Youtube News: Youtube daily report w Feb 17 2019

"What is a security vulnerability?".

I don't think that there is an easy answer to this question.

And so in this video I want to go over a examples, and share my thoughts.

I'm really curious how you think about it, because my actual job is to find and report

vulnerabilities, but I don't really have a clear definition.

For me it's actually often just a "feeling" or an intuition that I have when I determine

if something is a vulnerability or not.

And I hope you find these examples thought provoking as well.

Let's start with a CVE.

The Common Vulnerabilities and Exposures (CVE) system provides a reference-method for publicly

known information-security vulnerabilities and exposures.

So if something got a CVE assigned, it could mean that we all agree that it's a vulnerability.

But have a look at CVE-2018-17793.

This is labeled as a "virtualenv 16.0.0 - Sandbox Escape", and doesnt make any sense.

virtualenv is a tool to create isolated Python environments.

The basic problem being addressed is one of dependencies and versions.

Imagine you have an application that needs version 1 of LibFoo, but another application

requires version 2.

How can you use both these applications, If you install everything into /usr/lib/python2.7/site-packages?

Also, what if you can't install packages into the global site-packages directory?

For instance, on a shared host.

In all these cases, virtualenv can help you.

It creates an environment that has its own installation directories, that doesn't share

libraries with other virtualenv environments.

So this just helps you developing python programs and I use it ALL the time for the reasons

that were just mentioned.

However I can see that maybe somebody misunderstands the purpose.

The name VIRTUAL environment, and it creates an ISOLATED python environment could be misunderstood.

Also we use language like we "enter" the virtual environment and we sometimes use shells

that indicate when a virtual environment is active.

So It does sound like a typical virtualisation technology, which we do use for security reasons.

For example using virtual machines to isolate malware.

And a virtualbox escape is indeed a vulnerability.

You escalate priviledges from the virtual machine to the host.

However here you should immediately understand that this is not the same thing.

This "virtual python environment" in quotation marks is just a way to structure python projects,

and maybe the language is slightly misleading to an outsider but of course any code ran

here can do anything.

That's why also the maintainers were so frustrated with the report and why so many

people, including me, joked about it.

Just because it's called virtual environment, it doesn't mean there is a virtual machine

with the goal of privilege separation.

So here we don't have a vulnerability.

Let's look at a second example.

I do quite a bit of ethereum smart contract audits.

And in those audits, we of course, look for typical security issues like reentrancy attacks,

logic bugs, and what ever.

So from the ICOs point of view, they want to issue a token, sell the token for an initial

amount of money, ICO (initial coin offering) to raise capital and use it to build something

with that raised money.

And the people buying those tokens hope that whatever this company builds, will cause the

token later to rise in value.

So from the ICOs point of view they mostly care about bugs that would allow others to

steal tokens or even to just manipulate their token balance.

That of course would mean huge financial losses.

However just because this is the ICOs point of view, and the ICO pays for the audit, this

is not my point of view.

Smart contracts are meant to be decentralized contracts between different parties.

So to me the point of view of somebody investing into that token is equally important.

So let's do an example of a vulnerable that I find thought provoking.

sometimes an ICO will advertise that a token has a limited available amount.

A fixed total supply.

But then they might implement a function on the contract that allows the owner of the

contract, so the ICO, to mint new tokens.

This means they can, at will, just raise the number of available tokens.

But this contradicts what they promised.

They promised limited availability but actually implement unlimited availability.

From the point of view of the ICO this is not really a security vulnerability.

They are the owner, they are in control, why would they care.

But from the point of view of an investor who would like to buy these tokens, I think

this is a big issue.

This contract is now very unfair, but the main issue is the contract contradicts promises

that were made.

So the issue could be titled "contract allows to mint tokens despite claim of fixed supply",

and that for me is a vulnerability.

Okay… third example.

A while ago a person wrote me that they found a session account hijack or something.

I can't find the original messages so I'm just telling based on how I remember it going.

the person also included reproduction steps in the message.

They were going like this:

First, Login to this site.

Then copy the cookie.

Now imagine you go to a different computer, we use a different browser now.

So we login here with a different account.

You can see it here.

Now we intercept this request again but replace the cookie from the first account.

BOOM we got access to the other account.

When people send me reports like this I don't even know what to say.

Like it's like DoS attack on my brain because I try so hard to understand if there is a

vulnerability.

Of course there is none, this just how cookies work.

And just because you describe reproduction steps that resulted into access to the other

account doesn't mean this is a security issue.

You just literally explained how session cookies work.

Btw this is the kind of weird crap bugbounty triage people have to read.

Because people who don't really understand it report stuff like that.

And now try to explain to them that this not an issue.

Which of course I did.

Btw it was a regular PHP session id.

And the person still didn't quite get it.

And they insisted this is a security issue, a session or account hijacking.

They were arguing that this is just hex data.

So just 0-9 and a-f.

This is a lot less characters than a full alphabet from a-z.

They were saying it could be bruteforced.

