Welcome back to our med smarter question of the week where we're taking a smarter approach to preparing future physicians Before we get started if you'll click that like button and also Subscribe and turn the bell on so that you'll be notified when we post new videos. All right, let's jump right into that question As always we begin with the last sentence of the vignette So that we can understand what this question is asking before we read the full information Which of the following personality disorders best describes this patient? A 45-year-old woman presents to a psychiatrist after referral from her physician due to the fact that she feels anxious all of the time Her primary care physician diagnosed her with generalized anxiety disorder and prescribed Buse-Burone However, the patient does not report feeling any better. She works as an accountant and spends most of her day in a single private cubicle She has no close friends and lives by herself She says that occasionally people from work invite her out at night, but she never goes even though she would like to She's not dating currently and is worried that people don't like her So which of the following personality disorders is best described in this patient? So we have a avoidant be dependent see histrionic D narcissistic e schizoid or F schizotypal take a minute Read the question and answer choices again come up with your answer and write it in the comment box below So it appears based on what we're seeing here There's this this patient has anxiety as well as some fearfulness of being Rejected or unlike so she's worried people don't like her so she has some sensitivity to rejection she's somewhat socially inhibited and Might have some inadequate feelings based upon what we're seeing here. So this seems to be a cluster C personality disorder So avoidant obsessive-compulsive independent. So we have avoidant independent and A and B Histrionic is not narcissistic schizoid and schizotypal are not Therefore we have narrowed our answer choices down to A and B. We know that and B are both a cluster C personality disorder So knowing just that information does not get us the full answer So we need to break this down a little further Are we dealing with an avoidant personality disorder or a dependent personality disorder? well, if you can look at the Vignette again as we mentioned anxious worried people won't like her So she's actually going to be pulling back and withdrawing from some of those social Situations because she's socially inhibited therefore that she's going to be avoiding these situations So we're gonna go with avoidant a as our final answer and a is the correct answer as I mentioned This is a cluster C personality disorder and we're seeing anxiety and Fearfulness or worry about relationships separation and control There is a genetic association with anxiety disorders with patients that have avoidant personality disorders So she's fitting the mold perfectly for this that she is sensitive to rejection She's socially inhibited and she's timid or she feels inadequate If you found this material helpful for your studying Please like and consider subscribing to the channel Also share this video so that more people can benefit from it like you have


Okay, it's probably time to get started. Can everybody hear me okay? No, okay. Okay, my name is Michael Rash. I'm the CTO of a network security company called Celerix. So this talk is going to concentrate on the concept of running single packet authorization over the Tor network and why that might be an interesting thing for you to look at for providing an additional layer of security for services such as SSH. By the way, please interrupt me at any time if you have any questions. I don't mind being interrupted, so fire away. So I'm gonna start with a brief overview of Tor. I'm sure nearly all of you are familiar with it. We'll move from there into talking about default drop packet filters and single packet authorization, why that provides an important mechanism for protecting long running services such as SSH or OpenVPN. Talk a little bit about SBA over Tor that will comprise the bulk of the presentation. And I'm leasing a new version of FWNOP at this conference. FWNOP stands for the firewall knock operator. I introduced that software two years ago for the first time at this conference. It was the first port knocking implementation that combined encrypted port knocking with Passivo as fingerprinting. However, port knocking is an outdated protocol next to single packet authorization. The default mechanism for passive authorization is now single packet authorization in FWNOP. So 0.9.7 is available for free on my website, release term of the GPL, which is cyfordine.org. And I'm gonna end up with a live demonstration and hopefully leave time for questions. So Tor, Tor is a really interesting project. It is a network of onion routers that makes it very difficult to perform traffic analysis of TCP based traffic. It constructs a cloud of routers across the internet with the unique characteristic that no individual router in that cloud knows the full path of a virtual circuit that's created for each individual TCP connection. So each individual router only knows its immediate upstream hop and its immediate downstream hop. So anyone who is actually trying to know where traffic is destined for or comes from is not really able to determine that. There are attacks wherever if someone is able to watch every single entry and exit router out of this network, based on some timing attacks you could get some information. However, in general, the strength of the Tor router cloud is increased by the number of nodes that are running on the internet that are running Tor. And at last count, I think it's in the several thousand. Somebody can correct me on that, but it's getting more popular all the time. It's compatible with any application that can speak with SOC support. It uses the TCP protocol for transport and traffic of course is encrypted between individual router nodes within the Tor network. So visually, Alice wishes to talk to a server that Bob is running. Alice will make a connection to an entry router into the Tor network. And once the connection goes into the established state and only after the entry point connection goes into the established state will a virtual circuit actually be constructed. That established characteristic is important for the remainder of the talk and we'll talk about that a little bit more later. But the links between Alice and the entry router are unencrypted from there. The rest of the traffic is completely encrypted as it's bounced around through the router cloud. And finally it hits an exit router which is randomly selected. And then traffic