WEBVTT

00:00:00.000 --> 00:00:17.420
35C3 Intro music

00:00:17.420 --> 00:00:19.649
Herald:
Welcome to the next talk

00:00:19.649 --> 00:00:22.689
"You Can Hack Everything - 
Just Don't Get Caught".

00:00:22.689 --> 00:00:24.590
Quick survey:
How many of you

00:00:24.590 --> 00:00:26.710
have found a security loophole

00:00:26.710 --> 00:00:27.940
and thought:
"Oh shit, if I tell someone

00:00:27.940 --> 00:00:31.530
then I am in deep
that could cause problems?"

00:00:31.530 --> 00:00:34.100
Put your hands up
Who does that apply to?

00:00:34.100 --> 00:00:36.910
Interjection from the audience: Camera off
Laughter

00:00:36.910 --> 00:00:40.489
Herald: Another question: How many of you 
would like to find a security

00:00:40.489 --> 00:00:45.100
loophole, hands up 
Laughter

00:00:45.100 --> 00:00:48.769
Alright, I hereby declare you all 
concerned parties and this talk

00:00:48.769 --> 00:00:52.830
relevant for you, because many hackers
are at some point in their career

00:00:52.830 --> 00:00:57.249
confronted with this problem or 
are in the situation where they

00:00:57.249 --> 00:01:01.000
have found something or got into
something or ran into it

00:01:01.000 --> 00:01:04.709
and know that if the people affected
in this archictecture that they are inside

00:01:04.709 --> 00:01:08.540
get wind of it, then there will be trouble
it will really stir up discontent.

00:01:08.540 --> 00:01:12.070
And this talk is about
which worst case scenarios could be

00:01:12.070 --> 00:01:16.310
in store for you, how to deal with it and 
best of all, how to not let yourself

00:01:16.310 --> 00:01:20.350
get caught. And our speakers, 
Linus Neumann und Thorsten Schröder, are

00:01:20.350 --> 00:01:24.290
experts in IT security. You probably
know them from the PC-Wahl hack.

00:01:24.290 --> 00:01:28.800
They found security vulnerabilities 
in the Bundestag voting software,

00:01:28.800 --> 00:01:32.261
it's a very recommendable episode.

00:01:32.261 --> 00:01:35.101
Alright, I'm talking rubbish, 
nevertheless I recommend the

00:01:35.121 --> 00:01:37.080
logbuch-netzpolitik.org episode.

00:01:37.080 --> 00:01:39.920
It's really worth a listen,
especially number 228

00:01:39.920 --> 00:01:43.630
"Interessierte Bürger". Now give
a round of applause for Linus

00:01:43.630 --> 00:01:50.360
Neumann und Thorsten Schröder, have fun
Applause

00:01:50.360 --> 00:01:54.140
Linus Neumann: Thank you all
for being here. Thank you very much for

00:01:54.140 --> 00:01:57.690
the warm welcome. I also liked how
a few of you have already done your

00:01:57.690 --> 00:02:01.880
first OpSec fail and outed yourself
at the beginning. We have never

00:02:01.880 --> 00:02:05.650
hacked anything, we have nothing
to do with it. Our short talk is about

00:02:05.650 --> 00:02:10.630
the topic everyone is talking about,
hacking. We're seeing over the years that

00:02:10.630 --> 00:02:15.690
many fine, young hackers are ending up
in prison and there are a lot of risks

00:02:15.690 --> 00:02:20.441
that come with hacking as a sport
and spoil its enjoyment

00:02:20.441 --> 00:02:24.290
for example something like house searches
broken down doors, high legal fees,

00:02:24.290 --> 00:02:31.830
this doesn't have to be. It's worth maybe
thinking about how you can continue

00:02:31.830 --> 00:02:39.760
as free agents. 
Because we know that hackers are

00:02:39.760 --> 00:02:43.900
free agents, like artists, that get up
in the morning and when they

00:02:43.900 --> 00:02:48.960
are in the mood, they sit down 
and paint their pictures. And we want

NOTE Paragraph

00:02:48.960 --> 00:02:56.580
you to be able to paint a lot more 
beautiful pictures. The key: OpSec

00:02:56.580 --> 00:02:59.530
And that's what we want to 
talk to you about today.

00:02:59.530 --> 00:03:02.610
Opsec is actually
easy to summarise,

00:03:02.610 --> 00:03:12.740
here by the way...
beautiful, beautiful...

