1 00:00:00,196 --> 00:00:03,976 You found the backup wrap up your go-to podcast for all things 2 00:00:03,976 --> 00:00:06,496 backup recovery and cyber recovery. 3 00:00:07,096 --> 00:00:10,846 In this episode, we break down another wild Mr. Robot episode 4 00:00:10,846 --> 00:00:15,076 that's packed with lessons in cybersecurity situational awareness. 5 00:00:15,256 --> 00:00:19,846 We'll talk about USB stick attacks, Bluetooth hacking, and why that officer 6 00:00:19,846 --> 00:00:20,986 really should have checked his six. 7 00:00:22,261 --> 00:00:25,951 We look at how Elliot bypass prison security systems and 8 00:00:25,951 --> 00:00:29,551 what real world defenses I think would've stopped these attacks. 9 00:00:29,941 --> 00:00:33,091 It's a fun episode with practical cybersecurity lessons that you 10 00:00:33,091 --> 00:00:36,961 can apply today, real cyber lessons from a fictional show. 11 00:00:37,231 --> 00:00:37,801 Go figure. 12 00:00:38,461 --> 00:00:41,941 Well, if you don't know who I am, I'm w Curtis Preston, AKA, Mr. 13 00:00:41,941 --> 00:00:45,691 Backup, and I've been passionate about backup and recovery for over 14 00:00:45,691 --> 00:00:49,681 30 years, ever since I had to tell my boss there were no backups of that 15 00:00:49,681 --> 00:00:51,511 production database that we just lost. 16 00:00:52,081 --> 00:00:54,801 I don't want that to happen to you, and that's why I do this. 17 00:00:55,371 --> 00:00:59,511 On this show, we turn unappreciated admins into Cyber Recovery Heroes. 18 00:00:59,871 --> 00:01:01,731 This is the backup wrap up. 19 00:01:15,531 --> 00:01:16,281 Welcome to the show. 20 00:01:17,061 --> 00:01:21,951 Hi, I am w Curtis Preston, AKA, Mr. Backup, and I have with me a guy who will 21 00:01:21,951 --> 00:01:24,981 not join me on my morning trash pickups. 22 00:01:25,091 --> 00:01:26,801 Prasanna, Molly Yondi. 23 00:01:26,801 --> 00:01:27,261 How's it going? 24 00:01:27,261 --> 00:01:27,671 Prasanna, 25 00:01:27,876 --> 00:01:29,436 I am good Curtis. 26 00:01:29,466 --> 00:01:33,576 Uh, yeah, you're, uh, yeah. 27 00:01:34,056 --> 00:01:35,136 No, I'm not going on 28 00:01:35,166 --> 00:01:35,661 you're, you're not 29 00:01:36,096 --> 00:01:39,636 Although I have to say, I don't think I have as much trash in my neighborhood as 30 00:01:40,911 --> 00:01:42,021 Yeah. 31 00:01:42,366 --> 00:01:43,026 I don't know. 32 00:01:43,056 --> 00:01:47,436 I, um, yeah, so, so I've been taking a morning walk and 33 00:01:47,436 --> 00:01:49,116 then I decided I got tired of. 34 00:01:49,761 --> 00:01:51,951 Seeing how much trash that I see along the thing. 35 00:01:51,951 --> 00:01:54,771 And at first it was like, this is a little bit, just a little bit. 36 00:01:54,771 --> 00:01:58,731 And so I was like, oh, I'm gonna bring a little garbage bag along 37 00:01:58,731 --> 00:02:01,071 with me and, um, try to pick it up. 38 00:02:01,131 --> 00:02:05,991 And that I ended up bringing back three pounds of trash from my first walk. 39 00:02:05,991 --> 00:02:08,001 And I, and I felt pretty good about that. 40 00:02:08,061 --> 00:02:08,331 Yeah, 41 00:02:08,541 --> 00:02:13,881 But then this morning I went a different route and I'm like, oh my God, I would 42 00:02:13,881 --> 00:02:15,951 have to bring a five gallon bucket, 43 00:02:16,396 --> 00:02:16,746 Well, 44 00:02:17,271 --> 00:02:17,721 you know? 45 00:02:17,826 --> 00:02:22,596 should also comment on what you did yesterday on your walk 46 00:02:22,596 --> 00:02:24,036 and what you took with you. 47 00:02:26,716 --> 00:02:28,546 I have a battery operated leaf blower. 