is unencrypted for eventual communication to the actual server that Bob is running. Nice concept. So single packet authorization, what is it? It is a mechanism by which default drop packet filters are used to minimize execution paths that an attacker can permute. So if I'm running a default drop packet filter so that nobody can even connect to SSH say running on a system then they are fundamentally unable to interact with any of the user land functions in that daemon that may potentially contain vulnerabilities. Every function has a certain non-zero probability of containing some vulnerability. Of course SSH being written by some of the best computer security programmers around has been very good about not having vulnerabilities in general, however they do happen. And I for one, do not let arbitrary IP addresses connect to my SSH daemon for that reason. I personally have had a system hacked via SSH once and I vowed never to let that happen again. Authentication and authorization data that's sent by single packet authorization is monitored passively, completely by libpcap. Although FWNOP also supports the ulogdpcap writer if you prefer getting a little bit more esoteric with net filters capabilities.  It includes both authentication and authorization capabilities which are different. Authentication has to do with trying to verify whether or not an entity is who it claims to be whereas authorization tries to determine whether or not an entity is allowed to perform an action. There is no traditional server in the FWNOP architecture in the Berkeley socket since. All the communication is done or the packet data is collected passively on the server side. So it kind of is interesting that if you might ask, well how do you really secure a system? And assuming that you're not running a wireless device driver and you're being monitored or attacked by Dave Manor or Johnny Cash who's a really interesting talk at Black Hat. I personally, by the way, I'm running a kernel that does not have even the driver compiled for my wireless device driver, my wireless card. But what's the closest we can get to Marcus Random's perfect firewall? I mean sure you can cut the ethernet cable to your computer but then it's not very functional on the network either, right? So the next best thing is a default drop packet filter. Intercepting packets within the kernel is pretty much the lowest level that you can possibly restrict an attacker's ability to communicate with a user land demon. So let's try to find a build a security mechanism that uses a default drop packet filter fundamentally to make it difficult to detect that a service is even running. So some quick characteristics of single packet authorization. Up to the minimum MTU of data can be sent between the knock, or I should say the SBA client and the SBA server. That makes it possible to use encryption algorithms such as the El Gamal Cypher in GNU PG which has, I mean, you can have relatively large key sizes compared to symmetric algorithms. I use a 2048 bit GPG key. That is fundamentally incompatible with transmission over a port knocking scheme because the data transmission rate is so error prone and slow. An additional consequence of the larger payload is that replay attacks can be elegantly thwarted. If someone is able to monitor the SBA packet from the SBA client to the server, it does them absolutely no good. At least that is, they can of course try try crypt analysis of that packet but then you're on pretty solid ground because a lot of research has gone into making sure that encryption algorithms are implemented well and resist that kind of analysis. The point is that every SBA packet includes 16 bytes worth of random data. And on the server side, if the server side tracks all the MD5 sums of the valid encrypted packets, if a new packet is seen that has the same MD5 sum as any of the previous packets that have been seen, then no action is taken whatsoever and an alert is sent. By default, SBA uses UDP for transport. You will note that's a little bit different from the tour requirement of using TCP but if you are using SBA without using tour, you can spoof the packets because they're only a single packet is sent. That's kind of a nice consequence. So, just to drive the point home, SBA and port knocking are similar in the sense that they both use default drop packet filters and they can also use timeouts on accept rules that are added to your net filter policy but allow TCP connections to remain established by using a state tracking mechanism. But that's where the difference is pretty much end. From there, SBA solves the replay problem whereas there are mechanisms to attempt to do this in port knocking schemes but they generally require either successive iterations of a hashing function as an S-key style authentication or time synchronization, things of that type but they require keeping state on both the client and the server side and that is generally not all that scalable. SBA is compatible with asymmetric ciphers. It cannot be busted or broken by trivial sequence busting attacks. If I'm an attacker and I can monitor a port knocking sequence in route to a port knocking server, I can simply just spoof a packet to the same port as the previous packet was sent and thereby bust the sequence because now there's an additional port in there that breaks any encryption scheme. Encryption schemes don't like it when there's bogus data injected inside. They don't decrypt very well in that case. And of course, port knocking implementations look like port scans when they're sent over the wire and an intermediate IDS has no way to be able to tell that this sequence of connections to ports is not actually a port scan. So in the SBA architecture, we will see how this gets changed when we run the packets over the Tor network but essentially who can sniff what? We have an SBA clients here at the upper left who wishes to authenticate to the SBA server that's running here on this brick wall, this firewall, this is net filter in FWNOP's case. And it is possible because we are just sending a single packet across the wire that we could send the packet to this dummy target IP but as long as the FWNOP sniffer that's running here which is essentially an authenticating ethernet sniffer can monitor that packet in route, the firewall ruleset can be changed here to allow the actual connection to come from the SBA client. An attacker of course can monitor any of these communications but as I said before, replay attacks are not useful in the SBA case. Okay, so this sort of concludes the SBA portion that is before we get into talking about Tor but I wanted to mention something. There seems to be some confusion out there. Some people think that SBA may be