This is Think Tech Hawaii. Community Matters here. Hey, Aloha, and welcome to Think Tech Hawaii Studios. You're watching the Cyber Underground at one o'clock on Friday afternoon. We're going to be talking about open source intelligence and kind of continuing on with this discussion we've had the last few weeks. I'm here with Jeff Milford today from ISC Square. Jeff, good to have you.  We can talk a little story, maybe some stories from the field, and we'll see what's been going on.  Now, I know you're telling me that ISC Square doesn't really, doesn't necessarily look at the kill chain for the way they stack their credentialing and things like that. For the CISSP that wasn't part of the body of knowledge or the CCSP, but it's something everybody has to be familiar with. In practice, right? The CISSP is as broad as it can be, so you have to understand it and you have to be able to detect when people are doing things like that. That includes the social engineering part, which I particularly enjoy practicing. But from the good side of things. The white hat side. The white hat side. The research side, as we call it. Researchers, researchers get a lot of help. Yeah, like I'm supposed to be allowed to go into this building, but what happens if I try to go in without a badge on? Is somebody going to stop me or wander around and somebody going to ask questions? Yeah. It's to do that at one of my older jobs. Won't mention who it was, but you learn a few buzzwords. You get somebody's name inside the building. You just say, I'm here to fix so-and-so's computer. They're having trouble with the XYZ app and boom, you're in. And people want to be helpful, right? Sure. And I think that speaks to the thing that we teach a lot from my world a little bit more about access control and having that badge and challenging people.  Don't just accept them at face value because they look friendly or they act friendly or they seem to know where they're going. They should have the proper credentials. And this person they were supposed to see, why aren't they with them? That's always a great question, right? Yeah. And so it's a big piece of it. I definitely, when I would bring on new clients or when they wanted to meet with us, I would tend to show up early at their facility and I would do this ad, just walk around, see, what's the posture? Does anyone stop me from going anywhere? Somebody might say, hey, can I help you? I'm just going to the restroom back here. They're like, oh, it's that way. Let me go. Any which way are you? What's in here? Sure. Interesting stuff, interesting stuff. Yeah, the social engineering piece is, I think, what's relied upon a lot. We talk about the idea of we can implement a lot of the technical controls when we have a great mapping for that with the 853, all the stuff from NIST and the cybersecurity framework, wherever you may take your guidance, be it ISAC, ISC squared. And once you get a place technically hardened, you still got this problem called people. That human equation. Gordo calls it the wetware. The wetware, I like that one. So, you know, we have these human problems and the humans make themselves vulnerable really to the exploitation of this open source intelligence by the information that they share. Now some of it, maybe they didn't mean to share. It's been harvested from some place. But when you guys are in practice, what are some of the things that you're looking for in an organization that they may have, some of the sloppy practices that you see with their staff? With the project I'm doing right now, I've been calling vendors and I asked them, can you send me a list of equipment and the IP addresses on our network? And I get these full dumps of everything. They have that information and they send it over on encrypted email, right? Yeah. And granted, I have an email address for the company I'm working with. Sure. But one of the guys in IT overheard me and goes, wow, you're really good at this, aren't you? You're convincing. Yeah. Again, it's people wanting to help people. And I'm representing a client. You know, I'm a customer and I've got a good story on why I need this information. And I'm like, oh, yeah, we pull all that. Sure. Yeah. Let me get that to you. It's tomorrow, okay? Yeah, tomorrow's fine. Wow. Yeah. Isn't that something how easily people would share with that? They didn't verify with a third party. They didn't really have to have a password. They may know you're working over there and trying to help, but are you actually of the authority level that should get that particular information? They didn't really validate that. And maybe your name's on a list. They say if Jeff calls, give him anything. Who knows? But maybe that's not the best practice either, right? Probably not. Because maybe your contract ended yesterday and you're calling again today to get some other information. Now that I did my recon as a contractor, not that I would ever do that, of course. Yeah, you got to stay on one side of the fence. If you want a long-lived career on either in the dark or in the light, you know, one way or the other, crossing the fence will shorten your career. Well, and that's the thing about contracting, too, is you have a reputation. And if it ever gets into the gray area you're done for, you can never reestablish that again. I learned that when I was on the main line working for some companies. You have to always be better, more visit, more transparent, all of that kind of thing. Yes, but I think people are asking better questions today. Hopefully I'm sure you're seeing that from the interviews when people are trying to compile your services. They should be asking better questions. I saw the Microsoft report came out today, the security report. Massive 44% of the vulnerabilities, the sort of the brute force attacks that are happening in people's passwords aren't happening because people are still using that domain password and they're using it over on their Facebook or they're using it on their LinkedIn or someplace else that it's been harvested from. So is that a, how do you see companies combating that? How do they police their employees other than training, of course? Well, inside you can force the password resets, give them a short age. You can't use the same password for 30 times. I mean you can get really crazy with some of the settings. But people, I mean they're going to write it down somewhere. It's difficult. That was another game we used to play when we were contracting because we had to go log into these people's machines when they weren't there. And nine times out of ten we could find their password. It was under the keyboard, it was taped to the monitor, it was behind the picture of the kids. They have a picture of other kids' names. Exactly, and you just turn it on. Okay, here we go. We were talking about this before. Most people don't think like bad guys because we're all honest people. Yeah, we're trusting. And it's the same thing with sharing the information. Most people, it doesn't occur to them that like you guys were talking about sharing a picture with information in the background. You don't think about how that information can be used against you.  But I've lately been using the word cautious. You need to be cautious. Need to think. You need to think about it. Slow down a little bit. Like you were talking about somebody calls you up and says, hey, I'm so-and-so. Remember, yeah, from school. And yeah, we had a couple beers together. And I started thinking that, yeah, one of the things, one of the reasons why that works is because you give them, you don't have time. You don't have time to process the information.  