up you guys welcome back to another one if you are new to the channel I am Gold Pony and today we are in the new 2020 BMW M850i X-Drive Grand Coupe courtesy of Apple BMW in York PA and I am needless to say really super excited to be in this one because this thing is crackling like mad and I absolutely love it so what do you say let's go ahead and jump right into it and as always let's start with pricing it's a pricing for the 2020 M850i will start at $108,900 powering the beast will be a 4.4 liter twin power turbocharged V8 putting out 523 horsepower at 5500 rpm 553 pound feet of torque available from the power band of 1800 to 4600 rpm that power is going to be sent to all four wheels through an eight-speed automatic with paddle shifters which we will be testing out in a little bit here and that does include manual shift mode of course and launch control as well giving you a 0 to 60 time of approximately 3.7 seconds with a top speed of 155 miles per hour and MPG numbers if you're curious are going to commit at 17 in the city 25 on the highway of course taking premium unleaded fuel so do want to mention before we do any kind of accelerations or paddle shifter test or anything like that there are some driving modes located just behind the shifter there and they're going to include eco pro comfort sport and sport plus essentially what those driving modes are going to do is adjust things like the shift points the throttle response the steering sensitivity and the exhaust note quite substantially the exhaust note so for instance if you put it in eco pro or comfort driving modes the exhaust note is pretty quiet it is pretty humble if you put it in sport or sport plus it gets much much deeper and it crackles more than any other car I think I've ever experienced and I absolutely love it but if that wasn't your thing again you don't have to put it in that mode just keep it in comfort or eco pro and you don't have to hear the crackle then I'm not sure why you wouldn't want to but either way having now mentioned that let's go ahead and test out the paddle shifters I'm going to put it in that manual shift mode I was mentioning to you guys and by the way to do that simply slide the shifter to the left there but let's go ahead and test out the paddle shifters here as soon as people stop being in front of me and let's see how quickly they react for us here here we go it almost launches you forward but how shifters are ridiculously quick needless to say and they are very high quality it feels like to as expected I guess but yeah very nice paddle shifters no delay whatsoever with them but to give the control back to the m850i I simply slide the shifter to the right and I think it is time let's do a quick little acceleration here in the m850i giving the control back to the car and let's see how quickly we can get this one here up to speed here we go oh my gosh good grief I love it nice quick as the m8 I recently drove but dang this thing is a beast 0 to 63.7 will definitely send your head into these very comfortable headrest I can attest to you now kind of acceleration was amazing I absolutely love it but to go along that acceleration as always braking is equally important and so of course you will find m sport brakes on the m850i along with the m logo on those front calipers as well and as far as the brake you feel goes it's been great certainly brings you to a very quick stop here in this thing then touching on suspension and handling a little bit up front you're going to get a double wishbone multi-link aluminum front suspension in the back of five-link aluminum rear suspension and of course twin-tube gas pressurized shock absorbers and there is also an active m suspension with active roll stabilization which is really the active m suspension that monitors each damper individually not only soaking up the road imperfections but also tightening up the suspension during heavy cornering really giving you the best of both worlds that is definitely a big plus in my book and sport differential as well that's going to help send torque to the wheel with the most traction which is going to result in better handling and better acceleration of course as well as I just attested to and as far as the steering feel goes it is great definitely heavier weight to it not quite as heavy actually as my Mustang GT but this is more of a luxury car so it is as expected but perhaps the best part about the steering feel is the grips the 10 and 2 grips are beastly and I absolutely love it definitely gives you a better feeling of being in control of the car and that's one thing BMW does on just about all of their vehicles so always a big fan of that so far in my test drive ride quality has been absolutely amazing again partly thanks to that adaptive m suspension there and as far as cabin noise goes you guys can probably hear me quite well right now because besides the exhaust crackle that I purposefully have on right now there isn't a whole lot of exterior noises coming into the cabin I choose to have that exhaust crackle on because it's freaking amazing but then touching on visibility because of its design it's not going to be as much as maybe a five series or a three series of course but visibility is just fine I can see perfectly fine out the back there did what I also mentioned I'm looking at a head up display right now it's giving me the speed limit my current speed and it's also going to adjust color ever so slightly if you change the driving mode so that's pretty cool too but do like the head up display it's going to help you better keep your eyes in the road another visibility plus there rain sensing windshield wipers also come standard so this windshield wipers are actually going to turn on automatically when the m850i detects any kind of rainfall even a drizzle so it's kind of like automatic headlights you never have to worry about it it's definitely a plus it's something you get used to very quickly if you've never had it before so big fan of that as well but that about rounds out the performance segment of this review let's now go ahead and check out the exterior of this beautiful 2020 BMW m850i all right and so here is the 2020 BMW m850i absolutely amazing silhouette to this car love how the back end tapers down I love the front end this car essentially may just be one of the best looking sedans or four doors I should say technically is a grand coupe but still an amazing looking four door but anyways let me start up front there is that active kidney front grille and I always like to mention you guys if you can see through that active kidney front grille those are active shutters they actually open and close depending on the engine cooling that's needed so I always find that interesting but yet I can never seem to get it on camera although I have seen it before it is pretty cool how that works but anyways side air curtains of course also will come standard on the m850i and that's going to help direct air around the wheel and tire also icon adaptive led headlights with laser light technology and essentially what that is is the brightest lighting allowed by law and it actually does say actually does say let me show you guys this is BMW laser on the side and that is the very brightest leds that are out there right now they absolutely look amazing of course led daytime running lights also standard automatic feature with those headlights meaning when it starts to get dark out they're going to turn on automatically there for you so you never have to worry about that also a completely unique front end compared to the non m8 series BMWs but anyhow let's go ahead and make our way to the side here first thing I wanted to point out is that bronze satin chrome trim located on the front fender there and that was also actually around the front grill as well I didn't mention it while I was in the front but that is a bronze satin trim it absolutely looks amazing bronze satin chrome mirror caps as well that is what you're looking at right now by the way those side mirrors will be power folding and heated with led integrated turn signals that is all standard of course zooming out a little bit black window surrounds no chrome window surrounds on this black actually looks better in my opinion another thing I wanted to mention is something called soft closed doors there is a spider right there but soft closed doors is something that luxury manufacturers do essentially if you do not shut the door all the way let me show you guys BMW kind of sucks it in there for us that is pretty cool and our spider is leaving us anyways as far as the wheel setup goes 20 inch v-spoke light alloy wheels with performance run flat tires will come standard they look right at home they kind of do have a bronze finish ish to them so that kind of ties together well with the accenting in the front fender and the front grill as well but now let's go ahead and make our way to the back integrated m rear spoiler it is again integrated so it is kind of a part of that rear trunk lid it definitely looks good back there led taillights again will come standard trim level badging just below them and there is a more aggressive rear bumper once again compared to the standard 8 series just below it all let's get to the very bottom and perhaps no definitely the very best part about this car center rear diffuser of course that is pretty much as expected but to the sides this is the best part dual exhaust outlets with chrome tips and there is what they call a sport exhaust system here so like i was previously saying the exhaust note can be altered by the driving modes so i'm going to go ahead and put it in sport driving mode here and you guys will hear all of the wonderful crackle that comes with the m850i as always here is that exhaust clip all right so now since we all round back when it comes to opening that rear trunk there actually is a button on the key fob that's pretty normal but it is a power-operative rear trunk and is also a hands-free rear trunk meaning all i need to do is simply walk up to the m850i and kick my foot underneath and that is automatically going to open up for me so this is great especially if you have your hands full with a kid or groceries or whatever that is a pretty cool feature to have and actually it's the same way to close it it is power operated of course but anyways once opened up cargo capacity is going to come in at 15.5 cubic feet and in that cargo area there is a little cargo net there's a couple little extra cubby spaces if you wanted them but if that was not enough space for you though there's rear seats do fold down for quite a bit of extra space there if you needed it then make your way to the rear legroom that is going to come in at 36.6 inches so for reference i mean even 6 feet tall this is how much space i had back there but perhaps the best part about those rear seats is they are bucket seats this is probably one of the first times i've ever noticed this perhaps because of the car we're in today but usually the back seats are overlooked in fast cars a lot of times but these seats actually do hold you in place and you kind of sink down into them those legrests are kind of angled upwards so it really is quite a nice seat design in the back and of course you have a panoramic two-piece glass moonroof so the rear passengers can see the sky and they can control that view of the sky that is the best part there's actually buttons on the side doors as a rear passenger you can control everything for yourself back there including that glass moonroof just above them also there's side window sunshades they can control that as well there is a rear window sunshade they can control that as well there is a ton of stuff they can control it of course they have rear ventilation back there that's pretty normal and the m850i does have four-zoon climate control so both rear passengers can set their own temperatures as well heated rear seats all of that stuff it's pretty much expected but perhaps again the best part about those rear seats is just the fitment they are bucket seats truly and they feel absolutely amazing as a rear passenger i love them but anyways making our way up to the front seats 16-way power adjustable front seats with adjustment so better helping hold you in place around the corners also thigh support adjustment power headrest adjustment and memory seating and of course they are heated and ventilated and i don't know if it's coming off on film like it is in person here but we actually do have the night blue interior on this particular m850i and it looks absolutely amazing it is a very dark blue contrasted with the black leather it is pretty darn cool it's so much better than just a basic black leather in my opinion it's different and i love it and that continues on to the doors of course the rear seats and all that stuff so it is pretty darn good looking and there are plenty of interior color options by the way for the m850i so well done there of course these front seats are extremely comfortable again