1 00:00:00,000 --> 00:00:17,420 35C3 Intro music 2 00:00:17,420 --> 00:00:19,649 Herald: Welcome to the next talk 3 00:00:19,649 --> 00:00:22,689 "You Can Hack Everything - Just Don't Get Caught". 4 00:00:22,689 --> 00:00:24,590 Quick survey: How many of you 5 00:00:24,590 --> 00:00:26,710 have found a security loophole 6 00:00:26,710 --> 00:00:27,940 and thought: "Oh shit, if I tell someone 7 00:00:27,940 --> 00:00:31,530 then I am in deep that could cause problems?" 8 00:00:31,530 --> 00:00:34,100 Put your hands up Who does that apply to? 9 00:00:34,100 --> 00:00:36,910 Interjection from the audience: Camera off Laughter 10 00:00:36,910 --> 00:00:40,489 Herald: Another question: How many of you would like to find a security 11 00:00:40,489 --> 00:00:45,100 loophole, hands up Laughter 12 00:00:45,100 --> 00:00:48,769 Alright, I hereby declare you all concerned parties and this talk 13 00:00:48,769 --> 00:00:52,830 relevant for you, because many hackers are at some point in their career 14 00:00:52,830 --> 00:00:57,249 confronted with this problem or are in the situation where they 15 00:00:57,249 --> 00:01:01,000 have found something or got into something or ran into it 16 00:01:01,000 --> 00:01:04,709 and know that if the people affected in this archictecture that they are inside 17 00:01:04,709 --> 00:01:08,540 get wind of it, then there will be trouble it will really stir up discontent. 18 00:01:08,540 --> 00:01:12,070 And this talk is about which worst case scenarios could be 19 00:01:12,070 --> 00:01:16,310 in store for you, how to deal with it and best of all, how to not let yourself 20 00:01:16,310 --> 00:01:20,350 get caught. And our speakers, Linus Neumann und Thorsten Schröder, are 21 00:01:20,350 --> 00:01:24,290 experts in IT security. You probably know them from the PC-Wahl hack. 22 00:01:24,290 --> 00:01:28,800 They found security vulnerabilities in the Bundestag voting software, 23 00:01:28,800 --> 00:01:32,261 it's a very recommendable episode. 24 00:01:32,261 --> 00:01:35,101 Alright, I'm talking rubbish, nevertheless I recommend the 25 00:01:35,121 --> 00:01:37,080 logbuch-netzpolitik.org episode. 26 00:01:37,080 --> 00:01:39,920 It's really worth a listen, especially number 228 27 00:01:39,920 --> 00:01:43,630 "Interessierte Bürger". Now give a round of applause for Linus 28 00:01:43,630 --> 00:01:50,360 Neumann und Thorsten Schröder, have fun Applause 29 00:01:50,360 --> 00:01:54,140 Linus Neumann: Thank you all for being here. Thank you very much for 30 00:01:54,140 --> 00:01:57,690 the warm welcome. I also liked how a few of you have already done your 31 00:01:57,690 --> 00:02:01,880 first OpSec fail and outed yourself at the beginning. We have never 32 00:02:01,880 --> 00:02:05,650 hacked anything, we have nothing to do with it. Our short talk is about 33 00:02:05,650 --> 00:02:10,630 the topic everyone is talking about, hacking. We're seeing over the years that 34 00:02:10,630 --> 00:02:15,690 many fine, young hackers are ending up in prison and there are a lot of risks 35 00:02:15,690 --> 00:02:20,441 that come with hacking as a sport and spoil its enjoyment 36 00:02:20,441 --> 00:02:24,290 for example something like house searches broken down doors, high legal fees, 37 00:02:24,290 --> 00:02:31,830 this doesn't have to be. It's worth maybe thinking about how you can continue 38 00:02:31,830 --> 00:02:39,760 as free agents. Because we know that hackers are 39 00:02:39,760 --> 00:02:43,900 free agents, like artists, that get up in the morning and when they 40 00:02:43,900 --> 00:02:48,960 are in the mood, they sit down and paint their pictures. And we want 41 00:02:48,960 --> 00:02:56,580 you to be able to paint a lot more beautiful pictures. The key: OpSec 42 00:02:56,580 --> 00:02:59,530 And that's what we want to talk to you about today. 43 00:02:59,530 --> 00:03:02,610 Opsec is actually easy to summarise, 44 00:03:02,610 --> 00:03:12,740 here by the way... beautiful, beautiful... 