Of course it cannot be realistically bruteforced it's way too long, and thus this isn't

a security issue but this opens up an interesting discussions.

Because let's say the session id is one character shorter.

Do we now have a Secrutiy issue?

Let's make it again shorter.

Now?

Well it think we can all agree that if the session id only had two characters, which

means there would only be 256 possible values for a session id, that this definetly would

be a security issue.

This could be easily bruteforced in a matter of seconds and you could access the account.

So we have this spectrum here and somewhere this example moves from being a vulnerability

to it not being a vulnerability.

And I'm sure we all would draw the line somewhere else, especially in those grey areas

where you can argue with bruteforce speed limitations and so forth.

Let's look at a fourth example.

XSS.

So in cross site scripting issues you can somehow place javascript into a website.

And that javascript can then just do anything in that site.

So if your victim opens a site with your XSS payload, the XSS can do anything like stealing

their session cookie.

So one kind of XSS is what we call reflective XSS.

This happens when part of the URL is directly echoed back into the content of the page.

Now some browser vendors came up with the idea to implement a so called XSS auditor.

This is a best effort defense where the browser tries to look at the URL and check if it contains

something that looks like a javascript XSS injection and then see if it appears in the

document itself.

And then there are different strategies, the browser could for example block the whole

page, or just try to block that specific script.

But this creates two challenges.

Because people quickly figured out you can abuse that.

You could for example take a valid javascript snippet from the document, place it into the

URL and the browser will think you injected it.

But of course you didn't but the browser doesn't know that.

So this is a false positive.

So over the years those XSS auditors got refined but they just can't be perfect.

Because the browser can only guess and bypasses are found all the time.

Though in several cases it actually does stop XSS attacks, which is arguably great for the

user.

However this caused a different problem.

Edge actually stopped and removed the XSS auditor and just recently we saw another proposal

to also remove the Chrome XSS auditor.

And maybe you wonder why, but let's read what it says here.

XSSAuditor Retirement Plan Proposal We haven't found any evidence the XSSAuditor

stops any XSS, and instead we have been experiencing difficulty explaining to developers at scale,

why they should fix the bugs even when the browser says the attack was stopped.

In the past 3 months we surveyed all (google) internal XSS bugs that triggered the XSSAuditor

and were able to find bypasses to all of them.

[...] Furthermore, we've surveyed security pentesters and found out some do not report

vulnerabilities unless they can find a bypass of the XSSAuditor.

And when I retweetetd this one person even commented.

I used to work for a security vendor.

We used to report XSS even if it got stopped by the auditor.

A lot of clients got unreasonably angry about us doing that, so we stopped.

The XSS auditor seems to be a nice first defense, but it was never meant as a protection or

mitigation against XSS.

XSS is not an issue in the browser, the issue is the webapp that doesn't properly encode

output.

Triggering the XSS auditor means your site is vulnerable to XSS.

Maybe the XSS auditor stops one attack, but this doesn't mean it can't be bypassed

or your users use an old or different browser without the XSS auditor.

And now it lead to a culture where clients or the defensive-side in general, say, that

a XSS example that triggers the XSS auditor is not a vulnerability because it got stopped.

So when people try to report vulnerabilities, instead of spending there time on finding

more issues, they now have to spend time over and over again trying to argue why it is still

a vulnerability, or waste time on trying to bypass the auditor.

Even though the underlaying issue is the webapp failing to properly encode output.

I always report XSS issues even when they trigger the XSS auditor.

I don't think it's in the client's best interest, for me to waste time on trying to

bypass the browser.

My job is it to find vulnerabilities or vulnerability patterns in the software of a client, so the

client can fix the actual issues.

That's what they pay for.

I have actually a small related series to a similar topic.

Checkout my AngularJS playlist where I analyse a few angularjS sandbox bypasses.

Several people constantly had to find bypasses to proof to clients that by simply updating

angularjs it doesn't fix the underlying issue.

And this was successful, in the end the sandbox was removed, which allowed easier XSS without

a bypass, because the nice-to-have sandbox was misused as a security mitigation.

The client should just fix the underlying issue.

So this XSS example shows that even if it might not be directly exploitable because

something stopped you, it doesn't mean it's not a vulnerability.

And I have actually even one more example that goes a step further.

So here is example five.

So there was once a mobile app which communicated over SSL with the server, and SSL was properly

implemented in this case.

As you know, SSL protects against man in the middle attacks.

So even if you somehow man in the middle the network connection you cannot see, nor you

modify the messages exchanged between the mobile app and the server.

We can call this an ecnrypted TLS tunnel.

Now the messages exchanged were actually encrypted with AES in CBC mode with PKCS5 Padding.

And it turned out that the server was vulnerable to a padding oracle attack, because there

were kinda verbose errors when you sent a corrupted message to the server.

I don't wanna explain how that attack works here, but it can be used to recover the encrypted

data.

