Shadowing Practice: your home router STILL SUCKS!! (use OPNsense instead) - Learn English Speaking with Video
בחר מצב תרגול
כל מצב פותח חדר תרגול במסך מלא.
532 משפטים
אם המשפטים קצרים או ארוכים מדי, לחץ על ערוך כדי להתאים אותם.
1
Your home router still sucks.
2
Wait. You still haven't gotten rid of it yet?
3
Get it out of here.
4
It sucked six years ago, and now it's even worse.
5
The government just banned it.
6
Turns out some Chinese hackers were living inside of it.
7
Slow, insecure, boring, and now illegal.
8
That's exactly what I told my editor Mike this morning.
9
You see, he's moving into a new house, and his ISP is handing him one of these.
10
Not on my watch, dude. By the way, this is the first video in a series where I'm building out Mike's whole network.
11
Stay tuned.
12
So we're gonna replace Mike's router and yours with this, a mini PC that I bought in Japan.
13
Wait. What?
14
You'll see.
15
And it's running the most secure and fun firewall OS out there, OPNsense.
16
Whole house ad blocking, a real firewall, free open source, and you're in control.
17
But I know what you're thinking.
18
Mike's not an IT guy.
19
He's just an editor.
20
Can he handle this?
21
Kind of. Setting it up is actually easy.
22
I'm gonna walk you through every step.
23
You'll have a running router by the end of this video.
24
But the advanced stuff?
25
No. I'm gonna hand that to an AI agent and see if this thing can manage itself so Mike never has to text me at 3AM.
26
And the first thing I'm gonna have it do is block an entire country.
27
Guess which one?
28
I have no idea if this is gonna work.
29
We'll find out together.
30
Let's get your coffee ready.
31
It's time to throw your home router in the trash.
32
Now I can already see you typing in the comments about the FCC router ban.
33
Actually, Chuck existing home routers are grandfathered in and aren't illegal.
34
True. But that doesn't mean the threat goes away.
35
Your router is the reason the government is banning future routers.
36
So here's why what we're doing is important.
37
Where's my pen?
38
Found it. Mike's router is his family's gateway to the Internet and also the Internet's gateway to his family.
39
These mass produced goblin gateways are often riddled with software vulnerabilities that can allow hackers to access your home.
40
Yeah. They can see that camera in your living room.
41
Wait. Hi. So we're going to replace this goblin gateway with an OPNsense router firewall, a device that is secure and we control.
42
But what exactly is this device, and do you need a mini PC from Japan?
43
No. You don't.
44
Because the hardware can actually be a lot of things.
45
OPNsense is just software, so you get to choose the hardware.
46
And before you say it, I know.
47
This device, I bought it in Japan.
48
I think it was actually made in China, but it's not about where it's from.
49
It's about the software that's on it, and you control it.
50
And by the way, I chose OPNsense over pfSense, is which what I used in the last video, because OPNsense is a 100% open source unlike pfSense.
51
They closed source the best version of their software back in 2021 and put it behind a paywall.
52
Gross. Anyways, now the hardware can be a lot of things.
53
It could be a spare laptop, a virtual machine, that appliance that I use for pfSense in my last video.
54
Really anything that is x86 based can run OPNsense.
55
Here are the minimum and recommended specs.
56
What you choose depends on the size of your network and what features you enable.
57
Some key things you might wanna pay attention to, and it's important, important.
58
The ports. You'll want two Ethernet ports minimum.
59
One to plug into the Internet and one to use for your network for your LAN.
60
If you don't have two, that's totally fine.
61
You can get one of those USB Ethernet adapters.
62
That will work.
63
Now back to Mike.
64
Let's talk about his network because there's actually something missing here, and it's a big deal.
65
Don't step forward without knowing this.
66
I don't want you to get mad at me.
67
This OPNsense router firewall thing right here, it's just that.
68
It's just a router and a firewall.
69
It's not a network switch, and it's not a wireless access point.
70
Mike's Goblin Gateway, it had all that stuff built in.
71
Don't fall for it.
72
It looks good.
73
It's a trap.
74
What we're doing is still good.
75
But when we replace Mike's Goblin Gateway with an OPNsense router firewall, we need two more things.
76
I'll have a list of recommended devices below.
77
First, we'll need a network switch.
78
It essentially gives us more LAN ports or ports for all your devices if they're physical and plugged in.