with all of those adjustments including side bolster adjustments you're definitely not going to have any issues finding your perfect driving position there but now let's go ahead and take a look at this steering wheel it is tilt and telescoping it is power adjustable leather wrapped perhaps some of the best 10 in 2 grips in the business right now super thick i absolutely love them definitely makes you feel like you're in a race car and this car essentially is a race car for the street steering wheel is also heated that button is located just above the m logo on the very bottom there just below the bmw logo in the center so heated steering wheel for this super cold days in pennsylvania as well but now let's go ahead and make our way to the startup let me first start by showing you guys the key here it is a heavy-duty key so to speak got the bmw m colors on the one side and all of the buttons are actually going to be all located on one side of the key you have lock unlock and that button to pop the rear hatch and by the way the lock button is the bmw emblem in the center there but to go ahead and start this one i am simply just going to put my foot on the brake and press that engine start button which is located just to the left of the shifter there it's open then once started up there is a 12.3 inch instrument cluster digital gauge setup and it is completely customizable by using the steering wheel mounted controls on the right side there and also when you adjust the driving modes those gauges will adjust color as well so if you put it in eco pro driving mode it is going to give you more of a blue hue if you put it in normal it's going to give you more of a reddish hue and in sport it's going to give you a lot more of a redish hue along with a little more black as well so definitely pretty cool how the gauges adjust and also the head up display adjust as well didn't want to mention that when you change those driving modes it just changes the color essentially eco pro gives you blue normal gives you white and sport gives you red so it's what do happen to like that as well but now let's go ahead and make our way to the overall interior quality because this has a ton of it anthracite headliner stainless steel fabric interior trim that stainless steel is everywhere there's tons of aluminum trim details including the pedals and the sill plates the sill plates are aluminum and they are illuminated the m850i illuminated into those sill plates so i found a nice dark little area to show you guys that i thought that was pretty awesome there is also marino leather and nappa leather finishes throughout there isn't really a whole lot of plastics at all going on in the m850i pretty much as expected though but heated front armrest is another thing i always like to mention with a lot of BMWs actually so usually you get heated seats and the steering wheel a lot of times but almost never the armrest so i think that is pretty cool universal garage door openers can be found just beneath the frameless rear view mirror there and just in front of the cupholders there is a wireless phone charger there's also a usb charging port 12 volt power outlet again two cupholders just behind the shifter you have an electronic parking brake and within that center armrest that is heated again you will find a rubberized bottom so things don't slide around as much another 12 volt power outlet any phone charger as well in there so that is pretty cool too and again there's aluminum trim to open the glove box it is finished very very nicely and perhaps one of my favorite parts about all of this is all of the ambient lighting the blue ambient lighting that ties together so well with this night blue interior absolutely love it but anyways let's go ahead and make our way to the tech display 10 and a quarter inch color touchscreen display and that is one way to control it it is a color touchscreen display but you can also control what is on that screen using the circular dial and buttons just to the right of the shifter and that's probably the easier route when you're actually driving but i found the touch screen is usually easier when you're actually stopped so it's good to have both but anyways bluetooth and audio streaming will come standard apple carplay one-year trial after that you have to pay for it still no android auto quite yet factory navigation system will come standard on the m850i though and perhaps one of the coolest things on that tech display is there are experience modes you guys have all heard of driving modes right well there are experience modes on the m850i there's executive expressive well-being and end mode and essentially all of those will adjust different aspects of the car everything from the ambient lighting to the sunshades to everything so i just put it on expressive mode and it completely shut everything the dual panel moonroof closed the side sunshades in the back closed the rear window sunshade it is like you are an executive in the back seat it's absolutely awesome and of course if you press that again you guys can hear it it all opens back up how freaking cool is that and again it all adjusts the colors as well it can adjust the ambient lighting to make it red or blue or whatever but love experience modes bmw well done there but of course you can also check out your radio settings up on that screen and by the way there is a 16 speaker Harman Kardon surround sound system that will come standard with nine tweeters five mid-range speakers two bass speakers and 464 watts but that's not the one we have today we have my favorite sound system produced in any manufacturer out there i've said this in all of my videos i feel like just about bowers and wilkins 16 speaker sound system 1400 watts that is ridiculous and that is going to go for $3400 by the way but having said that let's go ahead and turn on the radio see what we got playing today and let's test out the clarity of this one i felt like night at the rocks very there for a second that was ridiculous you guys got to experience 1400 watts at some point it is crazy it's like you're at a concert it comes at you from all directions the clarity is really what's on point the most with 1400 watts the bass is amazing of course but dang that sound system takes you to a different world every single time but anyways last thing i wanted to mention on that tech display is when you do put the m850i in reverse you will find a rear view camera with a 360 degree view and by the way the side mirrors also tilt down when you put this car in reverse but with that 360 degree view you can you can actually just touch the screen and it will show you different angles like what's to the left of you what's to the right of you there is exactly what's behind you and then there's the automatic setting but that is pretty cool it gives you different angles as well with a digital rendering of the m850i looks pretty darn cool if you ask me but anyways as always that is going to lead us into safety and so to start there are front side and side curtain airbags also in the back you have latch aka lower anchors and tethers for children for the rear car seats also standard rear child door locks auto dimming rear view mirror and a driver side auto dimming mirror as well adaptive cruise control will come standard you guys probably saw the sensor in the front of the car there frontal collision warning automatic city collision mitigation system with automatic braking daytime pedestrian detection and there's also some optional safety packages including the driver assistant's professional package that goes for 1700 that's going to give you partially automated driving essentially with traffic jam assistant so that's always nice if you're driving home from work and you're stuck blind spot warning system with rear cross traffic alert is available there is also a night vision with pedestrian detection package that goes for $2,300 but that can actually see potential road hazards up to 1,000 feet in front of you and cooler objects are going to appear in blue warmer objects are going to appear brighter like deer so to speak or any other animals or people for that matter so that's definitely a plus if you do a lot of night driving as well and so but anyways that is about it for this one you guys thank you so much for watching feel free to follow me on social media at the bottom of the screen there if you like be sure to hit the subscribe button and the bell notification button if you're in the new car reviews that is what we do here on this channel do appreciate you guys watching more than you know and i will see you guys in the next video stay going


Why is English important in business? We now live in the age of globalization where competition and challenges are on the rise. Economies, cultures, technologies and businesses are all part of this worldwide progress. People are demanded not only with a higher level of education, but also with skills. One of the most essential skills that a person should possess is the ability to communicate in English. According to Harvard Business Review, English is now the medium of global business communication. Numerous multinational companies are now using English as the common corporate language to facilitate communication and performance across business endeavors. So, the question is how can non-native English speaking professionals keep up with globalization? This is where business English comes into play. Also known as English for specific purposes, ESP, it focuses on the English language skills necessary to communicate in an increasingly global environment. Consequently, business English courses need to be carefully planned. As stated by Communique Language Training, the students should initially have their needs and objectives, as well as their language level, analyzed before the specific training program commences. So how do students learn from business English courses? Some business English language centers offer two kinds of teaching structures, the assist learning and the material-based learning. In assist learning, the teacher helps the student in a work-related concern. For instance, the student has to reply to an email from a client in English. The teacher assists by checking the grammar and punctuation to make sure the message looks professional. Another example is the student prepares for a presentation in English for the first time. The teacher practices the presentation with the student, checks the slides and gives some advice to deliver it effectively. Normally, there are no materials needed for this type of lesson and the teacher carries on the student's request for the duration of the class. Conversely, in material-based learning, the teacher uses training materials for the lesson. This involves soft skills communication development such as grammar and vocabulary, and business-centered skills such as formal and informal email writing, making presentations, telephoning skills, teleconferencing, participating actively in meetings, job interviews and attending business trips. Moreover, these skills encompass different industries such as finance, tourism, information technology and manufacturing. Disadvantages when teaching business English Business English training has been very useful for both professionals and students who want to improve their communication skills to be more competitive in the business world. The objective of the training focus is not only on the business English communication skills that the students will acquire, but also to enhance their personality, leadership skills, confidence, and understanding of diversity in a professional perspective. While there are a lot of advantages from it, there are also some drawbacks that teachers may face during the class. Since most of the students are professionals, they are often preoccupied with work. The quality of the lesson might be compromised and the duration of the class is reduced. The schedule of the students also depends on their availability, so progress monitoring is going to be a challenge. While the knowledge of business is useful, it is definitely not a prerequisite to teaching English to business people. Being a business English teacher is both challenging and rewarding. It may come across as an intimidating subject to teach but just because it focuses on business does not mean that a teacher needs to have a degree or experience in the field. As what IDTT mentioned in one of its modules, while the knowledge of business is useful, it is definitely not a prerequisite to teaching English to business people. It is more like tailoring general English skills into the needs and requirements of the students. So, is English important to business? Definitely. Having a good set of English skills is your license to business success. Are you ready to teach English abroad? Speak with an IDTT advisor today to put together your personal plan for teaching English abroad. Send us an email or call us toll free at 1-800-490-0531 to speak with an IDTT advisor today.


