are familiar with what in crypto and whatnot, but when you start doing coin flips and XORs, that's commonly known as a one-time pad. And a one-time pad is theoretically unbreakable. So the basis of a Dany Cryptographers Network is, yeah, everybody generates a one-time pad, passes it to the guy on the right, and XORs him together. The guy that wants to put in his message, also XORs in his message. And then everybody reveals their pads. So when you reveal your pads, everybody XORs the pads together, and since all the pads have been put in twice, they XOR back out. And who you're left with is a message. And since it's mathematically impossible to tell the difference between two pads XOR together and three pads XOR together, it's mathematically impossible to tell who sent the message. So if you really want to give the NSA and the Homeland Defense or whoever else, Heartburn, then a Dany Cryptographers Network is a really good way to go about it. There are a couple more cool things you can do with it. So especially in the future, if publishing exploits gets to be illegal, then we're going to need a better system to publish with. So let's say that we have a group of people together and I want to send an exploit to BugTrack anonymously. And I don't want anybody else to be able to play with it. Or let's just say I want to send it to one other person anonymously. A cool side effect of Dany Cryptographers Networks is that you can exchange one-time pads anonymously, which is basically perfect crypto. The algorithm's pretty simple. All you do is get it together in circle and have two people agree to put in messages on the same round. So we take me, Nomad, a couple other people, and we all generate one-time pads, throw them to the right, and then me and whoever else I don't know sticks in our one-time pads. When you stick in your one-time pad and you XOR everybody's pads together, you get the simple XOR of the two pads back out. Well, since both pads are masked by another pad, then it's mathematically impossible to pull out either of the pads because every possibility is equally likely. But there are two people that can make sense of the noise. The owners of the original two pads because they know the pads. So you can always XOR back out your own pad and get the other person's pad. So if we want to publish an exploit and we know the NSA or whoever else is listening, then we just get a bunch of people together. We exchange pads, XOR in two pads, throw away one of them, and now I have a pad. I can send a message to everybody with impunity because no matter how many CPU cycles they have, no matter how much research they can throw at it, it's mathematically impossible to figure out the message. I just take my new pad, XOR in my exploit, send it over to Nomad, and nobody can break it. So one-time pads can be, Dynacryptographer's rings can be fairly fun if you want to play with them. So another method that you can combine with it. One of the problems with one-time pads is there's a finite number of participants.  Theoretically, they can come and knock on 1,000 doors and take your computers and life isn't good. So one method to get around that is just to solicit participants from other countries. So one of the nice things is the NSA's of the world don't usually talk to each other, and they don't like people picking on each other's citizens. So to get a few guys from Russia, a few guys from China, then you can be reasonably secure. Okay, thanks, Jason. Now I want to give Jason a hand. Thank you for your shirt. We can kind of, go ahead and step up a little bit. We concocted this idea. He had pushed for the DC NSA. I was talking about stealth communications at Kent's at Rust, and we had the smallest ball favor to con just the two of us talking with paper up. I've got some questions for you guys. We're getting towards the end. I want you to think about some things here. These are what you call rhetorical questions without really an answer here. If you do develop unbreakable crypto, how long do you think, good God, I didn't fall in on me. How long do you think that unbreakable crypto is going to remain legal? Think about it. I mean, I didn't have to speculate on that. If you open source perfect crypto, and it gets you into trouble, I'm wondering if under the Cyber Security Enhancement Act, if you could be put in jail for life as aiding and abetting cyber terrorism. The applications of this are obvious. I mean, you could have dissonance living inside of oppressed countries, being able to get messages out to people, and people will get messages into them using various combinations of all of these techniques you've been talking about. But if bad guys can use it, and it's unbreakable, and we talked about what they were possibly capable of breaking, if you've got stuff that you can't break, how much trouble are you going to get into? Couple of other things I want to bring up is what I'm thinking about it. There's a movement right now to push forward the government version of, it's kind of like a cybercorp. People heard about this. A few people are nodding their heads. Cybercorp, you know, there's some kind of government-sponsored program on this. I want to know, is it possible for me to form a cyber militia in response to that? Something to ponder. A few people seem to like that one. I got a question involving free speech for you to think about. If it's always been questionable whether crypto or code is actually considered free speech, there's been some people say, yes, some people say no, there's court rulings and whatnot. Would it make speeches like this illegal if crypto and code is not considered free speech? And also, one other question, this one I think there is an answer for. If I'm busted on any charge, could someone please call Jennifer Granik on my behalf? Just, you know, just in case. That's pretty much all I have. I've gone over on time. I've got one thing I want to do. I need to get one volunteer. Okay, you right here. Come here. See some of these times of volunteer. There you go. You get a free computer. There's your computer. You have to give one away. That's it? That's it?  Yes, I know. It's made out of fine steel. That's before we got really good on it. There's a few shirts here that I wanted to give away too to some of the people here. This is kind of what I consider this talk and everything else this actually to be about. Okay, hacktivism is not defacing web servers. That's not what it's about. That doesn't get your message out across to anybody in a real positive way. It's trying to do some of the things that we've been talking about here in these directions. A lot of people out there, like I said, I've done only a very little bit of work myself. A lot of people out there have done this or doing work like this and needs to be encouraged. And so we'll just throw one out there for someone to grab. I just want to make the point. I was talking with someone from the EFF over at Hard Rock. There's another one out there. I was talking to someone at the EFF that I was talking a little bit about in my talk and I said, you sound the...  