Hacking Primetime TV News Broadcasters

hey thank you very much besides dundee it's fabulous isn't it what a great building um my name is callum wilson uh i have my uh my cv it's really you can look at linkedin basically i've worked for the absolute worst people you can possibly think think of in government and yes three latin fallout four letter acronyms and fintech and so on but today i'm talking to you about television um i work for uh c eagle we've got a team together which is a combination of the broadcast tech the people actually build studios and build outside broadcast and security people and we've built um things like augmented celebration studio sets and this what we're going to do in this talk

is actually look behind the scenes of how tv broadcast works and how you can hack into it um there's one of our engineers on the graham norton set just a little bit of thing and also formula one formula e as well so who hands up who has watched television in the last week that's not as many people as i thought so television could include netflix and right okay right so we all watch tv right hard audience this so we pretty much watched tv except for you so uh hands up well keep your hands up come on keep your hands up okay put your hand down if you haven't watched tv news so if you watch tv news keep your hand

up all right so it's about half half so you watch live tv well for those who don't this is going to be kind of interesting for those that do you're going to see behind the scenes but before we go on a little story about hacking tv news normal disclaimers apply because you'll end up being on the news if you hack the news let's have a little look back and see how it all started so the first uh tv broadcast in scotland was actually on the queen's coronation in 1953. the bbc erected a crane near escort bride which had their tv transmitter on and they actually broadcast a test card for two days you've got to bear in mind

that no one's ever seen a tv before so you have to get the tv and tune it into the test card and then get it working this actually for my family was kind of important because my grandfather had a electrician shop in west coast over in the west coast and he bought a bush tv 22a which is the only tv you could get at the time and actually put it in his shop that's the actual tv there and the reason it's in my front yard is because it i was going to bring it today but it kind of went on fire so yeah um they wouldn't let me so that's actual tv and he had 50 people in the

shop watching that tv the queen's coronation and then again in the evening another 50 people to watch the the actual repeat and there is there's the inside of it now it's actually pretty dangerous thing and never ever ever do this take the back off an old tv because there's grease and these are actually valves this is so this is before microprocessors came along and you can just see that they're glowing orange that was the precursor to fire um so with 50 people another lovely big lg screen here very nice how big do you think that actually is for 50 people watching it yeah yeah it's that size that's the size of the screen just a little bit bigger than a postcard

and so that's how tv broadcast started in in scotland that wasn't the start of tv broadcast in the uk they actually um started in 1930s these are the first few frames of the broadcast obviously they had the camera pointing the wrong direction this guy in the white jacket was the very first part uh of when it when it started so but t tv is different i'm sure some of you have done some pen tests of mostly fintechs and banks and pharmacies and hospitals and stuff like that and you can break into them really you go home the next day you break into somewhere else but tv is different it's got heart and soul you are

the people you watch this is the this is um a coronation street which is for those of you uh who don't know is a has been the longest-running uh soap drama in the uk but the characters involved in that are close to you these are long-running programs you get involved in look at the number tweet number of people tweeting about love island or any of the sort of soaps and so on tv is something that's cultural it's it's something that goes with you as a culture and so when we start talking about hacking into tv stations it's different it's not like breaking into your bank it's it's a it's a different thing you can affect a lot

of people by hacking into a tv broadcast um channel 4 in the uk in the 1980s was the um the first time there was sort of an unregulated um channel it was designed to all the commissions had to be external to the channel had really edgy racy well soft porn after nine o'clock um tv and it was the first first in the uk uh to be like that and that become important in a moment then in the late 1980s i'm sort of showing my age here i think i'm a little bit older than most people here um that was when most of the tv channels sort of started to come together in that time there were three main

alternatives sky with its mini dish the square reel from bsb and a company called on digital there's a there was a story i was going to tell about this but uh our lawyers said i should probably shouldn't and just lucky that the url for the guardian on this uh story is just hanging off the bottom there but basically there were allegations that one of these companies hacked into one of the other companies and got the root key of the on digital cards which there's a long story you can read about it in the guardian but basically what happened is you started to see these on digital cards being sold in market stalls and what happened