00:03:12.740 --> 00:03:14.480
beautiful teaching material again

00:03:14.480 --> 00:03:24.099
from Russia, it seems to be on their minds
for some reason. Let's start with a

00:03:24.099 --> 00:03:30.880
perfectly normal, the first computer worm:
Pride comes before a fall,

00:03:30.880 --> 00:03:36.291
that is one of the most important 
teachings in your operational security

00:03:36.291 --> 00:03:41.630
Because showng off and cockiness
will get you into trouble. And we have

00:03:41.630 --> 00:03:47.100
known this since computer worms have
existed. The first big computer worm

00:03:47.100 --> 00:03:51.579
that became so international
and incapacitated half of the internet

00:03:51.579 --> 00:03:56.879
was the Morris worm, 
that exploited weak points in

00:03:56.879 --> 00:04:02.629
Sendmail, Finger, Remote SH and a few
weak passwords, in order to

00:04:02.629 --> 00:04:07.050
spread itself, so a computer worm.
This lead to the internet outage

00:04:07.050 --> 00:04:12.840
of 1988. And you're probably asking
yourselves: Why is the worm called

00:04:12.840 --> 00:04:21.440
the Morris worm? Well, because the 
creator was very proud of his worm

00:04:21.440 --> 00:04:26.120
and liked telling everybody how it worked.
At one point he was even

00:04:26.120 --> 00:04:31.790
at Harvard University, standing on the
table, preaching about how his worm

00:04:31.790 --> 00:04:36.320
worked in full detail.
It was also obvious that

00:04:36.320 --> 00:04:40.639
the original infection started there,
he told everybody about it.

00:04:40.639 --> 00:04:45.320
At one point someone told a journalist
and he had to admit it. He got the

00:04:45.320 --> 00:04:49.630
worm to be named after him to this day.
But also he got

00:04:49.630 --> 00:04:56.630
3 years probation, 400 hours social work
and a 10,000 dollar fine, without

00:04:56.630 --> 00:05:01.930
his need for admiration, he could have
possibly been spared. But

00:05:01.930 --> 00:05:05.250
not only hackers have a small problem
with operational security and

00:05:05.250 --> 00:05:09.840
a need for admiration, but also
bank robbers. And here we have a

00:05:09.840 --> 00:05:15.160
young man, who has robbed a bank.
And what do you do when you have

00:05:15.160 --> 00:05:19.180
experienced something exciting, and raked
in a lot of money: a selfie of course.

00:05:19.180 --> 00:05:25.920
Yeah. If that's not enough, you can also 
take another selfie.

00:05:25.920 --> 00:05:27.520
Laughter

00:05:27.520 --> 00:05:36.880
Or the accomplice. And also food. And then
you quickly go to Instajail. And

00:05:36.880 --> 00:05:41.610
you might think, that was a one off,
no, you think: OK, nobody can actually

00:05:41.610 --> 00:05:46.250
be that stupid, but when you
look on the internet, you really don't

00:05:46.250 --> 00:05:52.869
need long to find experts
posting pictures like this. And

00:05:52.869 --> 00:05:56.470
it always ends the same way: Here is 
the young man with, he must have

00:05:56.470 --> 00:06:00.639
really awful teeth, they're already
all gold, they were convicted,

00:06:00.639 --> 00:06:07.010
because they bragged about 
having money on Facebook.

00:06:07.010 --> 00:06:11.899
Now, if we look at the pioneers
of car hacking, we have in principle

00:06:11.899 --> 00:06:18.190
the same phenomenon. It must be added
that the first ventures in car hacking

00:06:18.190 --> 00:06:27.220
were more of an analogue nature
and more brute force. And the pioneers in

00:06:27.220 --> 00:06:32.750
this area were also these two 
young men, who managed a really big hack,

00:06:32.750 --> 00:06:38.479
that is breaking in the windscreen.
stole 5,000 dollars and an ipad

00:06:38.479 --> 00:06:44.171
from a truck.
And what is the first thing you do, when

00:06:44.171 --> 00:06:49.810
you have an iPad: Well, first go to 
Burger King, because they have WiFi.

00:06:51.494 --> 00:06:55.640
And play around a bit with the iPad.
And then they noticed: Hey, awesome

00:06:55.640 --> 00:06:59.909
you can make videos with this.

00:06:59.909 --> 00:07:06.209
[Video is played]

00:07:06.209 --> 00:07:18.900
... This is my brother Dylan... This...
good night's hussle

00:07:18.900 --> 00:07:24.639
L: And because they had connected 
to the WiFi in Burger King with this

00:07:24.639 --> 00:07:29.310
stolen iPad, that happened, 
what had to happen...

00:07:29.310 --> 00:07:33.950
Laughter

00:07:33.950 --> 00:07:39.310
L: And the owner of the vehicle then

00:07:39.310 --> 00:07:44.450
handed the video over to the police 
and the police said, they're

00:07:44.450 --> 00:07:48.021
actually already wanted.
And they took care of the young men.

00:07:48.021 --> 00:07:52.780
Thorsten Schröder:
But let's get back

00:07:52.780 --> 00:07:58.160
to the computer hacking corner, that
we actually wanted to talk about today,

00:07:58.160 --> 00:08:02.210
now we have taken a short trip to 
the analogue world. What could

00:08:02.210 --> 00:08:09.319
go wrong if you, as
an interested surfer, played around

00:08:09.319 --> 00:08:14.659
on online shopping portals.
Next you maybe want to

00:08:14.659 --> 00:08:18.950
aquire some wares, then you start
clicking around in the online shop.