45 00:03:12,740 --> 00:03:14,480 beautiful teaching material again 46 00:03:14,480 --> 00:03:24,099 from Russia, it seems to be on their minds for some reason. Let's start with a 47 00:03:24,099 --> 00:03:30,880 perfectly normal, the first computer worm: Pride comes before a fall, 48 00:03:30,880 --> 00:03:36,291 that is one of the most important teachings in your operational security 49 00:03:36,291 --> 00:03:41,630 Because showng off and cockiness will get you into trouble. And we have 50 00:03:41,630 --> 00:03:47,100 known this since computer worms have existed. The first big computer worm 51 00:03:47,100 --> 00:03:51,579 that became so international and incapacitated half of the internet 52 00:03:51,579 --> 00:03:56,879 was the Morris worm, that exploited weak points in 53 00:03:56,879 --> 00:04:02,629 Sendmail, Finger, Remote SH and a few weak passwords, in order to 54 00:04:02,629 --> 00:04:07,050 spread itself, so a computer worm. This lead to the internet outage 55 00:04:07,050 --> 00:04:12,840 of 1988. And you're probably asking yourselves: Why is the worm called 56 00:04:12,840 --> 00:04:21,440 the Morris worm? Well, because the creator was very proud of his worm 57 00:04:21,440 --> 00:04:26,120 and liked telling everybody how it worked. At one point he was even 58 00:04:26,120 --> 00:04:31,790 at Harvard University, standing on the table, preaching about how his worm 59 00:04:31,790 --> 00:04:36,320 worked in full detail. It was also obvious that 60 00:04:36,320 --> 00:04:40,639 the original infection started there, he told everybody about it. 61 00:04:40,639 --> 00:04:45,320 At one point someone told a journalist and he had to admit it. He got the 62 00:04:45,320 --> 00:04:49,630 worm to be named after him to this day. But also he got 63 00:04:49,630 --> 00:04:56,630 3 years probation, 400 hours social work and a 10,000 dollar fine, without 64 00:04:56,630 --> 00:05:01,930 his need for admiration, he could have possibly been spared. But 65 00:05:01,930 --> 00:05:05,250 not only hackers have a small problem with operational security and 66 00:05:05,250 --> 00:05:09,840 a need for admiration, but also bank robbers. And here we have a 67 00:05:09,840 --> 00:05:15,160 young man, who has robbed a bank. And what do you do when you have 68 00:05:15,160 --> 00:05:19,180 experienced something exciting, and raked in a lot of money: a selfie of course. 69 00:05:19,180 --> 00:05:25,920 Yeah. If that's not enough, you can also take another selfie. 70 00:05:25,920 --> 00:05:27,520 Laughter 71 00:05:27,520 --> 00:05:36,880 Or the accomplice. And also food. And then you quickly go to Instajail. And 72 00:05:36,880 --> 00:05:41,610 you might think, that was a one off, no, you think: OK, nobody can actually 73 00:05:41,610 --> 00:05:46,250 be that stupid, but when you look on the internet, you really don't 74 00:05:46,250 --> 00:05:52,869 need long to find experts posting pictures like this. And 75 00:05:52,869 --> 00:05:56,470 it always ends the same way: Here is the young man with, he must have 76 00:05:56,470 --> 00:06:00,639 really awful teeth, they're already all gold, they were convicted, 77 00:06:00,639 --> 00:06:07,010 because they bragged about having money on Facebook. 78 00:06:07,010 --> 00:06:11,899 Now, if we look at the pioneers of car hacking, we have in principle 79 00:06:11,899 --> 00:06:18,190 the same phenomenon. It must be added that the first ventures in car hacking 80 00:06:18,190 --> 00:06:27,220 were more of an analogue nature and more brute force. And the pioneers in 81 00:06:27,220 --> 00:06:32,750 this area were also these two young men, who managed a really big hack, 82 00:06:32,750 --> 00:06:38,479 that is breaking in the windscreen. stole 5,000 dollars and an ipad 83 00:06:38,479 --> 00:06:44,171 from a truck. And what is the first thing you