was this was a terrestrial uh digital tv product which allowed pay-per-view channels so that you could then pay on the using the smart card and you could then see the channels and of course they arrived next to nothing in all the markets through sort of naughtiness and they went out of business very very quickly after that some of the very early digital tv boxes had a smart card a little draw on them they don't anymore and that's because of the failure of that these two companies ended up um joining up together that's why it's called b sky b that's the sort of amalgamation of those two uh streaming in the uk started off with a bbc project

um like all government-funded projects spent a lot of money putting this together in 2007 was just when the iphone first came out you couldn't actually watch iplayer on an iphone iphone wasn't um powerful enough it didn't have a good good enough bandwidth that's the actual page from day one um thank you uh way back machine for that you may have heard of this company um what they called net something they started off as a mail-in dvd service and was struggling they actually tried to sell themselves to blockbuster does anyone not know who blockbuster is yeah you're claiming you do basically in the old days you had to rent videos for the weekend and put them through a

little post box on a monday morning and if you forgot you had to pay extra money for it so they started with that but they deleted their customer database pretty much invalidating the whole business and so i had to pivot onto streaming they weren't just quite lucky for them because they've done quite well i've heard um stranger things have happened so there was actually a uh uh uh yeah stranger things actually saving them at the moment from people removing the subscriptions there was actually another um mailing dvd service that went on to greater things called love films anyone know who they became amazon prime well done so yeah so there was funny how the two biggest streaming

services we have in the uk at the moment both started from mail-in dvds but tv also can be used for other things it's a it's a great way of getting oppressive messages across um we've seen television especially news broadcast which i'm going to focus on today being used for other things political even in the uk right now you're seeing politicians standing up quite regularly in front of tv telling their stories but also being used in international matters and there's nothing more powerful than this message this is tv reign in russia where the whole crew got in front of the camera and effectively said goodbye and walked off now i think most of you probably heard about

that you may have seen it in all the twitter noise and so on but you definitely wouldn't have heard of someone doing that on a youtube channel or a stomping off in a big huff it doesn't happen but when it happens on broadcast tv people pay attention [Music] so we come on to hacking let's talk a little bit about hacking the one of the first broadcast tv hacks and i'm not going to talk about you know game of thrones script being stolen the kind of media film stuff talking about broadcast things are actually getting broadcast this is the this was a fictional character called max headroom and max headroom actually funnily enough came from channel 4. channel 4 being edgy had

this really new down with the kids apparently that was the terminology of the time character who would be you know do his thing wgn tv in chicago uh which wgn stands for world greatest news we're running a nine o'clock news sports program basically a couple of presenters behind a desk telling about the local sports when this suddenly came on just basically just came on straight over the top of the tv and you've it's actually funny enough as i was building this um this this deck for today at b-sides there's been a few youtube videos come out about this which you may have seen but we can i'm going to go into a little bit more depth than they have

um so this was a 15 second clip that went straight over the top of the broadcast and then about two hours later past 11 p.m another channel which would say uh now the americans in the room could keep me right here public broadcaster pbs service and we're just showing uh an episode of doctor who and then there was a 90-second um video where max headroom had got spanked by a lady in uh anyway whatever so uh but a lot of people were saying well how does this happen so we'll talk about that and then why did it happen so this is signal hijacking so in chicago um the broadcast tv antenna it was on on top of a large

building and if you know the center of chicago there's a lot of tall buildings and so in those days they just used microwave point-to-point dish and these guys taped a video just like that and then stood on top of a tall building and used a much higher power signal to be able to um essentially overwrite if you like the broadcast signal now the inverse square law means just have to be closer to the to this part here to the antenna in order to take over the signal um what the there's been a lot of guesswork about who this guy was um he we think he must have been an insider because in the 1980s it would have been quite a big

trick to pull off you would have needed a lot of insider information for exactly what frequency and where this was you'll have to even a camera lens to film broadcast tv uh it's about 50 grand with another 150 grand for the back then you've got all the equipment to be able to um to broadcast and so on you could sort of do it with some rookie antenna hardware and a dish just if you're really really close but we think this was somebody probably well acquainted with the industry and potentially an ex ex employee of one of the tv stations because actually the dialogue mentions wgn a couple of times but what the other pundits have never said

is that why did he hit wgn tv and then carry on with the diatribe against wg gn tv on another channel well that's because this link here is a pay for service cost quite a lot of money actually and so what would have happened is that the uh wgm would have been using the main um dish and communication or distribution link as it's called during the nine o'clock news which is a lot of viewers and the doctor who's been shown on the other channel after 11 pm when things tend to quieten down and so what happened was the um [Music] they would have actually been using different broadcast frequencies and so it just so happened that the other

channel happened to be on the frequency where they were before so all that happened is that the hackers here basically re-broadcast on the same frequency but it went onto a different channel because it was actually the frequency of this link just here that hasn't been that hasn't come up in any of the reddit or any of the big investigations that have gone into this the fcc and the fbi tried to find this character but they never did and it's been quite a long time now so no one's ever come up to admit to it i'm not going to go through every single tv i think which can choose from my favorites this was the czech republic in

