smart spending tip a tip is a suggestion for how to do something a good shopping tip is to use coupons when you shop coupons can help you save money strategy having a shopping strategy can also help you save money a strategy is a plan for how to do something buying only what is on your list is a strategy for sticking to your budget spend when you buy something you spend or use money to pay for it you can spend money using cash check debit or credit save save means to keep or collect something you can save your money by putting it in the bank you can save for a vacation or for something in the future like tuition list before you go shopping you should make a shopping list a list will help you remember what you need to buy buying only what is on your list will help you save money compare compare means to study what is the same or different about something to save money you should compare prices when you shop sale when things are on sale they cost less a sale usually only lasts for a short time waiting to buy something until it goes on sale is one strategy for saving money discount a sale is a type of discount a discount makes the price of something lower if you get a discount you will save money on your purchase coupon you can use a coupon to save money on something you want to buy a coupon is a type of discount coupons are usually printed on paper but some are electronic deal if you use a coupon or buy something on sale you are getting a good deal a deal is when you pay a very low or very good price for something


Hi, it's Bridget. Welcome to Sunday Morning Coffee with Bridget. Questioning everything. That is the topic today. Questioning everything. Okay, so you have been here, here, as in where I'm at right this very moment energetically. You have been at a place where things just feel hard. Like life doesn't feel that fun anymore. I think it's a little deeper than that. Life feels more than overwhelming. I'm talking beyond the empath stuff. You know, the way you were born as a clarsentium, being, feeling, sensing, very psychic, very intuitive and in tune. But you know, you've ignored all that. And society has told you and family of origin religion, culture, et cetera, has given you different playbooks for how you should live as a beautiful spiritual soulful being of light in a human, heavy body. Bumping around into other humans and trying to navigate or manage these strange rules and yet many rules that sometimes are conflicting and layer upon layer upon layer of confusion, often ensues. Ah, take a breath with me. Just take a breath. It's kind of humorous if you think about it. We get to these intersections and it's not a T in the road. It's not a fork in the road. There's not a clear decision to be made here. We are at a place right now where we are feeling into our lives. And sometimes we get to these points where we feel into our lives and ask questions and wonder how, not the how did I get here question, but the how, how do I do this? How can I recommit or reconnect or recalibrate life based on my feeling, the way I'm feeling right now. How can I recalibrate energy to line up in a perspective that gives me freedom and my flow, freedom in my feeling, freedom of uplifting energy, of inspiring energy, of empowering energy. How can I get that? There are many times when we experience good times, we feel good. Oftentimes they're circumstantial like some good news arrives or we get something new happens to us that is exciting or interesting or provides us with opportunity. And we feel like so much hope in that moment based on that condition. Often those conditions are surrounded by opportunities or opportunities that we haven't actually seen that weren't obviously visible or overtly visible. If you watch the pathway up until that point, that moment when you actually feel good, there are many, many, many stepping stones of opportunity, choice points, deeper commitment points, deeper connectors that we have chosen to receive. And I believe that it's the receiving, the opportunities that we choose to engage within ourselves, through ourselves, our own root systems and recognizing that our own root systems are not keeping us stuck in old patterning, old belief systems, but that our root system is intended to provide networks of possibility and opportunity and connection deep down through ourselves, our soulful spiritual selves. I'm at a point where I feel like I'm at an intersection and it looks like a big plus sign. I've been here before many times. In fact, I would often say in my psychic ways, oh, I'm clearing usually after a full moon, right before a retrograde, some magnetic energy shift or solar flare affecting many of us who are in tune, whether you even know that that's exactly maybe what the little extra burst of energy that kind of pushed you off your path, which can be cosmic, by the way, universal, et cetera, but we're not looking to blame or you scapegoat. In fact, rather the opposite. Isn't it true that you are here right now feeling as you are questioning absolutely everything about your life because you feel you are to blame? You are the center. You are the responsible one.  You are the one who makes the decision or makes a different decision. You are the one that chooses therefore there's a lot of pressure. There's a lot of heavy energy around the right choice or the adjustment of your course as it were. This heavy energy, this energy of choice is deeply connected to blame and I feel it and I see it. This fear of making a wrong decision, a bad choice, which results in a affirmation of continued patterns of self-doubt, an affirmation of see I'm not enough, see I'm not worthy, see I'm not valuable enough. We get evidence based on this blame that is connected to our choice and in these moments like right now at this plus sign intersection, I can keep going straight. I can keep moving forward while at the same time each step working on myself, not because I'm broken or bad or imperfect because I'm all of those things. I am also good and pure and light. We are all and it is hard to remember that. So I'm gonna remind you today. If you're feeling like you're in that intersection, just move ahead, inch ahead, just a little bit. It's like you're stuck in traffic, it's okay. It's okay, you don't have to be farther along. You don't have to be, you should be here by now, but this and that, the other thing. That's a blame energy.  It connects to hurt, self-doubt, belittlement, self-sabotage, negative, negative, bad, bad, negative. You can acknowledge that these feelings exist. It's not about pushing them away. It's about recognizing and then recommitting to a deeper connection of who you are which is good and filled with hope and positive and that is through your spirit portal, the energy of your solar plexus, your intuition, your spiritual beingness, your energy, isn't just feeling bombarded, isn't just feeling overwhelmed. It's also feeling a sense of desire for kindness, for compassion, for the sweetest, most obvious form of connection and that is within yourself. It's hard to want to connect with yourself if you don't like yourself and it's easy to misunderstand all this energy as dislike for self or as ill will or poor feelings about yourself. It's easy to get taken down energetically. You're human, you're human.  That's what grounding means. The earth is beneath your feet. Breathe in, exhale out, know this. It's okay to question everything. When I get bombarded by these feelings of nothing is working, like I work so hard, why is this not working out? I'm clearly focusing on the wrong things. What am I doing wrong? What am I doing wrong? Do you feel like that? What am I doing wrong? Why am I doing this to myself? Why am I working so hard and it's not paying off? What is wrong here? I must be doing the wrong things. Maybe I don't belong here. Maybe I'm not good enough. Maybe I shouldn't be doing this. Maybe I have to change. Maybe I have to quit. Maybe I have to start again. All of these questioning things are a way that I am letting my feelings out. I'm getting the feelings that feel overwhelming and heavy and negative out of my system.  