do, when 84 00:06:44,171 --> 00:06:49,810 you have an iPad: Well, first go to Burger King, because they have WiFi. 85 00:06:51,494 --> 00:06:55,640 And play around a bit with the iPad. And then they noticed: Hey, awesome 86 00:06:55,640 --> 00:06:59,909 you can make videos with this. 87 00:06:59,909 --> 00:07:06,209 [Video is played] 88 00:07:06,209 --> 00:07:18,900 ... This is my brother Dylan... This... good night's hussle 89 00:07:18,900 --> 00:07:24,639 L: And because they had connected to the WiFi in Burger King with this 90 00:07:24,639 --> 00:07:29,310 stolen iPad, that happened, what had to happen... 91 00:07:29,310 --> 00:07:33,950 Laughter 92 00:07:33,950 --> 00:07:39,310 L: And the owner of the vehicle then 93 00:07:39,310 --> 00:07:44,450 handed the video over to the police and the police said, they're 94 00:07:44,450 --> 00:07:48,021 actually already wanted. And they took care of the young men. 95 00:07:48,021 --> 00:07:52,780 Thorsten Schröder: But let's get back 96 00:07:52,780 --> 00:07:58,160 to the computer hacking corner, that we actually wanted to talk about today, 97 00:07:58,160 --> 00:08:02,210 now we have taken a short trip to the analogue world. What could 98 00:08:02,210 --> 00:08:09,319 go wrong if you, as an interested surfer, played around 99 00:08:09,319 --> 00:08:14,659 on online shopping portals. Next you maybe want to 100 00:08:14,659 --> 00:08:18,950 aquire some wares, then you start clicking around in the online shop. 101 00:08:18,950 --> 00:08:24,510 Suddenly you slip and click the wrong thing, that happens sometimes, 102 00:08:24,510 --> 00:08:28,760 you accidentally somehow enter a wrong signal, 103 00:08:28,760 --> 00:08:35,578 and what's important here is: We are talking about a threat level for 104 00:08:35,578 --> 00:08:39,840 the hacker, so when you are on the online shopping 105 00:08:39,840 --> 00:08:43,789 portal and there your mouse accidentally slips, then 106 00:08:43,789 --> 00:08:48,510 you have a certain threat scenario. It of course increases if you have 107 00:08:48,510 --> 00:08:51,700 actually entered some strange symbols 108 00:08:51,700 --> 00:08:52,420 You're there 109 00:08:52,420 --> 00:08:55,460 probably without an anonymisation service because you wanted to 110 00:08:55,460 --> 00:09:01,540 buy something. And now you think: Hmm, I like playing and am 111 00:09:01,540 --> 00:09:06,640 curious, I'll activate Tor or something, and will visit this website 112 00:09:06,640 --> 00:09:12,140 later with an anonymisation service. And yes, over time 113 00:09:12,140 --> 00:09:17,450 you might accidentally find cross site scripting, the 114 00:09:17,450 --> 00:09:22,680 threat level grows gradually, but you've got Tor at the start. The 115 00:09:22,680 --> 00:09:27,881 threat level continues to grow, when perhaps you have found a 116 00:09:27,881 --> 00:09:32,140 somewhat more critical weakness like an SQL injection. And it continues to grow 117 00:09:32,140 --> 00:09:37,850 when you have perhaps also found a remote code execution, then 118 00:09:37,850 --> 00:09:41,530 we're already pretty high. So if you got caught now, it would be pretty 119 00:09:41,530 --> 00:09:45,340 bad, because you've already proved that you didn't directly go to the portal 120 00:09:45,340 --> 00:09:49,310 after having found an xss exploit or another trivial weak point 121 00:09:49,310 --> 00:09:53,831 and told them about it. Well, what happens then, when you 122 00:09:53,831 --> 00:09:57,940 continue rummaging around. Depends what you're looking for. Maybe you also 123 00:09:57,940 --> 00:10:03,140 find a few credit cards. Now we're on a really high threat level, 124 00:10:03,140 --> 00:10:10,000 and it quickly sinks because ...it becomes more relaxed. 125 00:10:10,000 --> 00:10:14,880 You don't need to be scared anymore about ever getting caught again 126 00:10:14,880 --> 00:10:20,550 for this hack. Yes, why would anyone get caught there? 