48 00:02:28,936 --> 00:02:30,376 Uh, if you have a leaf blower. 49 00:02:30,851 --> 00:02:34,091 You can, they're designed also to be leaf suckers. 50 00:02:34,151 --> 00:02:34,601 Right? 51 00:02:34,601 --> 00:02:36,971 And so they have a bag and essentially it's like a vacuum. 52 00:02:37,301 --> 00:02:40,991 And so my initial idea was that I wouldn't actually be picking up trash. 53 00:02:40,991 --> 00:02:44,111 There's lots of little pieces of trash and I would just suck it up with the 54 00:02:44,111 --> 00:02:46,601 leaf blower into the little leaf bag. 55 00:02:47,231 --> 00:02:49,991 Um, that did not work. 56 00:02:51,136 --> 00:02:54,706 So you're basically walking around with a leaf blower strapped to your 57 00:02:54,706 --> 00:02:56,656 back, just walking down the street. 58 00:02:56,831 --> 00:02:59,111 Just walking down the street with a leaf blower. 59 00:02:59,591 --> 00:03:00,341 Um. 60 00:03:00,931 --> 00:03:04,981 Wondering what people were thinking of this random, you know, random 61 00:03:04,981 --> 00:03:07,201 gray haired dude walking down the street with a leafblower. 62 00:03:07,561 --> 00:03:07,981 Um, 63 00:03:08,236 --> 00:03:14,356 Well, I just wanna say thank you for actually doing like going and actually 64 00:03:14,356 --> 00:03:17,386 picking up trash, because I know a lot of people would just be like, ah, screw it. 65 00:03:17,386 --> 00:03:18,196 It's not my problem. 66 00:03:18,196 --> 00:03:18,676 Not my, 67 00:03:19,411 --> 00:03:19,471 yeah. 68 00:03:19,546 --> 00:03:22,036 not my cir, not my circus, not my monkey, not my monkey, not 69 00:03:22,036 --> 00:03:23,086 Uh, we'll, we'll see. 70 00:03:23,086 --> 00:03:23,566 We'll see. 71 00:03:23,566 --> 00:03:27,286 Like I will say it de definitely, it was very nice feeling. 72 00:03:27,466 --> 00:03:31,576 The problem with the leaf blower is that it's made, or the leaf sucker is, is that 73 00:03:31,576 --> 00:03:33,256 it's made to actually shred the leaves. 74 00:03:33,256 --> 00:03:35,806 The way that the, the impeller, the leaves go through the 75 00:03:35,806 --> 00:03:37,426 impeller and they get chopped up. 76 00:03:37,666 --> 00:03:42,226 And so what happens is when you suck up, let's say, I don't know, a ketchup packet, 77 00:03:42,281 --> 00:03:42,501 Uh, 78 00:03:42,676 --> 00:03:45,256 um, it just gets, it just jams. 79 00:03:45,646 --> 00:03:46,006 yeah. 80 00:03:46,036 --> 00:03:49,456 just, if it makes it through, it doesn't get shredded. 81 00:03:49,456 --> 00:03:52,066 And so it, what I found when I actually took the bag off was 82 00:03:52,066 --> 00:03:53,596 that all of the little trash. 83 00:03:53,741 --> 00:03:55,571 Was all jammed up in the, 84 00:03:55,756 --> 00:03:56,446 Empower. 85 00:03:56,861 --> 00:04:00,161 in the, well, the, the little tube right past the impeller. 86 00:04:00,401 --> 00:04:01,211 It did, you know? 87 00:04:01,271 --> 00:04:01,541 Yeah. 88 00:04:01,571 --> 00:04:04,211 So, so that, that idea was just a bus. 89 00:04:04,211 --> 00:04:09,311 It was just me walking around with a, I don't know, five, 10 pound device. 