awesome so everything seems to work so
why am I here
I'm basically going to be talking about
the story of my IOT device it has two
threads in it basically the first one is
how I got my first IOT device it's a
button I will definitely show you a lot
about it but the second and I think more
important where a thread here is what
you guys can do once you get your own
IOT devices if you already have them to
say basically safe secure to to
understand what what threats does it
bring to your home and to do all of this
cost effectively so you don't want to
spend your time reverse engineering some
weird CPU or maybe I mean it might be
your day job but you don't want to bring
it home you want to do some simple
things that will then have a great a big
impact and you will be able to live with
whatever new device you bring so okay so
the agenda is I'm basically going to be
talking about four parts what do you do
before you purchase your device what do
you do once you have it with the
application because most of the devices
come with some kind of iOS or Android
application what can you do to the
device itself understand what's running
on it
what electronics it contains whether it
contains things you didn't expect they
do and of course they always talk to
some remote server usually in China so
what you can do to you know protect
whatever it is that the device is
collecting on you so who here has an IOT
device already
okay and who's planning to have one
within like the next five years
everyone's hand should be up right now
because there's no way you will buy like
there are some electronics that you can
basically not buy that aren't smart
anymore like TVs I think there's no more
dumb TVs and basically everything is
going to become IOT why I guess because
that's how the world works right but we
don't have control over it anymore like
we can stop it and it's better to
embrace it than to hope that you know it
will go away because it's not going away
so I mean I'd really love to hear later
and the question phase how you guys have
been protecting yourself but for me it
all started with a problem I have this
habit once in a while I think what can i
order mate like for example how can I
make my life easier and I started a new
job I started biking to to the new job
and when I got home I had to wait like
30 minutes before I had hot water so I
mean it's really a big problem I know
life and death even but it was the first
thing that popped out as something easy
to automate right I mean you can
basically you can there are so many ways
to solve this and the two main things I
found in Israel is first there's only
one actual device that will work there
are like two models but one of them was
sold out and of course you can do it DIY
this is actually a friend of mine and
his girlfriend get electrocuted by that
and he swears by it by the way so as you
can see this is the DIY route and I'm
sure it would
it's like it works for him but it took a
lot of time and he really likes to think
everything's like that I thought I don't
have any time I'll spend some money so I
bought this cool device you will give of
it soon so that was the only option I
had right if I didn't want to elect by
an electrocution device
it's an Israeli company that that sells
it called smart grade but the device is
obviously not built in Israel it's
actually built by a company called
broadly you can see signs of it
everywhere and their site in the app
that you download it's like it's a
different form factor of all of broad
links devices which are just like
manufacture a very popular manufacturer
of smart devices they have different
devices that they sell and apparently
they they created the device for the
Israeli market that is that thing I
didn't see any documentation about it
from anywhere outside of Israel which I
mean it was fun but it's also similar to
a lot of other devices they manufacture
and this is how the unpacking goes and
basically what you have here is a button
it's a glorified button with a few LEDs
it has an actual electromagnetic relay
so each time you press it on or off you
can hear like a satisfying click which
is very fun and it has an annoying LED
that's always on and it gives my house
like a ghostly feeling and the fun part
is controlled by an application of
course the application is called a smart
home it is made well brought linked by
but the name of the application is
called bottling
neutral app so why is it you churl app
because apparently it's their white
label application so that's what they
gave companies like smart grade and you
get a little a QR code and then it
downloads the logos of the company and
then puts it on the actual application
so apparently I had a very white label
experience no it was very obvious it's
Chinese like the everything was in
broken English of course and know that
I'm aligning it it's well I'm going to
malign it so this this is basically
what's supposed to do this is the old
the old button I had I replaced it with
the new button that's just how you set
it up it takes a C and you basically put
it in the hole in my wall and it works
so what can you do before you purchase
your own device first do your research
right you want to buy a device that's
pretty popular you want to make sure
that if you can search for how hackable
it is how documented it is whether other
people already reverse-engineer this
hopefully your market doesn't have only
one device of that kind and you want to
see if if the case is there's only one
device of that kind how many devices are
in the family so the broad link family
has a lot of devices and it comes into
playing a bit and of course think about
what risks it exposes you like what
personal information can the device