So if you could somehow get your hands on an encrypted message sent from the app to

the server, then you could abuse the error messages to perform a padding oracle attack

and extract the clear-text data.

Is that a vulnerability, that you can decrypt encrytped data?

Well we had huge discussions about this because all of that happened inside of a TLS tunnel.

so even if you were able to get a network man-in-the-middle.

there was no way to actually get to the encrypted message.

SSL or TLS prevents that.

Now think about that.

If there were no encrypted messages, just SSL.

I would never report that "it uses SSL, that protects against MITM, this is safe").

Though I argue that because the client implemented this second layer of encryption, they wanted

that additional layer of protection, and breaking that layer through a padding oracle, is a

vulnerability.

So I report that

So… now we had five different examples that all have something weird about them.

I hope they really help you to think about what a vulnerability is and how hard it is

to define what that means.

I don't think I have a clear definition and if I would try to come up with one, I

would find exceptions and contradictions easily.

For me it's actually mostly intuitive and a "feeling".

I think I know when something is a vulnerability and I know when it's not.

I would tell you that you should just read vulnerability reports to also learn that,

but actually it's not easy to build an intuition, because you would need the intuition in the

first place to filter out the stupid reports.

And I think this is what we see happening.

Due to more and more unexperienced bug bounty reports we get flooded with vulnerability

reports that are not vulnerabilities.

And sometimes they might even get a bounty, because the receiving client might not be

able to realize that the report doesn't make sense.

And suddenly you normalise a certain type of finding as it being a valid vulnerability

for a bug bounty.

And this creates this whole weird economic around it.

When at some point a site or triage team rejects those reports because they realise it's

not actually an issue, then you have people complain and point at previous payouts.

It's really messy.

All advice I can give is to stay sceptical about reports and when in doubt ask a few

trustworthy professionals about their opinion.

And hopefully over time you get the experience you need.

Oh… and we haven't even talked about severity ratings yet.

But I don't really care about that.

I have a hard time to determine if a vulnerability is low, medium, high or critical in a certain

context, so I don't think that calculating a precise score like CVSS makes sense.

I understand why for business tracking reasons the Common Vulnerability Scoring System exists,

but I don't know.

I never used it and I feel like something is forced to be ranked, that cannot realistically

be ranked.

Well… let me know how you feel about this.

And by the way, this is my view in late 2018, and my opinions on something like this can

change, so keep that in mind before you angrily explode.

And now let the hunger games begin.

For more infomation >> What is a Security Vulnerability? - Duration: 16:08.

-------------------------------------------

ทีมแพทย์บาเยิร์นยืนยัน 'โกม็อง' ฟิตทันดวลลิเวอร์พูล ,ปืนโดดแจมหงส์ ล่าตัว 'เดอ ลิกต์' 75 ลป. - Duration: 1:58.

For more infomation >> ทีมแพทย์บาเยิร์นยืนยัน 'โกม็อง' ฟิตทันดวลลิเวอร์พูล ,ปืนโดดแจมหงส์ ล่าตัว 'เดอ ลิกต์' 75 ลป. - Duration: 1:58.

-------------------------------------------

TRADİTİONAL HOT TOWEL ROZER TURKİSH SHAVE ASMR - Duration: 10:16.

For more infomation >> TRADİTİONAL HOT TOWEL ROZER TURKİSH SHAVE ASMR - Duration: 10:16.

-------------------------------------------

❤ แซนด์วิชวันแห่งความรัก 🌹 ขนมหวานแห่งวาเลนไทน์ 2019 | Sherberley - Duration: 11:50.

For more infomation >> ❤ แซนด์วิชวันแห่งความรัก 🌹 ขนมหวานแห่งวาเลนไทน์ 2019 | Sherberley - Duration: 11:50.

-------------------------------------------

藤沢五月,ミシミシって,ブラシ折れた理由明かす!スポーツ - Duration: 4:10.

For more infomation >> 藤沢五月,ミシミシって,ブラシ折れた理由明かす!スポーツ - Duration: 4:10.

-------------------------------------------

AzjaStop #15 Goa Gaja, Tegenungan, Balijski street food - Duration: 9:50.

For more infomation >> AzjaStop #15 Goa Gaja, Tegenungan, Balijski street food - Duration: 9:50.

-------------------------------------------

MY WORLD RECORD! Showdown Solo :: Brawl Stars Gameplay - Duration: 12:18.

Brawl Stars Gameplay

gaming channel

kosisboss

For more infomation >> MY WORLD RECORD! Showdown Solo :: Brawl Stars Gameplay - Duration: 12:18.

-------------------------------------------

Diciotti: Conte, Di Maio e Toninelli indagati. M5s vota su Salvini - Duration: 4:44.

For more infomation >> Diciotti: Conte, Di Maio e Toninelli indagati. M5s vota su Salvini - Duration: 4:44.

-------------------------------------------

Uomini e donne, Andrea Del Corso: il vero motivo per cui ha detto di No a Teresa | Wind Zuiden - Duration: 2:45.