90 00:04:09,496 --> 00:04:11,836 I think what you should do instead. 91 00:04:11,966 --> 00:04:12,386 Mm-hmm. 92 00:04:12,526 --> 00:04:18,136 Is you should walk with the vacuum cleaner, which you then plug into 93 00:04:18,136 --> 00:04:23,686 your vehicle to then operate and have someone drive alongside you as you're 94 00:04:23,761 --> 00:04:27,661 What if, what if I, what if I turn on FSD and have the car, 95 00:04:27,901 --> 00:04:29,641 you know, like robot taxing me. 96 00:04:31,696 --> 00:04:33,196 wonder if you, no, I don't 97 00:04:33,271 --> 00:04:34,891 I, it, it won't, it won't work. 98 00:04:34,891 --> 00:04:35,611 It won't work. 99 00:04:35,806 --> 00:04:36,701 I, I think I know how you do it. 100 00:04:37,441 --> 00:04:37,621 It's 101 00:04:37,741 --> 00:04:37,981 But 102 00:04:38,251 --> 00:04:38,431 Okay. 103 00:04:38,431 --> 00:04:42,451 You could do FSD, but you basically place a heavy weight in the passenger 104 00:04:42,451 --> 00:04:46,051 seat, so, or in the driver's seat, so it thinks someone's there, and 105 00:04:46,051 --> 00:04:50,851 then you keep something in front of the sensor so it thinks there's 106 00:04:50,851 --> 00:04:52,441 always someone in front of it. 107 00:04:52,561 --> 00:04:55,471 And then as you move, it moves along with you. 108 00:04:55,816 --> 00:04:58,096 I, I think it's a little smarter than that, but 109 00:04:58,231 --> 00:04:59,281 I don't think so. 110 00:04:59,836 --> 00:05:01,186 I think you're a little insane. 111 00:05:01,816 --> 00:05:06,796 Um, speaking of a little insane, this episode was insane. 112 00:05:07,066 --> 00:05:07,936 Um, 113 00:05:08,041 --> 00:05:08,671 it really? 114 00:05:09,331 --> 00:05:09,541 It 115 00:05:09,556 --> 00:05:11,836 well, I, yeah, I was right. 116 00:05:11,896 --> 00:05:13,306 Um, and. 117 00:05:14,356 --> 00:05:21,046 This, this is episode six, AKA 1.5, and I don't know, I don't know if this continues 118 00:05:21,046 --> 00:05:24,556 in season two, if the whole numbering thing continues in season two, but 119 00:05:24,811 --> 00:05:25,441 Brave Traveler. 120 00:05:26,446 --> 00:05:26,806 Right. 121 00:05:26,806 --> 00:05:30,076 Brave Traveler, which comes from Vera. 122 00:05:30,076 --> 00:05:34,996 So Vera is the, the, the, the, the, the drug dealer that he got put in prison. 123 00:05:34,996 --> 00:05:39,586 He figured out that Elliot's the one that put him in prison and he, he calls him 124 00:05:39,586 --> 00:05:42,016 and says, Hey, you need to break me out. 125 00:05:42,736 --> 00:05:43,816 And today, 126 00:05:43,816 --> 00:05:43,996 Yeah, 127 00:05:44,296 --> 00:05:44,656 right? 128 00:05:44,686 --> 00:05:45,946 He has kidnapped Shayla. 129 00:05:46,561 --> 00:05:51,031 And he says, you, you know, you need to break me out today 130 00:05:51,031 --> 00:05:52,681 or else I'll kill Shayla. 131 00:05:53,281 --> 00:05:58,501 And he try, you know, Elliot tries to tell him, Hey, you know, 132 00:05:58,501 --> 00:06:00,151 you, you can't, I can't do that. 133 00:06:00,181 --> 00:06:00,421 Right. 134 00:06:00,421 --> 00:06:04,171 That's not, you know, that's, that's the surefire way to have a unsuccessful 135 00:06:04,171 --> 00:06:07,981 attack, which is to not do any recon. 136 00:06:08,011 --> 00:06:08,311 Right. 137 00:06:08,311 --> 00:06:09,901 We've talked about recon before. 