SlideShare a Scribd company logo
1 of 27
Building a different sort of
WebRTC app
Tim Panton - Protocol Droid - westhawk Ltd
@steely_glint
@steely_glint - Westhawk Ltd
@steely_glint - Westhawk Ltd
@steely_glint - Westhawk Ltd
@steely_glint - Westhawk Ltd
@steely_glint - Westhawk Ltd
@steely_glint - Westhawk Ltd
Security isn’t what it was.
@steely_glint - Westhawk Ltd
Ideal Internet of everything
Protocol would be
Standardized
Secure
Widely deployed
Peer-to-Peer (NAT traversal)
Realtime
Strong on Identity management
Mobile capable (and smaller)
User-centric
@steely_glint - Westhawk Ltd
RTCweb Protocol is
Standardized
Secure
Widely deployed
Peer-to-Peer (NAT traversal)
Realtime
Strong on Identity management
Mobile capable (and smaller) ?
User-centric
@steely_glint - Westhawk Ltd
What we will build today
Realtime
Authenticated
P2P communication
Between a small device
and a webRTC browser
- using the DataChannel but no passwords.
@steely_glint - Westhawk Ltd
Components we need
WebRTC (datachannel) app in my smartphone
WebRTC (datachannel) embedded in a device
WebRTC service for rendevous
Some sort of pairing
@steely_glint - Westhawk Ltd
Components we will use
Chrome on android (well Mac - for easy AV)
Lightweight stack on device
Simple websockets message hub
(https://github.com/steely-glint/fingersmith)
QRcode pairing
@steely_glint - Westhawk Ltd
Duckling protocol
Described by Ross Anderson in
1990s
Device trusts first thing it sees
We flip this and the device shows
QRcode
Smartphone then calls this address
First to connect claims ownership
https://www.flickr.com/photos/bunnygoth/14021732859/
Demo of QR using yoPet.us
Code walk through of
Fingersmith
@steely_glint - Westhawk Ltd
Which address token?
WebRTC has no built in identity so …
Random key
Generated server side (like XMPP anon)
Generated client side and asserted to service
(As in Respoke, Twillio etc)
Exchanged over QR code at ‘hatching’
Stored locally and reused for ‘life’
@steely_glint - Westhawk Ltd
But wait…
Full disclosure:
this is such a good idea I filed a patent on it
Whats this fingerprint thing ?
Hash of the x509 cert used in DTLS exchange
Can we use that as an address ?
Yes - it means the duckling can tell that it is mommy calling
and ignore all other distractions.
More on this at IIT RTC conference in October…
@steely_glint - Westhawk Ltd
Javascript walkthrough
Dummy offer to find it at start-up
Phono.sdp.js parse SDP to extract fingerprint
(open source - thanks tropo)
Ipseorama to set up DataChannel
via Fingersmith
generateCertificate + IndexDB to make firefox use
stable identity
@steely_glint - Westhawk Ltd
Device Code options
Javascript
Use google’s webrtc wrapped in node
C/C++
Use Janus codebase etc….
Java
DIY
@steely_glint - Westhawk Ltd
Yep, you guessed it,
I took the Java way.
STUN/TURN/ICE
Ice4j - Jitsi
DTLS
BouncyCastle - Tropo (now Cisco)
SCTP/DCEP
in progress….
@steely_glint - Westhawk Ltd
Demo on Beaglebone
Think of it as an American Pi :-)
Typical of future devices
Small footprint
Low power
Linux
ARM (see Intel Edison)
@steely_glint - Westhawk Ltd
What, that’s not small enough
Arm 9
300Mhz
64 Mb
Linux
@steely_glint - Westhawk Ltd
Lego EV3
Lego EV3
Arm 9
300Mhz
64 Mb
Linux
LeJos Java ;-)
@steely_glint - Westhawk Ltd
Demo
@steely_glint - Westhawk Ltd
By using webRTC
data channel we have
Standardized
Secure
Widely deployed
Peer-to-Peer (NAT traversal)
Realtime
Strong on Identity management
Mobile capable (and smaller)
User-centric
tldr;
WebRTC isn’t just for video calls - it
can solve Internet of Everything
problems too.
Tim Panton - Protocol Droid - Westhawk Ltd
@steely_glint