127 00:10:20,550 --> 00:10:26,080 Because I thought of OpSec much too late. At the moment where I 128 00:10:26,080 --> 00:10:30,320 slipped with the mouse, I should have basically already had an anonymisation 129 00:10:30,320 --> 00:10:35,450 service, some kind of Tor service or something, right at the start, 130 00:10:35,450 --> 00:10:40,920 because at the moment where the portal provider realises, that something 131 00:10:40,920 --> 00:10:47,669 happened, they'll just look and see: Alright, we'll follow this back, 132 00:10:47,669 --> 00:10:51,320 it's a Tor session, bad, but at some point they come across 133 00:10:51,320 --> 00:10:56,380 this case where you said "oops". And then they will find you. 134 00:10:57,700 --> 00:11:01,990 L: It actually happens quite a lot that people are like: 135 00:11:01,990 --> 00:11:06,230 Oh, look, I found something and now I'll go to Tor 136 00:11:06,230 --> 00:11:10,650 No, guys, it's too late, you have to do it beforehand. 137 00:11:10,650 --> 00:11:14,640 T: Sorry, if you notice something like that, you can of course 138 00:11:14,640 --> 00:11:18,149 think about what the data protection regulation looks like, then you can 139 00:11:18,149 --> 00:11:22,450 look at what kind of data protection guidelines they have, some companies 140 00:11:22,450 --> 00:11:25,960 tell you how long they keep your logfiles 141 00:11:25,960 --> 00:11:28,110 142 00:11:28,110 --> 00:11:30,750 143 00:11:30,750 --> 00:11:34,010 144 00:11:34,010 --> 00:11:36,760 145 00:11:36,760 --> 00:11:42,700 146 00:11:42,700 --> 00:11:47,599 147 00:11:47,599 --> 00:11:51,540 148 00:11:51,540 --> 00:11:57,600 149 00:11:57,600 --> 00:12:01,829 150 00:12:01,829 --> 00:12:05,720 151 00:12:05,720 --> 00:12:11,960 152 00:12:11,960 --> 00:12:15,830 153 00:12:15,830 --> 00:12:19,760 154 00:12:19,760 --> 00:12:23,030 155 00:12:23,030 --> 00:12:26,490 156 00:12:26,490 --> 00:12:30,340 157 00:12:30,340 --> 00:12:33,500 158 00:12:33,500 --> 00:12:36,150 159 00:12:36,150 --> 00:12:39,839 160 00:12:39,839 --> 00:12:43,870 161 00:12:43,870 --> 00:12:48,000 162 00:12:48,000 --> 00:12:51,389 163 00:12:51,389 --> 00:12:54,500 164 00:12:54,500 --> 00:13:00,100 165 00:13:00,100 --> 00:13:06,830 166 00:13:06,830 --> 00:13:11,120 167 00:13:11,120 --> 00:13:16,730 168 00:13:16,730 --> 00:13:21,070 169 00:13:21,070 --> 00:13:26,570 170 00:13:26,570 --> 00:13:31,040 171 00:13:31,040 --> 00:13:36,660 172 00:13:36,660 --> 00:13:43,690 173 00:13:43,690 --> 00:13:46,750 174 00:13:46,750 --> 00:13:50,579 175 00:13:50,579 --> 00:13:54,850 176 00:13:54,850 --> 00:13:58,689 177 00:13:58,689 --> 00:14:03,580 178 00:14:03,580 --> 00:14:10,053 179 00:14:10,053 --> 00:14:14,029 180 00:14:14,029 --> 00:14:19,740 181 00:14:19,740 --> 00:14:27,640 182 00:14:27,640 --> 00:14:32,410 183 00:14:32,410 --> 00:14:38,970 184 00:14:38,970 --> 00:14:44,500 185 00:14:44,500 --> 00:14:49,829 186 00:14:49,829 --> 00:14:52,760 187 00:14:52,760 --> 00:14:57,519 188 00:14:57,519 --> 00:15:03,470 189 00:15:03,470 --> 00:15:08,519 190 00:15:08,519 --> 00:15:14,540 191 00:15:14,540 --> 00:15:17,870 192 00:15:17,870 --> 00:15:20,910 193 00:15:20,910 --> 00:15:24,830 194 00:15:24,830 --> 00:15:28,399 195 00:15:28,399 --> 00:15:32,250 196 00:15:32,250 --> 00:15:36,419 197 00:15:36,419 --> 00:15:40,520 198 00:15:40,520 --> 00:15:51,420 199 00:15:51,420 --> 00:15:54,300 200 00:15:54,300 --> 00:16:03,600 201 00:16:03,600 --> 00:16:07,949 202 00:16:07,949 --> 00:16:17,430 203 00:16:17,430 --> 00:16:22,960 204 00:16:22,960 --> 00:16:27,160 205 00:16:27,160 --> 00:16:34,649 206 00:16:34,649 --> 00:16:42,910 207 00:16:42,910 --> 00:16:46,670 208 00:16:46,670 --> 00:16:50,481 209 00:16:50,481 --> 00:16:58,699 210 00:16:58,699 --> 00:17:04,400 211 00:17:04,400 --> 00:17:11,630 212 00:17:11,630 --> 00:17:15,368 213 00:17:15,368 --> 00:17:19,829 214 00:17:19,829 --> 00:17:22,409 