138 00:06:10,486 --> 00:06:12,526 And he's like, you want me to just do that? 139 00:06:12,586 --> 00:06:17,686 But he does figure out that there is, uh, you know, an electronic 140 00:06:17,686 --> 00:06:22,276 system that will open the doors and he just needs to get in the network. 141 00:06:22,666 --> 00:06:27,886 And so he, um, he does this, um, USB stick thing. 142 00:06:27,916 --> 00:06:29,956 Uh, you know, we'll talk about that in a minute. 143 00:06:30,436 --> 00:06:33,676 And, um, that doesn't work. 144 00:06:33,976 --> 00:06:36,706 And, uh, then he gets, um. 145 00:06:37,441 --> 00:06:42,001 Uh, he tries to hack through the wifi and he, he actually does end up successfully 146 00:06:42,001 --> 00:06:48,901 hacking the wifi of a car, of a cop car, getting into the network and then letting, 147 00:06:49,116 --> 00:06:51,946 Well, it wasn't wifi of the car. 148 00:06:52,291 --> 00:06:53,251 oh, it was Bluetooth. 149 00:06:53,461 --> 00:06:54,181 It was Bluetooth. 150 00:06:54,211 --> 00:06:54,571 Right, 151 00:06:54,646 --> 00:06:55,336 Bluetooth of the 152 00:06:55,471 --> 00:06:55,711 right. 153 00:06:56,026 --> 00:06:59,476 in the car and then realized, hey, you're connected to the prison network over 154 00:06:59,476 --> 00:07:00,376 4G, so 155 00:07:00,736 --> 00:07:01,246 Yeah. 156 00:07:01,306 --> 00:07:01,876 Yeah, 157 00:07:01,966 --> 00:07:03,106 you are the weakest link. 158 00:07:03,526 --> 00:07:05,296 yeah, yeah, exactly. 159 00:07:05,501 --> 00:07:09,821 and you know, once again, you know, sex works. 160 00:07:09,941 --> 00:07:13,811 Uh, you know, he uses Darlene, uh, you know, dressed kind of. 161 00:07:14,456 --> 00:07:15,116 Alluring 162 00:07:15,611 --> 00:07:15,761 Hmm. 163 00:07:15,956 --> 00:07:21,956 distract the cop while, while he's gonna control his computer. 164 00:07:22,556 --> 00:07:25,646 And, um, uh, that works. 165 00:07:25,706 --> 00:07:27,356 'cause guys are stupid. 166 00:07:27,516 --> 00:07:34,926 So he, he, he does, he hacks the, um, the, the cop's car via Bluetooth gets 167 00:07:34,926 --> 00:07:36,876 into the thing and he does successfully. 168 00:07:37,396 --> 00:07:40,546 Bust Vera out of prison, 169 00:07:40,561 --> 00:07:40,981 Mm-hmm. 170 00:07:41,956 --> 00:07:45,466 after which he does get Shayla back, 171 00:07:48,301 --> 00:07:49,946 Not the way he was expecting. 172 00:07:50,296 --> 00:07:50,896 right? 173 00:07:51,106 --> 00:07:56,566 He did get Shayla back like they promised, but she was D-E-D-E-D 174 00:07:56,656 --> 00:07:57,976 as my daughter likes to say. 175 00:07:58,156 --> 00:07:59,356 DED Dad. 176 00:07:59,866 --> 00:08:05,786 Um, she was, yeah, shot in the head it looked like, um, that did not look good. 177 00:08:07,021 --> 00:08:09,176 So maybe it's too late to say spoilers. 178 00:08:09,586 --> 00:08:09,916 Yeah. 179 00:08:10,156 --> 00:08:14,086 Well, and it was also like when he gets outta, when Vera gets outta prison, right? 180 00:08:14,086 --> 00:08:18,406 He's like, yeah, she's been with you this entire time, man. 181 00:08:18,406 --> 00:08:18,586 You 182 00:08:18,646 --> 00:08:18,936 Yeah, 183 00:08:19,216 --> 00:08:20,176 realize it. 184 00:08:20,206 --> 00:08:20,496 yeah. 185 00:08:20,656 --> 00:08:22,756 And then I was just like, oh my gosh. 186 00:08:22,936 --> 00:08:26,566 And then the way that they also shot the scene, sorry, this has nothing to do 187 00:08:26,566 --> 00:08:28,336 with cybersecurity or anything else like 188 00:08:28,351 --> 00:08:28,801 Yeah. 189 00:08:28,846 --> 00:08:30,046 just the way they shot the scene, right? 