 So for our 10 o'clock slot on Sunday, we have weaponizing your pets, the Warcater and the Denial of Service Dog by Jane Bransfield. Good morning, DEF CON. I can't tell you what a pleasure it is to be here. I've wanted to present here for a while. I'd like to start the speech with an impromptu announcement. Never to say big data, APT, cloud, or cyber. So I never said those. Four times. Good morning, I'm weaponizing your pets. Let's get started. My name is Jane Bransfield. I'm a principal security engineer at Tenacity Solutions. And if you spend enough time with me, you'll figure out, I love my job. It's a fantastic thing to wake up in the morning and say, let's go to work and get paid and do cool stuff. And people hang out with me like, oh, tell me more about your job. They want my job. The joke's on them because they can't have my job. They can't be the guy that dies on the Friday of a long weekend. And they'll come in Tuesday morning and there I am in the corner and they'll clean me up so they don't step on that stain over there. That's the Jane Bransfield memorial stain on the carpet. So what's this talk about? This is a talk about having a humorous idea, bringing that idea to fruition. Stories of triumph and woe and valuable lessons learned. And I've got a lot of slides, so let me get started. Weaponizing your pets. Why in God's name would you want to do that? So the background is 15% of the world's internet traffic is dedicated to cats. That's right. We have the whole world's knowledge base at our fingertips and we watch cats and other things online. So I find most tech briefings boring and I know lay people find them boring and I have to give them. And the minute I get the least bit technical, I can see people's eyes glaze over and start thinking of juju bees or whatever it is they think of. So I started including pictures of cats and humorous stories around cats. In fact, this is the picture that started it all. Oh, shut up. That's awesome and you know it. So I just finished one such presentation and somebody came up to me and said, I'm going to give you my cat collar. And they told me about it. It had a GPS chip in it, a cellular component, and it could track where the cat was. And if you were nervous, you could send it a text message and it would text you back with current GPS coordinates for the cat. And me being the guy I am, I was like, well now all I need is a Wi-Fi sniffer and I have a war cutae. At the denial of service dog, I was at Outer Zone, which is another hacker conference. Lady Merlin walked in a dog, had saddlebags on it, said denial of service dog on it. I'm like, oh cool. Is there a pineapple in there or something? She's like, no. We can try to use the computer and he jumps in your lap. You can't do it. But the pineapple is a great idea. So working animals are nothing new. We've got military and law enforcement dogs and then we have badass dogs that jump out of the back of military aircraft in the water. Then we have badass dogs. You see the guys wearing a gas mask? Dogs wearing a mask too. This guy jumped out of an aircraft at 30,000 feet. That's a badass dog. And then we have a real Navy SEAL. And this is the truth. The Navy uses marine animals for harbor defense and finding mines and doing things like that and you think you're all stealthy, you're gonna swim in and blow up a harbor and all of a sudden Flipper jumps out with a GoPro. Bam. So but there are other things that happen, like apparently back in the 60s, this is Acoustic Kitty and there was a lot of pot going around the CIA. So imagine sitting around a table and saying alright, we're gonna take a cat and we're gonna put a transmitter in his chest, a microphone in his ear and a tattoo iron and I can call it the Acoustic Kitty. This actually got funded. I'm not kidding here. They did all kinds of science and experiments and they brought it out for the first operational test. They had a couple guys over there. They put the cat down, go listen to those guys. Cat ran right out in the trap again. And that was the end of Acoustic Kitty. And at that point they defunded this, not because it was a bad idea, but because all the scientists, they're like screw this, cats are too hard to work with. That's a very interesting thing they found. We'll get back to that later. So requirements, my stuff. The con up is to put collar or harness on a cat with stuff in it and have the cat do a walk about and get data. Rule number zero is I don't want to harm the cat. I don't like cats, but I don't want to want to want to want to harm an animal. It's just not who I am. Rule number one, the cat shall be able to wear stuff comfortably and should not be harmed by stuff. Speaking to form fit function, but also we don't want any blinking lights and have a bird of prey up there. Oh, it's a blue light. Oh, cat. The GPS is going to record waypoints. The Wi-Fi sniffer is going to bring back all my stuff. And there are actually other products out there to deal with your cat here. Mr. Lee Cat Cam has a little camera that hangs on the bottom of the collar. Pet track and stuff. None of these solutions do Wi-Fi sniffing though. So I'm good there. So thought about all kinds of different ways to do this. A small stick solution, very cool computer on a stick, small form factor, but kind of expensive. Cotton candy again, computer on a stick, very cool solution. The Rock Trip 3066, this is like an open source thing that you can get