Hey gang, welcome to my channel if this is your first time here.  Thanks for checking this video out. The videos on this channel can help heal more than 90% of any health wellness or body image challenge. So I encourage you to take a scroll through the other videos on this channel. There is something here that can help anybody reach any of their health wellness or body image goals. Today is a Q&A all about eating disorders. I had anorexia, binge purge, exercise bulimia. That just means that instead of vomiting you use exercise as a form of burning off, purging anything that you have eaten. I also had orthorexia. That is where you are absolutely terrified to eat anything unless it is 100% optimally healthy. I suffered for somewhere between 11 and 15 years with this. I am now fully recovered and I just wanted to help people. So on my Instagram, it's kick it with Kelly. Please follow me there. I share a lot of my stories that I do not share on this channel. So check that out. But I posted a story asking for questions regarding eating disorders because I wanted to do a Q&A. I found when I was going through recovery it was so hard to actually reach out and find people that were suffering or that had suffered the same way I did. I was in an outpatient hospital program where I learned all about recovery. So I've been there. I've done my own recovery work on the side myself with various books and such. And I just have so much to help people with. So if you know anybody suffering with an eating disorder, if you have one yourself, you are not alone. And yes, there is a light at the end of the tunnel. And I didn't believe anybody when they told me this. And sure enough, one day, boom, it clicks and you're free. And it's not without a lot of hard work. It does take hard work. And I think when it comes over night, you've got to work hard. But it's so, so worth it. I can't imagine what life would be like if I still had that problem. I don't know if I would even be alive, to be honest. So here we are. Let's go. How and when do you know to start the recovery process? Each eating disorder and each person that has an eating disorder are so, so different. The reason why a eating disorder starts for somebody could be completely different than the reason why it starts for somebody else. Not only that, the way the eating disorder gets expressed through each person is totally different as well. And the origin of the eating disorder may have nothing at all to do with body image or food, believe it or not. There are some little kinks there when it comes to control issues or trying to fill a hole that you weren't able to fill with love or an unmet need from your childhood. Now you're trying to fill it with food. Another thing I wanted to touch on is that you could be overweight and have a serious eating disorder. Or you could look totally healthy and normal. I did for a lot of mine. Nobody knew yet I was suffering extremely on the inside. So you can never judge an ed by how somebody looks appearance wise. All I can speak from is my own personal experience. And I knew it was time to recover when I realized that the eating disorder was taking up more of my life than the parts of my life I loved the most. Like my friends, my family. I stopped going to family and events. I stopped going to friend events because I was so terrified of having to eat or drink or speak to anyone about not eating or drinking there. I felt absolutely out of control. And then I started noticing the things that I was missing, the time that I was missing with the people that I cared about. Scary physical things were happening too. Earlier on I did lose my period. I did start having heart palpitations and chest pains. I was getting very dizzy. My panic and anxiety was through the roof. What it was for me was realizing the mental capacity that I no longer had. My brain's gone. My brain space was completely engulfed with thoughts around food, thoughts around calories.  Do I need to walk for hours today to earn something I'm gonna eat at a family event tomorrow? I could not live like that anymore. It was so not worth it. So when it's time to recover for you, you're gonna feel it. I think it's always time to recover. I think if you are even aware that you may have an eating disorder or disordered eating, the time is now. It's right then. That is when you start the journey of recovery because you know what? The longer you go, the way harder it becomes to climb out of that pool. So how to deal with bad body image during recovery. First of all, change your clothes. Go buy clothes that are larger in size, that are more comfortable. I started wearing baggy or t-shirts. You can still look completely stylish. You don't need clothes that are just hugging into your body. I remember the day that I went up to a medium-sized shirt and I thought it was just the end of the world. And you know what? It made my body look so much better to wear an appropriate size that I no longer cared that the shirt was a medium. I mean I also made sure about the quality of what I was eating. I still gave myself many liberties.  Another thing that I did, I adopted a healthy exercise routine. Meaning that since my body was gaining as it should, because I was way underweight, I decided to go to the gym and start lifting heavy weights and turn that into quality muscle.  You're not gonna gain a billion pounds and it will stop and it will then come back down as long as you continue on the right path, on the path that you're going with recovery. It will come back down to your natural set point weight. This is the weight that your body is most comfortable at and the weight that you feel you're best at. Not the weight that you look you're best at. That is subjective. It's the way that you feel that matters. I can't tell you how good I felt. Even mentally I felt so much better. Next question. How long does it take to gain the weight back? That's gonna vary with everyone. What are you doing during recovery? Are you still using some eating disorder behaviors? Sometimes during recovery that happens but regardless I'm not saying it's okay to continue using eating disorder behaviors because really you should not. All that you need to know and all that you need to think about is that you are going to feel amazing. Your body will take care of itself and will maintain its own healthy weight on its own. If you're eating healthily and you're eating normally and you're taking care of yourself and you have a healthy exercise routine, your body will be fine and it will maintain its weight effortlessly. I have tons of videos on this channel if you look through them on how to go about your lifestyle so that your body does maintain its own healthy weight naturally. Check those videos out for more info. What is a set point weight and how do I know what mine is? A set point weight is the weight at which your body is supposed to be naturally. The weight that you feel the best at, that it functions optimally at. You should have your period. You don't really know until you're there. Next. What happens if I overshoot my set point weight? Your body basically is being nourished again and it's scared. I thought it was dying for so long. It feels like it might be dying again and so it holds on to stuff and it's like let's hang on to this so that we survive. That happened to me. Was I terrified? Oh yeah. But I stayed the course and that's what makes the difference and now I have muscle. I am a healthy weight and my body maintains it just because my lifestyle is healthy and I really genuinely do enjoy a healthy lifestyle. If you find that you are not enjoying a healthy lifestyle, that you feel you need to eat things that are not optimal for you in order to maintain a better emotional state that perhaps drinking a whole bottle of wine makes you feel so good that you need to add that into your lifestyle. I encourage you to look at that very closely. You have to. Why is it that you need those things to be happy? What is missing in your life? Like you have to get really honest and really real with yourself going through recovery. You might want to get honest with yourself. Like instead of doing this, do you really? Because you can make it happen. What is the unmet need that you're not getting? You might think oh well it's because I need this. Keep going and keep asking because it's going to be really surprising. It could be layer over layer over layer over layer of things that you're not even consciously aware of that may have happened in your childhood that may have happened flipping yesterday. We don't even know but you have to get deep and go through it to find out. I have a way you can do that. I would tell you at the end when I'm through the questions. Worked like a charm for me. Anyway watch till the end and I'll share that with you. If I hate my body at a lower weight, how am I going to like it at a higher weight? This question actually makes me so sad. If you hate your body, why?  That's subjective. Think about it objectively because I don't think it has to do with your weight really. If you go way deeper, I really don't think it has to do with your weight on a fundamental level. And when you truly do recover and I mean really recover, you are going to love your body no matter what it looks like, no matter what weight it is. Did you know that your weight is the force of the gravity attaching your body to the earth? Weight is the force with which an object is pulled towards the center of the earth or any other celestial body. This force is called the gravitational force. Greater the mass, greater will be the gravitational force exerted by it and thus more will be our weight. What the flip and hack. Look at this photo. All of these women look completely different and they are the exact same weight. So no, I don't think you're going to love your body at a higher weight if you don't like it at a lower weight. Again, stage of the end and I'm going to tell you how to figure that out. What did you have to eat in recovery? There is no one-size-fits-all approach. I just tried to eat well without the paranoia and obsession with being healthy. Healthy fats, healthy carbs, like rice and quinoa, things like that. I made sure I had tons of vegetables and I made sure I had lots of healthy meats. As long as you are trying your best to incorporate all of the various foods, that's what really matters. It also comes down to fear foods. So another thing that you do have to do during recovery is explore the fear foods. What are your fear foods? What are you afraid to eat and why? I'm surviving on protein shakes, ice cream, water, safe foods. What are these rules that you have placed on food? Like this food is good, this food is bad. Why are we placing rules on that food? Why is it good and why is it bad and is it okay to eat in moderation? I nowadays eat everything. I eat fast food every now and then. I eat pizza every now and then and so for me, as long as I'm maintaining an 80-20 balance in lifestyle, so 80% optimally healthy, 20% of the time I treat myself, that is called balance.  That makes a big difference in terms of how quickly you change. Next, how did you tackle fear foods? Okay, I didn't even know that was the next question, but handy that. I would explore eating them.  And that's it. That's those little brave baby steps we gotta take. You gotta confront your fears. I made sure that I did not count the calories on the days that I ate the fear foods and just making sure that I was eating still when I was hungry.  