sort of along the lines of security through obscurity. Well, I would say that SBA is no more security through obscurity than using passwords, shared keys, or GPG private keys. SBA is additive, it's not as though we're using SBA as the complete security mechanism for protocol such as SSH. It is just an additional layer to make it so that if somebody is using in-map out there and trying to detect that SSH is running on a system, they are fundamentally unable to tell that SSH is actually running. It is not the complete mechanism, it's just an additional mechanism to raise the bar just a little bit. JBL wrote a good paper on why security through obscurity is not what many people might think. If you're interested in reading that, I highly recommend it, it's at the link below. Okay, so single-packed authorization over tour. Well, why not always just run SSH connections over tour? You can do this, of course, and that provides an additional layer of protection in the sense that a traffic analysis is now difficult to do. You can't detect that you're, as an attacker, that you're able to see where an SSH connection is going or where it's coming from. However, an attacker can also make connections over the tour network as well. We still need to have a method of restricting arbitrary connections to SSH with a default drop packet filter, and that implies that you still want SBA. So what we wanna try to do is make SBA compatible with the tour network in some way. Does anyone have any questions so far? Oh, okay. Okay, so tour uses TCP for transport. This has some implications. We cannot fundamentally influence how TCP stacks communicate over the network. Tour is written on top of TCP, and a consequence of that is that we can passively fingerprint operating system stacks that are actually running tour, and we'll have a slide on this a little bit later. Another consequence is that if you use in-map to try to connect, to send a scan over the tour network, what do you get? Well, if you're running as root, the default in-map scanning method is a SIN scan or a half-open scan, and if you try to send that over a SOCAT proxy that is interfaced with tour, you will notice that a SIN scan by itself never actually gets a virtual circuit set up through tour at all. The virtual circuit is only established after the connection to the entry point router goes into the established state. You can get a virtual circuit to be set up if you use the normal TCP connect method, or dash S capital T, but presumably if you're running a port knocking implementation, you're not actually going to have a whole bunch of servers listening for all the ports that you're actually connecting to. You're just passively transmitting this data across, and that is passively monitoring it, and the consequence is that when each of those virtual circuits tries to connect to that port that you're trying to scan, nothing will respond. In other words, a reset will not be sent because there's no accessible server there, and so tour will retry and set up a new virtual circuit with a new exit router, which means that your port knock sequence will look as though it's coming across from essentially arbitrarily, as many different exit routers as you're sending, as you're setting up virtual connections to. That is not very good for trying to guarantee that you're able to send a port knock sequence from a single IP address. Okay, so tour using TCP for transport means that we must have bidirectional communication for data to be transmitted across the network. So that means that technically this is incompatible fundamentally with the idea of single packet authorization. There are going to be at least, you have three packets for the TCP three-way handshake followed by a packet to send the actual data followed by the fin to close down the TCP session. And we can't also just simply include SBA data within a SIN packet and send it across the network. Recall that we can't permute how the TCP stacks on any of those operating systems are actually functioning. Tour is built completely on top of TCP. We have no control over how each of the individual tour routers are actually sending packet data across the wire. So the fundamental consequence is that we must have a real TCP server to which to connect on the FWNOP daemon side. So default drop can't apply to that server clearly. We must allow connections to some TCP server so that we can actually get the SBA data across the tour network. So if you'll allow me the, I guess the indiscretion sort of the leeway to say that we're sending single packet authorization data over tour and it's gonna involve multiple packets then we can proceed. So how can we do this in a way that enhances security? So in the 0.9.7 release of FWNOP there's a new mode that allows a TCP server to be instantiated by FWNOP with the following characteristics. It listens on a high port, specifically 62201 which is the same port that the UDP communication normally takes place over. It runs with nobody, it does a bind, a listen and then it loops over successive accept and receive calls with no other code. So the consequence is that this server has a lot less complexity than a more complex server such as SSH. So I feel more comfortable and at least allowing people to connect to this server instead of seeing that SSH is actually running. The data acquired on the FWNOP demon side is still acquired passively via LIPP cap. It doesn't actually listen on the demon side doesn't actually look for the packet data over that established TCP connection to 62201 via a receive. It actually still monitors the packet data passively. So it's compatible with also sending the SPA data over UDP port 62201 as long as you don't also filter that port out of your PCAP filtering statement. So Taurus is designed to make the exit router hard to predict. So that has implications also for how SPA is going to work. Normally in many cases people will use FWNOP with the dash cap lowercase s argument just to say to the FWNOP demon wherever whatever IP address happened to communicate this SPA packet two is going to be the one that I'm going to allow to connect through to SSH and the one that I'm going to reconfigure my net filter policy for. That unless map address is used within the Tor network presents a problem because once the SSH connection is made over the open internet then that the IP address from which it originates is going to be different than the exit router IP address that the SPA packet was sent from via Tor. So just to drive this point home let's if we look at a SIN scan over a SOCAT proxy with Tor you will see that this first command here is where we're setting up to listen on local host over port 62201 but we're interfacing with the SOX port. And