For more infomation >> Uomini e donne, Andrea Del Corso: il vero motivo per cui ha detto di No a Teresa | Wind Zuiden - Duration: 2:45.

-------------------------------------------

Francesco e Giulia, che sorpresa! "Sono basita, una principessa" - Duration: 3:42.

For more infomation >> Francesco e Giulia, che sorpresa! "Sono basita, una principessa" - Duration: 3:42.

-------------------------------------------

Meditação Guiada Thetahealing: Resgate a Confiança na Intuição | Marina Carvalho - Duration: 15:39.

For more infomation >> Meditação Guiada Thetahealing: Resgate a Confiança na Intuição | Marina Carvalho - Duration: 15:39.

-------------------------------------------

TANNUS: Test in Strada della Gomma Antiforatura #3 - Duration: 4:03.

For more infomation >> TANNUS: Test in Strada della Gomma Antiforatura #3 - Duration: 4:03.

-------------------------------------------

Luigi Di Maio e Alessandro Di Battista, i sondaggi segreti: M5s, più in basso di così non si può - Duration: 1:49.

For more infomation >> Luigi Di Maio e Alessandro Di Battista, i sondaggi segreti: M5s, più in basso di così non si può - Duration: 1:49.

-------------------------------------------

Sonidos e imagenes de animales para niños - Los animales dela granja en español - Duration: 3:12.

For more infomation >> Sonidos e imagenes de animales para niños - Los animales dela granja en español - Duration: 3:12.

-------------------------------------------

ORAÇÃO Dominical para você que está desanimado e não consegue ir para Igreja - Duration: 3:50.

For more infomation >> ORAÇÃO Dominical para você que está desanimado e não consegue ir para Igreja - Duration: 3:50.

-------------------------------------------

078. Meditações de Santo Afonso Maria de Ligório (AUDIOBOOK) - Duration: 9:42.

For more infomation >> 078. Meditações de Santo Afonso Maria de Ligório (AUDIOBOOK) - Duration: 9:42.

-------------------------------------------

How Amazon Started, Grew and Became A Trillion Dollars Company - Duration: 11:29.

How Amazon Started, Grew and Became A Trillion Dollars Company

Amazon.com Inc, popularly known as Amazon was founded by Jeff Bezos, an American entrepreneur.

Amazon started out as an online bookstore but is now a multinational company and the

largest e-commerce marketplace and cloud computing platform in the world with a revenue upwards

of $177 billion in 2017.

How Amazon Started

In 1994, Bezos quit his job as vice president of D.E Shaw & Co, a Wall Street firm and relocated

to Seattle Washington where he devised a business plan for a new company.

This move was fueled in part by his regret for not taking part in the internet business

boom at the time.

On July 1994, Bezos named his new company Cadabra Inc. but it was quickly discarded

when Bezos' lawyer disclosed that he misheard the name as "Cadaver" over the phone.

By September 1994, Bezos toyed with the name "Relentless" which was also scrapped because

friends told him the name sounded sinister.

The Relentless domain is still owned by Bezos and redirects to the current website.

Eventually, Bezos settled on the name "Amazon", an authoritative name that referenced the

largest river basin in the world.

This reference also represented his vision of making the company the biggest in the world.

Its launch tagline was "Earth's Biggest Bookstore."

He once told a reporter, "There's nothing about our model that can't be copied over

time.

But you know, McDonald's got copied.

And it's still built a huge, multibillion-dollar company.

A lot of it comes down to the brand name.

Brand names are more important online than they are in the physical world."

Bezos did his research on the future of the internet that predicted the growth of annual

web commerce at 2300% so he created a list of products that could be marketed online

and narrowed it down to what he believed would be the most promising.

These products included compact discs, computer hardware, and software, videos and books.

In the end, he decided that because of the enormous worldwide demand for literature,

the low unit prices for books and a large number of books available in print, his new

business would sell books online.

Bezos invested almost $250,000 to start up Amazon in the garage of his rented house in

Bellevue, Washington.

The First Book Sold

In July 1995, Amazon sold its first book, Douglas Hofstadter's Fluid Concepts and Creative

Analogies: Computer Models of the Fundamental Mechanisms of Thought and in the next two

months sold to all 50 states in the US and more than 45 countries with sales up to $20,000

each week.

By October the same year, Amazon announced its intention to go public.

When eBay was established in 1995, Amazon tried to compete with its own auction site.

The project failed but Bezos was not unhappy.

He bought the skeleton of an Ice Age cave bear for $40,000 and had it displayed in the

entrance hall of the company headquarters next to a sign that read, "Please Don't Feed

The Bear."

The sign is still there till date.

In 1996, Amazon was reincorporated in Delaware and its employee count went up to 11 which

prompted its move out of Bezos' garage into a small warehouse that would become its second

official headquarters.

Amazon Went Public

On May 1997, Amazon issued its first public stock offering at $18 per share.

Around this time, Amazon was sued by Barnes & Noble who declared that Amazon's claim

to be "the world's largest bookstore" was unfounded as it "...isn't a bookstore

at all.