Give me a number where I can call you back at. And hang up and then think about it. Maybe open your yearbook and say- Yeah, dude, I really remember this guy. Right, right. Because again, we want to be helpful. And if they have a good story, you know, we're going to buy it. But if we take a minute and say, you know, I really don't remember this guy. So be cautious. You know, take that extra minute. And if you tell the guy, you know, give me a number where I can call you back. If they're a bad guy, I don't think you're going to get that number anyway. Right. And they're going to like- They're going to move on to the next year. They're going to move on to the easiest thing. You know, burglars are going to look for houses that are unattended with doors unlocked. If you have lights going on randomly and, you know, your house is well set up, you don't have the bushes this high, all those kind of physical security things, they're going to move on to the easier target. So don't make yourself an easy target. Don't use the same password across multiple accounts and such. Yeah, the report talk about it is one of the biggest things that they found is still as the biggest vulnerability for a tax against Azure and things like that.  And I guess not everyone's as cautious as, you know, we, those of us in the industry are, you know, I guess paying better attention to those rules than we did in the past. It didn't actually occur to us. I had a woman ask me to reset her password to mango. What? And I just said no. That's a- No. No, cannot. We're here in Hawaii that would be a really easily guessable password for somebody, even if it was lower case. Yeah, that's surely in the list that they run in their brute force list. I mean, all the fruit and all the fruit I think is on the list anyway. Like all that kind of stuff. Yeah, you need multiple words. I was, I don't know if you've seen that diceware. I was talking about diceware a little bit last week. So nice list of words that aren't meant. And if you use seven of those, you get really quite a bit of, you know, 270 years at, you know, a billion cycles of processing power. So stuff like that can work out for people who aren't creative enough to, you know, change their password to something difficult. And we don't have quantum computing yet. Not yet. We're still, I was also thinking about the password. And I had mentioned before that I like to use some foreign words or some foreign language. Yeah, I think that's a really good idea. Make the hacker load multiple dictionaries. Make it harder for them so they go on to the easier target. And then I started thinking, well, what else could I do? You know, people will substitute letters for symbols sometimes, you know, the exclamation mark for a one. That starts to become easily guessed. Yeah, they run that. What if, what if you just choose a random word and insert that in the middle of your word? Boom. Yeah. Now makes it very difficult. It's much more complex. And those are simple things people can do. But again, having multiple passwords for all the accounts, I go home and I look at, I keep a list. You have a list? I have a list. Locked in the safe? It's very secure. It is, it is secure. But periodically I have to pull it out and use it because I have probably close to 200 accounts. Wow. And there's no possible way. And I know there are applications on the market, vaults that will store them using a master password, passphrase, everything else. That's what we use. I'm still kind of old school. What happens if it, if the application gets corrupted? Okay. Okay, stored in the cloud. The vendors are responsible for it. A couple months ago, one of the vendors for business, a lot of big named companies got hacked. Sure. And yeah, I mean, it's nobody safe. Nobody's safe. We're going to take a break. We're going to come back in just a minute and talk a little more about Jeff's list. Hello, I'm Helen Dora Hayden, the host of Voice of the Veteran. Seen here live every Thursday afternoon at 1pm on Think Tech, Hawaii. As a fellow veteran and veterans advocate with over 23 years experience serving veterans, active duty, and family members, I hope to educate everyone on benefits and accessibility services by inviting professionals in the field to appear on the show. In addition, I hope to plan on inviting guest veterans to talk about their concerns and possibly offer solutions. As we navigate and work together through issues, we can all benefit. Please join me every Thursday at 1pm for the Voice of the Veteran. Aloha. Planning all week for the day of the big game. Watching at home just doesn't feel the same. What on the list is who's going to drive? It's nice to know you're going to get home alive. Plan for fun and responsibility. Choose the DD. Captain of our team. It's the DD. For every game day, a sign a designated driver. Yeah, we were just loving that commercial. You watched about the designated drivers. Anyway, so we're talking about password lists. We're talking about storing information, critical information. Can you use a password storage tool when you've got hundreds of accounts to manage the passwords for? You can't remember all those passwords. And then can you trust that you've got one password to get into all those passwords? That vendor and where's that information stored? In the US? Is it in the cloud? Is it in Europe? Where is it? Some things you should ask yourself probably for the storage of your information. And when we look at open source information that people... We talked a little bit about images and some of the stuff that could be in the background. We talked about the geotagging that people may not know that that photo actually has information about where it was taken. So if you post it right now and you're there, you're obviously not at your home or at your work or wherever. So, you know, there may be some vulnerabilities there that you're exposing about putting that information out. Let's take a... What about some other things? How about like forums, blogs, IRCs? You know, I was thinking about if you're in an environment like that where you're actively chit chatting with someone, they know that. So they know that you're sort of locked down to your keyboard at that time, perhaps. Now, maybe you're in your office or maybe you're at home or maybe you're on a mobile. Can we tell what type of device someone's using when they're doing stuff like that? Do you have a way to assess that? I know that some of the video display stuff that we have, it can tell if it's showing video on a laptop or on a tablet or on a phone, for example. It changes the frame rate based on the way it's being served up. And I just didn't know if there's some other open source tools for knowing what somebody's using, you know what I mean, on the other end of the line. You'd have to pretty much drill down and know where they are, maybe down to the network location to start being able to read that type of thing. So, starting to look back at where they're coming from, you can maybe figure out where they are. I see, it makes sense. And as you were saying, the whole chatting, you don't know who you're talking to. That's the other point. You know, they say they want to have a date with you. And promise you the world. And actually, they want to rob you blind. Yeah, meet me on the other side of town here while I go and rob your house. Come to dinner at six. Yeah. Well, it's one of the things that we try to teach young people. You know, they aren't as experienced. They don't have the life stories yet. So, they're very trusting in a lot of cases. And that leads to sometimes some very bad things. You know, I forget the statistics. But people under 14 who were meeting people in person that they had met online. It was two out of five, something like that. It was really scary. That's kind of scary. It is. And that's somebody who's being socially engineered, right? Exactly. Yep. Through compliments or whatever. And they just say, oh, wow. And so, they feed their ego and the kids don't understand that vulnerability. They couldn't be there. And adults are like that too.  