collect on you so this is the Android
app as you can see it asks for all of
androids permissions all of them the
weird ones were contacts because I mean
of course I want to share my my what
their status with my friends my kin
camera which I mean is pretty
self-explanatory modify system settings
of course but we order other apps I have
no idea what that means like
but what can it reorder it seems very
sketchy right so I mean it isn't really
malicious I mean probably not it's
probably not malicious but once again
it's like we'll see in a bit it contains
like SDKs of every Chinese popular site
like map SDKs and WeChat SDKs and things
like that but but the fact that it asks
for all the permissions it opens you up
to a lot of attacks for example if an
update and malicious update occurs and
or if there is indeed a vulnerability
and the app can be used to have
basically a permission elevation attack
but of course I still wanted to use my
new toy so I don't want to install the
Chinese rap obviously so I just carried
a tablet with me an old tablet which
only had the app with like a fake new
gmail account that wasn't convenient so
let's dig deeper let's see what we can
let's see what we can actually do so of
course you can decompile the app it's
pretty easy there even online services
to do it at least for Android iOS is a
different story
so the the compiling it worked I found
out there's like 13,000 files and 300
lines of Java code that's not super
helpful but the the actual code relating
to my device I could start to understand
it and I could see how you know the main
flows work but and basically I mean once
again the app itself included a ton of
different SDKs other vendors code that
they support obviously more code means
more vulnerabilities that tens of SDKs
of Chinese companies that do you know
basically everything that Google does
Docs Maps
text text translations things like that
I have no idea but
what device we'll need Maps but I guess
maybe I'm not imaginative enough the
actual control code was obfuscated but
of course I mean if you're bored enough
you can I can start an office gating and
renaming the functions and everything
but really gets annoying especially when
you try to reverse engineer something as
you just this and so I mean at this
point I started maybe Google in a bit
more and apparently the device family is
indeed popular so while my well this
device itself doesn't have anything on
the internet like it doesn't outside of
Israeli sales site that sell it it
doesn't exist but the communication API
to bottling the devices the the company
that manufactures it we're reverse
engineer there's even a Python library
so that made life really easy but
because of the way this device works
it's a bit different than actual
broughton devices i have no idea why by
the way we'll see it in a bit I still
have to use the app to activate the
device and then I could control it with
the Python library which is like three
lines of code you basically input the
library you initialize the sp2 device
which is just like the name of a device
similar to this one which the internet
actually knows about you authenticate
which sends a token and basically and
then you set power on or off
I could get rid of the tablet I set up a
simple web server I opened up port on my
router the forwarded to my computer
which is silly and don't do that but
sometimes you must do that I used a
random URL because I didn't want random
Internet crawlers to turn or turn my
water heater on or off it's actually
like once you put something on the
internet you know that like after two
minutes you start getting weird crawlers
trying to understand if it's WordPress
or some other popular and some other
popular side the deccan hack so that was
fun seeing all those people trying to
crawl me
and then basically I could throw the
tablet away and hope my eye speed
doesn't change my IP there are ways
around that - there's a dynamic DNS in
DNS there's other things you can do you
can constantly update your your IP but I
mean I wanted something simple and they
still didn't change my IP so what can
you do first of all Google the hell out
of whatever you're buying a guy that I
met yesterday told me that he would
actually the the device that he bought
had a CPU that he could with flash and
there was already like an open frame
word that you can use so that really
makes life easier because you'll see
what I needed to do use keywords use
Google Translate for Russian and Chinese
side so this is a guy who basically
rewrote the broad desegregation like he
reverse engineered it he wrote the new
application and Russian guy that was
very helpful and it actually works I've
no idea how by the way like I still
haven't started in first engineering
that but I mean I don't need to because
I found something better what else can
you do you can use an old device you
could use a sandbox or an emulator like
blue specs it's an Android emulator it
works really well in this case both
didn't work well an old device did work
you can find and reverse engineer your
API yourself it's not that hard like
reverse engineering is something that
takes a lot of patience and some people
are better than others but you will
eventually get somewhere like just
follow code and and do like finding
files and you will get something and of
course once you had an API or you can
change the application you can also
customize the device for example I guess
because no one thought this specific the
specific framework is going to be used
for water heater
no one thought about turning it off
after 30 minutes when water is already
hot and I have a habit of forgetting it
on for the whole day so I could just
write a simple daemon that checks if