00:08:18.950 --> 00:08:24.510
Suddenly you slip and click 
the wrong thing, that happens sometimes,

00:08:24.510 --> 00:08:28.760
you accidentally somehow
enter a wrong signal,

00:08:28.760 --> 00:08:35.578
and what's important here is: We are
talking about a threat level for

00:08:35.578 --> 00:08:39.840
the hacker,
so when you are on the online shopping

00:08:39.840 --> 00:08:43.789
portal and there
your mouse accidentally slips, then

00:08:43.789 --> 00:08:48.510
you have a certain threat scenario.
It of course increases if you have

00:08:48.510 --> 00:08:51.700
actually entered some strange symbols

00:08:51.700 --> 00:08:52.420
You're there

00:08:52.420 --> 00:08:55.460
probably without an anonymisation service
because you wanted to

00:08:55.460 --> 00:09:01.540
buy something. And now you think: Hmm,
I like playing and am

00:09:01.540 --> 00:09:06.640
curious, I'll activate Tor or
something, and will visit this website

00:09:06.640 --> 00:09:12.140
later with an anonymisation service.
And yes, over time

00:09:12.140 --> 00:09:17.450
you might accidentally find 
cross site scripting, the

00:09:17.450 --> 00:09:22.680
threat level grows gradually, but
you've got Tor at the start. The

00:09:22.680 --> 00:09:27.881
threat level continues to grow,
when perhaps you have found a

00:09:27.881 --> 00:09:32.140
somewhat more critical weakness like
an SQL injection. And it continues to grow

00:09:32.140 --> 00:09:37.850
when you have perhaps also found a
remote code execution, then

00:09:37.850 --> 00:09:41.530
we're already pretty high. So if you 
got caught now, it would be pretty

00:09:41.530 --> 00:09:45.340
bad, because you've already proved
that you didn't directly go to the portal

00:09:45.340 --> 00:09:49.310
after having found an xss exploit
or another trivial weak point

00:09:49.310 --> 00:09:53.831
and told them about it.
Well, what happens then, when you

00:09:53.831 --> 00:09:57.940
continue rummaging around. Depends
what you're looking for. Maybe you also

00:09:57.940 --> 00:10:03.140
find a few credit cards. Now we're on
a really high threat level,

00:10:03.140 --> 00:10:10.000
and it quickly sinks because
...it becomes more relaxed.

00:10:10.000 --> 00:10:14.880
You don't need to be scared anymore
about ever getting caught again

00:10:14.880 --> 00:10:20.550
for this hack. Yes, 
why would anyone get caught there?

00:10:20.550 --> 00:10:26.080
Because I thought of OpSec much too
late. At the moment where I

00:10:26.080 --> 00:10:30.320
slipped with the mouse, I should have
basically already had an anonymisation

00:10:30.320 --> 00:10:35.450
service, some kind of Tor service
or something, right at the start,

00:10:35.450 --> 00:10:40.920
because at the moment where the 
portal provider realises, that something

00:10:40.920 --> 00:10:47.669
happened, they'll just look and see:
Alright, we'll follow this back,

00:10:47.669 --> 00:10:51.320
it's a Tor session, bad, 
but at some point they come across

00:10:51.320 --> 00:10:56.380
this case where you said "oops". And then
they will find you.

00:10:57.700 --> 00:11:01.990
L: It actually happens quite a lot that
people are like:

00:11:01.990 --> 00:11:06.230
Oh, look, I found something
and now I'll go to Tor

00:11:06.230 --> 00:11:10.650
No, guys, it's too late,
you have to do it beforehand.

00:11:10.650 --> 00:11:14.640
T: Sorry, if you notice something
like that, you can of course

00:11:14.640 --> 00:11:18.149
think about what the data protection
regulation looks like, then you can

00:11:18.149 --> 00:11:22.450
look at what kind of data protection
guidelines they have, some companies

