In today's video I'm going to go over the best two Pokemon to do six star raids solo in Pokemon Scarlet and Violet but before we get into the video please subscribe to the channel remember you can always unsubscribe later if you'd like to now six star raids are something that you're going to have available in the post game a lot of you are having issues doing these as a solo player on your own in your own game find it very difficult to do and there have been situations for myself when I've been approaching them that I just been some of them that I've had to say I can't do this one I've tried multiple times no matter what I do choice items changing Pokemon up nothing's working and sometimes you don't want to go online or you can't go online to get help from friends so you're really stuck in these situations but in today's video we have got two Pokemon to test out which are incredible to use in a solo battle against the six star raid and if you use them you're going to have so much success in game that you're going to be able to collect these really strong terror Pokemon and all the item drops with them but before we get into the actual Pokemon and the strategies behind them how you get them set up in game got to give a big shout out to N9 Kai who is the creator of these strategies you can check out their youtube channel and check out the original video where these strats were conceived so there are two Pokemon based around the strategy of making six star raids a lot easier the first one is iron hands it is a paradox Pokemon that is exclusive to Pokemon Violet so if you're a scarlet player like me you're gonna have to have a friend that you can trade with to get access to this copy or hop into their game and join them when they're in area zero so you can pick these Pokemon up iron hands is a fighting and electric type with the tera typing of fighting we've given the held item of citrus berry because primarily its move set is going to be all based around belly drum belly drum when you use it it cuts your HP in half the cost of 50 percent but at that cost you get a plus six attack boost so your attack stat maxes out and you after this are going to be hitting like an absolute truck you can see that iron fist as well has an absolutely ridiculous HP stat and we have trained it in HP and attack maxing out its EVs in both of those does show us having a quirky nature but we have used an adamant mint on iron hands just to max its attack even further so when you have got that belly drum boost you are hitting as hard as possible the main kind of combination of attacks you're going to be using our close combat and drain punch now drain punch is incredible against six star raids because you are going to be getting so much health back because the tera bosses in six star raids have huge multipliers on their HP so any damage you're doing you're pretty much recovering all of the damage you've just taken from a belly drum or an attack or a combination of both it's an incredible pokemon easy to set up and hits like an absolute truck so a great pokemon to have I have leveled this up to level 100 and if you're struggling with this we have experienced farming videos on the channel as well as a duplication glitch as well which you can use for items like excel candies and things like that to help out get these pokemon to the levels that you need them to the next pokemon we're going to talk about is gold dingo so this is gimme ghoul's evolution you're going to need 99 gimme ghoul coins to evolve gimme ghoul into gold dingo but it is a steel and ghost type we have got the spell tag as its held item to boost these ghost type attacks that it's already got access to its tera type is ghost as well and then you can see its move set of recover nasty plot metal sound and hex now one thing you will notice when you go into terror raids especially as a solo player the npc characters will always use status moves on the tera boss so I'm sure you can think of situations where the tera boss is paralyzed where it's burned frozen put to sleep they are all status conditions and the reason that this is so important is because we're using the move hex which doubles the damage of this move when you're hitting a target that has a status condition so you're relying a little bit on the npc characters making sure that they get a status move onto the tera boss before you actually use this move but still with a combination of nasty plot which is going to boost your special attack by two stages each turn you use it and then combining that with metal sound which reduces the special defense of the opposing target this combination altogether will make gold dingo hit like an absolute truck the ev spread we've just maxed hp and special attack just to give a bit more longevity and staying power with that hp and then the special attack with a modest nature well a modest nature mint just to boost that special attack even further so we're just hitting even harder but the big plus about gold dingo is that good as gold ability it means that you're not going to be affected by any status conditions that an opponent is going to throw at you you're not going to be affected by burns by paralysis by sleep by freeze things that can really disrupt your experience when you're trying to take down raid so a really good pokemon overall hits like a truck again we've got a to level 100 now i'm quickly going to show you where you can get a spell tag where you can get vitamins nature mints and where you can hyper train these pokemon because if we look in our boxes these pokemon were not caught with perfect stats but we were able to use bottle caps and the and the hyper training mpc character to hyper train the stats making them all 31 or the ones that we selected 31 that we needed so you can see here these pokemon are completely trained up just maximizing the damage output that we can do with them making them more effect six raid terror destroyers so once you've got your two pokemon the first thing to probably want to do is going to get some vitamins then some nature mints and then also hyper train these pokemon to get the spell tag you want to come to casca raffa city you want to come to this point on your map and you want to be going to the deli bird present store in casca raffa city and you'll be able to find the spell tag which you'll be able to attach now the first place that we're going to want to go is up to the glissada mountains and we are going to want to head to montevera now in this town the convenience store here sells some very important items for us and this is actually a really good place just to come and generally train up your pokemon so when we get to the chancy supply store you're going to see a bunch of items here that are going to be super helpful there are going to be nature mints here that you can get to make sure that your pokemon have the correct nature so you're going to want the modest mint for your gold engo and you're going to want the adamant mint for your iron then you're going to want to get some vitamins this is the quickest way to do it it is going to be expensive to do it you're going to need a bunch of hp up to get both so you're going to need 52 hp ups one for each of your pokemon which is 520 000 this is a lot of money but if you're struggling for cash you can watch the money farming guide that i've done on the channel it's a quick way to get a lot of cash really quickly or the duplication guide to duplicate some of those really high value items so you can then buy these really quickly and start doing this process as soon as you can so i want 26 of these as well we'll pay with league points and we want 26 of uh calcium as well so we'll get those okay now we've got all our vitamins and everything what we want to do is we want to use uh vitamins on our pokemon i think we can use 26 if we've used one so we want to just use 26 25 there and then we want to do the same with all iron fists as well use this item want to use 26 on him and then we want to use the protein as well just to max out his attack and there we go okay cool they are done these two pokemon are ev trained but they haven't got the correct natures that we want as well so that's why we bought the nature mince and the nature mince that we're going to need are going to be the modest one and the adamant one so the adamant one for old iron fist and then we want the modest one for gold bingo there we go okay cool so we've got both of them set the next thing is to use the bottle caps on these two pokemon to max out their iv if you need bottle caps you want to come to mesogosa west and from this pokemon center here you want to just head over to your right there should be a set of stairs and you want to just come to the deli bird presents store just around the corner here and this store will sell bottle caps so if we go into general goods you can see at the top of the list here bottle caps we have them for 20 000 a piece so you can buy the five that we need for all the iron hands i know we've got a bunch already but i'll um i'll just keep the ones i've got because may as well when we can afford them i'm going to head back up to montanavira and the hyper training npc character is located in this town where you can use your bottle caps and as long as your pokemon is a level 50 or above you're going to be able to hyper train any stat as long as you have a bottle cap the hyper training man is located just over here from the pokemon center you'll see he'll be standing next to a bigger bomber snow just want to come and talk to him he'll say above his head that he hyper trains so you want to just say yes and pick the pokemon since we've already done the gold angle we want to just choose iron hands and we haven't got any gold bottle caps so we just want to use the regular bottle