it's on and saves the timestamp and if
it's on no more than 30 minutes just
turns it off a lot of those devices
basically come with the basic set of
commands or things that whoever designed
it thought of and they usually don't
complement whatever your lifestyle is
whatever you your use of the devices so
having an API having a way to control it
outside of the app really opens you up
to customizing it and making it your own
what else can you do you can check what
the app is communicating with there are
things like Wireshark which is a network
sniffer web suit which I'll talk about
in a second Open VPN basically tunnel
all the communication from your device
through a computer that you can you can
use the sleeve the communication better
and kismet which is a Wi-Fi sniffer
basically sniffing random like all hi-5
traffic so these devices are usually
Wi-Fi enabled they're also sniffers for
Bluetooth like people mentioned before
decompile the Android app again jad acts
the D compiler and you can also get you
can try following the main pass the
buttons like the on button see where
that goes URLs we'll see how that turned
out and logs and use the streams and
grab which are very simple and very fun
burps it gets a special mention because
it actually worked and helped me find
some cool things it's an HTTP HTTP proxy
you can watch the traffic your devices
the api's it calls it's very useful to
play with the core REST API is which
usually these devices
try at least like they communicate with
basic JSON and stuff like that it can do
HTTP if you install the certificate that
burp certificate into your device it can
basically man in the middle the SSL and
you can see even if the device is using
a safe and encrypted URLs this device
wasn't it's so I mean okay let's talk
about the device itself basically I
decided to see really what it
communicates with so I opened it up I
realized that it phones home because the
app has has a feature where you can see
the on and off state history and even if
I manually pressed it on or off without
the app it's still new so I started
suspecting that something's not quite
right and that the device is doing stuff
that well maybe I don't want it to do
like talk with some remote server and so
I thought hey what else can it be doing
like does it have like a camera
somewhere I don't know let's be paranoid
about it and actually check so I mean
once you open it you can see it's a
Wi-Fi chip from a company called
mediatek they're super popular there's a
flash memory there's the electromagnetic
really button thing the user interface
is two buttons in the lab that's about
it like some random mother electronics
but nothing suspicious like no
microphone on camera I was really hoping
to find something like that that would
have made this talk awesome okay so then
I thought okay let me get the framework
the code running on the device itself
this is usually more tricky it wasn't as
easy as I expected we have flash reader
at work I I used it but the first device
we got like this is the first device I
brought for test that wasn't actually in
my home someone pressed erase instead of
read
and well we had to buy like two more and
of course the two-year so the the
mediatek chip uses some system of a chip
that we couldn't find an instruction set
to there was like some random
presentation from a Taiwanese University
with some of the instructions but the
rest of it is annoying and well beyond
like what I wanted to do that's like
hard stuff but strings still work
strings is very useful so first of all
you can see all the embedded access
point names this device is supposed to
open an access point that you connect to
and then you set it up but that's not
how it works so I still am not sure how
the app itself is doing it probably
broadcast in it you can see all the
passwords of course the server URLs
which are our main dot broadening and
backup
they have backups that's good and just
notable that the system of the chip uses
something called micro IP it's a network
stack which has like one known
vulnerability and it's it's it's really
restricted but once again the chip
itself is very restricted so at this
point I wanted to start playing with the
device but once it's open it's not a
good idea to connect it to AC anymore
but thankfully they left VCC and ground
points that I could solder to a USB so
now I have a USB connected device and so
that it was pretty easy it could have
been harder if they didn't just mark it
and of course it's not really sending
any data to the usb it just powers it
but still it makes it easier to work
with I'm not going to get electrocuted
by it
don't leave the points they're super
easy also I switch the LEDs from blue to
red just because it could
so what can you do about the device
itself first of all you should open it
up and see that there's no nothing there
that you didn't expect
you can usually recognize the components
just by googling whatever is on them you
can look up data sheets if you wanna do
something more advanced you can make
life easier by finding ways to connect
it to your computer easier maybe
reflashing it you can customize it so
for firmware you can usually find the
framework online or maybe check where
the app the app usually initiates
updates
maybe the device itself but you can find
that by sniffing you can try reading the
framework from the device but you'll
need some some flash reader that that's
something not everyone has so maybe a
hackerspace or you can you can you can
make your own using a Raspberry Pi or
something there a ton of tutorials
online you can hack set it the free
won't write it back that's like the next
thing I want to do is see if replacing
the URLs from brought link forces it to