You may have, which I did, lost sight of your hunger and satiety signals. So are you hungry or are you satiated? Are you full? And I no longer could hear those signals from my body because the eating disorder had overridden those for so many years. Make sure you have a support system around you that understands that you are going through something. They don't have to understand the eating disorder. It understands that you're going through something and understands that you may not finish a piece of pizza. You're gonna put it there until you feel okay to have another couple bites and you're gonna leave it there. The way it did work for me is that I would start eating the pizza. The alarm bells would start ringing. So all of a sudden I felt like I was full. I wasn't, but my brain was telling my body that I'm full out of the fear of eating the pizza. So when that signal happened and I felt physically full, I'd put the pizza down. Eventually that subsides and your body is hungry again. And so I would pick up the pizza, keep eating it. That may happen. Also it may not. And the biggest piece that you have to learn is compassion for yourself. Your body is not anymore able to communicate with you properly because your mind is trying to override the signals of the body. You need to have compassion for yourself. But that's what I did. I'd ease into the fear of foods that way. And then obviously the next day, I wouldn't really want any things. I knew I had pizza the day before and I was satisfied mentally with having satisfied that craving. And so I wasn't wanting it again or having pancakes for breakfast. Oh my gosh. Okay. Going out for breakfast, that was terrifying for me. And I stopped going out for brunch and for breakfast with my friends. And I missed that and I really love it. And so I would tackle that. So I go out for breakfast.  And then I found out that going out for breakfast, it didn't even matter. The eating disorder brain said that's a lot of calories in the morning. You're not going to get to eat for the rest of the day. And now you can't do anything for the rest of the day except for walk or run on the treadmill to burn those calories off. And eventually the eating disorder got quieter. And when I went out for breakfast, it gave me good energy, fats, protein, carbs. I had energy. I wanted to go for a hike after breakfast. So you see, once the eating disorder goes away, your mind starts to realize that these things are not scary. You can eat pizza. You're not going to want to eat it again tomorrow. If you have two pieces of pizza, you're not going to want the whole pizza because you're allowing yourself to have that. If you go out for breakfast, you're going to be cool. You're going to have energy to exercise during the day in a healthy, fun way.  At least that's how I went about tackling my own fear food. Remember, as long as you have an 80-20 balance, your body knows what to do with the liberties you allow it when it comes to food. Is it normal to binge sometimes and is binging guaranteed during recovery? It is normal for that to happen. It's absolutely normal. Like I alluded to in the previous question, it's the deprivation factor that causes binging. During recovery, it is 100% normal to binge, especially if you have been restricting your body and mind working a way that once something is no longer a bad food, once the food rules have gone away, you don't want that food or that quantity of that food the same way that you did before. It's just not as appealing. So once you do start tackling those fear foods, that will die down for you. And no, binging is not guaranteed during recovery. The best piece of advice I can give you in terms of what ifs is to go through the recovery because if you don't, you won't recover. And you know what? There is nothing wrong with crossing that bridge when you get to it. Next, should I go all in or gradually increase food intake? Okay, so for those of you watching that may not know what all in means, going all in means that you are going to be allowing your body to eat as much as it wants until you do get that full signal. It's just another way of getting your body's hunger and satiety signals to come back online for you. It's really what you're most comfortable with. I personally did not go all in. I also didn't believe it was necessary. And I also understood that it is going to wreak a bit of havoc, no permanent damage or anything like that, but it's going to wreak a bit of havoc on your digestive processing. If you're not feeding your body that much, or you know, you're just been having different behaviors, when you start just shoveling it in until you get that response, it's wreaking havoc on the inside of your body, your digestive system, the way your body is processing the food, it's kind of overloading it. I have a very respected and highly knowledgeable source about going all in. Her name is Stephanie Buttermore. If you're a YouTube fan in any kind of health and fitness realm, you've probably heard of her. She went all in. I will post her video down below for you to check out. She documents her entire journey of going all in. Check that out. If you're curious about all in and want to see really what happens, that's below. What I did though is I just started really trying to pay attention to my body's hunger and fullness signals. I just want to calm any fears that are happening. Say you do go all in and you gain a bunch of weight, your body will normalize itself and will balance itself back out and that weight will come off again if you maintain a healthy active lifestyle with healthy food intake over time. Next, is it normal to be constantly bloated and to develop IBS during or after recovery? Yes. That is 100% normal. I have an entire video all about IBS. I have linked that below as well. Yeah, it is entirely normal because like I say, you haven't been treating your body the same way in terms of eating or exercise behavior or if you've been vomiting to purge. Yes, when you do start eating more and you're eating more fibers and you're eating more fat, it is very normal to end up with a lot of bloating that will go away. Please, stay the corpse. I can't say that enough. If you stick through it, you stick through recovery, through IBS, through the bloating, you will come through that and your body will normalize.  Regress. And then you slip back down. It's like three steps forwards, two and a half steps back. You're only taking half a step forwards and it's agonizing. I mean, my recovery could have been much shorter had I gone stronger at it. I did relapse a couple times. If you have any questions about that or anything else that I'm saying in this video, please comment below and I will be happy to answer those for you. It will pass if you keep going the course. How did your ED affect your relationships?  I was not a good... Okay, well, Siri, I'm not talking to you anyways. It affected my relationships a lot. I was monitoring every single thing. I was Miss Cranky Pants nastiness, not okay. Once I was having a lovely evening, ordered food in Little Miss Ed Me, thought that I had ordered a locale veggie burger type of shenanigan. And I didn't realize until I was halfway through that burger, like I was so hungry on the inside that I didn't realize until I was halfway through that burger that it was not the locale veg thing that I thought I'd had in my mouth.   It just wants the food. And I lost my mind. That's so not fair. But again, huge piece of advice here. You need to tell the people that you are affecting with this ED about it. It's not easy. It was incredibly difficult.  I mean, you need to be honest with people. You need to be open with people because that is the only way that they're going to be able to even try to support you. I'm not saying that anyone's going to understand you. Nobody could have understood me or my mind then, but you need to give them the chance to support you. Help me. Help you. It affects all of your relationships on some level or another. The most important relationship you need to be thinking of is the relationship that you have with you. How is your ED affecting your relationship with you? I can honestly say I didn't want to be friends with myself back then. Pay attention to that. Be fair about it. How do you know when or if you're ready to recover? I can honestly say that I just put myself into recovery. I didn't feel ready to recover, but I knew that I had to and I knew the value that I was missing from my life. Like, I knew the value of my friends and my family, the value of the time in my life. Are you spending the time of your life in a way that is making you happy and getting you to that dream life that you want?  Is it worth what you're missing? Is it worth your health and your happiness because you're health and happiness? What else is any good without health and happiness? Just do it. Ready or not, you do it. How do you know if you're fully recovered? I knew I was fully recovered when this is unprecedented for me at the time, but about an hour and a half I've gone by since I had eaten and I thought, oh my gosh, I didn't even think about the calories that were in that. What? I thought that I was doomed forever to just be subjected to automatically counting calories whether I wanted to or not. It became so automatic.  One day and I went half. That's an eternity. I didn't even think about the calories and I thought, oh my gosh, I am recovered. Or the first day out of my recovery where I had a cheat meal and I had zero impulse to walk or to do any exercise, I knew I was recovered. I remember going for a walk and then thinking I don't want to walk anymore and going home. What? Because before I would have to walk until each calorie was accounted for and then some, that's how you know when it's no longer affecting you in any way, shape, or form.   When did you start going to the gym working out again? You should not be exercising if you are not nourishing your body enough, especially to build muscle but to exercise. If you have an ED and you are not nourishing yourself optimally or properly, please, please do not be trying to work out. Yeah, obviously go for walks, do something light, do light yoga or anything like that, restorative yoga especially. As an example, I lost all my muscle. Here I am trying to put on muscle in the gym when I'm not feeding myself enough. That is putting so much stress on my joints. It's causing excess inflammation. I ended up with stress fractures on my shins but I went back to the gym A when I had my period back and B when I knew that I was eating enough to sustain any exercise. Otherwise, if I went stir crazy from not moving, which happens to me if I sit too long, I'll go for a little walk around the block or that's what I did. I did restorative yoga, stretching, things like that. But if you feel good and you feel strong, then you can work out again. How did you get your period back by eating?  What was the moment in recovery where you thought I've got this? Never. Not once in my recovery did I ever have a thought like I've got this. Let's talk about neurology, neuroscience for a tick here. Let's say there's a train, AKA your thought process that has been running along this one track for a long time, a lot of years and here you are starting to try to build another train track for this train, AKA recovery. This train is not going to swap tracks until that track is built until it is completed. Basically, you're gonna still have those thoughts, but the key is you're constantly working on your thoughts, trying to figure out why they're there. You're working on your thought processes. It is exhausting. It is day in, day out. A lot of people do say that having a net is worse than a drug addiction because you can avoid a drug. You have to eat.  