attached to the back of your television, do HD streaming. There's also a Cali Linux image that you can put on this thing. And I was having trouble doing that. And I sat down, I had a beer I thought about. I said, I need something that's small form factor, GPS, Wi-Fi, and cellular. Any idea what that could possibly be. How about a phone? It was in my pocket the entire time. So now, okay, cool. I get to do some Android code and get to make an APK, right? Now they already thought of that. It's called Wiggle. And you can just download this from the Android store and do war driving with your phone in your pocket anywhere, anytime. That's pretty cool. So now we need a volunteer cat. This is Skitsie. And this is a cat that belongs to my friend Reeves. And it's 22 inches from the base of neck to base of tail. 20 inches in the chest and 12 inches on the neck. This is a big damn cat. So I'm not worried about putting crazy things on him and his friends making fun of him because he'll just smack him around a little bit. So now we need a cat coat to hold the phone. And if you Google cat coat on the internet, you get pictures of girls wearing coats that have cats on them. And if you Google kitty coat on the internet, you get pictures of other things. Don't Google kitty coat from life. But I finally figured out the cat was big enough I could get a dog coat and a small enough form factor that it would fit. So that's what I did. So now the plan is put the tech on the coat, coat on the cat, send the cat on a walkabout and recover data when the cat returns and then profit, right? So step one, put the tech on the coat. Step two, put the coat on the cat. And you can see he's thrilled. Send the cat on the walkabout and then profit, right? No. That's the backyard. So what could have possibly gone wrong here? Well, it's obvious we didn't put the coat on tight enough. So we put the tech on the coat, put the coat on the cat, slept real tight this time and sent him on a walkabout and we wait. And we wait and we wait and we wait and it's like 18 hours later, people are freaking out. And finally people say you're by the back door or meow and you open the door and there's the cat. So I'd like to draw your attention to the form factor, the cat going out the door and coming back in there's something. So we failed on that and the last known GPS location of it was right here. And we went and it's not there. So, so far we've learned the cats are really hard to work with. You should always test your expensive stuff out before sending it on a cat someplace. I'm going to need an Amazon Prime account. And they were worried about the cat so no more coat. And so I have to think about a different situation. So I was talking to my friend Bill about this and he left. And he said, why don't you try Arduino? It's a small form factor, low power consumption. It does exactly what you need no more, no less. And there's all kinds of chips and solutions out there. Some like my first question is what the hell is Arduino? Turns out Arduino was like a project for some researcher in Italy. It was like this master's thesis. He's like there's open source software out there. So why not open source hardware? It's really cool. It comes in a small chipset. They can stack them on top of each other. Lots of expanse and shields. You can make robots from road control cars, et cetera. This guy used it to check the food in his freezer. This guy used it to he's put the glove on. He moves the glove and the robot hand moves. And this guy used it to cheat on his video games. Relatively small form factor. The good news with Arduino is it's open source and relatively inexpensive until the cats start losing it and you have to buy nine of them. Bad news is sometimes poorly documented. It can take forever to get to you if it's an expanse and shield and questionable forms sometimes. I'm like okay cool so that's great but I've never done anything with Arduino. I've never worked with small firmware chipsets or anything. I'm not a professional coder and I've never soldered before. I announced solder. Like what? And he says don't worry it's easy. Famous last word. So the plan now is to get some basic Arduino stuff to side on the most accommodating form factor put it all together on a color and then figure out something for the denial service dog. So I went out and I bought the how to book on the Arduino stuff. I came with an Arduino and a whole bunch of guides. I did a whole bunch of learning and reading up on engineering and electronics and stuff. I got the flashy and not supposed to flash. So I started okay I'm ready to go to get the more advanced stuff. I need libraries for Wi-Fi. They got it. GPS they got it. SD card stuff they got it. Fantastic. Let's get a little bit higher now. JerryBeanBellum.com has a lot of videos on making these things work. I used him religiously and thank God like that. So now I did all my research and background investigation. I am now an expert. So I went out by collecting stuff and writing it to an SD card. The GPS get the GPS stuff writing to an SD card combined the two and then profit. So the Wi-Fi shield was really cool. It was easy to set up. Drivers worked right away. It was even talked about on the Arduino website messing around with some parameters and variables and I've got my solution right there for that. That was easy. So GPS not so much easy. A little bit about GPS the Namia string is what the satellite is sending