stop sending information and of course
you can find a hardware development kit
with media tech heads and see if you can
compile your own hardware that's going
to be way harder because once the device
is actually in production so they
usually have it set and this one for
example the chip itself has some memory
with some code that I mean it's hard to
get and there's also an external flash
drive which was easier to get to but
still and of course use your software
right and like so that's the read in the
erase buttons are so close together that
we just I mean cool so I still have the
problem of something is a few remote
Oh like trying to reverse the framework
didn't really help and wireshark
also didn't really help so now I just
grabbed for all the URLs in the in the
application itself
and oh wow I was surprised so there's a
file called API URL so Java it has like
71 URLs only 28 or HTTPS because I mean
why why bother 55 of them were brought
link API is the rest were like like I
said just api's of every company that
Alibaba QQ Weibo no other companies by
the way only Chinese companies I don't
know why they're discriminating against
Google or something and of course
calling these api's gives you a funny or
it's like the Chinese Jason and the API
itself that interested me was of course
the history API it wanted the token
which was really really spoiled the
founder so I could either read and
decomp like read 300 lines of the
compilation of how it created this token
or I could use verb to find the token
and send it and that's work basically I
could use the token for like a minute
until it expired or maybe five minutes
until it's expired and I had to proxy
the app again and find the token so this
was pretty convenient and I could see
that it actually only only returned my
history so nothing too malicious I guess
I mean it depends on your definition of
malicious and a totally open source of
always saying look at the server first
of all it's running an ancient nginx
version with a lot of known series there
is a valid HTTP cert which is not being
used
I mean why bother have
HTTP it and then not use it in the
application maybe it's for newer
versions they left the nginx welcome
page at the root of the URL to welcome
you to their site and of course I'm not
doing anything else
so is this anticlimactic well it depends
I mean it's good to know that only my
history saved I can decide whether I'm
ok with it and whether I want it to be
saved and I know the extent of what is
collected and of course I wasn't ok with
it so I just like blocked all of the
devices communication with the outside
world through the router through
parental controls and now basically I
had I had my server in my network that
can talk to it and turn it on or off and
no one knew about it of course so I felt
very very proud of myself so what can
you do well the easiest thing is just
block everything right that's very good
default sometimes you do want some
features maybe you want to connect it
with remote servers without having to
proxy it to your own your own web server
or your own service but you should at
least be aware of what it's sending and
you know be you be sure that it's ok
with you you could use parental controls
which I think most modern routers have
you put the device in the guest Network
if you don't want it used as a spearhead
to hack other computers in your network
and of course you can run your own DNS
server and trying to see like whether
you can move the communication the
device tries to do with the remote
server to your own the fun thing was
that I couldn't actually resolve brought
Lync on main and back up so I guess it
might be using its own DNS still stuff
to research there's the three damn
router solution which
basically says put the IOT devices in
one network with like grout there and
then all your other nice devices another
and then have both of them both of them
connect to another router that connects
to the internet so there's no way for
any crosstalk that's another good
solution some final thoughts first of
all clients or you know devices that you
on are always hackable it's like a maxi
min you know iOS and Android development
the device the application whatever
whenever it's not on your server is
hackable when it's a newer server it's
harder but still hackable of course I
mean but clients are always hackable and
you should and you can open up your
devices you shouldn't be afraid of it
void your warranty is all of that and
one thing that's sometimes hard is the
hardware is well at least for me maybe
for a lot of people is harder than
software and sometimes it's not worth
your time but it's definitely something
that you can you can do you can read
firmware you can understand chips and
you don't need to do more than that like
you will know there's a weird camera
hidden in your water heater and the
important thing is you can add your own
features whether it's in Hardware
whether it's in software you can you can
at least try and you should make the
device your own make it make it fit you
instead of you fit in it and it's app
and all of the things it's sending to
the server and the rest of the crap
that's going on there cool so thank you
and I'd love to hear some questions and
I actually don't see if their question
anyone
okay well oh sorry
it's hard to see there's so many lies
yes so I played around with a few
different IOT devices that all came from
one company that I think was based in
New York City called quirky and they all
have this very strange control chip in
them that was all like it seems like it
came off an assembly line and that it
used the generic API that could just
send and receive various like you know
signed character values or something