Maybe I should quit, what? Quit what? What am I going to quit? Life purpose, living a life of meaning, helping people. What am I going to quit? Being a parent, being a mother, it doesn't work like that. So it sounds ridiculous. It sounds completely ridiculous. So if I go back to this premise of what I deeply desire is a connection that is gentle and genuine and pure and through myself, to my life, through my feet, through my roots, not old belief systems, not other people's opinions, not, I want this from you. I need that from you. Everyone is willing to give you a viewpoint or opinion on you because they don't want to work on themselves. Or if they've tried to work on themselves, it's not working out so well. So it's really easy to look at other people and have judgment. And I know because I do that too. It's easy for me to focus outward on my kids and their decisions or other people I care about and their problems instead of allowing myself to root deeply into my core, my power. Questioning everything is a way for me to push out the voices that are not my own, the words, the thoughts, the energies of the past, whether it be this lifetime, other lifetimes, let's just focus on this lifetime, okay?  You can move and shift energy super easy if you ask your healing helpers, your spiritual support team to assist you. I often would recommend to clients before you go to bed at night, ask Archangel Metatron to realign you. Metatron is a wonderful, brilliant energetic chiropractor. He helps me all the time to help realign my energy so that I have that connection through my feet to my path. It's not one thing. When we question and you start to question everything, it helps you, it can help you to realize, okay? It can be your sign that it's not about, it's not a time to make a choice or go deeper, double down into the decision-making process and do more research, it's a time to just sit, be here, feel your feet where you're at on your path and recommit to your path, your purpose. No decision needs to be made here, just to recognition that there is a desire within you for connection, that's why you're questioning everything. The connection comes through yourself, not through outside sources, not through social networks or friend groups or colleges or religious places, not through those places, through yourself first, and then you can shine your light and through your own internal connection, then you can be a great connector energetically and positively support all of the places where you are part of a group, part of a collective, part of a collaborative group effort that helps a collective energy group or grid. So you see, being right here in this little plus size, little plus intersection here, doesn't mean we have to change course, we do not have to change course right now, it means that we have an opportunity to feel the feelings, to acknowledge the thoughts, to recognize how ridiculous some of the questions are that are coming forward to be released and revealed and moved out so that we can be more clear and have more clarity so we can plug in directly into our core source inside of us. Listen to the voice of the captain. Okay, not the people or the passengers on the ship. Okay, listen to the voice of the captain. You are the captain, you are duly elected, by the way and hard earned, mm-hmm.  So as we connect today and we step in, I am feeling lots of different energy, divergent energy, energy of springtime and the equinox and the change of the seasons, energy of a holiday coming up, of the Easter holiday coming up, energy of the change in our health status potential still waiting on that for myself but we'll see what happens here as time goes forward and change as in the end of the school year is coming. I have one kid that's graduating, I have another kid that took a semester off college, I have a lot, there's a lot of things that are unfolding, shifting and changing and that beginning of change is happening right now. We're at the very end of a month as I'm recording this, you'll receive this at the start of a month, most likely this audio, but this is all conducive to the shifting, just the choices that lead us to where we're at, we have to stop here now, pause for a moment at the intersection, there is a stop light, stop here so that you can get your bearing straight, connect in through your feet, your roots, your path, your path, it's yours, you're the one with the two feet, you're walking, nobody else can live your life for you. Oh, people will try and you will try to give away your power many times, I have done that myself too because it feels so much easier to trust somebody else who seems like they know so much more than you about anything, about your health, about your body, about your brain, about some subject that you really wanna learn about and they're some expert. I mean, everybody seems to just know so much more than you. Now we value information of course but we need to value intuition and understand that your primary instincts have led you to this point and all that you have accumulated along the way is valuable information but you don't have to rehash it, relive it, you don't have to use it to beat yourself up to prevent future mishaps because you're gonna make mistakes as you move through this process of living. You're going to, it's natural, that's how you learn, that's how you learn to recommit, to reconnect back into your path. There's not one answer here, there's an evolving process and you're in it, you're living. Remember that when you feel good, it's the result of multiple stepping stones along the way where you've had opportunities and options of choice, small points to reconnect with yourself, to treat yourself a little nicer, to recognize the energy of overwhelm that's coming through as a stressor and it feels like a big trigger to you and you really wanna deflect and be angry externally about something. Remember that while life sometimes can feel like it is happening to you, like it's coming at you, like bugs on a windshield, on a road trip, right?  It can totally feel like that. I know, cause I feel like that, I totally get that. But that's not the truth of the perspective that we are, we can have, we can choose a different perspective, not the bugs on the windshield. We can choose to focus on the fact that we're journeying on this road trip, we're going somewhere, we're on a destination, we're heading toward a cool destination. We are moving and that's why things are being revealed to us and it feels like they're coming at us because we're moving forward, we're moving through. So life is not happening to you, it's happening through you and it's unfolding before you and as you are moving, it can sometimes appear that it is coming at you but you are moving through it. Do you see? The perception is just different. So the questioning everything state is an opportunity to recommit and to reconnect within yourself. Deep breath, so that is where we are today. That is where we're meeting here for Sunday morning coffee, that's deep. And now I think my coffee is a little cold because I think, let me just have a sip here. Yeah, a little bit, might have to heat that up a little bit but it's a really good coffee, really good. And I have it in an inspired mug, my hope mug, my purple hope mug. So I hope in your heart of hearts that you feel a bit more inspired by this perspective that I've shared with you here about this questioning everything point and all the little nuggets of the symbolism and metaphor that I've dropped in to this talk today for you.  Hopefully it will give you some more perspective for a better footing and inspiration, inspiration for your spirit because you deserve it and you need it, we need it right here and right now. No matter when you listen to this episode just know that it is exactly in alignment with whatever you need today. This is Bridget, thanks so much for listening to Sunday Morning Coffee with Bridget, posted on above life channel on YouTube. Don't be shy and make sure you connect with me on social media at Bridget inspired Instagram, Bridget inspired on Facebook and my other YouTube channel, a little more casual channel, a vlogging and intuitive channel, Fairy Grasshopper.