caps and then we just want to max out everything other than special attack we're not going to be using special attack moves so don't worry about maxing that out so there we go hyper trained we've got the right nature on it it's ev trained all we want to do now is level these pokemon up we've got a mimikyu it is going to be a steel type so this is actually probably a good one for our iron fists to do so we can test out the first strategy with good old iron fists and we'll see how you get on against this mimikyu now i'm normally used to like i've said i've done a million six star raids before and they've always been a slog night they're never quick this is like the whole reason we did the terror raid video and you know i said that the five star raids are probably better because of the effort that it takes to do a six star raid so we'll see if this is a big improvement they're coming in not doing as much as i kind of expected it to do at all so i infest a big old chunk and he's gonna get the citrus berry boost get some health back which is good and then yeah we'll be able to take another one and we'll be actually able to launch a close combat off into this thing so that's that's huge we could actually drain punch to be honest just to recover health that's probably the best idea rather than going for the close combat for sure and the thing is with like play rough as well our attack has fallen so we're not like we've not got max attack but that's the disguise gone we don't get much health back thing is with play rough as well it can miss because of its shaky accuracy so if we get like one miss you always need a little bit of luck and you always kind of hope to get a bit of luck not that we need it we'll just see how much it's going to do in a fair old chunk we get some health back as well and this is a map wow okay yeah we with this thing is a monster okay when there's no way this set is perfect for four six star terror raids like if you get set up and you can get the drain punch off damn look at that damage that is nuts damage that is absolutely disgusting this is a six star terror raid this is a six star terror raid massive props to n9kai for coming up with this strat this is like absolutely busted this iron fist is busted i know it's against one pokemon but this is just an example i want to just jump into the first raid we had we'll do one with gold angle as well to see how well he fares but i mean this is just madness how good this is do we even we haven't even got the ability to terror now i wonder how much a close combat i'll do behind the shield so we'll see the play rough come in and remember as well we had an attack drop from the play rough so let's see that's that's a shield up on a six star terror raid i know that's a crit but that is huge a defense fallen it's not ideal but i still think we'll be able to take another play rough the attack drop again this mimikyu every time but there's no way to survive in this now that's it it's done might get it now fainted so that's it that is it that is probably one of the easiest six star terror raids i've done i'm gonna get a nice bottle cap and recover some of those large candies no herbal mystical this time though but okay now once you've done your six star raid because you are gonna get one six star raid per day that is your six star raid done until tomorrow so you have to wait until the clock ticks over midnight and then a new one will spawn on your map if you don't want to wait when this disappears there is the date skip glitch and i understand some people don't want to do that but if you don't want to wait around hit your home menu come down to your system settings then down to system then down to date and time make sure your synchronized clock by the internet is off skip your day forward one day then hit your home menu again come back into the game and like magic presto you're going to see these messages pop up behind my facecam now it's just saying that your outbreaks are going to change all those new outbreaks and if you go into your map now your terror raids are going to be different they'll be different locations they'll have respawned and we'll have another six star terror raid kicking about somewhere okay it's the sizes are that's fine okay we'll challenge along we'll see how we get on we have got ah gold ingo but the idea of this is gold ingo just wants to go for the nasty plots as soon as possible okay knock off not doing too much right we can go for this third nasty plot now hopefully we see some sort of status from rnpc onto the sizes are because that's what we need essentially so let's see what a plus three hex does against the sizes are the shield is absurd i don't suppose we're going to do as much damage but we'll see yeah we're not doing enough we're going to have to get three hexes off now it's removed the negative effects from itself it hasn't removed them from us yet so we've still got this plus three and we can check our status yeah we can check so we're plus yeah we're fine we're in a good spot now it's going to say is when the shields up you can't lower your opponent's stats so like the scary face there you're seeing that it's not going to have any effect if we tried to go for a metal sound when that shield is up we're not going to be able to do anything so let's go for that recover one more time we've still got plenty of time in regards to the six star raid and maybe the steel beam set is is better because then you've got a big damaging attack to just kind of fire off straight away nullified stat changes and abilities affecting your side so now we have to go for those three nasty plots again to make sure that we are going to be able to damage because now that was what I was talking about before where I do have my reservations about these setup strategies working there's the paralysis now we can go for the hex and we'll get that double damage and we'll see how much damage we do do and I mean it's not bad we break the shield but now we can tracelize and we can knock this thing out be typical though now we'll tracelize and we'll um we'll get knocked out before we can actually knock it out now we are faster so this should be able to knock it out we get the double hex boost and to be fair as much as that was just us setting up for the majority of this terror raid it hasn't again felt like a six star raid it's been very easy like extremely easy um so I've got to say as much as it's not as effective as iron old iron fists it's still a it's still a very good pokemon as an alternative if you haven't got iron fists if you're a scarlet player and you haven't been able to get a trade from violet then it is a very good option hope you found this guide useful big shout out to n9kai once again for coming up with this method between the gold ingot and the iron fist I do think if I was to choose one of them I think you know which one I would choose it would be iron fist it's an absolute monster and it is just blown my mind with how good it is in six star raids doing them solo makes these things just easy to do now so if you tried out yourself let me know down the comment section below I would love to hear how much success you've had with this as well and let me know if you've got your own strategies I would love to hear them but we'll keep updating these strategies with any more that we get in the future thank you so much for tuning in friends have a great rest of your day and I will catch you all in another video very soon so until then take care and bye bye


I think a lot of people automatically see the autism label and try to give us really small roles that don't have a lot of responsibility, but it really... And I feel like that's what happened with me and I really... there was a lot of favoritism and that didn't change when I went to public school either. People just see the autism label and they just shove you in the back. It doesn't matter. There's always going to be favoritism with anybody in your drama troupe no matter what school you go to, but once you get out of there that doesn't really matter at all. I've discovered that when I went out into the real world in Epic Players and I got cast and stuff, but it doesn't... whether minor or major, I love it. I'm in a minor role right now and I also feel like being shoved to the side has helped prepare me for rejection and all of that because I see the people who have always got the lead role and were the favorites, they can't handle that rejection and that's not good if you want to get on Broadway. Yeah. I mean, it's kind of funny you saying that because like it's... I mean, obviously there is a big component to any sort of career or hobby or venture and that is like the social aspect of it. People don't choose you for us during sports education. They don't choose you as part of the team because you're good at playing the game. They choose you because they like you or their friends with you or they... You have like a high social ranking in the school or something, which I've really heard and that's kind of been something that I think happens in like the weird place as well sort of in the real world. If you don't have those natural abilities to kind of get on with new groups and new people or if you just generally don't want to socialize as much then it kind of stops you from getting as far as you should be able to do with like your ability. I think it's a tough aspect of life and it's something that I think holds a lot of people back from realizing their true potential. Not saying that there's the issue with the individual, it's an issue with the system, the neurotypical society that we're living in. But I think that can really be tough. Yeah, I agree and I don't think people should be forced to socialize or be someone they're not just to get ahead in life either.