so if I send an in map scan against local host looking for whether or not port 62201 is actually open of course in map returns the fact that it is open because we're running SOCAT and it's waiting for a connection to go to the established state and thereby send it on through the Tor network where it will set up the virtual circuit. But if you do a TCP dump on the server side and actually look for a circuit connection to be established over port 62201 which is where we're actually mapping it to appear you will see that no traffic comes across whatsoever because the in map scan never actually went into the established state it only sent a SIN packet across via a raw SOCAT and the corresponding three way handshake never actually occurred. If we use a connect scan however against local host again the port is open because yes we're listening on port 62201 and if we do a TCP dump on the server side this comes out of the Tor network now we see that we do actually see traffic over port 62201 but take a look at these three packets. In this case I was using net filter to filter all the incoming connection attempt to this port. So Tor continually retries to set up the virtual circuit and is unable to because there's no data coming back whatsoever there's no reset packet that comes back. So we can see that the TCP options portion of the TCP header is a little bit different for each of these successive connections. So the first one here is the 6474207.50 address. It begins with a maximum segment size of 1460 it follows by selective acknowledgement is okay, etc. Well when it doesn't get a reply a new connection is attempted. It comes across from this 82.224 address maximum segment size is 1460 but now there are two knob instructions before the selective acknowledgement is okay. Clearly this is a different TCP stack and even if the IP address didn't tell you that.  So you can fingerprint these things just to see what kinds of operating systems are actually out there they're running tour. FW knob D includes a passive OS fingerprinting mode. It's a complete re-implementation of POP but it only requires net filter logging messages in order to do this. So if you add the log TCP options argument to your logging rule and net filter you can get FW knob to tell you what operating systems are constructing those SIN packets as they come across the wire. So here we have one that's running Linux. There's also a free BSD one in there and an open BSD one in there too. Okay so over the tour network what do we see? Single-backed authorization gets sent across this established TCP connection so traffic analysis where an attacker is able to sniff traffic between the client and the entry router. So you can see that once the SBA packet actually makes it into the tour network it's not really all that useful because you don't know where it's coming from or where it's going to. All you see is a TCP connection that contains this seemingly strange looking data. It's about say a thousand bytes worth of encrypted data that doesn't repeat ever and it gets sent across to the minimal TCP server that's running on the FW knob demon side and then the SSH connection does not go through the tour network and that is totally, there's no way to relate the two communications together. So in FW knob 0.9.7 the features that are released are the FW knob serve minimal TCP server that we talked about. You can enable that with the enable TCP server argument in FWNOP.conf. This next bullet is kind of interesting. If you use FWNOP against multiple hosts but because the FWNOP command line is a little bit complicated and you don't want to have to always remember exactly which GPG key you're actually using for which host you can use this last host argument to specify which command line arguments you would want it to run. It keeps state with respect to those arguments for each host that you run it against. I ported the open SSH patch to SSH, open SSH 4.3 P2. I'll give a demonstration of this a little bit later. There was a vulnerability in the Crips CBC module where the initialization vectors would result in weak encrypted data. So I needed to update that. Updated also not to advertise the FWNOP client to whatismyp.com. We will see that we're able to use automatic resolution against whatismyp.com in order to tell what the external address may be that you're going through if you're behind in that. Okay, live demonstration. Can anyone see this? Yes? Okay. What's that? The lights, these lights? Whoa. Okay, can you see that? All right. Okay, so tour is up and running. I'm gonna run our SOCAP proxy so that I can connect to a local host and have it sent across. This is the IP address that I'm actually going to. In case anybody would like to know that. So right now I'm running in-map in a watch window so that I can tell exactly when SSH is filtered and when it isn't filtered from the NAT that I'm going out here from the DEF CON network. I'm sorry? Okay. Is that good? Okay. Is the one on the left okay? Okay, that's gotta be okay, right? Okay. Okay, so you can see that SSH is currently filtered on this IP.  The host name is spot horror. And what's happening here is, excuse me, no, it's local host. Okay. So what's happening here is I'm using a new TCP command line argument. I should say to FWNOP to tell it to send the SBA connection over an established TCP socket. That's this TCP SOC command line argument here. We're gonna say that we want access to TCP port 22, which is where SSH is living. We're using GPG authentication, which I highly recommend by the way, because if you type your password in incorrectly, you don't have to worry about whether or not the packet that gets sent was actually sent or ever received by the target. It tells you before, just as a return value of GPG, whether or not the password was valid before you have to get into that strange, you don't know what's happening scenario. So the recipient's key is identified by the host name spot or here. The signing key is one that I have in my laptop, is it called Isengard. If this dash W argument says that I want it to resolve what my external address is via whatismyp.com, by default, the user agent that it sends is a Firefox user agent, so there's nothing to actually identify the fact that you're running FWNOP as a client. And we're gonna send this in verbose mode against local host. If I type this password in correctly. Okay, now everything worked. Yes. You can see that up here, the port is currently open. Of course now you all have access for its limited amount of time as you're going over the same network, but it's now back to filtered. So you have a little window of time, you can tell what's running there if you're on the same local network. However, you can