But one day I woke up, I noticed that all of a sudden my thought process had changed. All of a sudden it was like I no longer had anxiety or panic or anger or rage or irritability or depression. It just changed. I worked so hard on building that new neuropathway, AKA that new train track. My train swapped tracks and it went and it has not gone back. So it'll happen. This whole Q and A is my own personal experience. I'm not trying to teach. I'm just trying to share because I wish that I had someone to share with me. So no, I never had one of that. I've got this kind of, no, never had that thought. Some people might. I didn't. I hope people do. But regardless, you're gonna be fine. Whether you have that thought or not, I never did and I'm fine. So please, please, please stay the course. Most important thing I could be telling you. Is there a time you wanted to relapse and what kept you going? Yes. You know, until I was fully recovered. There was a lot of times I wanted to relapse. What kept me going was the life that I knew was waiting for me on the other side, knowing that one day my body would normalize its own weight regardless because I like to live a healthy lifestyle. I enjoy living a healthy lifestyle. Another thing that kept me going was knowing the relationships that I could have with people at the time I could enjoy with my friends. Going on vacation and eating whatever I wanted. I knew that was all waiting for me. And in the meantime, I was going through eight years of holistic health training and schooling and I knew because now I had the knowledge base and the education that one day my body would totally maintain its healthy weight like it does now effortlessly. I knew scientifically at this point that was possible. That kept me going. Also, you know, I would have died had I got along the same track and kept going. I would have died and that's a guarantee. So it'll be different for you. Find something that keeps you going though. You need to keep going. You got this. You know what the right thing to do is? You know what's right? You get knocked down. You get up again. Last question. What's the best thing you got out of recovery? That's such a good question to be the last one. I didn't even plan that. I got my life. I got a healthy body that absolutely maintains itself with the healthy lifestyle that I enjoy living, the healthy mind just being happy, having all of the quality time back and especially the space in my head, the brain space. Oh my gosh.  Like really? This was a neat phenomenon. I actually have way more hours in a day than I thought I did with the ed because not only was I so hyper focused on every single thing to do about food all day long, but then I was spending all of my time exercising for like if someone could have told me how much of a waste of time that was oh my lord what I got back was my life and that's worth it. Now I'm going to let you know the best key that ever happened to me. This book saved my life. This is called the eight keys to recovery from an eating disorder by Carolyn Costin. Carolyn I would say is the world's leading expert in eating disorders, the origins of them, healing them. This book is available in audio as well. I use the audio version. No ifs, ands or buts. You have to do the exercises in this book. If I didn't do the exercises outlined in this book during my recovery, I really don't believe I would have recovered because it's those exercises. It's so, so key to recovery. Seek professional help because there's so much support out there that you could be getting. I didn't even realize there were programs out there that I could have been in this whole time or the whole time that I had my ed. So now I'm so grateful that that hospital program even invites me to share my story, my journey, my opinions with people in recovery now and it's just so gratifying. So yes the eight keys to recovery from an eating disorder by Carolyn Costin. I have linked the Amazon link for that down below. Grab that. It's incredible. Oh there are more. Overcoming your eating disorder workbook, a cognitive behavioral therapy approach, CBT, works wonders. I also had overcoming bulimia workbook.  I will link all of these books below but honestly it's the eight keys to recovery right here that made the biggest difference for me. So if you thought this video was helpful or informative at all, please give it a thumbs up down there for me because that lets me know what kind of content to keep producing for you. Please subscribe to this channel. Subscribing really is where the support does come from and I am so grateful to each and every subscriber. Please share this channel, help other people get access to legit quality info that can actually help them heal themselves and if you would like notifications of the next time I post any videos please hit that little bell notification icon down there and you will be sent a notification each time I upload.  I did because as far as I'm concerned it's got to be a good time so I'll see you next time. Bye.


Hi everyone. Today we're going to talk about extending Envoy Proxy with WebAssembly. My name is Idid Levine and I'm the founder and CEO of SoloIO. And I am here Yuval Kochavi, the chief architect of SoloIO. And we will share with you about WebAssembly and Envoy. So let's start giving a bit of an intro. A little bit about the control plane and data plane separation. Just as it's important to understand the moving parts here. So if we go to the next slide, we will see that the way Envoy is structured is that Envoy itself is configured through a different component called a control plane that's responsible of processing user configuration and updating Envoy in real time dynamically in an eventual consistent way of that configuration. And in this slide you can see that we have two examples, one of Itzio and one of Glue. Both of these use Envoy as the data plane component, right? The data plane is where user data, HTTP requests flow through and they are the control plane component for Envoy. The control plane is the channel where configuration messages go through. And if we'll move on to the next slide, we can see sort of this visualization where a user configuration in Glue's case, Glue processes Kubernetes CRDs and one of the CRDs is a virtual service goes into Glue and then if Glue processes it through a Glue list of plugins and the user configuration, it gets translated to Envoy configuration and delivered on to Envoy. And now the reason for this extra API because the user configuration that Glue provides is use case specific and simpler to understand than the Envoy configuration. Glue also can automate a lot of the parts that Envoy needs. For example, cluster membership and endpoints with making Envoy easier to operate. Now if we'll continue, we can talk about how the data path looks like and we can see that an HTTP request comes into Envoy and that's one of the key parts that make Envoy very useful as a cloud native proxy, the ability to extend it, right? The request doesn't just pass through Envoy on to the upstream but actually goes through a series of filters that can modify the request and impact the behavior of the proxy. So in this example, we can see that the request goes through Envoy's filter chain first hit in the external filter where it's consulted with an external server whether or not to authorize the request moving on to the rate limit filter where it consults a rate limiting server to allow the request for rate limiting purposes and finally traverses to a GRPC transcoder filter that allows you to provide a rest interface externally but converted to a GRPC interface internally. So your microservices can talk GRPC which is very common in the Go microservices ecosystem while your front end, your external facing API will be a REST API that's easier to consume from JavaScript. So that's kind of how Envoy looks like and one of the nice things about Envoy is that it's extendable. So if you'll go in the next slide we can see that we can also insert custom extension points, custom filters onto Envoy and the rest of the talk we're going to talk a little bit more about these custom filters and how Wasson fits in. Now, when talking about extending a product usually we have a checklist of things we want to get out of it. So we want to be able to use a language of our choice we want this extension to work fast we want it to be safe that if we have an issue in the extension it doesn't bring down the whole proxy where a lot of other traffic potentially multi-tenant traffic flows through and we don't want to now we only want to build our code we probably don't want to rebuild all of Envoy just to extend it and we want an easy to use experience and with that in mind let's I'll hand it over to Edith to talk a little bit more about that. Thanks Yvonne. So basically we'll take an example of the two control plans that basically extending Envoy and managing Envoy and basically see how they decided to go about extending the data plan. So the first thing that we will look at is Glue and Glue is an API gateway based on Envoy it's focusing majorly on the edge that's the use case and when we looked at how we can actually extend Envoy we decided that because we more care about the performance we want to make sure this is basically on the control path on the request path so latency is extremely important we decided that we want to make sure that those filters going to live still in the proxy and not going to do any round trip but that means that it's hard because the way to actually extend those filter is by writing a C++ asking a filter code and then recompile Envoy. So by us choosing to decided to take this banner on us in that case the solar company solar company basically we make it extremely you know it's extremely to the user itself we make sure that it's extremely fast right because it's in the control path and it's built into the binary basically of Envoy it's extremely safe because you know there is no round trip there's no network involved or wire involved in this but of course it's not the easiest thing to do as I said C++ code is not something easy to do we are basically recompiling Envoy for the users so there's nothing easy about that we chose this we're taking the law for us so it is easy for our customers but in the natural for us it's a challenging thing and you know and there's not a lot of people who can do that STO took a different approach and when STO started basically their idea was we really care about extensibility we really want people to be able to take that and write it by themselves and not be depending on us and in order to do this they basically came with Mixer and the idea with Mixer is basically that every time that the request is coming to to the proxy it's going to basically take the request and route it to Mixer and Mixer basically would get all the requests and would be able to do whatever you want from it telemetry or maybe you wanted to do some you know any adapter that people might want and basically return the request to the proxy after it the problem with that is you know there is a lot of advantage with this right potentially right now people right be able to use their own language because Mixer can communicate GRPC you know honest to God most of the people were using Go it's not fast right I mean that's the majority problem that the people talking about or talked about stability in STO that was the majority of the problem because there is a full request constantly going on the wire it is safe right I mean it is going over the what you know again there is communication between two components here it's not at the same binary so potentially there is always a problem but you