Hey there, Psych2Go family! Here we are with another video to help you understand everyday psychology better. How do you deal with certain emotions you don't quite know how to process? Do you repress what you're feeling because you're too afraid to admit it to yourself? Emotions serve to let you know how you're being affected by the things going on in your life and in yourself. They're neither positive nor negative, but simply act as signals to point you towards the right direction and help you make sense of what you're going through. And while it may be scary and uncomfortable at times, understanding your emotions can help you better understand yourself and your underlying wants, needs, and beliefs. Are you wondering if you're emotionally in tune with yourself? Well, here's a list of 10 emotions to help you get started. 1. Happiness So which emotion do you have the earliest memory of? One of the first core emotions you experience is happiness. When you're younger, happiness is often a feeling that comes from a sense of safety and security that your parents bring you. It arises from the knowledge that you are loved and taken care of. As you grow older, you might begin to associate it with feelings of contentment and emotional connection. Joy, pleasure, and satisfaction all exist to remind you of what it is that you value most. So think about the times when you feel happiest and you'll come to realize what it is that you want most in life. 2. Sadness That emotion which follows the loss of something that was important to you. Sadness is a very complex and nuanced emotion. Having varying degrees and manifesting in a lot of different ways, its most important purpose is to help you process your feelings of grief and disappointment. Feeling sad allows you to take a step back and look at yourself and your situation to better understand what it is that's causing so much pain. It teaches you to be more introspective, resilient, and learn from your mistakes. 3. Anger If you hear the phrases, clenched fists, tense muscles, and a flushed face, what emotions come to your mind? While it may not seem like it, anger can actually be a very good emotion to experience if you take the time to understand it more. You feel frustrated because there's something stopping you from getting what you want, so you lash out by breaking things or stomping your feet to make yourself feel less helpless against the situation. But anger is meant to do more than just beg to be unleashed. It forces you to act and fight against the problems you're facing. 4. Anticipation Do you remember that feeling just before an exam starts? In the most basic meaning of the word, anticipation refers to the psychological state of arousal that you experience when you're excited, anxious, or uncertain about what's to come. If you're feeling anxious about something, it's your mind's way of reminding you to plan ahead of time and better prepare yourself for the future. But if what you feel is more of a nervous excitement, then it means you're doing something that pushes you out of your comfort zone. And that's a good thing. 5. Fear Evolutionary psychology tells us that fear is the basic survival mechanism of our ancestors, meant to keep them safe from potential danger. It's why you have an innate fight-or-flight response that's triggered whenever you feel physically or emotionally threatened by something. But sometimes you feel fear towards things that aren't lethal, like failure, uncertainty, emotional vulnerability, and the loss of control. If you're not aware of your emotions, your fear can keep you from taking risks, challenging yourself, and going after what you want. 6. Loneliness Loneliness results when you feel isolated from those around you. Famous psychologist Abraham Maslow even posited that one of the most basic human needs is the need for belongingness, along with the psychological needs for shelter, food, and water. As a human being, you have a deep-seated need for social interaction. Loneliness is meant to signal to you that you need to reconnect with your loved ones and attend to relationships with those you care about. You can learn more about this by watching our upcoming video, 7 Reasons Why You Feel Lonely. 7. Jealousy Ever get that strange feeling of wanting what someone else has? You may feel envious of others when you perceive that they're more fortunate than you in some way, that they're happier, wealthier, smarter, or more successful. Jealousy gives way to insecurity and hurts your self-esteem because it makes you think that you aren't good enough to have everything you want. It's important for you to pay close attention to what sparks that feeling in you because it speaks volumes about what it is you feel is missing from your life. 8. Disgust What is the exact emotion you feel when a cockroach comes into your sight, causing you to shriek? Another emotion rooted in our evolution is that of disgust. You feel repulsed by things that you consider to be unclean or disease-ridden, like cockroaches, rats, waste, and rotten food. You also feel revolted by things that go against the most fundamental social norms, such as heinous crimes and certain sexual behaviors. A feeling of intense dislike and aversion, disgust is an emotional response you feel towards something that is unhealthy for you. 9. Surprise Surprise is something you feel when something unexpected happens to you or those around you. Shock and surprise can intensify whatever emotions you're feeling, like happiness, anger, and despair. When you feel surprised, you become more curious and alert because it forces you to change your perspective and adapt to new situations. 10. Trust Why is trust on this list of emotions, you ask? Many would argue it's not so much an emotion as a choice. And while it's true that trust isn't as instinctive a feeling as these other basic emotions, it's still a feeling because sometimes you just feel like you can trust someone, even if you don't really know them that well yet. Trust is an emotion built on your experiences, and it's meant to remind you of both the good and bad that other people have done unto you so that you can better protect yourself against emotional pain. Oftentimes, trust and love go hand in hand, so when a loved one betrays you, they often lose not only your trust, but also your affection. In the end, the journey towards emotional self-discovery helps you have a better understanding of who you are, so take the time to listen to what your emotions are trying to tell you and work through all the things you're feeling. Emotional awareness will not only allow you better control over your moods, but also show you things about yourself that can help you live a more meaningful and emotionally fulfilling life. Were you able to relate to some of these points? Are you now able to understand your emotions more clearly? Do let us know in the comments below. Also share this video with those you think might benefit from it. Thanks for watching, and we'll see you in the next video.


INAPOL's Environmental Security Program has been established to support law enforcement around the world to address environmental crime of all sorts, whether that's poaching and trafficking in wildlife species, illegal logging and illicit timber trade, illegal fishing and the criminality within the fishing industry, illegal mining and pollution and waste crime. The unit is supporting law enforcement in all parts of the world to address environmental crime, particular to their region, providing support to different law enforcement agencies, the police, the customs, the environmental agencies, anti-corruption and financial crime units to work together to address criminality that involves the illegal exploitation of natural resources and to share information with each other to deal with the cross-border nature of environmental crime. All of us have a role to play in helping to deal with environmental crime. At INAPOL we are calling on members of the public who are aware of the location of these wanted fugitives to notify law enforcement, to work with INAPOL and our fugitives investigative units to help track down these people and help law enforcement bring these people to justice.


What's going on, everyone? Sam here with Leighton Sports Cards, ripping, let me switch our, not really, Milan, to be honest. I don't meant to say. Yeah, what do you mean to skip your question? Yeah, sorry, Milan, sorry. Yeah, I'm basically just doing the local family thing. Nice. Ripping one box of 23 Leaf Autograph Football Jersey Edition for David W. Good luck here, David. Let's do it. Chris Davis, too, now. How much is Chris Davis getting paid per year? Would they break that? They had to have broken that contract down. It's like a 30-year payment plan. He's still getting paid by the Mets. Hello, our remorse. How we doing? What's our remorse? All right, here we go. Is that what I think it is? Yes it is. Bo Jackson. Nice, man. Bo knows on a Raiders jersey. He signed that well, too, man. That's sick. That's awesome. That is a gorgeous Bo jersey, man. The size of that signature really took up the entire four, basically. Well, congrats on that, David. That is an awesome, awesome jersey, man. These are tempting, man. These are tempting. I'm going to be honest, tempting for myself. Hey, let's go, David. Good stuff, buddy. We'll get him right out to you. Thanks as always for the support, my friend.


