Alright, so we appreciate everyone being here. We have our first speaker, John Nye. He's the Vice President of Cyber Security Strategy at Synergist Tech and has over 10 years of experience in the security and IT industry. He is or has been an auditor, consultant, hacker, speaker, father, leader, and writer. So we want to give our attention to John Nye's theme as the human factor. Why are we so bad at security and risk assessment? We'll see if you still want to clap when I'm done. So as he said, my name is John Nye. I'll make the introductions brief because they've got a timer over here and I've got a lot to tell you about.  I do security. I was a pen tester for the last 10 years doing technical stuff and I'm sick of seeing the same stuff over and over again and I think we need to fix the root of our problem and that's what I'm here to talk about. I work for a company called Exilio slash Synergistic and we do consulting mostly for healthcare. Alright, so let's get this rolling.   They have biases that control. It's an ingrained part of our core selves, of our humanity to have these. And without it we wouldn't be humans. I mean we have to have these biases but we also have to understand them. This is a guy this way. Each and every one of you came into this room today and you had some sort of preconceived idea about why you came here. You know maybe you saw my tweets or the blogs I was posting on peer list or somebody dragged you in here or the line was shorter than the other ones. You know there's a lot of things. Or you're here to get a seat to see Jason and Michelle talk, whatever. You know you had to get in here. Or maybe you hope to learn something.  You know there's a lot of things you can do. You want to prove me wrong. That very well will be it. Then you all came in and sat down and you're like I wonder if this hour is going to be worth my time. All of you thought about that for a minute. Then the biggest hurdle for all of our bias is when you saw me. And you're like okay this guy looks like a tool.  I am single. So that's awesome. Come talk to me afterwards. Or a million other things. You know you could say you hate my jacket.  Or my hair. Or you like my hair. Or a million things you could say. Positive or negative thinking about me on first impression. And that absolutely guides how you're going to view what I have to say. The entirety of how we feel about people, situations, risk, decisions, ourselves, others, all of that is directly linked to these biases. Which as you will see are directly controlled by our emotions. And that is a lot of implications. So it appears as best as scientists can tell at least that this is actually our brain's mechanism to keep us safe. Because if you think about it at every given second every single person in the world is getting so much data thrown at them. All of your senses. All the stuff you're thinking about. The emotions you're feeling. And it's more than a person could deal. It's more than you could handle. More than you can conceive of. More than we can fathom the amount of information that we're getting at any given second. Because of this our minds handle the vast majority independently of our conscious mind. So we don't even know what's going on. And that way we're not inundated at all times. We're happy, oblivious to what's going on around us. The vast majority of what's going on around us. And it's only possible because our minds have found this mechanism to stay sane. And that mechanism is not trusting you. Your brain does not trust you to do stuff. At least not with your conscious brain.  You need to think about whether you need to keep trusting your brain. So the main topic, what is the most important note on your network? We're all hearing about important things on our networks. Well, I'm going to get you in the right frame of mind before we dive into this. Think about a disagreement or a situation where you had to convince somebody of something that you had facts behind. So how many times has this happened in those situations? You come into this confrontation. You have significant, strong, irrefutable facts and evidence to show them. But no amount of logic or reasoning actually gets through to your opponent, to the other person you're talking to. They've dug in their heels. They won't budge. We've all seen it. And I know it's not unfamiliar to you. We see it every day at work.  These are smart people. We all know smart people who also believe things that we can't fathom and we can easily refute. They believe it. The question on the screen is rhetorical. I don't want everybody to yell out an answer. But I hope you've all thought about it. And in case not, the answer is humans. The most important note on your entire network is not a technical note. It's the biology. So think of the times you watch someone despite all the evidence and warnings to the contrary, proceed to make a horrible decision. We've all seen it. In fact, if you want to use your own 20-20 hindsight, I am sure each and every one of you has an instance like this. If you're like me, you probably have an instance like this in the last couple days. And that's fine. We're in Vegas. This is a great time to make some bad decisions. So I'm going to do my best to help you all understand the people that use your networks, including yourself, through this talk. These are the broad topics we're going to cover. And as best I'm going to, you know, we're limited on time, so I'm going to bull through all these things. But I want to tell you right now, this talk is an introduction. These are topics and concepts for which there are dozens of books, hundreds of research papers. I could not even begin to touch on all this if they let me talk all day, because there is so much. So what we need to do is all of us need to dig. We all need to start looking at this. There is science out there. There is information that can help us. And we'll look at the studies out there right now in decision-making, memory, perception. Their insights have been applied to all sorts of industries over the years with amazing success. Financial corporations use it because they know we're irrational and it's helped them a lot. We see it in, anyways, we're going to look at decision-making, memory, and perception. And you'll better understand what we're getting ready to say here. So like Soil and Green, what where is people? And people are the single most important asset on any network. Computers, let alone the network itself, only exist because people use them. And despite or perhaps because of their best intentions, people are terrible at decision-making and by extension, security. All of our user education efforts are those pointless? Can we better understand our users? Is that possible? These are the kind of things we need to answer. Knowing what makes people tick, that's the key to keeping our non-biological system secure as well. The best hope we have to move beyond the reactive security model that we're all living in, as I know it feels like Groundhog's Day to me, is that we embrace the truth of human component of our networks and we have to keep in mind this is a very difficult journey to take. Our brains are full of these safety mechanisms that make this stuff hard for us to grasp and we consciously want to not believe it. Like my brain doesn't do that to me, I make good decisions, etc. But all of this is applicable to everybody. Let's get an understanding of what perception is. So I want to start this section here with an illustrative story. Set the stage so you can begin to perceive what perception is. It's very difficult concept for people to get. But story is one of the most powerful things you can use to illustrate concepts like this. So when I was a kid, my uncle, he had collected horses, not like pretend horses. He had real horses, like draft horses and all that stuff. Well, I was a city kid and I didn't know a lot about him, but he'd tell me about some pony that was growing up and he was going to have to break the horse. I didn't know what that was, so I made up what it was in my head.  You know, yelling at everybody, sitting in his big huge horse and he would have to literally break the smaller horse, break it. That's what I imagined. So I pictured him taking his lasso and lassoing this little horse, diving on it, doing some sort of Hulk Hogan-y, you know, headlock and literally breaking its back and then nursing it back to health so it would be docile. That's what I pictured. And now that's not what breaking a horse is. I know people in here have dealt with it. Not that I really know much about it, but for a surprisingly long time, this preconception that was made up out of whole cloth by my six or seven year old mind, it stuck with me. And still now when I hear it, which is super rare, when I hear about somebody breaking a horse, the first image I have is somebody breaking a horse's back. I know that's now what happens. But you could see how my perception of this act of breaking a horse led me to have negative feelings and toward the people that did this. So I didn't, I had a bias against country music for most of my life because they talked about horses and I was like, I like animals. I don't want people to do that. So, you know, we all have these biases.  So our perception is one of the most important things for us to understand. As humans, we have our own unique perception of the world and the default setting of our perception is to be narrowly focused on our own point of view with no concern for others. So by default, the world does revolve around you. By default, that's how it works. Again, another story about when I was younger. I lived near my grandfather and he was a professor in sociology and I didn't get to talk to him about that. I was too young, but one day he did a really rare thing and he took me out to lunch, which I think that was maybe the only time he ever did and proceeded to tell my eight-year-old self a litany of life lessons that went in one ear and out the other because I was eight, who the hell remembers that. But he did say one thing to me and he said, John, remember, it's all about perspective and if you understand that, you can understand anything. Now, we're in a room full of hackers and I honestly think that this is something that hackers do well. We excel at this. We're all able, but we need to use it beyond the need to approach systems and software from the perspective of an attacker. We need to use that skill to see the perspectives of our users, to see the perspectives of our coworkers, of the person that sits next to you. So rather than beating users, berating them with security requirements and making it harder for them to do their jobs at every turn, maybe we need to work to better understand them and better understand perspective. So there's a whole lot of special images, videos and sounds out there that severely affect our perception and make us question what we're actually seeing. These images are here, these either illustrate perception, like in the two cartoons, that guy is seeing that number from two different angles, a completely different number. Or they show you something that appears to be something that's not. This thing in the upper left-hand corner, if you took a ruler to it, you would see that those lines are parallel, not