know relatively it's safe you definitely don't need to compile language which is a very very huge advantage and it's easy you know I don't know it's a complex problem to solve but it's easier than write a C++ asking and recompile so you know when you're looking at this you know the Google guys and the local community understood that this approach that the STO community took is a little bit problematic there was a lot of problem with that and tried to figure out what different way we can go so as an community we decided to basically to explore the WebAssembly so let's kind of like overview a little bit of what is WebAssembly and why we thought we thought that this would be a good way to leverage that technology so first of all WebAssembly funny enough it's not an assembly code right it's a binary structure format and it's not only for the web as you know because we're bringing it to Envoy so it's a little bit misled but the idea would actually creating WebAssembly the measure reason for its existence is to extending the browser right that's why people did it and the idea was that they wanted an ability to be able to extend the browser with but you know with that they needed to have some use case to make sure that for instance it's portable right because browser can run everywhere so we need to make sure that it doesn't matter which operating system you're using they need to make sure that it's secure because the last thing that they want is that the browser because some was some extension that is not you know you know that there's some error prone or something like that it will take all the browser down that's something that we definitely don't want to make sure that so they created a sandbox we want to make sure that it's fast because again performance is extremely important in the browser as well as the handboy and you can actually see that it's very interesting is that if before if you know before the was and people were using JavaScript JavaScript is not going to be extremely fast and the reason is because there's just more things that should be you know a process while actually it's running with WebAssembly it's basically much more a slim version of what should be happening when the thing is running so you only need to you don't need to pause you don't need to do a lot of stuff it's already basically package very minimum the last you know the other thing as you well mentioned before you probably prefer that the customer will be able you know your user will be able to use any language and for that in Web in WebAssembly they created a very interesting you know nice interface that basically mean that you can choose the language of your choice and there is some representative intermediate or representative that can go to whatever process like 86 or on and the last one that was extremely interesting when they came in is the ability to actually run it outside the browser itself and by creating this interface was the that's what basically allowing us to eventually bring it to endpoint so all those functionality of fast secure portable and as well as as any language it's what basically make that attractive technology extremely attractive for something like endpoint and this is what we decided to bring it because if you think about if you will leverage it then we can use any language it will be very fast because it's very close to assembly code it will be safe because it will be on the same binary there is no need to compile because it's basically extended and without needed to actually compile it and it will be relatively extremely easy or easier than do the rest so I will end out to you well to explain you how exactly we do WebAssembly and how we do the Envoy to get over the community thank you Diet so let's talk about that as mentioned before the Envoy has a series of filters that can act on the request and change it and essentially the way wasm is integrated onto Envoy is as a custom filter right so as far as Envoy is concerned most of Envoy core is not aware of wasm at all but rather wasm is implemented as a native Envoy filter as we can see in the next slide that filter actually talks with the Envoy runtime and runs wasm code so most of core Envoy is not really aware that it's running wasm and that also has the advantage of those filters having almost the full power of a native Envoy filter and that is accomplished using something we call the ABI so the way the workflow works is that wasm-vm is built into Envoy so we have V8 we have Wavom and we have an LVM that's not really wasm but more for development purposes and testing purposes when you want to use a wasm filter in Envoy you create an Envoy filter or you instantiate in Envoy config an Envoy filter of type wasm and tell the wasm filter to load your wasm code with a specific wasm-vm the wasm-envoy native filter communicates with your wasm code and that's what we call the ABI and in the next slide we see sort of an illustration of what this ABI looks like it's all open source on github so you can check it out yourself essentially it's a definition of C-like functions that pretty much correspond to the Envoy internal interfaces today and allow you to do the same request modifications for like external or like transformation all of this a wasm filter can do it has the advantages that you can load it dynamically into Envoy you don't need to recompile Envoy you don't even need to restart Envoy it's all loaded dynamically as regular filters can be loaded dynamically and it has the advantages of you being able to externally write and develop it if we go in the next slide we can see that today there are various languages already supported so you in order to essentially write a filter you can write it using the raw SDK but it'd be much easier to use a language specific SDK that brings the native language concepts to your development flow so we have a list of them in the script and Rust there's an additional tiny go and we have a list of them all in our Wasmere repo and we'll refer to that later and using the SDK allows you a much easier development experience than the raw ABI because they abstract much of the low level details of Wasm and the way it works today is that you use a language specific SDK to build your Wasm filter and then the Wasm filter that you wrote communicates with the Envoy Wasm native filter using the ABI in a Wasm VM of your choice where currently V8 and Wavim are supported we can summarize and we can see that we achieve almost all our requirements from before and the one thing, the one point of friction is how to get the Wasm module from your developer laptop into the cluster and I'll let it talk a little bit more about how this developer experience is solved using a tool we created Thank you Rao. So basically when we looked at this and we understand the amazing power that it's giving right now to the user, I also saw this tweet and that tweet is from Solomon Haik the founder of Docker and basically Lin Cloud is one of the leader of WebAssembly ecosystem basically announcing Wasi, Solomon Haik mentioned that if Wasi and Wasm was existing in 2008, we will never create a Docker, right? And that's basically gave me kind of like the connotation of the fact that as you well mentioned before it will be extremely hard, like it's really nice technology but it's extremely how to go about doing it and when you think about it, this is what happened with the container ecosystem because back then, you know, Google did an amazing job, Google and the ecosystem to basically created the Linux container but to make the Linux container as popular and use it including us, we needed Docker to make it very simple to use. So when I saw that I realized that this is something that we can help with and there is a lot of similarity between what happened with Docker and what happened right now with WebAssembly and that's why we decided to create WebAssembly Hub. So what is WebAssembly Hub? So it's very familiar it's basically giving you the Docker like experience that you're bringing to Envoy platform. So in the natural is very, very simple interfaces it's a command line and it's a registry and I will let actually you well show you that instead of me actually talk about it but by actually bringing this experience as well to the user we kind of like checked everything everything that we wanted on the list, right? It's use any language is fast, it's safe and you need to compile and now with WebAssembly it's also extremely simple. And now I will add it to you Val to show us quick demo. Thank you, Edith. Let me share my screen and I will do a quick demonstration of wasmi our tool for developer experience. All right, I hope everybody can see my IDE we can make it a bit bigger. Let's start with the demo. So in this demo we're going to show how we can use wasmi to create a nice developer workflow of creating, building and distributing and running our WebAssembly Envoy filters. So the first thing we'll start with is with wasmi in it and wasmi in it essentially has a template of a filter so we can you know have something to start with, right? Kind of like the React app template and when we run this command we choose the language that we would like to use, we'll use assembly script and we choose the platform we want to support the wasm ABI, it has multiple ABI versions so this step explains to us which version of a glue initio this filter will support. Once it's done you can see that it has extracted our wasm template and we can open a bit of code right now inside of the new filter folder the index.ts in the assembly folder and you can see this is a assembly script file, it's very similar in the syntax to type script and now just for fun we'll change this a little bit so what this filter does it's a very simple filter and on a response headers right whenever a response comes into Envoy it appends additional header onto the response and now I can just change this from a low world to a low asm a wasm and save now do note that this what we'll see is how we build and inject this filter onto Envoy so the next step would be to build the filter using wasm build takes an argument what builder type to use in our case assembly script and the image tag to use and this is a very similar concept to Docker images and in our case the image tag is WebAssembly.hub.io slash uvall which is my user name and then the image for name add header and a version and finally dot to build the local directory and now it pulls in a build container with all the build tools you need so you don't need to have npm re-install and builds the filter for us and let's give it a second to finish alright as you can see it created a filter with our image tag and that filter has our wasm already in it and now we're going to use the wasm.hub.io that is image listed as an image that was just built now in order to distribute this we can do wasm push now this is very very similar to how Docker push work and in fact we even use the same code and wasm push will push this to WebAssembly.hub and this is our portal to essentially help you discover, deploy and pull and publish all your extensions and as you can see let's explore this a little bit let's view more repositories you can see that there's a lot of existing filters already from users in the community just sign up it's free to sign up and push your code we can filter by label to kind of help you in this case if you look for example at the security label we can see this filter that has a nice description to it and then it also gives you the command you need to pull it so you can do wasm pull to pull this filter from WebAssembly.hub locally into your local laptop now let's log in just to show