00:11:22.450 --> 00:11:25.960
tell you how long they keep your 
logfiles

00:11:25.960 --> 00:11:28.110


00:11:28.110 --> 00:11:30.750


00:11:30.750 --> 00:11:34.010


00:11:34.010 --> 00:11:36.760


00:11:36.760 --> 00:11:42.700


00:11:42.700 --> 00:11:47.599


00:11:47.599 --> 00:11:51.540


00:11:51.540 --> 00:11:57.600


00:11:57.600 --> 00:12:01.829


00:12:01.829 --> 00:12:05.720


00:12:05.720 --> 00:12:11.960


00:12:11.960 --> 00:12:15.830


00:12:15.830 --> 00:12:19.760


00:12:19.760 --> 00:12:23.030


00:12:23.030 --> 00:12:26.490


00:12:26.490 --> 00:12:30.340


00:12:30.340 --> 00:12:33.500


00:12:33.500 --> 00:12:36.150


00:12:36.150 --> 00:12:39.839


00:12:39.839 --> 00:12:43.870


00:12:43.870 --> 00:12:48.000


00:12:48.000 --> 00:12:51.389


00:12:51.389 --> 00:12:54.500


00:12:54.500 --> 00:13:00.100


00:13:00.100 --> 00:13:06.830


00:13:06.830 --> 00:13:11.120


00:13:11.120 --> 00:13:16.730


00:13:16.730 --> 00:13:21.070


00:13:21.070 --> 00:13:26.570


00:13:26.570 --> 00:13:31.040


00:13:31.040 --> 00:13:36.660


00:13:36.660 --> 00:13:43.690


00:13:43.690 --> 00:13:46.750


00:13:46.750 --> 00:13:50.579


00:13:50.579 --> 00:13:54.850


00:13:54.850 --> 00:13:58.689


00:13:58.689 --> 00:14:03.580


00:14:03.580 --> 00:14:10.053


00:14:10.053 --> 00:14:14.029


00:14:14.029 --> 00:14:19.740


00:14:19.740 --> 00:14:27.640


00:14:27.640 --> 00:14:32.410


00:14:32.410 --> 00:14:38.970


00:14:38.970 --> 00:14:44.500


00:14:44.500 --> 00:14:49.829


00:14:49.829 --> 00:14:52.760


00:14:52.760 --> 00:14:57.519


00:14:57.519 --> 00:15:03.470


00:15:03.470 --> 00:15:08.519


00:15:08.519 --> 00:15:14.540


00:15:14.540 --> 00:15:17.870


00:15:17.870 --> 00:15:20.910


00:15:20.910 --> 00:15:24.830


00:15:24.830 --> 00:15:28.399


00:15:28.399 --> 00:15:32.250


00:15:32.250 --> 00:15:36.419


00:15:36.419 --> 00:15:40.520


00:15:40.520 --> 00:15:51.420


00:15:51.420 --> 00:15:54.300


00:15:54.300 --> 00:16:03.600


00:16:03.600 --> 00:16:07.949


00:16:07.949 --> 00:16:17.430


00:16:17.430 --> 00:16:22.960


00:16:22.960 --> 00:16:27.160


00:16:27.160 --> 00:16:34.649


00:16:34.649 --> 00:16:42.910


00:16:42.910 --> 00:16:46.670


00:16:46.670 --> 00:16:50.481


00:16:50.481 --> 00:16:58.699


00:16:58.699 --> 00:17:04.400


00:17:04.400 --> 00:17:11.630


00:17:11.630 --> 00:17:15.368


00:17:15.368 --> 00:17:19.829


00:17:19.829 --> 00:17:22.409


00:17:22.409 --> 00:17:24.179


00:18:11.339 --> 00:18:20.620


00:18:20.620 --> 00:18:25.899


00:18:25.899 --> 00:18:31.059


00:18:31.059 --> 00:18:36.659


00:18:36.659 --> 00:18:40.730


00:18:40.730 --> 00:18:49.159


00:18:49.159 --> 00:18:55.689


00:18:55.689 --> 00:19:00.210


00:19:00.210 --> 00:19:03.600


00:19:03.600 --> 00:19:07.949


00:19:07.949 --> 00:19:12.130


00:19:12.130 --> 00:19:19.820


00:19:19.820 --> 00:19:24.099


00:19:24.099 --> 00:19:28.149


00:19:28.149 --> 00:19:31.830


00:19:31.830 --> 00:19:37.460


00:19:37.460 --> 00:19:43.600


00:19:43.600 --> 00:19:48.509


00:19:48.509 --> 00:19:56.260


00:19:56.260 --> 00:20:02.650


00:20:02.650 --> 00:20:06.219


00:20:06.219 --> 00:20:09.560


00:20:09.560 --> 00:20:16.940


00:20:16.940 --> 00:20:21.100


00:20:21.100 --> 00:20:24.880


00:20:24.880 --> 00:20:31.169


00:20:31.169 --> 00:20:35.149


00:20:35.149 --> 00:20:41.850


00:20:41.850 --> 00:20:46.049


00:20:46.049 --> 00:20:49.859