It's a book broker."

The suit was subsequently settled out of court and Amazon continued to make the claim.

In October 1998, Amazon was sued by Walmart who claimed that Amazon stole Walmart trade

secrets by employing former Walmart executives.

This suit was also settled out of court but Amazon had to put internal restrictions in

place as well as the reassignment of the former Walmart officers.

In the same year, Amazon went on to take over companies such as Drugstore.com, Pets.com,

and Overstock.com.

In 1999, Amazon attempted to branch out into the publishing business by buying a discontinued

imprint, "Weathervane" a trade name under which it would publish books.

According to The New Yorker, an American magazine, the books the company published were "selected

with no apparent thought".

The imprint disappeared soon after and by 2014 Amazon agents conveyed that they had

never even heard of it.

Also in 1999, Amazon's online shopping gained national spotlight and recognition when Bezos

was named the "Person of the Year" by Time magazine for successfully popularizing

cybershopping.

Amazon in the New Century

In June 2000, Amazon updated its logo to include the curved arrow, shaped like a smile moving

from the A to the Z that is popular around the world today.

It was also at this time that the online platform started offering free shipping on orders above

$100 and the platform opened up to accept third-party sellers.

Some sources claim that Amazon had not expected to make profits for at least four years, a

sluggish growth that caused shareholders to complain that the company's profitability

was not fast enough to justify their investments in the long term.

The internet bubble burst that occurred roughly from 1995 to 2000 as a result of the extreme

growth in the usage and adjustment to the internet destroyed many e-companies.

However, Amazon survived this bleak period and moved on to become a huge participant

in online sales.

Towards the end of 2001 Amazon finally turned its first profit of $5 million at 1¢ per

share on revenue of over $1 billion which was extremely little but it proved that Bezos'

unorthodox model of business could actually succeed.

Between 2001 and 2011, Amazon experienced rapid growth.

In 2002, the Amazon Web Services was launched for developers to include features of Amazon.com

into their own websites.

In that same year, Bezos launched the concept of "two-pizza teams" to the company.

It was a concept that involved organizing employees into groups consisting of less than

ten people – the ideal amount that would be satisfied by two pizzas for dinner – who

were expected to work independently.

The teams were given strict goals and equations were used to measure their success.

Bezos once said, "Communication is a sign of dysfunction.

It means people aren't working together in a close, organic way.

We should be trying to figure out a way for teams to communicate less with each other,

not more."

It was a widely hated concept among the Amazon employees due mostly to the stress involved.

In 2004 Amazon's online shopping sales finally surpassed the book sales for the first time

in the history of the company.

In 2005 the now extremely popular membership program, the Amazon Prime was launched.

In 2007 Amazon launched new services like the home grocery delivery service, the online

music store and the now-famous electronic reader.

They were labeled AmazonFresh, Amazon Music, and Amazon Kindle respectively.

In 2008 Amazon released a search feature that costumers would pay for which allowed advertisers

to direct Amazon traffic to their own sites.

This feature was named Product Ads.

Amazon in Recent Years In 2010, the Kindle electronic books sales

finally exceeded that of printed books for the first time in the history of the company.

By 2011, Amazon had grown to be an employer of up to 30,000 full-time employees and at

the end of 2017; the number had skyrocketed to 566,000 worldwide.

In June 2017, Amazon announced its intention to use $13.4 billion to acquire Whole Foods;

an extravagant supermarket chain with more than 400 stores, a move that media experts

figured would strengthen its physical presence.

By August the acquisition was approved.

As of August 2018, Amazon owns a 5% share of retail spending in the US as well as a

43.5% share of online spending with a net income upwards of $3 billion.

As at 2018, Amazon net worth was valued at $1 Trillion making it the second company in

the world to reach that mark.

Thank you very much for watching our videos.

We'll like to give you another interesting video for you to enjoy next but before then,

our team will be very happy if you can like this video and share it with your friends

on social media.

If you're new here, don't forget to subscribe so you won't miss other interesting videos

like this.

Look at your screen now to see two other videos we handpicked for you to enjoy next.

We love you

For more infomation >> How Amazon Started, Grew and Became A Trillion Dollars Company - Duration: 11:29.

-------------------------------------------

Paul Cezanne - la montagna Sainte Victoire - Duration: 3:33.

For more infomation >> Paul Cezanne - la montagna Sainte Victoire - Duration: 3:33.

-------------------------------------------

Ep. 6: PARTY TIME TOGETHER | 後編 | アイドリッシュセブン Vibrato - Duration: 11:23.

Drink it to the last drop and be showered with kisses.

Red hot Thunder Dry.

Buy now and get this gift.

Suggestive stuff for the middle of the day.

It'll probably sell out again.

Ah, should we go ahead and use this for cleaning?

-Ah, beats me. -I'll set it aside for now.

You're quite the diligent one.

Nope, kind of sloppy.

Didn't you just say I was diligent?