My name is Mark Tobias. This is our team, Tobias Bluesmanus, Matt Fiddler. We engage in the testing of mainly high security locks. We have a lab and we do testing for the major lock companies of the world to figure out how to open them when they can't be opened, figure out vulnerabilities and then figure out how to fix them. That's our primary mission. My background is both as a lawyer and as a criminal investigator for the Office of Attorney General in my state. Tobias is a locksmith for many, many years in Miami. We wrote the medical book together a couple years ago when we broke that lock. Matt Fiddler is with our group for a long time also. He works for a very large corporation on the East Coast doing security testing and we're going to talk today about some engineering problems regarding one company as an example. We're not intending to pick on this company. We don't have any issues with them. They've been around for a very long time but they're a prime example of what we call insecurity engineering. And so we're going to go through a lot of slides and some video today to talk about design problems that can cause real problems both from a liability standpoint and from a security vulnerability standpoint. And we've targeted four locks. The company that we're going to talk about today is CABA. They're a Swiss company. As I said, they've been around for a very long time. Very respected company. Very competent at making things work. We don't think they're quite so competent in making them secure and we're going to look at four of their locks to talk about that. So the four locks that we're looking at today, one of them we did last DEFCON which is in the upper left hand corner which is called the CABA in sync. It's an RFID based lock. And then we're going to talk about the push button lock that many of you may recognize upper right which is called the CABA Simplex. Then we're going to talk about the two electronic versions of that lock which was really our target this year. So the markets, they design for access, the access control market, commercial buildings, business complex, government facilities and the real question is access control and exactly what does it mean. And in our view, especially because of the locks we're going to talk about today, it means access control in government facilities and high level commercial facilities that are secure environments. So CABA who are they the third largest lock manufacturer in the world and they have a very large presence in the United States as well as in Europe. As I said, they're based out of Zurich, Switzerland. They do have engineering expertise. Why is this important? As we'll talk about, there was a very major class action lawsuit that was filed November of 2010 against this company by a group of lawyers around the United States in regard to their Simplex 1000 mechanical push button lock which we'll talk about in a little while. So the CABA case study, it's engineering failures and the ramifications that flow from that. Engineering failures, why are they important in lock design? Because they can lead to serious liability and breach of security in facilities.  So we have four different designs. We're going to do an analysis of each of the designs and what the problem is. So we look at this as escalating insecurity, defects in critical design. So again we've got the CABA, the mechanical push button lock, the RFID lock and then two versions of their electronic lock which is essentially what's called the Eplex 5000 which is the electronic version of the mechanical. So our real problem and going through this today is a failure of imagination and it's not just CABA. It's a lot of lock companies that we deal with around the world. And the real problem is and we've talked about this on a number of DEF CON presentations in the past, it's the engineers go to engineering school to learn how to make things work properly but they don't know how to break them so that they can really make them secure. So deficient or defective products. It's an intersection of mechanical and security engineering. Both of them have to be there and the problem is that you can have a false sense of security especially if the standards organizations whether government or civilian say the lock is secure and fit for the purpose intended. So what appears unfortunately secure is often not in our world and the real question for especially those of you that are security or risk managers, how do you know the difference? There is an undue reliance on the standards and that is part of the problem. There's also a problem of misrepresentation by a lot of manufacturers. Matt? So we've talked about this before but typically physical security or locks are the first line of defense. Often times they're the only security layer. We talked in detail about US standards, underwriter laboratories and BHMA in the past and specific lock manufacturers adherence to those standards and reliance and ultimately you as the consumer how do you know if those locks are secure? Yeah, the real problem they're going to switch the power so we're going to break for like one second here. The real problem is that and I'm on one of the underwriters laboratories testing boards for locks and safes. The real problem is all of you in an organization that buy locks based on standards they don't test for the kinds or most of the kinds of bypass attacks that we use to open these locks mainly covertly. So the standards can be essentially meaningless. We've petitioned the Builders Hardware Manufacturers Association to change the high security standard to reflect current attack technologies.  Yeah, we're switched. Okay we just crashed Hoover Dam, the lights are dimming in Las Vegas. Okay this is perfect. No, this is the blue screen of death on the projector. Okay, so the real question is what does secure mean? And I suppose the projector will catch up with us to find the image. So manufacturers of locks have really unique responsibilities. One they obviously have to understand mechanical engineering and electronic engineering but more importantly they have to understand security engineering because if the lock isn't secure we don't care how well it works it doesn't do what it's supposed to do. There are implied representations by every lock manufacturer and that is that we are experts. When you buy a lock from a company like Kaba, Asa Abloy, Ingersoll Rand, which are the major lock companies of the world, you expect that they know what they're talking about and they know how to design locks. Often this isn't the case and the problem is that a lot of, well all of the lock companies always claim we meet or exceed the standards. The problem as we noted, the standards may not protect you against some fairly non-sophisticated methods of bypass. So expertise is required, mechanical engineering, security engineering, understanding minimal engineering standards when you design a lock. And security engineering requirements means one, that you test the products against current methods of bypass and that you understand and know what those current methods of bypass are. We employ a variety of techniques in our work to test locks for our clients. And it's everything from shock, vibration, wires, air, magnets, hairdryer, which we open one lock with, believe it or not. No, it's for real because the engineers never, ever, ever could believe that we could do this. Well, in a very specific lock overseas, because of the kind of elements they used as a locking device, we were able to heat it up, change its physical properties and open the lock. So, yeah, they weren't really pleased with it when we found it. Opening a lock with a hairdryer is not really cool from their standpoint. It was from ours. So, the bottom line is they need to understand bypass techniques and that's why we get hired by a lot of different groups to figure out if there is a vulnerability. Because as a lawyer, I can tell you and I tell my clients and have for a long, long time, if a lock is defectively designed from the security standpoint and somebody gets hurt, robbed, injured, killed or information is compromised or damage is done to property, somebody is going to pay for it. And what you all need to really keep in mind is all security is about liability. Other than in the government sector, which doesn't have any liability generally because of sovereign immunity, all security really comes down to liability. If there's a breach in security, somebody is going to pay for it. So, there's insecure products. They're often, as we're going to show you today, often easily bypassed. They use the standards as a measure but they're no measure. Products look great but they're not secure. And the bottom line is they're placing your facilities at risk. So we're going to talk about these locks briefly. We prepared a number of videos. There was an article that was published this morning by Forbes, by Andy Greenberg, their security correspondent that you all might want to read and there's a number of videos that they uploaded to YouTube. So we're going to go through how these locks are supposed to work and how they don't. The first rule that we teach design engineers is the key never unlocks the lock. Now everybody says what does that mean? Of course the key unlocks the lock. No, it really doesn't. The key actuates the mechanism that allows the lock to be unlocked. Either the bolt retracted, the latch, whatever the locking, fastening mechanism is, the key allows you to rotate or move that. But generally the key doesn't do that. The mechanism that the key actuates does that. So what we do in our work is we figure out in layers of attacks, which we develop when we attack the medical lock, the top high security lock in the United States a few years ago, we develop what we call a layer attack. So we isolated each security layer in the lock, whether it's electronic or mechanical. We attacked and neutralized each layer and once all the layers are neutralized, the lock opens. So Toby, why don't you talk about this lock briefly, the Kava NSYNC? Well, the Kava NSYNC, the one that you're seeing there is a RFID key. It's like a plastic key. This is a deadbolt type. You can see the bolt a little bit extended. It's not too complicated. You have an RFID tag in the key. The locks read that tag. If it's programming to the lock, the lock will open. Now we're going to, there's also on the bottom, there is a USB port where you can program that lock. Oh no. But see, all you guys think we're going to defeat it electronically. No, no, no, no. That would be, he's a ones and zeros guy. We're physical security guys, okay? So why would we always bypass the electronics? We neutralize and we bypass. So keep going, Toby. There's a USB port. Okay. So the USB port, we're going to use cables but not wires. Why bother? Yeah. Okay. So this is a commercial lock. This used, we were told, even in military installations, very easy to bypass. We were really stunned how we bypassed. So this is a Kaba company. This is the first one we actually looked at. So these are used all over the world. They were very proud in telling me how secure this was and that you're just not going to open it without the right key. So it's got very wide applications. So here's how this lock is supposed to work. Toby? The image for space we have to put it sideways. But actually the bar that you see next to that big round plug, that bar is what protects that plug to rotate. And what it does is move away with a small motor and then you can turn and activate the bolt and open it or lock the system. So we're going through the, no, they have to see the video, right? Yeah. Okay. So how does everybody think that we open the lock?  