And without any further ado, talking about backdooring pickles. Thank you. So, start off, I work for NVIDIA's AI red team, they let me do this research and are letting me share it, but everything is my own opinion and not an official statement from the company. But yeah, let's talk about backdooring pickles. So, 11 years ago, Mark did a talk at Black Hat called Sour Pickles. And in it, he talks about how to do deserialization attacks against pickles. Not a whole lot has changed from then, since then. Back then, 11 years ago, there was a warning message. It said pickles shouldn't be used from an untrusted source. Makes sense, because it is code. Pickles are code at the end of the day. It's assembly language. And the attacks that he talked about were predominantly deserialization attacks. So this is something along the lines where a web server gives you a cookie, that cookie is a pickle. You can replace it with a pickle you craft in order to get a shell on the web server when they load it. So, yeah, not a whole lot changed, as I mentioned. Pickles still have this warning message. It's a little more verbose, gives you a few more ideas on what you can do. But at the end of the day, it's still, if it's coming from an untrusted source, you shouldn't load it. Because they are still code. That part hasn't changed at all. But what has changed is in 2016, machine learning library started to be released that used pickles as the way that they saved their models. And so this creates something along the lines of a macro in a Word document or in an Office document where you can send it to someone and if they load it, then you get a shell on their system and do whatever you want with it. Yeah. So, I've mentioned models just really quick. What is that? Models are used in artificial intelligence and machine learning. For what I'm talking about, they're a combination of layers and weights that probably has very little meaning to most of you as well. So, what is a layer? A layer is the mathematical equation that lets you give it one input, like an image, and it goes through this equation and gives you a label like cat, dog, chicken, ostrich, whatever it is. And these layers we represent as code in Python specifically for the Python frameworks. The weights are the coefficients for that equation. It's really just the data that's trained. So, when we're training models, this is what we're training. We're training the weights. And that can just be viewed as data. And because it's a combination of a bit of code and a ton of data, it makes sense to store it in pickles as long as you ignore the fact that researchers are going to be distributing it and sharing it as they do research. And this is exactly the opposite of what that warning message said we should do. Just another little note, a lot of the frameworks tend to save a model as multiple pickles in a single file, which if you do anything with it, you can get confusing at first. But, yeah. So, how do you make a malicious pickle? This is just randomly, like, just arbitrarily malicious. It doesn't do anything except for being malicious, sorry. This is an example from a blog from 2011. And what it says is, when you pickle up exploit, this is how I want you to recreate exploit when you do it later. You recreate it by calling subprocess.p open with bnsh. Now, obviously, that's not going to create an exploit class. It will just be an exploit, in this case, to give you a shell on a web server. So, yeah. That's not what we want to do, though, because I wanted to find a way to place a backdoor into a model that still works exactly as it's supposed to and gives you a shell as well. So, this is the simplified version of the attack if all you want is a shell. You don't care about it working still. And it gives us a nice example to talk a little bit more about pickles. So, this output on the screen is thanks to a library built into Python called Pickle Tools. The library's, the module's Pickle Tools, and it's built in. And it has a function called dis for disassemble. And it produces this output. The first box in the output is getting the function pointer to subprocess.p open. Subprocess and p open onto the stack. And then it calls stack global, which takes those two pointers, collapses all down into a single pointer that points to the function. After that, in box two, we mark the beginning of all of our parameters, write them all onto the stack as well, call tuple, which again collapses all down into one pointer. That is all of the parameters. And then the last instruction's really the most important, it's reduce. And that calls the function with the parameters. The two pointers on the stack pops them off, throws them away, and puts onto the stack just the one pointer to the return value. So, now that's understood a little bit more. How do we make a pickle more malicious? There's a really cool tool called fickling. It was released last year in the AI village. And it's made by Trail of Bits. It's really good. It allows you to inject code into the beginning of a pickle or the end of a pickle. And it attempts to detect if there's malice within it. Unfortunately, for me, it's a little more complicated than required. And so it ended up being easier for me to write a solution that only injects in instead of trying to help patch some of the bugs with how it worked. And then the second issue, which would have been easy to fix if that was it, is that it can only inject into the beginning unless you want to replace the output in which case it can only inject into the end. So why do I say it's a little more complicated? So as we've covered, pickles, you can't just load them because you'll get a shell on the system, or you could have somebody doing that. So they use a symbolic interpreter so that it won't, that won't happen. And that works really well. But you have to reimplement everything about pickles in order for that to work. And I kept running into bugs, and ultimately it just became easier to do something else. And when I was trying to patch it, the tool they created is what led me down to all this research in the first place. So I really can't give them enough credit. It's just I found it was easier to use something else, unfortunately. Now why can it only inject into the beginning? As I mentioned before, when you reduce down, so on the top of the slide in the blue box is the code that Fickling adds. In this case, it's exacting print high. Nothing fancy, but it works for the example. So when that all runs, it leaves one pointer on the stack. And in the beginning of a pickle, it doesn't matter because it all collapses down, creates an object, and that object's returned. And you have one value left on the stack that, as the error message on the bottom says, it's not empty, so it's technically wrong. But it doesn't matter because everything works. But if you put that same code anywhere else, it's going to alter the stack in a way where the instructions that follow it don't work correctly because the stack is effectively corrupted for what they're trying to do. And I wanted to be able to just add code arbitrarily into a pickle. So just a few more things about pickles and then we can get to the attack. Pickles are an instruction set, not a file type. So for detection, this starts to matter because pickle doesn't have any magic bytes that you can detect to identify it as a pickle. There's no specific file extension because PyTorch is .pth and not everything is .pkl. It can be anything. NumPy, like npz sometimes has pickles and sometimes it doesn't. And so you don't have just one file you can look at. Also, there's no forking or conditional logic, which makes it so that we can inject in the middle because we don't have to worry about it jumping around. Bite off sets don't matter. You can just add code in and this should be fine. As we've shown, you can import any Python callable. The process isn't imported when we exploited it earlier. Pickle actually imports the sub-process module and gets the function for you. So if it's installed on the system, you can use it. And there's an instruction called pop that takes a value and discards it. So I keep saying that I had a simpler solution. On the right side of the screen are the 50 lines of code that I used to inject into any pickle. And 50 lines of code was easier than writing patches. And so when I wrote this, I had a few requirements. I wanted it to not be obvious to the user or intrusion detection system because I don't want to get caught. I wanted to parse the pickle without loading it, but at the same time I don't want to use a symbol interpreter because I saw how that can get complicated. And I want to inject into an arbitrary location. Mostly that's just to help support the first point, but also because it can. It makes it harder to detect. How do we avoid being obvious to a user and an IDS? Well, we've spent off our own thread, so it hides in the background. We don't want to stall the pickle. We want it to load and everything to work exactly as a user expects. If they're loading up a model and it's supposed to generate a picture of a cat, they need to see a cat, otherwise they're going to get suspicious. So we have our thread running in the background that is running our agent to call back to our C2. Also, size isn't a concern at all. Most models are hundreds of megabytes or more. Like gigs, maybe more than that. So adding one meg or one kilobyte, nobody's