79
It's kinda like a power strip.
80
Now a managed switch is recommended because it will unlock some cool VLAN security things like putting your IoT devices on a separate network.
81
Now you can use an unmanaged switch.
82
That's fine.
83
It'll work.
84
You just won't have cool features.
85
And they'll also need a wireless access point.
86
Without it, Mike and his kids won't have Wi Fi, and they might kill me.
87
Now I will walk you through the setup of the switch and the access point in part two.
88
But to get started, you don't need those devices.
89
Like, right now, and this is what we're gonna do, you can just plug your computer into the LAN port, and that's just fine for testing and having fun and seeing what this thing does, which you need to do.
90
But hold on.
91
How do we actually connect this device to the Internet?
92
Like, how do we actually do it and replace the router?
93
Let's talk about that after a word from our sponsor.
94
Yes, Chuck.
95
That is why all of us are throwing our Chinese routers in the trash.
96
Austin, over to you with our Bitdefender scam forecast.
97
It's stormy out there.
98
Thanks, Mike.
99
And folks, it is nasty out there.
100
Cancel your weekend plans and downloading free RAM because we have a massive system rolling through the Dallas Metro.
101
From the North, we have a thick band of fake toll texts rolling in.
102
You owe $43.92.
103
Ouch. You have a 100% chance of getting hit with this before lunch today.
104
Creeping in from the West, we have a cluster of fake USPS delivery texts.
105
You know the ones.
106
We have your package.
107
Send us money.
108
We'll get it back to you.
109
And, Mike, these are really the perfect conditions for a fake Facebook ad campaign I've been tracking forming right off the coast.
110
Victims have actually been calling in about that one all morning.
111
Hey, Austin.
112
You're scaring me.
113
But can't a guy like me keep my family safe from threats on the line?
114
Not anymore, Mike.
115
These things are AI generated.
116
Perfect grammar.
117
Your real name.
118
Real logos.
119
You won't see these things coming.
120
And last year, these things cost people over $1,000,000,000,000.
121
Holy moly. That is so scary, it almost doesn't seem real.
122
So how do people stay safe out there?
123
Great question, Mike.
124
Bitdefender scam radar.
125
It's just like me.
126
Put it in your pocket, and it's not reading your texts.
127
No. It's watching over your whole area.
128
The second a scam wave rolls in, it pings you.
129
Heads up. Take cover.
130
Yes. You too can be safe just like him with Bitdefender scam radar.
131
Free heads up when scams hit your area.
132
You get alerts on your iPhone, Android, or your other things from the people who have been doing AI threat detection since 2008.
133
Link below.
134
Stay safe out there, Mike.
135
Back to you.
136
Well, that is all folks.
137
Enjoy your YouTube program.
138
Chuck, back to you.
139
Now we can commonly replace your router in one of two ways.
140
First way is the easy way, and it's the way I'm gonna show you in this This will still involve your Goblin router, but it's okay.
141
You'll see.
142
All we're going to do, and this is the easiest way to put this into your network, is plug in your OPNsense device into an open port on your existing Goblin gateway.
143
This will be the WAN port on your OPNsense firewall, and you're like, what?
144
What does that mean?
145
We'll talk about it.
146
This does work.
147
And as long as you only use connections through the OPNsense firewall, you are protected and safe.
148
We're essentially doing what's called double NAT right here, which is fine for most things.
149
It might cause a few issues with some applications, but in most cases, this is gonna work.
150
And it's a great option for just testing this.
151
You may not wanna fully replace your router yet.
152
You wanna test it out, see if it works.
153
Option two is not hard.
154
It's just different.
155
In this situation, you're likely still gonna be using your goblin gateway, but you're gonna make it dumb.
156
You're gonna put it into what's called bridge mode or pass through mode.
157
And it essentially turns off the router's brain, and it becomes a bridge between the Internet or your ISP and your OPNsense router firewall.
158
The main difference here is that your OPNsense firewall will actually receive a public IP from your ISP when your goblin gateway is in bridge mode.
159
Whereas in the other mode where you're just simply plugging it in and doing double NAT, it'll likely receive a private IP address from your goblin gateway router.
160
I will not be covering how to do bridge mode for your router because I don't know what router you have, but many routers can do this.
161
Check the documentation.
162
In either case, your network and access to the Internet is now being managed by a device you control.