So, let's go to, so forums, a little bit of chats. What about, so we talked, we talked, we kind of beat up the social networks. So, we can maybe, maybe be there for a little bit. What about like people's search engines? So, what familiarity do you have? Because we talked about like, so LinkedIn and Google. And, you know, obviously you can go, but where else can you find stuff about people that they may not know? I just, in prep for today's episode, I downloaded a list out of Google, of course. Okay. And it must have had 60 or 80 websites that I had no clue about because I don't typically use them. Sure. One of the things it didn't have though was LinkedIn, which I found odd, but there were probably 15 business sites on there. There are sites for checking to see if people have arrest records, things like that. The picture sharing websites. And it was very easy to get that list. Okay, interesting. And now here's, here you go.  Sure. And again, we don't always recognize how that information can be used. And in most cases, people don't stop and think about what they're sharing. This week, I was working, trying to contact a vendor. I'm doing a risk assessment on their application. And I need to get some technical information. So I go to their website. They have a sales number that nobody answers. They just goes to voicemail. They must. They're either too busy or they're not busy at all. I don't know what that means. Something. When you're salespeople don't answer the phone, you have a business problem. And there's no email address, but they do have an online web form. Okay, thanks for filling out the form. I tried. Was it HTTPS by any chance or was it HTTPS? And three different browsers didn't work. I type in my message, hit send, and it just... A lot of people, a lot of the browsers now reject if it's not HTTPS, right? They're not going to, so that started. That wasn't working for me. And the weird thing was, I logged into their site. I created a support incident, got a ticket number back to my email address at work. Okay, so that worked. So then I go to log in with the account I created to create the support request. And it tells me access denied. How can you deny me access? And then I get an email back from them telling me that your incident has been noted and will be in touch. And it got to be like Groundhog Day. It was just a constant loop. And I finally reached a point where I just said, okay, enough is enough. There's got to be a way to contact these people. Okay. So I fired up the Google and typed in their company name. And after I think about three links, I got a beautiful list of all the people that work for them. There you go. And what they do with their pictures. So here's a guy, John Smith. He's head of their technical support. Nice. So I know their domain name at company.com. So I just started trying different formats for an email address, first letter, last name, put a period between first and last name. Sure. It took four, five attempts. But I got through it pretty trivial. Yeah. Sure. Yeah. And the guy's like, how did you get my email address? He didn't want to work at all. Yeah. More importantly, why aren't you responding to my request? Sure. So the cool thing was that when it was giving me access denied, it's because their system was blocking me because their system didn't know my domain. Okay. But you were coming from their customer site, though. Right. But the customer internal to the company was actually using a slightly different domain name. Okay. So that's what they would have allowed that. That would have allowed that. And of course, there was a ton of this information floating around at your clients. They no one knew what to do. So he actually told me the two people that I should be talking to within the company, which was very helpful. Okay. So I contacted one of them and I said, hey, this is what I'm doing. This is what I'm trying to accomplish. I'm working for this person inside the company, blah, blah, blah. Do you want to authorize me to speak with these people? Or would you like to pass on my application questionnaire to get it filled out? And I was so happy that she chose a second option. Yes. No. No need to authorize me. I have no need, no business at all communicating with these people, except for this one time. So she passed on the questionnaire and hopefully I'll see it back before too long. I don't know. Their track record's not that good. Although once you got to them, actually it was okay. Yeah. Yeah. And the guy explained to me why I kept getting access denied. Okay. I understand that. I'm in security. I understand that. And you're kind of doing the right thing here. But the rest of all this stuff? Oh my gosh. With HTTP web forms? Yeah. Yeah. So they're probably working on building up their back end or something. That sounds kind of interesting. Yeah. So basically I social engineered my way to the head of their test disorder. Did he like that you did that? Did he ask you how long it took? No. He couldn't really say too much because technically I am a customer, so you don't want to alienate them. That's true. But if he's smart, he's probably going back to his team and saying, you know, we've got a little problem here. Or maybe we shouldn't have put those pictures of ourselves. We're too easy to find. Yeah. Wow. Yeah. And it looked like a fairly couple year old page I'd gotten to. And you know, another thing you can do on websites is you go to sitemap. And you can see down the old pages that they don't display anymore. And as they didn't have it there, they did. I mean, their site was reasonably secure. And the product that they manufacture is something that you would want them to be secure about. But it just struck me as funny. And I'll find a way to get in touch with you. So this brings up actually a pretty good point. You can go to places like Facebook and Twitter. And I don't know about Twitter. Twitter may live forever. But you can have a lot of your information taken down. You can send requests into Google to take old information down. So if you have stuff out there, that doesn't mean if someone else linked to it or whatever. But at least in your own profile and searches for you, you can get some of that stuff out of there. Especially if it's no longer. If I say it's a place you used to work that has your photo up there. Maybe it's got your title. And there's no telling what could be there. But there's no reason for that information to be there any longer. And possibly it's all already been archived by the dark web. I don't know. But there's no sense to leave it searchable from the open source intelligence world. You found all this stuff in open source. So before we get, we had Tom Fielding in here. Of course, we talked about the dark web and all the information that's down there that those guys monitor for. They can find out if somebody's building a profile of you in the dark web and things like that. So this is just open source intelligence that you hunted up. So it's interesting that a company like that's gone to an extent to hide themselves. They're not really a marketing posture. Normally they're very open and there's all kinds of ways to get a hold of a company. So that's of interest to me. It's pretty good. But I was stunned by the number. Everybody uses being Yahoo, Google, the major search engines. But there was a list of 20 search engines here. And it wasn't like ASGIS or some of the... When the onion, right? It just went on and on and on. And if people are determined to learn something about you, they will. And again, we go