going to notice most likely. That's my assumption, if I'm wrong, so be it. But I do use Zlib compression, and that's not to actually make things smaller. It's because Base64 makes a really long string that you're adding into the file, and if you run strings and you see a long string, you might get suspicious. Zlib makes binary data, so it was just a simple solution. And then finally, as long as we don't launch MimiCats or anything that's just like super malicious and obvious and going to get detected, it should be fine. It shouldn't be detected. So how do we load the pickle without using a symbolic interpreter? So the output I showed before, there were some numbers on the left side of the disassembly. Those are the byte offset into the pickle. And because every instruction, there's no jumping, there's nothing like that that we have to worry about, we can make those byte offset chains, make those byte offsets change, and nothing's going to go wrong. It'll still work the same. So long as the stack is exactly as it's supposed to be. So what we do is we pick an arbitrary line from this disassembly, grab the number, write that many bytes into the output file, write our malicious instructions into the output file, and then write the remainder into the output file. And you have a pickle that will run your instructions. So long as you're not... So long as the stack is exactly as it was when your instructions started. Yeah. So how do we avoid leaving a trace in the stack? Well, I only use pickle instructions that alter the stack. If you know anything about pickle instructions, you might be wondering why I don't mention anything else, and that's because I just don't use it. It does exist if you want to know about it. Mark's talk covers everything, and it's really good. But for our examples, we only use the stack, and so that's all I've covered. And because we only use the stack, we just have to clean up. And so at the end, we add a pop instruction, and it pops off whatever... Well, in this case, we're adding a single value to the stack, pops that one value off, and everything's exactly as it was initially. So everything works exactly as it's supposed to. So this is a bit of an example. Here I'm downloading a pickle that I've injected an agent into for the Mythic C2. And I'm loading the pickle, and it takes a second, but I'll get a callback. This callback is running in the background while the GAN is still loading. When the GAN finishes loading, you see a picture of a cat. I can tell it to start running calc, which I did. And when the agent calls back, calc will start, even though I'm able to look at a bunch of different pictures of cats while it's working. Calc pops, and yeah. In a real attack, obviously, you're not going to pop calc because that's obvious, but you have an agent running on their system. You can do whatever you want with it. The hard part about the attack is figuring out how to inject the malicious code into an existing pickle. The way that you go about doing this, it's really up to you, I guess, but there's three ways I see it working out. There's the supply chain attacks. If someone's distributing a bunch of pickles on a website or however, and you can modify them, then you can get a shell on all of their customers, assuming that they don't detect it. There's also watering hole attacks. If a bunch of data scientists have a shared network share, they keep passing pickles or pickled models back and forth between each other, and you have access to that as well. You can modify it, and the next one of them that loads the one that you modified will spawn a shell on their system and you have access. Finally, there's phishing. Instead of targeting a business person, you can send an awesome research paper with a real model that really works, that's actually the research, to a data scientist, and when they go and load it up, you can get a shell on their system as well. And since research is done by a bunch of different countries, not always who are friends, but are often sharing data, that's a bit of a concern. And then after that, you just wait for a callback and do what you want with it. So what can we do about this? Well, antivirus software doesn't work great for detecting this. Pickles aren't like an unfile type. A co-worker of mine wrote a YARA rule, but because it's just a full instruction set, you can do anything you want with it. You can make the code do anything you want completely. You can load any library. So it's essentially detecting an arbitrary Python file, except written in a different form that's binary and harder to read. So the YARA rules that we wrote are pretty easy to bypass if you know what you're doing. Maybe there's a way to make them better. I mean, there's probably ways to make them better, but I still don't think you're ever going to be able to detect every way you can make a pickle malicious. So all you can really do is verify that the integrity of the file is exactly as it was when you created it, but that doesn't help anyone who's getting a file from you unless you have a way to share a hash that's more secure than the way you show the pickle, which maybe you do, and so you can do that, but you sort of run into an issue of how does anyone know that it hasn't been modified? Fickling has a feature for check safety, but as I mentioned, there's a lot of different ways you can make something malicious, and so the last line of their output is don't unpickle this file if it's from an untrusted source because it can still be malicious. The examples I make aren't things they thought of, so it doesn't detect them. So what can you do if you have a pickle that comes from a source you don't 100% trust? My recommendation is that you do not load them. You just shouldn't. If you really want to, there's people on the internet that have examples of how you can create a list of approved functions that will, only those functions can be loaded by the pickle, but at that point you're creating a Python jail, and there's a lot of CTFs where we've seen people breaking out of Python jails and a lot of issues that we've seen in Python jails over the years, so I wouldn't recommend that, but you'll find that option on the internet if you really, really want to try it. Yeah. So what do I recommend? Well, if you're creating something new, then you can release your layers as code. Pickles don't really hide what you created in any way, in any meaningful way. They can all be extracted by anyone who wants to. So you can release your layers, all the code that you write as actual Python code. Whoever is going to iterate off of it will have an easier time doing it, and they won't be vulnerable because they can look at the code and make sure it's not doing something sketchy. And then you release your weights as binary data. If you wanted to do this in PyTorch, on the right-hand side of the screen is some code, which I'm also releasing at the end, and that code will, for PyTorch, save the state of the weights and write it out to a NumPy blob for you and load it, and if you look closely, you see the NPlib, NPYO, like the super deep function inside the NP library that you're not really supposed to call, that's because the default one will fall back to pickles if you have something in it that makes it want to. So it's not really a good function to use, but you can, it exists. And then if, you know, this has been around for six years, so there's a lot of pickles that already exist that are malicious, or well, not malicious, that could be made to be malicious, and it's sort of unrealistic for me to expect them to just delete all of them and start over. Just like that would be the safest solution. So if you have some of those, then you need to protect them like they're unsigned executables, because effectively that's what they are. That means verifying that their integrity is exactly what you expect it to be. If you're offering people the ability to download it, it needs to be over an encrypted channel because otherwise an attacker in the middle can make it whatever they want it and get a shell on their system.  So don't let that happen. And some of you that know about machine learning models might be thinking like, okay, I don't use pickles, I use Onyx, or TorchScript, or something else that still supports arbitrary layers. And arbitrary layers are going to be in some way still code. So most likely they're also still vulnerable, and it's just going to take more work to do it because there's not 10 years of research showing you how to just add malicious code into it. For example, Onyx already has a POC thanks to Loboto and they'll, not sure if you can read the link at the bottom, but that's his GitHub where he has a proof of concept on how to add exploitable code into an Onyx file. If you're someone that wants to do this kind of research, Onyx and all the other ways to save models could be something interesting to look at to add malicious code into as well because I'm pretty sure it's possible even though I haven't tried myself. So yeah, if anyone wants to see the injection code, I have it on my GitHub. If anyone uses Mythic C2, I made a wrapper, so all you have to do is upload the pickle you want to inject into. It'll inject a Mythic Medusa agent into it and you can put that where you want and wait for a callback. And yeah, if you have any questions, you can ask, but also hit me up on Twitter and I'll do my best to respond.