out. It's the job the receiver to take that in and translate it into lat long et cetera. So the GPS boot process starts up and it doesn't know where it is on the planet. It could be in your back pocket it could be in Timbuktu. So it has to listen to space. Get at least three satellites listen to them figure out the Namia string and this whole process can take two to 15 minutes and if somebody is looking over your head. So the GPS shield was rather poorly documented. Pardon me. There were no docs really in the kit and so it took me a good week or several weeks of what's wrong with this, why isn't it working. Finally at the very long end of a research effort I found out that the baud rate is supposed to be 34,800. And I wanted to get some demonstration of how it was poorly documented but now I go online I can't not put bonus together. Pardon me. The Wi-Fi shield you see is sitting on top of the Arduino UNO. They stack rate this. The GPS shield is off to the side because I wanted to reuse some of the pins. And so I put this all together and I combine the code strings and I get this weird error about 80% memory utilization. And I'm like well I see that on Windows all the time. Blow that off. Go for it. Yeah. After a little while I was like no they were telling me. So that's good. So I went out and purchased the mega and you can see if it's exactly like the shield does. Put that all together messed around with some variables, did some stuff and it works. And now I have a working prototype. So the Arduino mega 2560 is more memory, more better. More ports is more better but more size is not more better. So I searched all over the internet trying to find something that says chip off and I told them I was going to mention that during my talk. They never sent me my stuff. Defconn knows about that. But I didn't know about that at the time so now I need a Wi-Fi chip, they ate a fruit Wi-Fi chip breakout board right there. Also looking into another form factor this is the spark core. I call it the Arduino mullet because it's got Wi-Fi on the front and Arduino in the back. And of course we need the Arduino mega worked but the mega mini it said is going to be four weeks to ship and other solutions are too big and size are too small in memory so I went with the spark core which is also having problem shipping so I borrowed one from my friend Bill who got me started on this in the whole place. So the tech on the spark the arm is a 32 bit m3 CPU that's cool. 128k memory more than I need. It's kind of like the internet between microcontrollers. It had that a TICC 3000 Wi-Fi chip it had that Arduino compatible no. And people say yes it is because they're chip heads and they know the difference but me I'm not a chip head yet and when you say it's Arduino compatible that means it will work with my external components and I can just cut and paste the code from one thing to another but that's not how it works. The Arduino is one thing the spark core is thatch. And that made me not happy. But despite all this problem it's the spark is very very cool. It had a really dedicated core group of developers and I'd be looking on the forums and one guy came in and said you know I'd really like to see it do blah and some developer would stay up all night and then next morning boom there it is. Shout out to PK123 who helped me a lot on my project and so I figured well all this stuff is getting into GPS libraries to the forum. They compiled and they worked with my GPS shield cool. So Wi-Fi libraries not so much because the spark core is builds itself as an internet of things device and you're going to say that a couple of times because it screwed me a couple of times. So Wi-Fi is really in the background of the service you're supposed to do your coding up front and they're just supposed to connect you to the internet free to stuff. It's not there to mess with but I want to mess with them because they're libraries available for download so I figured since it's the same chip I could download these libraries and I'd messed with it before because you know how Thomas Edison said I found a hundred ways not to make a light bulb before I finally found a way to make a light bulb I found a lot of ways to not make a kitty color. So I messed with these things and I had some SSID scanning stuff where I just copied and pasted it put it in there and bam it worked yes. Now I got to start working with those tiny components that I bought and that means soldering. Who out there knows how to solder and likes it? Yeah, you see that? Yeah. Soldering is my new least favorite activity. For those of you who are getting ready to learn how to solder I got some rules for you. Rule number one is don't touch the pointy end. That's where the hotness is. Rule number two is remember where you put the soldering iron down. If you violate rule number two you're going to violate rule number one. Rule number three is everything looks so easy on the internet and it's not. So that notwithstanding my first attempts of soldering rather went rather well. I got the SD card breakout board here this is all my breadboard stuff the chips on the left hand side there's a quarter of the SD breakout board yes antenna so that was pretty good. Now at home testing everything went great and I was getting sniffing I was doing the stuff I took it out in my yard I watched my neighbor's wifi and then I took it in a car ride and there was massive failure nothing I didn't