see that if I try to make a new connection, of course the port is filtered. Also, if I take this original packet data and replay it, because somebody might have snifted in route before I do that, I wanted to point out something here. These messages are coming across from FWNOP D. What you can see here is that FWNOP received a valid GPG encrypted packet signed with this GPG here that we require. And it received it from this particular IP address, which is a TorExit router. So it added an input accept rule for this IP though, however, which is not the same thing. That's what we received from whatismyp.com. And so it was able to extract what IP address to actually allow access to from the encrypted packet data itself. That's never exposed in the clear text. And finally, after a 10 second timeout, which is configurable via how you set up your access.conf file, the netfilter input accept rule was removed. Okay, so I saw my packet data there. If I do the same thing and send that packet data across, the wire, the port is still filtered. Should be something coming up here. So attempted message replay from this IP because the MD5SOM matched. So that concludes the demo. Can you give me lights please? And finally, if you're looking for updated versions of these slides, they're a little bit different from what's on the con CD. Oh, is that not showing up there? Let's see. Okay, you can find them at this link down here. Anyone have any questions? Yes. Right, so the question was if I actually wanted to send the SSH connection also over Tor, how would I know what my exit IP is? And that would, what you'd need to do to be able to make that work is use the map address functionality in Tor to get that to work. That has some interesting implications, actually doing it that way by that would, what that would mean is that traffic analysis with respect to your SSH connection as well would be thwarted, which is a good idea. It's just, I didn't have time to actually put the map address stuff in here. So, any other questions? Yes. Am I on? Yeah. So it was the benefit of sending this over Tor just that if somebody's sniffing the traffic going to the server, it's a little bit more difficult for them to tell that the packet that came from some random IP address just before your SSH connection was what was allowing the connection to go through. Right, so I'm applying traffic analysis, I'm making it difficult for traffic analysis to work against the SPA itself. So, someone, say for example here on this internal network that was able to see that there were, if I was not running it over Tor, they could see that there is a, by default, if a packet goes over port 6201 UDP and they're looking for that, they might know that SPA is actually running and have an idea therefore that some packet filter may get modified as a result. But running it over the Tor network makes that just a little bit harder to do because you can't tell that you're actually, to where you're sending it to. So, it's designed to help harden the SPA protocol itself. If you also then also use the map address functionality in Tor and run both connections over Tor, then you get traffic, it's hard to do traffic analysis on both connections. Had another question Ben, it's getting hard to hear you, so I'll probably just go up there. Okay, any other questions? Thank you very much.


Hello everyone, this is Mr. P. On today's lesson we're going to take a look at literary devices. Onomatopoeia, personification, seemingly a metaphor. So, first of all, what is a literary device? Well, in literature, any technique used to help the author achieve his or her purpose is called a literary device. When employed properly, the different literary devices help readers to appreciate, interpret, and analyze a literary work. So, let's analyze onomatopoeia. When a word's pronunciation imitates a sound, like buzz, his, beep, fizz, click, vroom, wolf, boom, and zip. Let's take a look at some examples. So, those are examples of onomatopoeia. Now, let's define personification. An inhuman item is given human characteristics in their description. Personification is not used to describe people, obviously. Personification is used to describe an animal or an object. For example, the leaves danced their way through the lawn. You can see the leaves dancing. Well, usually, not usually. Actually, never leaves dance, right? Only humans dance. The next example. One look at the garden and you could tell that the plants were begging for water. Well, plants don't beg. Humans do. Next example. And this is an example taken from Romeo and Juliet by Shakespeare. All my hopes. Well, human swallow, not the earth. Next one. My watch told me the time. Well, your watch does not speak. Only humans speak. Another example. The wind whistled throughout the day. Well, only humans whistle, right? Like me. Not the wind. Let's take a look at the next literary device. Simile. A simile is where two things are directly compared. An as or like is usually used to compare. So, as or like. Whenever you see as or like, that's a simile. Like in our examples. He slept like a log. Like a moth to flame. Another example could be he eats like a horse. Or I work like a dog. So we use like. Other similes. She's as cute as a kitten. So here we have as. Canada is called as ice. I'm becoming blind as a bat. She is as sweet as sugar. So you can see as on the right hand side. And like is used on the left hand side. So the next device. Metaphor. A metaphor also compares two things. But it does it more directly without using as or like. So let's take a look at metaphors for love. Once Mother Teresa said love is a fruit. In season at all times. And within the reach of every hand. Another example.  And was said by Charles Bukowski. Another metaphor of love. Love is a journey with water and stars. With drowning air and storms of flower. That's Pablo Neruda. And last but not least. Love is a disease and disease knows no laws. Turjaneth. So let's do some exercise. Now say whether the sentence is an example of an omatopia, personification, simile or metaphor. You can use O for an omatopia. P for personification. S for simile. And M for metaphor. So pause the video and tell me your answers. Let's look at the key now. Number one, simile. Number two, metaphor. Number three, omatopia. Number four, personification. Number five, metaphor. Number six, personification. Number seven, metaphor. Number eight, omatopia. And nine and ten, simile. So that's it for today. If you have any questions, please post them under the video. If you haven't subscribed to my channel, please do. If you liked the lesson, hit on the like button, please. And if you want to share the lesson with your friends, you may. Until next time, bye-bye.