you how my folder looks like and you can see that I'm also a member of the Soli organization and these are filters published to the Soli org but if I go to my own user you can see the AdHeader filter that we just pushed alright let's continue with that demo so once the filter is all built and all pushed we can deploy it so wasm deploy here I'll just deploy locally to my PEST and let's run this command deploy we currently support a glue and ITCL or local envoy what it will do is essentially pulling the image if needed and then run it and essentially give you a very quick and easy way to get your filter loaded and running now let's see that everything is working hello wasm header on the response so let's do a head request just so I can get some headers and you can see here the request was sent successfully and the response indeed contains the hello wasm response header that I just created in this filter and that's it that is our demo for wasm the tools that allow you to build publish and deploy your web assembly and voice builders take it away for some final words thanks so much Yuval so guys as you see we are extremely extremely passionate about everything related to wasm and the extension of service mesh and voice specifically we think that this is a great tool and we worked very hard to create a tooling to make it extremely simple to use it and we really hope that everybody will use it running as an envoy in production for a lot of big huge enterprise our customers I can tell you that this is so valuable and extremely desired look everything that we're doing most of the stuff that we're doing is open source including glue and service mesh all the work that we're doing is almost open source so if you're interested in this you can go to the web editor go visit our repository and specifically the wasm repository there you will find everything that solo is doing including a spec for wasm OCI image so please check it out and we would love to take you you know to get any feedback thanks so much


Sunray Cinema is asking its customers to reach out to St. John's County commissioners in hopes of saving North Florida's largest screen, the IMAX at World Golf Village. Shannon David Massad, co-owner of Sunray Cinema in Five Points is here now to explain. Let me just say before we get started two things I love Sunray. IMAX World Golf Village. Like I just love, I saw What was the second Batman? Christopher Nolan Batman. The Dark Knight. The scene when he was flying through Hong Kong on the IMAX screen. I still think of it today and just like It's amazing. It's amazing. So like look peanut and chocolate butter two things I love put them together What a beautiful way of putting that. Yes. So how do we get chocolate and peanut butter to mix? Tell me what what what are your plans? What are you trying to do? All right, so here's what we started with That IMAX theater you saw that Dark Knight one. Yes, it's it's open. It's doing some business Yeah, real and so when we heard this announcement it's gonna close in September and It's gonna become the property of St. John's County. We reached out to the County Commissioner You know this place has something incredible St. John's County is very lucky to now be in possession of this IMAX screen and and we hear you're not sure what you're going to do with it We have some ideas. We also happen to be right here in Jacksonville And we've been operating a movie theater under adverse circumstances for 12 years. Yep So let's see if we can talk about your adverse circumstances that are quite fortunate circumstances in some ways because you can keep This screen going if you'd like to and we got a response that was well what that sounds fantastic We don't see why not from this one commissioner we spoke to what should reach out to all the other commissioners and so we did and The the assistant for all the commissioners said okay. Well, it's gonna have to go to public comment We're not really sure what's going to happen and we said oh good When does the public comment start and the office said we don't know and we said okay and so we announced on Facebook that the commissioners are going to be looking for comment as to what they should do with their cool new IMAX screen and Here's their email addresses by the way and So some people responded to that and responded and responded one of the responses was from a real savvy customer who made this website Sunray IMAX comm which was not a website. I was envisioning existing, you know In any other ways then Wishful fantastical Because we didn't expect that the IMAX would go into the hands of St. John's County But when movie theaters go dark as they do across America day by day They go different routes and what happens to them is always an interesting thing And we as Sunray are always curious to see what happens to it This one is just so close to us and we're in a position to take it on right away There's no there's no reason for it to go dark. Yeah, and you guys I mean you've done this before because before you took over Sunray It was club five which I've had many many crazy nights at club five But but when club five closed down you guys came in and and made it a movie theater again So my other half has been showing movies to this community and bringing movies to this forever Before I was here. I moved here in 2003 so before that right and in any spaces that can be converted to Showing movies he has seen and jumped on and worked with in all kinds of ways So there's all kinds of history, but the history with this particular space started in 2011 Yeah, because it wasn't a movie theater, you're right for some quite some time and there's There's a big change in the way that people see movies now But there was before when that single screen as it was closed and became a night club That was because people were changing the way that they were going to see their move Absolutely hot minute ago. Yeah, and you know when I think about San Marco the the movie theater closing in San Marco It kind of breaks my heart like these places are you know because Movies theater the art it's it's it's a communal experience You know like you're there with I remember being in that I maxed during dark night and watching the entire Audience feel like we were flying through Hong Kong with Batman and we were all doing it together like it's a very communal experience and so when You know one of these great theaters closed down and it closes down in our community I feel like it really takes something away from our community It doesn't take away those memories, but it does take away those opportunities Absolutely for you and your family and for a lot of people movie going as a family thing Yep, and when we all get into a room together and we engage in that same story We let go of a lot of things and we let go of all of those things together And and it's really cool to see us come together in real life Not that being in the movie theater isn't real life But in the light and we come together and we say hey this experience is so important to us We're gonna write to you commissioners We're gonna write to you all at once and we're gonna tell you this really needs to stay in our community There's not so many opportunities to tell your community leaders that to do all St. John's County reach out to the commissioners and Sunray at I max


At Audiology Associates of Prestonsburg, you can live your life the way you want and find the freedom of better hearing. With 40 years of being in the hearing care industry, you'll experience patient care that is specific to you with exceptional follow-up care that ensures your hearing and balance needs are being met. Audiology Associates at 1428 Northlake Drive in Prestonsburg. The Floyd County Health Department will be hosting a teen-led discussion on resilience Thursday, January 18th. The Youth Cafe will allow local youth the opportunity to learn coping skills, build a sense of community, and surround themselves with like-minded peers. It's part of the Kentucky Strength Things Families Grant, and it's a strength-based program, and we are trying to work with the strengths that young people in our community already have. So this event is to increase protective factors. Each event is youth-led, so we have several trained youth that will be directing the conversation. We have adults for supervision, but the conversation isn't about us. It's about the youth and what they need. The event is for teens ages 13 to 18 and will be held from 5 to 7 p.m. and feature a build-your-own popcorn bar. A lot of our youth feel alone. They're lacking in positive social connections with peers, and this is a way to connect them with peers who are focused on living a healthy lifestyle and coping with challenges and bouncing back. And it also connects them with community members because we are always looking for community partners to help with snacks, with locations, and it's just a great way to get everybody together.


녂                                 ิ                                                                                JENNC I will I ốt నంשה ల్థభార్ was kushu for Nigeria's advancement. One of Adyasa's notable contributions was his founding of the Nigerian pioneer, a consultiveness paper that provided a platform for his perspectives and ideas through this publication before that his advocacy for embracing western concepts and traditions, sparking debates and discussions amongst his contemporaries. His unwavering commitment to these principles despite facing opposition solidified his reputation as a staunch advocate for change through collaboration with the colonial powers. Within the people's union, Adyasa's influence was felt deeply. His leadership and consultive views shaped the direction of the union and contributed to its role in the broader political landscape of the time. He was a voker or prophet, he was a voker or proponent of engagement with the colonial authorities and sought to leverage this relationship to drive change and progress in Nigeria. His approach placed him at the center of many pivotal discussions and decisions that would ultimately shape the country's future. Despite his advocacy for embracing colonial institutions, Adyasa was not without detractors. Many of these contemporaries criticized his conservative leaning, his alignment with the colonial powers as contradictory to the great nationalist movement. This criticism however did lead to Adyasa from his convictions and he continued to champion his vision for Nigeria's future. Adyasa's legacy extends beyond his political activities. His work and influence in the legacy have also left a lasting mark. As a lawyer, he navigated a complex landscape of colonial laws and regulations using his expertise to advocate his beliefs and principles. This dual role as both a politician and a legal expert positioned him as a pivotal figure in shaping the legal and political arenas of this time. Ultimately, Sakito Adyasa's impact on Nigerian history cannot be overstated. His unwavering belief in the need to adopt European ideas and structures is role in shaping the people's union and his pioneering efforts in journalism have contributed to a complex and multifaceted legacy. While Adyasa's conservative stance may have drawn criticism, his influence and contributions to Nigerian society during the colonial period make him a figure worth studying and understanding in historical context. With the richness of insight and the mess which the so-called nationalist turned first and second public's politicals, indeed, contemporary politicians have made of governance, can we say that Sakito Adyasa's anti-nationalism stance has been proven right?