00:20:49.859 --> 00:20:53.661


00:20:53.661 --> 00:20:57.799


00:20:57.799 --> 00:21:03.120


00:21:03.120 --> 00:21:06.999


00:21:06.999 --> 00:21:11.729


00:21:11.729 --> 00:21:16.439


00:21:16.439 --> 00:21:20.649


00:21:20.649 --> 00:21:23.659


00:21:23.659 --> 00:21:26.369


00:21:26.369 --> 00:21:30.199


00:21:30.199 --> 00:21:35.389


00:21:35.389 --> 00:21:40.769


00:21:40.769 --> 00:21:46.970


00:21:46.970 --> 00:21:52.349


00:21:52.349 --> 00:21:56.410


00:21:56.410 --> 00:22:00.229


00:22:00.229 --> 00:22:05.019


00:22:05.019 --> 00:22:07.519


00:22:07.519 --> 00:22:11.379


00:22:11.379 --> 00:22:15.009


00:22:15.009 --> 00:22:19.519


00:22:19.519 --> 00:22:23.170


00:22:23.170 --> 00:22:28.929


00:22:28.929 --> 00:22:32.339


00:22:32.339 --> 00:22:36.369


00:22:36.369 --> 00:22:39.659


00:22:39.659 --> 00:22:42.310


00:22:42.310 --> 00:22:45.989


00:22:45.989 --> 00:22:52.009


00:22:52.009 --> 00:22:56.249


00:22:56.249 --> 00:23:00.190


00:23:00.190 --> 00:23:03.540


00:23:03.540 --> 00:23:07.249


00:23:07.249 --> 00:23:10.510


00:23:10.510 --> 00:23:14.820


00:23:14.820 --> 00:23:18.859


00:23:18.859 --> 00:23:24.879


00:23:24.879 --> 00:23:28.850


00:23:28.850 --> 00:23:34.259


00:23:34.259 --> 00:23:38.080


00:23:38.080 --> 00:23:41.869


00:23:41.869 --> 00:23:47.059


00:23:47.059 --> 00:23:51.330


00:23:51.330 --> 00:23:55.419


00:23:55.419 --> 00:24:02.760


00:24:02.760 --> 00:24:06.999


00:24:06.999 --> 00:24:10.259


00:24:10.259 --> 00:24:15.229


00:24:15.229 --> 00:24:20.479


00:24:20.479 --> 00:24:27.090


00:24:27.090 --> 00:24:34.139


00:24:34.139 --> 00:24:41.830


00:24:41.830 --> 00:24:45.269


00:24:45.269 --> 00:24:50.760


00:24:50.760 --> 00:24:52.779


00:24:52.779 --> 00:24:59.649


00:24:59.649 --> 00:25:04.639


00:25:04.639 --> 00:25:14.820


00:25:14.820 --> 00:25:19.859


00:25:19.859 --> 00:25:25.729


00:25:25.729 --> 00:25:30.719


00:25:30.719 --> 00:25:33.620


00:25:33.620 --> 00:25:39.969


00:25:39.969 --> 00:25:45.809


00:25:45.809 --> 00:25:52.259


00:25:52.259 --> 00:25:55.720


00:25:55.720 --> 00:25:59.949


00:25:59.949 --> 00:26:03.929


00:26:03.929 --> 00:26:08.149


00:26:08.149 --> 00:26:15.001


00:26:15.001 --> 00:26:20.129


00:26:20.129 --> 00:26:29.399


00:26:29.399 --> 00:26:34.719


00:26:34.719 --> 00:26:40.100


00:26:40.100 --> 00:26:46.140


00:26:46.140 --> 00:26:52.070


00:26:52.070 --> 00:26:57.929


00:26:57.929 --> 00:27:02.039


00:27:02.039 --> 00:27:07.809


00:27:07.809 --> 00:27:13.100


00:27:13.100 --> 00:27:18.910


00:27:18.910 --> 00:27:24.800


00:27:24.800 --> 00:27:28.749


00:27:28.749 --> 00:27:34.119


00:27:34.119 --> 00:27:37.140


00:27:37.140 --> 00:27:41.849


00:27:41.849 --> 00:27:45.169


00:27:45.169 --> 00:27:48.139


00:27:48.139 --> 00:27:53.099


00:27:53.099 --> 00:27:56.410


00:27:56.410 --> 00:28:07.170


00:28:07.170 --> 00:28:11.400


00:28:11.400 --> 00:28:15.210


00:28:15.210 --> 00:28:20.369


00:28:20.369 --> 00:28:24.479


00:28:24.479 --> 00:28:28.880


00:28:28.880 --> 00:28:34.029


00:28:34.029 --> 00:28:38.600


00:28:38.600 --> 00:28:42.409


00:28:42.409 --> 00:28:46.179


00:28:46.179 --> 00:28:52.619


00:28:52.619 --> 00:28:57.769


00:28:57.769 --> 00:29:02.630


00:29:02.630 --> 00:29:07.119


00:29:07.119 --> 00:29:11.470


00:29:11.470 --> 00:29:16.589


00:29:16.589 --> 00:29:21.649