163
It's secure.
164
Now we're finally here.
165
We can actually get OPNsense on this device that you have, whichever device you chose.
166
Whatever the case, you're going to need a USB flash drive so we can write the image on there and put OPNsense on this bad boy.
167
You'll also need a keyboard, and I don't know why I grabbed this one.
168
I have one right here just to show you.
169
And you'll need a monitor.
170
Editor, put one in my hands.
171
Step one, let's flash the USB.
172
Plug that sucker into your computer.
173
Go out to opnsense.org.
174
Click on download OPNsense.
175
In most cases, you're gonna do the VGA image type.
176
If you're not sure, just do that.
177
Download. And to write that image to our USB device, we're gonna use an application called Etcher to etch it on.
178
I'll link for that below.
179
Just go ahead and download Etcher.
180
It's available for everything.
181
You click on flash from file, choose OPNsense, select your target.
182
Be careful.
183
Make sure you choose the right USB drive, and then flash.
184
Once you're done, take out your PC and plug that sucker into your OPNsense device.
185
Then we'll get power, keyboard, plug in your monitor.
186
Now we're on to step two, plug it into your device and install.
187
You will need to boot into the boot menu or the BIOS, which is the operating system before your operating system.
188
That's gonna vary based on whatever device you got.
189
I think mine says to press F12.
190
I hope it works.
191
Ready, set, go.
192
I'm just gonna start pressing F12 like a madman.
193
I did it. I was actually worried about that working.
194
Alright. So there's my USB drive right there.
195
I'm gonna boot from that.
196
K. Cool. Now also at this point, if you happen to have an Ethernet cable, go ahead do what we talked about.
197
Plug in your router and to just pick a port.
198
You can assign the WAN port when you actually configure this now with me.
199
I'm gonna choose this port, And it's blinky.
200
Alright. That felt weird saying.
201
I'm not gonna lie.
202
I won't say that again.
203
That's running in live mode from install media.
204
The login will be Installer.
205
Password will be OPNsense, I think.
206
Dang it. There we go.
207
Default key map.
208
Choose ZFS unless you have a good reason not to.
209
Choose Stripe.
210
Hit space to select that storage device.
211
Hit okay. Are you sure you wanna destroy everything?
212
Yes. And it's installing.
213
Little coffee break.
214
It's almost done.
215
I'm getting excited.
216
It's almost there.
217
Just go. Is it did it stop moving?
218
Whoo. It's done.
219
Alright. Let's set the root password.
220
This will be the password you're gonna use to log in to your system.
221
Make sure you remember it both times.
222
Nailed it. Okay.
223
And we'll say complete install, and we will reboot now.
224
Yes. Alright.
225
I'm gonna go ahead and remove the USB flash drive.
226
Shouldn't need that.
227
Although, it gave me an ugly message.
228
I think it's fine.
229
I'm sorry. Why am I talking to my stuff?
230
I've been using AI too much.
231
I'm used to everything talking back to me.
232
And there it goes.
233
We are now booting in to our OPNsense firewall.
234
We'll log in with the root username and the password that we just set.
235
Now don't worry.
236
There is a gorgeous GUI, but we're gonna worry about a few things here in the CLI.
237
First thing is assigning interfaces.
238
So hit option one.
239
Boom. Now you may not have this problem, but I do.
240
No interfaces found.
241
What? I've got two right here.
242
Well, it's because I have no drivers in OPNsense for my Realtek NIC.
243
OPNsense just doesn't have them.
244
If you hit that, you'll need to install those drivers some way.
245
I'm gonna do that right now.
246
I just installed my drivers.
247
I wanna assign my interfaces.
248
I wanna configure lags, not right now.
249
VLANs, not right now.
250
It does have my interfaces now.
251
I'm gonna do a for auto detection, see if that works.
252
I'm gonna disconnect the interface, plug it back in just to make sure.
253
Hit enter. It didn't detect it.
254
Let's try r e zero specifying the interface.
255
And then the LAN interface, it'll be the other one, r e one.
256
This is what will connect to your your network, your local area network.
257
Local. You.
258
Nothing for optional.
259
There's our mappings right there.
260
Don't wanna proceed.
261
Type in y. Boom.
262
Now if we type in the number eight, we can hit the shell, and I can do things like ifconfig.
263
Let me, grep for r e zero.