Okay, hello everyone. My name is Joe Sloak and I am going to be talking about something I call mission kill focusing on process targeting and ICS attacks. So, getting into that first, who am I so currently I am a adversary hunter. I have a fancy way of saying threat intelligence I suppose working at Dregos focusing on industrial control system threats and threat activities. I also do some cyber threat intelligence training through a site gig called paralysis. If you're hanging around the blue team village you'll see me with a workshop on cyber threat intelligence later today. But in addition to my current time working with Dregos on ICS threats, I formally led the incident response team at Los Alamos National Laboratory and did some cidery things for the US Navy as an officer back in the day. But enough about me, we really want to get to our agenda for today. And along those lines, we're going to start with just a definition of what an attack means. We're going to have confusion around the word and so just get a common conception of what the term means in the context of ICS events, and then review three process targeting incidents from the past few years and what those teachers and the consequences of seeing adversaries to a more refined or a more focused way of trying to impact control system environments and conclude with defensive options and implications for what it is that asset or owners and operators need to do in order to meet this type of or category of threat. So first to define attack. Yeah, principally, I'm looking at attack as being those deny degrade destroy operations so just simply scanning a device, sending a phishing message, don't really constitute attacks these can come into play in terms of certain preparatory actions but trying to determine what is simply a route to economic espionage versus what is a precursor to an attack really depends upon being able to discern or identify adversary intent and short of being able to read minds it's very hard to do that. So really for the purposes of this discussion. We're really only talking about those sorts of incidents where there has been noticeable process disruption degradation or denying control over an industrial process. So we're looking at that, and we can map this and there are several ways of doing this there's the ICS specific kill chain, as well as the various other kill chains that are out there since we can't just have one we need multiple, but really looking at a sequence of events typically breaching a victims it network, identifying points of contact with the industrial environment, enumerating and categorizing that environment in order to determine what sort of capabilities are necessary in order to interact with or make some change or disruptive effect within that environment, and then finally being in a position to deliver effects on objectives. So a sequence of events that are interdependent that if you fail in one, you essentially fail and all that defines what it is is required in order to execute a system that is being disruptive or destructive within an industrial environment. And so with that in mind, looking at a lot of headlines we see things that are mentioned as a tax that really don't meet that bar, whether we have items like the infamous damn New York almost 10 years ago now to items like the Baku Sehan Tbilisi pipeline incident, or even just plain made up items like in the wild ransomware that was a company tech demo and whatnot that we see the word attack thrown about quite frequently but done so in ways that really don't align well with a conception of what an attack really means or where the implications are quite real. We do, however, see general attacks that impact ICS. So whether we're looking at something like the shimoon event or the sequence of shimoon events since the first one in 2012, moving on to items like there was a recent very interesting event that took place in the United States just last year, where there was a denial of service condition on a router that inhibited control over a wind farm for a period of time. But while concerning it seemed very untargeted and then getting into things like various ransomware strains that migrate into and have some impact on industrial operations while all of these are very concerning. They're also somewhat dumb or very untargeted and kind of sloppy in impact, not terribly focused and not really taking into consideration the nature of or the specifics of the targeted industrial environment or the underlying process. Because today what we want to talk about is a more focused type of attack that I refer to as process targeting, where instead of just blindly looking to disrupt whatever is reachable within an environment, attackers instead focus on a specific stage or aspect of the industrial process. And this could be technical, such as looking for specific equipment or software targeting a known vulnerability or something along those lines, or it could be operational to understanding what the sequence of events required for an industrial process, such as a manufacturing line that goes through three distinct states and knowing which is a critical path know that if it's disrupted it results in the entire line being brought down represents a more operational way of looking at things and targeting those sorts of weak points. And so we're really trying to move away from the discussions on indiscriminate wiping ransomware worms etc, which define most of the industrial impacting events that we've seen thus far. One thing is don't just describe all of the industrial events that we've seen to date because there are a subset of industrial impacting events, some in cyber but one that's actually physical that I think presents some very important lessons and so I'm going to bring that into the discussion to represent true process targeting for impacts and industrial control environments. So we'll talk to the 2016 Ukraine event, which involved the crash over Rod malware also referred to as in destroyer the 2017 Saudi Arabia incident that involved the use of the cyber burden or trices malware, and then talk about something that happened in Saudi Arabia in 2019 that wasn't cyber and origin but really emphasizes how attackers are evolving when it comes to operating in industrial spaces. So first the crash override incident. This was something that was briefed at Black Hat a couple of years ago between myself and some Dragos colleagues as well as Anton Cherupinoff and Robert Lopovsky of ESET. An interesting event in that it represented the second cyber event impacting electric operations in Ukraine after the 2015 incident, but the 2016 event was a little bit more interesting, because it represented a technical evolution in that it was just a specific piece of malware with capabilities for manipulating the distribution or transmission operations within a substation in order to cause a disruption of the delivery of power. So the way that this attack worked is first penetrate the industrial environment and place malware on computers that can communicate to the field devices that actually control the breakers and schedule that malware in order to open the market transmission site to do a sort of coordinated effort. And then there was some after effect, limited system wipe and some disabling events on infected machines that induced the loss of at least logical or state of control in the specific environment. So there was this thing that at least at the time and I've since analyzed this quite extensively in my presentation of the ICS Village last year actually as well as in a subsequent white paper on a protective relay denial of service that took place post attack which actually starts become more significant when you look at this attack in terms of process dependencies. Because when we start looking back at 2015, the attackers used a wiper, a sensibly to delay recovery in 2015 that we will disable all of the scale workstations all the engineering workstations in order to inhibit the ability to restore operations and in an efficient way. But from the 2015 attack it was proved that the operators in question were quite happy and willing to rapidly shift into manual operations in order to restore electric service as quickly as possible.  And there are significant pieces of evidence that have been reported publicly as well as a lot of things I've written privately that the attackers in these incidents if not are the same or at least are very much tightly linked that they took note and that the wiper functionality in 2016 really seems kind of superfluous if you know that the operators are going to go out to the transmission yard and start closing breakers manually.  Why would you do this. Well, it seems that instead the wiper was intended for other purposes that rather than to inhibit restoration because you know that the operators are going to get into manual operations instead the wiper seems more aligned with eliminating logical view and control of the scattered environment. And that brings us to protective relays, because that denial of service condition on protective relays becomes fairly significant when you realize what a protective relay does in the context of electric utility operations. So, especially a digital protective relay is a smart device that works to ensure the process, maybe not necessarily safety but certainly process control and certain degrees of process protection to make sure that fluctuations and electric distribution and transmission operations don't propagate beyond the relay operations in order to induce potential physical damage to electric distribution transmission or even generation gear. So looking at this is that we see protective relays as being a significant aspect of electric operations at multiple stages of the electric utility landscape, and while you can operate without them. It induces a certain level of risk in that fluctuations in normal fluctuations is the part of electric operations let alone the introduction of potential disasters natural or engineered means that with the absence of relay protection. Anomalous events would propagate beyond that protective layer to start impacting equipment directly, thus creating the preconditions for physical equipment damage. So looking at the event in Ukraine. The Siemens to protect denial of service is pretty interesting in that it doesn't take the device offline but rather the denial of service wipes all the protective logic from it. It's one of those this is a feature as opposed to a bug in that it's used to free up memory to allow for a firmware upgrade or reprogramming of the device. So the device is still network accessible it looks powered on. So if you're running through the yard trying to figure out what's going on or through the control room that might look like the device is still up and running. But all the actual protection logic is removed so it's not doing its job. And it's a trivial attack to execute just by sending a single UDP packet within the environment. It's worth noting that there was an ending this mistake in the malware. Not sure if they were counting on this being translated in some fashion although working in a lab environment, not quite sure how this was supposed to have worked but doesn't look like the payload would have been delivered properly at least in the actual attack. And this was one of a number of mistakes that were made as part of the crash override event. But even though it didn't work quite as to the extent or in the fashion that the attackers wanted to. The limitations and the capabilities deployed in the 2016, you create incidents show a much more ambitious event than what we saw in 2015, and that the attackers induced a widespread outage, and a loss of view condition through that wiping aspect, and then removed line protection that were moving line protection on a de-energized line makes no sense when you think about it, but if you're anticipating that operators will rush to restore operations irrespective of their ability to ascertain the process safety and protection of the environment, now you're setting up a staged attack where there's potential physically destructive consequences when you restore power to those de-energized lines in the absence of process protection. So while it didn't work as intended, crash override appears as though it was designed to try to achieve physical process destruction within the context of electric transmission operations that would have had disruptive effects lasting potentially months in order to try to restore, recover, and ultimately likely replace damage gear. And a lot of this comes from knowing both the combination of how the operators in question worked within their environment as well as the importance of protective relays for electric operations. Living under 2017, we had the Triton Trisys incident at a petrochemical facility in Saudi Arabia, and there was much discussion at the time about Triton Trisys as being malware that can kill and who was behind it, is it Iran, is it Russia, or is it some other entity, but a lot of the discussion really masked some of the subtleties and really quite interesting technical details around what Trisys was capable of and how it would work as part of a overall attack sequence. Because again, similar to what we saw in 2016, Triton Trisys was not a bolt from the blue, but rather the end result, well not even the end result as we'll see shortly, in a sequence of events to achieve physical process disruption or destruction within the victim environment. So we have a combination of items of repeated credential harvesting and reuse to pivot around the environment and to replay access through legitimate VPNs in order to get remote access into the ICS environment, continuing to pivot through credential capture until the attacker is able to get direct communication to a safety instrumented system on which Trisys could be deployed. And that's an interesting part and requires us to understand what a safety instrumented system is within the context of industrial operations generally in petrochemical facilities specifically. Because safety systems, while they don't ensure that nothing bad ever does happen, a safety instrumented system typically acts as sort of an emergency control system in parallel to the basic or operator controlled environment, such that in the event of a hazardous or dangerous set of conditions than the plant environment that automated controls are put into place to ensure a easier or less physically disruptive recovery of the plant environment to minimize damage disruption and facilitate recovery. Now, there are certainly additional safeguards within plant environments from blowout valves and pressure release valves and other sorts of items that act as engineering layers of safety control but these start getting into more difficult circumstances for recovery and may have potentially hazardous conditions of themselves like if you're venting product or even high pressure or high temperature steam in order to reduce pressure in an environment that could