back to the privacy. Stop for a minute before you upload something. I understand. I have friends who use Facebook to stay in touch with family, different parts of the country. It's really cool. But I'm in a position right now where I'm trying to find work. I don't want to go to my cousin's website and like something political on there. Yeah. Because that could come back to bite me. Definitely. Yeah, employers definitely do that. They do those same searches. At least cursory. And some go deeper depending on the type of job you're looking for, especially in the security world. Some people would say that's paranoid. I prefer to look at it as being cautious. Today it's common sense. I mean, you made a great point about people oversharing, people trusting. And that's been something that has, I think, already been shown to be a bad practice. And maybe some people don't feel like they have anything valuable to lose. But when a guy goes and takes your world away from you and becomes you and gets credit in your name or whatever he does, all that identity record information becomes, wow, I didn't think someone could do that to me. I didn't think anyone cared about me. No one knew about me. I'm no one. Actually, the no ones are, there's a purpose for using the no ones actually. Yeah. I've read about a woman who was spearfished because the guy found out where she lived.  She had posted pictures of herself in her kitchen. And this sounds probably kind of silly to a lot of people. But in the picture, you could see various kitchen appliances. And the security researcher said, what if I impersonated somebody from Cuisinart and told them that there was a product recall? Click on this link. Boom. You're going to get her. You're going to get her. Yep. Yep. So there you go. Your open source intelligence world, there are a ton of people out there gathering that information, using it for things that aren't always in your best interest. So make sure if you're putting your information out there, you're putting it out there for a reason and you know what it is and why it's out there. And be very cautious with putting this information about yourself out. Take a minute before you click send. Take a minute before you click send and think about it. All right. That's all we got for this week. Thank you so much for joining Think Tech Away and listening to us on the cyber underground. Come back next week and I think we'll probably still be doing some open source intelligence and maybe starting to look at some of these tools that are used by these researchers.


Live from Mountain View, California, it's theCUBE. Covering DevNet Create 2019, brought to you by Cisco. Hey, welcome back to theCUBE. Lisa Martin with John Furrier covering day two of Cisco DevNet Create 2019. And guess who we're here with? Susie We, SVP, and CTO of Cisco DevNet. Susie, thank you so much for having theCUBE here and for joining John and me today. Oh, thank you for being here. So this event, there were so many bodies in here yesterday. It was pretty toasty. It's getting toasty now. It is. This is the third DevNet Create, this community. John and I have been hearing that and feeling it and seeing it, see it, learn it, code it, kind of all of your theme there the last day and a half. This is a really inspiring, really natural sharing community that you guys have built here. It is, it's amazing. I mean, just the energy here as you bring together folks, everybody wants to learn, you know? So everybody wants to learn, there's so many new technologies out there, but new technologies that can turn into business advantage. And you know, the attendees here, they all feel it. And it's a different mixture of people because there's app developers, there's infrastructure and networkers and just the bringing these folks together to see what they can achieve is amazing. So that's the energy that you can really feel here. And the thing that's interesting, I'd like to give a perspective on where this all started from.  So you hear builders, maker culture, create. The creation is a critical part of your ethos here. And with cloud computing, Microsoft's earnings came out. There were trillion dollar market cap now, Amazon crushes their earnings again. You're seeing what cloud is doing that's enabling these creators, a new class of developer. But it's not like a new breed, it's just a new kind of orientation. This is part of your vision to share the story. Well, and kind of the whole thing is that, so I'm all about innovation and creation. And I believe that people just want to create, you know, my four-year-old, she just wants to create. It's just in people's blood.  Like you can't just sit in a room and then create. And sometimes it's about how you bring new fields together, how you bring new technologies together, how you bring non-technologies together, right? How you just bring different types of people and perspectives together. And that's really what DevNet Create is all about. So, you know, so we started DevNet five years ago, you know, just with the idea that, you know, the network is going to become programmable. The infrastructure is going to provide more resources and it's going to be programmable and provide more power to applications. So from then to now, last summer we hit half a million developers. Now we're at 590,000 developers and we're growing, yeah. We're lucky to be part of it and we thank you for including theCUBE and DevNet Create and bringing us into the DevNet community. It's been fun and inspirational. But, you know, being practical in the industry, you need to have a wind at your back. You need to have a wave to ride on. And creation is also about momentum. And if you look at the marketplace today, there's some big waves happening. You know, cloud computing is obvious. One, everyone looks at. That certainly changed the nature of companies. This goes multi-cloud, looking at a bigger vision there. But new waves are coming.  So you talked about this in the keynote. I want you to take a minute to explain the big waves that you outlined.  Share the waves. And sign of the whole thing is that we say, there's the infrastructure. You get your networking, you get your compute, it evolves to cloud computing and all of that. But on top of that are these applications. And this amazing set of applications. And we know that those are creating entirely new and disruptive businesses and business models. And there's a lot of growth in all of that. Now, traditionally what happens is that with every wave of infrastructure advancement, comes a new set of applications and businesses. So, going back to our olden days, but there was a time when, you know, you started to get a converged IP network, where you put data and voice together on an IP network and then came voice over IP. Then came cloud computing. And you could do internet search. And, you know, world enough to remember before then.  And instead of just having the cell phone, you could do mobile apps on cell phones. You had mobile apps. And then with 4G, you could do mobile video. And now you just expect it. Now, you could think, okay, the infrastructure's done, but no, there's more. So, some of the things that are happening right now that's really exciting is I kind of talked about it in three areas. In networking, we have a couple really big things going on, which is Wi-Fi 6 and 5G. And so, there's a whole set, and we'll talk more about that. In computing, there's the fact that actually GPUs are everywhere. And with that, you can do AIML everywhere. So, AI and machine learning. And then the third one is just in advancement in architectures. We knew that we moved to mobile. We knew that we moved to compute. But now what becomes real is the edge computing. And so, when you bring these things together, you have new capabilities in network with Wi-Fi 6 and 5G. You have new capabilities in computing because GPUs are everywhere, so you can do AI and ML. And then you actually have a spot at the edge where you can do edge processing. And then all of a sudden, there's this whole new world of applications just waiting to be built. And we want to let developers know that, because you kind of develop and you build for what you know.  