2007. they had an ip camera just sort of swept left and right behind their weather forecast i mean why wouldn't you so some artists looked at the hills and thought i know where that is hiked out into the woods basically got the camera and put another chip in it with their own video which included an atomic bomb going off um let's call it art shall we uh and it phil fooled absolutely no one and they broadcast it twice who was actually awake in the studio at that point but um they actually got got arrested and gotten quite a lot of trouble for that just for that just be put in the background for an uh a news weather

uh thing coming up to a little bit more up to date you'll have seen some of these there was um some satellite hacks uh in some of the areas in ukraine this is an epg hack electronic program guide every time you go on your tv whether you've got satellite or virgin media or you've got um terrestrial tv a pro there's a program guide that follows a certain standard in this case um an anti-war message was replacing the um the uh the name of the show i'm not gonna go into the politics of it that's not what i'm here for but i will say how we think it was actually done so when you're actually producing a tv

channel you need to schedule all your programs and that tends to be done inside the organization and then you send it out to collation and then onto the distribution mechanisms could be satellite terrestrial tv or whatever the number of stars are the hardest to hack so this is actually pretty hard to hack that's you know a wee bit hard that's absolutely piss easy and let's uh have a look at one shall we so um our company have done a lot of different a lot of work with um tv broadcasters and we've come across the scheduler apps um quite a bit and there's one we've actually hacked a number of times uh i i spoke to the team and said should we

reveal who it was and they said no so let's just call it the scheduler app this one was really easy it was a directory traversal attack i think some of the other speakers have talked about this kind of thing there were actually other attacks on this particular app and in that when we did the config we found the database password quite memorable if you can remember five numbers in order starting with one and of course once you've got into your uh database for the scheduler you can then start messing around you know and now also we found things like oh look there's all the user table wait a minute anything unusual they all got the same

password so really get a lot of control failures and what's happened here is that the a lot of the broadcast technology is designed for in studio and this stuff is out facing the internet it's just never designed for it and so it's quite simplistic application attacks like a directory traversal and then um into the database you can start messing around and taking changing tv channel names whatever your um your purpose is whether it's political you know uh or for lols or for the lols you know if like max headroom or for the artists and that's really how it's really for attention you're gonna hack tvs for attention a lot of people in especially when i work in

fintech they say security is all about security of data in live broadcast there is no data angle because once it's broadcast it's open and free so they don't care so it's really about um you know embarrassment factor and so on this is the event information table uh the from the epg and you can see that these are basically mandatory variables with a whole bunch of extra variables depending which platform you use it's got stuff like you know uh can kids watch it and so on and so forth if you're interested in this kind of thing i can recommend a app called ts duck um if you get ts duck you can it's get a dvb

a digital video broadcast receiver usb into your laptop then it cost a few quid for me from ebay or from amazon put a decent antenna on it and you can start actually sucking in all the tv data which is not just the picture the video but actually all the information behind it which is all this stuff and this actually goes on for a lot more data and you can start messing around with it and you can also replay it uh but carefully replaced you will be committing an offense especially if you change people's broadcast in your locality um the um tv channels in the uk these are terrestrial tv channels there's a really good website called digital bitrate

where it has all of european russian north african channels and what the actual frequencies are so here we are in dundee today there's a big antenna just to the north of here called angus and it's all the tv channels are basically collected together in what's called a multiplex so in the old days um in analog tv each channel will have its own frequency and then when digital switchover happened in the early 2000s 2012 was it i can't remember anyway in the 2000s they started bunching some of the channels together so they could get more channels in for the same frequency range and you can see the hd channels there's way less in that multiplex than there is