00:29:21.649 --> 00:29:28.400


00:29:28.400 --> 00:29:34.539


00:29:34.539 --> 00:29:41.800


00:29:41.800 --> 00:29:44.699


00:29:44.699 --> 00:29:49.209


00:29:49.209 --> 00:29:53.129


00:29:53.129 --> 00:29:55.799


00:29:55.799 --> 00:29:59.340


00:29:59.340 --> 00:30:05.869


00:30:05.869 --> 00:30:09.709


00:30:09.709 --> 00:30:16.499


00:30:16.499 --> 00:30:20.889


00:30:20.889 --> 00:30:25.919


00:30:25.919 --> 00:30:29.589


00:30:29.589 --> 00:30:34.500


00:30:34.500 --> 00:30:39.919


00:30:39.919 --> 00:30:43.259


00:30:43.259 --> 00:30:47.070


00:30:47.070 --> 00:30:51.149


00:30:51.149 --> 00:30:57.330


00:30:57.330 --> 00:31:02.919


00:31:02.919 --> 00:31:10.000


00:31:10.000 --> 00:31:14.869


00:31:14.869 --> 00:31:20.039


00:31:20.039 --> 00:31:24.289


00:31:24.289 --> 00:31:29.129


00:31:29.129 --> 00:31:33.119


00:31:33.119 --> 00:31:38.899


00:31:38.899 --> 00:31:45.999


00:31:45.999 --> 00:31:50.719


00:31:50.719 --> 00:31:54.529


00:31:54.529 --> 00:32:00.070


00:32:00.070 --> 00:32:04.580


00:32:04.580 --> 00:32:08.039


00:32:08.039 --> 00:32:12.879


00:32:12.879 --> 00:32:16.559


00:32:16.559 --> 00:32:21.691


00:32:21.691 --> 00:32:28.579


00:32:28.579 --> 00:32:34.109


00:32:34.109 --> 00:32:40.040


00:32:40.040 --> 00:32:43.590


00:32:43.590 --> 00:32:47.679


00:32:47.679 --> 00:32:52.830


00:32:52.830 --> 00:32:59.610


00:32:59.610 --> 00:33:06.679


00:33:06.679 --> 00:33:10.790


00:33:10.790 --> 00:33:15.100


00:33:15.100 --> 00:33:19.260


00:33:19.260 --> 00:33:24.580


00:33:24.580 --> 00:33:29.130


00:33:29.130 --> 00:33:34.499


00:33:34.499 --> 00:33:40.019


00:33:40.019 --> 00:33:45.559


00:33:45.559 --> 00:33:52.839


00:33:52.839 --> 00:33:56.190


00:33:56.190 --> 00:34:02.569


00:34:02.569 --> 00:34:10.580


00:34:10.580 --> 00:34:15.750


00:34:15.750 --> 00:34:22.440


00:34:22.440 --> 00:34:29.460


00:34:29.460 --> 00:34:35.158


00:34:35.158 --> 00:34:38.989


00:34:38.989 --> 00:34:50.619


00:34:50.619 --> 00:34:57.279


00:34:57.279 --> 00:35:02.530


00:35:02.530 --> 00:35:07.690


00:35:07.690 --> 00:35:16.549


00:35:16.549 --> 00:35:21.171


00:35:21.171 --> 00:35:30.010


00:35:30.010 --> 00:35:34.519


00:35:34.519 --> 00:35:40.180


00:35:40.180 --> 00:35:43.779


00:35:43.779 --> 00:35:49.240


00:35:49.240 --> 00:35:52.970


00:35:52.970 --> 00:36:04.250


00:36:04.250 --> 00:36:06.650


00:36:06.650 --> 00:36:11.420


00:36:11.420 --> 00:36:13.260


00:36:13.260 --> 00:36:17.350


00:36:17.350 --> 00:36:22.629


00:36:22.629 --> 00:36:28.309


00:36:28.309 --> 00:36:31.089


00:36:31.089 --> 00:36:35.631


00:36:35.631 --> 00:36:42.520


00:36:42.520 --> 00:36:46.200


00:36:46.200 --> 00:36:49.869


00:36:49.869 --> 00:36:55.299


00:36:55.299 --> 00:36:57.660


00:36:57.660 --> 00:36:59.320


00:36:59.320 --> 00:37:04.620


00:37:04.620 --> 00:37:11.900


00:37:11.900 --> 00:37:15.579


00:37:15.579 --> 00:37:18.840


00:37:18.840 --> 00:37:22.170


00:37:22.170 --> 00:37:28.890


00:37:28.890 --> 00:37:33.220


00:37:33.220 --> 00:37:38.471


00:37:38.471 --> 00:37:44.620


00:37:44.620 --> 00:37:49.009


00:37:49.009 --> 00:37:54.760


00:37:54.760 --> 00:37:59.000


00:37:59.000 --> 00:38:06.029


00:38:06.029 --> 00:38:10.859


00:38:10.859 --> 00:38:16.779


00:38:16.779 --> 00:38:22.290


00:38:22.290 --> 00:38:25.320


00:38:25.320 --> 00:38:29.530