Document Collaboration. With NextCloud, you can edit all your office documents. You can do this in the browser, on your mobile, or on the desktop. Just click on a document. Now you can edit it. That's it. It's simple. And the best part of it, you don't even need a full Office Suite installed. What was the text again before I changed it yesterday? Oh, I'll just have a quick look. That's no problem, because you can restore older versions, leave comments on the document, and see what happened to it. If you want to edit your document together with somebody else, just share it. Look, it's that easy. Carl, Paulette, and Mickey, bam! Welcome to the party! You can invite people on the same server, or people who are on a remote federated server, or just invite people by email, or share directly on a chat channel. And you're done. Now let's work together. With the different cursors in the document, you can see what others are doing in real time. So we work together much faster and more efficiently. You can chat with people while they are working on your document. Can you edit the choreography till tomorrow? If chatting is not enough, you will love this function. You can do a video call with the people who are collaborating with you on the document. Of course, only if your hair looks nice. Or just use a cover up for your face. Just kidding. You can do all of this on mobile, too, while you're on the road or at a meeting. Or in the restroom. But nobody does that, right? And once everyone is done, all the changes are automatically synced back to your desktop and all your other devices. This is how it has to be done.


What's up everyone, Takedown here. Welcome back to another video. Today I'm gonna be sharing with you what to look for at the Thrift Store. As a reseller, the Thrift Store is definitely a great option, but some Thrift Stores, the price of the items are increasing. And in some cases, some of the ones that I've been into recently, they actually look up the value of the items before they put them in the showcase or put them out on the shelves. And that's what jacks the price up for some of these items. And some items are just not worth it to be able to flip for profit. While others still are. Now, one of the things I always look for at the Thrift Store is anything Disney related, whether that's any of the hard goods, the mugs, the plush or other items. If it's anything Disney, I always check it out and look up sold comps because some of it is worth some money. For example, this little piggy bank here with all of the characters from Winnie the Pooh is a great find that I recently found at the Thrift Store. I didn't realize that first, but it actually is from Walt Disney World, which obviously we don't have here in Canada. So that was very awesome to find in a local Thrift Store. Now this here, it's a little piggy bank. Now, luckily they did have the stopper here as well. This here, we did pay $7 for and it is worth up to $50. Now, it doesn't have that much wear on it. There's a little mark on Winnie the Pooh's ear here, but overall it is in great condition. At first glance, I didn't think it was gonna be worth much money because this here is just silicone. It is not ceramic, it is not glass, it is not anything like that. It is just silicone rubber, a little on the flexible side, but it is super light as well. So I didn't think it was gonna be worth much money, but it's worth upwards of $50 and we only paid $7 for it, which at a Thrift Store is a great find and there is profit there, but for me, anything Disney related, I always look for and look up the sole comps because of finding this and sometimes you can get really great deals whenever it comes to that stuff. Next is gonna be certain movies and I'll be honest, lately I haven't been focusing on the movie section because usually at Thrift Stores they're not in that great of condition or that great of titles, but one that I always look out for is the Lord of the Rings extended editions. Those are the big, thick ones there that usually have I think three or four discs inside. At the Thrift Store before, I did pick up three of those, three different Lord of the Rings. I think it was complete sets, but I did pick that up for I think $10 and I sold it on eBay at one point for $35. Now since finding that and I've always looked for those, I did find them at another Thrift Store locally, but they're charging close to $20, $25 for it. So obviously that location looks up to see what the value is and their pricing accordingly rather than just trying to sell things at a Thrift price level. So you do have to look out and look up the sole comps of what you think you can sell items for, but some places