264
Oh, I can't see r e zero.
265
Let's try. And there is my IP address.
266
I noticed that's not a public IP address, meaning it's not one from my ISP.
267
It's not a a public Internet address, but it is a private one assigned by my router, the one I'm plugged into.
268
That's gonna work.
269
Now at this point, I can connect my computer to the LAN interface.
270
Let me find an Ethernet cable.
271
Oh, I had one sitting right here the whole time.
272
Not sure why I'm singing this.
273
Now also notice if I do ifconfig, I look at the LAN interface, which I had as r e one.
274
The IP address is one nine two dot one six eight dot one dot one.
275
That's actually the IP address of this device and how you're going to access it.
276
So plugging in my PC into the LAN port that we designated, easy for me to say, boom.
277
What should happen?
278
Because this thing's already pretty much fully set up.
279
It's gonna give my computer an IP address.
280
Let's go see.
281
IP config on Windows.
282
Ah, and there it is.
283
This is from my OPNsense firewall.
284
Wow. My drawing is so bad writing like this.
285
Let's avoid that.
286
So now what we're gonna do is we're gonna grab this IP address one nine two dot one six eight dot one dot one, and that's how we can access the gorgeous GUI.
287
I'm gonna get this keyword out of here.
288
We don't need him.
289
192.168.1.1.
290
It's okay. We can proceed.
291
He's safe. And here we are.
292
If you got here, this is an exciting moment.
293
You're about to log in to your new router and firewall.
294
Same thing as before.
295
The username will be root, and the password will be that thing you set.
296
And I fat fingered it.
297
Drive over time, and we're in.
298
Now like I told you before oh, well, here we go.
299
It's taking us on a ride.
300
System configuration wizard.
301
Let's let's do it real quick.
302
Click on next.
303
We can name it Mike's router.
304
Oh, we can do better than that.
305
Mike's cursed router.
306
We'll change time zone to my time zone.
307
Chicago. For DNS servers, leave that blank, but we are gonna enable this right now.
308
And this is part of being secure.
309
We're going to enable DNSSEC security.
310
Feel like, what the junk is that?
311
I got a video on that right here.
312
Just know it's secure DNS.
313
Yes, sir. Next.
314
It's not valid.
315
Okay. Let's we'll do dashes.
316
Yes. It will.
317
For the WAN, DHCP means it's receiving an IP address from either our ISP or our home router, our goblin gateway.
318
That's fine.
319
It works. One thing you may wanna do if you're doing double NAT or if you're getting a private IP address on this WAN interface like we are, disabling this will be helpful.
320
Blocking private networks.
321
Click on next.
322
There's a DHCP configuration.
323
It's already good.
324
Next, optimize for multi WAN.
325
I'm not doing that.
326
You probably aren't either.
327
Uncheck it.
328
Next, we're good on the password.
329
Next, and apply.
330
Congratulations.
331
Now at this point, it's working.
332
Like, you could walk away and you have a pretty secure thing, you know, we can tweak this.
333
That's why we're here.
334
We wanna have fun with this router.
335
Quick flyby.
336
Here we go.
337
First thing, dashboard.
338
Click on that.
339
Look at this.
340
Isn't this fun?
341
Interface statistics, graphs.
342
There's our CPU.
343
Let's go take a look at DHCP services, Dnsmasq DNS, and DHCP.
344
Leases. Hey.
345
That was high.
346
This is us.
347
That's my PC, Deb 2.
348
Do y'all remember Deb?
349
Comment below if you remember Deb.
350
What about DNS?
351
Let's go to services.
352
Unbound DNS.
353
And let's make a few things more secure.
354
Let's go to general.
355
First, verify that you have DNSSEC enabled.
356
We already did that in the wizard.
357
Just double check it here.
358
This is where the configuration lives.
359
Then we'll do this.
360
Go over to DNS over TLS.
361
This is secure encrypted DNS.
362
Boom. Here we're going to add a new DNS server.
363
Hit that little plus icon there.
364
Now just so you know, this thing right now is your DNS server, but he still needs to talk to another DNS server, an upstream DNS server to get information about the Internet.
365
This is what we're doing right now.
366
We'll do Cloudflare first, one dot one dot one dot one for the server IP.
367
Server port is eight five three.
368
Forward first unchecked and verify CN is cloudflare-dns.com.