lead to physically hazardous conditions. So while just because you remove the safety layer doesn't mean that you're setting up a plant for absolute tremendous levels of destruction, it still makes for a very hazardous environment where potentially nasty things can take place. And if we start looking at triton trices it becomes important to note that the intrusion itself wasn't just focused in the safety layer but in talking with the incident responders who worked on the event. The compromise took place through both the safety layer as well as within the plant distributed control system environment. Using those compromises in parallel a modified modification of safety settings means that you can have a manipulation on the DCS side that could cause a hazardous condition and then allow it to propagate through the safety layer in order to produce a hazardous effect within the environment in question. And this combined intrusion and the interdependency between the two requires some understanding and knowledge of how these different items interact with each other and what sort of changes or what sort of actions you can take that would allow for a cyber action to propagate into actual physical disruption as opposed to merely a plant denial of service. Because what's interesting about this is that triton trices kind of like the 2016 event didn't work at least not as the attackers intended. So whereas it looks like the intended attack was to modify the cyst to eliminate the safety layer, then leverage compromise in order to produce a dangerous state that would then propagate beyond the safety layer to cause physical process disruption. Instead of the time of installation of the trices malware, which happened not just once but twice at least twice within the environment that a error or something else within how the malware was put together caused the safety system to trip, and as a result the plant shut down, which is still very disruptive and not a nice thing and cost a lot of money, but doesn't result in the sort of damage that would have happened. But had this attack actually worked as it looked like it was designed or intended to be carried out. So again attackers are getting smarter in terms of knowing what sort of things to look for within industrial environments to sort of maximize damage, but still showing that they have a ways to go before being able to do so successfully or at least on a consistent basis, which brings us to something very interesting and a little bit more blunt than some of the cyber operations we've been talking about so far. Now in September of 2019 there was a very interesting event that took place in Saudi Arabia, again Saudi Arabia, where there was a drone and missile strike on two facilities in the in Saudi Arabia, the petrochemical facility at upcake and the oil production facilities at the Korea's field within the country. So certainly very alarming very concerning but how the hell does this have to do with cyber and why are you bringing this up Joe. And this is that, for one, this represents the continuation of a series of events both cyber and physical against Saudi oil infrastructure from the Shamut events to multiple physical disruptive and similar drone strikes both on cross country pipeline operations as well as oil and gas production facilities. But what makes the September 2019 incident especially interesting is that it was very focused on a specific aspect of Saudi oil and gas operations that show a level of understanding of how the Saudi oil and gas sector works, and going back to the idea of process specific understanding and targeting, because when we look at upcake, it is the world's largest oil processing includes stabilization facility, essentially upcake serves as a production for the entire Saudi from well for the majority of Saudi oil production in sweetening otherwise sour crude, so that it is easier to sell and more acceptable to world markets. Essentially, if you take out the upcake facility or its ability to operate the ability for Saudi Arabia to produce oil that the market desires becomes severely degraded and thus producing significant economic disruption as a result of physical because looking at the sweetening operations or the desulfurization of rumor removal of sulfur from crude oil. It's a very complex chemical operation that requires a significant investment in equipment, fairly large physical footprint for plant and as a result, something that represents a fairly big target and it's been one that's been targeted at least in the context of ab cake, several times previously but through rather blunt measures such as car bombs and other operations as the 2019 strike showed a very specific targeting because if we look at after after action reports of the damage we see that a lot of the primary focus of the attack wasn't on things like oil storage facilities, or pumping and transportation infrastructure but rather on the vessels and cracking facilities that are required to perform the hydro desulfurization of crude oil to make it acceptable and for the market are able to export it. So again a very focused attack on a very specific aspect of the Saudi oil industry that shows an understanding of a critical process note or path dependency within Saudi oil operations that could allow for a significantly magnified impact as a result of just attacking one physical component of Saudi oil and gas infrastructure. So targeting hydro desulfurization facilities would significantly limit Saudi ability to export oil to market, and it did for a while and there was a significant effort placed into trying to restore these operations as rapidly as possible to try and recover. But as a result, the attacker was able to maximize a fairly limited strike by making sure they targeted just the right facilities in order to cause a magnified impact far out of scope or at least seemingly out of scope or at least beyond the immediate impacts of just physical process disruption. So understanding how these things tie together enables for a much more powerful much more impactful attack than just simply lobbing bombs into the outcake facility and hoping for the best. So where does that take us? Well it shows that attackers are starting to get a little bit smarter in what they're shooting for when it comes to trying to disrupt industrial environments, whether that comes through cyber operations like we saw in the 2016 Ukraine event and the 2017 Saudi event, as well as through physical operations such as the ab cake drone and missile strike. Because what we're seeing is that adversaries are learning about how these operations work, and that increased knowledge yields and understanding of functional dependencies within these environments that allows for adversaries to engage in focused targeting, so that they can increase the effectiveness and the disruptive capability of strikes. No matter how they happen to be executed within plant environments. And we're looking at these focus points on the three items that we covered in the examples today on process protection, the ability to make sure that industrial environments remain in a fashion that avoids physical damage and disruption to the equipment in question, process safety to make sure that equipment is not able to or at least has sufficient safeguards in place, so as not to risk the safety or effectiveness of equipment or potentially causing harm to personnel within the plant environment, as well as process dependencies, looking at how critical a single facility like upcake would be to the overall export of petroleum products for the kingdom of Saudi Arabia. And the risks of this and the implications are that attackers by being able to focus on specific aspects of industrial operations, open up very interesting avenues for what kind of damage they can cause. Everything from making sure they could cause more focused and potentially longer lasting process disruption, thus increasing downtime towards in scarier items like a potential loss of life scenario which may have manifested had crisis actually worked out as it was intended, or physical damage like was the, which was the likely intention in the 2016 Ukraine event. So looking at this we're seeing adversaries evolve over time from rather blunt and somewhat simplistic attacks like it based wipers, such as the shaman events and some other incidents where just deploy something that worms to the network and it causes as much disruption as you can in a fairly untargeted and widespread fashion. Then getting into more untargeted disruption, just trying to disconnect processes and inhibit control, something like we saw with the 2015 Ukraine event, and then getting into more advanced and more specific targeting such as the focus on protective relays in 2016, the focus on safety systems in 2017, or the focus on hydro disulfidization operations in the 2019 kinetic strike. What we do about this is an open question though because when we look at defense in a classical sense, we usually think of throwing up walls and try to keep adversaries out. And while this is not necessarily a bad thing and we certainly want to keep adversaries out. This is a very limited view and not necessarily helpful in trying to really adapt with how adversaries are shifting when it comes to trying to impact industrial environments. Because looking at industrial environments, we have the combination of not just it based or it like equipment which is amenable to it like controls, but also combined with that the physical process environment both in terms of what the environment is designed to do as well as the implications of undesired or unintentional modifications to that environment that can cause disruption and potential even damage. So instead, we need to have process aware defense as part of ICS operations where traditional IT-centric defense certainly forms a major plank of what we're trying to do because we have lots of information systems that now reside within industrial environments. But we want to combine this with process specific monitoring and analysis so that we can marry a logical view of the environment along with a physics-centric or process-centric view of just what's going on within the plant environment so that we can ascertain things such as the status of process protection, process safety, or how different items of the overall process environment are interacting and what our IT visibility may indicate certain entities are trying to do within that environment. But also, we want to make sure that we're investing in resilience and recovery. This is always an uncomfortable topic because it implies that bad things have already happened. But if we look at events like the 2016 and 2017 events, we need to make sure as ICS defenders and ICS operators that we have the capability of not only identifying what changes have taken place within the operating environment, such as the removal of process protection and process safety, but also have a way of ascertaining what those changes were and how to restore or recover from those changes so that we're not just restoring availability in the sense of bringing processes back online, but also making sure that we're maintaining process integrity and that operations are restored to a known good and known safe state in order to make sure that we're not endangering operations or the personnel within that plant environment. And a key to doing this is making sure that we're improving visibility into industrial environments. So while we already see process data captured for operations purposes, we have data historians that do this job already, but we need to combine that with improved host and network visibility, much like what we've seen over the past five years in enterprise IT environments to combine data sets to develop a full scope ICS aware visibility of both the IT and ICS specific aspects of an operating environment to truly understand and track what is going on within the control system environment both for a defensive perspective as well as to just understand purely what's going on should we have a malicious insider or other entity begin making changes to the environment that could have significant or harmful repercussions. And then finally, we need to make sure that we're including planning for response and resilience. That means adapting or modifying the existing contingency planning that exists from an engineering perspective to incorporate cyber, not just in the, you know, the ability to restore operations but also, you know, do you have the tools and the capability to perform root cause analysis to see that a modification or an attempted modification was made to a safety system, or the denial of service condition on the super tech protective relay. And this also involves a focus of effort on those critical path nodes that allows us to better allocate or smartly allocate resources on those sort of dual processes around which the entire operation revolves around so that we make sure that we're taking care of the most important assets in our environment. And as a result of all this we should be able to allocate resources in such a fashion to facilitate rapid critical resource restoration and an incident to not just minimize downtime but to make sure we're again restoring to a known good known safe state instead of just blindly bring operations back up and hoping for the best. Ultimately, we're really looking to try and build out a robust defense in depth where we're covering things certainly at the it layer but also bringing things into a multi layered understanding visualization and visibility into control system environments to track not just items like opportunistic ransomware or it wipers but also getting into process specific targeting and modifications that could lead to far more serious effects and building that all into an industrial focused and industrial aware security program. So with that I'm right at time. I believe these slides will be posted somewhere. There's just a selection of resources both things that I've written as well as from peers from ESET and FireEye and some of the events that we talked about today. But if we have some time, I can answer questions. I don't know if we how big of a cushion we were leaving between talks. Well, I hope this was interesting. Certainly feel free to reach out to me email Twitter, whatever works for you as I'm always happy to discuss this and related items is I think it's quite fascinating, especially as we start looking at to into the more strategic and operations focused aspects of cyber events within industrial environments certainly is a lot more interesting than some of the things we see an IT environments I think, but I'm a little biased there. But yeah, I don't know Bryson if you've got anything for me or anyone else. Nothing you're good. Thank you. Stop the share and I will let the program move on I'll be hanging around within the discord and elsewhere if anyone has thoughts that came up after the fact but otherwise I hope everyone enjoys the ICS villages I know I always do. Thank you.