190 00:08:30,046 --> 00:08:30,556 Where it's like. 191 00:08:31,006 --> 00:08:34,276 He goes, he opens the trunk, the trunk opens. 192 00:08:34,636 --> 00:08:36,076 He, they don't show the body or 193 00:08:36,241 --> 00:08:36,751 You see? 194 00:08:36,751 --> 00:08:38,191 You see his reaction? 195 00:08:38,371 --> 00:08:38,791 Yeah. 196 00:08:38,896 --> 00:08:39,436 reaction. 197 00:08:39,436 --> 00:08:43,126 And in the beginning he doesn't make any noise, right. 198 00:08:43,126 --> 00:08:43,606 He doesn't 199 00:08:43,621 --> 00:08:44,011 Yeah. 200 00:08:44,176 --> 00:08:45,646 He doesn't yell, he doesn't scream. 201 00:08:45,646 --> 00:08:47,476 He doesn't even sniffle or cry 202 00:08:48,151 --> 00:08:48,571 Hmm. 203 00:08:48,736 --> 00:08:54,136 of like catatonic and, and then you look at him and then he just like 204 00:08:54,136 --> 00:08:57,436 looks down at the body and then they pan over his shoulder and you just 205 00:08:57,451 --> 00:08:59,281 yeah, yeah. 206 00:08:59,656 --> 00:09:04,186 covered in blood and then he, yeah, and then he runs because the cops are coming 207 00:09:05,176 --> 00:09:06,106 Right, right. 208 00:09:06,226 --> 00:09:11,416 By the way, the, the, the time, the length of time that they stand 209 00:09:11,416 --> 00:09:19,576 around BSing before hopping into the getaway car was like, I was like, I 210 00:09:19,576 --> 00:09:20,836 think you just broke outta prison. 211 00:09:20,871 --> 00:09:23,206 I think maybe you should get in the getaway car now. 212 00:09:23,386 --> 00:09:23,896 You know? 213 00:09:24,016 --> 00:09:24,796 But anyway. 214 00:09:24,856 --> 00:09:25,246 Yeah, 215 00:09:25,461 --> 00:09:25,661 Curtis. 216 00:09:26,301 --> 00:09:28,216 it's a Devi, it's a TV show. 217 00:09:28,576 --> 00:09:29,326 I think is what they 218 00:09:29,551 --> 00:09:29,971 Yeah. 219 00:09:30,631 --> 00:09:34,291 So let's talk about some of the mechanisms that they, that they 220 00:09:34,291 --> 00:09:37,141 used, um, you know, more exploits. 221 00:09:37,321 --> 00:09:42,091 And the first one that I, I don't know. 222 00:09:42,091 --> 00:09:46,291 What if, if I had seen this in real life, I'd have been like, Hey lady, 223 00:09:46,291 --> 00:09:48,301 what are you doing, number one. 224 00:09:48,301 --> 00:09:52,681 Number two, why are there all these USB sticks around here, right? 225 00:09:52,771 --> 00:09:56,941 to recap, right, so Darlene is walking outside a police station, 226 00:09:57,601 --> 00:09:58,051 Yeah, 227 00:09:58,381 --> 00:10:01,801 in the parking lot and she just has like a pocket full, like. 228 00:10:02,371 --> 00:10:04,471 Probably like 50 or a hundred USB sticks. 229 00:10:04,471 --> 00:10:04,831 And every 230 00:10:04,951 --> 00:10:05,491 yeah, 231 00:10:05,611 --> 00:10:08,851 few steps, she just like takes it and dumps out like three and 232 00:10:08,881 --> 00:10:09,331 yeah. 233 00:10:09,751 --> 00:10:10,651 along and you just see 234 00:10:10,716 --> 00:10:10,836 I, 235 00:10:11,041 --> 00:10:12,631 these USB sticks on the road. 236 00:10:13,231 --> 00:10:13,651 yeah. 237 00:10:13,681 --> 00:10:15,511 coming in and out of the station. 