More Related Content

Similar to Kranky geek15 - securing IoT with webrtc

Hacktivity 2016: The real risks of the IoT security-nightmare: Hacking IP cam...
Hacktivity 2016: The real risks of the IoT security-nightmare: Hacking IP cam...Hacktivity 2016: The real risks of the IoT security-nightmare: Hacking IP cam...
Hacktivity 2016: The real risks of the IoT security-nightmare: Hacking IP cam...
Zoltan Balazs
 

Similar to Kranky geek15 - securing IoT with webrtc (20)

10 voipmistakes
10 voipmistakes10 voipmistakes
10 voipmistakes
 
Case Studies and Lessons Learned from SSL/TLS Certificate Verification Vulner...
Case Studies and Lessons Learned from SSL/TLS Certificate Verification Vulner...Case Studies and Lessons Learned from SSL/TLS Certificate Verification Vulner...
Case Studies and Lessons Learned from SSL/TLS Certificate Verification Vulner...
 
HTTP/3 for everyone
HTTP/3 for everyoneHTTP/3 for everyone
HTTP/3 for everyone
 
Hello 1 2 3, can you see me now?
Hello 1 2 3, can you see me now?Hello 1 2 3, can you see me now?
Hello 1 2 3, can you see me now?
 
WebRTC Tutorial by Dean Bubley of Disruptive Analysis & Tim Panton of Westhaw...
WebRTC Tutorial by Dean Bubley of Disruptive Analysis & Tim Panton of Westhaw...WebRTC Tutorial by Dean Bubley of Disruptive Analysis & Tim Panton of Westhaw...
WebRTC Tutorial by Dean Bubley of Disruptive Analysis & Tim Panton of Westhaw...
 
D1 t1 t. yunusov k. nesterov - bootkit via sms
D1 t1   t. yunusov k. nesterov - bootkit via smsD1 t1   t. yunusov k. nesterov - bootkit via sms
D1 t1 t. yunusov k. nesterov - bootkit via sms
 
The year of the peer-to-peer web
The year of the peer-to-peer webThe year of the peer-to-peer web
The year of the peer-to-peer web
 
Architecture in Ajax Applications
Architecture in Ajax ApplicationsArchitecture in Ajax Applications
Architecture in Ajax Applications
 
Node summit workshop
Node summit workshopNode summit workshop
Node summit workshop
 
Morecrypto in the world of SIP - the Session Initiation Protocol
Morecrypto in the world of SIP - the Session Initiation ProtocolMorecrypto in the world of SIP - the Session Initiation Protocol
Morecrypto in the world of SIP - the Session Initiation Protocol
 
WebRTC Summit November 2013 - WebRTC Interoperability (and why it is important)
WebRTC Summit November 2013 - WebRTC Interoperability (and why it is important)WebRTC Summit November 2013 - WebRTC Interoperability (and why it is important)
WebRTC Summit November 2013 - WebRTC Interoperability (and why it is important)
 
WebRTC Reborn - Cloud Expo / WebRTC Summit
WebRTC Reborn - Cloud Expo / WebRTC SummitWebRTC Reborn - Cloud Expo / WebRTC Summit
WebRTC Reborn - Cloud Expo / WebRTC Summit
 
HTTPS: What, Why and How (SmashingConf Freiburg, Sep 2015)
HTTPS: What, Why and How (SmashingConf Freiburg, Sep 2015)HTTPS: What, Why and How (SmashingConf Freiburg, Sep 2015)
HTTPS: What, Why and How (SmashingConf Freiburg, Sep 2015)
 
WebRTC Reborn Hackference
WebRTC Reborn HackferenceWebRTC Reborn Hackference
WebRTC Reborn Hackference
 
HTTP/3 is next generation HTTP
HTTP/3 is next generation HTTPHTTP/3 is next generation HTTP
HTTP/3 is next generation HTTP
 
Hacktivity 2016: The real risks of the IoT security-nightmare: Hacking IP cam...
Hacktivity 2016: The real risks of the IoT security-nightmare: Hacking IP cam...Hacktivity 2016: The real risks of the IoT security-nightmare: Hacking IP cam...
Hacktivity 2016: The real risks of the IoT security-nightmare: Hacking IP cam...
 