But there's a whole new capability coming. Well, first of all, let's unpack those talk tracks. Because one of the things that I, as an entrepreneur, you know, we've always talked about this. The creativity that comes from entrepreneurial thinking, whether you're a true entrepreneur starting a company or within a company doing that inside a company, takes creative juices. You got to have that catalyst, as you mentioned. But also, you got to imagine new ideas, right? And so, by enabling, say, Wi-Fi, for instance, everyone knows what Wi-Fi is. But when you think about the new advances of Wi-Fi and having connectivity with wireless and wired networks with new data access, it just opens up this creative outlet. This is going to be the tsunami or the renaissance of applications that you've been talking about. It is, it is.  But right now with Wi-Fi 6, we can really geek out again. So OFDM's moving to OFDMA, OFDM Multiple Access. It means, like, an access point usually talks to one client at a time. But now it can split up and talk to multiple clients at a time. And with that, you can actually get much higher capacity, right? So you can actually really use your kind of network more efficiently, you know, and then you can actually now also do scheduling. And then you can actually guarantee that a client is going to be scheduled in and get transmissions. That changes what you can do with Wi-Fi and the way you think about it, you know? And then there's this power savings because now you can tell a device the time to wake up. So you kind of sleep, sleep, sleep, sleep, sleep. Here's your target wake-up time. Sleep, sleep, sleep, sleep, sleep. Here's your target wake-up time. That extends battery life. So you can have sensors that'll be out there for one year, five years, 10 years doing its thing. And so that takes all those IoT applications that you've always wanted to build but make some real because someone has to go up and install that sensor and the battery life matters. And the GPU anywhere, the other, so the second wave is the GPU anywhere, which I like because you think of GPUs and Nvidia, you think of graphics, you think of gaming, but it's actually a processor for machine learning. It is. So I want to give you thoughts on this because if you have put GPUs on devices everywhere and the data that you're now accessing across the network brings more intelligence. What's the impact of this GPU anywhere? Is it just IoT? Is it just applications? What's the net net? So kind of the most important thing about it is that before you kind of needed to have a PhD to do AI and machine learning, right? And we have friends who are experts at that and they're continuing to push the envelope in there. You know, I was just back at MIT and just the advances in ML is amazing. But the other thing that's happening is that this is just getting wrapped up so developers can just use it. So you can actually have a TensorFlow.js library that'll just sit on your mobile device. You can actually just be using your browser. You can actually write a web app that uses that and then uses the GPU, which just means right there, you can just write a little web app. Like with five lines of code, you can say, find all the people in this picture. Find the bottles in this picture, right? So just be like doing that on the fly and you don't have to have a PhD in machine learning. You can actually, developers can just use this capability. And so that's kind of what unlocks it, is just because it's accessible to everyone and now you'll get that next wave of innovation when people can just use it and find the right applications for it. So looking at these three big changes that you've talked about, network, compute, architectural, did you leverage these big waves to design this year's create? Because we're hearing all of that in the free technology tracks. Tell us a little bit about that. It is. So first of all, we have Wi-Fi 6 here, live. And people know there's the idea of it. We've done some performance tests around it and we're like, it screams. You know, it just, it really does scream. And you're used to not counting on that, right? And so people, it opened up people's eyes and they're thinking differently now about what they can do here. What are some of the reactions of the geeks at Cisco when they look at the data of Wi-Fi 6? What's some of the anecdotal reactions that they're saying, what's the sum of the hallway? Oh, I'm surprised. Because everybody's kind of cynical about it. Because quite honestly, even getting ready for it is just like, you guys, we're going to jump on Wi-Fi 6. And they're like, oh yeah, well, whatever. And then, you know, one of my guys, Ashutosh went off and did the speed test and he started working with it and he came back into my office. His eyes were popped out of his head. It's fast. And you showed it yesterday at all the cameras and they're like, whoa. Everyone, so because you don't have that expectation, right? But once you know it, it's going to really unleash this whole new set of things. There's actually something else interesting we did with the edge processing with the GPUs, which is the idea of edge computing, not a new idea. The reality of it is still coming into play. Now, what happens is Cisco just announced some new products as these industrial routers. It's an industrial gateway. It means you can put it up on the telephone pole. You can put it into a manufacturing plant at high temperatures. And it's the gateway that will connect all of your devices and sensors and be the networking conduit to get everything back. So that's an awesome product and that product actually hosts applications. And what matters is the deployment of this infrastructure, right? So Cisco's partners will get out there. They're going to sell and kind of install this networking equipment in manufacturing companies. But now it can host applications so developers can actually reach it. And so now that's a place for developers, but we're doing something new here, which is that we have a prototype of taking that product. We have a prototype GPU, you know, an NVIDIA just in that we put on top of it and we're letting developers hack at it and say, would you use this? Like, tell us some of your best ideas. Like, try it out because we still need to figure out the market and what's there. And we're doing it with developers. And where do they go with the creativity there? Because obviously one is a gateway, so they're used to gateways and they understand edge devices. What are some of the ideas that come out of hacking a GPU? Is it running data analytics on the edge? Is it hosting an application and, you know, managing edge devices themselves? What are some of the cool things?  So now, like at your edge, you have lots of cameras and because you can do GPU processing, you can actually take these multi-camera inputs, do video sensing algorithms, things that you kind of dreamed about before, but now just doing that for real. You know, finding construction workers, finding the hard hats, right? In the images, like to make sure that you can actually have people be safe. You know, one thing that we know about AI and machine learning is like, a lot of times people say, okay, I'm going to hire a data scientist.  