That you are. You should do things you like on days off.

Things I like...

Right. Not things for everyone else.

Thinks I like...

Don't sweat it. Find something if you don't have anything.

Find something?

Here.

Have this for now.

I can't drink at this hour.

Why not? It's your day off.

That hits the spot! Nothing better than beer during the day!

This is great!

I know, right?

I got some candy.

You want some too, Iorin?

I don't want any.

Weird.

Those are just "treats" to bribe you, you know.

You're eating that despite Mitsuki making lunch.

I'm going to eat the lunch, too.

Nagi likes parties, doesn't he?

Parties?

Is it because he has blond hair?

That's so stereotypical.

Wonder if everyone went somewhere?

It doesn't seem like they did.

How do you know? You psychic?

Of course not.

I asked them to let me know if they were going somewhere far.

Yes!

Whoa! Did you see yours?

King Pudding and rabbits.

It's Usamimi Friends.

Oh man, I gotta get a picture.

Twenty three, twenty four,

twenty five, twenty six... Shit!

Mission complete.

No way! Aren't you trying to get a six pack?

Yes.

Our battle of who's the sexiest has only just begun... Oh!

Oh no! It's already this late?!

We haven't even done anything!

Actually, we've done quite a bit.

Cleaning, laundry, practicing...

It's our day off!

orz...

I've been excited since yesterday, too, you know.

Huh?

I even woke up early.

Not like I did anything special but it's been a while since I've relaxed.

Days like this are nice, too.

I see. So that's the so-called Japanese culture of "wabi-sabi".

Hmm, maybe?

OK.

Let's get that six pack.

-What?! -Show me what you've got!

One, two, three... Oh, break.

You give up too quickly.

I'll join in!

I can't muster up any energy. I'm so hungry.

Nagi, there's something we could do!

What?

Really?

Come on! Come to me!

Yes! Keep going! Aw, man. One more try!

You're gonna play again?

Well, Nagi is down in the dumps, after all.

I mean, Nagi really cares about us, doesn't he?

He's always the one asking if we want to do something together.

There are a lot of times I think things are fun because he's around.

He can act a bit crazy but he's more perceptive than you think.

Really?

It's like he's perceptively crazy. He has come through for us a lot.

It's over...

-But you're so close. -I'm out of money.

-Iorin... -Let's win this and head home.

Yeah!

Can you get that for me? I'm busy with this.

It's Mikky.

Hello?

What? Iorin?

He's playing games in the arcade.

Quit saying things how they aren't!

Eyes front and center!

What? Shopping?

Scallions?

Oh!

Nagi, quit playing around.

-Red bean paste? -Ah, that's mine.

-You might have a screw loose. -It's gonna be like dessert!

Make something normal, too. You finished up over there?

Ha! Take a look at this.

-You're a natural. -Amazing Tama.

-Proud of you! -Yama-san! Get your hand off me!

I'm going to take a picture, everyone!

- Magical... - Cocona!

Looks like everyone's having a good time.

Wow, that looks good.

What does?

Look.

I simply thought it looked good.

"Yamato: Wanna join?"

And now for our dumpling party!

Let's eat!

It's delicious!

Nothing goes better with dumplings than beer!

Yeah!

The red bean paste ones are good. Have some too, Iori.

I'm fine.

And next is...

This is so red. Is this So-chan's?

Wah! It's so red!

- Do you want some, too? - Cut it out. Seriously!

Oh! Having fun here?

Have some too, Banri!

Did you have some?

Yes I did!

Just don't go overboard.

Guess it's a bit too late.

Yum! The dumplings are delicious.

-Whose did you eat? -Mine!

The secret ingredient is our love for manager.

I want to try Nagi's dumplings, too.

Please.

Thanks.

Oh? Could it be TRIGGER?

I'll get the door!

You stay here, So-chan.

I'll go.

-Huh? -I'm not the soba guy!

-Please come in. -Thank you.

Here, for you.

Thank you so much.

Tenn!

Evening.

-Come on in! -Glad you guys could make it.

-It's TRIGGER! -Hey.

This looks like a blast.

-Nagi. -Oh?

Here's a present.

What?!

A limited edition Cocona! Where'd you get this?

Got it in the arcade with Iorin.

Oh! I don't know how to thank you. How should I express my feelings...

Normally is fine. Did you do something today, Nagi?

We had lunch and did some training.

That's not "having fun".

Yes. But...

Huh?

It was a good day off.

♪

For more infomation >> Ep. 6: PARTY TIME TOGETHER | 後編 | アイドリッシュセブン Vibrato - Duration: 11:23.

-------------------------------------------

🎀Заколки цветочки из репсовых лент 2,5 см МК Канзаши 🎀 Hair clips of ribbon 2,5 cm 🎀 Laço flor - Duration: 10:38.