in the commercial channel so that's com4 that's commercial four and this is public sector broadcaster psb which is mostly bbc stuff um where you are in the uk you won't actually all get the same channels i'm not sure if people are aware of this but they're actually like uh local changes so oxford has its own tv station london live uh there used to be way more local channels but some of them have fallen to the side and also you get in so different regions so for example if you've got a tv if you're lucky enough to live and say the west coast of scotland you can actually tune into ireland to northern ireland or you can

tune into the um into the glasgow area and get different tv channels it's not all exactly the same within the uk and you can see all this information you get all the information down here from digitalbitrate.com so when you're programming your ts dark with a dvb usb key you can really really have a bit of fun here we are we're about here uh where are we about there there's a massive antenna on a hill up there and these are the um free mini freeview antennas there's one across the other side so this big antenna here is on top of a hill and gets a big range and these guys down here just fill in some of the gaps

especially in where the river is and they just rebroadcast on it on a different frequency you can look at that on uk free dot tv and give you all the information especially if you're not getting a good signal with your tv so the newsroom um this tv station just launched a few months ago uh it's uh quite interesting because they actually show some of the background and we want to talk a bit about the background of tv broadcast and this is just on a reel here you'll see that you um you've got the presenter in a studio with a big graphics display behind it there only are a few companies that sell the graphics displays they'll

be typically some sort of rolling text along the bottom there's only a few companies that do that and you'll see in the actual gallery the gallery is where the director sits and where sounds you've got sound mixer you've got somebody preparing scripts and sending packages and putting packages together and trying to get the whole thing as a fluid news item when you're watching news you'll find that actually they only focus a camera on a particular person or a package for around about eight eight to fifteen seconds now that i've told you that it ruins every single time you watch the news it flicks around all the time there's people controlling that and that's what all these screens are they've got all

the feeds coming in for sound and so on and actually um doing that one of uh i was uh playing this to uh the rest of the our team and they were horrified to see a green smoothie sitting on the desk with the uh in the chat in their director's hand because that can cause hundreds of thousands of pounds worth of damage so uh i was being told that if you ever spill a drink in a gallery there is there um they always ask is it coke because if it's coke they'll go and get a bucket of water and pour it over live electronics because it will actually save it uh whereas sludgy stuff like

that will kill it instantly that's just on the side so if you're ever hacking into a tv broadcaster take a can of coke uh so i don't know many of you probably work in finance and pharmacy and you know these kinds of organizations so when you're protecting an organization you're looking at linux windows cloudy stuff database platforms kubernetes and that kind of thing you can probably get agents for all of this and do your compliance scans off the shelf and attach them into your agents for your security operation center and so on you can't do that in tv broadcast they have those sites of systems but they also got all of this the tv broadcast industry is different

it uses hardware for particular purposes it doesn't run on commoditized systems apart from that database i showed you earlier so when you've got all of this type of equipment you start looking at the old school hacks and you look at the 1930s to 1980s most broadcasters operated within a studio and they would have something called a broadcast network with point-to-point connections typically big thick copper connections and if you worked in this uh studio you stood next to the thing that you're watching so cameras media control the new system new system is designed it's like so you can put all the material and packages and script and all the add-ons for a particular package all together so they can play it out at

any time so when you look at the news they will typically talk for a while and then there'll be a package of you know and here's uh sally and you know looking at the weather or whatever you know or on the beach front somewhere and all the various things even the lighting changes a lot of studios have uh different types of lighting and coloring that's all tuned for the tv cameras and so if you're going to do another show in the same studio you can make it look entirely different and also we'll have a back panel of um typically big big screens you can completely change the look and feel of a studio then in the um

sort of 1992-2007 the news started to become different so in the old days you'd get a script they'd be the same newcast newscast you just see them read it from beginning to end and that'd be the end of the news then they started moving to more package system where they would say they start reading the news article then you'd click to somebody else show a package which is just a media pre-prepared media clip and then go back to the studio and so journalists started to occupy more of the new studio and so they needed ip connections into here so it's your classic primarized network problem so once there was a primitized network some of you getting

holes punched through to allow the journalists on another floor of the building or in another part of the building to be able to get access and then you'll notice 2017 after that it starts getting a little bit nastier so in the last few years the whole of the tv broadcast industry has changed really really quickly so a lot of these systems have been replaced with ip so that to allow people to be able to access from home from tablets and laptops and so on and the answer to fix this because this is clearly bridgehead territory was just to put really crappy solutions in like that ftp servers are used quite a lot in media because they they're copying you