Like, they don't have anything to work on until there's a good data set to work on. Well, actually, as you connect up these environments, that's when data is coming in. So you connect up like transportation systems, like SCADA, like utilities protocols. You're actually talking to manufacturing equipment. Real-time data from traffic or Tesla. And so, that stuff comes in, but then you need to kind of munch on that data to know when should I be looking? How can I get it into a form that I can do some AI and machine learning? So new use cases, you expect new use cases to emerge? They are. And it's really cool because there's a time when there's all of this stuff you can do on the web and in the cloud and without applications, but it's coming back to the physical world. And that's what you mean by the edge is this architectural thing. That's really the edge. The new architecture of having these kinds of capabilities is going to create new sets of applications that we've never seen before. New startups, new applications. It is. And really kind of the thing with DevNet Create is bringing in the community of people who do install infrastructure, knowing that this infrastructure is becoming programmable and having that able to host the applications and the innovations that are coming from the developers, it's like, it just unlocks entirely new business models. And I think here, these two communities are meeting and mixing. And I think that's the energy that we're seeing out here. It's because they didn't expect to talk to each other. When we started DevNet Create, we knew that it was coming. We didn't know how the people would mix. And this has evolved to where the people are mixing in entirely new ways and making connections.  You can deploy this in all different countries. That's a new kind of deployment model for my app. We talked a little bit about that yesterday with Argas as well as Mandy. And you've got these kind of different worlds colliding. They are. But one of the things that John pointed out is that this is not a marketing-driven event. This is not for lead generation. This is a truly collaborative event. And you're getting clearly developers and infrastructure guys and girls from clearly, very probably competing companies who are sharing. They are. So I can imagine the cultural change that this can bring to born-in-the-cloud traditional enterprise, maybe something that wasn't originally planned. But I could just imagine these worlds clenching and seeing how much better they can work together. And that is something that, with DevNet, so if you even go to the world of networking and IT and just enterprises, there's a new model, right? So things become programmable. People's biggest problem is automation, doing things at scale. How do I go ahead and deploy my networks across all of these sites around the world? You can automate that. How do I take machinery and get business insights from that so I can actually use it for more?  And so you have to change your mindset because then it is about collaboration. It's about sharing software. And everyone knows that they can get there faster by sharing code and ending up with a code repository. We have code exchange that we've created in DevNet. We just opened it up last year. We now have over 400 repos. We just crossed over 400. You guys are changing the way people are doing work within your own community, both DevNet and DevNet create, bringing those worlds together and it's working. It's magical. So congratulations on all the success you've had. I got to ask you about your journey because we've talked years before, you've joined Cisco and we've been following and talking to you since you've been here. And I was seeing in our opening yesterday, Cisco as a company is like a big aircraft carrier. It's making the big move, right? And you're seeing Chuck Robbins, the CEO, cloud. Everything has APIs on it. Every portfolio process got APIs. So he's pulling the Satya Nutella move, which is let's get cloudified. Let's figure out our role in cloud computing and beyond and you're mentioning some of those things. As you continue to show progress in the growth of DevNet and the community, it's changing Cisco. And we're seeing as we cover with theCUBE and Chuck's called you up publicly and said, Susie, great job.  How is that going as the battleship starts to move? And by the way, data center is still more important than ever before.  What's going on in the company and what's Chuck Robbins saying to you and your meetings with him? He's like, hey, good job, let's double down. No, Chuck is an amazing leader and Chuck completely understands the vision. And that's why he's been supporting DevNet. So he's been supporting DevNet, not just because he likes Susie or anything like that. It's because he understands the importance of programmability. He understands what it means for starting new businesses and creating new business models, what it means for the ecosystem to grow into it, what that opportunity is. So he's always understood it and I'm super lucky because he's been supporting these efforts. But now what's happening is, of course, he wants more. Right? And so I just presented to Chuck and his executive leadership team last week about the plans that we have going forward. We've actually just kind of what I would say is that we've done the MVP of DevNet. So I know that we've gotten a half a million members, actually almost 600,000. Product market shifts all year. We now have real assets, we have a real community, we have companies that are changing how they work using our assets and really forming in this community. And now to get it to the next level, he's actually really kind of sponsoring and working with us to develop it to the next level. And really the team is all coming together. The engineering team, the customer experience team, sales and marketing, like, you know, and then how we work externally with all of our communities. And so we're really growing into the next level. And you've got a great team, you know, we've worked with all your team, we love your team. But one of the things I like about what you've done here is that, and you said it yesterday on stage at Closing Keynote, you're feeling like a star user word, MVP, most minimum viable product. That's a startup word. So you have this startup culture and you're in a big company, so it's working. Is it contagious? Are people, are there antibodies coming at you or people are joining you? What's going on? Because how do you keep that startup vibe going? Yeah, I think that I'm just very fortunate because my team all has that attitude. Is they're very externally driven. So they're like, how do I help our developers? Like how do we help our community? How do we bring them along? And we totally drive ourselves by that. And then we're constantly asking them, how can we help you more? What do you want from us? And they say, if we're doing something that's not useful to you, tell us now so we can stop. So we can build something else. And so we continually evolve our, we're iterating, yeah, we're just. And so we actually listen and then we really figure out how to go to that next level. Now what's really fun is that also, though we work with all of the other organizations, right? So I'm not going to replicate the Salesforce, we work with them. I'm not going to replicate the SES that are out in the field. They're using DevNet and they're running their own DevNet Express events in their countries for their partners and customers. So we've really kind of built out really collaboratively and we've gotten so much support. And like the first days, everybody was like, hey guys, you have a software strategy. You need to look at developers. You need APIs and they're like, nice job, Suzy. Yes, keep on going. You're bringing the dev ops to the culture. DevNet's an API to all the other organizations. Well, and