collect anything why not well again the spark is an internet of things device it's never meant to be not connected to the internet so I was talking to the guys on the forums about how do I do this turn it on make sure you encase all further code in a if status equals wifi on clause if status equals wifi on only returns true if it's connected to a known wifi access point and if I'm a half a mile down the road that's not going to happen so what I did is I noticed that I could turn on the chip and then do my SSID scan real quick before it actually made a connection and that worked perfectly so I removed that code from my stuff and then I started looking at the GPS cords and popping them into Google Earth and I was driving on the highway and they had me off in a lake and I was sitting at my house and they had me half way down the block and I'm like what's going wrong well whoever posted the GPS libraries they did the Namia conversion incorrectly so now I'm back to having no GPS libraries so when I was working on the Arduino stuff I had the GPS plus plus easy to interact with and everything I need so I need to find a way or find someone to put this GPS plus plus into the spark stuff so I talked to my friend Bill and he said well why don't you just port the libraries I'm like how do you port libraries and he explained it to me in a way similar to my rocket science story which is having drinks in a bar with somebody and this guy joins our conversation and he's a pretty cool guy so eventually the question comes up what do you do and so that's cool what do you think about the phrase it's not rocket science and he's like well I laugh at that because you know there's some science and engineering that goes into building the rocket and putting the fuel in them but at the end of the day you just put the rocket on the launch pad hit the red button hope for the best sometimes it blows up sometimes it falls over and blows up sometimes it gets all the way to space and then blows up and the hard part is not getting oh listen oh don't hurt the monkeys it's a rocket science joke so anyway that's how you port libraries as it turns out you change the Arduino stuff out with the spark stuff you hit compile listen to it scream at you then you go fix what's screaming about and you keep doing that until it doesn't scream at you anymore and if the compiler screams at you and you scream back you only really succeed in scaring your wife so I did that for a couple hours and bam it works I have now ported libraries I was so proud of I posted them to github so the next problem is then power consumption and my buddy Ricky he'll hook me up with these e-flight batteries they're used for model airplane stuff 3.7 volts 500 milliamp batteries enough to get a little kitty thing going so now I'm testing for the optimal power consumption thing here and the first thing you think of is oh I'll just turn everything on get the stuff and then turn everything off but remember I told you before that it can sometimes take 2 to 15 minutes to get a GPS lock if you turn off then the cat runs under a bush and then you burn through your power without getting any data so what I found the best solution for me was you turn the main microcontroller on and off you keep the GPS chip powered and that worked much much better collections every 30 seconds the whole solution lasted for 4 hours every 10 minutes it lasted for 8 hours so now I have to make a collar and if you thought soldering was fun things the internet again was not helpful and YouTube did everything look too easy so I talked to my friend Joey and he said yeah head out to your local maker shop in Novel Labs and they will help you out so shout out to Novel Labs in Reston, Virginia Ted mad scientist evil genius helped me learn how to do eagle and again a solution that didn't end up in a hard stop man I don't know how to make a collar it's like I can code things and I learned how to solder but this is like ribbons so I talked to my friend Joe and he's like why don't you just get a couple ribbons and sew them together and then you can put your stuff inside of it I'm like cool so I went down to Michaels and I got myself a ribbon it's leopard skin prints it's so in this year for all the cats I'm sorry but now I need to sew it together to buy new stuff it's like it's a grandma skill right so what do you do you get a grandma this is my wife's grandmother her name is Nancy she's very nice to meet you and she was very happy to help me out and here's a finer collar assembly we have a dollar bill followed by the e-flight battery the actual collar and then the components all wrapped up not only to protect them from weather but the spark has a lot of heat so we're going to send him out with some practice stuff first to see that he comes back with it and then I might let him play with my tech so we put the collar on him to see if he tolerated it and he tolerated it marvelously reminding you of what it looked like before and what it looks like now look at him it's all cool except you see that little bit behind his head that little metal bit like it's a war kit it's a bullet so now the new plan is the tech goes on the collar collar goes on the cat cat goes for a walk about and profit so initial deployments were nothing I'm like no no no I know this works so I grabbed all my stuff and I went out to my buddy Reeves house I did all the diagnostic and everything was working fine so I'm like what's