215 00:17:22,409 --> 00:17:24,179 216 00:18:11,339 --> 00:18:20,620 217 00:18:20,620 --> 00:18:25,899 218 00:18:25,899 --> 00:18:31,059 219 00:18:31,059 --> 00:18:36,659 220 00:18:36,659 --> 00:18:40,730 221 00:18:40,730 --> 00:18:49,159 222 00:18:49,159 --> 00:18:55,689 223 00:18:55,689 --> 00:19:00,210 224 00:19:00,210 --> 00:19:03,600 225 00:19:03,600 --> 00:19:07,949 226 00:19:07,949 --> 00:19:12,130 227 00:19:12,130 --> 00:19:19,820 228 00:19:19,820 --> 00:19:24,099 229 00:19:24,099 --> 00:19:28,149 230 00:19:28,149 --> 00:19:31,830 231 00:19:31,830 --> 00:19:37,460 232 00:19:37,460 --> 00:19:43,600 233 00:19:43,600 --> 00:19:48,509 234 00:19:48,509 --> 00:19:56,260 235 00:19:56,260 --> 00:20:02,650 236 00:20:02,650 --> 00:20:06,219 237 00:20:06,219 --> 00:20:09,560 238 00:20:09,560 --> 00:20:16,940 239 00:20:16,940 --> 00:20:21,100 240 00:20:21,100 --> 00:20:24,880 241 00:20:24,880 --> 00:20:31,169 242 00:20:31,169 --> 00:20:35,149 243 00:20:35,149 --> 00:20:41,850 244 00:20:41,850 --> 00:20:46,049 245 00:20:46,049 --> 00:20:49,859 246 00:20:49,859 --> 00:20:53,661 247 00:20:53,661 --> 00:20:57,799 248 00:20:57,799 --> 00:21:03,120 249 00:21:03,120 --> 00:21:06,999 250 00:21:06,999 --> 00:21:11,729 251 00:21:11,729 --> 00:21:16,439 252 00:21:16,439 --> 00:21:20,649 253 00:21:20,649 --> 00:21:23,659 254 00:21:23,659 --> 00:21:26,369 255 00:21:26,369 --> 00:21:30,199 256 00:21:30,199 --> 00:21:35,389 257 00:21:35,389 --> 00:21:40,769 258 00:21:40,769 --> 00:21:46,970 259 00:21:46,970 --> 00:21:52,349 260 00:21:52,349 --> 00:21:56,410 261 00:21:56,410 --> 00:22:00,229 262 00:22:00,229 --> 00:22:05,019 263 00:22:05,019 --> 00:22:07,519 264 00:22:07,519 --> 00:22:11,379 265 00:22:11,379 --> 00:22:15,009 266 00:22:15,009 --> 00:22:19,519 267 00:22:19,519 --> 00:22:23,170 268 00:22:23,170 --> 00:22:28,929 269 00:22:28,929 --> 00:22:32,339 270 00:22:32,339 --> 00:22:36,369 271 00:22:36,369 --> 00:22:39,659 272 00:22:39,659 --> 00:22:42,310 273 00:22:42,310 --> 00:22:45,989 274 00:22:45,989 --> 00:22:52,009 275 00:22:52,009 --> 00:22:56,249 276 00:22:56,249 --> 00:23:00,190 277 00:23:00,190 --> 00:23:03,540 278 00:23:03,540 --> 00:23:07,249 279 00:23:07,249 --> 00:23:10,510 280 00:23:10,510 --> 00:23:14,820 281 00:23:14,820 --> 00:23:18,859 282 00:23:18,859 --> 00:23:24,879 283 00:23:24,879 --> 00:23:28,850 284 00:23:28,850 --> 00:23:34,259 285 00:23:34,259 --> 00:23:38,080 286 00:23:38,080 --> 00:23:41,869 287 00:23:41,869 --> 00:23:47,059 288 00:23:47,059 --> 00:23:51,330 289 00:23:51,330 --> 00:23:55,419 290 00:23:55,419 --> 00:24:02,760 291 00:24:02,760 --> 00:24:06,999 292 00:24:06,999 --> 00:24:10,259 293 00:24:10,259 --> 00:24:15,229 294 00:24:15,229 --> 00:24:20,479 295 00:24:20,479 --> 00:24:27,090 296 00:24:27,090 --> 00:24:34,139 297 00:24:34,139 --> 00:24:41,830 298 00:24:41,830 --> 00:24:45,269 299 00:24:45,269 --> 00:24:50,760 300 00:24:50,760 --> 00:24:52,779 301 00:24:52,779 --> 00:24:59,649 302 00:24:59,649 --> 00:25:04,639 303 00:25:04,639 --> 00:25:14,820 304 00:25:14,820 --> 00:25:19,859 305 00:25:19,859 --> 00:25:25,729 306 00:25:25,729 --> 00:25:30,719 307 00:25:30,719 --> 00:25:33,620 308 00:25:33,620 --> 00:25:39,969 309 00:25:39,969 --> 00:25:45,809 310 00:25:45,809 --> 00:25:52,259 311 00:25:52,259 --> 00:25:55,720 312 00:25:55,720 --> 00:25:59,949 313 00:25:59,949 --> 00:26:03,929 314 00:26:03,929 --> 00:26:08,149 315 00:26:08,149 --> 00:26:15,001 316 00:26:15,001 --> 00:26:20,129 317 00:26:20,129 --> 00:26:29,399 318 00:26:29,399 --> 00:26:34,719 319 00:26:34,719 --> 00:26:40,100 320 00:26:40,100 --> 00:26:46,140 321 00:26:46,140 --> 00:26:52,070 322 00:26:52,070 --> 00:26:57,929 323 00:26:57,929 --> 00:27:02,039 324 00:27:02,039 --> 00:27:07,809 325 00:27:07,809 --> 00:27:13,100 326 00:27:13,100 --> 00:27:18,910 327 00:27:18,910 --> 00:27:24,800 328 00:27:24,800 --> 00:27:28,749 329 00:27:28,749 --> 00:27:34,119 