like that and it was unique because it
was configured by the devices all had a
CTS cell on them so like a light sensor
on them and you held up a smartphone up
to the light sensor the smartphone app
would flash the screen in a pattern to
transmit your Wi-Fi credentials there's
nothing to that I was curious if you had
when you've played around with these
devices you came across anything similar
to that so I haven't seen this specific
way of transmitting data it sounds like
like those hacks where you try to
transmit data with the hard drive light
on and off that's something that was
done like a few few years ago I guess
there are it's it's it seems like it
would be very hard like it's very low
bandwidth just holding it up and very
but for devices that don't have any
network connectivity which may be oh no
these did have Wi-Fi chips in them this
is how they receive the Wi-Fi
credentials oh so I mean it depends like
this device also has a Wi-Fi chip on it
it's very basic it's like the lowest
mediatek the company that makes it has
it and it connects there's an AP an
access point and that's like usually
what they do I haven't heard about of
that method but you can also send it to
broadcast there's some ways to do that
that's unique though I have another
question
have you taken apart any smart like
speakers or anything like that
I don't own one yet so I haven't taken
one apart no there was a tear down that
there's a tear down on medium we love
the echo and the Sonos smart speakers
it's very interesting like the guy who
did it tries to understand what it means
for the companies which is a bit out of
my league there but the components and
everything is really interesting just
google it it was like when hacker news
last week or something thanks thanks I
actually have worked on both of those
things so not quirky itself but I can
answer a bit of that all the quirky
devices a lot of the ones that use Wi-Fi
have the electric amp inside of them and
you can actually get that as a dev kit
if you're curious about it you can
program it yourself using that's
although electric and gets a Wi-Fi even
though it's just a company called
electric and and they have dev boards
and stuff you can play around with on
their own
I also took apart Eko and the goal with
that is because when I was moving into a
new place I was using it as a music
speaker which it's great for and you can
control it from Spotify on your phone or
whatever but I didn't I wanted to
disable the mics and that was actually
my question is that there's this array
of like seven members microphones on
there and I tried drilling them off
which was not the best idea whether it
was that or the fact that I probably had
some collateral damage it doesn't work
at all anymore but I was considering
injecting some epoxy into the little
holes on them I'm not sure but I was
wondering if you had any other
recommendations for that I guess I could
try and hack into the software side so
sometimes for example the LEDs on this
device they're harmless like I could
take them off I don't have to change
them to different color just because
they can and they're not part of the
main electric board sometimes though
these components like the mics like in
the echo case there are part of the main
board that makes everything else run and
then you'll need to think of a creative
solution for example actually start
reverse engine
in the circuit understanding what it
expects it like what the interactions it
expects is maybe you know just emulating
somehow a mic that's also possible but
in this case maybe some side channel
things like preventing it from
transmitting to the Internet and it's a
good question I don't have anything
smart to say about how to fix it though
yeah you need like you need to be trying
that's that's one important takeaway
thank you so much it's very inspiring
thank you thank you thanks Michael for a
great talk while backward I'm up I work
in IOT stuff so it was fun to see how
things get taken apart and then I really
appreciate everything you've done
there's a project called the thing
system which unfortunately when poof but
it was all done open source so anyone
who's looking to hack their devices
especially the early Gen ones the thing
system was really cool and they just
basically bought everything they could
in 2013 and 2014 and kind of did this in
publish stuff and I'd say as well the
other one to look at maybe is openhab I
don't know if that came up on your on
your list but it's a there's a lot of
people that will do the discussion and
similar things on some of the devices
and then try and sort of coordinate them
under a steward or something that runs
on a Raspberry Pi in the home before
letting the stuff out too so there's
something called home assistant which is
awesome which someone told me about it
has it's basically like a platform to
control IOT devices it has it can talk
to a lot of devices and it can do some
cool things like I don't know it
connects to a lot of data sources so you
can say when the angle of the Sun is
very low then start the lights without
me having to you know get off my chair
and turn it on that's that's exactly the
thing you should be looking for like
whether the device itself is supported
by platforms like that the open
platforms whether you can reflash it
for example this device I still have no
idea how I can get
own custom custom three more on it it
seems a bit hard but the point is try
hard things so I'm definitely going to
try it and hopefully I mean I could do
something open-source that you know I I
don't that I can I can know exactly
what's running on that yeah just on in
response to the question about the about
the optical transmission for the Wi-Fi