Yeah, welcome back to the Fire and Water Cooking Channel. I'm Darren and today we're going to do a comparison cook. I'm actually going to do, these are, they're chuck roast but they were labeled shoulder roast from my supermarket. So I label them as chuck roast but they had them labeled as beef shoulder roast. They're both kind of smaller about maybe about two pounds each but I got them all packaged up vacuum sealed already. I did season them with my beef rub and what I'm going to do is I'm going to compare the two. I'm going to sous vide this one at like 138 for 24 hours and then we're going to, on this one I'm actually just going to cook that on the barbecue itself and I'm going to try to hit that medium doneness by using just the grill and a thermometer but this one has to go in tonight or today for the for the cook tomorrow so I'm going to sous vide it. So this has to go in for 24 hours. This one we're going to put back in the refrigerator and throw it on the grill tomorrow. Hopefully this one will only take four four hours or so maybe a little bit less by cooking it on the grill but then we're going to kind of see which one comes out better which one is more tender the doneness level all that see which one actually looks tastes and the tenderness see how they all turn out together so so I'm going to go ahead and throw this one in the sous vide bath for 24 hours at 138 and then we'll see you guys tomorrow for the rest of the put a meat probe in it so we can monitor the temperature of it I'm going to keep it on this rack so it's easier for me to get on and off and right now it's reading 51 degrees and we're going to wait till that gets up to right around 130 to 140 back and I just pulled this shoulder roast out of the sous vide so I'm going to go ahead and pat it dry and I've got the um got the sear box on my camp chef heating up and the shoulder roast that's on the grill is sitting at like like 145 or so internal temperature right now so it's it's pretty much done as well so I'm going to go ahead and season this up just a little bit more just a little bit more of the beef rub just to make up for some that might have came off during the sous vide just a little bit not too much at all because we don't want it too salty or just enough to replace some that came off during the sous vide bath so that's it and I'm going to go throw it on the sear box and get some color to this and take the other one off and we're going to put them side by side and see what they look like together so hopefully got a good angle here see how that's just turning out it's looking pretty good there it's got a nice red mahogany red color there and this is my sear box that's all that's up pretty hot right now so I'm going to go ahead and throw the sous vide one right on there then I'm going to close it up I got that set to high so that's very hot so we're going to sear that up just for a couple minutes about a minute so I'm going to go ahead and flip that over here and see it's got some grill marks on it already so give that another minute on that side and it's been another minute and this sear box on the camp chef supposed to get up to about eight or nine hundred degrees and I'm going to I'm going to give it another 30 seconds or so on that side I haven't really measured it but it does get pretty hot so I'm going to get about another 30 seconds 40 seconds on this side and then we'll do it again on the other side then we'll be done we'll bring these both in the house all right guys I got them off the grill and they both look pretty good the sous vide one looks a little darker and I got those you know grill marks on there the smoke or only one though has its own different different look to it it's got that real red mahogany color that you usually get when you smoke something for a long time this looks more like a steak this more looks like a roast or a brisket or you know ribs when you do those on the smoker so this one here it's probably going to be just a little bit more a little tougher but it's kind of in the end it's got a nice smoke ring to it let me show you that make sure you guys can see that it's got a nice smoke ring to it um it's still a little juicy I can see some juice in there but it does definitely have a nice smoke ring to it I'm going to go ahead and cut this sous vide and grilled one now this one does look a little bit more medium but it doesn't have a smoke ring but it does look more like a medium roast it's not medium rare because I didn't cook it medium rare I cooked it more along the medium line and this is right on the edge so you can tell that it came out pretty much medium across the board it is a little juicy so I'm going to go ahead and give them both taste see which one's which here so this is the sous vide one I'll give that one first give that a bit right into a piece of fat um which really is not that bad I can it's a little chewy right there where that sinew goes through but I went right right through it pretty easy so this is kind of the same it's got that little bit of sinew right there but I'm going to go ahead and take a bite of this very flavorful um both of them are this one is just a little bit more chewy this one's had the benefit of being in the sous vide for 24 hours so um you got that going for it it is a little bit less done because of that um cooking at 138 the whole time the internal temperature this probably turned out around more like a 145 or so 148 probably by the time it was done but both of them are really good just a little bit different texture and I guess it all depends on what you're looking to accomplish out of it this is a little bit more tender a little bit less done than this one this one's got a different flavor profile it's got more smoke to it because it sat on the smoker for four hours so um it's got a nice smoke ring to it both of them are really good I say try it both ways because it all depends on what you're looking to get and what you're um what you're wanting to do as far as your final product this one is more steak-like more medium done a little bit more tender this one is more smoky more briskety type you know uh doneness roast let's try out both of them guys I think they're both great um make sure you subscribe and follow us on facebook and our facebook group and our facebook page follow us on twitter thanks for watching I'll see you on the next video


So it's the fifth annual Orca Halloween Parade. We're so happy to be here and say hi to all you folks that are going to be out trick or treating tonight. We can't wait to see all the kid costumes and the parent costumes as well.  I can't wait to see what's up people's sleeves. Hi Renaissance princess. How are you? I'm good. How are you? Thanks for dropping off in this era and coming back from time and visiting us tonight. It's my pleasure. And we've got Dr. Robert on duty this evening as well. Anybody need some assistance? I'm here to help. I wouldn't be too sure of that but you know perhaps splinter, hangnail, something of that sort. Dr. Robert will be set and able to help you. And we'll see. It's all hollows eve tonight. It's very exciting. I wait for this night every year and it's because tonight what they say is that the veil between the spirit world and the living world is at its very thinnest. So if people feel like they want to go test out what the spirit world is like, hop on through. Oh, I see some people coming over and perhaps they're going to be very afraid. We've got a stormtrooper and Yoda and Darth Vader and Iron Man and the green guy. Trick or treat. Wait you guys turn around without even knowing it. Excellent choice. Have fun guys. Trick or treat. Yeah, you guys look great. May the force be with you. Hi, welcome. Come on over. Come show yourself. You're on Orca TV. Yeah. Hi to the folks at home. Hello everybody at home. You may have some candy. Oh, that's a big glove. You're still able to grab. Bye bye. I see more people. Oh, Dr. Robert. I see a patient coming your way.  And someone who needs attention. Have fun tonight. Come on over everybody. Come say hi. Don't be shy. I've got candy.  You guys look fine tonight. Be safe. Hello, little kitty. Yummy. Oh, pirate girl. Trick or treat. Perfect. Did everybody. Hi, trick or treat. That's going to be for mommy or daddy. All right. Bye bye. Yeah, I'll enjoy that's mom's dibs for mom. Have fun guys. Adorable. So adorable. I see other people making their way. Did you know I was hungry? Did you know I was hungry? No. Pick a treat. Have fun tonight guys. Come on over. Tell me. Are you a pirate skeleton? Just a pirate. I'm a zombie joker. Zombie joker. Very cool. Very creative. See you later guys. Have fun. Oh yes. It's a night of lots of walking.  Hi. Come on over. You guys are fabulous. Wait. Would you like candy? I really like them. Can you see? Good. Can you hear? Oh good. Be safe. Are you the cat in the hat? Christmas kitty. Perfect. And you are a very special kind of bird. What kind of bird are you? I don't know. You don't know? Oh, that sounds good. With fangs. I love you. With fangs. I love it. Choose a treat. Happy Halloween. It's hard to do in your glove. Oh, you're trying really hard. You got it. Have fun. Bye-bye. Here, princess. I'm going to have you hold the ball if you don't mind. Hello, wolf man. Or a werewolf. Happy Halloween. You're welcome. Puppy dog. You look lovely. Oh, perfect. A classic. Bye-bye puppy dog. Thanks for coming. Bye-bye. Have a good night. You're welcome. Wow. I love to see what people decide to be and how they can be creative and kids mixing things together. Oh, and I see some adorable children walking our way over now. Come on over. We've got a builder and we've got, oh, look, we matched Snow Princess Elsa. My princess has treats for you. You did great. That's perfect. Yeah, well, of course you do. Happy Halloween. Happy Halloween. Bye-bye. And I love how the toolbox holds the candy. It's perfect. Just enough, too. Kids are like, I don't know why they let me take candy tonight. But they do. Some reason on the night, tonight only, children can go to people's houses that they don't know and get candy. It's a beautiful thing. It really is. It really is. There are some things about Halloween that I looked up for this very occasion.  See, there's information behind why we do the things that we do. There's history. And black obviously represents death. And orange represents endurance. So it's meant to signify the struggle between life and death that we talk about so much on Halloween. Hello, witches, witches everywhere. Happy Halloween. And Santa, you'll be busy later. One of Santa's helpers. Everyone needs helpers. Ho, ho, ho. Happy Halloween. Come on over, guys.  