No, no, no, no. No, no, no, no magnets. Magnets are coming soon. It's an electronic lock. Okay. Self-contained, very operated.  Basically it's inside the reset locking bar that blocks the plug. I'm going to be using a small wire to push that locking bar away so we can open the lock. I'm going to do that by inserting a very small wire through the location. The difficult part is to remove the cover that the rubber cover on the USB port. Then you just have to leave that here. Well, by the way, because of what we did this year with Cava, they told us that they fixed it. Yeah, they fixed it. We haven't seen what they did, but they told us not what we fixed it. Yeah. Now, and the problem with all of this, and it can be locked back up again too. The problem with all of this, and it's not, as I said, just Cava. They just happen to be in our target range this year. Other companies, as you guys know, if you've seen us before here, we've gone after a lot of the companies because of the same problem. So it's not unique to Cava at all. So we looked at this lock. The problem is not that they fixed it. The problem is that they had to fix it in the first place. And that's really the issue. So now, it's November 2010. Well, let's back step to 2009 because we'll go across some of these slides. This is the Cava Simplex 1000. This lock was developed in about 1965. It is the most popular mechanical programmable push button lock ever. Just quick show of hands. Who's seen this lock before? Yeah. Okay. So you all know. Okay. Have any of you read my articles in Forbes about this lock? No one. No. Good. Great. Perfect. Yeah. They'll be very happy at Forbes to hear that. Okay. Perfect. Okay. So did anybody read the New York Times about this lock? No. Okay. So here's the deal. In 2009 in Brooklyn where there's a high orthodox Jewish population, these locks have found a niche market for the orthodox because on the Sabbath they can't use keys. Okay. That's just part of the rules in the orthodox religion. But they can use push button locks. Okay. As crazy as that sounds, that's the way it works. You can't use anything on the Sabbath that you normally use during the week. You can't drive a car. You can't push buttons on an elevator. So these locks have become incredibly popular in the orthodox community around the country. Okay. Good for Cava. Okay. Bad for Cava. So there's a group of technicians in Brooklyn that I referred to in one of the articles I wrote as the Jewish Geek Squad. They go around and help the elderly open their houses and they figured out they could do it with a rare earth magnet. Okay. Because there's a design defect in this lock. And it's been sitting there since 1965 because there weren't any rare earth magnets in 1965. They came around late 70s, early 80s. There were electromagnets but there weren't rare earth magnets. Okay. However, the manufacturer never retested this lock because they say, yeah, we're selling millions of them.  It's not broken. It's not broken. We'll fix it. Yeah. So the problem is that there was a Ferris metal component as we'll show you in this lock. And let's go to this. Okay. This is the combination chamber that actually controls the programming when you push the buttons and you can push one button, two buttons at a time, and up to what? Seven, I think. Five? You can use, it's five buttons. Yes. Five numbers. You can use combinations between one through five. You cannot repeat numbers but you can use combination of two numbers, like two and four and then one. You cannot repeat numbers. There's... Okay. So who's seen them at airports? They're everywhere. DoD, DOE, I got tons of mail from nuclear power plants. They want to know what the DL is. Okay. Because we put out the video that it could be open with a magnet. And they use that same chamber in some more, not that commercial, more residential style. That same piece is also present. Okay. So this is inside, this a macro of inside the combination chamber and this plate that you see that goes across all five rotors. If you move that with a magnet, you're going to open the lock. Now they've fixed this. We don't like the fix but they have fixed it. Okay. After not telling anybody about it for about five months, they figured it out last year. So what happens? The Jewish Geek Squad is opening doors and one of them happens to talk to his lawyer in 2010. The lawyer says this is a class action lawsuit. So Kaba gets sued in a huge complaint that is going to set the standard in the lock manufacturing industry in the United States for defective or deficient product. So this is the magnet that opens the lock.  Didn't tell him how to do it, commanded him, you know, like in the Bible or the Torah. I command you to open this lock. Four minutes later, the 13-year-old kid had the lock open. That's when I went public with this because it's such a threat. So class action lawsuit was filed. Here's the deal. Normal use lock is a clutch lock. We have to put the right combination factories soon for the same time, three, we can open the lock. Once if we make a mistake every time that we depress the lever, it resets so we can enter the right combination again. Okay. So this lock, as we said, is easily bypassed using the magnet. I have a magnet just wrapped in a bag. I'm just going to depress the lever. The lock is open. That's it. That's a big problem. And that was that. And that was that. So our office initiated an investigation separately. We're not hooked up with the lawyers in this case. We weren't involved in the litigation. I've met with the lawyer several times to get a briefing because all of our clients were concerned about the liability issue that this raises because this is leveled across millions and millions of dollars. Okay. And it's not the cost of the part to fix the lock. It's who's going to pay to put it in. And this is always the problem with locks. Locks aren't like software where you can send out a patch. You have to physically take them apart to fix them. Okay. So our office launched an investigation to protect all of our clients. And because the pleadings were amended a couple weeks later from the mechanical lock to also add the CABA electronic lock. So now we have their new generation called the E-Plex. And this is the 5,000 series, which is a very heavy duty, very, very nice piece of work. It's a push button lock. It's got a lever handle with a bypass cylinder in it. It's programable. Toby, talk about it for two minutes. It's programmable. Depending on the model that you're getting, you can either get like, I think you can program 300 codes or it gives you Audi trail also for like 3,000 in this basic model. Okay. They use the same platform for scale models that we're going to talk also about. Yeah. So they develop the 5,000. This is typical in a lot of lock companies because it's very efficient and saves money. You design a lock once and then you add enhancement and sell it as an enhanced version of the lock. So they... The enhancing is more in the electronics. They just change electronics and the lock has a totally different function. But the hardware platform is the same. And that's what's important in this case. So along comes a Homeland Security Presidential Directive in 2004 that's enacted in 2005. And Kaba jumps into the game to use their 5,000 platform to supply the government with locks. Okay. And this is... And it's called the E-Plex 5800. And Matt will talk about this. Matt? Yeah. So HSPD 12, as Mark said, was signed in 2005. And it really mandated the government and Department of Defense to move towards a central access card. It was very high level. It just defined... You want to go to the next slide. Just defined the requirements to protect privacy, drive efficiency, and increased security of facilities. So after HSPD 12 was signed, FIPS 201 comes along. And so NIST, working on FIPS 201, defined ultimately what we have and many of you have in your pocket out there, I'm sure, is the common access card and even the twit card for that matter. And it's a smart card that provides unique access control, physical, logical security. And Kaba was the first manufacturer to create a standalone locking device that is FIPS 201 compliant. So the bottom line is the government in 2012 has to replace all their mechanical locks for electronic locks, FIPS 201, so that there's an audit of who opened the door exactly. This is the game. They want to know personal identification, verification, and the card has to be secure and reliable so they know it was actually a validly issued card by a federal agency. So we're basically saying the same thing here. So personal identity verification was the mandate from HSPD 12. Identify verification and security. The other thing you'll read in HSPD 12 that I mentioned is really the efficiency play here to drive a standard access card across all government and contractors. Right now, here's the deal. FIPS 201 has nothing to do with security. It's personal identity verification in a secure card system. However, when you marry that to a lock, just like Kaba and other companies are doing, it does have a security component because if you can bypass the audit trail and open the lock or they don't know who opened it, then there's a problem. It's a security breach. And back to the beginning part of the lecture, if we stamp a compliance statement from Kaba that says this is FIPS 201 compliant, there's an implied assumption that we're secure. And it's just not the case. So when you walk up to one of these these new FIPS 201 compliant locks, you can use a pin and use your card, but you can't just use a pin. Okay. So if it's the purpose, they need the car and they take another step that you can use pin and car, but never a pin only. Only for the master, I don't know what they did it one when you get the lock and you're going to stop the lock, it comes from the factory program 12345678. Okay, then you have your force to change that master code in order to do any other program. Okay. And we're going to talk about that. Okay, so because we don't want to run out of time. We looked at this lock in detail in depth for several months. We identified nine really what we consider pretty serious security issues. Some of them you have to look at in terms of where these locks are going to be used. If it's at the Pentagon, maybe it's not such a problem for some of them. It's a lot of problem for others. So Kaba says you can only the open these locks with a card, keypad, keypad and or key. Okay, unfortunately, we figured out this lock can be wrapped open. We can D link the bypass cylinder from the latching system. We can reset the master code to open. There's an internal lever handle attack that we're going to show you. There's a remote open feature. So the girl and the receptionist of the desk can have a push button to open the lock. We defeated that. So Toby, number one, wrapping. Well, this is the critical component of the lock. There's a plunger type and inside the lock. And that plunger really engages the outside lever with the internal components. That's done by the electronics. It's a little motor that dropped that pin. And then we can open