Programming for the Internet of Things
Programming for the Internet of ThingsProgramming for the Internet of Things
Programming for the Internet of Things
 
Ethereum Devcon1 Report (summary writing)
Ethereum Devcon1 Report (summary writing)Ethereum Devcon1 Report (summary writing)
Ethereum Devcon1 Report (summary writing)
 
WebRTC Integration from Tim Panton
WebRTC Integration from Tim PantonWebRTC Integration from Tim Panton
WebRTC Integration from Tim Panton
 
WebRTC Reborn - Full Stack Toronto
WebRTC Reborn -  Full Stack TorontoWebRTC Reborn -  Full Stack Toronto
WebRTC Reborn - Full Stack Toronto
 

More from Tim Panton (6)

Putting the 'web' into webRTC
Putting the 'web' into webRTCPutting the 'web' into webRTC
Putting the 'web' into webRTC
 
Simple secure federated identity for webRTC (your new phone number)
Simple secure federated identity for webRTC (your new phone number)Simple secure federated identity for webRTC (your new phone number)
Simple secure federated identity for webRTC (your new phone number)
 
Ice with that sir? Or what webRTC does once it has a UDP connection
Ice with that sir? Or what webRTC does once it has a UDP connectionIce with that sir? Or what webRTC does once it has a UDP connection
Ice with that sir? Or what webRTC does once it has a UDP connection
 
Yo pet - building a webRTC app in 20 mins
Yo pet - building a webRTC app in 20 minsYo pet - building a webRTC app in 20 mins
Yo pet - building a webRTC app in 20 mins
 
Westhawk integration
Westhawk integrationWesthawk integration
Westhawk integration
 
WebRTC Standards overview.
WebRTC Standards overview.WebRTC Standards overview.
WebRTC Standards overview.
 

Recently uploaded

VIP Call Girls Pollachi 7001035870 Whatsapp Number, 24/07 Booking
VIP Call Girls Pollachi 7001035870 Whatsapp Number, 24/07 BookingVIP Call Girls Pollachi 7001035870 Whatsapp Number, 24/07 Booking
VIP Call Girls Pollachi 7001035870 Whatsapp Number, 24/07 Booking
dharasingh5698
 
valsad Escorts Service ☎️ 6378878445 ( Sakshi Sinha ) High Profile Call Girls...
valsad Escorts Service ☎️ 6378878445 ( Sakshi Sinha ) High Profile Call Girls...valsad Escorts Service ☎️ 6378878445 ( Sakshi Sinha ) High Profile Call Girls...
valsad Escorts Service ☎️ 6378878445 ( Sakshi Sinha ) High Profile Call Girls...
Call Girls In Delhi Whatsup 9873940964 Enjoy Unlimited Pleasure
 
6.High Profile Call Girls In Punjab +919053900678 Punjab Call GirlHigh Profil...
6.High Profile Call Girls In Punjab +919053900678 Punjab Call GirlHigh Profil...6.High Profile Call Girls In Punjab +919053900678 Punjab Call GirlHigh Profil...
6.High Profile Call Girls In Punjab +919053900678 Punjab Call GirlHigh Profil...
@Chandigarh #call #Girls 9053900678 @Call #Girls in @Punjab 9053900678
 
➥🔝 7737669865 🔝▻ mehsana Call-girls in Women Seeking Men 🔝mehsana🔝 Escorts...
➥🔝 7737669865 🔝▻ mehsana Call-girls in Women Seeking Men  🔝mehsana🔝   Escorts...➥🔝 7737669865 🔝▻ mehsana Call-girls in Women Seeking Men  🔝mehsana🔝   Escorts...
➥🔝 7737669865 🔝▻ mehsana Call-girls in Women Seeking Men 🔝mehsana🔝 Escorts...
nirzagarg
 
📱Dehradun Call Girls Service 📱☎️ +91'905,3900,678 ☎️📱 Call Girls In Dehradun 📱
📱Dehradun Call Girls Service 📱☎️ +91'905,3900,678 ☎️📱 Call Girls In Dehradun 📱📱Dehradun Call Girls Service 📱☎️ +91'905,3900,678 ☎️📱 Call Girls In Dehradun 📱
📱Dehradun Call Girls Service 📱☎️ +91'905,3900,678 ☎️📱 Call Girls In Dehradun 📱
@Chandigarh #call #Girls 9053900678 @Call #Girls in @Punjab 9053900678
 