Wow. Cool mask. So can you just let the folks at home see how cool turned this way? Because it looks to me like you made it yourself out of tinfoil. Is that correct? Not if that's correct. It seems like it might have been fairly easy to create. Not if that's correct. Excellent. Are you having a good time tonight? Happy Halloween. Very good. You nod really well. Happy Halloween. Hello, you guys. You look lovely. You look nice and warm. Yeah, very good idea. Hi, mom and dad. Do you need any candy? You're good. Interesting fact about Halloween is that Harry Houdini. Do you know who Harry Houdini is? Yeah. Why don't you describe for the people at home who Harry Houdini is? He's a magician, isn't he? A very famous magician. I almost said musician, but I didn't. And he was known for being able to get out of predicaments and being all chained up and being able to get out of things. He oddly enough, in 1926, died on Halloween. And he died because he suffered three punches to the gut, which resulted in appendicitis. Which killed him? Interesting tidbit about Halloween and Harry Houdini. Pretty cool, huh? Let's get this up in my sleeve here.  There are a couple countries in Europe that are a little... I think Americans do it a little bit over the top, but you know, we're American. We do do things over the top, don't we? And I think that it's too commercial, but I love it. In Mexico, for instance, it's Day of the Dead. Dia de los Muertos. Thank you very much.  And that's tomorrow, actually. And so tomorrow is All Saints Day. And the day after that is All Souls Day. So there are three days in a row during this time of year where we do ancestor worship and ancestor remembering. He's dressed up as a shopper, wheeling a shopping cart. I will put some candy in it. Actually, I found out that Ireland, oddly enough, Ireland is said to be the birthplace of Halloween. I don't know why. I think it's because of the Celtic tradition of Ireland. And that actually we've been celebrating people in the world have been celebrating Halloween in some form or another for over 6,000 years. That's a long time. I see a firefighter coming this way. Trick or treat, come on over. I can give you a candy. It lures them every time. God, I love kids. You learned about Halloween? I didn't do my research like you. I found out that over 50% of American households decorate their yards on Halloween. 50% of Americans do. What the other 50% is doing? I have no idea. But 50% decorate their yards for Halloween. I know I did. The other 50% are hibernating. The other 50% are hibernating? Dr. Robert. How's it going, ladies? Reporting for duty. Well, we've seen some firefighters and we've seen some pirates and we've seen a dog and a real dog now coming in. Hello. Come on in. Happy Halloween. Can you show the folks on the camera your costume? Thank you. Oh, she's got the best seat in the house. Good job, guys. Happy Halloween. Do you have people running after you tonight because they want to find you? I know those gloves. Happy Halloween. And jazzy cat. And fancy girl. You guys say hi to the camera. And ninja man. Hey, Dr. Robert's got some more candy. Oh, perfect. Thank you. You might have to use two hands.  Would you like to choose some candy? Yes, please. Go ahead. Have a good night. You're welcome. Of course you can. Come on over here, guys. Some Harry Potter characters. Oh, do you recognize these people? I do. Professor McGonagall and Hagrid. Yes. And Harry. And which Harry Potter character are you? Nice. Oh, nice job, guys. Reena Tutu. Butterfly Princess Tutu. Oh, of course. Of course. Very nice. Way to get it all in for the one night. Yeah. It's perfect. You are welcome. Have fun. Thank you. Yes. She is going to show me. Oh, it's beautiful. Very nice. And look at you. Dragon. Whoppers are very popular. A pink mermaid. Is that... Oh, no. You're the one. It's the tail. What does a dragon say? Pretty funny. Would you like some candy? You guys did a great job. Have fun tonight. Happy Halloween. You got to go get some candy. Happy Halloween. I think someone's looking for you, mister. What's the Star Wars... Yeah, the Star Wars thing. The theme song. Stormtroopers everywhere. It's very popular. What do you mean? What you are? Oh, I'm sorry. I love it. Are you a fairy? Yeah. And I see a princess. In good and princess... There's a lot of people coming our way. 68% of people want chocolate for Halloween. Just so you know. 68% of children prefer chocolate. Happy Halloween. Goblin witchy kind of thing. Correct me. Oh, and a 19 poodle skirt.  She's a banshee. A banshee. Okay. Dragon dinosaur. And of course you are, darling. Of course you are. Have fun. Crush writer. Thank you. And a witch beautiful hat. Good job.  Look nice costume. I'm a little scared. Show the folks at hoe containers. I love it. Very creative. Nice job. It's Dorothy. The Wizard of Oz clan. Linda. Tin man. And the monkey lot. I hope you find your way home. Bye-bye. I love your ruby red slippers. Do we have a ninja? I feel very safe with so many ninjas nearby. Chick-a-tree. I see another very... Oh, it's a spider. It's like a very muscular Spider-Man. I see I show my age when I don't know what these kids are. Hello, very muscular Spider-Man ninja. What are you? You guys look lovely. Have you not lost it?   Oh, I was going to say. Very clever. Very clever. And choose a chocolate. A wonderful ray and Darth Vader. Way to Cal Ferry. I was getting there. Wonderful. Wow. No, Julia has enough. Thanks. What are you? A lot of candy corn that get distributed on this day. A billion pieces of candy corn. Hello. Can you imagine having to count that? Hello, nice cape. To know that only 6% of children want gum on this night.  It's a strategy, really. It's a strategy. If you want to be a house that everybody goes to, give out full-size candy bars. Then you're in. You're in for a lot of money on this evening. Because you will make a kid's dream come true. It is true. So we'll see. We'll see if we get any more visitors tonight. I always wonder how old is too old to go trick-or-treating. What do you think about that, Renaissance princess? As long as you want to go trick-or-treating, go ahead. I like this game. It doesn't matter how old you are. So you don't think it would be weird if I went out trick-or-treating tonight? Well, I think that would be a little weird. Oh, then there is an age.  Okay, so within reason. Yeah. So maybe if you own a home, then you should be getting candy, not using candy. Hello, Dolls Vader. We'll wait for you to get all set up. What's it like outside? Got it. Well, I hope you make out really well tonight. Are you thinking you're going to fill that bag? Maybe. Good luck. That's the hope, probably. Good luck. See you later. Ray Paul Top. Love the chest hair there, friend. Oh, look at that. The hair makes the outfit. Half of your head is on TV. Yeah, I see that. Yeah, okay. So many wonderful costumes. Dr. Robert, look at how quickly the bowl empties. I swear, I haven't had a piece. Nobody likes whoppers? I love whoppers. I'd rather ever heard she's buying whoppers. So, Renaissance princess, Scottish girls, are you Scottish? No. Scottish girls believed that they could see images of their future husband if they hung a wet towel or a wet sheet up in the fire on Halloween night. The image of their husband as opposed to your recording of people going trick-or-treating door-to-door to get candy started in 1927, the year after Harry Houdini died, as a matter of fact, and the first time that people ever were recorded going trick-or-treating in North America happened in the Lackey, Alberta, Canada. Huh, it's true. It's true. Here at ORCA, we want to be educational as well as public and government, all at the same time. Are people going to come and see us? Okay, so this is a good one for parents at home. And I think that this statistic actually needs to be a little bit higher, but from my research, it says that 90% of parents admit to stealing candy from their children's candy bags after Halloween. Only 90%, come on now. The other 10%, they were lying. They steal it too. Only I don't steal it. I do it right out in the open. Oh, you weren't supposed to hear that. Oh, well, I did. Evil times, people would go door to door and actually poor the peasants would go door to door and ask for prayers to be said for they're dearly departed. And in exchange for prayers being said for they're dearly departed, the peasants would receive something called a soul cake, which is kind of cool. It was called souling, going to look for soul cakes. I think they are looking for a modern version of a soul cake in the form of a Hershey's bar. Come on over and I'll give you some candy. It's not every day a grown-up's going to give you candy. So come on over, beautiful angel. Darling, how could I not know? Poke your bones. They look wonderful. Hello. Are you a champion? Yeah. Nice. Thank you. Is it hard to talk with those teeth? No? Kind of. Lots of choices. Lots of choices. What to do? Your friends are leaving. You better run to catch up. That's so great. Happening outside. Oh, what is... Okay, what's the newer R2-D2? BB-8. Thank you. I mean, I'm stuck with R2-D2. That's what I know, okay? And then they change it on me. I forgot already. I am Darth Vader. I don't think that you guys are supposed to be buddies. Perfect. See you later. You're really busy? Yeah. Lots of kids getting candy? Yes. Yeah. Are you going to get more later? Yeah. You're having a party? How fun.  I think Halloween should always be on a weekend.  I can't see. Is that a real beer? All right. Just checking. Hello, ladies. Wow, she's fine. What is... What do you think that is? Hello, Star Wars people. And you're... Vampire. Vampire. I don't have my teeth, though. You don't have your teeth? No, they're white chocolate. I know. It's hard to eat chocolate with those teeth. Oh, lovely costume. Very cool. Our ones are so confused this evening going, what is going on that we get to go and do this? I love it. I love it. What was your very favorite costume that you have ever, ever been? I don't remember all of them, but I remember I was a fairy princess one year in a little pink costume, and that was very cute. You were so little and so cute. Back when I could dress you. Let's see if we get more folks coming over to see us. So here is another thing to try out this evening.  