the lock. We have to tell us on this lock that we don't rely on only in the credentials. They have a bypass key. One of the reason if the lock fails, you cannot, you know, take time to attack the lock and open it. You have a key as a backup to open the lock. And also, we can reset the lock if the master code or the master code to program the lock is lost. They tie those two together in the function of the lock. Okay, so here's what we fed all of our videos to Kaba's Accuracy. We wanted the comments. Okay, so frankly, they made the mistake in analyzing our videos and sending us written comments. That was a mistake. Okay, so Kaba basically said as far as wrapping, hey, we fixed it. And we need to tell you, it depends on what kind of door these locks are mounted on, and what kind of timing and forces applied to wrap it open. Sometimes you can do it. Sometimes you can't. It's not 100% threat. But here's what Kaba said. This issue was detected by Kaba shortly after the product launch in 2004. And was attributed to a steel blocking device. The blocking device was changed to aluminum and implemented in production over five years ago. With the aluminum part, this attack is not successful. This is a macro video demonstrating the design problem with the clutch mechanism. This is what Toby is talking about when it's engaged versus not engaged, and how we're able to bounce that out of position. Toby, what we're seeing is the back of the lock. We have here the hub that where we attach the latch, we're going to remove the back cover. And what we've seen there is the plunger that we are bouncing in order to open the lock. Now let me remotely open that. And you can see that piece moving that plunger up and down. That action engages the outside lever. Okay, let me put everything together again. So right now there's no connection between the lever and that hub. When we open the locks, then we get that connection. Simple design. Very simple. And stays in the idle lock position. So now let's just show on reversing the back. So there's the part that we're bouncing. And this is the handle. So what the lock does is pressing that plunger. And then you can engage the handle with that plunger assembly. That moves and retracts the latch. Then it releases the connection. And then the handle can go free. What we're doing is we're bouncing that pin. But the timing is very important. We have to bounce that pin and at the same time grab it in order to open it. If we bounce that pin and we're late turning the handle, the pin is going to go up, down. It's like lock bumping. Or if we go too fast on the handle, the handle will turn. We cannot drop that pin. And the lock will remain in the lock state. Okay. So they obviously didn't consult with Sir Isaac Newton when they designed this lock. This will demonstrate the first very serious problem with this lock. Toby? We have to do it in slow motion was too fast. We had to do it in slow motion. Well, but as I said before, it's timing. It's timing. It's just like lock bumping. Now, the problem is that the hardware platform for the ePlex 5800, which is the government version of this lock, it's the same problem. Now we put this on a stand. This is the ePlex 5800 demonstrating the same vulnerability with regard to applying shock to lift the or bounce the locking plunger assembly in order to open the mechanism. Toby? That's one. Again, it's timing. That day that we were doing that video, I couldn't open it. So at the end, I said, well, let's shoot the last video and continuously we were open the lock. Okay. So that's our first problem. Now we go to the button. It's not our first problem. That's our first problem. Okay. Okay. So this is the next attack where we use a cheap screwdriver to physically break the link inside the bypass cylinder to the tailpiece. Okay. So this is like a $3 ace hardware screwdriver. And why we want to do that? Because we got extra screwdrivers. So we have two functions for this key. One is factory reset. And the other is to open the lock. In order to reset the lock with the key, we just have to turn counterclockwise retracting the ball. We're going to press down. We're going to release on the key. Let me do it again. Release on the key. And you see the two LEDs flashing back and forth. In this moment, we have to put one, two, three, four, five, six, seven, eight pound. And that comment resets the lock to factory. Our new master code of factory master code is one, two, three, four. Okay. Okay. So Toby, how are we going to defeat the system? Well, we're just going to put up on a screwdriver through the keyway. We're just going to break the tailpiece on the back. Okay. So we utilized an inexpensive screwdriver about $2, $3 to break the linkage between the tailpiece on the bypass cylinder to the plug. Now what happens here is once you break that linkage, then you have the capability of going through the keyway with a screwdriver. And we can directly control the bolt. Right there. Just like that. Okay, let's do it again. Now what I'm going to do, I would like to reset the lock. Right here. Button, the key. And now we put in a new master code. So you can see the vulnerability. We just reset the lock. Now I can open this lock one, two, three, four, five, six, seven, eight. And the lock is open. And the lock is open. By resetting the lock, what we're doing is all the codes that we're programming in that lock, we just delete it. Yeah, nobody can enter. Okay. Okay. This is the next one. This is an internal attack, which we're really most concerned about, rather than somebody walking up to the door. This is somebody, this is the bad guy that's in your banking system, that once he has authorized access into the building, nobody's watching them. And he goes down to a room that's not particularly protected, that stores all the blank credit cards, okay, or a remote military base. And we sabotage the handle to open the lock the way it's not supposed to. So this involves removing the lever handle on the back with a set screw, inserting a wire through the back of the lock, putting the handle back on, retightening the set screw. Very detailed. It's a very difficult process to do this. Very, very difficult. Okay. So actually, this was the video that we show cover. Yeah, this was the video we showed cover.  And that will allow the lock to be opened in a way that is not normal that is lifting the lever handle upwards, rather than downwards. Most employees would not even think to try to access the locking system with the lever up versus down. Okay, Toby, let's do it. Our code again with semester one, one, one, one. Okay, deliver clutch. Yeah, the clutch is not engaged. So in this mode. So now if it was programmed for passage mode, then it would be entirely different. There is a small and screw range on the bottom. We remove that. Just have to unscrew that remove the inside handle. We're gonna push down the outside ever. I'm gonna sort of very sophisticated piece of wire. You can see if I pull on the lever, we can just hover that wire, putting the handle back with the set screw. Yeah, there's no there's there's nothing different in the operation of the lock. But it's now been set so anybody can open it by lifting the lever upwards, which is not standard operation. So it works the same one is not opening open with the master code or once. So the lock works normally. If I decided that I don't want to use the code, I can just leave the handle. So these are the four components that you have to deal with. We know this is really, really difficult. Okay, this is Cobb's statement. It takes five to 10 minutes to do this. In the video, the removal and reinstallation of the inside lever was shown to occur in seconds. This is not the case. A small set screw must be removed first. To reinstall the set screw, the lever must be carefully positioned. And then the screw installed to the correct depth or lever binding will occur. This may take five to 10 minutes to accomplish while on your knees behind the lock. Okay, well, we test their their pre we tested their premise. I called Toby I said, Oh, okay, here's what we're going to do. Well, we never show how how long it takes to and this is liberal time. So here we go. On top we have the total time to accomplish the attack. Now, the first screw, 10 seconds, 12 seconds, 12 seconds to remove. Yep. We didn't tell how long it takes to remove the handle. So I don't because actually they said it has to be very carefully, very carefully, very carefully. So we put the wire, we check that the wire is working, is working. Now the difficult part against putting back them. So again, we're and I'm using one hand, because the thing is, the the camera angle was okay, if I'm covering, it's not going to show that I'm putting the wire. Okay. And we stopped 5951. Now, you can do it in 10 minutes also. Yeah. So we save the best for last. So all of these we think are really serious design deficiencies that could be exploited by bad guys. Okay, this is the best one. So Kaba offers a programming option to allow remote open. So you like I said, you push the push button just like an electric strike, the receptionist pushes the button opens the lock. Okay. So there's two LEDs at the top of the lock to show status. Okay. So this is what happens. The next demonstration is another design defect that we perceive in this lock. In the ePlex series. This is the remote open option. You gotta love this engineering and shorting out the pin, which the engineers at Kaba decided to place directly in back of the LED port. So you guys are doing it wrong. Yeah. So here's Kaba's answer. We fixed it. Okay. A part of the factory configuration. What a part of the factory configuration for remote unlock, a metal blocking devices installed in the way of the LED parts to prevent this type of attack. The version tested in the video was not factory configured for remote unlock. Like maybe somebody got the master code and entered the 012 code for remote unlock and they didn't even know it. Okay. So they said you can't do this. So this will be the last video. If we ordered the lock to Kaba and asked to ship the cable and because we want to use the request to exit feature of the lock, they will provide you with the cable to be hooked at the terminal on the back of the lock. But also it will provide a protector. A protector. It will cover the contact point that we're looking for to trigger the request to exit, which is right here. Now the way that we are triggering that is through the LED and we just grounded the first post. Now if I put the protector on top, we have to notice two things. First of all, there is a gap between the protector and the circuit board. So we can steal. So it's the same thing. So that's the problem. They think they fixed it. They didn't fix it. So let us just tell you we have found three or four other covert entry attacks on this lock that were not disclosing except to the government in Kaba. We can open this lock literally in five seconds. No audit trail, no damage, no trace. Well, with our clock, with their clock will be like 15. Yeah. So the bottom line is security engineering failures have consequences. They have consequences in the protection of your facilities. And they can also cause legal liability. So you really need to understand what you're buying, what's secure, and what's not secure. We'd like to thank you guys for coming again. If you have any questions, we're offline.