You sound cynical. So really, I probably do come across as cynical when it comes to this kind of stuff and I don't mean to. I mean to try to be somewhat positive in this and whatnot. And so I always try to pass on this message from the EFF and by the way, our orders are just like EFF and Epic really deserve our support and they actually deserve a round of applause. They do actually try to do a lot of good for us. How many people here have access to $100? Do you think you could probably get to $100? It would be really interesting if every single DEF CON attendee was able to give the EFF $100, okay?  I don't know how many attendees. I've heard any of them from $3,000 to $5,000 this year, which is just phenomenal. Imagine what could be done with that type of money there. Another thing, and I really do encourage you to do this, it makes a huge difference whether you believe it or not. It really does make a difference. Write a letter with your thoughts. Don't do this in email. Do this by hand. That really gets their attention. Write it out by hand to your congressperson if you've got a problem with one of the laws that is being proposed or even a law that's passed because all those congresspeople they're all worried about the people that elected them and they all want to make sure they remain in office. And they've had all kinds of mathematical statistics on the fact that for every one letter, there's a thousand people that think this way, oh my gosh, I'm going to pay attention to it. Those letters do matter. And if they start coming in volume over some of these things you're concerned about, then we can do something. Now I know a lot of you have deferred a code, okay? And I know that some of you have probably even never licked a stamp.    That's a long time ago. So you gotta do a few things, you know. Give, you know, try to give back a little bit. And I think we'll make a pretty big difference. And there's pretty much, the rates, there's more. They're gonna kill me for going over on this. It's just, can you do this in like three or four minutes? Yeah, or maybe two. One of the things that's going on that I'm gonna have Steve come up here and give you a quick synopsis on yet another little thing that's going on. And he promises to the people running the place that'd be quick. Okay, we announced this at Black Hat. So you know, if you guys that were there, probably already know about it. But VaughnWatch, in conjunction with Packastorm, the open source vulnerability database project and a few other open source free information sources have announced kind of a little bit of an alliance. Basically what we're gonna do is we're gonna work together to pool our resources and give a centralized spot. I think probably the key part of the whole thing is we are gonna have an open source vulnerability database that everyone can contribute to. Everyone can add to it. Everyone can access it. Everyone can use it. It's gonna be completely free. It's not for profit. You know, it'll never be sold, all that kind of fun stuff. Pretty much it. The website is isi.org. Thank you. Because truthfully information really does wanna be free.  But the raw source of it's gonna be free. Just keep that in mind. Normally I would take questions on this and you're probably gonna wonder, because I worried about a couple of things. DebDreamers.com for all the graphics was where I nabbed him from.  I did get him credit, which is what he asked for that. To kind of tie this together, the last thought that I wanna leave you with, okay?  Our government, okay? Our government has gone to great lengths to try to protect us and they do a variety of things in their efforts to try to protect us. And those are appreciated by a lot of us, but sometimes in their effort, they're a little bit overzealous. And we have to keep that kind of stuff in check. Now, you currently have a government that is declaring war on concepts, okay? They're declaring war on concepts. Remember the war on drugs? What was that one? Wow, that was a really good war, wasn't it? Did we not successful? What was the big thing? Don't say no, or just say no, that was it. Or yeah, don't say no, there you go, ooh, there.   I mean, this is the kind of wonders thinking we got coming from our government. Now we have a war on terrorism, okay? We're not officially and technically constitutionally at war with anyone. But we have in anything else, there's a war on terrorism. Now with the whole rise of these transnational conglomerate corporations that are essentially running everything, and the continued fall of the nation state, as things continue to fall down and the borders start disappearing, in large part to technology, okay? The hacker nation, us, we're increasingly becoming subject to an unspoken war, all right? You wanna be able to communicate securely from one person to another. You wanna be able to do that, whether you're talking about recipes for cracking or some service running on a system or recipes for cookies, and I'm talking about the kind you eat, okay? It doesn't matter. If you want that conversation to be private, then it should be, okay? So I want you all to think about that. If people have got questions, do you wanna try to grab me later? That's great, well I'm not gonna take questions now, we're over and I'm sorry on that, but there you have it. Thanks a lot for coming. Thank you very much. Thanks a lot.


Welcome back, everyone, to theCUBE's live coverage here in Las Vegas. I'm John Furrier, host of theCUBE with Dave Vellante, my co-host, head of CUBE Research. We are here for SAS Innovate 2024. Next guest, CUBE alumni, Jay Uptchurch, CIO at SAS. Distinguished guest, Jay, great to see you. Thanks for coming back. Thank you. It's great to be back. It's been a while. We were here last couple of months ago and then saw each other at the SAS Pro-AM, SAS Championship. A lot's changed. The statements that were made at the last event six months ago was, we're going to do this. Right. And it's happening. So you're starting to see great proof points. You're starting to see the flowers bloom. Really good job. Congratulations to the team. A lot of stuff going on. But there's really, there's a lot going on. There's IT departments transforming. What's your view of what's happening in AI right now? You're seeing a lot of it because obviously you got to get the infrastructure done right. Right. A lot of stuff going on in the middle layer and then obviously the applications are changing radically. Yeah. Couple things. I think you're exactly right. Last year we made a lot of commitments about things where we thought things were going to go. Fast forward to where we are now. Amazing announcements today on new product innovations, trying to propel the industry forward right with our technology and the adoption of data and analytics and especially on the GNAI front has been outstanding. We saw it in our cloud numbers, our results, our financial results is coming last year as well. And then of course that brings all the technology delivery challenges to CIOs around the world. And that's really where I sit. So from what I see both in terms of internal operations for SaaS and then also for our customers who have been running our SaaS managed cloud offer. I mean transforming operations and leadership opportunities with AI has been big. What's been the big operational focus in terms of where people are seeing instant value that they're putting the stake down or getting some beach head on? Could you share any thoughts you see there? Well on the generative front, it's not instant value unfortunately. It's really been a lot more of, I'll say instant science experiments. So everybody's got an idea. I've