I actually sell for a lot higher, but definitely certain movies I do look out for when I'm at the Thrift Store. Next is going to be vintage wood grain alarm clocks. Any of those older alarm clocks, number one in the Thrift Store, usually there's a section you can go and test them so you can plug it in and make sure they're working, make sure the clock is keeping time and making sure that the radio at least works or the alarm works. Usually those you can get between three to $10, depending on the size of the unit. The smaller ones are usually $3. The bigger ones are usually $7 to $10 around there. I did recently sell the two that I did purchase at the Thrift Store for both of them. One was the larger one and one was the smaller one, but for both of them, it were equaled out to be about $8 with a discount that I had that day and I sold both of them on eBay recently for $30 combined. So that to me was a great deal to find those and I always look out for them but sometimes whenever you find them they are in rough condition, they're worn out, sometimes they're chips and stuff on them. The ones that I found were in great condition and that's why they sold for the price that they did but it's always worth looking up the model numbers, seeing what they sell for on eBay, the sold comps and checking those out because some of those are worth some money and I always look for them whenever I check out Thrift Stores. Next is going to be any sealed board games. This is actually something that I'm starting to get away from myself just because some board games even though they're sealed and they're brand new, some of them are harder to sell and they're slow movers for me at least rather than other items that I can find that are bigger ticket items, sell for more and they sell a lot quicker. So you can find some really great sealed board games but sometimes it does take a while for you to sell those items. And the last thing that I want to mention to be on the lookout for at the Thrift Store is going to be any video games or consoles. I found some really great items and some other items that I did purchase and I didn't check out good enough. One thing is, check them out as best that you can. Now you can't test it and connect it to a TV so you won't know if a console has the red light of death or the blue light of death or something like that but you can plug it into the outlets and whenever they test them in the back, that's all they do. They don't connect to them to the TV so you're not sure if it is fully going to be working whenever you do take it home and connect it to a TV so there is a little bit of a risk whenever it comes to consoles. One console that I did buy, the Xbox 360 bundle. I paid $25 at the Thrift Store. I thought it was in great condition. I got home and I found out it has the red light of death so instead of selling it for the round $80 which I usually sell Xbox 360s for, I was only able to sell it for $40 and disclosed that it did have the red light of death. Now that one there, it did still make profit but one of my better consoles that I found was a PlayStation 1 that I paid again $25 but I was able to sell that for $50 so at least I doubled my money there. Most recently I did go to another Thrift Store that's actually in a higher end neighborhood and I actually found True Crime for the PlayStation 2 which was in perfect brand new condition. I found for the PlayStation 4 they had Horizon Zero Dawn which was in perfect condition. No scratches on the disc. The case was phenomenal. I did find a Batman game and I did find another Assassin's Creed. This was Black Flag and everything was in perfect condition which is very rare at Thrift Stores because normally at Thrift Stores the discs are all scratched up. The cases are in terrible condition and it just so happened these four games that I bought were in perfect condition but also usually they have an assortment of video games even though their video games range from $5 to $8 always look up to see what the value is because some games that they sell for $5 is only worth about $2. So you're not gonna make any money off of them. Always look up sold comps before you buy anything and whenever it comes to consoles, test them as best as you can and make a judgment call on that because sometimes you can get burned like I almost did with the red light to death on the X-Max 360 and sometimes it will work in your favor while others sometimes might not be. So hope you guys enjoyed this video me sharing what to look out for at the Thrift Store and what sort of items I look out for whenever I go to the Thrift Store. Hope you guys enjoyed. I'll see you guys in the next video. Please take care. Peace.