Welcome to Mem Analysis for Hedgehogs. I don't know about you, but it's pretty hot here in Germany. FIA-I has published a paper on the topic dust fuscation and that's actually a collection of fuscation techniques for cnd.ease commands. That's a quite interesting collection. Some of these fuscation techniques haven't been in the world before and so they are new, but some of them are based on previous wild samples.  Let's take a look at one wild sample right here. The goal today is to de-fuscate this to the point where we get the actual payload of the sample. The dispatch command was in a macro malware and I skipped the step of extracting the macro and so on. That's not the interesting part right here. Okay, so that's our batch script. Yes, it is one and let's choose the appropriate language for that and we only need no++ and Python to do the task for today. First thing, or the thing that we can easily tackle is the carrot symbol. The carrot symbol can just be removed if you look into the paper. I think that was one of the first things described carrots, right? So it will explain to you that that's an escape character and most common use of fuscation character. So just in this case, we can just use a replace, search and replace function of no++ and we will replace all occurrences, remove the tick mark from the selection. So we replace the carrots with nothing and then we get this. It's still not quite that readable, right? There is another character we can remove most of the time. Those are the commas and semi-colon. So we can do that as well in the same manner, but we don't want to remove it from everything. Here's a part where there's a string that's set to a variable. That's the name of the variable. We don't want to mess with this up. So let's remove this stuff just from this part and the part before. Yeah, replace, place and same with this character. Okay, so that's a little bit better, but still not the way we want it and what is that? The pluses, they are superfluous because these are integers and you add a plus. Okay, it's the same integer. We can use now regular expressions to tackle this task. So what we could do is use something like rexr.com. That's quite interesting for testing your regular expressions because you can enter your text here. You can enter expression here and we'll explain what you did there actually. Here it says, okay, that's the capture group and it's also colored so you find it and so you match this character that from A to that and so on. So you know what you're actually doing here and can quite easily write regular expressions. So let's copy and paste this in there. And I want to remove any plus that is followed after a digit. So firstly the class is a special character. So we have to use the escape for the plus. Now we have our plus values and then digit is slash d. So we may have numbers like that. Actually, yeah, I think that's better. And we want to remove the plus and we want to retain the digit itself. So we put the capture group on the digit. I think that's quite okay. So now we have the marks are correct. So we copy this and if you have if you put the tick on regular expression, you can actually replace and find based on regular expressions. So that's the capture group. You can access the capture group with slash one. That's the first capture group. If you have several of these, you would have slash two, slash three and so on. So we replace this expression with this expression. So that way we remove the plus. Let's test it on a small set like this. Say replace and selection this. Oh wait, we want to use this. All right, place and it works. So we can remove that and place it everywhere. Okay, that's a little bit better and then there's another thing there are like superfluous spaces. We can remove them too. Though we have to take care not to remove them from variable names like these. We have variable names here. So use a regular expression for that as well, maybe. Okay. If we have two spaces, we might want to replace them with one space instead, but not if they are preceded by something like these because those are variable names and not this because there's also a variable name like this. We don't want this. And we don't want space before that. Okay. And now let's add a plus. So it marks all those spaces that are not part of these variables here. I think that should work. That should work. It doesn't work in general, just in this case, I guess. Okay, so if we do that, what do we want to replace it with? Well, we just want to capture, that's a good question, actually, the part we want to retain is this. So one of the spaces is retained and the rest of the spaces can go. So we use that. Yes, so we replace that with that. We will delete, so we will delete the space after that and any other spaces that come after that, while one is here, being retained. Okay. So let's do that and replace them all. Okay. Now it already looks a bit more neat. Again, that's kind of interesting. Let's mark this. So you see where this variable is. Here's one variable. Here's another. What is being done here is we have the variable and this is set to this alphabet right here. It's an alphabet. Okay, let's mark it. And then we have this variable. Okay, let's mark it. And then we have a for loop, which will assign these integers to this x. So first iteration, it's x is 58. Second iteration, x is 1 and so on, until the 66. But then there's like this exception if it equals 66 aboard. But there's no other 66 in there. So it will board right when the last value is there. This variable will access the alphabet with an index x. So basically it will get let's say x first iteration is 58. So it will get the 58 at the 58 position the character in this alphabet and then assign it and add it to this variable. So by this way it will build up the command and the command is executed here. So it will use these indices for building up this alphabet for the encoding of the payload. We can now simply use Python to translate this. Python command line interpreter is quite useful for that. And I will say, okay, alphabet, right? That's a string. So we put this in a string. And as you can see here, the alphabet is 66 characters long. So if you have an index 66, it will be out of bounds because you access the array from 0 to 66. So that last value is an index 65. 66 was from a row. So we don't need the last value and don't really paste this alphabet right here. And then we have our indices and they are first this string. But we don't want this string. Actually, we want the values in there. So we split the string. If you don't add any parameter, any argument to split, it will split in white space. So now we get this. And it's an array of strings, but we want indices. So we want to have integers instead of that. So let's just make this a bit better and convert it to integers. So for every index, we will set the integer value instead. And now it looks better. So we can now say for every index in indices, wait, set the result to payload. The payload, that's the variable we saved the payload in. I will initialize it with an empty string. Before every index in indices, we access the alphabet at index. And we add this to the payload out of range, right? Because that's because of the last value in there. Still did write the payload until that point. We could now write it to a text file. Maybe we should do that. Well, let's just payload txt write. We will write our payload in there. So if we exit this, it will also close the reference. Not bad. To payload txt. And there's the payload. Here's our payload. We set the language to, let's say, PowerShell. So we see what's going on. And all it does, it will iterate through these URLs and then execute them, download the file there, and execute the file that was downloaded. So that's a payload for a downloader which has several sites to access. Yeah, that's already it, I guess. I did a short script that does the de-obfuscation for this particular batch file. So it may not work on others. It's just in case you want to use it and modify it for similar cases. So I'll put a link in the description below. Thanks for watching and see you.


What's going on everyone Sam here with late in sports cards rip in 22 panini phoenix football each two hybrid five box break number four Random team style. There's a look again at your random results as always you can find these on the website under the results tab As well as the link in chat. Thank you guys again for getting this filled up. I really do appreciate it Getting everything filled up today. That was awesome We do one thing really quick Hold on just one second. Thanks for the sub there Andrew appreciate you buddy Quick Come on. All right. Good. Look here. We go. Sorry about that. Yeah, Tony's probably them the guy to go to 101 Josh Allen and coming got to speak it into existence. Let's go. Let's go and then So we like to hear okay, Thomas Mike Evans purple to 99 person once Future bucking ears starting quarterback person once down in Kamara Who's gonna start trash Another team that's not in on Lamar now, which is awesome There's flamethrowers Lamar Jalen one red Jacoby Myers to 125 Leo Chanel, it's like a green coming up here Eulam it is Marcus Mariota second green Mariota this time at six of 25 person once laser Travis Kelsey red Samir white I swung there to 150 Christian Watson rookie rising It's fire nice Danny Gray Rookie to 50 for the Niners and Tyrion Davis price both of Niners rookies there But nice orange Tom Brady to 75 for the Bucks 73 of 75 Jair Alexander TJ Hawkinson to 125 Video Jair Alexander like talking smack about Justin Jefferson. He's got the big hat on. No, let me show you it like Alexander Gave an entire interview talking smack about Justin Jefferson with this So funny or me I don't know if it was if that was the one where he was talking smack on Justin Jefferson But he was like talking trash in that video about something and he's just got the Red Leo Chanel to 150 so ridiculous Justin Jefferson Yeah Like how do you take that seriously like if you're a reporter like how are you taking that seriously? I Be like laughing me. I'd be like this dude serious There's rookie rising Jameson Williams nice Jima purple Dak Prescott to 99 cave-on tibetan owner of the cave-on tibetan Chris Olava a red brand-new 125 I want to say the wrong one contours Tom Brady I'm gonna have how I put that as my thumbnail tomorrow No, no, the big hat Jair Alexander Nashi Harris That'd be great When that be awesome That'd be pretty funny Josh Jacobs to 75 Mac Jones Justin Ross to 150 Jameson Williams hot rock feel like we fold like five of those reds Yeah Cornering the market on that one again Devon white Devon white leaving the book in yours Really Purple