Thalassery Escorts Service ☎️ 6378878445 ( Sakshi Sinha ) High Profile Call G...
Thalassery Escorts Service ☎️ 6378878445 ( Sakshi Sinha ) High Profile Call G...Thalassery Escorts Service ☎️ 6378878445 ( Sakshi Sinha ) High Profile Call G...
Thalassery Escorts Service ☎️ 6378878445 ( Sakshi Sinha ) High Profile Call G...
Call Girls In Delhi Whatsup 9873940964 Enjoy Unlimited Pleasure
 
Lucknow ❤CALL GIRL 88759*99948 ❤CALL GIRLS IN Lucknow ESCORT SERVICE❤CALL GIRL
Lucknow ❤CALL GIRL 88759*99948 ❤CALL GIRLS IN Lucknow ESCORT SERVICE❤CALL GIRLLucknow ❤CALL GIRL 88759*99948 ❤CALL GIRLS IN Lucknow ESCORT SERVICE❤CALL GIRL
Lucknow ❤CALL GIRL 88759*99948 ❤CALL GIRLS IN Lucknow ESCORT SERVICE❤CALL GIRL
imonikaupta
 

Recently uploaded (20)

Real Men Wear Diapers T Shirts sweatshirt
Real Men Wear Diapers T Shirts sweatshirtReal Men Wear Diapers T Shirts sweatshirt
Real Men Wear Diapers T Shirts sweatshirt
 
20240508 QFM014 Elixir Reading List April 2024.pdf
20240508 QFM014 Elixir Reading List April 2024.pdf20240508 QFM014 Elixir Reading List April 2024.pdf
20240508 QFM014 Elixir Reading List April 2024.pdf
 
Trump Diapers Over Dems t shirts Sweatshirt
Trump Diapers Over Dems t shirts SweatshirtTrump Diapers Over Dems t shirts Sweatshirt
Trump Diapers Over Dems t shirts Sweatshirt
 
20240509 QFM015 Engineering Leadership Reading List April 2024.pdf
20240509 QFM015 Engineering Leadership Reading List April 2024.pdf20240509 QFM015 Engineering Leadership Reading List April 2024.pdf
20240509 QFM015 Engineering Leadership Reading List April 2024.pdf
 
Ganeshkhind ! Call Girls Pune - 450+ Call Girl Cash Payment 8005736733 Neha T...
Ganeshkhind ! Call Girls Pune - 450+ Call Girl Cash Payment 8005736733 Neha T...Ganeshkhind ! Call Girls Pune - 450+ Call Girl Cash Payment 8005736733 Neha T...
Ganeshkhind ! Call Girls Pune - 450+ Call Girl Cash Payment 8005736733 Neha T...
 
VIP Call Girls Pollachi 7001035870 Whatsapp Number, 24/07 Booking
VIP Call Girls Pollachi 7001035870 Whatsapp Number, 24/07 BookingVIP Call Girls Pollachi 7001035870 Whatsapp Number, 24/07 Booking
VIP Call Girls Pollachi 7001035870 Whatsapp Number, 24/07 Booking
 
valsad Escorts Service ☎️ 6378878445 ( Sakshi Sinha ) High Profile Call Girls...
valsad Escorts Service ☎️ 6378878445 ( Sakshi Sinha ) High Profile Call Girls...valsad Escorts Service ☎️ 6378878445 ( Sakshi Sinha ) High Profile Call Girls...
valsad Escorts Service ☎️ 6378878445 ( Sakshi Sinha ) High Profile Call Girls...
 
APNIC Updates presented by Paul Wilson at ARIN 53
APNIC Updates presented by Paul Wilson at ARIN 53APNIC Updates presented by Paul Wilson at ARIN 53
APNIC Updates presented by Paul Wilson at ARIN 53
 
6.High Profile Call Girls In Punjab +919053900678 Punjab Call GirlHigh Profil...
6.High Profile Call Girls In Punjab +919053900678 Punjab Call GirlHigh Profil...6.High Profile Call Girls In Punjab +919053900678 Punjab Call GirlHigh Profil...
6.High Profile Call Girls In Punjab +919053900678 Punjab Call GirlHigh Profil...
 