the other thing I've seen a lot of with
that is audio transmission you see that
a lot of a lot of IP cameras when they
when they want to connect to some Wi-Fi
network they never connected to before
it'll actually could be any number of
protocols to do it but it'll actually
send it out over over sound to the
microphone on the camera and pick it up
that way there's there are several
different ways that you see that where
it doesn't exactly want to want to
connect to it as long as you send out
its own AP but it does want you to have
some way of can I can do it yeah there's
a lot of creative solutions like that so
I mean it's hard for me to understand
why if you already have a Wi-Fi chip
that can act as an AP maybe it can't act
as it might be maybe it's just some easy
way that someone thought of and didn't
really think of alternatives but it also
seems like something that would be very
error-prone right although they do use
tones that humans can produce and
usually yeah the other things that may
very well be in so many cases the people
building the system are thinking of it
in terms of a security camera system or
or that sort of a system so you're
you're looking at it and you've got
you're not necessarily thinking about it
in terms of the network side of it even
to add an internet to it
very wealthy recently the company work
at Vito it's actually an IOT company
although I'm just like a back-end
developer this is something I've done
like on my own time but we've looked
into I don't know like a few dozen maybe
IOT cameras and there's like every
camera look at has a ton of CVS and a
ton of things that are broken
[Music]
unfortunately this is still the state of
the commercial security market like the
commercial can't execute
security camera market but that's why
we're here to make it better I shall
talk might have a question I don't know
whether there may be somebody else in
the audience might want to say something
you're getting touched me but my concern
and of course is cars so I want to find
the the wireless transmitter in my car
wring its neck and get rid of the
microphone into while I'm at it so any
suggestions for how to go about doing
that no long term I mean I can think of
a few ways just off the top of my head
it's usually connected to something in
the OBD I mean I'm sure you can like
find someone's done it before and if
you're the first and it just means
you'll be the one getting all the glory
when you publish it right
back to some cars it's a separate move
here that only runs both Lu two other
times it will be part of the overall
telematics module so you can't you can't
always just unplug it without waiting
over to the power amplifier come on
maybe some years old but might occur I
heard they are not many car
manufacturers are not yet making it so
that removing the telematics module
cripples and bricks the car so I don't
see any use for the telematics or
microphone whatsoever I just want to get
rid of the whole that all subsystems
I like Rick the car that's they said
that we have to use these words now
Jabra have supported it until your
Bluetooth but don't want Nick phoning
home the box will have connectors for
for GPS and a data center and talk to
some plug the attempts
it's great to see your research and how
you went through reversing the the
firmware with some strings and stuff
like that I was wondering because you
know some strings can be packed and if
people are hiding things was so where's
the media chip a separate was it a
separate chip from the SOC or was it all
in one package it's all in one package
so it also has its own the the femur I
got was from separate flash memory chip
the the chip itself also has some memory
so first of all some data might be
packed like he said although I mean why
would they bother right but some of the
code might be on the chip itself which I
didn't that wasn't part of it wasn't an
easy thing to do which is something that
I pride myself in doing easy things okay
I was just that would make it a little
difficult for my question but I was
wondering if there was any opportunity
to use a logic analyzers in order to try
to extract like configuration data for
like modems and things like that no no
we used a freeware reader from the flash
memory chip we didn't it's like
specialized device that we have but you
can also do it I I mean we could we
could try and analyze the board like we
said and see what's actually happening
and then just remove the chip and try
and emulate it with something another
but that's something we thought of but
again it's hard right like yeah
I really enjoyed your talk and really
appreciate these kinds of exercises in
the United States water heaters tend to
be I think for most people with 40
gallon drum that is either gas or
electric and it tends to always be on so
when you turn the faucet on the water
eventually gets hot
there's the newer flash you know hot
water on demand I was wondering if you
could take a minute to describe what
this water heater is and you know having
the switch in the house is it a tank is
it a electric so that's a good question
maybe I should have explained it a
little bit better I'm from Israel in
case Mac sentence will give it away we
have drums that are electrically heated
and the drums themselves are usually on
the roof of the house sometimes you have
a solar heater and in this case it's
controlled by basically all you have is
a button and I guess that's why the
device is only for the Israeli market
the form factor of it and of course the
way it behaves but uh yeah that's that's
what it is
water comes from somewhere magically
yeah I mean maybe that's something I
should check where it comes from
[Laughter]
cool so thank you very much
[Applause]