Javante Williams To 99 Might have been David I mean David's good, but like I'd rather have to wait. Yeah, because he's younger too There's a David Montgomery orange to 75 Yeah, because Levante I'll probably get paid somewhere for like really like a three-year like 40 million dollar deal However old he's even leave for what 11 years I think Great Yes, that is there is no shortage of good linebackers in Tampa ever Purple Chris Olava a nice one there to 99 Desmond reader I Know it's fearful I've had him before to where he's gotten hurt so frustrating speaking of David Montgomery again to 75 Traylon Burks He plays 80% of the snaps and yep. Yep 100% you know how it goes There's a red Cam Thomas To 150 Nicoby Dean top earth from our Chase contours Playing throws Josh Allen I will probably be staying away from David Montgomery to be fair great running back just gets hurt dude Always hurts like the bears running backs are always hurt George Kittle fire nice to 50 and Zach Wilson. It's going well earth. How are you doing buddy? There's Matt Ryan to 75 Beyonce Johnson red Josh Allen 125 That's one there and CD lamb, this isn't it right honestly It feels like There's rookie rising Garrett Wilson on the velocity Purple Devin McCordy to 75 and a sauce gardener What's a nice lasers there hot routes AJ at Brown? Laser Kenny pick it very nice Orange Jalen Hertz to 75 Contours Randy Moss Here there's a green at mr. Brandon cooks to 25 for 25 nice one there Texas That's a guy who I would love the Ravens to pick up at the gets caught. It's like a cap casualty I really like rain cooks. I always have There's a red Trayvon Walker to 150 Stefan digs Yeah, as long as it's not the answer to the wide receiver issue the glaring wide receiver issue in Baltimore I would like Brandon cooks It's like putting a band-aid on a bullet wound that's how I say with that There's purple Miles Garrett to 75 to 99 can he pick it like when we signed to Shawn Jackson Mid-season last year. I'm like really There's a great pickup It was decent, but it's like again. It's like putting a Band-aid like on a decapitated individual. I'm saying up. That's all fixed. There's John Dotson. It's like really It's like it's not 2015 like which I mean we're shot baby. It's not a certain not a surgeon. No Too busy getting hurt to be a surgeon. There's Tyler. I was here tonight. I'm so I'm ready, right? He's so good to when he's healthy, dude. That's like the issue like I love when he's out there But he's just never out there. It's always like a foot injury flame throwers Matt Ryan Matt Jones Fair that's very fear fair there's beautiful. It's gonna be Lamar overthrow zone You can catch up to it fire. Nice Charlie Kolar rookie to 50 for the Ravens Russell Wilson, we're gonna say Orthopedic he does he literally needs like an orthopedic dedicated to him Milich Jones red Tyler Alger or no Tyler lock it. Excuse me to 125 Chris Godwin hot routes for the Bucks Last box of the day. Good luck here, everybody Purple Aaron Rodgers to 99 Rising rookie Kenny Pickett fire forge Kurt Warner Which one of the Jair Alexander green Devonta Smith there you go Eagles that is 17 of 25 So ridiculous I Don't know. I don't know what that was all about fire nice Garrett Wilson nice one there Jets Brad R 13 of 50 Cam Taylor Britt I had James Conor Lacher when he was healthy. He was really good. But again, he was like always questionable He was always like a game time decision and he was like should I start them? Should I not? Daniel Jones to 125 and Alvin Kamara orange sauce Gardner to 75 nice one there for the Jets Tyler Murray Jets doing very well here Josh Allen contours, right exactly exactly Land throw as my homes at Damien Pierce to 150 and Dallas Goddard There's a red Damien Pierce to 150 as well as a Devonta Adams hot routes do a quick recap here everybody Damien Pierce Damien Pierce 4 and 97 Trayvon Walker the Cameron Thomas Justin Ross Leo Chanel is mere white Purple's Tyler Algier Chris Olava oranges sauce Gardner fire and ice Danny Gray Charlie Colar and Garrett Wilson That will do it for the break guys. Thanks again for the fill next up. I've got nothing


President Bola Tinubu has sworn in Senator George Akume as the new secretary to the government of the Federation as GF at the council chambers. Senator George Akume in the brief ceremony, which had dignitaries including some serving and former governors, took his oath of office, allegiance and took his oath of allegiance rather and oath of office. The Vice President Kashim Shetima, President of the Senate Ahmed Lawan, Governor Abdul Rahman, Abdul Razak of Quara State, Head of Civil Service of the Federation, Dr. Fulasha Day Iyemi Asan and the Spouse of the SGF, Mrs. Regina Akume were also among top officials present at the occasion. But Secretary to the government of the Federation, I would discharge my duties to the best of my ability, faithfully and in accordance with the constitution of the Federal Republic of Nigeria and the law, and what was in the interest of sovereignty and integrity, solidarity, well-being and prosperity of the Federal Republic of Nigeria. But I would strive to preserve the fundamental objectives and the erected principles of state policy contained in the constitution of the Federal Republic of Nigeria.


And to forgive people that's something spiritual like naturally we don't want to forgive because we don't forget remember Rick Ross had album Rick Ross had an album called God forgives. I don't Yeah, remember that remember the album title God forgives. I don't Hey I'm just like man, bro. That's that's sound that's sound blasphemous right there Bro, man Freddo I've seen so much maturity. Do you realize that when Freddo and NBA young boy chose to squash their beef publicly? Yeah, a few months back. I remember that. Do you realize like how many lives that saved? Yes, when they chose to do that publicly. That's hard. That's stuff that Our generation we like man, why did I ruin 50 cent can't squash their beef? Why why Birdman and Master P can't get together and you got two brothers in a mid 20s that chose to say Hey, we're gonna put our differences to the side.  So I love that and I and I was proud of him and I hate him Yeah, I told him I said I said and you know how I told you I don't call people Legends or I don't idolize people no more and I was like, I think I that's exactly what I told him I said what you just did today was legendary. That's real. It's put you in a whole different space Yeah, it's just a different world when you look and think looking at things from a spiritual It is ego to to mean and they don't take themselves out of the flesh because when we ask people about Master P or I'm Birdman. It's like well or even like mode three with Before he had passed this rest of yellow and trapping yellow and trapping stuff People always say that'll never happen. It was too much bloodshed that happened for them to even come back together Really? And I'm like and that's that's always the same answer. It's too much bloodshed too many people That's just unforgivable. This is what you go. That's that's all I'm hearing is I'm forgiving exactly The Bible they must not know how much blood was shed in the Bible and God still used those same people who were murderers You know saying fall was come on man turn them into Paul. You know, I mean, they don't see it how David was still seen as a man after God's own heart and David out she'll Messing with bad sheba got bad sheba's husband Merck. You know I'm saying yeah, right ahead tight come on man, so That's that's what happens when we apply like Human knowledge and human what we call wisdom to the spiritual realm of life Like unforgiveness is a thing that human beings. It's easy as a human to be like nah I ain't never forgiven that person because of what they did if you thinking in human terms, but when you apply Spiritual wisdom to the life we live it pulls the side out of you. That's not natural You know I mean and to forgive people that's something spiritual like naturally we don't want forgive because we don't forget remember Rick Ross had an album. Um Rick Ross had an album called God forgives. I don't Yeah, remember that remember the album title God forgives.  That's that sound that sound blasphemous right there Like we once we say that we don't forgive people. It's just like We basically saying we now willing to grow No, but unforgiveness unforgiveness is something that The human generation I caught ego Unforgiveness always talk to people about that. I always say, you know our lives is not our own When I say that mean like situations that we go through it's not always because of Okay, so I was saying that you know in life and I say this all the time How I look on life I look on life like when you're born God clock you in at this Job called life life And you have every each person have a job to do we might not know exactly what our job is But when your job is done he clocks you out and when I tell some people this are like But a baby who was just born and died right then and there I said that baby's job might have been to touch the nurse That witness it or whoever is around the mama the daddy who Saw this person pregnant for all these nine months and going through all these different changes That person could have been on drugs and stopped taking drugs because of that child We don't know that child finished their job. So God took that child Because they touched whoever they're supposed to touch and change it. That's why in life I always said why live your life to the best you can because Whoever you touch might not always come to you and say, thank you so much. You changed my life But because of you somebody who's watching your life change it and now we're in a in a generation where everything is on social media Being recorded whatever you can touch so much more by Just being true to what we believe in yo that that makes so much. I see why you married her, bro Yeah, well, you know, I am I did what God gave me the ability to do I was a changed man and I needed to do I married her in four months when I met her and we've been together for 20 years I walked by faith and not by sight. There you go. I get it because what you just said that is so real because A lot of times when you try to talk to people about God They they look for like the most extreme example of something to Go against what you're trying to tell them Oh man, God has a purpose for all of our lives and their their first thing they'll say will be Well, what about a baby that died when they're three months old? And I love their response because that takes wisdom to know That God can God can indirectly bless people even use babes Yeah, even even through a non-traditional way even through even through death Like