369
Describe this as Cloudflare and click on save.
370
And then one more time, apply.
371
Now one more setting we have to make sure we, add.
372
Let's go to system, settings, general, and then down here at the bottom, you'll see DNS server options, allow DNS server list to be overridden by DHCP PPP on WAN.
373
Uncheck this to make sure that the DNS server we just set is the one that's gonna be used for devices using your firewall.
374
Save. Real quick, let's go to reporting, Unbound DNS.
375
Oh, we don't have reporting configured.
376
Let's configure that.
377
Click on go to reporting configuration.
378
Enable it. Checkbox.
379
Save. Now let's go back to services, back to Unbound DNS.
380
And what do you say we block some ads?
381
Click on blocklist.
382
Click on that plus sign, and here we can choose our DNS blocklist.
383
Let's choose why not AdGuard's list?
384
Cool. Let's add that.
385
Let's do abuse.ch.
386
Why not? This multi pro extended pop up ads, fake scams.
387
Oh, yeah. Let's get all of it.
388
Let's go for now.
389
Click on save.
390
Oh, we gotta describe it.
391
My list. Save.
392
Apply. Actually, you know what?
393
Hold on. I'm gonna disable it and apply.
394
Let's see what it looks like before we do it.
395
This is a website to help you test if your ad blocking is blocking ads.
396
Obviously, it's not.
397
Let's go to speed test too because they're really bad about that, ironically.
398
Yeah. Look at all these ads.
399
Now let's enable it.
400
Enable. Apply.
401
And in case you're wondering, yes, this is doing the same thing that you might get from AdGuard or Pi Hole, so you don't have to have a separate device.
402
This thing does it all.
403
Let's go see if it worked.
404
Refresh. We still have ads.
405
Let's add more protection.
406
We'll do OISD domain blocklist ads.
407
Maybe big. Probably being a little bit too extra right now, but we'll see.
408
Okay. It seems to be working.
409
No ads. Let's go back to speed test, refresh.
410
Oh, yeah. We are ad free.
411
We can go up here to reporting once more.
412
We go to Unbound DNS and start to see some reports on this.
413
10% blocked.
414
Top blocked domains.
415
We can see it's blocked by my list that we just made.
416
Okay. Let's get back to our lobby and our dashboard.
417
But, honestly, this is a lot, isn't it?
418
And let me tell you, you don't have to configure really anything else.
419
This is already doing great.
420
But if you do wanna configure more stuff, what if we had AI do this for us, like, right now?
421
Let's try it out.
422
You ready? Get your coffee ready.
423
I have no idea this is gonna work.
424
So I've got a Raspberry Pi down here somewhere.
425
Trust me, it's there.
426
I just can't lift it up because it's a cable mess.
427
You wanna see?
428
Yeah. It's, there he is.
429
It's strung up like Spider Man, but he's doing stuff.
430
He's got Hermes agent installed.
431
I'm not gonna show you how to set up a Hermes agent right now because I already did it in this video right here.
432
First, need our API key from OPNsense.
433
This will give our agent access to this device.
434
So I'll go to system, access, users, and no.
435
We're not going to API keys.
436
We're gonna go over here to this ticket under our root user and say create and download an API key for this user.
437
Yes. Yes. And it did it.
438
Let's look at it.
439
There it is.
440
We're gonna copy this.
441
We're gonna say, hey.
442
Talking to our Hermes agent.
443
Your name is Pig.
444
Learn everything you can about OPNsense and managing a firewall.
445
Here are your keys.
446
Here is a link to the documentation.
447
That's all I'm doing.
448
Dude, he did his job.
449
He found all the host.
450
He's gonna use a cancel rollback pattern so we don't lock ourselves out.
451
This is what I'm talking about.
452
Now let's see if he can actually do stuff.
453
This is good in theory.
454
We're gonna give him three tests.
455
First, let's say, I want you to add Google DNS as a DNS server for us.
456
Make it an additional server that we can use.
457
Let's see what he does.
458
This requires him to, like, actually know our DNS configuration and then be able to make that configuration.
459
He called it a simple, healthy, OPNsense router firewall.
460
Simple? Okay.
461
He did it. He also tested it.
462
He and he refers himself as Pig.
463
I love that.
464
Let's go see what he did.
465
Go to our services.
466
Unbound DNS.
467
DNS over TLS.