got, I saw this amazing generative AI capability. It was marketed to me more as a consumer than as an enterprise but then they bring it back to the enterprise. They're like, hey, I think I could do this how? And that's created this concept that I keep calling just shadow AI situation where CIOs are finding out that businesses, our business partners are creating all these different science experiments with generative AI technology unbeknownst to the CIO. So I mean, since without some of the IT guardrails or the security guardrails that are required to make sure that we're doing it safe and effectively. So how, I mean, I'm sure it's acute but I think about the loop days, the big data days where shadow big data was rampant and people realized, oh, wait a minute. We got to rain it in. We got to rain it in. Whereas today at least there seems to be between the chat GPT awakening and raining it in, there seems to be a lot more focus on governance and legal and compliance edicts. Or would you liken it more to the big data days? I think last year it was more like the big data days. I think there was a lot of public opinion about what the governing rules should be and there were a lot of governing bodies coming together to meet to talk about it but there wasn't a lot of structure yet. And what happened was the excitement of the innovation hit the street first and so what we saw were business partners who said, well, I have an idea. I think I can streamline my operations with this artificial intelligence concept and so if you didn't have a good tight relationship with your IT partner, you probably went off and did it on your own. Remember, businesses are used to being able to do it on your own. Software as a service, the ability to do it without a lot of oversight is there. The problem with shadow AI is that the risks are higher. Suddenly proprietary data, confidential data, unintentionally leaving your premises going out to an open language model.  So how do you handle something like this? True example, the developer happens to like chatGPT, whatever reason, pays for it and uses it to help write code but that's not allowed at the company. If I eat it, you can't use that and so the security group comes down and says, hey, you can't do that, no more. Developers says, oh, okay, sorry. What does he do? Goes to his phone. Does it there? Right, and writes his Python script there. How do you handle something like that? Well, I think first of all, putting up Garrelle's and saying you can't do it is probably not realistic. I mean, I think, for that very reason, at SAS, we have the luxury of having a very enlightened workforce because this is the world we live in, right, in data and analytics as it is. So that part of it is easier from an education. People understand the risks a little easier. So we definitely put up our acceptable use policies. We put in some Garrelle's around watching data flow in and out to make sure that there's not things going to places that it shouldn't and we trust our employees. We want to actually harness the creativity that our employees have as opposed to coming in and just putting up a big firewall, says no, you just can't do it. Now, I do have some customers, especially in sensitive areas like defense and others, that are like, yeah, I just don't even have that as an option. I've got to keep everything inside of that tight bubble. Lock it down. And in those cases, that's tough. Now they're trying to figure out, well, how do I engineer that in-house? And that gets really, really expensive. So we try to embrace our partners where they are as a business. I think our relationship manager model, so we take our best consultants in IT and we go out to our divisional partners. We want to understand what are you looking for? How can you help? How can we shape the demand through IT to come back to something that's usable? So that way we're not a barrier, right? For adoption now instead, we're actually accelerating the use of AI, especially in the generative space for our partners. So years ago, I learned from many CIOs because I'm always talking about technology. What about this? What about GNAI? What are the pluses and minuses? I want to know about that. But years ago, I was educated that, look, it's people process, okay, that's the most important thing. Technology's going to come, technology's going to go. That's, it's change management. We got to get that right. And then we'll always figure out the technology. Degree with that, how do you see GNAI in that wave? I totally agree with it. Somebody asks all the time, like, hey, what's your AI strategy? What's your GNAI strategy? What's your data strategy?  If you don't start with that end in mind, I'm creating technology and solutions without a problem. And then I have something and I'm shopping it around for to find the problem. That's not going to keep me in my job very long, right? Because we're all underneath certain financial pressures, of course, as a CIO. So I think 100% change management in terms of making sure people understand the destination you're going to, how you're going to get there, let the technology come and fuel you along the way, but it definitely starts with people in process. Jay, I got to ask you, on my question as to, Pivot off Dave says, what do you think about the scenario where, again, we're seeing this on theCUBE as we go out to other events. The common theme is with AI successes, and you guys have someone on the stage here today, but in this case, the question is this, you see an end-to-end workflows being identified pre-Generative AI. So people have apps, financial apps, they have mobile apps, so companies have big workloads already, like they built, okay, cool. Now, Generative AI comes in, rather than reconstructing the house, they just retro it, so remodeling. That's like what I call the remodeling. So here I got a workload, very well-defined, end-to-end, serves a purpose, but all of a sudden, Generative AI comes in, so it's going to change the data modeling, the governance, user experience, so we know I could get that advantage. That's well-formed, that's scoped. You can look at that as an IT guy and say, hey, I can scope that against cost on GPU, compute, depends, are we reasoning? So as you get into the Generative AI, the problem statement is retrofit the workflow that you already have for GNAI. That's a retrofit. Is that, do you see that and is that real? I mean, that seems like what people are doing, but then how do you execute that? That's a complete redesign of a pre-existing workload. And does it really make you that much better at the end? Is the juice worth the squeeze in that case? Well, that would be an executive decision, right? And from a GNAI standpoint, where you plug it in for fit for purpose of what the generative, the creative answer is. So as an example, what you heard earlier today, right? The quantitative answer versus the creative answer. So in that end-in workflow, where are you looking for creativity versus where are you looking for a quantitative decisive answer? So your point is, rightfully so, is you got to know what the juice is and what the squeeze is. Absolutely. And so that's going to be on IT and leadership, right? That's right. Together and then go. That's exactly right. And I think what's interesting too about this whole movement is the role of the CIO having changed so fundamentally because