238 00:10:15,511 --> 00:10:18,331 There are kids playing like not too far away. 239 00:10:19,141 --> 00:10:22,381 And no one is going, why is this lady dumbing all our US music? 240 00:10:22,561 --> 00:10:23,911 Hey, I think he dropped something. 241 00:10:23,941 --> 00:10:24,931 Nobody says that, but 242 00:10:25,036 --> 00:10:26,116 Well, and, and 243 00:10:26,281 --> 00:10:26,611 yeah. 244 00:10:26,656 --> 00:10:30,706 then you move on, and then she's like, she goes away, and then you 245 00:10:30,706 --> 00:10:32,326 see a scene where a cop comes up 246 00:10:32,791 --> 00:10:32,911 Yeah, 247 00:10:32,926 --> 00:10:34,036 he's like, oh, A 248 00:10:34,386 --> 00:10:34,506 I, 249 00:10:34,606 --> 00:10:34,876 stick. 250 00:10:34,876 --> 00:10:35,566 And he picks it up. 251 00:10:35,566 --> 00:10:39,166 But I'm just thinking in my mind, I'm like, yeah, there's a USB stick. 252 00:10:39,166 --> 00:10:41,446 There's another USB stick, there's another USB stick. 253 00:10:41,476 --> 00:10:42,826 There's like a hundred on the 254 00:10:43,346 --> 00:10:43,626 yeah. 255 00:10:43,936 --> 00:10:44,356 right? 256 00:10:44,356 --> 00:10:44,566 It's 257 00:10:44,851 --> 00:10:46,501 She wasn't very subtle in that. 258 00:10:46,921 --> 00:10:47,101 Yeah. 259 00:10:47,476 --> 00:10:50,266 I was like, shouldn't you know something's up when you see like 260 00:10:50,266 --> 00:10:52,096 a hundred USB sticks just lying 261 00:10:52,126 --> 00:10:52,846 Yeah. 262 00:10:53,086 --> 00:10:53,656 Yeah. 263 00:10:53,866 --> 00:11:01,066 And, um, he puts it in the computer like a maroon, right. 264 00:11:01,486 --> 00:11:07,126 Puts it in the computer and runs it, executes what's on the USB stick. 265 00:11:07,186 --> 00:11:08,416 Do you remember what was on it? 266 00:11:08,716 --> 00:11:10,481 It was like a game, like a. 267 00:11:10,606 --> 00:11:13,936 it was a click this to get a 10 or a hundred dollars 268 00:11:13,991 --> 00:11:15,066 Oh, yeah, yeah, yeah, 269 00:11:16,726 --> 00:11:18,076 and it, it was like, answer these 270 00:11:18,151 --> 00:11:18,211 yeah, 271 00:11:18,376 --> 00:11:18,976 questions. 272 00:11:18,976 --> 00:11:19,391 So it was like. 273 00:11:20,821 --> 00:11:21,361 yeah. 274 00:11:21,361 --> 00:11:26,226 your favorite music type and all the rest, and, and then as it's running, as 275 00:11:26,226 --> 00:11:27,346 he's going through this, what happens? 276 00:11:28,511 --> 00:11:35,561 The intrusion detection system actually detects that he had, um, inserted malware. 277 00:11:35,626 --> 00:11:35,846 Did 278 00:11:35,891 --> 00:11:37,571 Uh, and malware was one running. 279 00:11:37,811 --> 00:11:38,231 It was. 280 00:11:38,966 --> 00:11:39,866 No, I didn't. 281 00:11:39,971 --> 00:11:40,571 avast. 282 00:11:41,486 --> 00:11:41,966 Oh, was it? 283 00:11:41,996 --> 00:11:42,296 Okay. 284 00:11:42,641 --> 00:11:43,631 Running on windows. 285 00:11:44,456 --> 00:11:45,056 Gotcha. 286 00:11:45,536 --> 00:11:49,736 Um, and it, yeah, it noticed that it was, you know, that it was malware and, 287 00:11:49,736 --> 00:11:52,376 uh, and so of course the guy's like, crap, crap, crap, crap, crap, crap. 288 00:11:52,376 --> 00:11:52,706 You know? 289 00:11:53,066 --> 00:11:54,986 And he realizes that he, he screwed up. 290 00:11:55,166 --> 00:11:55,916 what does he do though? 