askew as they appear to be. And it's because the pattern of blocks messes with our brains. Or you have other pictures like the two on the right-hand side that appear to be more than one thing at the same time. You know, is that a guy head-on or a profile? How many legs does that elephant have? So all these images illustrate how perception is not consistent. They're not all seeing exactly the same thing. You don't go home at night to the same family as your coworker. You don't know what they really believe with their biases, their prejudices, their passions, all the things that make them who they are. You don't know that. We can't presume to know that. So how can we presume to know how our user is going to react to something? Or training is a great one. From the perception of those that design the training, it appears to make sense. It probably even looks compelling. And probably to some small percentage of your population, of the population, yeah, it might be that. But not to everyone. And it's because their perception is different. So I mean, like, why does the cashier in the cafeteria care about protecting her outlook account? And she definitely doesn't care if the organization's hacked. It's not going to affect her. But from her perspective, if she could avoid to lose the money or lose her bank account access, her credit card, could be safer because of some action, that would matter. And that would affect her immediately. And it would begin to form habits. She can bring back. They follow them unconsciously. Our perception rules us. And it's ours to rule. And this means that we all live in a universe that is well and truly centered around ourselves. And if we want to reach the rest of the world, we have to reconsider our message. We have to reconsider our assumptions and how we deliver it. But then we have to consider how people retain information. So we look at memory. Human memory, while amazing, is inherently unreliable. And our tendency to trust is the cause of many of the problems we have in society today, that we trust our memories. Fortunately, or hopefully fortunately, we have a long line of really insightful scientists, academics who have literally spent their entire lives studying human memory. Because of this, you would think all the misconceptions and outright falsities would not be there. But they are. I can tell you with absolute confidence that you can rely on your computer's memory far beyond your own. And anybody who's worked in defer or incident response, forensics knows that that's kind of a scary thought. To have to rely on your computer more than yourself. So, for example, memories often mischaracterize as an accurate method of recalling an event. But, like I was just saying, our perception is unique to each of us. So my memory of an event would be different than anyone else that's there. This talk is a great example. To me, I'm on stage and looking at all your eyes staring at me. I'm going to remember that. Each of you is going to remember something different. You might remember this slide. You might remember another slide. You might remember what you're doing on your phone or what's behind your eyelids if you've been up too late. So there's a lot of, it's different for each person. So yes, we can recall that event, but is that recollection accurate? Often it's not. So it's something to think about. The turn of the century, this century, so in like 1999, two cognitive psychologists, Daniel Simmons and Christopher Chabris, they did a study to prove that when people focus hard enough on one thing, they get what's called inattentional blindness. Not intentional, inattentional blindness. And this study, the participants were shown a video of a group of people passing a ball around. Many of you have probably heard about this. And they were asked to count the number of times the ball was passed by one of the teams. And then immediately after watching, they asked the participants how many passes were made. And universally, they were right. They were able to count the passes. Good for them. But after that first question, they then asked, what about the gorilla? Did you see the gorilla that walked in? And none of them saw the gorilla. All these people completely missed something as obvious as a gorilla walking into the room, but they were able to count the things. So they were accurate. They accurately saw what happened, but they missed something, something really big. So that has major implications for witnesses and for victims where there's no other corroborating evidence besides witness testimony. We often remember even the most unique things we see and we add details. And this study is the epitome of the counterintuitive nature of our minds. In the polls since then, over 90% of people who've been asked said that they think they would have seen that gorilla. Now with the knowledge of the gorilla's existence, they probably would. But in 2010, Simmons decided to revisit this and see what he could do.  The audio is unimportant, but this is the second iteration. Counting me times of players in white pass the ball. So hopefully you guys 16. We all saw the gorilla because we expected it. So they say about half people miss it in real situations. Did anybody notice that? Did you see the curtain change color? Good. A few of you noticed that. Also one of the people in black walked out of the room. I'll let it play and rewind real quick and you can see, now you'll see it because you know about it just like the gorilla. And did you see that? It went from red to orange and there's only two players in black. It all happens right here. The player in black's gone, the gorilla's gone and it's orange. So we all see it. Hopefully it was new to you. If it wasn't, you could see that our memories being trusted as an agent of the truth is the biggest misconception about memory that there is. So there's an organization many of you probably heard of called the Innocence Project. What they're dedicated to doing is helping people who are innocent be exonerated, who have been convicted of crimes to be exonerated. And up till now they've been pretty successful through the use of DNA testing. They have been able to free more than 350 people who spent time in prison for crimes they did not commit. But because of false memories, false witness testimony, they ended up in prison. Or biases, a lot of it is racial profiling, things along those lines, biases we've all had to deal with. They also said on their website that on average, those people spent 14 years in prison before they were released. And they can only do this for cases in the U.S. where DNA evidence exists. So the number of cases out there where there's not DNA evidence and around the world, there are probably tens of thousands of people in prison because somebody remembered something wrong or thought they looked suspicious. And we all have to do that. So according to Dr. Julia Shaw, who I'll tell you more about in a moment, but she worked with these guys and she said faulty memory played a role in 75% of those cases through her research. And that is, again, only in the U.S., only where we had DNA available. It's pretty scary. Dr. Shaw, who I highly recommend reading or watching, she's very entertaining, she wrote a book and released in 2016 called The Memory Illusion, and it rolls together decades of academic studies and research and a bunch of research her and her colleagues have done that she has specifically spent her career studying false memories and working to better understand how the phenomenon works. And after her work at the Innocence Project, she and some of her colleagues began to research the method, a method by which false memories are formed and better understand how they impact our perceptions of reality. In one study, they gather a group of subjects and they went to their parents. Of course this is all college kids. It's research. That's what they deal with. So it's college kids that they got. They called all of their parents and they said, tell us about a couple of major events that you have a picture for that happen in their childhood. And they got a trip to Disney World or go into England, whatever. They get a couple of real pictures of real incidents that happen and ask them questions about this incident. They then doctored up a third image that showed something virtually impossible. For example, Bugs Bunny in Disney World, hugging them, which if you know anything about Disney, Bugs Bunny ain't never going to be in a Disney property. Another one was they convinced a guy that he had flown to England specifically to go have a picnic with the royal family and showed him a picture of him with the queen mother with Queen Elizabeth. I'm not British. Sorry if I messed that up. But regardless, they were able to show and without fail, all of these people believed that that thing happened to them and then produced more stories beyond just what was in the picture about these incidents. Every last one of them. It wasn't hard. It was trivial for them to do it. In the end, they were able to say that they can implant false memories in anyone trivially. It does not take a master or hypnotism or anything like that. Another thing, she covers a depth in her book and I'll touch on it briefly in a few minutes, but she talks about how to get through to subjects, how to make things memorable and what it comes down to, the base of it is arousal and I'm not talking about sexual arousal. That's always the first thing that comes to mind but in brain science, arousal is defined, actually it's defined by the medical dictionary as a state of responsiveness to sensory stimulation or excitability or a state of behavioral or psychological activation.  