Now Folklore doesn't specify what distance you need to walk backwards with your clothes on inside out, but if you do that on all hollows eve, then when the clock strikes midnight, you will be rewarded with a vision of a witch. Why don't you try that? So let me decide to see a witch. In which case, try it out. Walk backwards on this night with your clothes on inside out. If you do not desire to see a witch, then wear your clothes regular, proceed forward, and don't look behind you. Okay then. Now I probably won't be awake, but if you do all of that, and you are awake at midnight, then you may see a witch. For you folks that try it out, let me know if it works out. We might be experiencing technical difficulties, I don't know. This entire time I may be not miked, and you are all just seeing me move my lips. I have no idea. Pounds of candy corn, that's what I was talking about. 35 million pounds of candy corn are distributed. That's a lot of candy corn. People seem to love candy corn. I think it's just okay. I think it's just okay. Oh, I have another fact for you, and then I will try to think of a Halloween joke. But another fact for you is that an average pumpkin, an average pumpkin, Evie, has 500 seeds. Lovely. Evie in particular really likes the insides of pumpkins. I really don't. And last night we carved ours, and the insides made her heave. So welcome, we will give you candy. Are you Hermione? What is your costume this year? Hermione green. I like your time turner. Come on over and we'll give you candy. Hello. Happy Halloween. Happy Halloween. You look great. Ladies, you look great. Love your jacket. Ugh, with a flair. Beautiful. Come in, we will put candy in your bucket. You want to? Yeah, you know. One, two, you're good. Just go with mama now. See you later. She's paralyzed with fear. Very cute. Good job. I know they're like, okay, we'll take the candy. Hey, do you know that 90% of parents sneak candy from their kids bag after the holiday? Are you in that percentage? I think you may be. It's really, you're doing it for the child's behalf. Really? That's what it's about. Hello. Have fun. You look beautiful. Come on over and show me your costume. You look fabulous. Walk, don't be nervous. Are you fired? Are you fired? So wonderful. Did you make your costume yourself? My mom did. Your mom's a genius. You should tell her that a lot. Okay. See you later. Dr. Rob, did you get more supplies for us? Boy. I'm surprised that there's still candy left out there for you to buy. We have more candy. We have more candy. Come and see us. We have lots of candy. Really, me saying that to little children would be so inappropriate any other day of the year. Oh, now someone I can recognize. Now he's going back to my time. Sesame Street on PBS. This I get. Okay. Thank you. Yay. Happy Halloween. Bye-bye. Whenever they'll give me candy. So sweet. Let's see. Oh, we've got like a ninja. Come on over and I'll give you a piece of candy. Yeah. That's not a bad deal. Chick-a-tree. Hello. Really good. Thank you. Really good. Oh, I see a very scary ghost. Come on over and I'll give you candy. We have lots of candy for you to come and get. You look wonderful. I like your bucket. See you later. Talk and say hi to the camera. Is everything going okay outside right now? Yeah. Yeah, it's cold. It's cold. Looks like you've got a ways to go. Get out for a few more hours. Start by getting some candy here. Come on over, Ballerina. You're beautiful. I love it when parents get into it. The Star Trek or the Star Wars? The Star Wars. Star Wars. See the streets. Oh, really. Out on the streets there's packed. There are so many people out there. It is a wonderful Halloween evening. And it's only getting started. Once we finish up here all the kids will go to the neighborhoods and they'll leave more trigger treating and a lot of candy.  A monkey and a banana? Perfect. Say hi. Hello. And let everybody see you. and let everybody see you. Hello, Ghostbuster.  So you don't have any in the contraption that traps them yet? She puffed my snowman. Right, right, right. Well, that's right. Hello, beautiful girls. We've got a gypsy and a fancy witch and a poodle skirt girl, 1950s. Look at your shoes. They look like saddle shoes. You look great, ladies. Have fun. Very nice. Thanks a lot. Hello. There you go for the full effect. That is wicked scary. You might need a doctor. I like the makeup. I formed it where I wanted it, and then I added the fake blood. That's really cool. I was just going to ask you if you wanted to do that one. Good for you. She's a little subdued. Yeah, yeah. Oh, right. I heard about that this year. I learned all about that. Bye, guys. Have fun. Hello, Stormtrooper. Don't shoot. Don't shoot. Oh, good choice. Out of the bowl. Candy. You look... It's one of my favorite colors. I can tell. Can you turn and wave to the camera? Oh, there's a spider. Is that a spider in your hair? That's what that is. That's cool. Have fun tonight.  Put your bucket down. It's those gloves. Those gloves. See you later, guys. So polite. Children are so polite. Parents have taught them well. Glad to see. Glad to know that Montpelier is a great place to be able to come out and do this stuff. So, you have doctor jokes? Well, feel free. Why didn't the skeleton cross the road? Because he didn't have the guts. Where does the boat go when it gets sick? Ta-da-da! Why are you doing that? So he doesn't know what he's seeing. Oh, okay. Says, when a patient was wheeled into our emergency room, I was on nurse duty. On a scale of zero to ten, I asked her, How bad is your pain? She shook her head saying, Oh, I don't know. I'm not good with math. The delivery could use some work, but the joke has merit. It's hard to do it with a surgical mask on. Yeah, it's a good thing you're not a real doctor. Hate to read it to you, but... Yeah, you got your degree online. Don't think that worked out very well. What? You being a real doctor. Why not? Hello, big tigger. Did you see the orc in the cranky? I love orca, Frankie, orcas. Fworkin' stuff. Fworkin' stuff, you know. I was trying to combine orca and frankincine. It doesn't really work. I see someone here to protect and serve. Come on over, police officer. It's okay. We'll come to you. To you, buddy. You don't need to worry. Bye-bye. Have fun. I think there is a fellow doctor here. Doctor, stat. You're needed in surgery. I know. You're running to surgery now? Thank you. Are you a giraffe? Lovely, toasty, warm. You are welcome. Come on over and get some treats. Oh, it's a mummy and a grim reaper and a storm... Help me. Stormtrooper? I'm gonna call it that. Have fun. Can you show everybody at home? Help two kitty cats. Traveling in a pair. Have fun. Oh, come on over. You guys are too beautiful to miss. Come on over. The precision with which children use to put their candy in bags is really remarkable. My Marat... I can't talk. Marat, come on. Thank you. Oh, my goodness.  That's right. Excellent. Excellent. Hello, Superman. Bye-bye. Are you a rocket ship? He's an astronaut in the ship. Authentic. You look great. Wow. You guys did a nice job making a costume. See you later. Have fun. Happy Halloween. You look great. Perfect. I'm not hearing anything. Boom, boom. Maybe because that's not a real sunset. I think you should put the microphone up to your face when you're talking. I see you, ladybug. Even the doggie is dressed up. Or is that just his coat? Oh, he's Chewbacca. That is so funny. Very fun. Yeah, you too. How does shampoo does a ghost use? I don't know. What kind of shampoo does a ghost wear use? Shamboo. It's not that good. I get it. I know. It's called filler. That's right. I see some more kids. Come on over if you'd like some candy. We're going to need to open a whole other bag. Come on over, friend. Do you like whoppers? We got so many whoppers that we want them. Oh, it's a werewolf and a mystery man. That's a wicked cool costume. Oh, look at you guys. I love it. Did you want to say something to anybody at home?  Good. Happy Halloween. Good choice. Bye, friends. Have fun tonight. I would give you my coat, but you may not want to wear it. You don't need a coat. I know. Why do adults always want to put a coat on me? I'm going to have a good time getting more candy at other places. Oh, you're going to have to carry it. That's what happened.  Mute ninja turtle? May the forest be with you. And also with you. And you and you.  Have fun. Hello, spooky ghost. Hello, Elsa. Hello, Batman. I think I am. I was. Just going to say that. I got it, Leia. I was just going to say that. May the forest be with you. Mario, did you guys get some candy? Come on over and choose a trick. Chick-a-tree invention or something. That's here. You got all sweet and lovey and then scary gnarly. He's rough around the edges. What's the Batman theme song? I can't remember. It's yourself already for camera. Continue these policies against our Native American populations. And we need to wake up and mainstream media needs to start paying attention. Amen. Amen. Woof, woof, woof. Lovely. So many people out and about. We'll see how many more we're getting tonight. We should do a time check because as soon as... I don't have my glasses on, Adam. As soon as this is done, the candy's mine. Dr. Robert. I wouldn't prescribe that for you. Seven minutes is what I was told. No worries. No, no. I see some more friends coming down. Come on over and get a treat.  Give me something good. You look lovely. Thank you. He's still learning. The doctor, I mean. Have fun, guys. What, guys? Have a great time.  Hello. Look, the ghoul is... Do you need to refuel? You know what? You can't have too much of a good thing. Got these extra woppers in over here. No, no. I like the woppers. You just stuck them in there anyway. Oh, I... Chick-a-tree. You look beautiful. You guys see where the kids are? Between devil and bat, I wasn't sure. A wolf man and a beautiful ballerina princess and a ninja. Wow, that is some skirt. You can twirl very easily in that skirt. Up 90% of grown-ups. I'm telling you, I think it's more like a hundred. Oh, I am easily in that 90%. Steal their kids' candy after Halloween. Only 90% fessed up. Oh, no, it's a hundred percent. Get some candy. Princess Anna and the Wicked Witch. Are you going to come and get some candy from us? Or make a choice. I love doing the movie Frozen. Very brave. Oh, mystified. What is going on? We have a devil. I thought it was a devilish girl. Chick-a-tree. I'm winning down Anna's spider. I hope Mama has guys who look adorable. Have fun. That's a lot of duct tape on his head. Duck tape does anything. You want another one for the other hand? I don't need to check IDs. No, I'm just joking. Just joking. I don't buy it for one minute. Clearly not a plastic surgeon. Thank you for your service. Thank you for your service. Happy Halloween. I like that your bags match. Nice.  Come on over and get some candy. It's okay. Make a choice. You can choose whatever you would like. You don't want to choose? Your mama can help you. You look great. Really cool costume. Your outfit's very cool too. Bye bye. Oh that is a cool, cool mask. And it matches your bucket too. And he has lots of stillness to avoid. He's too cold. Oh it's chilly outside. Yeah. Well come and take a piece of chocolate. Fun. Thank you. You are welcome. Need energy. Have fun. I see a few more children coming in. We are just about ready to close up shop for this year. Have fun ladies. Happy Halloween. You are some ticker treaters once. Calling. Trick or treaters twice. I see a trick or treater. I'm magic. Come get some candy. Trick or treat. You're welcome. Over there. Yeah we're going to do a few more. And then we're going to sign off for the... Oh maybe not. Maybe we already did the princess cow fairy girl. I think we did. She already did. Because she likes us. That's right. What's Jackie doing out there Dr. Robert? She is inside. Okay so I would like to thank you guys for helping me this year. Of course. And thank everybody for coming out and showing us your fabulous Halloween costumes. We look forward to doing this again next year. Have a safe and happy Halloween from all of us at Orca to all of you at home. Good night.