00:38:29.530 --> 00:38:38.330


00:38:38.330 --> 00:38:47.040


00:38:47.040 --> 00:38:52.431


00:38:52.431 --> 00:38:58.411


00:38:58.411 --> 00:39:07.820


00:39:07.820 --> 00:39:11.340


00:39:11.340 --> 00:39:15.100


00:39:15.100 --> 00:39:17.720


00:39:17.720 --> 00:39:21.029


00:39:21.029 --> 00:39:23.119


00:39:23.119 --> 00:39:27.049


00:39:27.049 --> 00:39:32.859


00:39:32.859 --> 00:39:40.849


00:39:40.849 --> 00:39:44.510


00:39:44.510 --> 00:39:52.690


00:39:52.690 --> 00:39:58.940


00:39:58.940 --> 00:40:03.890


00:40:03.890 --> 00:40:09.190


00:40:09.190 --> 00:40:13.380


00:40:13.380 --> 00:40:17.980


00:40:17.980 --> 00:40:21.169


00:40:21.169 --> 00:40:27.479


00:40:27.479 --> 00:40:31.890


00:40:31.890 --> 00:40:38.840


00:40:38.840 --> 00:40:43.650


00:40:43.650 --> 00:40:47.849


00:40:47.849 --> 00:40:51.289


00:40:51.289 --> 00:40:56.109


00:40:56.109 --> 00:41:00.710


00:41:00.710 --> 00:41:05.900


00:41:05.900 --> 00:41:11.950


00:41:11.950 --> 00:41:17.619


00:41:17.619 --> 00:41:28.010


00:41:28.010 --> 00:41:33.490


00:41:33.490 --> 00:41:39.109


00:41:39.109 --> 00:41:48.169


00:41:48.169 --> 00:41:52.690


00:41:52.690 --> 00:41:57.330


00:41:57.330 --> 00:42:01.540


00:42:01.540 --> 00:42:06.000


00:42:06.000 --> 00:42:10.990


00:42:10.990 --> 00:42:16.779


00:42:16.779 --> 00:42:24.369


00:42:24.369 --> 00:42:28.420


00:42:28.420 --> 00:42:33.980


00:42:33.980 --> 00:42:38.789


00:42:38.789 --> 00:42:43.950


00:42:43.950 --> 00:42:49.240


00:42:49.240 --> 00:42:53.640


00:42:53.640 --> 00:42:57.909


00:42:57.909 --> 00:43:01.880


00:43:01.880 --> 00:43:06.139


00:43:06.139 --> 00:43:10.180


00:43:10.180 --> 00:43:12.450


00:43:12.450 --> 00:43:15.700


00:43:15.700 --> 00:43:19.500


00:43:19.500 --> 00:43:22.610


00:43:22.610 --> 00:43:27.029


00:43:27.029 --> 00:43:30.999


00:43:30.999 --> 00:43:33.150


00:43:33.150 --> 00:43:36.960


00:43:36.960 --> 00:43:41.839


00:43:41.839 --> 00:43:47.760


00:43:47.760 --> 00:43:52.480


00:43:52.480 --> 00:43:56.020


00:43:56.020 --> 00:44:00.520


00:44:00.520 --> 00:44:06.100


00:44:06.100 --> 00:44:10.550


00:44:10.550 --> 00:44:17.380


00:44:17.380 --> 00:44:22.689


00:44:22.689 --> 00:44:28.370


00:44:28.370 --> 00:44:32.432


00:44:32.432 --> 00:44:38.789


00:44:38.789 --> 00:44:46.440


00:44:46.440 --> 00:44:50.300


00:44:50.300 --> 00:44:53.962


00:44:53.962 --> 00:44:56.310


00:44:56.310 --> 00:44:59.330


00:44:59.330 --> 00:45:02.840


00:45:02.840 --> 00:45:05.580


00:45:05.580 --> 00:45:12.600


00:45:12.600 --> 00:45:17.359


00:45:17.359 --> 00:45:21.730


00:45:21.730 --> 00:45:25.501


00:45:25.501 --> 00:45:30.120


00:45:30.120 --> 00:45:33.870


00:45:33.870 --> 00:45:40.150


00:45:40.150 --> 00:45:43.880


00:45:43.880 --> 00:45:47.650


00:45:47.650 --> 00:45:51.839


00:45:51.839 --> 00:45:56.309


00:45:56.309 --> 00:46:04.130


00:46:04.130 --> 00:46:08.660


00:46:08.660 --> 00:46:13.620


00:46:13.620 --> 00:46:16.240


00:46:16.240 --> 00:46:20.319


00:46:20.319 --> 00:46:26.390


00:46:26.390 --> 00:46:32.950


00:46:32.950 --> 00:46:39.180


00:46:39.180 --> 00:46:44.030


00:46:44.030 --> 00:46:48.720


00:46:48.720 --> 00:46:55.220


00:46:55.220 --> 00:47:01.469


00:47:01.469 --> 00:47:05.560


00:47:05.560 --> 00:47:08.740


00:47:08.740 --> 00:47:13.409


00:47:13.409 --> 00:47:17.620


00:47:17.620 --> 00:47:22.040