You're paying attention and it's a very powerful tool we can use to improve others' reactions to things like training, awareness, I know we all love that and other important things that we need to deal with, like policies. But we need to look at decision making real quick before we can talk about how to fix things. So our brains are evolved from animal brains and that in the moment the fight-or-flight instincts that we have inherited from our animal brethren are what take over. And some people are a little better at recognizing these effects somewhat offsetting them but decades of study more of this demonstrate that decisions made by people are as likely to be logical as the flip of a coin. So that's something to think about. For years the security industry has been trying to figure out how to mitigate some of the issues that stem from the wet wear that makes IT so insecure. But IT could be considered relatively new. Cyber security is also relatively new. Like in the grand scheme of things. But none of these concepts are new. Since as long as people have had something to be scammed off of them there's been other people taking advantage of our natural stupidity, our natural mistakes, our shortcuts that our brains take and scams in general are nothing new and neither is the desire to better understand why we're so terrible at seeing these dangers and recognizing them and running from them. Oddly according to a lot of psychological experimentation and research one of the biggest reasons we're so terrible at identifying scams is the part of our brain we share with the animals. The fight or flight part of our brain is the mechanism that makes us jump to conclusions, make assumptions, see patterns that don't exist and then we confidently use this misinformation to make our decisions leading to many of the problems we all face every day. This part of our brain is controlled by our emotions and physiological impulses. It is not controlled by logic at all. We do not work on logic when this mechanism is activated. We are as likely to pick the logical choice that made sense yesterday than we are to pick something else. So any amount of planning and logic that we could put into our decision making process in the actual moment of choice this takes over. No matter how much analysis you have done if you as a person have a stake it will affect you in any way that decision, all that logic is out the window. It's your fight or flight and your brain picks the thing that it subconsciously thinks will cause the least amount of regret and that is problematic in a lot of ways. None of us are safe. This is a condition that I believe I'm using this correctly literally affects every last human. And shine some light on this let's take a look at another discovery. Neuroscientist named Antonio DiMazio a few years ago he and his team began studying the part of the brain that controls our emotions the emotional center. They went and found study subjects to find damage to that part of their brain. So these were like medically they were medically sociopathic they had no emotions whatsoever they could not do that. Then all of these subjects were easily able to see the logic behind simple decisions they could come to reasonable conclusions they could figure out the optimal option every time but only in theory. Only when they were talking in their minds they could do it they could discuss it. But in every case when they came down to actually making the choice they just couldn't do it because they had no feeling no emotion to drive the actual choice.  The very basic stuff. And that illustrates that despite our logic all our metrics our measurements our analysis our emotional system takes over and delivers a choice that it feels is going to result in the least amount of regret when it boils down and to the actual point of decision making. And our emotions are in control of us. This movie was surprisingly accurate. I love watching it with my little's. So much of the foundational research for this was done by a psychologist named Daniel Kahneman and his colleague Amos Tversky. Kahneman won the Nobel Prize in economics despite the fact that he's a psychologist and specifically he won it for his research into the psychology of decision making. And it was really simple for people to equate this and understand how this could apply to the field of economics. It's tied into a plethora of industries over the years everything from entertainment to everything we do, they think about these kind of things. But we're here to talk about how it relates to our field to security as a whole and you've got to remember that security exists exclusively because of the people that use the networks and systems that we have to protect. If a system is designed to interact with another system in a certain way it's going to just do that. It doesn't try and change its way. People are the ones that attack networks and systems.  It was human error that led to that and people attacking it. Kahneman and Tversky's insights were a major wake up call to the world of economics. They were researching their findings. The world of economics was literally a completely different field. Before this, economists based all of their predictions on the belief or the assumption that people make rational choices. They do not. And they were able to embrace this decision theory that Kahneman and Tversky developed and then they were able to completely change their models.  And there's so their models account for the fact that common sense as it were, there's nothing more than a fallacy and it has nothing to do with the reality of our irrational minds. Common sense is about as real as rational decisions are. So Annette Simmons, she wrote a book called The Story Factor a book I highly recommend if you want to reach other people in some way. Story is the most powerful thing you can do. She said people are unconscious of most of their behavioral choices. If you ask someone why they did something, they're going to give you a good reason. A very rational, sounding reason. And it has nothing to do with the real reason. As a rule we humans aren't going to be aware of making choices much less why we make the choices we make. We do it that way because somebody told us to do it that way. It feels right. You know, this is how people work. So there is no such thing as common sense. So just stop saying it, stop expecting it, stop thinking about it. Every single person is different. Their brains don't work the same as yours. You don't know them. Not the real them. Common sense to each person is different. So we have got to stop that. That's like that just makes me angry. Yes so these revelations among others that these two came up with that we just don't have time to go into but I highly recommend reading into this. To Kahneman has several books out. He's done TED Talks watch it, read it, learn it. Anyways this is the reason for the renaissance of economics. A paradigm shift in the world in the art of negotiation it changed how policies were written. It's affected every industry. And while it's relatively simple to see how it was applied to those verticals why is it applied to InfoSec? Why do we care? Well there is an overwhelming and pervasive misunderstanding of human nature in the world of IT. Not just security IT period. And I'm not trying to say this is a dig to the industry that I love and that I am happy to be part of. I'm trying to say that we can do better. If we seriously want to move the industry forward we have to begin to accept a few facts of life and work to in sync with those instead of against them like we are now. But first we need to break security down or at least part of it. What is it really? It's a way to protect people, their property and their livelihoods from entities that may cause them harm or distress. And we all see that this is going. It's back to people. I really want to reiterate I am not telling you guys something new here. I am not a profit from the future. This is old stuff. I'm trying to show you how we could use this to change our focus humanize IT and security. People are the core component of all aspects that there are in security. Even the most analytical ones like big data, threat analytics they are all driven by people. People had, someone had to make the algorithms. Somebody wrote the software, somebody manages the databases they handle the reporting. Ultimately a person has to confirm the analysis isn't just crazy. So people have to look at it all along the way. They are driving every component from the users we are securing to us doing the securing. And if we don't figure out a better method of influencing our users and even our peers, all the people then we can expect an endless loop like this GIF. Or GIF if you prefer. And as we all know quite well the vast majority of attacks start from the inside and that is done with social engineering. In most cases basically every single type of social engineering attack uses these tactics to take advantage of human emotions and our natural tendencies to take shortcuts. So you know Chris, Hadnaggy and Jason Street these guys are all talking about this stuff all the time. There are people out there preaching about it. But we need to figure out how we can better adapt how we can actually make the right change. Technology is not new but it could actually be said to have started with the invention of the wheel. For all of human history we have been striving to make our lives better with technology. It began with the wheel or maybe fire, paper, printing presses, plumbing, electricity all of these are old technologies and they are all ingrained in our lives. We deal with them every day we couldn't live without them. God I wouldn't want to not have electricity here. None of these they didn't have any friction in becoming that way. They are irreplaceable there was no problems. They have no problems sticking around in our lives they're not going anywhere. All these technologies have one thing in common each and every one of them was invented specifically to deal with a problem that all people face. Like going to the bathroom or turning on the lights. So these are technologies that interjected in our lives to fix a problem we already had. Computers were invented to solve a problem but not a problem that most people face which was cracking codes and I know that my mom doesn't crack codes or know what that would mean but she uses a computer. We've done a really good job of interjecting computers IT and all of its myriad iterations into our daily lives and it's certainly irreplaceable I couldn't live without the internet but I'm of the opinion that there's been too little focus on the human element we made a keyboard, a mouse, a monitor and we were like we're good people can use it they can interact now it's not entirely true there's interfaces there's operating systems that are fool proof fish user experience gets plenty of buzz I don't hear that word all the time so I mean they talk about it but it's not happening it affects all of us the networks we're chargers securing and certainly the users which includes our friends our families, our loved ones not just the girl that works in the cafeteria con artists have been using all these flaws in the human for as long as there's been people as long as there's been a society what they're really good at is fooling people into thinking that something is their own idea so it's the same thing our brains do so they either convince them that the idea is their own or that the con is something that is more advantageous to the mark than it is to anybody else and they have to believe this and we all know that this body of knowledge has been incorporated into social engineering and it's almost indistinguishable now from the old tricks that worked for centuries it's similar things the primary key to the success of these methods is to convince the mark that whatever plan they're being swindled into is either some other own idea or that the idea is so much more beneficial to them than anybody else including the instigator and that is these are basic psychology they don't require technology to work but technology especially in its current form has made the perfect vehicle hence the popularity of this village and talks like mine and Jason's and Michelle who's talking after me all these insights can be applied to other aspects of Infosac and even the most exciting part social engineering in case you didn't guess but to do that we need remedies now I do not have the answers this is something that we all need to figure out but I have some ideas we've been building our security solutions on false assumptions from the beginning how can we expect to secure something as irrational as humans are the answer is relatively easy we do what the world of economics did more than 40 years ago when Kahneman and Tversky shared their findings we