468
He didn't add it there.
469
Oh, he added to query for forwarding.
470
Ah, let me correct him.
471
No. This needed to be DNS over TLS.
472
Okay. He did it.
473
Let's go see.
474
Like a champ.
475
He did it. That's amazing.
476
Okay. Calm down.
477
Second test.
478
Add a DHCP reservation for my desktop Deb 2.
479
Make it the one that's already assigned.
480
That was actually pretty quick.
481
Let's go see if we did it.
482
Leases. There I am, Deb.
483
Lease type is static.
484
Last test. Okay.
485
Big job. I want you to use the firewall to block the country of China.
486
I don't I don't even know.
487
See what happens.
488
Okay. He said he did it.
489
Good job, Pig.
490
K. So the built in GeoIP source was not configured.
491
He used country CIDR feeds for Mainland China and load them into firewall URLs URL table aliases.
492
He tested it too.
493
Let's go see.
494
Firewall rules.
495
He did. Okay.
496
AI can officially manage this OPNsense firewall.
497
Mike, you're good to go, dude.
498
And this agent's gonna get smarter and more capable.
499
I think it's gonna really help us with our configurations in episode two.
500
Okay. At this point, we have a router, and it's pretty much ready for Mike's house.
501
We built it.
502
We configured it.
503
This thing is way better than your current crappy old router that's been banned by the government.
504
But now it's time to actually add a switch at an access point and do some fun security stuff like a VLAN for your IoT devices.
505
We're gonna do that for Mike.
506
Oh, and I'll also need a secure VPN connection back to my studio here so we can work.
507
That's all I got.
508
I'll catch you guys next time.
509
I don't know why I touched the firewall when I said that.
510
Bye. Hey. You made it to the end of the video.
511
At the end of my videos, I like to pray for you, my audience.
512
I do actually care about you guys, and I think the best way I can show any kind of love to you is by praying for you.
513
I believe it has a massive impact, and it will change your life.
514
So if you don't mind, I wanna pray for you right now.
515
I know it's a little weird.
516
Just go with it.
517
One, two, three, pray.
518
God, I thank you for the person on the other side of the screen.
519
I thank you that they're here, that they're passionate about IT, that, that they care about their lives enough to, and and their careers enough to just learn and continuously grow.
520
I pray I pray that you, bless them in that and build up their lives.
521
I pray for their families and and their careers now that you would allow them to take the skills they're learning now through this video and just something is what might seem simple as adding a router to their house will actually blossom into a skill set they can use to make some serious money for their family, have a career that's fulfilling and exciting, and make them excited to wake up each day.
522
God, just I I ask that for them in your name.
523
And if they're in their career right now and they're feeling stuck, if they're feeling unhappy, if they're in a job that just kinda drains them, I pray that you would give them the strength to not only endure it, but have peace with where they're at.
524
Give them contentment.
525
Let them find the the thing about their job or where they're at that just brings them joy.
526
And if that's not what's in the cards for them, just provide a way out for them, God.
527
Thank you so much for them.
528
Bless them indeed.
529
I ask this in your name, Jesus.
530
Amen. Thank you so much, and let me pray for you.
531
I'll catch you guys next time.
532
Bye.
הורד אפליקציה
כל מה שאתה צריך כדי לדבר בשטף
הגיית AIציון לכל משפט
תרגול IPAשלוט בכל צליל
אוצר מיליםבנה את מאגר המילים שלך
משחק אוצר מיליםלמד תוך כדי משחק
אותו ערוץ
B21
THIS Is Where the Internet Lives
Daily ConversationUniversity StudentsWorking Adults
B21
you need to learn HACKING RIGHT NOW!! // CEH (ethical hacking)
Daily ConversationUniversity StudentsWorking Adults
B2You need to switch to Linux RIGHT NOW!!
Daily ConversationWorking Adults
B2Omarchy Can Do WHAT?! 50 Features You’re Missing
Business EnglishUniversity StudentsWorking Adults
B2I was wrong about VPNs
Business EnglishUniversity StudentsWorking Adults
FOR YOU
המלץ על סרטון
B22
243 משפטים
I might have found the BEST budget router...