330 00:27:34,119 --> 00:27:37,140 331 00:27:37,140 --> 00:27:41,849 332 00:27:41,849 --> 00:27:45,169 333 00:27:45,169 --> 00:27:48,139 334 00:27:48,139 --> 00:27:53,099 335 00:27:53,099 --> 00:27:56,410 336 00:27:56,410 --> 00:28:07,170 337 00:28:07,170 --> 00:28:11,400 338 00:28:11,400 --> 00:28:15,210 339 00:28:15,210 --> 00:28:20,369 340 00:28:20,369 --> 00:28:24,479 341 00:28:24,479 --> 00:28:28,880 342 00:28:28,880 --> 00:28:34,029 343 00:28:34,029 --> 00:28:38,600 344 00:28:38,600 --> 00:28:42,409 345 00:28:42,409 --> 00:28:46,179 346 00:28:46,179 --> 00:28:52,619 347 00:28:52,619 --> 00:28:57,769 348 00:28:57,769 --> 00:29:02,630 349 00:29:02,630 --> 00:29:07,119 350 00:29:07,119 --> 00:29:11,470 351 00:29:11,470 --> 00:29:16,589 352 00:29:16,589 --> 00:29:21,649 353 00:29:21,649 --> 00:29:28,400 354 00:29:28,400 --> 00:29:34,539 355 00:29:34,539 --> 00:29:41,800 356 00:29:41,800 --> 00:29:44,699 357 00:29:44,699 --> 00:29:49,209 358 00:29:49,209 --> 00:29:53,129 359 00:29:53,129 --> 00:29:55,799 360 00:29:55,799 --> 00:29:59,340 361 00:29:59,340 --> 00:30:05,869 362 00:30:05,869 --> 00:30:09,709 363 00:30:09,709 --> 00:30:16,499 364 00:30:16,499 --> 00:30:20,889 365 00:30:20,889 --> 00:30:25,919 366 00:30:25,919 --> 00:30:29,589 367 00:30:29,589 --> 00:30:34,500 368 00:30:34,500 --> 00:30:39,919 369 00:30:39,919 --> 00:30:43,259 370 00:30:43,259 --> 00:30:47,070 371 00:30:47,070 --> 00:30:51,149 372 00:30:51,149 --> 00:30:57,330 373 00:30:57,330 --> 00:31:02,919 374 00:31:02,919 --> 00:31:10,000 375 00:31:10,000 --> 00:31:14,869 376 00:31:14,869 --> 00:31:20,039 377 00:31:20,039 --> 00:31:24,289 378 00:31:24,289 --> 00:31:29,129 379 00:31:29,129 --> 00:31:33,119 380 00:31:33,119 --> 00:31:38,899 381 00:31:38,899 --> 00:31:45,999 382 00:31:45,999 --> 00:31:50,719 383 00:31:50,719 --> 00:31:54,529 384 00:31:54,529 --> 00:32:00,070 385 00:32:00,070 --> 00:32:04,580 386 00:32:04,580 --> 00:32:08,039 387 00:32:08,039 --> 00:32:12,879 388 00:32:12,879 --> 00:32:16,559 389 00:32:16,559 --> 00:32:21,691 390 00:32:21,691 --> 00:32:28,579 391 00:32:28,579 --> 00:32:34,109 392 00:32:34,109 --> 00:32:40,040 393 00:32:40,040 --> 00:32:43,590 394 00:32:43,590 --> 00:32:47,679 395 00:32:47,679 --> 00:32:52,830 396 00:32:52,830 --> 00:32:59,610 397 00:32:59,610 --> 00:33:06,679 398 00:33:06,679 --> 00:33:10,790 399 00:33:10,790 --> 00:33:15,100 400 00:33:15,100 --> 00:33:19,260 401 00:33:19,260 --> 00:33:24,580 402 00:33:24,580 --> 00:33:29,130 403 00:33:29,130 --> 00:33:34,499 404 00:33:34,499 --> 00:33:40,019 405 00:33:40,019 --> 00:33:45,559 406 00:33:45,559 --> 00:33:52,839 407 00:33:52,839 --> 00:33:56,190 408 00:33:56,190 --> 00:34:02,569 409 00:34:02,569 --> 00:34:10,580 410 00:34:10,580 --> 00:34:15,750 411 00:34:15,750 --> 00:34:22,440 412 00:34:22,440 --> 00:34:29,460 413 00:34:29,460 --> 00:34:35,158 414 00:34:35,158 --> 00:34:38,989 415 00:34:38,989 --> 00:34:50,619 416 00:34:50,619 --> 00:34:57,279 417 00:34:57,279 --> 00:35:02,530 418 00:35:02,530 --> 00:35:07,690 419 00:35:07,690 --> 00:35:16,549 420 00:35:16,549 --> 00:35:21,171 421 00:35:21,171 --> 00:35:30,010 422 00:35:30,010 --> 00:35:34,519 423 00:35:34,519 --> 00:35:40,180 424 00:35:40,180 --> 00:35:43,779 425 00:35:43,779 --> 00:35:49,240 426 00:35:49,240 --> 00:35:52,970 427 00:35:52,970 --> 00:36:04,250 428 00:36:04,250 --> 00:36:06,650 429 00:36:06,650 --> 00:36:11,420 430 00:36:11,420 --> 00:36:13,260 431 00:36:13,260 --> 00:36:17,350 432 00:36:17,350 --> 00:36:22,629 433 00:36:22,629 --> 00:36:28,309 434 00:36:28,309 --> 00:36:31,089 435 00:36:31,089 --> 00:36:35,631 436 00:36:35,631 --> 00:36:42,520 437 00:36:42,520 --> 00:36:46,200 438 00:36:46,200 --> 00:36:49,869 439 00:36:49,869 --> 00:36:55,299 440 00:36:55,299 --> 00:36:57,660 441 00:36:57,660 --> 00:36:59,320 442 00:36:59,320 --> 00:37:04,620 443 00:37:04,620 --> 00:37:11,900 444 00:37:11,900 --> 00:37:15,579 