➥🔝 7737669865 🔝▻ mehsana Call-girls in Women Seeking Men 🔝mehsana🔝 Escorts...
➥🔝 7737669865 🔝▻ mehsana Call-girls in Women Seeking Men  🔝mehsana🔝   Escorts...➥🔝 7737669865 🔝▻ mehsana Call-girls in Women Seeking Men  🔝mehsana🔝   Escorts...
➥🔝 7737669865 🔝▻ mehsana Call-girls in Women Seeking Men 🔝mehsana🔝 Escorts...
 
Story Board.pptxrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrr
Story Board.pptxrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrStory Board.pptxrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrr
Story Board.pptxrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrr
 
Dubai=Desi Dubai Call Girls O525547819 Outdoor Call Girls Dubai
Dubai=Desi Dubai Call Girls O525547819 Outdoor Call Girls DubaiDubai=Desi Dubai Call Girls O525547819 Outdoor Call Girls Dubai
Dubai=Desi Dubai Call Girls O525547819 Outdoor Call Girls Dubai
 
📱Dehradun Call Girls Service 📱☎️ +91'905,3900,678 ☎️📱 Call Girls In Dehradun 📱
📱Dehradun Call Girls Service 📱☎️ +91'905,3900,678 ☎️📱 Call Girls In Dehradun 📱📱Dehradun Call Girls Service 📱☎️ +91'905,3900,678 ☎️📱 Call Girls In Dehradun 📱
📱Dehradun Call Girls Service 📱☎️ +91'905,3900,678 ☎️📱 Call Girls In Dehradun 📱
 
Thalassery Escorts Service ☎️ 6378878445 ( Sakshi Sinha ) High Profile Call G...
Thalassery Escorts Service ☎️ 6378878445 ( Sakshi Sinha ) High Profile Call G...Thalassery Escorts Service ☎️ 6378878445 ( Sakshi Sinha ) High Profile Call G...
Thalassery Escorts Service ☎️ 6378878445 ( Sakshi Sinha ) High Profile Call G...
 
20240507 QFM013 Machine Intelligence Reading List April 2024.pdf
20240507 QFM013 Machine Intelligence Reading List April 2024.pdf20240507 QFM013 Machine Intelligence Reading List April 2024.pdf
20240507 QFM013 Machine Intelligence Reading List April 2024.pdf
 
Lucknow ❤CALL GIRL 88759*99948 ❤CALL GIRLS IN Lucknow ESCORT SERVICE❤CALL GIRL
Lucknow ❤CALL GIRL 88759*99948 ❤CALL GIRLS IN Lucknow ESCORT SERVICE❤CALL GIRLLucknow ❤CALL GIRL 88759*99948 ❤CALL GIRLS IN Lucknow ESCORT SERVICE❤CALL GIRL
Lucknow ❤CALL GIRL 88759*99948 ❤CALL GIRLS IN Lucknow ESCORT SERVICE❤CALL GIRL
 
Hire↠Young Call Girls in Tilak nagar (Delhi) ☎️ 9205541914 ☎️ Independent Esc...
Hire↠Young Call Girls in Tilak nagar (Delhi) ☎️ 9205541914 ☎️ Independent Esc...Hire↠Young Call Girls in Tilak nagar (Delhi) ☎️ 9205541914 ☎️ Independent Esc...
Hire↠Young Call Girls in Tilak nagar (Delhi) ☎️ 9205541914 ☎️ Independent Esc...
 
"Boost Your Digital Presence: Partner with a Leading SEO Agency"
"Boost Your Digital Presence: Partner with a Leading SEO Agency""Boost Your Digital Presence: Partner with a Leading SEO Agency"
"Boost Your Digital Presence: Partner with a Leading SEO Agency"
 
APNIC Policy Roundup, presented by Sunny Chendi at the 5th ICANN APAC-TWNIC E...
APNIC Policy Roundup, presented by Sunny Chendi at the 5th ICANN APAC-TWNIC E...APNIC Policy Roundup, presented by Sunny Chendi at the 5th ICANN APAC-TWNIC E...
APNIC Policy Roundup, presented by Sunny Chendi at the 5th ICANN APAC-TWNIC E...
 
best call girls in Hyderabad Finest Escorts Service 📞 9352988975 📞 Available ...
best call girls in Hyderabad Finest Escorts Service 📞 9352988975 📞 Available ...best call girls in Hyderabad Finest Escorts Service 📞 9352988975 📞 Available ...
best call girls in Hyderabad Finest Escorts Service 📞 9352988975 📞 Available ...
 