know gigabytes of data around never use ftps too slow um vpns really poor quality ones and various portals supplied by the manufacturers of this stuff and then you've got this this classic primitized network in just a few years is now absolutely everywhere this is a bit about recon we talked a bit about reckon and some of the other presentations just to show you how bad this is this is one of those um edge control vendor products this actually is a distribution product i've tried my hard to hardest to reduce the name of it and it's used to send broadcast from one location to another and quite a lot of channels use ip so they'll have a play

out server just transmitting channels to wherever they need to go to the distribution or from studio to studio or whatever and this is the main software vendor that does it and he's going to kick me if i say the name of it uh so quick showdown if everyone's never used showdown please have a great go and a lot of these tools because they are vendor produced have their name all over it and headers and all sorts very easy to search for this is actually a quick screenshot of it and i've tried to redact it as best i can these tools have a lot of things like oh look you can set up an ssh tunnel

straight into the studio that's really handy uh this was a real one it's on the internet um it's copyright 2017 it's still before the the the move to ip and what's happened is that um broadcast technicians have put this out onto the internet facing typically in amazon or in azure or into the endpoint you know a dmz of uh companies networks when it was never designed for that and so once you've hacked into this one you can then start getting access and start pivoting into further into the company and you can start breaking to the other things that we're talking about it's a really cool website called crt.sh you know if you i just searched for news

broadcaster and google these are the first three that came up you might be able to work out who they are please don't uh but basically if you start to see all of the uh external facing um endpoints that use the same certificate because let's face it everyone puts star.calum.com or whatever and just use the same certificate everywhere but look this news organization s3gw i don't know what that could be um and then you i've cut off but these lists go all the way down and there's lots of really cool stuff you start to see that these companies where only a few years ago would have had really one or two internet endpoints now have dozens of them

all leaky and ways into the organization but the biggest thing in broadcast and it's it feels like a bit of a con coming to a b sides to say that actually the biggest problem is hard-coded passwords it's uh but it's one of those things so the tool that i showed you before the content distribution tool with ssh tunneling has a default password which is one of these ones they're all crap and quite a lot of the hardware has hard-coded administrative passwords that you cannot change you can't change the username or the uh and these if you're ever looking at these kind of kind of things doesn't matter what industry you're in look for the manuals

the manuals are really helpful they tell you all this sort of stuff and there's a there's a difference in broadcast if i stop talking for five seconds it gets a little bit awkward if i stop talking for 15 seconds which i won't do you'll start getting a bit red and i'll look a bit nervous but 15 seconds in broadcast you lose your job if you go dark air in 15 seconds don't bother coming back even five seconds you might be lucky to still have a job so what happens is those people who are sitting in the gallery of all those tv screens mixing in signals from left right and center they're not concerned with security

they're concerned with keeping that broadcast alive um as i said before data is not important because as soon as you broadcast it it's public and so what they'll do is they rely on having default passwords and not just users logging in but the integrated tools so when i showed you before the tool all the cameras and lighting and everything integrates with each other they hard code those passwords in so if you buy vendor b's slow motion replay system it'll have these passwords all hard coded into them because that's what everyone uses so if you are going to try and secure a a broadcaster studio you've got a big job on your hand because not only do you

have just change the password as a default thing if you can you also have to change uh and make sure all that tallies with all of the integrated glue they call it glue which is just the integrations of different systems so there are so far behind this is really is what in finance certainly we've sorted out 20 years ago but tv broadcasters having a tough time of it and you've seen the hacks um we've we also used honeypot so it was really great justin's presentation there we've got a bird i never called it that before which is a pretend version of the uh the one of the content distribution systems and basically uh because it's starting to get quite

well known what the default passwords are we've got this fellow and we don't employ anyone in zhengzhao in china um so it's we just leave it logged on and then we take those ip addresses because um our business is basically providing security it's a security provider for tv broadcast so we'll just run that in and use it as part of our intelligence feed for um you know for other customers so uh yeah that's actually we use sentinel if you're interested in that kind of thing so we've talked a little bit about the hacking but what i want to do is look at this oh this is one more thing so this is you will have seen this in the news