change our assumptions we no longer build our models our software and whatever on the assumption that users are going to make rational choices this doesn't leave us in the lurch we are not completely screwed you know rather if you think about it this kind of assuages that itch that we're all feeling that internal that inkling that something's just not right which has been driving me crazy for 10 years of pen testing it doesn't seem right something isn't right and we have to try and change that it seems to me that the latest tactic I see to deal with the human aspect of security for most organizations and I work at a consulting firm so I do a lot of different organizations is to do one of two things one is put their head in the sand which is the oh no no SE on this engagement we know we're going to fail that is putting your head in the sand and ignoring the problem and that's not going to help and I know we've all heard that crap all the time or alternatively they throw more tech at the problem which we all know is we start taking capabilities from users we make their lives their jobs more difficult like the temporary VM session that loses everything in the end or other extreme examples out there we have to accept that people all of them including us are fallible and they're probably not paying that much attention not in reality so we need to approach the problems that we're facing from a different angle the most obvious area that these concepts are applicable is of course user awareness training and I know we all hate that every organization I've worked with the users and the security people cringe when they hear that term as most of you probably just did we all cringe when we hear that no one likes the awareness training we're subjected to it's like a PowerPoint deck once a year and we all cheat on the multiple choice answers in the end I know the users do, I know I do I don't care, I mean it's not helpful at best it's marginally helpful at best so instead maybe we should take a cue from how humans actually think they can't make people do things and if we're honest people are really just worried about themselves so of course they love the company and they know that inherently the enterprise and security is tied to their personal happiness that is sarcasm they do not know that I don't care how much they love the company they do not believe that sure logic can tie them to this you can tie their happiness to their employer's success their livelihood relies on it but really outside the C-suite who sees the fruits of that not that much and again really people are not rational so we can't expect this assumptions, as we've been saying don't make those, they're bad instead of teaching users how to protect company assets what if we taught them about how to protect their own information, their data their devices let security start at home teach them why and demand that they do something tell stories make it interesting show them how to protect their home Wi-Fi that helps the organization anyways because you know you're going to make them work at home so there's even a way to sell it to your executives and I'm sure there are dozens more ways or hundreds more ways that we can apply this that I've never thought of I'm not the smartest person in this room I am sure and I don't know the answers it's going to take all of us to think about this and I'm going to keep digging because I'm in, I'm down the rabbit hole but hopefully some other people will jump in with me besides training and user education maybe we should take a look at people and processes what about processes and workflows I think it may be possible to change our approach to the plethora of processes that organizations collectively rely on to ensure that business continues effectively and efficiently and safely but instead of simply making a detailed list of steps that must be followed maybe there's a way to design this these processes in a way that the user can learn that leads them to the most appropriate solution without like brow-beating them into doing it yelling at them people want to feel empowered and they want to feel that they've made a contribution and that is absolutely true unfortunately I don't have time in this venue to take this part of the discussion to like another level because we only have so much time but we need to take this online we need a brainstorm this is one I don't know for sure how we can fix but I do think part of the answer to this problem is going to be a better focus on the human element and the use of story and so I'm compelled to put up yet another quote from Annette Simmons who's the author of that book I mentioned the story factor it's like eight bucks on Amazon just buy it you will learn a lot anyways I don't work for her most policy statements she says this most policy statements concern me if you want to do the thinking for someone and that is all any policy statement is designed to do that is really important at least story invites the human being you wish to influence to participate in that thinking process mandatory rules don't allow participation and they tend to influence people to either mindless obedience or gleeful malicious obedience and we've all seen that that can only make things worse and that is like I'll follow that policy okay and you know it's a stupid policy or it's leading to a bad place we all know and how can we fix it I think it's going to take some more time to figure this out we're only going to face opposition especially with policy it's critical to the enterprise they rely on it it keeps them in compliance this is going to be a really hard area to approach so in the arena of human interaction we are all equals non-users, babies, old people everyone it is the ultimate in inclusion our humanity is the one thing that levels the playing field we are not better than that user who downloaded a macro virus last week and we are all in this together whether we like it or not the only way we can actually get the elusive users to be more secure is going to start with humanizing them telling them stories making the habits you need for them to form good security hygiene directly and exclusively applicable to them and their sphere of influence their loved ones, their family, their kids that's what makes a difference they will make changes they'll keep themselves, their loved ones, their family anyone they care about safer and they'll form good security habits those habits will follow them because people don't break habits they will follow them, they'll carry over to work and they'll have it with them and then they make the enterprise more secure now all we've got to do now is figure out a way to do that consistently and effectively so I hope somebody out there knows none of this is news as I said and although we don't as a collective consider this consciously nearly enough we are all fallible no particular group all of us and that tendency to err is what allows us to keep our jobs in security definitely the cause of the greatest beauty in the world art is created because of this it's also the root cause of the most colossal screw ups in history it's the same things all of this I say it all not to paint an ugly picture of people or of anything I need, I think this topic needs to be brought to the forefront of our collective consciousness as a group and now I'm talking about security people the people who are here we have some of the greatest problem solving minds the greatest creative thinkers in the world in this community so if we can build on the knowledge that is already out there that's been built on by other industries to drastically improve the world for everyone we can actually make the world safer so let's get to work


The Jell-O program starring Jack Benny with Johnny Green in his orchestra. The orchestra opens the program with, that's the codfish ball from the picture Captain January. Today we are happy to celebrate the fourth anniversary of Jack Benny on the air. It's a great occasion folks. So here's to Jack Benny, here's to Jell-O and here's to the very month of May. The bright colorful days that bring us the first hint of summer. But you needn't wait for summer to enjoy the lively goodness of its most popular fruits and berries. You can anticipate that pleasure right now with Jell-O. For Jell-O brings you the right fruit taste of cherries, raspberries and strawberries all year round. Jell-O and only Jell-O knows the secret of capturing that extra rich fruit flavor. It tastes just as fine whether you make it yourself or get it at a restaurant. Tomorrow marks the beginning of the National Restaurant Week. So sometime this week when you're out at a restaurant, why not order an appetizing dish of Jell-O? Only always remember to ask for Jell-O by name, either at your grocers or in a restaurant. Always insist on genuine Jell-O. Tonight marks Jack Benny's fourth anniversary on the air. Radio marches back. 1932. Hello, National Broadcasting Company. This is the president of Canada Drive.  Jack Benny. What? That's punk? 1933. Hello, NBC. This is the president of the Chevrolet Company calling. Who'll be the comedian on our program? Jack Benny. What? That's punk? 1934. Hello, NBC. This is Mr. O'Neill of the General Tire Company.  Jack Benny. What? Back punk? Radio marches on. And now, ladies and gentlemen, Jell-O brings you that punk, Jack Benny. Well, hello again. This is punk Benny. I mean Jack Benny talking. Gosh, I'm so excited. This is my fourth year on the air. Isn't that a wonderful record on four years? Oh, I don't know. Jack came as a man. He's been on the air six years. Well, that's only three years apiece. I'm talking about a single performer, you know. Well, how about Rudy Valle? He's been singing for seven years. I know, Don, but how long can his nose hold out? Anyway, I don't want to brag or sound egotistical, but I think that's the man from Louisville. There's a wish I could be with you on your fourth anniversary. I ran my darned it, but couldn't make it. I signed brevity. I wasn't that nice, Don. But you know what kills me? Everybody has congratulated me on my anniversary, except the members of my program. Isn't that awful? See, you think I was some... some... punk? Yes. No. But they do owe me that courtesy. Here comes Mary. She remembers. Oh, hello, Mary. Hello. God, Jack, isn't it warm for May the 3rd? It sure is. Ah, May the 3rd. Oh, May the 3rd. Mary, remember May the 3rd, 1932? Exactly the goal. Talk back, Jay. You see, Don? Uh, say, Jack, can I drop for a minute? I want to send a telegram of congratulations. To who, Mary? My cousin. She's getting married tomorrow. Oh. I'll be right back. Well, I guess you're right, Jack. Oh, you can't blame me.  