now that we are where we are is just, it's the partnerships. Like our product teams are investing and improving their APIs. We advocate for the developer's viewpoint into those and it's a collaboration. So I don't make the products. Our product teams make the products. I don't sell the product. Our sales team sells the products, right? So we've really brought together the forces and we're fortunate because everyone's doing it. It sounds to me like what DevNet is doing is really driving this organic cultural evolution within Cisco. Is it, would you say, and maybe I'm making a leap here, that it sounds to me like what I've seen, and this is my first DevNet as well, is that DevNet seems to be an accelerator of Cisco's evolution. I would say maybe it's an accelerator. And I want to say is that we have great efforts going on across the company and people are trying to figure it out. So I can't say I'm the one driving it. That would just be too much to say. But we are trying to accelerate each other's efforts. And now that we've grown a community, we've provided a platform. Like we do get more than a million eyeballs a month onto our site, and we use that as a channel. So we're really working to accelerate and kind of catalyze each other's efforts.  You got APIs on all the products, so that's an enabler. You have developer onboarding of new kinds of customers and existing ones melting together, kind of in this melting pot of developers. And you've got the cloud way behind you and Edge and AI. And then you can see Cisco becoming multi-cloud. It's almost like it's kind of feeding turning in the right spot where, I mean, you don't have a cloud.  You have data. We have connectivity. You have DevOps, NetApp, NetApp. So it seems like a nice positioning for the future. But you have all this other revenue and other customers, so it's going to take some time. We have great products. Our products five years ago, we had a handful of products with APIs. Now, our whole portfolio is programmable. So that's not my efforts. Those are the product teams building great products and entering this world of programmability. We're bringing in the community and giving them the tools so that they can use them, right? So otherwise you can't just make a product and have it sit there. You didn't have to have it sit there. Okay, what was your presentation to Chuck? What's the vision? Where do you go next? Got some great momentum. Congratulations on the success. We'd love being part of it. It's a lot of action. It's very inspiring, intoxicating at the same time. What's next? What's the vision? Yeah, so really if we, and I love the way that we've built up DevNet is because we started with our developers in the community that needed to become developers or power users of software, right? So we've done the technical enablement. Like we have documented APIs. We have learning labs. We have sandboxes so people can just code. So we've really been focusing on enabling them and providing all that technical enablement. And now what happens is people are asking us, how do I make this real? How do I spread this across my organization? How do I bring these solutions to my customers and into the world? And in order to do that, I need to change how I do manufacturing. In order to do this, I need to change how we build solutions. And so help us with that filler solution. So we're really stepping up to both beyond the technical enablement to just bringing it to reality and to real solutions that are in operational environments. And so it's just really exciting to be working together on all that. And we'll have a bunch of more new stuff coming that we'll talk about at Cisco Live. And you have a great party at Cisco Live. You always have the social club event. You got to keep that going, right? Of course, we'll keep the social club going and we'll have a bunch of new things to announce at Cisco Live as well. Exciting, that's just a few weeks from now. So last question, your takeaway from some of the anecdotes that you've heard the last day and a half of DevNet create three. Yeah, so kind of the vision that we had set forward. And it's one that we've been thinking about is just that the infrastructure really enables a new set of applications and business models. And we had the idea of it, but again, with these advances that we talked about, with Wi-Fi 6 and 5G, with GPUs enabling AI and machine learning and edge computing, is that people get it and people know that it's not like someday we'll have this, someday we'll have that, which I've been in research. I know that view, but it's actually like right here and right now. And so. Making it real. Making it real. And it's available for people to use. Like this next one, two years is going to be super exciting for the industry, because it's not just theoretical, it's not just what it could do, but there's real tools that are right out there for people to develop exciting new things. I wish I was younger, I wish I was in my 20s. That's okay, we take old people and young people all together, diversity, yes. Diversity, inclusion, the effect, yes. We're inclusive, young and old. It's so exciting because it's so much an enablement and knowing what's the megatrends that are the real waves, it's actually real, it's happening. Yeah, and I actually want to, actually while we do talk about diversity and inclusion and enablement, what's really exciting is, I just brought is that we have some of our partners who are transforming themselves and we actually have some women in tech initiatives that have started out, so. I love that. Tell us about it. Okay, so Presidio, Verizon, they've invested, they've invested in helping the women in their organizations. Well, they're helping everybody evolve to embrace programmability and automation to understand the application, the opportunities there. So, they are fully kind of taking this paradigm and transforming their workforces to embrace it. But in addition, we've partnered to also provide extra support and call out for the women who are making the journey and who have to face maybe some additional challenges or just ensuring that they have the opportunity and they get the visibility. And they've both sponsored. So, Presidio, Verizon have both sponsored bringing some of their women to DevNet Create. I loved how you brought them on stage this morning. I did bring them on stage. Without telling them. But I looked at for you. I mean, you just had this genuinely enormous smile of pride. Oh, I'm so proud of them. So, yeah. And you should be, but that's amazing that Cisco and DevNet is also making that investment in women in technology. We're doing it together with them.   Like everybody, you saw the woman up on stage. If you guys watch the keynote, you'll see that it's out there. These are the people you want to hire, you know? And why would you not use that workforce? Right? Exactly, why would you not? And get them all young, too. Like you mentioned your daughter, right? She, when she started putting the Maraki switch at home. You know you've made it, right? Yes, no. She's demanding a computer for me already. She's like, Mommy, you have two. How come I don't have one? She said, Mommy, why are you using command line? That's next. Susie, you're an inspiration. An inspirational female in technology. We all often gravitate towards Sheryl Sandberg. I think we should start including Susie, we and that. Thank you so much for having us at DevNet. It's been a pleasure to meet you and have the chance to interview you. We can't wait to see where do you go from here? We'll continue to change the world together. Thank you. I love it. Awesome. Thank you for John Furrier. I'm Lisa Martin. You're watching theCUBE Live from Cisco DevNet Create 2019. Thanks for watching.