Kranky geek15 - securing IoT with webrtc

  • 1. Building a different sort of WebRTC app Tim Panton - Protocol Droid - westhawk Ltd @steely_glint
  • 9. @steely_glint - Westhawk Ltd Ideal Internet of everything Protocol would be Standardized Secure Widely deployed Peer-to-Peer (NAT traversal) Realtime Strong on Identity management Mobile capable (and smaller) User-centric
  • 10. @steely_glint - Westhawk Ltd RTCweb Protocol is Standardized Secure Widely deployed Peer-to-Peer (NAT traversal) Realtime Strong on Identity management Mobile capable (and smaller) ? User-centric
  • 11. @steely_glint - Westhawk Ltd What we will build today Realtime Authenticated P2P communication Between a small device and a webRTC browser - using the DataChannel but no passwords.
  • 12. @steely_glint - Westhawk Ltd Components we need WebRTC (datachannel) app in my smartphone WebRTC (datachannel) embedded in a device WebRTC service for rendevous Some sort of pairing
  • 13. @steely_glint - Westhawk Ltd Components we will use Chrome on android (well Mac - for easy AV) Lightweight stack on device Simple websockets message hub (https://github.com/steely-glint/fingersmith) QRcode pairing
  • 14. @steely_glint - Westhawk Ltd Duckling protocol Described by Ross Anderson in 1990s Device trusts first thing it sees We flip this and the device shows QRcode Smartphone then calls this address First to connect claims ownership https://www.flickr.com/photos/bunnygoth/14021732859/
  • 15. Demo of QR using yoPet.us
  • 16. Code walk through of Fingersmith
  • 17. @steely_glint - Westhawk Ltd Which address token? WebRTC has no built in identity so … Random key Generated server side (like XMPP anon) Generated client side and asserted to service (As in Respoke, Twillio etc) Exchanged over QR code at ‘hatching’ Stored locally and reused for ‘life’
  • 18. @steely_glint - Westhawk Ltd But wait… Full disclosure: this is such a good idea I filed a patent on it Whats this fingerprint thing ? Hash of the x509 cert used in DTLS exchange Can we use that as an address ? Yes - it means the duckling can tell that it is mommy calling and ignore all other distractions. More on this at IIT RTC conference in October…
  • 19. @steely_glint - Westhawk Ltd Javascript walkthrough Dummy offer to find it at start-up Phono.sdp.js parse SDP to extract fingerprint (open source - thanks tropo) Ipseorama to set up DataChannel via Fingersmith generateCertificate + IndexDB to make firefox use stable identity
  • 20. @steely_glint - Westhawk Ltd Device Code options Javascript Use google’s webrtc wrapped in node C/C++ Use Janus codebase etc…. Java DIY
  • 21. @steely_glint - Westhawk Ltd Yep, you guessed it, I took the Java way. STUN/TURN/ICE Ice4j - Jitsi DTLS BouncyCastle - Tropo (now Cisco) SCTP/DCEP in progress….
  • 22. @steely_glint - Westhawk Ltd Demo on Beaglebone Think of it as an American Pi :-) Typical of future devices Small footprint Low power Linux ARM (see Intel Edison)
  • 23. @steely_glint - Westhawk Ltd What, that’s not small enough Arm 9 300Mhz 64 Mb Linux
  • 24. @steely_glint - Westhawk Ltd Lego EV3 Lego EV3 Arm 9 300Mhz 64 Mb Linux LeJos Java ;-)
  • 26. @steely_glint - Westhawk Ltd By using webRTC data channel we have Standardized Secure Widely deployed Peer-to-Peer (NAT traversal) Realtime Strong on Identity management Mobile capable (and smaller) User-centric
  • 27. tldr; WebRTC isn’t just for video calls - it can solve Internet of Everything problems too. Tim Panton - Protocol Droid - Westhawk Ltd @steely_glint