We need 6 pieces grosgrain ribbons of 2.5*9 cm

These flowers are made the same, but from pieces of ribbons of different lengths

For the blue color I took pieces of ribbons of 10 cm

For the pink color I took pieces of ribbons of 9 cm

Sew all 6 petals, be sure to grab the corner laid

Do 6 punctures with a needle

We close the thread in the ring and pull together

Thanks for watching! Put likes, subscribe to the channel and press the bell!

For more infomation >> 🎀Заколки цветочки из репсовых лент 2,5 см МК Канзаши 🎀 Hair clips of ribbon 2,5 cm 🎀 Laço flor - Duration: 10:38.

-------------------------------------------

Vera dimensione e forma della Terra - Duration: 19:02.

For more infomation >> Vera dimensione e forma della Terra - Duration: 19:02.

-------------------------------------------

膠囊起泡史萊姆！一壓配件就出來了～ [YYTV／許洋洋愛唱歌] - Duration: 4:04.

For more infomation >> 膠囊起泡史萊姆！一壓配件就出來了～ [YYTV／許洋洋愛唱歌] - Duration: 4:04.

-------------------------------------------

Bye Bye || Gacha Life - Duration: 0:52.

GUESS WHO CAME BACK BITCHES?!

wow, kim really hates me because she doesn't want me to add subtitles ;c

OWO!?

AYYOOOO,, ;D

wh- who the flipflop is this handsome looking boi?

jesus ch-

why he cryin'?

*SANS HAS JOINED THE CHAT*

OH GOD NO-

JGRTH-

"You wanna have a bad time?"

yeah, me neither.

I FEEL DESPAIR.

I SHIP SHUICHI X KOKICHI

FIGHT ME HATERS.

hey guys, why is a building called "buliding" when it's already build?

answer: idk. you guys guess

OH MAN, I SUREEE LOVE EDGY MEMES.

chuck-e-cheese is quaking.

WHERE'S THE LAMB SAUCE!?

IT'S RAW

IT'S BLAND.

PLS SUB TO PEWDIEPIE.

I'M RUNNING OUT OF IDEAS HERE, HELP.

wait- whats 9+10?

first one to answer gets a cookie. B)

okay im like, dead inside rn.

IM ALREADY TRACER.

LVL 100: SMUG BOSS.

THAT'S HOW MAFIA WORKS.

For more infomation >> Bye Bye || Gacha Life - Duration: 0:52.

-------------------------------------------

Minecraft 幸運方塊【空島床戰】😂 !! 共⭐58種⭐超神裝備【神巧夢幻隊伍】!! 全字幕 - Duration: 21:30.

For more infomation >> Minecraft 幸運方塊【空島床戰】😂 !! 共⭐58種⭐超神裝備【神巧夢幻隊伍】!! 全字幕 - Duration: 21:30.

-------------------------------------------

送雍正皇帝對聯喻韓國瑜選總統？天文宮：自行體會- 热门新闻 - Duration: 2:50.

國民黨總統提名人選未定，

藍營不少人拱高雄市長韓國瑜參選，

而韓國瑜今天上午到永安區天文宮參加活動，

管委會準備一幅雍正掛在養心殿的對聯「惟以一人治天下、豈為天下奉一人」贈送韓國瑜，

引發外界聯想是否有「天命」？天文宮管委會表示，

這幅對聯是去年11月8 日接獲神明指示寫下要送給韓國瑜，

當時韓尚未當選，

至於是否有特別的意義，

廟方則請大家自行體會。

天文宮今天上午舉行書法比賽，

韓國瑜也到場參加，

管委會常務監察蘇國泰表示，

早在去年高市長選戰還未開打前，

永安天文宮神明就指示管委會邀請韓國瑜到訪，

當時韓只是高市黨部主委，

到了11月8 日，

主神徐府千歲透過乩身代言寫下「惟以一人治天下豈為天下奉一人」兩句話，

此為清朝雍正皇帝掛在養心殿的對聯，

並指示管委會贈送給韓國瑜。

「惟以一人治天下、豈為天下奉一人」源自唐代，

代筆的書法家淡大教授張炳煌表示，

字面上意思是說，

皇帝一個人是來治理天下的，

豈要讓天下來侍奉皇帝一人，

天下的解讀很廣，

高雄當然也是一個天下，

一定要有人好好來治理才會繁盛，

不能單憑一人，

需要大家同心協力來治理，

大家共同來努力。

韓國瑜今天到天文宮後，

受到民眾熱烈歡迎，

廟方也在韓上香後，

將對聯送給韓國瑜，

媒體追問此舉是否把韓比喻成雍正？韓國瑜笑而不答，

只說「天下」可以改成「高雄」，

而政治人物要念茲在茲，

重視人民的生活。

For more infomation >> 送雍正皇帝對聯喻韓國瑜選總統？天文宮：自行體會- 热门新闻 - Duration: 2:50.

-------------------------------------------

預警機誕生至今75年，從未被擊落過，這裡的奧秘是什麼？- 军事新闻 - Duration: 5:28.