Poland right now 10 years old so this was a relatively recent addition all this folks kind of around the table with us so we can coordinate and help integrate those and usually this is in another another big huge army tent that has their pretending they're you know one of the Air Force the Air Operations Center of the higher echelon that we have to coordinate and also the there's like intel intelligence injects with that's the first time you've been able to do that with this kind of equipment that recently got the ball rolling force within the last couple months so we've had a couple test runs but some kind of working out the came you have a physical therapist so in my heart that's the highlight of this building and now it seems kind of backwards in some people's mind because they say well the operational necessity how we best preparing our airmen to succeed in combat and when you talk with soldiers and airmen they have really appreciated the opportunity to perform the missions that we have over the last couple of years and they're very rewarded by being able to have you know an important job and make a difference for our people so yeah we're going to do even better in a couple of new buildings here that's good that's good to hear it's one thing I was worried about especially when we're asking so much of everybody right well the last couple of years and we're pretty busy we gosh there was one period where we actually had every member of the Washington National Guard on some kind of order and that's the first time that it happened since World War two and not just being there to serve people but they've gone through the same stress as everybody else has right with their families with COVID and and the really tough challenges that families have been facing so just please pass on my thanks to everybody sir absolutely absolutely thank you again and I'll keep doing my part to get you facilities and training and hopefully someday healthcare all right well thank you great to be here all right


Welcome to another International Relations Capsule for the Shankar IAS Academy. We have been discussing the future of Afghanistan in the last few weeks, but now suddenly the accent has shifted to the future of the United States itself, because what has happened in Afghanistan has shaken up the US administration. And has landed President Joe Biden in trouble. People go as far as to say that this is the end of US domination in the world. They also say that facts America, which has been in the world for many, many years, has ended in Kabul. So we'll examine how much this is true and what has exactly happened to President Biden so early in his presidency. There was no great honeymoon between the people of the United States and President Biden, because he was elected at a time when President Trump was challenging his election and there was an insurrection and the 75 million people who voted for President Trump never supported him. But the United States and the whole world had great hopes about Biden's presidency because they were quite fed up with the unpredictable ways and the strange diplomacy of President Trump. The allies had gone away. He had himself focused on countries which were not friendly to him. His China policy was somewhat indeterminate and generally the whole world was a bit concerned about what the way the United States was going and on top of it the pandemic came and affected the United States more than any other country and President Trump's attitude to the pandemic of neglect and negligence also aggravated the situation. He had moved out of the Paris Agreement. He had moved out of the Iran nuclear deal so everybody looked at President Biden with great hope even though the Republicans never changed their position. They still admired and respected President Trump. But President Biden very earnestly went about bringing United States back to the sector of the world and he did the right things. He rejoined the Paris Agreement. He resumed the Iran box. He cultivated the European allies. He made it clear that he was going to be competing and cooperating at the same time with the Chinese. He had a meeting with President Putin and so he had done everything that was possible to normalize the situation and also in the case of the pandemic he was seen as some kind of a savior. Of course it did not work out because many people still believed, did not believe in vaccination and therefore a lot of resistance was there but still he moved forward and did what he could with the governors and others to persuade people to take vaccination. But unfortunately that did not have the impact that was expected and therefore United States is going through another pandemic crisis. So in spite of all that it was generally believed that President Biden will bring the United States back to the center of the world and therefore his announcement of withdrawal from Afghanistan did not make much news. After all President Barack Obama had decided to withdraw after that President Trump followed it and made an agreement with Taliban in February 2019. So it was a gradual process and probably because of that reason he did not or his administration did not look at all the aspects of the withdrawal. So on the one hand generally the impression is that in any case the honeymoon with the people is over because there is general dissatisfaction with what has happened in Afghanistan. Many lives were lost, just billions of dollars were spent and therefore everybody had expected that this would be a quiet withdrawal without any incident. But all that he did in a normal way did not turn out as he had expected. He had made a few decisions which with hindsight we can see that could have been better. For example there was a negotiation taking place in Doha between the concerned parties. Agreement was quite near. There was an agreement already signed by Trump's representative and so he could have insisted that he will withdraw or at least he should not have announced the withdrawal without this agreement in place and if possible a new government in place. So that is where he made the first mistake. He made the mistake of announcing his date and therefore all the negotiators said that if he is in any case leaving, first he said September and he actually left in July to surprise out everybody else, particularly the allies who were fighting in Afghanistan together with the United States. So it was a big surprise for everybody but still nobody expected the kind of chaos that came about in that situation. So the next thing, the next mistake he made was not to have evacuated all the American personnel and all the Afghan personnel who they wanted to take back to the United States. Quite a few numbers were prepared to go and he had this huge airport from where he could have taken them away before he left but then when he handed over the background airport to the Afghan forces then they lost that facility and then it was difficult to do it from the regular airport in Kabul. So there was total chaos and the impression was created that was a defeat for the United States. So this is probably the first time in history that a president is being accused of withdrawing troops in a hurry. Generally American public likes the idea of American troops coming back and therefore there was general support for what Biden wanted to do but the issue was that the whole thing appeared to be in such a chaotic situation that the responsibility was placed on President Biden himself and this is called for, this is a resultant in a call for his resignation even. Of course President Trump was the first to say that but now more people are saying that there is something wrong with him personally and he's unable to grasp issues properly and also he seems to be under the direction of some others and he's not his own man. So these are very strange things to happen for the President of the United States. The mistakes that he made were serious that was no doubt about it and he had not predicted the kind of consequences which eventually happened but to say that this is the end of United States domination of the world and this should be the end of the presidency of Mr Biden seemed to me to be a little bit excessive because this was a mistake, an honest mistake in that sense because he had expected the Afghan forces who were trained by the United States and President Ghani was in power at the mercy of the United States, did not resist the Taliban even for a day after the Americans left. This was a wrong judgment, was it letting down of the Americans by the Afghans and President Ghani, was there some kind of conspiracy to defeat their foreign power which the Afghans are very fond of? So these are not known, so the accusation is that as President, as the commander-in-chief, he should have known better what the situation was. How was it that he did not know that the Afghans were not going to fight? He talked about six months, at least two months before the Taliban might win the war and how about all these military equipment that was left behind? Why did they not take them away before handing over? So now the United States left in the situation that first of all there is no resistance to Taliban government. At the same time the Americans are not able to do a clean operation of withdrawal and they have left behind so many weapons and other things which will fall into the hands of the Taliban which might be used against the United States or against the interests of the United States elsewhere. So the general conclusion is that this issue, apart from what is happening today and crisis and people are unable to