people doing interviews from their back bedrooms lately that is brand new this particular system here is a backpack system from a vendor uh this is a real live studio context and what what's happened in the old days uh if you had a news issue you got the local tv company to drive out with their truck with a satellite dish on the roof and then you would pay about 50 grand for 10 minutes for uplink so then you do your package to camera next company will come along do their package to camera and so on that's how it worked but you'll remember that in um now i'm going to say 2018 but i might have my dates wrong

apologies for that there was a aircraft disaster in germany swiss border where german wings airplane flew into the mountain and that was the first time this technology had really been properly used and what happened was the tv truck from the local tv company got the closest it could on the road but was still many miles away so a good morning britain um journalist with one of these systems and this is a camera it's got a backpack with six sims in it which connects to the local um you know 4g network and you can actually do live broadcast with it i actually walked through all of the um words and got live broadcast that's the first time this system was ever put in

and you've seen this sort of thing happening all that broadcast straight into the studio onto that screen which they can mix into the into the broadcast and then they can have two-way conversations with the studio um that system uses streaming control server and ftp server both of which have hard-coded uh credentials and it has to be on the internet because you know so on so there's a long way to go and also this equipment's really expensive so you tend to rent it from a third party and when you rent it from a third party it comes with default credentials because no one's got time to change it so my favorite hack uh we broke into one

tv news organizer it wasn't eurovision this is eurovision's uh headquarters in luxembourg it wasn't them because it's just as a wiki commons image but you could actually change the satellites you can make it swing around and do all that sort of stuff that had no password at all so even better when you're looking at news this is us finishing off so when you look at news i don't want you to look at the present i want to look behind in the background they all do it they all do exactly the same and in the background you can probably see me crawling along the floor trying to breach their systems in the background this is what's

actually happening these aren't just for effect that's actually real galleries that's real information that's coming forward and uh there's a um you might see jerry actually but if you are interested in tv broadcast and hacking then come chat to us later be more like jerry it's the same look how happy he is there he is there look how happy he was that was 2 a.m the only time we could get access to the studio and we're doing a full application security view if you want to call it that or whatever it is for broadcast and yeah that vision mixer there has a hard coded password we could change all the buttons have a great time

so thanks so much

oh i've got time for questions you chat oh come on any questions then has anyone been on tv and in front of the camera i know there's a few earlier i've been in front of the camera

yeah yeah yeah so arkiva run the um uk terrestrial transmitter system but you'll have like sky do their dishes there's other satellites and pointing upwards by the way there's other uh satellite distribution systems you've got online distribution as well to things like youtube live streaming and so on and so forth and social media um i think that the bigger the organization that has the most i think as you get closer to the end point it gets much uh better but you saw i didn't go into it actually but in distribution during the conflict in the um eastern europe um there's some satellite nodes actually got taken out through various uh things so um i didn't include

that because it's quite a lot of material but yeah basically in the distribution side it does actually get attacked as well and it was one of the terrestrial in russia was also attacked on the distribution side

so about 50 of a new if you've got 24 hour rolling news about 50 is prepared packages but uh tv's different tv is about the art it's about the culture it's about person-to-person uh reaction and so when you go into these places and when i talk about the the title is lol's laws and lots of makeup there are people wearing a lot of makeup who will be all nicely dressed and be ready to go on and they're the people that we come to know and love um yeah it's just it's the way tv's been done since the 1930s uh i don't see it changing anytime soon

[Music]

so i spoke to the i've got good relationship the ncsc and i said hey guys is this not a um critical national infrastructure asset because media is kind of important i'm not sure if you've heard they went oh yeah it is isn't it but we don't look after that that's the department of culture media and sport so i went over to the department kitchen department culture media and sport and said hey see the m in your name isn't that like critical instruction yeah but you need to speak to the ncsc about that so basically what's happening in the uk is there isn't much um in terms of regular no there are they don't do pen tests and

they don't have um tons of security they are now because now the embarrassment factor of losing broadcasts are starting to become important also if you lose broadcast during a advert you don't get the money so uh yeah so now it's starting to come in but it's different sorry yeah it's it yes so as if you get closer to the transmitter to archive and sky and so on that stuff is much better and you know um sky has a security operation center and so does arkiva but the broad actual broadcasters creating the content and actually running the show are in a completely different place at the moment they've just gone through what finance did in last 20 years in the

last two years