of digital delivery of solutions and services. Now you bring in a GNAI and you're thinking about what's the end game, right? From a financial commercial perspective, or it could end up being an expense management model. How does GNAI plug in? Is it worth it in the end? Because GNAI is not cheap, right? I mean, you've heard it from the hyperscalers. I mean, they're running out. We're burning up CPUs, we're burning up energy, trying to get through all the compute, right? So yeah, absolutely fit for purpose. I want to ask, I don't want to ask about SAS and your budget specifically, but I want to ask about... But he's going to ask, okay. But he's going to ask. No, I won't, unless you want to share. But broadly amongst your colleagues, your CIO colleagues, I'll tell you what we're seeing in the data and I wonder what you're seeing. At the macro, we're actually seeing sort of an inverse proportionality to the two-year treasury. In other words, when the Fed tightens, IT budgets tighten, right? And when they signal they're going to loosen, seems like IT budgets get looser. Right now, they're getting a little tighter because of that signal. So that's at the macro level. 40% of the customers we talk to, say they're stealing from other budgets to fund GNAI, the ROI timelines, when we first started doing this survey, were inside of four months to get return on your GNAI projects. They're now shifting, we talk about shift left. ROI timelines are shifting right because people are getting smart. They're like, why should they sign up for all this? And then the use cases that we see today are very chat GPT-like documents, summarizations. Agents. So that's broadly what we're seeing in the data. Can you share what you're seeing amongst your colleagues? Well, do you agree with that? And then what do you think? Yeah, I think, I do, I do. I think that there was early adoption for workforce productivity, definitely for coding. And so if you're looking for a quicker return on your investment, those are probably two use cases or categories that are a little easier to catch up on early. The aspirational that become a little bit longer, those are the ones that I think you can get into a case of, I'm spending a little more and I'm waiting longer to get the return on. And that gets CIOs in precarious positions really quick with their board, if you're not careful. I do think as a budget, it's interesting. I think IT budgets were originally under a lot of pressure in 20, 21, right? And then as we kind of came out of that, everybody wanted to go digital. There wasn't as much of a constraint on digital investments. Then it started to contract a little bit. Everybody wanted their dividends back from all those digital investments. And now we're kind of back on this hype cycle of GNAI and all of a sudden the budgets are starting to grow again. The idea of I'm stealing from different budgets is very real because at the end of the day we all came into our financial years thinking, okay, I know how I'm going to spread it out. And now all of a sudden, hey, wait, I need more for GNAI. So I'm going to steal a little bit from this group and maybe a little bit more for this group. Because that GNAI project actually will help them in the long run. That's the premise. So you might steal from productivity apps maybe because GNAI can maybe help that. Maybe legacy productivity apps or collaboration. Or actually other divisional budgets. That's what I've heard, too. On IT because at the end of the day, if that GNAI actually helps produce productivity gains for those other organizations, they'll fund that IT organization just a little bit more. Okay, so actually stealing is the wrong word. It's being funded from non-IT budgets. I'm going to use that the next time one of my partners challenges me on stealing their budget. That's the right way to use that. Police plot our entry for it. The struggle there is very real, right? The investments in AI and GNAI and how to keep up with it, especially if that return on investment period is longer than what your CFO is comfortable with, you got to do a very careful negotiation internally. You got to be able to tell the story of where you're going to get to with it to justify it and you got to get the buy-in from the business. And that's where back on that relationship manager role is so important. If I don't have credibility in the IT services that I'm delivering to that division, they're not going to want to help me. And the data is so clear. I mean, during the pandemic, it was cloud, RPA, AI and containers. We're all way up there in terms of spending momentum. And then just one month prior to ChatGPT, you could see AI doing this. And then once ChatGPT hit, AI's doing this, everything else kind of came down in the data. It was very clear. The other thing too we learned at the multiple events we've been through this year and recently validated at Google Next last week was that the IT workforce has been busy, not overfunded. And then digital transformation, seat at the table has been going on for years. And now the boards are saying to that table, where's our growth from Gen of AI? What's your Gen of AI strategy? That person comes down to the organization and there's a huge gap between where people need to be leveled up. So there's a huge like issue around, okay, now how do we execute? So, okay, take the scenario. Jay, where's the growth? What's your Gen AI strategy? Okay, boss, I'm on it. Okay, then you go back to your team. What's our Gen AI strategy? What is that like? Take us through that narrative of what happens next. Is that the aggregation of successful shadow AI? Or, hey, thank God we ran some shadow AI because now I have to have a growth strategy. Take us through the mindset and what happens in that progression. Yeah, I mean, I think internally there's always a lot of ideas around how you can use Gen AI. So you can definitely harvest that from the collective workforce and come back with a story if you need to. Is there real shadow deployments behind that sometimes? And then you've got to kind of rain those in a little bit. I think the idea of growth tied to Gen AI inside of corporate IT is really tough. It's much more of an idea of can you do more with less? It's a productivity gain model more than anything else. It does give you a chance like digital transformation to re-engineer some of those key processes that you referred to before. That's an interesting return. But again, your board sometimes isn't really looking for that. They're looking for where the commercial gains from it. But yeah, are you materially changing your expense profile or are you really materially growing revenue? I think on the Gen AI front for some of our corporate announcements today, that absolutely is a revenue game, right? Because we're going to create more productivity in our developments, right? And so that's where we're driving most of our business. You're actually doing both. You're actually reducing the expense profile and driving revenue. That's right. That's the holy grail right there. So most companies I see are hitting singles right now with Gen AI. But the interesting conversation here around industry specific AI is notable to me because there's some really complex use cases that ain't going to be four month ROIs. They might be four, five, six year ROIs or maybe more drug discovery and things of that nature. Maybe transformation