Hi everyone, welcome to my talk on big data insecurity. I will talk about how we can analyze these big data infrastructures from an offensive point of view. Before starting, let me introduce myself briefly. My name is Sheila. I work at Heidel Research at Dream Lab Technologies, a Swiss infosec company, and an offensive security specialist with several years of experience. And in the last time I have focused on security in cloud environments, cloud-nated, big data and related stuff. Ok, so let's go to the important things. There are some key concepts I would like to explain before jumping into the security part. Probably the first thing that comes to mind while talking about big data is the challenge of studying large volumes of information and the technology that will take care of it. Although that's correct, around the storage technology there are many others of great importance that make up the ecosystem. When we design big data architectures, we might think about how the data will be transported from the source to the storage, if the data requires some kind of processing to be consumed, and how the information will be accessed. So the different processes that the data goes through are divided into four main layers that comprise the big data stack. We have the data ingestion, that is, the transport of the information from the different origins to the storage place, the storage itself, the data processing layer, because the most common is to ingest raw information that later needs some kind of processing. And finally the data access layer, basically how users will access and consume the information. And let's add one more layer here that is not part of the big data stack, but we have this layer in all big data infrastructures. The cluster management is really important. So for each of these layers there is a wide variety of technologies that can be implemented because the big data stack is hugely big. This one arches a few of the most popular ones, for example Hadoop for the storage, Spark and Storm for processing, Impala, Presto, Dread for accessing the information, Flune, Scope for the ingestion, TwoKieper for management, for example. So when we analyze an entire big data infrastructure, we can actually find many different and complex technologies interacted with each other, that they meet different functions according to the layer of the stack where they are located. So let's see an example of our real big data architecture. Here we have two different clouds, one in LVVS and another one in any other cloud provider. Both are running some Kubernetes clusters that are serving different applications. And we want to store and analyze the logs of these applications. So we will use Flymbit to collect all the application logs, and write them to Kafka for the first cloud, and stream them using Flune and Kinesis to an on-prem Hadoop cluster. So within the Hadoop cluster, the first component that will receive the data is a Spark instructor streaming. This one will take care of ingesting and also processing the information before dumping it into the Hadoop file system. So once we have our information here, we want to access it. So for that, we could implement, for example, Hive and Presto. Or instead of Presto, we could use Impala, Dread, or any other technology for interactive queries against Hadoop. And if we are developing our own software to visualize the information, we will probably have an API tacking to the Presto coordinator and a nice frontier. And finally, we have the management layer. Here it's super common to find Apaches to Keeper to centralize the configuration of all these components, and also an administration tool like Gambari, or a centralized log system for cluster monitoring. So this is an example of our real Big Data architecture and how the components interact with each other. So back to security, the question is how we can analyze these complex infrastructures? I would like to propose a methodology for this, where the analysis is based on the different layers of the Big Data stack. Because I think that a good way to analyze Big Data infrastructures is to dissect them and analyze the security of the components layer by layer. In this way, we can make sure that we are covering all the stages that the information we want to protect go through. So from now on, I will explain different ATT&CK vectors that I found throughout this research for each of the layers. So let's start with the management layer. So Keeper, as I said, is a widely used tool to centralize the configuration of the different technologies that make up the cluster. And its architecture is pretty simple. It runs its service on all nodes, and then a client, let's say a cluster administrator, can connect to one of the nodes and update the configuration. So when that happens, Keeper will automatically broadcast the change across all the nodes. So if we scan a node of the cluster, we will find the ports 21, 81, and 38, 88 open, because these ports belong to Keeper, are opened by Keeper, basically. So the ports 21, 81 is the port that accepts connection from client. Should we be able to connect to it? Well, according to the official documentation of fan body, a tool that is widely used for deploying on-prem big data casters, disabled the firewall is a requirement for installing big data casters. So we can probably connect to Keeper. How should we do it? We can download the Keeper client from the official website. Then it's just about running this command, specifying the node IP address and the 21, 81 port. So once we connect, if we are on the help command, there is a list of actions that we can execute over the C nodes. The C nodes or to Keeper nodes are the configurations that should keeper organizes in a hierarchical extractor. So with the LS and GET commands, we can browse this hierarchical extractor. We can find very interesting information about the configuration of all the components that make up the cluster, like Hadoop, Hive, HBase, Kafka, whatever, and of course we could use it for firewall attacks. We can also create new configurations, modify existing ones, delete configurations, and this actually will be a problem for the cluster. Some components might go down because to Keeper, for example, is commonly used to manage the Hadoop Hive availability. So if we delete everything, the cluster might run into troubles. So I won't show a demo of this because it's a pretty simple attack, but it's actually quite impactful. So what about on-body? This is a pretty popular open source tool to install and manage big data clusters. And it has a dashboard from which you can control everything, whose default credentials are admin-admin, of course. But if they were changed, there is a second drawer absolutely worthy to check. Umbary uses a Postgres database to store the statistics and information about the cluster. In the default installation process, the Umbary Wizard asks you to change the credentials for this dashboard, but it doesn't ask you to change the default credentials for the database. So we could simply connect to the Postgres port directly using these default credentials. There are user Umbary and password BigData, and explore this Umbary database. We will find here two tables, the user authentication and users one. So if we want to get the username and authentication key at once, we need to do this inner shrankery between those two tables. The authentication key is a salted hash. So the best thing that we can do here is to update the key for the admin user, for example. I'm logging to the body source code to find a body salted hash. Here we have the hash for the admin password. So now we can run an update query, and once done we can log into the Umbary dashboard with the admin credentials. Well I know that this is actually pretty stupid, but it's absolutely worth checking because a body controls the whole cluster. If you can access this dashboard, you can do whatever you want over the cluster. And as the default installation process doesn't ask for these credentials to be changed, then you can most likely compromise them in this way. Cool, so the important thing in the cluster management layer is to analyze the security of the administration and monitoring tools. So let's now talk about this storage layer. First of all it's good to understand how Hadoop works. It has a master slave architecture and two main components, the hdf, that means Hadoop distributed file system, and yarn. So the hdf has two main components, the name node that saves the metadata of the files stored in the cluster, and runs in the master node, and the data node that stores the actual data, and runs in the slave nodes. And on the other hand, yarn consists of two components as well, the resource manager located on the master nodes, it controls all the processing resources in the Hadoop cluster, and the node manager, installing the slave nodes that take care of tracking processing resources on its slave node, among other tasks. But basically what we have to know is that the hdf, that is the Hadoop file system, is where the cluster information is stored, and then yarn is a service that manages the resources for the processing shafts that are executed over the information store. Basically it is stored. So when it comes to the storage layer, we are interested in the Hadoop file system. So let's hear how we