Hello, Jack. Congratulations. Oh, thanks, Johnny. Thanks. Why don't you pick the winner in the derby? Oh. Well, thanks, anyway. You're welcome. See you later. Okay. You see, Don even Johnny forgot, you know. Well, Jack, you know, he's got so much on his mind. Oh, sure. His music and everything. So you had the winner in the derby, eh? Yep. Well, that's fine, Jack. You know, I hate to bring this up on your anniversary, but if you remember, I had half of your horse. I know, Don, but my half came in first. Well, let's see, what did I win? I have two dollars to show. Of course, I'll have to give the jockey something. Well, hello, Jack. Congratulations on your anniversary. Well, Kenny, thank you. I'm glad you remembered it. Nothing on his mind. Hey, how did you have to remember my anniversary, Kenny? Gee, it's in all the papers. Here's something I gift out of the New York Times. Yeah, what does it say? It says, for the fourth consecutive year, the Senate Finance Committee took up the administration budget proposals. Hmm, well... Uh, they spelled your name wrong, Jack. See what it is, Mary. I bet it's an interview or something, eh? Hey, Jack, there's a pair of spats outside. Wants to see you. A pair of spats? Is there a man inside? Yes. Don Besson! Come on in, Don! Look who's here, fellas. Good ol' Don! Hiya, Don. Well, Gene, well... Well, Jack, I just thought I'd drop up and offer my congratulations. Well, this is some surprise. Mary, here's Don. Oh, hello, Mary. Hello, Don. I guess you received Jack's wire, all right. Hey, Don, you're looking like a million dollars. Gee, you're one of a few who remembered me. I'll never forget you.  Well, that wasn't my fault. Hey, why didn't you hang up your stocking when you went to bed? What, did you take off my spats? Same old Besson. Gee, it's good to see you again. Hey, Don, how's the wife and kitty? Kitty? How many kitties do you think I have? I don't know. I thought you were keeping score. Mary, Don has only one trial, and it looks just like him. What's the difference as long as I keep him in the house? Fine. Yes, sir. Say, Don, Don, you remember Wilson. Oh, sure. Hiya, Don. Hello, Don. How do you feel, Don? Fine, Don. Well, that's Don. And this, uh, this is Kenny Baker. Oh, glad to meet you. And this is Johnny Green, our orchestra leader. How do you do, Mr. Green? Very well, thank you, Mr. Besson. Old friends there. You've got a great orchestra, Mr. Green. What size baton do you use while dusting? Well, I formally used a 7-inch baton, but now I get much better results with a 9-inch one. I use a 15-inch stick myself. Oh, why? It's easier to hit the musicians. Mary. Mr. Besson, we're just about to start our next tumble. Would you care to assist me in directing the boys? I'd love to. Very well, then. Play, Don. Play, John. Remember, no fencing. Have music. Played by Johnny Green and Don Besson. And it sounded great, too. Didn't it, fellas? Oh, yeah.  Oh, really, you both have swell orchestras. I don't know, your music is so... It's so... It's so... It's so... It's so... It's so... It's so... It's so... It's so... It's so... It's so... It's so... It's so... It's so... It's so... It's so... It's so... It's so... It's so... Your music is so soothing and restful. It never gets in your hair. You know what? Hair, hair, what's on your head? My nose. I had my face lifted. Frank Parker for heaven's sake! Well, well, Frank, is it really you? Yeah, Jack, happy as a locke and ready to give you the bird. See, that's nice of you, but you didn't have to come all the way over here. Frank, you could just as well have sent me a telegram. Oh, I wouldn't know what to say. Oh, Frank, stop. no that's not enough good old Frank you haven't changed you know you look the same Jack although we've got fat oh where between the ears no Mary here's Frank you remember Frank hello Frank hello Mary gee I miss you and I miss you too Frank and what are we waiting for hey Frank wait a minute I guess it's a little too long there you should have waited longer for the gag oh go on Jack I only kissed it like a father yeah father time hey Jack didn't mess with him up here too sure there he is hi it's Don hello Frankie you've got a wire too huh yes it's a leg same old Jack say Frank listen how did you know this was my anniversary it's in all the papers Jack here I cut out a clipping yeah what does it say it says for the fourth consecutive time 60 girls pitched an anti-game for the Red Sox winning six to nothing oh boy in the fourth column too gee that's something hello Frank old boy how are you hi there Wilson what do you say I say the Jello is the largest selling Jellison dessert in the world and every day millions of people eat it well I wouldn't believe this hey Frank you know Johnny Green oh sure hello Johnny hello there Frank you know Jack we went to Harvard together but I got in well well well they're going to give him all the left all right oh Frank now I want you to meet Kenny Baker from California here hello Kenny I'm very glad to know you gee that's real and now now that we're all here now that we're all here and acquainted we are going on with our feature attraction tonight ladies and gentlemen we are going to offer an original gram of the backwood entitled the code of the hill this will go on immediately after the next numbers will be sung by Kenny Baker hey Frank John yeah stick around you know you're going to play in this too sing Kenny there a hotel with a wishing well I wish that we were there together one room bright and neat complete for us we care I'd like to get away dear somewhere along with you it could be all so gay dear you need a laugh or two a certain place I know love where funny people can have fun that's where we too will go up one to the window you can see a distance people not a kind of people goodnight sleep well we'll thank a small song by Kenny Baker now for our play the code of the hill which we will present in two acts the locale is a bluegrass country two hundred miles south of Louisville which is five hours by train two hours by plane and twenty minutes by bold ventures take it Wilson the action takes place in the homes of the Jake Bennings and the best of parkers who live within shooting distance of each other and the few curtain music the right though Sarah a shooting and a killing a shooting and a killing when is it going to stop being a going to quit to those best of parkers are wiped out by gum and by jello there ain't no rule in these hills for both of us you said it's happy get away from that door again say Paul what have you and thought again the best of parkers that's just it I never did get the best of parkers remember when he ends and we ends with a working on the same program yes and yes and but one night I asked him how many hairs on a monkey's face he said the next time you shave count he knew I couldn't count lying to Karen for that kind of city talk and I mean never forget but the pennies and the best of parkers have been up and for two hundred yards yes there are two hundred yards of a fighting and a scratching and a killing each other wouldn't be surprised they can barricade that double door they got me happy what was that Paul Sarah they got our boy can got him right through the door I didn't know he was aware of them oh I'm a going happy I'm a getting weaker and weaker goodbye happy goodbye goodbye that's such a nice dinner boy yeah I reckon I ought to take him out and bury him better have your supper first it's a getting cold so as can just I'm so hungry right now I could eat a horse well that's what we got silly of soul oh I'm a going happy still a going take your time son I'm a dying Paul Chuck and I wanted to be president I don't want to be like you you mean you're a dog here now look like they're a theater bus say Frank what have we got to give them then nothing we just actually hate people need killed for no reason at all it's just a wreck well I'm a willing to stick to you Frank but I ain't got no hand for that kind of fight no I just wear a flat I just want to I just want to well I guess that's well down I guess that's one foot of any getting cold feet say how did we make out today Don we got three pennies and a scum oh four pennies huh good thing I didn't hear that look Frank there's a Jake there's Jake's why don't you let him have it pull it on one Benny I'm waiting until someone gets behind it hope that's there and now land safe bar goes and junk a corn liquor that's a going to her ain't nothing safe howdy Uncle Jake hello John you shouldn't be a walking around with your left arm shot up like that I've been a seeking some code for the tie it up with it keeps the falling off no John I don't like the way that on your feet the dropping off it might be alien what's that you got on the other my right leg oh well put it in the umbrella stand and come to dinner you're right there and Sarah talk on it I wish those pockets would hold off so we get to eat was our daughter Mariah to went down to the village to buy a toothbrush water hardest that on it toothbrush what's that oh one of the things you rub on your teeth very user them in the city my toothbrush box dumb what'll they be thinking up next here comes Mariah now oh my we haven't been a worry about you gal you shouldn't be out of door the weather like this that's all right happy that on the floor that your brother came with a stand in by the door and they ends up in children killed in children your poor yeah I'm hungry don't take it so hard Mariah I know you love him yeah what do we got the supplement nothing fancy just a horse I hope I don't get the leg again happy yeah one of them just across the stop he did yeah said he just heard about the fourth anniversary what else did he say gal with a prize you'll ask for that long give me my rifle I'll show them how they are now and sit on the floor happy happy be careful there meaner and clickier take that corner a pole cat watch out Uncle Jake they missed me that's all right they got him again when they got me happy they got me I told you we should have buried him I'll make them pay for this or my name ain't Jake this shot get to your name was take that miss me again oh yeah where's your ear gone it and I wanted to hear Phil Baker hand me that other gun come on John let him have okay Jake I guess they end to get inspired there are they stopped the shootin who is that pop yes the neck oh well the echo God Johnny yeah how's I am holding out getting pretty low I reckon I'll have to borrow some they may be then they're willing to stop this huge not take penny he's a futeless man in these hills I wonder what makes him so few days well I don't know ooh they got me fine too bad see you later John look Mariah look I hit faster got it right in the foot you hit the fast who's are it's me a parker parker yeah and I'd like to borrow some ammunition I'll gladly pay you back Tuesdays go over just to keep this view to go and how many bullets you and me how many family free but you better take an extra one I'm expecting come here you are well I get these bullets back two minutes with my aim is good well thanks Jake so long long as they're shooting you get him all before he runs back to the house yeah I hit him in the suspenders that'll slow him down coming hello you'll pardon my protruding but I was a federal agent I came here from Washington N.B. Washington N.B. yeah near Baltimore you and the federal man yeah boy and I was working for the government aren't we all quiet what are you and do you're walking around here from here I came here to select a place for a new government project that's all sure enough these are humans that build up here at Cannell 28 and a half miles long 28 and a half mile cannell are you a phone I have locked on it why do we need that lock who's going to steal it I reckon you will come to the right place around here is so dry the cows get powdered milk that's your hardlock but listen to