and fintech is- But they're building AI. They're not using AI. Drug discovery will be a builder of their own AI system. Yeah, but so, right, okay. Someone who's using AI might get a faster payback. Yeah, yeah. Not if they're going to solve cancer. That's what I'm talking about. Really big, complex problems. And I'm wondering what you're seeing amongst your colleagues in industry. I think that dynamic between a creative answer and a quantitative answer is very real in terms of delivering an enterprise result. This idea of we're going to take a governance model to the creative answer that it can return is very positive. I think right now being received by our CIO forums and explaining how SaaS is augmenting that GNA AI capability to create real enterprise business decisions and results. I think that will actually condense down that ROI period from just the science experiments and the creative experiences that are going on right now with primarily all the gender of AI. Jay, it's been great to see you. I know we got a hard stop. We got to get in and see the chicken, the hot wings competition. It's going to be fun. So, final question. Next year when we're sitting here talking, what's going to be the conversation? I think it's going to be continued growth of cloud from SaaS, because that's been a fantastic story now for us for many years. Our customers are enjoying the consumption of our innovation through software as a service and or hosted managed services. So I'm incredibly pleased with that continued growth. I think that enables them to continue to adopt that innovation. The announcements you saw this morning, the more they're going to come throughout the next 24 to 48 hours, we'll continue to be front and center and we want to make sure we're delivering that to them. I think the GNI I front is very real. I think the market is hungry for enterprise examples of GNI delivering real results. I think SaaS is well poised to do that. And I hope next year when we're on stage, we're giving you examples of that. Well, you had one great one on stage, great stack with the customer this morning. So great job. And that will potentially open up, maybe not the floodgates, but that's a gain sharing model. I want you to start throwing off some cash. Oh, absolutely. And that's going to see, it's because you got big GNI backlogs right now. Yeah, that's right. You guys did a great job from the last event, your shipping production workloads with customers, monetizing 30% growth in the product line and more coming. 30% growth in Vine, 30% growth in SaaS Cloud and then on the industry solutions up as well. So very, very proud of the performance, very proud of the innovation that we dropped today too. So I think kudos to the R&D organization and we're looking forward to the market reception. Yeah, the models is the first company to kind of do that in that level. Congratulations. Yeah, great job. I love the update, no, I love the save prompts. I think that's an indicator of where it's going.  That's right. Yeah, yeah. All right, that's going to wrap up day two. I'm John Furrier with theCUBE, with Dave Vellante theCUBE, the leader in enterprise tech coverage. Thanks for watching.


This time we're going to combining all of the data paths that we've created so far into a single data path that can handle all of the instructions we're interested in. I've gone through and cleaned up the six data paths that we've generated so far. So you can see we've got an data path for an add instruction, add immediate, branch equals, load word, store word, and a jump instruction as well. And we're going to be looking for all of the similarities between these. You could notice that a lot of them look pretty similar already. For example, all of our instructions have a program counter and an instruction memory. This should make sense. We want to get instructions out to run and if we're going to use a program counter to index our instruction memory, then we need that as well. So if we want to begin building a data path for everything, we might as well just start with the program counter and instruction memory. So I've grabbed those and put them over there. Now, for everything except the jump instruction, we end up using the registers in the ALU. Sometimes we use the data memory as well. So I'm going to go ahead and grab those three elements. The other thing we really have in here is all of this branch hardware. So I'm going to go ahead and grab the branch hardware as well while I'm here. And nicely enough, the branch hardware comes with a bunch of its connections. And now our big task is going to be how do we connect all of this? How do we make it do what we want? Well, some of the things are simple. I can connect the branch hardware backup so it can update the program counter when it needs to, or we can just take the next instruction. For our add instruction, we need to be able to read two values from our registers. And we also need to be able to write to another register. So we need to know what those three registers are. We need to be able to pass that information to our ALU. Then when we're done there, we'd want to be able to store that information back into a register. For our add immediate instruction, we do something pretty similar, but instead of taking a second value from a register, we're going to take a value directly from our instruction. So I'll add in a connection for that. So that's everything we need for an add instruction and add immediate instruction. Our branch equals is almost done. We need to notice that we want to do our branch if the results of our subtraction are one. Otherwise, we'd just take the address of the next instruction. So our load word and our store word instructions also require accessing memory. And if we're doing a load word instruction, well, we pass the address of the piece of data that we want from our ALU to our data memory, then we take the results and we pass it back to the register. For our store word instruction, we still calculate an address with our ALU, but we also need this piece of data to pass to memory. So I'll get that piece of data out of our registers and pass it over to our store data slot in memory. One other thing we might need to do is implement this jump instruction. And the jump instruction really just takes whatever comes out of instruction memory. And passes it back to the program counter. So there we go. There is a combined data path for all six of those instructions. Now, chances are this still looks a little odd. We've got a number of points where we've got lots of wires running into each other, lots of wires separating. It probably seems a little odd that this hardware is really capable of doing all six different instructions at once. It turns out it has all the functional pieces that we need, but we're going to need to add some extra hardware to control how these pieces work. Which operations do they run? Does it run an ad instruction? Does it run a store word? We're going to need to be sure that it gets the right pieces of information. It does the right things with it. We don't want to take both the immediate from our instruction. And the second source from our register as the second input for our ALU. We only want one of those two. So next time we're going to be looking at what do we need to add to this so that we can control it? How do we actually manipulate this piece of hardware?