could remotely compromise it. Hadoop exposes an IPC port on 8020 that we should find opened in Hadoop clusters. So if we can connect to it, we could execute Hadoop's commands and access the stored data. However, this is not as simple as the secure example was, so managing to do this is a little more complex. There are four configuration files that Hadoop needs to perform operations over the Hadoop file system, and if we take a look at these files inside a name node, we can see that they have dozen of configuration parameters. So when I saw that, I wonder, if I am an attacker, and I don't have access to these files, how can I compromise the file system in a remote way? So what part of this research was to find among those dozen of parameters, which ones are 100% requires, and how we can get them remotely from the information that Hadoop itself discloses by default. So I will explain now how we can manually craft these files one by one. This is start by the core site xml file. The only information we need to help with this file is the namespace. This is pretty easy to find, Hadoop disposes by default a dashboard on the name nodes, on the port 50,070, it's a pretty high port, and we can access it without indication. So as you can see here, we can find the namespace name, and that's all we need for this file. Then we need to craft the hdf site file, it's necessary to know the namespace that we already have from the previous file, and we also need the name nodes id's and the dns of them. So we could have one, two, or more name nodes, and we need to provide the id and the dns for all of them in this file. Where can we have this information? From the same dashboard. We have the namespace here, the name node id, and the dns. So we should need to access this dashboard on each name node. Remember that this is on port 50,070. Another alternative is to enter the data node dashboard on port 50,075. Then we can see all the namesnodes at once. So the next file is the mapper site one. Here we need the dns of the name node that hosts the MapReduceShopHistory. We can try to access the port 19,888 on the name node. If we can see this dashboard, then that's the name node that we are looking for. We already know it's dns from the previous dashboard. So finally, we need to craft the yaml site file. Again, we need the name node dns, in this case the one that hosts the yaml resource manager. So we can try to access the port 80,88, and if we see this dashboard, then that's the right node. We can get it dns, of course. So all these dashboard are exposed by default and don't require any authentication. But for some reason, we cannot see them. We can try to get this required information through sukeeper, with the attack I showed you earlier, because sukeeper also has all this information. Cool, so once we have the configuration files we need, the next step is to install Hadoop in our local machine and provide it with those files to perform the remote communication. As I didn't want to install Hadoop on my local machine and I built this Docker file, feel free to use it, it's pretty comfortable. You should need to change the Hadoop version to match the version of your target cluster. So from now on, this is going to be our Hadoop hacking container, running on the attacker machine. Cool, so let's run and get a shell inside it. We can create a config directory to place the XML files we have crafted before. And you also need to copy this slug.property file inside this folder. And another thing I did is was to delete the host file to write the result of these node dns. You can actually use the IP addresses on the XML files. But for some reason I had better results in doing this. Ok, so we are ready to go. Choose path to Hadoop this config directory and you can execute for example an ls command. So voilà, we can see the entire Hadoop file system from a remote attacker machine. But before shamping into a demo of this, I would like to mention that most likely we will need to impersonate ATDF users. For example if I try to create a new directory using the root user, I cannot. So we need to impersonate a user that has privileges within the Hadoop file system. That means one of these ones. Fortunately that's very easy to do. We just need to set this environment with the Hadoop username before the command. And that's all. That will allow us to create directories and also will allow us to delete directories and files. So we could wipe out the entire cluster information. Ok, so let's see a demo of this. Here I had my files, the core site with the namespace. I also have the hdfs file. This has more information, the namespace and also the namesnodes. For the namesnodes I need to specify the DNS. I have two name nodes in this case. So I need to specify the DNS for both of them. And then this last property was something that I had to add for this specific cluster. The map website has the DNS for the MapReduceShopGistory address. The name node that has this resource. For the yaml site I had to specify the DNS as well for the resource manager node. So once we have those files we are just ready to go and we can execute Hadoop's commands over the remote file system. If we check the help for Hadoop, for the fs commands we can find a super common command for any unix system to remove, copy, delete, move files and whatever. To impersonate we need to specify this environment variable as we saw before. And here we can create directories or we can modify files or delete also any directory, right? Good. So let's now talk about the processing layer and how we can abuse yaml in this case. So back to the Hadoop architecture just to remember. YAML test case was processing shops over the data. So this shop executes code in the data node. So our mission here is to try to find a way to remotely submitting an application to yaml that executes a code or recommend that we want to execute in the clusters node. Basically achieve our remote code execution through yaml. We can use the Hadoop IPC that we were using in the previous attack. It's just necessary to improve a little bit our yaml site file. We need to add the yaml application class path property. This path used to be the default path in Hadoop installations. So it should not be difficult to update this information. In the example here we can see the default path for installation using the Hortonworks packages. Then this other property is optional. It will specify the application output path in the Hadoop file system. It might be useful for us to easily find the output of our remote code execution, but it's not necessary. And something I would like to mention that I didn't say for. If you can access these panels that we have seen under the slash conf, we can find all the configuration parameters. But you cannot just download and use that file. We still need to manually graph the files the way we were doing it. However, if something is not working for you, here you might find what's missing. For example, here we have the path that we are looking for for the property we have to set in this case. Good. So now that we have improved our yaml file and we have suddenly the application to yaml, the question is what application should we submit? Here Hortonworks provides a simple one that is enough for us to achieve the remote code execution that we want. It has only three Hava files, because yaml applications are developed in Java, but there are a lot of Hadoop libraries necessary to include and use, so it might not be so easy to develop a native yaml application. But we can use this one for our proposed. It takes as parameter the command to be executed on the cluster of nodes and the number of instances, which is basically on how many nodes our command will be executed, right? So we will clone this repository in our Hadoop hacking container and proceed to compile this yaml application. We need to edit the pion.xml file and change the Hadoop version to match the version of our target. This is really important, otherwise this is not going to work. So once we do that, we can compile the application using maven. Good. So the next step is to copy the compiled yaml into the remote Hadoop file system. We can do it using the copy from local hdf command. And after that we are ready to go. In this way we can submit the application to yaml, passing as parameter the command that we want to execute and the number of instances. Here, for example, I have executed the hosting command over three nodes. And we are going to receive an application ID. It's important to take enough of it. But it's even more important to get these finished status because that means that our application was executed successfully. And now what? Where can we see the application output? This is what we are interested in, right? Well, we can use this command passing the application ID we got in the previous step. And the output is going to be something like this. We have executed this command over three nodes. So we have three different outputs for the hosting command. Of course, we can change the hosting command for any other, right? So let's see a demo of this. Here I have improved the yaml file to add the path I need to add. And I have my simple yaml application from Hortonworks. And I already uploaded it to the Hadoop file system. So remember you can simply copy from local and just upload the chart to the remote Hadoop target. And now with this command we have to specify the local path of the yaml file and the command that we want to execute and the number of instances, the nodes, and the remote path. So with this command we are going to get our application ID and the status. So now we need to use this application ID. In my case I need to move the output from one directory to another one just to allow yaml to find the output in the next command. It might be not necessary for you. So with the yaml command we can just get the output of this application. So we are going to see the output for the three nodes. We have the hosting output for the Hadoop 1, the first node, Hadoop 2, and Hadoop 3. Good. So let me show you one more. I submit one more application before to dump a file of the nodes in this case the slashetc slash password file. So here we can see the password file for the three nodes as well. So basically you can change these and execute whatever command you want. So that's pretty easy to use. It also should be quite simple to change this yaml application to execute perhaps a more complex command. Just keep in mind that any changes must be made both in the application master file as we can see here in the slide and also in the client file. So for example, if we want