going on so we put the collar on the cat we had a couple people were like he's cleaning himself I'm like yeah with his tongue he's licking himself and so I said hey Reeves is that the cat under the bush he's like no and he walked up and he walked over to the bush he's like yes and he grabs the bush and he shakes the bush and the cat goes running but we figured out a better deployment process would be to let the collar sit outside for 5 or 10 minutes get that GPS locked bring the collar here's the initial results obfuscated for obvious reasons and I've got somebody contacted me off the internet and he said hey I can help you out with visualizing this and check this out somebody did this for me that's awesome I'd like to point out that I've been working on this for a good number of months and the damn cat never left the front yard first he went was the car so then we went to my grandmother when we got some results here but I'd like to point out over here I don't know if the mouse is showing up we still have web and we still have open wi-fi hotspots in 2014 oh my god so the cocoa went a lot further as you'll see there he goes he rounded all over the neighborhood yeah he's going to take a while he actually caught a mouse during this deployment that was very very cool yeah but you see it got really cool results the cats tolerated it brilliantly and it was the fruition of a long bunch of work and I can't tell you how happy I was to get the initial results back and so that's the war kit ladies and gentlemen so now we move on to the denial of service dog yes so the denial of service dog admittedly is just trolling there's nothing socially redeeming about it all I got a wi-fi doggy backpack with the denial of service dog patches on it there's the pineapple you know what that is I had karma up answering probes DNS spoof to redirect everything to the pineapple and then there's a package you can download on the pineapple called random roll and it just has like five or six Rick rolls that it just cycles through as people connect to it it's awesome so here's the TV begun as it comes with my idea being I was going to get a saddle bag put the TV begun in the saddle bag and connect the wires and run them up through so the LEDs are on the outside of the saddle bag and so now I need some patches and holy crap how hard is it to get somebody to make you patches these days nobody does it anymore except on the internet so I'll sell you 500 of them and five bucks a piece so I beat the streets for quite a while and thank God so I have a video demonstration to prove that it works here so you see there's the denial service dog stuff and the fruit stuff all wired up and there's the LED sticking outside of the saddle bags I ran a wire up the leash and have a button in my hand right there I used lacrosse tape to tie the wire onto the leash the idea is you hit the button right there you see the little green light start flashing on the fruit kit and then the TV will then just turn off and it's flashing we've got karma I'm outside somewhere and you'll see that the denial service dog ssid is up because that was another thing that I did I'm going to add a wifi hotspot it's going to be called defcon and I'm filming with one hand and typing with the other forgive me how long it took to do this try to connect and karma is going to just a minute here I said welcome to defcon earlier we've got a tradition here and if you've never seen this tradition it's a wonderful tradition where new speakers get welcomed to defcon with an appropriate beverage of choice so since Jean has never spoken to defcon before we decided to welcome him even to the extent of interrupting his presentation good morning thank you and we'll hair the dog hair the denial service dog awesome so it's a long story let's see where was I oh yes so I'm playing with this I wish there was a way to speed this up but we're going to go through it all again because oh wow that's good stuff so I added defcon to the whole thing and karma is going to see that probe go out and it's going to pull it back into the wifi pineapple and that's how it all works and it works brilliantly see it's just going to pop up bam I'm defcon the funny part is I tried to do this again later I just turned on my phone oh there's the defcon AP bam you see I'll go up it's like da da da da da circus da da da afro and so I'm going to go to CNN and it's going to come back up afro so that's how that thing works so now we need a volunteer dog to be our denial of service dog and you'll notice that this volunteer dog is a doberman pincer have you ever seen a doberman pincer service dog no well now you have so our volunteer dog is quite possibly the most anti-doberman doberman when I got there he just loves everybody and he ran around the yard for 10 minutes oh my god he came inside the house and put the backpack on him and he stood like this for 10 minutes and it's just good because it allowed me to take pictures there's all the service dog patches on here and he got that going on there so the first thing that the v-dog did when he stopped being comatose for half an hour as he did this and what we discovered two things one there's now two ways to deploy the TV be gone and once you hit the button the other is the dog shakes the other thing I discovered I failed to properly secure the TV be gone into the pouch and every time he did that it went flying all over the place and in the process of doing