This is stock number 9953A. We are here at Summit Automotive in Fond du Lac, Wisconsin. You're new and used light-duty truck headquarters today. We are checking out this super clean 2013 Ford F-150 super crew short box This truck has the 3.5 liter eco boost twin turbocharged motor From this HD video you will be able to tell that this truck is extremely clean all the way around inside and out White platinum tricote metallic is the color We shoot all of our videos in 1080p So if you have HD capabilities on your computer tablet or smartphone device turn them on right now Because it's like you're right here looking at the truck with me very clean down this side or rockers look really good Has the factory chrome step bars The 20 inch factory alloy rims with the chrome covers and Goodyear Wrangler all-adventure tires These are 275 55 R20s and have right around half the tread left This truck has Right around 90,000 miles on it. You can see it as the HID headlamps factory fog lamps no dense or dings on the front bumper chrome trimmed grille Passenger side fender is an excellent condition and passenger passenger side rim no scuffs or scrapes on that As you go down this side of the truck you can see just how clean the body is How reflective and mirror like that paint is We take these HD videos So if you are far away or even if you're close by and just cannot make the trip down You can still see the truck here the truck and of confidence in the vehicle that you're looking at before you can get here has a lear truck cap and Down this side Doors look really good didn't see any dents didn't see any dings this back room is in nice shape as well No scuffs or scrapes and the back tires have just as much tread as the front tires Framing under body got a little bit of corrosion, but nothing too major. I mean for 90,000 miles and six years old on the truck Pretty nice underneath here just a little bit of surface rust on the frame Nothing too bad All lower rockers still look really good nice and solid right in here. That's where you always want to look That's where they go first, but still looks good there has the 4x4 off-road package the chrome tipped exhaust Full towing package which includes a receiver hitch four pin and seven pin wiring the backup sensors backup camera The tailgate is in excellent conditions and see any dents or dings on that Has a factory forward bed rug in it. Those are always really nice and on this side of the truck just as clean as the passenger side We want to make sure you get the most accurate representation so that when you get here. There's no surprises It's back rim no scuffs or scrapes on that does have the capless fuel fill Which is a really nice feature and on the rest of this side of the truck. No dents. No dings has the driver's side door code entry We do have the key the key code for that has the built-in directional signals the power fold-in mirrors driver side blind spot mirror Inside the larry at plus package gives you the black leather interior There are no rips. There are no tears in the seats. You do get a memory driver seat lumbar power Power pedals auto headlamps our windows power locks power mirrors and the sony sound system as We hop in side the truck here. You can see that this one indeed does have 90,705 miles instrument cluster is very nice and clean smells very clean in this truck Has the leather wrap steering wheel audio and Bluetooth controls on the right cruise controls on the left Comes with the my Ford touch radio the factory navigation system You have your climate control here where you can do your heated and cooled seat buttons This is also where your backup camera shows up Turned out four-wheel drive with the four-wheel drive auto feature Factory brake controller dual climate control and the sync system to connect to your Bluetooth cell phone passenger seat and carpeting very nice and clean No rips or tears on that seat And the headliner is a nice shape has the power sunroof and the homelink system for your garage door security systems and lighting systems Map lights and then your power siding rear window and sunroof controls Let's take a quick look at the back seats and then we'll check out under the hood Back seats are just as clean as the front seats. There are no rips.  I'd personally like to thank you for checking out the video today Hopefully from this HD video you'll have been able to tell just how clean this truck is all the way around inside and out And under the hood we have the 3.5 liter eco boost motor engine bays very clean runs very smooth lots of power on this truck and This truck has been fully safety Dan inspected by our service shop has a fresh oil and filter change all the fluids have been checked And topped off and this one's 100% ready to go To see more pictures of this truck or one of our other 450 new and used cars trucks SUVs minivans wranglers half tons three quarter tons one tons you name it We got it go to our website That's summit auto comm full pictures and descriptions of every single vehicle on our lot videos of every single used vehicle that we have all at summit auto comm and From two different locations in fact all the pictures and videos at summit auto comm and if you'd like to check out more HD videos you can go to youtube comm slash summit auto remember to like subscribe and share on this video and all the videos that you May see there in fact in a second you will see a link to subscribe to our youtube channel on your left a link to more Half-ton truck videos like this one on your right If you have not been to our website on the bottom link to this vehicle on our website click those check us out And we really look forward to helping with this super clean 2013 Ford f-150 super crew short box larry plus. Thanks again


That is basically my everyday makeup routine. If you're going to make chocolate chip cookies, don't make any other recipe, I swear. That was the first time that I had ever been to Walmart that I actually gained money and didn't spend any. Hello you guys, what is up? So for today's video, it is Monday. I'm going to be vlogging. It is the 15th, which means it is two days away from my birthday, which means it's my birthday week. Okay, I do not like celebrating birthdays for one day anymore. We get the whole week. You were birth on this day. So why would you celebrate that for one day? You have to celebrate your new age, your new chapter of life, your new year. So that is what we're doing, okay? You might think that's really extra, but I don't like that. I realize I never show you guys like my makeup routine. That's why this is like at kind of like a weird angle right now. I just started to do my makeup and I'm like, why don't I just turn on the camera now and show them? Because usually I turn on the camera just after I'm all ready. So I decided to show you guys like what I do for my makeup. I do my everyday makeup routine when I do wear makeup. So I already did start one thing before I like thought of actually starting the video.  