my proposition please I'll give you for your property it's just one of $1.50 next and so is a heap of milk hold on for an extra quarter par gas is running low you haven't heard what she said Tronga yeah she's a sizzler well I'll make a $2 season sign here there are pox me the pin and pox me the ink where do I scratch right here but don't make a block not mark who mariah pick up that pin never mind I'll get you another one I want that one my hands how are y'all well thank you why's the money where's my car along with and be careful all right come along Mr. Mr. a hezakaya slepelman with a benzo on my knee oh come on well Sarah we enrich now hot we can move away from these no we can't Sarah not till the feud is over you that's all I ever hear and I'm a getting sick of it why Sarah you know all the fields you know I wouldn't be no feud and speaking of feud you will find the jello is the most delicious feud in the world strawberry raspberry berry orange lemon and lime thank you Parker thank you best you're welcome me jack well that's that why's Mariah in that federal man give me a crack if you still got plenty hot bullets here no wins are used to it hey friends you know I like that daughter of yours she's some snap-a-dem-zo are you ones like my daughter is yeah for her I feel like I owe you and first I ask to marry me can't see that I'm surprised Mariah what have you ones got to say about this now I'll tell you my friends you've been talking about for a long time and it's not stand by now for grand good news jello is introducing a new product to metropolitan New York and New England jello ice cream mix a modern quick easy way of making the very best ice cream you've ever tasted jello ice cream mix comes in five luscious flavors vanilla chocolate strawberry tutti frugue and orange pineapple three fruit flavors are real cut up fruits in their own sweet and juices the vanilla and chocolate syrups are deliciously mellow each flavor freezes smoothly flawlessly in the craze of your automatic refrigerator just open a can of jello ice cream mix add some milk some whipped cream stir only once during the freezing and you'll have six generous portions of rich creamy ice cream smooth and full flavored absolute luxury ice cream see your grocer tomorrow some jello ice cream mix if he hasn't put it in stock yet be sure he orders it for you never accept any substitute for jello ice cream mix because nothing else will give you the same fine results remember the name jello ice cream mix Frank Frank we're coming up here tonight with darn sweet of you and you too, Don that's all right, Jack I'm glad I came I enjoyed it too I hope to see you soon again 23 skidoo hmm, who wrote that? I did good night, folks T-L-L-O our music is considered love and gloom from She Loves Me Not and there's a small hotel from On Your Toes this is a national broadcasting company


As for runes for priests in SOD, we have a few options. The main picks for PvP are going to be either Strength of Soul or Void Plague. Void Plague is very strong and by the looks of it quite low mana cost. Strength of Soul looks like it's going to be really strong at higher levels, maybe not so much at level 25. My overall pick for level 25 is going to be Void Plague. For Legroon, Harmonculi and Barrier definitely have good utility, but they're both situational. Prev-Mending looks like the safe pick overall. Shared Pain certainly looks like the more offensive option. However, sadly the Shared Pain rank that we have at level 25 is quite weak. My final pick is going to be Prev-Mending. Handroon is very unfortunate and there are two clear picks. And I can't decide which one, so it's going to be up to you entirely based on your own gameplay. You can either choose Penance or you can use Shared Death. Both are equally insane. My final pick is going to be...


Wealth, fame, power. I, living room renowned rules guy, could have attained that and everything else the world has to offer. If I wanted self-improvement, I could have had it. I had every bit of spare time that exists, gathered in one place. I just had to find the motivation to do it. That possibility lured me to the television in pursuit of distractions greater than I had ever imagined. This was a time known as the Great Pirate Anime Benjwatch. Want to know when I got out of it? Well then. Climb aboard and bring along all your hopes and dreams together we'll find. There's rules for that. After weeks of getting away with the excuse that I simply didn't have the time, a global superflu that you may have heard of once or twice, and its associated interminable quarantine, finally persuaded me to acquiesce to Ricky's cheerfully forceful suggestion that I sit down and watch one piece. So over the last three days, or years, or however long it's been since March, we did and we caught up and it's great. So to celebrate, today Terrific will be looking at not just one incredibly specific and questionably useful concept, but a whole bunch of them. Welcome to part one of our 996 part series in which we... Our budget is what? Oh we do not have a budget. At all. Okay. Welcome to part one of our two part series, in which we recreate the notorious straw hat pirate crew. These ten builds have been evenly split not only between Fifth Edition and Pathfinder, but also between this week's video and the next. So be sure to join us after the time skip for the rest. And we'll get started with the future Kaisaku-known self, Monkey D. Luffy in Pathfinder. To call this build a success, we need a PC that can A, stretch like rubber, B, rev their way through gears 2nd, 3rd, and 4th, and C, have some semblance of something that reminds us of Conqueror's Hockey. And remarkably enough, we can accomplish all of that with just one class, Bloodrager. A somewhat bizarre match between a barbarian and sorcerer, the Bloodrager is a full BAB class that gains special bloodline benefits and four level spellcasting when they start raging. Luffy isn't particularly a wrathful guy exactly, but Oda help any poor villain in his way when he decides to buckle down and get serious, so I'm counting it. We'll be taking the abhorrent bloodline, and while our real payoff is in a couple levels, the introductory ability Staggering Strike does a pretty mean impression of a gum gum pistol already. But yes, at level 5, we do pick up Abnormal Reach, which stretches our arms out 5 more feet when we Bloodrage. How about that? We'll also be taking the Bloody Knuckled Rowdy archetype, which trades DR and some spells known for both improved unarmed strike and the scaling monk damage to go with it. Plus, it lets us grab a few style feats down the road. They're a little challenging to qualify for, but it's worth checking out Pummeling Style for a Gum Gum Gatling type attack and, as it happens, Monkey Style for the kind of mobility and bouncy resilience you'd expect from a rubberman. Last up, even though the Bloodrager has a pretty modest spell list, it is weirdly packed with on theme options. If you aren't satisfied with our rubber action so far, you can also pick up Long Arm, Extreme Flexibility, and yes, a spell called Bouncy Body. On the topic of emulating Luffy's various gears, we have the Everclassic Haste for Gear 2nd, Force Punch to stand in for Gear 3rd, and way up in the lofty heights of fourth level spells, Monstrous Physique 2 for Gear 4th. For our last checkbox, we're looking for some kind of forceful, aura-spread projection of will that leaves weaker foes trembling and incapacitated. We're looking for Conqueror's Hockey. And with just a smidgen of reflavoring, the third level spell, Vision of Hell, should do a fine job. And we could do more, but there's no time to linger. So on to the next straw hat, we go! Let's make Roro Noah Zoro, Pirate Hunter Emeritus in 5th Edition. And what do we need in a fundamentally recognizable Zoro? Admittedly, our checklist is a little easier this time. He absolutely, positively, must have... sword. And I mean, that's really...  Not sword, swords. He must have swords, plural. Swords is his even, because he's got to have three for his signature Centaurio style. So we're looking for someone who can A, make three sword attacks per turn, B, withstand some serious, serious punishment from flamboyant Catholics and evil soap scum alike, and C, fire off a couple of particularly distinctive sword techniques. The good news is that for the second time in as many characters, we'll be keeping this build to only a single class. In this case, Fighter. We'll prioritize strength over all else.  With as much con as we can afford to invest in after that. As usual, we will be a variant human for an extra feat. For this first one, we should take a dual wielder, so that it is actually legal to attack with all of our swords. That seems like a good start. Similarly, we should also take the two-weapon fighting style to keep our damage up and even. So that's one normal attack and one two-weapon fighting attack. That means that once we get our extra attack at level five, we've got our three sword attacks per turn in the bag. Now technically, of course, that's two hits with one sword and one with the other, instead of properly hitting one time with each of three swords. But I bet if you ask real nicely, your team will let you get that last hit in with your weird mouth sword. First box, check. For our subclass, we are obviously taking guns. No, we're taking samurai, baby. Right out of the gate, fighting spirit keeps us always hitting and always healthy, as any respectable greatest swordsman in the world in training should be. Moreover, far enough down the line, 15 levels down the line to be exact, we'll be able to sacrifice those advantage rolls to hit, get this a fourth time with rapid strength. Even a little more down the line at level 18, we pick up strength before death, which gives us an extra turn of actions before hitting zero HP before we pass out. And if you're playing Zoro the way that Zoro would, that should be plenty of time to stoically stabilize enough to convince everyone around that nothing happened. And hey, between that and the 10 HP from fighting spirit earlier, not to mention our huge confocus, we can call item B in our checklist fulfilled. Now, how about some of those signature sword techniques? For our first feat after dual wielder, let's pick up martial adept, a feat that lets us poach a couple maneuvers from the battle master subclass. Personally, I feel like lunging attack is our best candidate to act as Zoro's bread and butter onigiri slash and sweeping attack reminds us that Zoro does particularly well when surrounded and pressed on all sides. This is getting pretty close to recognizably Mr. Bushido, but the thing that'll really cement our invitation is some kind of way to participate in the time honored samurai tradition of launching laser beams out of our blade. That is, how do we 108 caliber phoenix?  