291 00:11:55,916 --> 00:11:57,146 Did you see what he did? 292 00:11:57,986 --> 00:11:58,676 Do you remember? 293 00:11:59,396 --> 00:12:00,356 No, I don't. 294 00:12:00,536 --> 00:12:03,116 so he realizes, he's like, crap, crap. 295 00:12:03,176 --> 00:12:07,886 And then he pulls the USB stick and then he goes and pulls the power cord. 296 00:12:08,111 --> 00:12:09,041 Oh, he pulls a bar. 297 00:12:09,041 --> 00:12:09,341 Yeah. 298 00:12:11,171 --> 00:12:12,371 Yeah, yeah. 299 00:12:12,401 --> 00:12:15,341 Well that's, you know, it's effective I suppose, you know? 300 00:12:15,731 --> 00:12:18,461 but, but you have a story around this, 301 00:12:19,691 --> 00:12:20,951 I do, what do I, 302 00:12:21,851 --> 00:12:25,481 USB stick that contains malware that was handed out at a 303 00:12:25,481 --> 00:12:27,851 oh, yeah, yeah, yeah, yeah. 304 00:12:27,851 --> 00:12:28,481 I, I, yeah. 305 00:12:28,481 --> 00:12:32,471 I've seen this where I was, um. 306 00:12:32,711 --> 00:12:36,251 And, you know, there been, there have been studies where they drop these USB 307 00:12:36,251 --> 00:12:38,531 sticks and people will just do this. 308 00:12:38,591 --> 00:12:39,131 Right. 309 00:12:39,161 --> 00:12:44,321 Um, and, and I've seen that, um, the, the, the one where I experienced 310 00:12:44,321 --> 00:12:45,671 was, was different than that. 311 00:12:46,001 --> 00:12:49,511 I was at a symantec conference. 312 00:12:49,991 --> 00:12:51,831 It, it happened to be the Symantec. 313 00:12:51,941 --> 00:12:53,421 When it was net backup, right? 314 00:12:53,421 --> 00:12:58,851 It was the Symantec Vision and it was the, it was the conference immediately 315 00:12:58,851 --> 00:13:01,611 after Symantec acquiring Veritas. 316 00:13:01,671 --> 00:13:08,031 And they had distributed some stuff, you know, that they wanted you to, to, to 317 00:13:08,031 --> 00:13:10,341 have for the, um, for the conference. 318 00:13:10,401 --> 00:13:13,131 And, uh, there was, and they did it. 319 00:13:13,131 --> 00:13:19,131 They distributed via this USB stick and, uh, the next morning. 320 00:13:19,766 --> 00:13:23,756 We got, you know, they, they told us in the session, please don't put the 321 00:13:23,756 --> 00:13:25,616 USB stick in, there's malware on it. 322 00:13:26,666 --> 00:13:27,206 Right? 323 00:13:27,716 --> 00:13:32,486 Which is that, that right there is ironic, right? 324 00:13:32,876 --> 00:13:36,596 Uh, unlike Alanis Morissette, I actually know what the word ironic means. 325 00:13:37,256 --> 00:13:39,656 Um, it doesn't mean coincidence anyway. 326 00:13:40,046 --> 00:13:40,586 Um, 327 00:13:43,136 --> 00:13:43,976 isn't it ironic? 328 00:13:43,976 --> 00:13:45,776 No, actually it isn't Alanis. 329 00:13:45,836 --> 00:13:47,366 Um, that just sucks. 330 00:13:47,876 --> 00:13:49,076 Um, anyway. 331 00:13:49,301 --> 00:13:54,161 this happened, and I think though when USB sticks first came out, 332 00:13:54,506 --> 00:13:54,926 Mm-hmm. 333 00:13:55,181 --> 00:13:58,691 at conferences, like you'd walk around, it's a freebies that people 334 00:13:58,691 --> 00:13:59,741 would give out because everyone was 335 00:13:59,771 --> 00:14:00,161 Yeah. 336 00:14:00,251 --> 00:14:00,671 B sticks. 337 00:14:00,671 --> 00:14:01,061 They're so 338 00:14:01,361 --> 00:14:03,041 Right, right, right. 