This has 30 SPF. What I did is I took this brush and then I just, you know. Okay, so then I'm just going to wear a beauty blender. Then I take the Born This Way multi-use sculpting concealer and this is in the shade nude. Okay, so what I do is I'll put this like on my nose. This is like a highlighting point in my chin. And then I'll literally just put it on the outer like edges of my eyes. Just to make that like lift up and then do the same thing on the other side. So that's the concealer that I put on and then I'll take my beauty blender and blend it in. And then I'll just take like the leftover concealer that I have on my beauty blender and like bring it up to my forehead. So now that that is all blended in, I go in with the L'Oreal True Match crayon corrector. Okay, so what I'll do is I'll like contour with this or bronze or whatever. And I'll go like that, make like a line, a harsh line. And then I'll put some on my forehead like on the top there and then on the other side and then the same thing here. And then I'll take a brush and blend this out like upwards type of thing. So after I brush it out, I beauty blend it out just because I want to make sure that everything is like smooth, we blended in, you know what I'm saying? And going in with the beauty blender just puts my mind at ease. And then if I want a little more, I'll just go in, put a tiny bit more just to amp it up a little bit. Okay, so now I go straight into my eyebrows. Well, not straight into them. I kind of prep them. So what I do is I like to do soap brows. So I'll wet my spool a bit and then I have just like regular dev soap here. And I'll like rub my spoolie on it. And then I just like brush my eyebrows through and make them stick the way that I want them to stay. So now I just leave my eyebrows dry. I don't do anything to them. I move on to my eyes and then I'm going to go back to my eyebrows. I'm also not done with my face yet, so don't worry. I just, I like doing things in a really weird order. Okay, so now what I do is I take this really old eyeshadow palette that I think it was my mom's and I've had it for years. I don't actually use it for eyeshadow, but what I do is I'll take the dark brown that's in here and then I'll take like an angled brush and go in like that.  Just like very subtle, if that makes sense. I don't like to do anything dramatic. And then I'll kind of like beauty blend it out if that makes sense. I just make sure that they're even enough. So that's what that looks like. Now I'll go back to my eyebrows and I'll go in with like a pomade dip. I used to have like a pencil that I liked better, but it broke. So now I'm just using this until I get any pencil. And I just go really lightly. I just kind of accentuate them a tiny bit. Like that's literally all that I do. Okay, so now what I'll do before I do my mascara is I'll take this blush and this is the Morphe X Maddie Z-Clear blush. So I'll take that with my finger and then I will put that where you're supposed to put blush. So like, there. Blush is a game changer. Like I'm not even joking you, I never used to wear blush. And then my friend Julia was like, okay, let's just start wearing blush. So then I tried it and I'm like, this is game changing. I don't know how I never used to wear it. I really don't know how. And then what I'll do is I'll take like a brush kind of like this and then just brush it in. I can also like use my fingers because it blends in really nicely either way I do it.  Just kind of put it all over my face. So that is what I do for the blush.  This is the best eyelash curler you can ever get.  It's literally the best thing ever. And now I'm just going to go over mascara. I use the L'Oreal Telescopic. All I really like to do is apply it to like the tips very lightly. Okay, so the last thing I'll do is I will go in with a lip liner. This is a cover girl one and I don't really like the shade of this. I got it just because I lost my other ones. It's just too close to like the shade of my lips that it doesn't really do anything. I don't know why I have like three lip liners and I lost them all because I bring them with me everywhere that I go. And then I just lose them. Okay, and then the last last last thing that I do is I'll take like this Vaseline bomb that I've talked about before. And then I'll literally just like dab this where I would put highlight and then it's like such a natural highlight.  But when I just do my makeup, I don't really like to apply any just because my face does get really dry. So that is basically my everyday makeup routine. I just wanted to like include this in the vlog because I don't think I've ever shown you guys a makeup tutorial before. I've shown you a skincare routine but never a makeup tutorial. So this was fun. I don't really have many plans for today. I'm just going to be vlogging. I need to go out to return something. I do need to sit down and do some work. But yeah, other than that, I don't really have like many solid plans for the day. So I'm just going to take you guys along like usual. So excited to hang out with you guys today. It's my birthday week. Okay, so we have a few things to get done today. So here is the itinerary. Today we need to finish two thumbnails for my vlogs that are going up this week because I'm a little behind on the thumbnail making. So I need to take some pictures for that and edit that. So that's going to be the first thing that I want to get done today. And then I need to do some work like for my editing job. And then I need to finish filming this vlog. I need to do some type of workout. We're thinking of maybe going on like a hike today because it's such a beautiful day. And then I got to turn something from Walmart. So a lot to do. But we're going to get this done today. It's going to be an amazing day. And it is a literal beautiful day. So I'm so happy. I'm such in a good mood. It's my birthday week starting it off right. Joel's just doing his hair and then we're going to go start making the thumbnails. I'll leave you guys a little bit of behind the scenes like taking the pictures for that. It'll be kind of funny. We finally got a thumbnail. It's kind of funny because the thumbnail is almost the most important part of your video because thumbnail is not good. Then people aren't going to click on it. So it's like literally almost the most important part, which means that like I need my thumbnails to be perfect. And if they're not perfect, then I need to do it until it's perfect because it's so crucial that you have a good thumbnail. So struggle is real. Really is. I have tea for you. Okay. So literally this is the best chocolate chip cookie recipe of all time. Like I'm not even joking you. Okay. So basically I made cookies like two nights ago and I literally ate them all. Like I'm not even joking you yesterday. I didn't even have one proper meal. Actually I had one proper meal and that was only dinner. But for the rest of the day, like for breakfast and lunch, I had cookies. Oh, if you're going to make chocolate chip cookies, don't make any other recipe. I swear. So this is a recipe on the on the chip. It's chocolate chip bag, like the milk chocolate ones. Nothing can ever beat these cookies. Like I swear to you, nothing can beat them. I'll put the recipe on the screen for you. You're very welcome in advance. Also I've been making these super healthy peanut butter bars that are so good as well. And they're so easy to make. I will actually, if I make them tonight, I'll show you guys in the vlog. If not, I'll show you guys how to make them soon. There's only like two cookies left because I literally have been eating them all. They're just so addictive. So this is like a warning too. Be careful because they're addictive. But so good. Hey guys. So it is currently like 2 30, almost three. And I just did some work on the thumbnails and just did some work in general. And it is such a beautiful day outside. So since we have time today, me and Joel were like, why don't we do some sort of hike or something and take advantage of the sunny weather because it's just so beautiful. Like when the sun comes out, you got to go out. So we're going to do a little hike. We're just going to get out of the house to go do that and also get like a little bit of a workout in. So that's going to be really nice. And on the way to that, I'm going to like bring the thing that I want to return to Walmart. I found these really cute kind of like Jean kind of khakis at Walmart and they're like brown. I knew that they were going to be big on me since they are men's, but I didn't know how big. So I just bought them and I'm like, you know what? They're too big. I'm just going to return them and they are sadly too big and they didn't have a size smaller. So I got to return those and then we're going to go on a hike. So I'm just going to get changed now out of my PJs and hike it up. My room is a mess once again. So do not mind that. But here's my going outfit. Yay. I literally am not so boring this sweater, but I just can't. I'm addicted. Hi, can I please get a medium caramel iced coffee with almond milk? Okay, thank you. Thank you so much. You too. I literally forgot to make a coffee today. I was going to go for the Starbucks, but then Tim Hortons is literally like half the price.  