Business EnglishUniversity StudentsWorking Adults
B23
47 משפטים
Firefox and Tor hit with 9.8 critical level exploit
American AccentBusiness EnglishUniversity StudentsWorking Adults
B22
119 משפטים
Crypto Is a Brilliant Scam and I Can Prove It
Business EnglishDaily ConversationUniversity Students
B24
363 משפטים
I Go To The Cloud.
Business EnglishUniversity StudentsWorking Adults
B23
228 משפטים
You Should Buy An iPhone Mini in 2026. Here's Why...
Business EnglishUniversity StudentsWorking Adults
B2350 משפטים
Hacker Breaks Down Hacking Scenes From Movies & TV | WIRED
Business EnglishUniversity StudentsWorking Adults
B23
63 משפטים
5 open source tools that replaced my $320/mo AI stack...
American AccentBusiness EnglishUniversity StudentsWorking Adults
B22
275 משפטים
Mac vs Windows - It's not close in 2026!
British AccentBusiness EnglishUniversity StudentsWorking Adults
B214
211 משפטים
AI Ads Are Out of Control
Business EnglishDaily ConversationUniversity Students
B22
8 משפטים
Every Cybersecurity Beginner Should Watch This First (Networking Fundamentals)
Daily ConversationUniversity StudentsWorking Adults
B24
68 משפטים
What Happens If China Invades Taiwan? Elon Musk's AI Warning
Business EnglishDaily ConversationUniversity Students
C13
202 משפטים
Proxy vs Reverse Proxy Server Explained
Business EnglishUniversity StudentsWorking Adults
אוצר מילים והערות הגייה לשיעור הזה
שיעור הדיבור הזה ברמה B2 מבוסס על הסרטון “your home router STILL SUCKS!!”. המילים שחוזרות הכי הרבה: router, opnsense, dns, device, firewall. בסרטון הזה יש 531 משפטים ו-4592 מילים לתרגול Shadowing. הדיבור נמשך 23:03. הדובר מדבר מהר, כ-199 מילים בדקה, אז צפו לצלילים מחוברים ומקוצרים. 82% מהמילים נמצאות בין 3,000 המילים הנפוצות ביותר באנגלית; כדאי ללמוד את השאר לפני שמתחילים.
אוצר מילים מרכזי בסרטון הזה
15 המילים המתקדמות ביותר בסרטון, עם ההגייה והמשמעות שלהן:
| מילה | הגייה | משמעות |
|---|---|---|
| router שם עצם | /ˈɹaʊ.tɚ/ | נַתָּב |
| plug שם עצם | /plʌɡ/ | תֶּקַע |
| interface שם עצם | /ˈɪn(t)ɚˌfeɪs/ | מִמְשָׁק |
| scam שם עצם | /ˈskæm/ | תרגיל עוקץ, הונאה |
| password שם עצם | /ˈpæs.wɜɹd/ | סִיסְמָה |
| install פועל | /ɪnˈstɔl/ | התקין |
| boot שם עצם | /but/ | מַגָּף |
| dashboard שם עצם | /ˈdæʃˌboɹd/ | לוח מחוונים |
| username שם עצם | שם משתמש | |
| verify פועל | /ˈvɛɹɪfaɪ/ | וידא |
| wizard שם עצם | /ˈwɪzɚd/ | קוֹסֵם, מְכַשֵּׁף |
| keyboard שם עצם | /ˈki.bɔɹd/ | מִקְלֶדֶת |
| cancel פועל | /ˈkæn.sl̩/ | ביטל |
| wireless שם תואר | /ˈwaɪ(jə)ɹ.ləs/ | אַלְחוּטִי |
| radar שם עצם | /ˈɹeɪˌdɑɹ/ | רָדָאר, מַכָּ״ם |
Phrasal verbs שתשמעו
| מילה | הגייה | משמעות |
|---|---|---|
| calm down פועל | נרגע | |
| go up פועל | עָלָה | |
| turn off פועל | כיבה, כִּבָּה | |
| wake up פועל | /ˌweɪk ˈʌp/ | התעורר |
משפטים שכדאי לחזור עליהם
משפטים קצרים ושלמים מהסרטון שאפשר להשתמש בהם בשיחה יומיומית:
- You still haven't gotten rid of it yet?
- I'm gonna walk you through every step.
- Let's get your coffee ready.
- Are you sure you wanna destroy everything?
- Why am I talking to my stuff?