leave Afghanistan and there are many others who are wanting to leave, American citizens are still there and Taliban is talking about 31st being the last day, that is 31st of August being the last day on which the Americans will be allowed to evacuate people. So this has completely destroyed the capability of the United States as a world power. This is what is being suggested and therefore this is likely to affect the reputation of the United States, the present presidency, it lose faith of the allies in the United States. The Chinese might be delighted, they will probably join up with Pakistan and Taliban in order to fight American interests in different parts of the world and terrorism might also increase with all these weapons that are falling into the hands of the Taliban. But if we look back at the history of the United States, you will find that this is not the first fiasco there being. One thing, one fiasco we can remember is in Vietnam, when they had to leave Vietnam it was complete defeat of the US forces and everyone said at that time that this is the end of American domination, it is a disgrace to the United States. There was greater controversy on Vietnam inside the United States itself and abroad. Many people abroad even India was demanding that the United States must withdraw from Vietnam. But how fast they have recovered from it? So if we look at history, you will find that even a bigger tragedy like the Vietnam War and the consequences it had in the whole of Asia, in the rest of the world, the United States was able to contain it and resume its role in the world. Another crisis again where the whole world felt that the United States had gone on its knees was the bombing of the New York World Trade Center and other destinations, the 9-11, which was again a big shock. We still do not know the whole story of 9-11, there are several theories, whatever it may be, the world's biggest power, the most important nuclear power was helpless in front of a few terrorists who managed with knives and forks that picked up from the aircraft and the most unorthodox, non-traditional kind of a war was imposed on them, many lives were lost but more than anything else it was the shock to the biggest part of the world that they are not effective, they are not able to stand up to a few people who are determined to kill themselves and that was the feeling that in the first place provoked the United States to go for a war against terror. There again they made a mistake when they launched this was President Bush, when they launched the war on terror, they chose Pakistan as their partner, nobody else in the area, India of course they would not have even thought about it because of our problems with Pakistan but they forced Pakistan to be a partner and being a partner of Pakistan, of United States, Pakistan made a lot of money, there is a lot of resources and probably channeled them to the very Taliban who they were supposed to be fighting. So the United States was fighting not only the Taliban but also Pakistan and this was announced only by President Trump after some years of fighting in Afghanistan, they stopped the assistance and then the process started of United States directly training Afghan forces but there again there was a mistake because Afghan forces were not trained to fight by themselves, they were trained only to fight under a United States umbrella. So but I am referring to the consequences of the bombing because people thought that the world had completely changed the way of war making relevance of nuclear weapons because even if you have nuclear weapons to destroy the world many times over happening like 9-11 will certainly not help the United States and many things changed the approach to security. After that if you go on a travel you have to go to the airport two hours in advance, the security check is so difficult, people are put to so much inconvenience and the very approach of the United States to administration, welfare of the people and security became, homeland security became the most important preoccupation for the United States administration but how well they have recovered from it. Now there is only one relic of it that the airport is still you have to go earlier to the airport and security is tough but there was never another attack terrorist attack in the United States in the last 20 years and it had come back to normal, air travel had come back to normal, it was not held against him against the United States that this happened and United States prestige or its relationship with the rest of the world was not affected at all and terrorism did not stop it continued and everybody expected that by the time the operation in Afghanistan is over you know things will be back to normal. So looking at these two game changing experiences of the United States and this time the two other game changing experiences one is the pandemic itself and the other is the bad name United States has got by messing up making it making the withdrawal chaotic. So the question is whether United States can survive it whether it can come back first of all whether President Biden can survive it whether there will be challenge to him that is not likely within the democratic party there is not likely to be any move against him and what he did was in good in with good intentions he was following up the decisions taken by the by his predecessors and therefore I personally do not think that this will affect President Biden's presidency but and many most presidents normally lose their popularity rating as they go on and sometimes it goes down sometimes it goes up but doesn't really affect there and many of them have also been re-elected President Trump was the only one perhaps who was not re-elected because of his record as president in the first term. Secondly how much will China be able to take its place when the pandemic came the Chinese expected that United States was in a in a big mess and therefore they could make some advances and they did try that they tried with Europe they tried in Asia etc to become a very serious problem for the United States it did not happen then the Chinese of course have not yet given up their effort they're trying in Ladakh they're trying elsewhere in order to get their prominence and they expect that it'll be accelerated their progress towards number one position in the world but that is also quite a down a little bit and if the United States is able to recover from the present situation of COVID it'll be able to concentrate as Mr Biden has promised that he will be back in the in the position that the United States occupy of course on Paris Agreement there's not been much progress in what the world can do the latest report from the IPCC has shown that Paris Agreement as it exists today will not be of much help to save the world the Iran discussions have taken place but there is no decision we don't hear much about it perhaps there is something happening and that may come about Cuba there has been a problem because the United States changed its policy and now there are other other things which give the impression that the United States is recovering so what I wanted to share with you is the general assessment that the United States is on its way out of the world stage but this has been predicted before books have been written about a post-American world some years ago so there is that kind of tendency to tendency to predict the end of the American civilization or the end of American predominance but my own feeling is that the United States continues to be the strongest nation in the world economically as well as militarily and that will be maintained in spite of these challenges so the Afghanistan situation as I see it does not foretell a really serious situation for the United States I think the United States will be able to handle the rest of the things properly and even if Afghanistan has a Taliban regime this will not make any difference either to President Biden or to the United States itself thank you well if that is a question the answer is they will there will definitely be problems for us if the Taliban government is like in the past that is they continue to be a fundamentalist anti-women anti-India policies will naturally be the threat to us and of course the relationship between Taliban and China not only that now Russia and Iran are also have also indicated that they are ready to recognize so we do not know we don't even know what the composition of the government will be it is all very uncertain but certainly there is a possibility of Taliban China and Pakistan getting together to work against the interests of India and also against the interests of the United States so the question of our own relationship with the United States our membership with the Quad our ability to win American support in case there is an issue with China all these are answered so we have to just wait and watch no at the moment we have no role we have never had any role in the past also we were supportive of the US intervention Soviet intervention and we are supportive of American intervention and therefore we have not had taken an independent line with Afghanistan now that is probably because of our complications with Pakistan and therefore now and we are never part of the negotiations except bilaterally with the parties concerned but directly in the negotiations we were not there and we have withdrawn our mission but that is no problem if the Taliban government is interested in having diplomatic relations with that we will definitely respond and so but that's what we are doing and recently there was a an