I just like having a drink in the day. You know, it's just fun. We're still on the way to Walmart and I'm going to return that. And then we're going on the hike. Daily Walmart run. Oh, I forgot the things that I needed to return. When we were leaving the house, I forgot like the bag that I needed to return and I had to go all the way back in. And then I just forgot it again. Yeah, because usually we just go in. I never have to return anything. So how would I remember that? Got it. It's going now. So I really want to get the Australian gold tinted sunscreen. I think it's called. But I've looked in literally every store and I don't even know if they sell it in Canada anymore. So I might have to try and find that online tonight because I haven't found it in literally any stores. If you guys use that sunscreen, let me know and tell me where to find it. You guys have to be proud of me. That was the first time that I ever been to Walmart that I actually gained money and didn't spend any. I think I deserve a round of applause. Thank you. Thank you. Thank you. That will never probably happen again. So we got to cherish this valuable moment that I walked into Walmart and made money. It's a beautiful day. It's a beautiful life. See you guys tonight. Hey guys. So it is currently, it's currently 6.50 and it's literally like the sun is just setting right now. It's kind of a beautiful sunset. Usually wouldn't be like this bright out at this time. So it's like really weird and it feels a lot earlier than it is. But we're just waiting until my brother and his girlfriend gets home so that we can watch the bachelor. We're going to order food because tonight's the finale so we're really excited. So that's going to be really fun. It's just like really random but do you guys ever get in like those moods or not the moods, but like sometimes you're just sitting there and you kind of feel lucid and you're like, feels like I'm in a dream right now. Life doesn't feel real right now. Like I don't know why but this happens to me kind of often where it's at the randomest times, but I'll just feel like I'm in a dream and then I'll be like, is this real? And it's so weird. And I don't know if this just happens to me. Sometimes I can't even differentiate like real life and a dream. Like sometimes I'll have a really vivid dream and then I'll be like, I don't even know if that actually happened or it didn't. I don't know. I don't know. Shit is weird. But let me know if that happens to any of you guys because I had that like yesterday and I was just eating dinner and I'm like, I feel like I'm in a dream right now. I don't know if that's normal. But anyways, I'm probably going to pick up the camera next when we start watching the bachelor. I just had to pick up the camera again and state my opinion. I just wanted to say that I just hate thongs. Like they're so uncomfortable. I had to put one on because I was wearing leggings and I need to change out of it like right now. I don't get how people can sleep in them. I don't get how people think that they're comfortable. I just literally don't get it. Like they're so uncomfortable.  They literally scratch you. I can barely wear one for an hour. Okay. Like it's just painful to me. I love granny panties. Like if I just use one underwear to live in, it's granny panties. Like there's no other way for me. It's granny panties or nothing. I, for other people's sake, will put on a thong if I'm wearing like leggings or something. But when I'm wearing anything else, like even sweatpants, I'm putting on granny panties. Like I'm not even joking you. I sleep in them. They're just, oh my gosh. Nothing is more comfortable than having a good pair of granny panties on. And then I have those friends that are like thongs are so comfortable. Like I sleep in them. Are you psycho? Are you psycho? I don't know. Okay. Leave your thoughts down below. I want to know if I'm alone on this. I just, I need to know. Also this might be another TMI, but I didn't shave my legs for like three months. I was just insulating for the winter. And I just shaved my legs yesterday. And oh my goodness gracious. I'm like a new person. I'm like a new woman. I was like, you know what? It's my birthday week. I have to be somewhat, you know, decently prepared for the occasions that are to arrive. And I was like, you know what? I'm gonna do it. I'm gonna shave my legs. I'm gonna remove my installation. My legs are so soft. I haven't felt them this soft in so long. She feels good. But yeah, I just have to put that out there that you're welcome for the information. The sun is so pretty. Hello you guys. So it is currently 1040 and it is 10 minutes past my bedtime because I usually go to bed at like 1030, maybe even like 10 to 1030 because the bachelor was just like super long today. But yeah. So we just finished watching the bachelor. And it just like clicked in that tomorrow is my last day of being 20, which is so weird. I mean, I guess it's not that weird because I feel like the jump from 19 to 20 is bigger than 20 to 21 because it's just like your early 20s. You know what I mean? It's not really that big of a deal, but it's just my last day of being 20 tomorrow. So it's, I don't know what I'm gonna do, but I'm gonna make it a fun day. So this March from last March literally feels like one day, but then it feels like 20 years at the same time. Like it feels like it was just my birthday and now it's my birthday again. I don't even know. It's just like weird and concerning, but another year. I'm not gonna get too emotional about it. I'm gonna end the video off here. I love you guys so much. I'll be vlogging on my birthday so that vlog will be coming out obviously after this one. So I'm excited. Thank you for all your sweet comments and everything. I appreciate you guys so, so much. I hope you guys have a great morning, day, evening, or you know, whatever time zone is right now. Peace out.


Pussy Baker, what's your authority on this other than personal interests? On politics? Survival. Survival. Life is about personal interest, right? It's all about survival. I want to be antifraja. I want to be able to protect my family, protect myself, protect my wealth. I want to make sure I'm not used as cannon fodder by centralized power. Pussy Baker is saying history specifically, those reasons, right? And I guess I was born here when I was young. I came here and I saw corporate media when I was like 10 years old. I saw corporate media lying about who my people were at the time, right? Where I came from, what was going on. As a 10-year-old, I knew this.  A lot of people know, I'm a pretty chill guy, but don't piss out chico. So they pissed me off so I went ballistic on it and decided to learn as much as I can and stay on top of it. So I just did that, right?