445 00:37:15,579 --> 00:37:18,840 446 00:37:18,840 --> 00:37:22,170 447 00:37:22,170 --> 00:37:28,890 448 00:37:28,890 --> 00:37:33,220 449 00:37:33,220 --> 00:37:38,471 450 00:37:38,471 --> 00:37:44,620 451 00:37:44,620 --> 00:37:49,009 452 00:37:49,009 --> 00:37:54,760 453 00:37:54,760 --> 00:37:59,000 454 00:37:59,000 --> 00:38:06,029 455 00:38:06,029 --> 00:38:10,859 456 00:38:10,859 --> 00:38:16,779 457 00:38:16,779 --> 00:38:22,290 458 00:38:22,290 --> 00:38:25,320 459 00:38:25,320 --> 00:38:29,530 460 00:38:29,530 --> 00:38:38,330 461 00:38:38,330 --> 00:38:47,040 462 00:38:47,040 --> 00:38:52,431 463 00:38:52,431 --> 00:38:58,411 464 00:38:58,411 --> 00:39:07,820 465 00:39:07,820 --> 00:39:11,340 466 00:39:11,340 --> 00:39:15,100 467 00:39:15,100 --> 00:39:17,720 468 00:39:17,720 --> 00:39:21,029 469 00:39:21,029 --> 00:39:23,119 470 00:39:23,119 --> 00:39:27,049 471 00:39:27,049 --> 00:39:32,859 472 00:39:32,859 --> 00:39:40,849 473 00:39:40,849 --> 00:39:44,510 474 00:39:44,510 --> 00:39:52,690 475 00:39:52,690 --> 00:39:58,940 476 00:39:58,940 --> 00:40:03,890 477 00:40:03,890 --> 00:40:09,190 478 00:40:09,190 --> 00:40:13,380 479 00:40:13,380 --> 00:40:17,980 480 00:40:17,980 --> 00:40:21,169 481 00:40:21,169 --> 00:40:27,479 482 00:40:27,479 --> 00:40:31,890 483 00:40:31,890 --> 00:40:38,840 484 00:40:38,840 --> 00:40:43,650 485 00:40:43,650 --> 00:40:47,849 486 00:40:47,849 --> 00:40:51,289 487 00:40:51,289 --> 00:40:56,109 488 00:40:56,109 --> 00:41:00,710 489 00:41:00,710 --> 00:41:05,900 490 00:41:05,900 --> 00:41:11,950 491 00:41:11,950 --> 00:41:17,619 492 00:41:17,619 --> 00:41:28,010 493 00:41:28,010 --> 00:41:33,490 494 00:41:33,490 --> 00:41:39,109 495 00:41:39,109 --> 00:41:48,169 496 00:41:48,169 --> 00:41:52,690 497 00:41:52,690 --> 00:41:57,330 498 00:41:57,330 --> 00:42:01,540 499 00:42:01,540 --> 00:42:06,000 500 00:42:06,000 --> 00:42:10,990 501 00:42:10,990 --> 00:42:16,779 502 00:42:16,779 --> 00:42:24,369 503 00:42:24,369 --> 00:42:28,420 504 00:42:28,420 --> 00:42:33,980 505 00:42:33,980 --> 00:42:38,789 506 00:42:38,789 --> 00:42:43,950 507 00:42:43,950 --> 00:42:49,240 508 00:42:49,240 --> 00:42:53,640 509 00:42:53,640 --> 00:42:57,909 510 00:42:57,909 --> 00:43:01,880 511 00:43:01,880 --> 00:43:06,139 512 00:43:06,139 --> 00:43:10,180 513 00:43:10,180 --> 00:43:12,450 514 00:43:12,450 --> 00:43:15,700 515 00:43:15,700 --> 00:43:19,500 516 00:43:19,500 --> 00:43:22,610 517 00:43:22,610 --> 00:43:27,029 518 00:43:27,029 --> 00:43:30,999 519 00:43:30,999 --> 00:43:33,150 520 00:43:33,150 --> 00:43:36,960 521 00:43:36,960 --> 00:43:41,839 522 00:43:41,839 --> 00:43:47,760 523 00:43:47,760 --> 00:43:52,480 524 00:43:52,480 --> 00:43:56,020 525 00:43:56,020 --> 00:44:00,520 526 00:44:00,520 --> 00:44:06,100 527 00:44:06,100 --> 00:44:10,550 528 00:44:10,550 --> 00:44:17,380 529 00:44:17,380 --> 00:44:22,689 530 00:44:22,689 --> 00:44:28,370 531 00:44:28,370 --> 00:44:32,432 532 00:44:32,432 --> 00:44:38,789 533 00:44:38,789 --> 00:44:46,440 534 00:44:46,440 --> 00:44:50,300 535 00:44:50,300 --> 00:44:53,962 536 00:44:53,962 --> 00:44:56,310 537 00:44:56,310 --> 00:44:59,330 538 00:44:59,330 --> 00:45:02,840 539 00:45:02,840 --> 00:45:05,580 540 00:45:05,580 --> 00:45:12,600 541 00:45:12,600 --> 00:45:17,359 542 00:45:17,359 --> 00:45:21,730 543 00:45:21,730 --> 00:45:25,501 544 00:45:25,501 --> 00:45:30,120 545 00:45:30,120 --> 00:45:33,870 546 00:45:33,870 --> 00:45:40,150 547 00:45:40,150 --> 00:45:43,880 548 00:45:43,880 --> 00:45:47,650 549 00:45:47,650 --> 00:45:51,839 550 00:45:51,839 --> 00:45:56,309 551 00:45:56,309 --> 00:46:04,130 552 00:46:04,130 --> 00:46:08,660 553 00:46:08,660 --> 00:46:13,620 554 00:46:13,620 --> 00:46:16,240 555 00:46:16,240 --> 00:46:20,319 556 00:46:20,319 --> 00:46:26,390 557 00:46:26,390 --> 00:46:32,950 558 00:46:32,950 --> 00:46:39,180 559 00:46:39,180 --> 00:46:44,030 