The National Consultative Front, known as the Third Force Movement, is expected to form a mega-party this week. A spokesperson for the group, Olau Alew Kuni, stated this. Kuni said the group would not be registering a party afresh, but would adopt an existing party, change its name and its logo. He added that the Independent National Electoral Commission would be informed of the convention of the new party. Some prominent Nigerians set to be in the group include Professor Patrick Tomey, a former Deputy Governor of Central Bank of Nigeria, Professor Kingsley Morgalu, Pastor Itwai Igodalo, former Ironic Chairman, Professor Atahir Ujieiga, and former Minister of Education, Dr Obi Eze Quasili. To join us to discuss this conversation is Olau Alew Kuni. He's the Director-General Intervention Movement, Nigeria Intervention Movement. Thank you so much for joining us. Thank you very much. It's my pleasure to be with you. Great. I just want to go back to a few years ago, if not last year, where Professor Tomey was asked the question if the Third Force was going to become, was going to met a more force from a movement into a political party, and he vehemently said no. Fast forward to yesterday or two days ago, the Third Force is telling us that they are going to be a political party. What should Nigerians believe here? Professor Tomey would not have told you that. Well, it's printed on the pages of our newspapers. You would have told you that about national consultative front. Maybe another platform. There is another platform that is doing other things. Rescue Nigeria project, et cetera. But the national consultative front from day one said it will try to mobilise Nigeria, governise a movement that would try to ensure a proper constitutional democracy, and then try to provide a platform for Nigeria to engage the 2023 elections so that they can also sponsor their own candidates, and then they can rescue Nigeria. So that cannot be Professor Tomey speaking for national consultative front on that matter. The vision statement and vision statement of the national consultative so maybe you were talking to him as to hold our initiatives and then it could have said that. But on this matter, I am the national secretary. Let's move on to the people who make up this party or this party that is about to emerge. We've seen the former education minister, Dr Obby is a Cassili Professor, Professor Tomey. Even the pastor of Trinity Church, Pastor Itwai Godalo. These are very interesting and very forward-thinking persons, people who have been very vocal in the criticism of the political space and talking about good governance. But then I go back to what happened in 2015 where we had the likes of Kingsley Moggallew and Dr Obby is a Cassili and some other people who were not necessarily in agreement as to emerge, but now we see these people in this political party. Shouldn't the party have instead of forming a political party distributed themselves into other political parties that are already strong enough, that have already been through the process, that have a structure of sorts to change the system? Or is it that you think that starting a political party a few months to the election is what Nigerians need and this is the saviour of our political environment? Some of us have been in the system politically and we have experienced more than even those that you think are in the APC and PGP. And what became of that was a function of our effort during Nadeco days and even afterwards that became APC. And we have time with all of this. It's just that we need to also mobilise and encourage those who are in this process to join forces with us to rescue Nigeria. Nigeria needs to be rescued from this school, my administration and my governance. And that is what those who find credit in the quality are being recruited to be here for. Just watch out for the mega force that will rescue Nigeria. I'm wondering how you intend to, I mean I respect the fact that you say you have, many of you have been playing in the political space, but Nigerians have also gotten used to the major political parties even though at the time at this point maybe Nigerians might be looking elsewhere. But I ask again what is that strategy that you would use to get Nigerians on your side. It's not about having men and women of great repute, I mean we have them spread across different political parties but do you have members that have the thing that Nigerians are looking for that would bring about good governance come 2023? I would argue that we need to be confident in the architecture of the country and we also need to make sure that we make a template that would help the people. The way we are going, Nigeria and so far is not so bad. It's not easy. All that we have to do because nobody is doing it. And therefore the rescue team will be rescued. This year we hope that you can see the fact that we have tried to help the country move forward from the date of the decision. So we are still seeing the same thing because those who came to that in 1990 were essentially the people who put out their effort to put out their effort and then picked up the resources of the country to decide itself. And therefore it is incumbent on those who are in the country to come together in one country, in one bloc, and to adopt a forwarded effort in the electorate in the balance of the gains those who are political and robot. Okay, all right, Mr Okuni, we want to thank you so much for being part of the conversation. Unfortunately the connection has been very unfair, but thank you so much. Olawale Okuni is the director general of Nigeria Intervention Movement and he's a member of the third force. All right, so you're also national secretary of the entry front. Thank you so much for being here. All right, well thank you all for staying with us. We'll take a quick break and I'll give you my take right after it. Well, here's my take. Lately we've been, you know, unsettled by the abysmal leadership currently offered by the political class and we really are earnestly looking forward to a rescue mission at the polls come 2023. The anticipation keeps growing and no one is really left out, including politicians. We've seen some interesting permutations in the jostle for the next presidential candidate and now we're here of a third force that's touted to be the saviour of sorts. But beyond the primitive sentiments that we've had of ethnicity, religion and age, the reality that stares us in the face is that we require more committed leadership and citizens engagement than we've ever had as a country. If we must turn this somewhat broken nation into a hopeful one. So the question is, are we ready to not just have these conversations but walk the talk? Like I always say, it's our duty as Nigerians to be resolute, to be more deliberate in our choices and knowing that this will one way or the other determine our nation's future. Nigeria's future is in your hands and that's my take. And to round up the show tonight Nigerians tell us how they think the third force will be doing in this election. I am Mary Anna Cohn, have a good evening. I didn't think any top party can conquer APC or PDP in this Nigeria this century. I didn't know maybe in the future but now to like 10 years to this time it can't be. Because APC and PDP like I didn't know what really happened but people like our mentality people for APC and PDP we believe that they are the only person that can do it but let's just try to another party. Maybe we can see the difference in this country. The issue is that before a third force takes up their job or takes out APC and PDP it would have been maybe for next coming election but not for now because for me they are not prepared yet. You understand. So before you think about it you would have built a structure. APC and PDP is taking over because they've already established a structure all over the countries and even at the local levels. The other grassroots structure is very important. I don't think so. You know, since they are the ruling party and you know Nigeria now before you can kick away a ruling party it's always a very serious something except if they would bring how will I say it's a good candidate from other party they can have chance but assistance now I don't think. It is possible if we can play one and be united and know the plan and the vision of this third party then we will fight and make it possible.