In his Senate race against Dr. Oz, John Fetterman has constructed a robust policy platform that's substantive and specifically addresses the needs of the working class in Pennsylvania, so he's absolutely, without question, won the policy war. But another war that he's winning is the meme war, which is important in 2022 American politics.  For example, he made fun of this cringe-worthy ad that Dr. Oz released during the GOP primary where he claims, quote, I've been shooting and hunting my whole life, and nobody believed him.  Now, also, he responded to a tweet from Dr. Oz, where he's seen with business owners from Pennsylvania, Pat and Gino, and John Fetterman essentially calls him a carpet bagger, which he is, by the way, saying, ah, yes, the trip to Pat's and Gino's are right of passage for every tourist. And that's just what he did this past week. We haven't really even scratched the surface. I've done videos about this. So if you want to watch more videos, you can check our back catalog. But basically, Dr. Oz realized that he's getting dunked on ruthlessly and he's got to respond somehow. But the problem is, and I've said this before, Dr. Oz is essentially the Republican equivalent of Hillary Clinton. To elitist, to out of touch, whenever he tries to appear personable and relatable, it comes off as cringe-worthy and awkward. So, you know, it's difficult for him to try to meme because he doesn't know what dank may-may's the peasants like. But regardless, you can't just seed John Fetterman ground in the meme war. You've got to participate, right? So regardless, Dr. Oz has tried to, you know, post a couple of dank memes himself, and it didn't go too well. So for example, he posted a gif of Zach Alfenakis with the caption, John Fetterman calculating how he will push the Commonwealth toward socialism. That's not what Pennsylvanians need or want.  Dr. Oz writes, Friday Fact, John Fetterman will befriend Bernie Sanders in the Senate. He will follow Bernie's lead and be his sidekick. Pennsylvania and America cannot afford to have another Bernie in the Senate. Now, not only did he get ratioed again, but people pointed out how he himself befriended Bernie Sanders when he brought Bernie Sanders on his show. So on one hand, you can't just ignore the meme battle that's being waged because it's hilarious and it's making you look like a clown. But when he tries to respond, it doesn't go well. And this is somebody who has millions of followers on Twitter. And for all of the tweets that he gets ratioed in, like this shouldn't happen when you have that many fans, apparently.  But John Fetterman, I think, has definitively won the meme war by doing something that is so creative that I've never seen a politician do before. He booked a cameo from Snooki of the Jersey Shore and had her send Dr. Oz a message. Now, for those of you who aren't familiar with cameo, basically, this is a service where you can pay a celebrity to send a message to someone. You can either have them tell somebody happy birthday, send them well wishes. Good luck. Congratulations. Whatever you want. Now, Snooki charges three hundred dollars, so John Fetterman enlisted her to send a video to Dr. Oz. And I've got to say this was a plus. Take a look. Hey, this is Nicole Snooki. And I'm from Jersey Shore. I don't know if you've seen of it before, but I'm a hot mess on a reality show, basically, and I enjoy life. But I heard that you move from New Jersey to Pennsylvania to look for a new job. And personally, I don't know why anyone would want to leave Jersey because it's like the best place ever. And we're all hot messes, but I want to say best of luck to you. I know you're away from home and you're in a new place, but Jersey will not forget you. I just want to let you know I will not forget you. And don't worry because you'll be back home in Jersey soon. This is only temporary. So good luck. You got this and Jersey loves you. Now, this is a couple of days old now. So I'm assuming most of you have seen this. I've watched it so many times and every single time it's just it is perfect. So there's certain things that you could put in your request and the line that John Fetterman's team included of how this is just temporary and you'll be back in Jersey soon. Just brilliant chefs kiss. Absolutely brilliant. So listen, I think that with the way that campaigns have evolved in the United States, they've evolved in some bad ways, where you have to raise a lot of money in order to win. But they've also became a lot more informal in large part, thanks to individuals like Bernie Sanders and even Donald Trump, who don't take themselves too seriously, don't come off as polished politicians. So as a result, campaigns have kind of gotten a lot more stupid, but in some ways they've improved in the sense that they've gotten more fun. Candidates oftentimes don't take themselves as seriously. You absolutely must offer policy substance and have a good platform.  And that's what John Fetterman is doing. And I think that this is helping him and see a lot of the things that get people one over just normal people, you know, one over is humor. And, you know, this is one thing that over the years, the alt-right and anti-SJW YouTubers have done to radicalize a lot of young people. They post memes and these memes are terrible. They're oftentimes racist, anti-Semitic, homophobic, whatever. But they use humor. Even if it's horrible humor, that's kind of what lures people in. So I think that the left has got to emulate that strategy, albeit in our own way, and use humor as a way to pull in normal people. Use humor to let people know that we're not this caricature. That the right likes to portray us as we have fun, too.  So I think that John Fetterman is creating a blueprint for campaigns, not just when it comes to policy, because that's number one. But when it comes to just having fun and shitting on your opponent, letting people know in a really clever and unique way how out of touch these elitist politicians are. And, you know, with Dr. Oz, John Fetterman kind of has an easy target in him, but I do think that people, leftists in particular who are running these campaigns have to do the same thing in general elections and also against incumbent Democrats when they're running these primary campaigns. Don't be afraid to hit below the belt from time to time. Use memes to demonstrate, you know, a point. I think that this is important.  It just drives me nuts. It feels so disingenuous, so inauthentic. Don't be afraid to be yourself in these campaigns. We can use humor, we can use more than just policy to win people over. And John Fetterman is proving that this is a winning strategy. Now, the election isn't over yet, but currently he's in the lead. And I think that he's running an excellent campaign and he's proving that Dr. Oz doesn't know what he's doing. He's out of touch. He can't relate to people. And in an inadvertent way, this is what the meme war is proving that Dr. Oz is in above his head and he's not like you and I. He's an out of touch, rich, multi-millionaire, and he doesn't know what you're dealing with. He doesn't know what makes you tick. He doesn't know what makes you laugh. And that's why he can't be your senator because he doesn't know what you need more importantly. Do you enjoy watching independent news shows like The Humanist Report, The Rational National and The Majority Report? But oftentimes YouTube doesn't deliver our videos to your subscription box. Well, I've got a solution for you. It's called the Opt-Out app available right now in the iOS app store coming soon to Android. Opt-Out is an app made by and for progressives where they take all of the most popular independent news shows and they put them in one convenient location. You'll find all your favorites on there like The Humanist Report, The Rational National, The Majority Report, and the app is updated multiple times per day so your news feed is constantly up to date. If you enjoy watching independent media, this is the app to get downloaded today.


his church, his religion, and he will emphatically tell you, I am the role. There is a mantra that Roman Reigns has been living by in Layton. That is, I can, I did, I will again. Can he topple the game again or will Triple H prevent tonight? That's what we're here to find out. Moves outside, what's the plan here? Two, three, nicely done. And that one misses the mark. Heads out of the ring but needs to be mindful of the referee's count here. And that was a precisely measured attack. Climbs into the ring. Roman wants to make those a brawl, so Triple H needs to focus on playing mind games and getting Roman to make a mistake to capitalize on. Up into the fireman's carry. Uh-oh. Able to give him the sling. Triple H taking that methodical procedural approach to Roman. Exactly what's going on. He decided he wanted to show up right here and distract this superstar. Offense from the game and every single move in Triple H's arsenal is dangerous. Pretty sure they don't want to be taken any more. Three physical condition to pull off a move that much behind it. Triple H with some reason for concern. He throws the opposition back into the ring throughout the match. Look, you have to celebrate the fact they won it all by.