to get something like a reverse shell on the cluster nodes, it's possible. But keep in mind that this is a shop that starts and finishes. So we might need to use alternatives like backdooring the ground up with the yaml application, for example. So you can execute this command with the yaml application and then back to the ground up and then you will have your reverse shell on every cluster. Sorry, on every node of the cluster. Good. I can help you talk about Spark in this section. Spark is super popular while implementing technology for processing data as well. It's generally installed on top of Hadoop and developers make data processing applications for Spark. For example, in Python using PySpark, because it's easier than developing a native application for yaml. And also Spark has other advantages over yaml. So as we can see here, Spark has its own IPC port on 7077. We can submit a Spark application to be executed on the cluster through this port. It's easier than with yaml. Here we have an example. This small code will connect to the Spark master to execute the hostname command on every cluster node. We should simply need to specify the remote Spark master IP address, our own IP address to receive the output of the command and the command itself. And then we should run this script from our machine. We don't need anything else. It's quite simple. But I'm not going to talk in depth about this, because there is already a talk 100% dedicated to Spark. That's what's given at Defcon that here. So I truly recommend watching this talk. The speaker explains how to achieve remote code execution via Spark IPC. That is the equivalent of what we did with yaml. So keep in mind that Spark may or may not be present in the cluster, while yaml will always be present in Hadoop installations. So it's good to know how to achieve remote code execution via yaml and also via Spark. We have the possibility to abuse this technology as well. Awesome. So let's take a look at the in-question layer node. If you remember from our big data architecture example at the beginning of this talk, we have sources of data, and such data is ingested to our cluster using data in-question technologies. There are several ones. We have sound design for streaming like flume, Kafka, a Spark structure streaming that is a variant of Spark. And then others like scope that inherits static information, for example from one data lake to other data lake from one database to a data lake, and so on. So from a security point of view, we need to make sure that these channels that the information goes through from the source to the storage are secure, right? Otherwise, the attacker might interfere those channels and it has malicious data. Let's see how this could happen. This is how Spark streaming or Spark structure streaming works. It's a variant of Spark that ingests data and also process it before dumping everything into the Hadoop file system. So it's like two components in one. So as Spark structure streaming or streaming, Scam works with technologies like Kafka, Flume, and Kinesis to pull or receive the data, and also has the possibility to just ingest data from a TCP socket. And that could be pretty dangerous. Here we have an example of how the code looks like when the streaming input is used at TCP socket. It basically binds supports on the machine. So a build phase is super easy. We can use NetCAD or our favorite tool and just send data over the socket. And it works. What happened to the data that we injected will depend on the application that processes it. Most likely we will crash the application because we might be in hacked invite that the application doesn't know how to handle or our bytes might end up inside the Hadoop file system. That's also likely. So it's important to check that the interfaces that are waiting for data to be ingested cannot be reached by an attacker. Regarding Hadoop, as I said, it's move static data. It's commonly used to ingest information from different SQL databases into Hadoop. And analyzing a scope server, iPhone and API is posed by default on port 12,000. We can get the scope server version, for example, using this query. But there is not so much documentation about the API and honestly it's quite easier to abuse these using the scope client. So something important is to download the same client version of this server. For example, this server is 1.99.7. We should download that version of the client from this website. So what can we do? Well, we could, for example, ingest malicious data from a database that belongs to the attacker into the target Hadoop file system. That takes some steps. We have to connect to the remote scope server, create some links. This provides the scope with the information to connect to the malicious database and the target Hadoop file system. And then we have to create a scope shop, specifying that we want to ingest data from this database link to this other HDF link, and store it. So this is quite easier to understand with a demo, so let's see a video demo of this. So here I have my scope client and I connected to the remote scope server. These are the connectors we have available. We need to create a link for the MySQL database, the remote attacker database. So I will specify the MySQL driver and the remote address of the database, some credentials to access to it. And then most of the parameters are optional. So I will just create it. And also we need to create a link for the HDF target. So here we have to specify two parameters. The first one is the remote IP address of the Hadoop IPC. In this case it's in the port 9,000, but it's going to be most likely in 80, 20, as we saw before. And the const directory is a remote path, not a local one, it's a remote path. It's going to be the Hadoop installation path by default. So now I'm here and I'm specifying the path of a DEXO machine, but it's going to be most likely a slash EDC, a slash Hadoop, a slash const. So now we have the links. We have to create a shop. And in the shop we are going to specify that we want to enhance data from the attacker MySQL database to the target HDF. So we need to specify the name of the table we are going to insist. And then most of the parameters are optional, so I'll leave it blank. So once we create the shop, also here we have to specify the output directory. And that's also important, that's the remote directory in the Hadoop IPC system. So, right, now we have our shop in KXMalicious Data Shop. We just need to start it. And this is all we are going to see in the attacker machine. But to show you that we actually in KXMalicious Data, I will log into the remote machine that has the Hadoop IPC system. Just to show that the data was actually injected in the IPC system. Here we have the hacking Hadoop. And the hello blah blah, this is just data that was in my remote MySQL. And I injected it into the Hadoop IPC system via scope. So keep in mind that you can inherit malicious data, but you can also export the data. Because the scope allows you to import and export. So you can do this in a reverse way and just steal data from the Hadoop IPC system into your remote MySQL database, for example. Good, so finally let's talk a little bit about the data access layer. Back to our architecture example, we saw that it's possible to use different technologies for data access. In this example, we are using Preston together with Hype, but there are many others. And when it comes to Hype and HBase, these are HDF-based storage technologies. But they also provide interfaces to access the information. For example, Preston needs the Hype Metastore to query the information stored in the Hadoop IPC system. So, this technology is supposed to dashboard and interfaces that can be abused by an attacker if they are not rightly protected. For example, Hype is supposed to have a dashboard on port 1002 where we can get interesting information and also an idea of how the data is structured in the storage. The same for HBase. Regarding Preston, I found this curious login form where password is not allowed. It's quite curious because it's a login form but you cannot enter a password. I know that you can set up one by default, it seems to be this way. So you can write admin user there and enter. And there is a dashboard that shows some information about the interactive queries being executed against the cluster. Good. So, as I said, this technology is supposed to several interfaces. It's common to find at least a shared DVC one. For example, in Hype we can find it on port 10,000. And there are different clients that we can use to connect to it. Like Squirrel, for example. Or even Hadoop includes VLine. We can connect to the remote Hype solvers just specifying the remote address. If no dedication is required, of course, but there is usually nothing by default. And Hype has its own commands. We need to know them to browse the information. With show databases, we can see the databases in the cluster, sell it one, and show it sales. And then we have sentences to insert, update, delete, like any other SQL database. Good. So, I'm running out of time, so let's provide some recommendations as conclusion. Many attacks that we saw through all this talk were based on SPOS interfaces. And there are many dashboards that are SPOS by default as well. So, if they are not being used, we should either remove them or block the access to them using a firewall, for example. If some components need to talk to each other without a firewall in the middle, then we should secure the perimeter at least. The firewall has to be present. Despite the official documentation asked for the sale in it, I believe that we can investigate what ports need to be allowed in our infrastructure and design a good firewall policy rules. And remember also to change all the default credentials and implement any kind of authentication in all the technologies being used. Hadoop supports authentication for the HTF. It's actually possible to implement authentication and authorization in most of the technologies that we have seen. But we have to do it, because by default, there is nothing implemented. Finally, remember that in big data infrastructure, there are many different technologies communicating with each other. So, make sure that those communications are happening in a secure way. Good. So, in the next weeks, I hope to be able to publish more resources about the practical implementation of security measures. So, for today, that's all. Thank you for watching my talk. And here's my contact information in case you have any questions. Please feel free to reach me out. Thank you so much. Bye-bye.