important leader of Taliban said that relations with India are important and because we have not responded to that yet so we are watching and waiting and it will not change our approach to helping Afghanistan people the people of Afghanistan under whatever regime and that is our policy but what we will do with the Taliban government or what they will do with us we'll have to wait and see that I don't believe that will happen I don't think the United States will come back to support the Afghan government or oppose Taliban in the present circumstances they will not take any aggressive lines now I don't think so it's a it'll be a very subtle game what the Chinese will try to do is to pour in money into Afghanistan and get their positions strengthened and then extend themselves to the Central Asia etc they'll use that as a then nobody is going to attack us directly what will happen is perhaps in Jammu and Kashmir there will be greater activity terrorist activity in Jammu and Kashmir and that is something which we are prepared for definitely other than that there may not be any direct attack but it's also possible for that the Chinese may you know they may take a rigid position on disengagement from Ladakh because the disengagement is halted now and they may because of the situation they may not agree to a disengagement immediately they will want to wait and see what India can do well the UN as you know can act only the Security Council is unanimous the permanent members of the Security Council is unanimous that is not likely to happen in the present context because the United States on one side and China and Russia on the other so they will be able to only take very what shall we say baby steps to stop the war or give humanitarian assistance etc but for the United States to the United Nations to act against the Taliban is not a practical thing and they are in fact trying to soften it the name of Taliban has been taken away from the recent appeal launched by the Security Council so there will not be any unlike in Iraq there will not be any military action or anything by the United States they will be helpful they will try to persuade the members of the Security Council to come to terms with the situation and create a better atmosphere of peace and that is all that they can do they cannot do anything more serious than that even for the pandemic they could not do anything because of the Chinese veto here again there will be a Chinese or a Russian veto you the United Nations as a whole wants to take any action in Afghanistan but they will be very helpful in evacuating people they will be able to give humanitarian assistance and generally help the people of Afghanistan rather than the particular government all right thank you very much


CPAC's annual conference kicks off this week, but it's not going to be the same this year because so many of the Republican Party's biggest stars are conspicuously absent from this year's event, but as you're going to soon find out, for a very good reason. NBC News reports many of the Republican Party's marquee players, including Florida Governor Ron DeSantis, former Vice President Mike Pence, and the top GOP leaders in Congress, will skip this week's Conservative Political Action Conference in Maryland, dealing a significant blow to the annual gathering's stature. Now another major player in Conservative politics, if not the biggest player in all of Conservative politics, Fox News is also boycotting this year's CPAC. As Mediaite explains, Fox has sponsored the conference every year since 2019 and in 2021, Fox's streaming platform Fox Nation, which has in the past provided wall-to-wall coverage of the event, contributed $250,000 to CPAC. This year, Fox will not be sponsoring the event. As staffers told the Daily Beast, they're not sure what the network's coverage of the event will look like. So you're probably wondering what's going on. Well, this might have something to do with it. The chairman of CPAC, Matt Schlapp, has been accused of groping a campaign aid for Herschel Walker, and this same unnamed campaign aid is alleging that the Schlapps defamed his character in a coordinated conspiracy to discredit his allegations. Mediaite explains, the Daily Beast was the first to report on the accusations against Schlapp, who allegedly fondled the staffers' genitals as he drove Schlapp to a hotel. Matt Schlapp of CPAC grabbed my junk and pummeled it at length, the staffer said in a contemporaneous video he took of himself on the night of the alleged assault. Now, Matt Schlapp is denying the allegations, although the unnamed staffer also has contemporaneous text messages that he sent to friends on the night of the alleged assault, where he tells his friends that Matt Schlapp of CPAC was pissed that he didn't follow him back to his hotel room. So that right there is why so many conservatives don't want to go to CPAC, because they don't want to be associated with any of that. Trump, however, he's never let allegations of sexual predation affect who he's friends with, and he will indeed be speaking at CPAC. But this isn't surprising. One speaker, however, in theory who should surprise conservatives is Libs of TikTok's Chaya Rychik. This is an individual who has made a career for herself, going after groomers, even by groomers, I mean any and all LGBTQ plus people. But I mean, she's constantly put groomers and predators on blasts on her platform. So I mean, you would think that if she were to be invited to CPAC, especially given what we now know about Matt Schlapp, she would turn down that invitation like that. But turns out her aversion to groomers and predators isn't that strong after all, because she will indeed be speaking at this year's CPAC. That's right. The groomer lady is a confirmed speaker to an event whose chair is an alleged sexual predator. And given that she's a stochastic terrorist whose lies led to bomb threats against Boston Children's Hospital, she'll fit right in as this Twitter user put it. Now in the same week that she'll be speaking at CPAC, she went on Fox News and accused LGBTQ plus people once again of being groomers, and she called a book for gay teenagers, porn. A main sixth grader and his dad calling out their school board after the young student found a profane and explicit book in the school library. The 11-year-old confronting the school board last week, saying, quote, when I rented it out to show my dad the book, the librarian asked if I wanted more and if I wanted a graphic novel version. It's the deck issue our next guest exposes on her anti-woke social media account, Libs of Tick Tock, creator Haya Raychik is here with us this morning. Haya, thank you so much for being here. First of all, I just want to say thank you for what you do with Libs of Tick Tock. It's had a profound impact on exposing the things the left is trying to push on our youngest of kids, this being just the latest example. Well, thank you. It's great to be here. Every single day in America, our children are under attack, specifically in the school system. And that's what I seek to expose every single day. This 11-year-old little boy, he was interviewed on Fox and Friends first. And he said, he went up to the library and he checked out this book. And he was curious about it because it was a picture of two men in bed together on the cover. And he gave it to the librarian and she was wearing a mask and he said, I could tell she was so excited that I was giving her this book. And she said, I have more of these. I have the graphic novel that I can give you. And he said, no, I'm actually taking this home to my dad. And he said, you could see her face just got completely red and she was nervous. And now he's speaking out to the school board. Yeah. So the issue of pornography in schools is something I've been discussing for ever since I started my account. And the... Pornography in schools. Pornography in schools. I mean, just that phrase a lot. Not something I ever thought I'd say.  Like, it just makes you wonder, why do these far-left activists in our schools want kids to read porn so badly? Like, it's so creepy. Yeah. So a book depicting a gay relationship in a completely harmless, age-appropriate manner is creepy. In fact, it's tantamount to pornography.  Well, that's totally fine. In fact, catch my speech at his event later this week. I love how the host also thanked her at the beginning of the interview as if spreading lies that lead to bomb threats against children's hospitals is some noble pursuit. I mean, what else is there to say about this? The right is perfectly fine with groomers and sexual predators so long as they're on Team Red. And they provide you with a platform that will further your grift.   And if you're trying to pretend to care about groomers and you have this aversion to sexual predators, speaking at the event chaired by an alleged groper might not be the best look. But she's speaking there and this is Matt Schlapp trying to legitimize somebody who is a stochastic terrorist.  But maybe all of the people who follow Shia Rychik who also purports to be concerned about groomers and predators, maybe they should ask her why she'd wanna be associated with an event whose chair is an alleged predator. If this event actually cared about sexual predators and groomers, wouldn't they oust him from the organization at least temporarily? Of course not, because nobody on the right is consistent. Up yours, up yours, up yours.   I dreamed I saw my maternal grandmother. She was stroking herself absentmindedly. I let her have her way. The genital waging was exposed. I let her have her way.