預警機作為空軍戰鬥力的倍增利器

可以在幾百公里之外發現、

識別、

並跟踪多達上百個敵機目標

因此預警機能夠在現代化戰爭中發揮至關重要的作用。

例如1982 年6月9日

以色列與敘利亞在貝卡谷地展開了一場"中東歷史上規模最大的空戰"

以色列兩架E -2C"鷹眼"預警機在戰場上空監視

將敘軍戰機的型號、

速度、

高度、

航向等數據傳輸給以軍的 F-15和 F-16戰機

連續擊落81 架敘軍戰機

以軍毫髮無損

連續被擊落8 1架飛機

打出了81: 0的戰績

這在現代空戰史上是前所未有的。

從194 4年美國通用公司將A N/APS -20型雷達（S波段）安裝在格魯曼公司的 TBM-3 W"復仇者 "艦載魚雷機上

從而誕生世界第一架艦載預警機AD -3W

至今已有75 年

主要軍事強國先後服役了二百多架各種型號的預警機。

但從沒有一架預警機被擊落過

這裡的奧秘是什麼呢？實際上

如果要咬文嚼字

歷史上還真的有過預警機被擊落的案例

例如在196 9年

美空軍的一架 EC-12 1電子偵察 /預警機從日本基地起飛赴半島北方的外圍海域執行戰略偵察任務

在咸鏡北道的日本海公海上空進行偵察飛行。

由於當天正值金日城的誕辰日

半島北方空軍出動兩架米格-17戰鬥機

採取秘密低空出航

突然躍起攻擊的戰術

將這架EC- 121偵察 /預警機當場擊落

墜毀在距離朝鮮海岸線9 0海裡的公海

當時機上共有機組乘員3 1人

全部喪生。

美國E- 2C預警機也有被"擊落"的記錄

不過是美國人自己幹的。

1991年 7月8日

一架美國海軍的E-2C 預警機在飛行過程中突發大火

機上的5名空勤人員被迫跳傘逃生。

而起火的E- 2C預警機仍然在繼續飛行

出於安全和保密的考慮

美國派遣F/ A-18大黃蜂艦載機擊落了這架 E-2C預警機。

以上的案例都具有一定的特性

權當聽故事了。

在理論上

預警機是難以擊落的

這主要和預警機的作戰性能和任務特性有關。

現代的專業預警機都往往在機背背負了一個大雷達

對數百公里內的廣大空域瞭如指掌。

對方戰機一進入到雷達有效探測距離內就會被發現

更不用談擊落了。

以E-2 C預警機為例

一般在900 0米的高空進行巡邏

飛機航線是一條呈8字形的一百多公里的長條帶狀。

E-2C預警機搭載的遠程搜索雷達的探測距離達到了4 80千米

最多可同時引導45架戰機進行空戰。

最新的E-2 D"先進鷹眼"預警機換裝了採用 UHF頻段的APY9 有源相控陣雷達

能夠監視探測的空域面積比E-2C 多出了2.

5倍

特別是UHF 頻段還具備反隱身能力。

美國的美國的E-3 A"望樓" 預警機由波音707- 320B民航機改裝而成

能在1萬米以上高度連續飛行8~1 0小時

有效探測半徑為370公里

能同時識別和顯示600 個空中目標

引導100架殲擊機進行攔截。

預警機在發現有敵機接近後

可以指揮其他戰機前往攔截

還可以自己提前離開相關威脅區域。

只要預警機自己不作死

不進入對方防空導彈的射程內

就很難被擊落。

要想有效擊落預警機的辦法並不多

第四代隱身戰鬥機偷偷接近預警機

發射導彈將其擊落是個好主意

但隨著預警機雷達性能的提升

未來將會對隱身戰機進行一定的克制。

另外一種方法就是使用超遠程空空導彈攻擊預警機。

例如俄羅斯曾計劃研發射程超過40 0千米的K S-172 超遠程空空導彈。

中國也正在研發新型遠程空空導彈

針對目標直指預警機等高價值目標。

For more infomation >> 預警機誕生至今75年，從未被擊落過，這裡的奧秘是什麼？- 军事新闻 - Duration: 5:28.

-------------------------------------------

Banu Avar ile 2019 Türkiye Gerçekleri - Survivor - Medya Basın - Belgesel - Duration: 15:25.

For more infomation >> Banu Avar ile 2019 Türkiye Gerçekleri - Survivor - Medya Basın - Belgesel - Duration: 15:25.

-------------------------------------------

ΒΟΛΤΑ ΜΕ ΤΟ ΠΙΟ ΤΡΕΛΟ HONDA INTEGRA TYPE R DC2 JAPAN SPEC (GREEK SUBS) - Duration: 11:56.

For more infomation >> ΒΟΛΤΑ ΜΕ ΤΟ ΠΙΟ ΤΡΕΛΟ HONDA INTEGRA TYPE R DC2 JAPAN SPEC (GREEK SUBS) - Duration: 11:56.

-------------------------------------------

What is a Security Vulnerability? - Duration: 16:08.