But since we are a master swordsman, surely that means we deserve a masterfully made sword. Yes? To hit our third of three checklist goals, let's dive deep into the DMG's rules for magic item creation and forge Zoro's prized katana, Wadawichi Manji. This is a legendary plus three magic longsword that requires attunement and has stored within it two charges of the ability 108 caliber phoenix. After using an action to activate all creatures in a 100 foot line are subject to 10 d6 of slashing damage that can be halved on a DC 15 deck save. To regain those charges, you must perform a three hour morning workout intense enough to prevent you from preparing any other spells or such for that day. Now that's a sword. Just uh, be careful with it around stairs. You don't want to put an eye on. Now going right along our merry way, next up we have the bravest warrior the sea has ever produced and I know that's true because he told me himself. Usopp, long of shots and even longer of nose in a fifth edition build. And what are our stand up traits for this stand up guy? We need someone who's both A, a ranged shot extraordinaire with not only the distance of a sniper but the utility of a Batman. And B, so daringly bold but deceitful that he is both wanted and admired under multiple false identities. Our first checkbox is relatively straightforward to fill. The entirety of the arcane archer fighter subclass is designed pretty much for exactly this. By the time we're level seven, we have access to bursting arrow, aka gunpowder star. Shadow arrow, which will incapacitate our enemy's sense of sight not unlike say a Tabasco star. And grasping arrow, which erupts into catching thorns and brambles in exactly the same way that Usopp's post time skip pop greens do. To fine tune in on the observation hockey that makes Usopp's sniping arsenal so effective, we can take the sharpshooter feet. If we keep going a few more levels into arcane archer, we can pay homage to Usopp's legendary distance work in dress Rosa with seeking arrow as well. But of course, sniping is only half of what makes an Usopp an Usopp. You see, there's no need to stay far far away from combat if there's simply no combat to begin with. And how do we convince people not to violence us when let's face it, we probably deserve to be violence. Why by lying, of course, let's take the everybody's friend feet to give us proficiency and deception and persuasion. Now, of course, the real value in this feet comes from using it to double the proficiency bonus that you already had because you were already proficient in deception or persuasion. But alas, as a mere fighter, we are not. You know who is though? Sniper King! By taking the Demir operative background from the Guilds of Gravenica sourcebook, we can assume a false identity that will keep the Marines scrambling to find just where it is we're hiding when we've already slipped back into the world and run away to lie another day. Oh, and right, that does set us up to have an existing deception proficiency. So double it up. Next up on our Mugiwara no menu is that stone cold lady killer of a cook, Sanji. Except actually, now that I say that, he's not either of those things, is he? I mean, quite to the contrary, he's so very much the opposite of stone cold or a killer of ladies that those are the two things that make up our checklist. We need a Pathfinder PC that, A, can kick fast enough to set the air itself on fire and B, wouldn't hurt a woman if his or anyone else's life depended on it. Now, to that first point, if you've ever thought about making a character like Sanji who is 100% dedicated to kicking, kicking, and only kicking, I would punk hazard a guess that you, like I, probably thought about using the monk or the brawler. But I have dismissed such easy and probably correct solutions for a far less necessary and far more fun one, an elemental aesthetic pyrokineticist. I won't dive too deep on how exactly the kineticist works here and now because hey, I already made that video. Check it out. Suffice to say, choosing fire as your element is a good start here. The archetype I mentioned, the elemental aesthetic, locks us into using close range form infusions with our kinetic blast in exchange for free access to the kinetic fist infusion with a reduced burn of zero, improved unarmed strike, and the monk's flurry of blows ability. Pretty good deal, I'd say. Now, for a sticking point, the archetype ability calls out super, super specifically that you can only use it to flurry with your fists no matter what else you got going on from any other ability anywhere. That's obviously a problem since Sanji is even more reluctant to use his hands for fighting than he is to respect the personal space and boundaries of the women around him. Like seriously, man. Chill it. For real.  Kinetic fist or foot, kinetic foot means that every attack gets to be a diable jam and that is super neat. Also super neat, by taking the stylish infusion wild talent you can pick up various style strikes from the unchained monk to throw into your fire flurries. I'd suggest looking at knockback kick, spin kick, and light sweep. And to eke one last little bit of utility out of these kineticist levels the utility talents flame jet and greater flame jet actually end up working exactly like Sanji's post timescape mood walking. And of course we wouldn't really be Sanji without a healthy maybe even unhealthy dollop of chivalry, right? To represent that I'll point to one of my favorite one-to-two level dips in all of the Pathfinder rule system. A somewhat obscure prestige class called Chevalier. Side note it is obscure because technically speaking it's actually content from way back in Paizo's early days when they made adventure paths for 3.5. So make sure to clear with your GM first. To class into Chevalier all you need is a BAB of six, one rank in both diplomacy and knowledge local and who have at some point performed a true act of heroism which is probably to say something that was in equal parts very brave, very admirable and very stupid. But just in the first level alone you pick up an aura of courage that makes you completely immune to fear effects a la paladin and an ability called recklessness that gives a boost for dynamically powering your way into combat without ever looking back. It's a good fit I think. The other two levels of the class aren't bad either so check them out. That checks both of our checklist goals but here's one last thing deep in the furthest recesses of the cavernous index of ultimate equipment there exists a mithril waffle iron. Sure it may cost 2500 times more than a common waffle iron but it's twice as light and non-stick so worth it. Has any character ever deserved it more? And hey speaking of mind-bogglingly valuable and easily thievable items our last draw hat today also on a Pathfinder build is the less than semi-retired cat burglar and more than semi-professional accountant Nami. Once again we've got three fundamental characteristics to hit. A we've got to pay homage to the decade of her life that she spent plundering and thieving treasure to try and buy her village back from Arlong. B we've got to incorporate her skill at weather manipulation and people bonking via the climate tax. And C we've got to acknowledge her professional roles as the cruise combination navigator and accountant. And I gotta admit with such a varied and wide-ranging set of goals to aim for I did not expect this concept to fall together as incredibly elegantly as it did but check this out. We'll make an unchained rogue who uses feats and the bonuses provided by a special arcane compass to bump her used magic device skill high enough to activate various magical staffs that will let her manipulate lightning, illusions, and the weather itself. Neat right? I think it's neat. The rundown is really pretty straightforward. For feats we'll take magical aptitude and skill focus UMD which puts us at plus five adding a modest estimate of a plus three cha and our trained class skill bonus of another plus three we've got a UMD of plus 11 before we even start counting skill ranks. Not bad but we can bump it up just a tad more. There's a class of wondrous items called wayfinders magical compasses that are the signature symbol of one pathfinder society. Yep, they're basically just log poses. How convenient is that? Moreover they have spaces inside to slot special floating crystals called Ioon stones. There's a whole another video right there but for now it's enough to just note that with both a cracked pink and green sphere and a mossy disc slotted in we can get another plus one to both UMD and appraise. The actual wayfinder itself is pretty neat too. A smugglers wayfinder specifically opens a small extra dimensional space sized perfectly for storing say a magical staff. Speaking of our Nami will tote around three magical staffs. A staff of illusion for mirage tempo a staff of electricity for thunder tempo and a staff of weather for weather stuff. There is a small issue of not having any way to recharge these staffs. But you know what? We're in charge of the checkbook for an entire crew of pirates. When we run out of charges we'll just buy ourselves a new one. With one staff in the wayfinder and one staff on her back as normal she'll still need a way to carry the third. Taking inspiration from her absolutely kick and post time skip berry belt we can pick up a security belt that lets us shrink and store it on command. That's the last of our east blue crewmates but worry not as is literally always the case with one piece there is more yet to come. In fact there is so much more to just these builds that didn't all fit. Check out a few more custom made magic items that didn't make the cut in the PDF below. Next video we'll be going over straw hats from the grand line and beyond. So stay adventuring and see ya in the new world. Hey guys thanks for watching the video. We'd like to give a quick shout out to our sponsor dice dungeons.com. They've got some super cool stuff so go check it out. My personal favorite thing are these dice chests. They hold dice just like this. It's super secure. They fasten on with magnets. They are super slick looking. I love them. Go check them out. Use the code DORMONSTER at checkout to get 10% off your order and tell them we sent you because we did. Howdy folks this is the part at the end of the video where I comment on not just the end of the last video but also all of the last video and what you told me about the whole last video which in this case was spooky scary Scalleroad which first off many of you suggested better puns before and you're right like Skull Duggery or Scallowag or literally anything but Scalleroad. There are a lot of really great suggestions for other things and feats to increase this Intimidate build. The first thing that people say a lot is Shattered Defenses. Yes absolutely pick up Shattered Defenses. That's that's definitely a great one to add. I totally forgot about Anti Paladin. I just never actually look at Anti Paladin for everything but there's apparently just a bunch of fear based abilities as part of the class and if you're running an evil campaign absolutely.  I mean that's also a really great Intimidate build. We got the Anti Paladin and the Shattered Defenses adding to the Rogue is really great. There's a couple of great Necromancer builds. I'm really excited to review those a little bit better because I've never done a Necromancer build. I think that's a pretty good spooky thing to do. To the person who said I have asked why my glasses are moist I wish you hadn't asked that because now I'm also wondering why my glasses were moist.  I went to a Latin convention there.