דקדוק בסרטון הזה
המבנים שהדובר משתמש בהם הכי הרבה, עם המילים המדויקות מהסרטון:
| מבנה | בסרטון |
|---|---|
| הווה מושלם ממושך (Present perfect continuous) have/has been + -ing — פעולה שהתחילה בעבר ועדיין נמשכת עכשיו | I've been tracking · have actually been calling · have been doing |
| סביל (Passive voice) be + past participle — הדגש הוא על מה שקורה, לא על מי שעושה את הפעולה | are grandfathered · are often riddled · was actually made |
| משפטי זיקה (Relative clauses) who / which + clause — מידע נוסף על אדם או דבר | people who have · here, which is · BIOS, which is |
| הווה מושלם (Present perfect) have/has + past participle — פעולה שקרתה בעבר ועדיין יש לה חשיבות או השפעה עכשיו | haven't gotten · that's been banned |
הגייה ששווה לשים לב אליה
הדובר משתמש ב-208 קיצורים וצורות מקוצרות, כמו gonna, we're, I'm. אמרו אותם בצורה הקצרה, כפי שאתם שומעים אותם.
- הצלילים של “sh” ו-“zh”: configuration /kənˌfɪɡ.əˈɹeɪ̯.ʃən/, dashboard /ˈdæʃˌboɹd/, refresh /ɹɪˈfɹɛʃ/, documentation /ˌdɑkjəmɛnˈteɪʃən/, detection /dɪˈtɛk.ʃən/
- מילים ארוכות — שימו לב להטעמה: configuration /kənˌfɪɡ.əˈɹeɪ̯.ʃən/, documentation /ˌdɑkjəmɛnˈteɪʃən/, vulnerability /ˌvʌln(ə)ɹəˈbɪlɪti/, ironically /aɪˈɹɑnɪkli/, automobile /ˈɔː.tə.məˌbil/
צלילים שדוברי עברית מתקשים בהם:
- /w/ — שפתיים מעוגלות, לא /v/: firewall /ˈfaɪ(ə)ɹˌwɔl/, gateway /ˈɡeɪtˌweɪ/, password /ˈpæs.wɜɹd/, wizard /ˈwɪzɚd/, wireless /ˈwaɪ(jə)ɹ.ləs/
- /æ/ — פתוח יותר מה-“אֶ” העברית, לא כמו “a” ב-“cup”: scam /ˈskæm/, password /ˈpæs.wɜɹd/, dashboard /ˈdæʃˌboɹd/, hacker /hækəɹ/, cancel /ˈkæn.sl̩/
- /r/ — הלשון לא נוגעת בשום מקום, לא ה-“ר” הגרונית: router /ˈɹaʊ.tɚ/, firewall /ˈfaɪ(ə)ɹˌwɔl/, configure /kənˈfɪɡə(ɹ)/, configuration /kənˌfɪɡ.əˈɹeɪ̯.ʃən/, password /ˈpæs.wɜɹd/
איך לתרגל עם הסרטון הזה
- הקשיבו לכל הסרטון פעם אחת בלי לדבר, ורשמו את המילים שאתם לא מכירים.
- התחילו במהירות 0.75×, תרגלו Shadowing משפט אחר משפט, וחזרו למהירות רגילה כשזה מרגיש קל.
- הקליטו את עצמכם והשוו למקור, תוך תשומת לב למילים כמו router, plug, interface.
מהי טכניקת השאדואינג?
שאדואינג היא טכניקת למידת שפה מבוססת מדע שפותחה במקור להכשרת מתורגמנים מקצועיים ופופולרית על ידי הפוליגלוט ד"ר אלכסנדר ארגואלס. השיטה פשוטה אך עוצמתית: אתה מקשיב לאודיו באנגלית ילידית וחוזר עליו בקול רם מיד — כמו צל העוקב אחרי הדובר עם עיכוב של 1–2 שניות בלבד. בניגוד להאזנה פסיבית או תרגילי דקדוק, שאדואינג מכריח את המוח והשרירים בפה לעבד ולשחזר דפוסי דיבור אמיתיים בו זמנית. מחקרים מראים שזה משפר משמעותית את דיוק ההגייה, האינטונציה, הקצב, הדיבור המחובר, הבנת השמיעה ושטף הדיבור — מה שהופך אותו לאחת השיטות היעילות ביותר להכנה לIELTS Speaking ולתקשורת באנגלית בעולם האמיתי.