00:47:22.040 --> 00:47:27.930


00:47:27.930 --> 00:47:35.920


00:47:35.920 --> 00:47:40.130


00:47:40.130 --> 00:47:44.380


00:47:44.380 --> 00:47:50.699


00:47:50.699 --> 00:47:56.020


00:47:56.020 --> 00:48:01.210


00:48:01.210 --> 00:48:05.270


00:48:05.270 --> 00:48:09.449


00:48:09.449 --> 00:48:13.630


00:48:13.630 --> 00:48:21.779


00:48:21.779 --> 00:48:29.079


00:48:29.079 --> 00:48:34.780


00:48:34.780 --> 00:48:41.460


00:48:41.460 --> 00:48:45.680


00:48:45.680 --> 00:48:51.309


00:48:51.309 --> 00:48:57.079


00:48:57.079 --> 00:49:00.090


00:49:00.090 --> 00:49:03.549


00:49:03.549 --> 00:49:06.930


00:49:06.930 --> 00:49:10.349


00:49:10.349 --> 00:49:16.529


00:49:16.529 --> 00:49:22.779


00:49:22.779 --> 00:49:27.650


00:49:27.650 --> 00:49:32.699


00:49:32.699 --> 00:49:40.039


00:49:40.039 --> 00:49:48.899


00:49:48.899 --> 00:49:53.930


00:49:53.930 --> 00:49:59.420


00:49:59.420 --> 00:50:03.430


00:50:03.430 --> 00:50:09.869


00:50:09.869 --> 00:50:13.681


00:50:13.681 --> 00:50:19.170


00:50:19.170 --> 00:50:23.859


00:50:23.859 --> 00:50:30.240


00:50:30.240 --> 00:50:34.770


00:50:34.770 --> 00:50:41.340


00:50:41.340 --> 00:50:45.109


00:50:45.109 --> 00:50:48.190


00:50:48.190 --> 00:50:52.070


00:50:52.070 --> 00:50:57.080


00:50:57.080 --> 00:51:02.800


00:51:02.800 --> 00:51:06.470


00:51:06.470 --> 00:51:10.369


00:51:10.369 --> 00:51:14.170


00:51:14.170 --> 00:51:17.980


00:51:17.980 --> 00:51:24.249


00:51:24.249 --> 00:51:28.359


00:51:28.359 --> 00:51:38.420


00:51:38.420 --> 00:51:40.920


00:51:40.920 --> 00:51:44.230


00:51:44.230 --> 00:51:47.940


00:51:47.940 --> 00:51:53.250


00:51:53.250 --> 00:51:56.899


00:51:56.899 --> 00:52:00.039


00:52:00.039 --> 00:52:05.720


00:52:05.720 --> 00:52:12.799


00:52:12.799 --> 00:52:17.960


00:52:17.960 --> 00:52:22.070


00:52:22.070 --> 00:52:26.380


00:52:26.380 --> 00:52:29.880


00:52:29.880 --> 00:52:34.800


00:52:34.800 --> 00:52:44.460


00:52:44.460 --> 00:52:49.939


00:52:49.939 --> 00:52:56.219


00:52:56.219 --> 00:52:59.540


00:52:59.540 --> 00:53:03.860


00:53:03.860 --> 00:53:11.860


00:53:11.860 --> 00:53:15.010


00:53:15.010 --> 00:53:18.850


00:53:18.850 --> 00:53:25.769


00:53:25.769 --> 00:53:31.039


00:53:31.039 --> 00:53:35.160


00:53:35.160 --> 00:53:40.030


00:53:40.030 --> 00:53:43.829


00:53:43.829 --> 00:53:49.710


00:53:49.710 --> 00:53:54.640


00:53:56.160 --> 00:54:01.079


00:54:01.079 --> 00:54:05.319


00:54:05.319 --> 00:54:12.640


00:54:12.640 --> 00:54:18.950


00:54:18.950 --> 00:54:24.080


00:54:24.080 --> 00:54:29.779


00:54:29.779 --> 00:54:35.580


00:54:35.580 --> 00:54:40.131


00:54:40.131 --> 00:54:44.439


00:54:44.439 --> 00:54:59.099


00:54:59.099 --> 00:55:03.890


00:55:03.890 --> 00:55:09.390


00:55:09.390 --> 00:55:16.019


00:55:16.019 --> 00:55:20.200


00:55:20.200 --> 00:55:23.289


00:55:23.289 --> 00:55:30.720


00:55:30.720 --> 00:55:35.600


00:55:35.600 --> 00:55:47.050


00:55:47.050 --> 00:55:52.069


00:55:52.069 --> 00:56:00.180


00:56:00.180 --> 00:56:08.839


00:56:08.839 --> 00:56:12.300


00:56:12.300 --> 00:56:17.730


00:56:17.730 --> 00:56:22.319


00:56:22.319 --> 00:56:27.310


00:56:27.310 --> 00:56:36.250


00:56:36.250 --> 00:56:41.750


00:56:41.750 --> 00:56:43.042


00:56:43.042 --> 00:56:48.097


00:56:48.097 --> 00:57:05.852