The president's budget proposal eliminates public media funding. Learn how you can help at lptv.org slash action. Environmental groups have now filed four lawsuits seeking to prevent the U.S. Forest Service from swapping land for the planned polymet copper nickel mine in northeastern Minnesota. The exchange deal calls for trading 6,650 acres of federal land that polymet needs for its mine near Babbit for a similar amount of private land nearby in the Superior National Forest. Lawsuits filed in federal court by the Center for Biological Diversity and a coalition that includes the Sierra Club joined a similar lawsuit filed Monday by a coalition led by the Minnesota Center for Environmental Advocacy and a case filed in January by Water Legacy. The two new lawsuits alleged violations of federal laws on land transfers and endangered species. The two older lawsuits say the Forest Service undervalued the land. If you've enjoyed this segment of Lakeland News, please consider making a tax-deductible contribution to Lakeland Public Television.


The year was around 2006 and I was just 20 years old. I saw a book with someone and I decided to approach him and persuade him to borrow me the book. That book was the famous Rich Dad Poor Dad. Reading this book, I understood a simple yet profound principle about money. Don't buy liability from your income. Buy assets and let your assets buy you every liability you need. That was 13 years ago and today when I look back at my life, I bless that day I came across that wonderful book. But whenever I look around me, I see that most people are not getting this simple financial principle and that's why in today's video, I'll be sharing with you the 5 silly things you should stop doing with your money. If you're new here, consider subscribing so you won't miss other interesting videos like this. 1. Stop being a victim of social proof In the culture where I grew up, people in a club or group usually buy uniform clothes to celebrate whatever they wish to celebrate. So it happened that when I was around 18, every youth in my church buy a particular cloth to celebrate something I cannot remember now. When they told me the amount we were to contribute for those clothes, the first thing that came to my mind was the number of books such money can buy. So I did not buy the clothes. The day we were to use this cloth, everyone in our church club wore uniform clothes except me and the funniest part is that I actually felt that I was far more important than all these people. You see, from age 17, when I started reading motivational books, I've always found joy in being different. Whenever I've found myself doing what nobody's doing, I feel like I'm better than everyone. The opposite of this, unfortunately, is what most people feel. For most people, they are victims of what psychologists call social proof.   Social proof means that when everyone in your category is using certain things, you'll feel as if you are less important until you join them.  In fact, start having pride in being different. You need to have pride in being different because most people in the world are dumb. Believe me, I'm telling you the truth. Most people in the world don't know anything about anything so being different from this multitude should actually make you proud of yourself. When all your friends are taking loans to buy new cars, go and buy used Toyota car. When all your friends are lining to buy the latest iPhones, be happy with your 3 years old phone. When all your friends are buying a bigger home they never need, with the money they don't have, be happy to leave in the smallest home in your city. Take pride in being different because if you're not different, it means you're as foolish as everyone. Take pride in being a minimalist because nobody is happy because they have every shiny object. Stop seeing your income as a fruit There are two types of people in the world. People who see their income as the fruits of their labor and people who see their income as a seed of freedom. If you see your income as the fruit of your labor, then when you make money or earn a salary, you'll think to yourself, hey, I've worked so hard. I deserve a new phone, a better car, and a beautiful home. If however you see your income as a seed, whenever you earn money, you'll say to yourself, I need to save a part of this so that I may one day be able to invest in my own business or other people's business so that one day I won't have to work on the job I hate anymore. That's it. How are you seeing your income? What do you think about your income? Do you think it's a fruit or a seed? If you think it's a seed, you'll want to plant a significant part of it. If however you think your income is a fruit, you'll want to enjoy it. Most people simply enjoy their earnings as fast as they earn. The problem with this is that you'll work for money all your life, and this is even worse if you're doing the job you hate.  What a miserable way to live. 3.  I once told a friend how much my business was making, and the next few months, he asked me to give him money to invest in his business. The problem with this is that, even though I told him how much my business was making, none of that money is staying in my bank accounts. When I make money, I invest almost everything, but who will understand that even though my company makes a lot of money, I'm still as broke as everyone?  They will never understand that you have to save, invest, and pay bills. They will simply think, hey, this guy makes $80,000 a year. He should be able to give me $10,000 to start a business. When you tell them that you don't have much money, they call you stingy. Please pray for me so I'll be able to follow my own advice here. 4. Stop buying things because of social media We're living in an age where most people's identity has been closely attached to their social media profile. Because of this, it's easier to do things simply to look good online. You might be in a boutique wanting to buy a few clothes, but when you remember that you have to take some photos of those clothes when you eventually wear them, then you know that you have to buy really expensive clothes because everyone in the world will see your photos. This way of thinking can influence your buying decisions on almost everything. The phone you use, the car you drive, even the home you leave.   In fact, most people whom you think are your friends simply don't care about who you are. The best you can get from them is their envy. Why would you sacrifice your future simply because you want some people to have a good opinion of you? 5. Stop expecting a raise before you save So many people think, I'll start saving when my income increases. The problem with this way of thinking is that savings and investment is not a product of how much you earn, they are products of your habit. You see, according to the Parkinson law, expenses grow to meet income. Believe me, so many people make $100,000 per year and they don't invest a dollar. If you don't save one out of $10, you won't save $100 out of $1,000. If you can't save $100 out of $1,000, you can't save $1,000 when you earn $10,000. Savings is a habit. Investing is a habit. Though I'm not a good saver, I'm a crazy investor. I don't like to save money but I invest almost everything I earn naturally. When I make money, my default brain setting is to invest it. It's after I've invested my earnings, I think about what to spend. Now this is the summary of everything I've shared with you. 1. Stop seeing your income as a fruit. Don't eat it. Plant it as a seed. 2. Stop trying to catch up with everyone.  Why trying to buy what little people buy? 3. Stop trying to buy things because of the social media photos. You have a real life other than social media. 4.  They will want to spend a part of it. And 5. Stop thinking that you have to make more money before you start saving. If you don't save with your present income, you won't save when that income is doubled, no matter how small, save something because it's about habit. I hope this video helps. Thank you very much for watching our videos. We would like to give you another interesting video for you to enjoy next but before then, our team would be very happy if you can like this video and share it with your friends on social media. If you're new here, don't forget to subscribe so you won't miss other interesting videos like this. Now look at your screen to see two other videos we handpicked for you to enjoy next. We love you.