560 00:46:44,030 --> 00:46:48,720 561 00:46:48,720 --> 00:46:55,220 562 00:46:55,220 --> 00:47:01,469 563 00:47:01,469 --> 00:47:05,560 564 00:47:05,560 --> 00:47:08,740 565 00:47:08,740 --> 00:47:13,409 566 00:47:13,409 --> 00:47:17,620 567 00:47:17,620 --> 00:47:22,040 568 00:47:22,040 --> 00:47:27,930 569 00:47:27,930 --> 00:47:35,920 570 00:47:35,920 --> 00:47:40,130 571 00:47:40,130 --> 00:47:44,380 572 00:47:44,380 --> 00:47:50,699 573 00:47:50,699 --> 00:47:56,020 574 00:47:56,020 --> 00:48:01,210 575 00:48:01,210 --> 00:48:05,270 576 00:48:05,270 --> 00:48:09,449 577 00:48:09,449 --> 00:48:13,630 578 00:48:13,630 --> 00:48:21,779 579 00:48:21,779 --> 00:48:29,079 580 00:48:29,079 --> 00:48:34,780 581 00:48:34,780 --> 00:48:41,460 582 00:48:41,460 --> 00:48:45,680 583 00:48:45,680 --> 00:48:51,309 584 00:48:51,309 --> 00:48:57,079 585 00:48:57,079 --> 00:49:00,090 586 00:49:00,090 --> 00:49:03,549 587 00:49:03,549 --> 00:49:06,930 588 00:49:06,930 --> 00:49:10,349 589 00:49:10,349 --> 00:49:16,529 590 00:49:16,529 --> 00:49:22,779 591 00:49:22,779 --> 00:49:27,650 592 00:49:27,650 --> 00:49:32,699 593 00:49:32,699 --> 00:49:40,039 594 00:49:40,039 --> 00:49:48,899 595 00:49:48,899 --> 00:49:53,930 596 00:49:53,930 --> 00:49:59,420 597 00:49:59,420 --> 00:50:03,430 598 00:50:03,430 --> 00:50:09,869 599 00:50:09,869 --> 00:50:13,681 600 00:50:13,681 --> 00:50:19,170 601 00:50:19,170 --> 00:50:23,859 602 00:50:23,859 --> 00:50:30,240 603 00:50:30,240 --> 00:50:34,770 604 00:50:34,770 --> 00:50:41,340 605 00:50:41,340 --> 00:50:45,109 606 00:50:45,109 --> 00:50:48,190 607 00:50:48,190 --> 00:50:52,070 608 00:50:52,070 --> 00:50:57,080 609 00:50:57,080 --> 00:51:02,800 610 00:51:02,800 --> 00:51:06,470 611 00:51:06,470 --> 00:51:10,369 612 00:51:10,369 --> 00:51:14,170 613 00:51:14,170 --> 00:51:17,980 614 00:51:17,980 --> 00:51:24,249 615 00:51:24,249 --> 00:51:28,359 616 00:51:28,359 --> 00:51:38,420 617 00:51:38,420 --> 00:51:40,920 618 00:51:40,920 --> 00:51:44,230 619 00:51:44,230 --> 00:51:47,940 620 00:51:47,940 --> 00:51:53,250 621 00:51:53,250 --> 00:51:56,899 622 00:51:56,899 --> 00:52:00,039 623 00:52:00,039 --> 00:52:05,720 624 00:52:05,720 --> 00:52:12,799 625 00:52:12,799 --> 00:52:17,960 626 00:52:17,960 --> 00:52:22,070 627 00:52:22,070 --> 00:52:26,380 628 00:52:26,380 --> 00:52:29,880 629 00:52:29,880 --> 00:52:34,800 630 00:52:34,800 --> 00:52:44,460 631 00:52:44,460 --> 00:52:49,939 632 00:52:49,939 --> 00:52:56,219 633 00:52:56,219 --> 00:52:59,540 634 00:52:59,540 --> 00:53:03,860 635 00:53:03,860 --> 00:53:11,860 636 00:53:11,860 --> 00:53:15,010 637 00:53:15,010 --> 00:53:18,850 638 00:53:18,850 --> 00:53:25,769 639 00:53:25,769 --> 00:53:31,039 640 00:53:31,039 --> 00:53:35,160 641 00:53:35,160 --> 00:53:40,030 642 00:53:40,030 --> 00:53:43,829 643 00:53:43,829 --> 00:53:49,710 644 00:53:49,710 --> 00:53:54,640 645 00:53:56,160 --> 00:54:01,079 646 00:54:01,079 --> 00:54:05,319 647 00:54:05,319 --> 00:54:12,640 648 00:54:12,640 --> 00:54:18,950 649 00:54:18,950 --> 00:54:24,080 650 00:54:24,080 --> 00:54:29,779 651 00:54:29,779 --> 00:54:35,580 652 00:54:35,580 --> 00:54:40,131 653 00:54:40,131 --> 00:54:44,439 654 00:54:44,439 --> 00:54:59,099 655 00:54:59,099 --> 00:55:03,890 656 00:55:03,890 --> 00:55:09,390 657 00:55:09,390 --> 00:55:16,019 658 00:55:16,019 --> 00:55:20,200 659 00:55:20,200 --> 00:55:23,289 660 00:55:23,289 --> 00:55:30,720 661 00:55:30,720 --> 00:55:35,600 662 00:55:35,600 --> 00:55:47,050 663 00:55:47,050 --> 00:55:52,069 664 00:55:52,069 --> 00:56:00,180 665 00:56:00,180 --> 00:56:08,839 666 00:56:08,839 --> 00:56:12,300 667 00:56:12,300 --> 00:56:17,730 668 00:56:17,730 --> 00:56:22,319 669 00:56:22,319 --> 00:56:27,310 670 00:56:27,310 --> 00:56:36,250 671 00:56:36,250 --> 00:56:41,750 672 00:56:41,750 --> 00:56:43,042 673 00:56:43,042 --> 00:56:48,097 674 00:56:48,097 --> 00:57:05,852