So let's try and put a number to this. The air you're breathing, how fast are the atoms really moving around in there because of the heat? Well, we know that the kinetic energy on average of the air molecules in the room is three-halves kT. We also know that kinetic energy is half mv squared. So we set them equal half mv squared, the definition of kinetic energy, equals three-halves kT from the definition of temperature. Now we can cancel the two's, then we can divide both sides by m. So we get that v squared equals three kT over m. Take the square root of both sides of that equation and we find that the velocity equals the square root of three kT over m. So that's an equation that will tell us how fast a typical atom or molecule or whatever is moving. Okay, so for this we need to know Boltzmann's constant, we need to know the temperature, we need to know the mass. So let's imagine we're in a room at 20 degrees centigrade. So the temperature has to be in Kelvin, so that's equal to 20 Celsius plus 273.15, which comes out as 293.15 Kelvin. But how about the mass? Well air is mostly nitrogen, and nitrogen is diatomic, so it's two nitrogen atoms combined. Now nitrogen atom has an atomic mass of 14. That means the mass of one hydrogen atom is 14 times the atomic mass unit. Atomic mass unit is roughly speaking the mass of a proton or a neutron, they're both about the same. The electrons are kind of irrelevant because they don't weigh very much. So the atomic mass unit is 1.66 by 10 to the minus 27 kilograms, roughly the mass of a proton. So one hydrogen atom has 14 times that, but because hydrogen is diatomic, there are two of them in the molecule, it's actually going to be 28 times that. So the mass of nitrogen molecule equals not very big. So now we have all the numbers we need to put into the equation. So we end up with the velocity equals the square root 3 times Boltzmann's constant, which is 1.38 by 10 to the minus 23 times the temperature, which is 293.15, all divided by the mass, which is 4.6 by 10 to the minus 26. And if you put that in your calculator, it comes out as 513 meters per second. Now that's fast. 500 meters in a second means you get a kilometer in two seconds. Not many cars can do that. We can convert it into kilometers per hour. So that's 513 meters, so that's 513 divided by 1,000 kilometers per second. But a second is 60 times, multiply by 60 times 60 to convert it to hours, because there you go 60 times further than a minute and another 60 times further than an hour, because there are 60 minutes in an hour, 60 seconds in a minute, which comes out as 1,847 kilometers per hour. So the air molecules in your lungs around you right now are hooning along. That's fast. It's a supersonic fighter jet.


We're the first generation here on this farm whenever I was in the poultry business Six seven years, I guess and was wanting more land and we sold wound up selling the poultry farm And that's how come about found in this land. We we got beef cattle running many Angus and Brangus cattle We got the whole operation. It's a 2,500 unit cell multiplier unit And then in the pecans I ain't gonna say I knew what I'm doing. I just love doing what I do So I guess the passion for raising cattle and being a farmer is something I've always wanted to do from kindergarten all the way to now I mean My parents and aunts and uncles kid me all the time because first day of kindergarten I got off school bus at my Grandparent's house and I come walking up the driveway and my parents is like You know, I was first-day school and I said school sucks slam my backpack down and all I wanted to be was a farmer from day one So we have two boys leave I who's 13 and either who's seven that both help us daily on the farm They both play a big role in the summertime when they're not at school In the hayfield with the cows at the hog farm They do a lot Yeah, I hate I hate summer practices football practices. I lose all my help during that Here and at that time Levi he can cut rake and bail hay And Eli he can cut hay a little bit, but he's more of the rake man now so I was actually This last cutting we was over there in the field and now He was bailing and leave I was bailing and Eli was raking and I was sitting in the truck supervising at that time and I just you know, it's one of those moments you just get to look and watch your boys You know kind of enjoy what they're doing and see that, you know, you're proud of them. I sent a video to my dad and Showed him I said I won't be on the tractor much anymore. I said they're about to take it over. I Was probably five or six years old riding on the side of tractors open canopies Hanging on and cutting hay with him and after what I've always wanted for my boys been a chairs those moments I Want them to grow up to be just like him I want them to grow up to have the drive that he's got and want to accomplish the things that that he wants for him, you know and You know, I mean I've I've known him since kindergarten so I Know I know how hard he's worked and I want them to have that I want them to have that fire and I'm like Like it burns in him for this


Hi everybody, Joe for Jaspy's casebreaks.com, coming at you with the Immaculate Picker Team 5, Immaculate Basketball Picker Team 5 Random Number Block Randomizer. This is how it works if you're not familiar with it. And so we just pulled those remaining teams out of Picker Team 5, added them all up, divided it by 10, that's the average price right there, and now it's a serial number break. Big thanks to this group for making it happen, thanks to the people who bought their spots straight up, and congrats to the people who won their spots in those mosaic basketball filler breaks. There are the numbers right there. Let's do it. Let's roll it. Randomize names and numbers, six and a one, seven times for names and numbers. One, two, three, four, five, six, and a one, seven and final time. We've got Sean down to Daniel, six and a one, seven times for the numbers. One, two, three, four, five, six, and seventh and final time. We've got three down to five. All right, so this is how it shakes out for you. Sean with three, Daniel with zero, which means you get any and all redemptions for that big group of teams right there, including one-of-one redemptions, but Brian, you'll still get live one-of-ones. Daniel, you also have six, Brian S with eight, Daniel with nine, Huang with two, Brian Frank with four, Daniel with seven, and five. Let's order these numerically. My friends, I'll see you in the next video for the break itself, jashbyscasebreaks.com.