you said the the process of that baby being born the process of that mother being pregnant Could have been a blessing to other people exactly and and And we don't know who it is that we need to be touching but we have a job to touch each other Oh, yeah in some way or form, you know, it's instagram made it to where everybody won They won't get their flowers right now like they won't see it They won't be like oh if I if I ever blessed you I need to see it and document it and be able to post it on my page But like you said a lot of the people who I learned that by doing music because I'm like I got so many millions of streams on my music But I could never meet all these millions of people in life So I had to learn to be okay with hey What you choosing to put on this album d1? This is going to reach people that you will never see in person But you should love those people and and appreciate The fact that you got their attention span for why they're listening to your music and handle that with care, bro don't be don't be Negligent with the opportunity to to change their life and don't don't fumble with that opportunity to really like You know sow some seeds of wisdom and godliness into them Like what I've been through amen when I have outside money. I stayed in wow Um, David and Goliath was your first album. It was what was uh, what um What what possessed you to to do that was because your name is david and because you read up on david and and not just basheba, but the fact that he was A rudy boy He was you know, I mean he was young and he was the one that they least expected It was more it was more that one underdog, you know underdog mentality me getting into the rap game at the time everybody telling me Bro, you you're not gonna make it trying to go against the grain, bro The people that's popping in our state right now is li'l Wayne kevin gays Boosie, you know, this is this is what they want to hear you trying to be so different You ain't gonna make it like that that that didn't make me change that made me go twice as hard I felt like the underdog like david so I said david and goliath This whole industry is goliath, you heard me But I know what my slingshot is my slingshot is this microphone I know that with this microphone when I use this for the purpose God designed it. I'm gonna be able to slay this goliath Wow, here we are. That's huge. I wanted to ask you about uh, Dr. Boyce was it that Dr. Boyce? Yeah, yeah, Watkins. Well, what uh, when I say that name, what comes to mind? og mentor a brother who Took me in and gave me the coast sign that I was Running behind so many rappers trying to get, you know, I was driving state to state trying to get ti to co-sign me trying to Trying to get Wayne to co-sign me trying to get ludicrous to co-sign me Um, man, I just gave my cd out to so many people, you know, I was that dude Giving my cd to jaman do pre bg burman like like all these all these people, right? Meanwhile, dr. Boyce Watkins never even met him in person But brother ended up hitting me up on the internet one day, brother You are a lyrical genius My d1 man, you amazing.  What else i'm going to do but say man, bro, you got you got my friendship You got my loyalty, bro. Thank you for this and when you got people that's co-signing you like a Boyce Watkins Brother named the hip hop doc. He's a doctor in baton rouge a doctor, right? who Me and him did some work together where we would go around to different schools and I would I would write these raps for us What we were rapping about like exercise and eating healthy and Stroke and and heart disease and just things to teach you about, you know, healthy uh lifestyles He was a big co-signer of mine. I realized like man. God really got A different path for me my co-signs the people that's willing to put their arm around me and open doors for me It's not the rappers. I grew up idolizing. You know what I mean? So when you talk to me about legends, you know I'm not going to be naming rappers as legends. I'm going to name people as legends who are a Successful in what they're doing but be The way that they're doing what they're doing is what's making them legendary because it's like you're doing stuff That's positive for the community you doing stuff that gotta be proud of and you successful at it. That's legendary to me


The budget is coming tomorrow and one word that you will hear a lot is fiscal deficit. Now, I know most of you dread that word. It sounds difficult, but it is actually very simple and it is important because there are a lot of myths surrounding the idea of a fiscal deficit. Now, whether we know anything about it or don't, we've all been convinced by years of propaganda that fiscal deficit is inherently bad and that the job of every government is to keep it under control. This has been drilled into our heads by years of propaganda by pundits on TV and successive governments have accepted it as an inviolable mantra. But before I tell you why this is a myth, let's just understand what fiscal deficit is. A deficit occurs, understandably, when a government spends more than it earns. Normally the government earns, the government's earnings come from taxes, from fees that it takes and also from the dividends it earns from the companies that it owns, the public sector units. The government can also earn by selling these public sector units. We have come to call this process disinvestment. The gap between the government's total earnings including from disinvestment and the government's total expenditure is called the fiscal deficit. Now we're told that a high fiscal deficit is bad. This means the government has to borrow more because it is living beyond its means. If the government borrows from the central bank and monetizes this fiscal deficit then the bank will have to print more money which will cause inflation. If it borrows from the private sector then it will use up the corpus of savings in the economy and the private sector will actually be not left behind with any funds to invest on its own. This is what mainstream economists call crowding out the private sector. Both these arguments are fundamentally wrong. Let us take the first one first that a high fiscal deficit always causes inflation. Now this argument is an old one and it is typically taught in our high school textbooks. You might have studied it too. If more money is printed in an economy I hand it over to people but the amount of goods and services remain the same. All that will happen is more money will chase the same amount of goods and services and that will push up prices in the market and that will cause high inflation. On the face of it this seems reasonable but only in an economy where all productive resources are operating at full capacity which means all factories are producing as much as they can and everyone who wants work is employed. In such a situation output cannot be increased and if people have more money in their hands it will only cause higher inflation. But what happens in a country where the opposite is the case where capacity utilization in industries low and there's high unemployment. After all this is exactly what is the reality in India. If higher government spending can put more money in people's hands then the overall level of demand in the economy will go up. If only 7 out of 10 machines were running in a factory now 9 might be put into service. If 7 workers had been hired now 10 will be hired to run these machines and this is what is called economies of scale kicking in as output goes up. The average machine cost per unit of output will actually fall which means the cost per unit will drop instead of rising. In other words higher capacity utilization will bring down average costs and the average price even if the owners of these factories actually increase their profits marginally. So instead of causing inflation higher demand induced by high fiscal deficit might actually result in a fall in the inflation rate. If some of the additional spending goes into providing subsidized food and others and goods and services to the working people to the poor then that will even help keep wage inflation down because workers would be able to sustain themselves without a rise in wages. Even this will help reduce inflation so instead of raising it that means a higher fiscal deficit if used to fund the right economic policies can actually lower inflation rates instead of causing them to go up. Let's now come to the second part which says that if the government borrows from the public to finance its fiscal deficit then it will crowd out the private sector and not leave anything for them to invest. Again this is a complete misconception of the nature of savings. A high fiscal deficit can lead to a rise in the overall demand for goods and services in the economy and if spent on subsidies to the poor can even keep wages in check. Who gains from this? Obviously the private sector who profit from higher sales and lower costs so by lending to the government they effectively increase their own profits and savings. In fact government borrowing from the private sector creates a commensurate amount of savings in the hands of the private individuals because one person's loan is another person's saving. The most ridiculous argument here that mainstream neoliberal economists make is that the way the government can avoid a high fiscal deficit is by selling public assets to the private sector. In other words by disinvesting this is nothing but an accounting exercise a trick because after all if instead of borrowing assets assets are sold to the private sector it would still remove savings from the hands of the private sector right and it put it in the hands of the government. So no new productive assets would be created existing productive assets and resources would simply change hands. This is no different from a fiscal deficit that should be treated as the same thing but it is not because disinvestment is used as a ruse to transfer public assets the people's property into the hands of capitalists. If the government borrowed instead of selling assets then it would continue to control crucial parts of the economy but if it sells its productive assets the private sector gets to take control over all aspects of the economy. That is what neoliberal economics has been pushing for for over three decades now and even though these policies have failed 90% of Indians they continue to rule policy making in this country. Okay that's the show today if you have liked this video please press the like button leave your comment share it with your friends and family also don't forget to subscribe to our channel press the bell icon so that you get to know every time we upload a new video. Until next time good bye