so completely destroyed my TV be gone to the point that even with my new found soldering prowess I was not able to bring it back so next so the funny thing is if it says service dog on your dog's backpack they will let you in mine very clearly said denial of service dog service dog oh yeah sure and here's the part where I tell you that one man's video proof to Defconn is another man's evidence in court but the truth of the matter is I was so focused on what was going on with the denial of service dog that I hit the wrong button on the GoPro it's got two buttons I hit the wrong one so I'm going to have to go all XKCD on you here so there we are with the V-dog he's like oh I love you play I said do you mind if we come in everywhere we asked everywhere we went and then off in the corner you hear it was a peanut butter jelly time peanut butter jelly time I'm taking some artistic license here but still so about the third or fourth time the guy came back to our table he's like hey why does it say denial of service dog props to this guy because he's the only one all day long that ever asked but we didn't answer him and he just went away so you want to go into a sports bar and you hit the button and he's like oh ball play and you know if it just happens to be I don't know the world cup game the Argentina semifinal and you hit the button and it goes away he's like and I said never going to give you up so if you go into a restaurant that has 50 TVs on the wall they're all remotely controlled from some dude in the back but if you go into a restaurant where there's one or two TVs on the wall they are not just saying so then hey it's a ball yeah and so then we go into a J-Random box store somewhere and the V-Dog's like oh I love you as we're walking around the owner's got the leash in one hand and he's got his hand on the backpacks come sit this is not a service dog but nobody and the guy's hey do you mind if we come in he's like sure make sure he doesn't poop on anything this actually happened and then we go back to the TV section and of course the V-Dog's like squirrel and then we hit the button and the thing goes up and the television goes away yay we did wonderful things and then off of the course thirk it's afro thirk it's afro so according to the results several hapless victims connected to the Karma slash denial service dog logging failed as I cannot definitively prove that anybody connected to it while we were out I took some artistic license however when I was just giving this presentation to my company a couple of weeks ago people were getting owned right and left oh my god somebody hacked my phone it's Jean just blow it off just turn the phone off only one person asked about the denial of service dog most people just said nice doggie so what have we learned overall a tech hobbyist with no prior firmware experience can create a functional work you take holler in a relatively short amount of time you can do this too I didn't know a damn thing about this stuff when I got started and I got frustrated in 2014 there are still unsecured wifi hotspots running around lots of devices still probe for stuff there's still no patch for human stupidity and cats and dogs are really hard to work with so I gotta give a shout out to all these guys JK devices don't go there they're terrible thanks to thanks to Reeves Bill Joe Joey Nancy Ricky VDog.owners Spark guys the Nova Labs guys VDog Skitsie and of course Defcon I'm so proud to be here if anybody ever hears about hackers there's that 1.2 billion password it's got stolen or was it 400,000 or did it actually happen but everywhere I go in this community you guys are willing to help if you're not a jerk you'll be very accommodating all that good stuff and I can't tell you you should be proud to be part of this hacker community I'm proud to be associated with you guys so this year's or this year's Defcon 22's Volunteer War Kite is the host of Hacker Jeopardy Bad Kite she's wearing the collar folks look at her she was a complete sport man we went up and down walking the strip there we are with a couple girls with a couple more street performers there's all kinds of good guy Zach Galifianakis guy showed up we had a couple monuments we had a couple really willing participants and a couple of not so willing participants but here are the results from walking up and down Defcon walking up and down the Vegas strip and I couldn't get the Kite to work because the demo failed I forgot to play to the demo guys but that's what we did just for you guys over the past couple days and of course we've had the war Kite we need the Kite and so I was explaining to him what I'd like him to do and all this good stuff and when he'd have time and he looks at me and says Jean Jean Jean I don't need a backpack to denial of service somebody if I want them to sing Circus Afro they will sing Circus Afro a lot of cool people have been paying attention I've got so much attention paid to me I never expected all this cool a lot of really cool stuff this is my best hilarious funny thing that happened to me CNN did this to the war Kite they strapped a GoPro to his back with tape yeah exactly and they're like okay cat get up and walk around the cat's like no the cat's like I'm not going anywhere screw you people and so CNN found out what I had so desperately found out over this whole thing is that cats are just damn hard to work with thank you guys very much are there any questions