339 00:14:03,311 --> 00:14:09,401 And then malicious people realized that is a great way to send things out because 340 00:14:09,731 --> 00:14:15,341 most right at the time, you insert a USB stick, it auto runs whatever is on there, 341 00:14:15,631 --> 00:14:16,031 Yeah. 342 00:14:16,151 --> 00:14:17,381 even let you to be like, Hey, 343 00:14:17,411 --> 00:14:17,531 Yeah. 344 00:14:17,531 --> 00:14:18,971 you sure you wanna open this or do 345 00:14:19,181 --> 00:14:20,321 Right, right. 346 00:14:20,861 --> 00:14:21,131 Yeah. 347 00:14:21,131 --> 00:14:23,171 Do you trust what's on this USB stick? 348 00:14:23,171 --> 00:14:23,471 Yeah. 349 00:14:23,776 --> 00:14:26,051 INF? If you remember Windows 350 00:14:26,656 --> 00:14:26,946 Yeah, 351 00:14:27,041 --> 00:14:29,171 showing my age, Curtis showing my age. 352 00:14:29,576 --> 00:14:29,866 yeah. 353 00:14:30,311 --> 00:14:35,441 Um, I was watching a comedy routine this morning and the, the guy was 354 00:14:35,441 --> 00:14:39,791 talking about how the phones used to have, you know, minutes and, 355 00:14:39,956 --> 00:14:40,346 Hmm. 356 00:14:40,751 --> 00:14:43,961 and number and a limited number of text messages. 357 00:14:43,961 --> 00:14:44,141 Yeah. 358 00:14:44,141 --> 00:14:45,131 The same thing here. 359 00:14:45,461 --> 00:14:45,821 Um. 360 00:14:46,706 --> 00:14:47,186 So, yeah. 361 00:14:47,186 --> 00:14:51,116 So that obviously that is not good. 362 00:14:51,116 --> 00:14:51,506 Right? 363 00:14:51,506 --> 00:14:54,866 And, and so, so we can talk about what can you do to prevent that? 364 00:14:54,866 --> 00:14:56,876 You can disable that 365 00:14:56,891 --> 00:14:57,181 yeah. 366 00:14:57,236 --> 00:15:02,156 in, like if you're in a corporate network, you can disable the use of USB ports. 367 00:15:02,666 --> 00:15:04,286 Before we move on though, sorry. 368 00:15:04,376 --> 00:15:04,736 Yeah. 369 00:15:04,826 --> 00:15:09,296 actually want to give credit to the cop though, because he did not 370 00:15:09,296 --> 00:15:12,866 click the button that said ignore on 371 00:15:12,956 --> 00:15:13,106 Oh, 372 00:15:13,466 --> 00:15:14,246 detection. 373 00:15:14,606 --> 00:15:15,056 Right, 374 00:15:16,661 --> 00:15:19,016 I, I don't, I'm not gonna give him much credit. 375 00:15:19,101 --> 00:15:20,241 at least he did that, right? 376 00:15:21,206 --> 00:15:21,866 Okay. 377 00:15:22,121 --> 00:15:22,341 Yes. 378 00:15:23,906 --> 00:15:25,916 Yeah, he 379 00:15:25,976 --> 00:15:27,266 But, but, but you're right though. 380 00:15:27,296 --> 00:15:32,066 There is things you could do, like make sure that it's not auto running. 381 00:15:32,486 --> 00:15:36,056 Make sure you know where the USB stick came from. 382 00:15:36,391 --> 00:15:36,741 right. 383 00:15:36,806 --> 00:15:39,336 you have a USB stick, that is also your personal. 384 00:15:39,356 --> 00:15:42,806 Also, be careful if you're taking it and plugging into like some other 385 00:15:42,806 --> 00:15:47,336 person's computer, because now your USB stick may be infected that you 386 00:15:47,456 --> 00:15:47,906 Yeah. 387 00:15:47,996 --> 00:15:50,816 necessarily about a USB stick. 388 00:15:50,816 --> 00:15:53,726 Just be careful where you're plugging these USB sticks into. 389 00:15:54,356 --> 00:15:56,816 Well, I guess I'm saying from a corporate perspective, you 390 00:15:56,816 --> 00:15:58,376 can disable these features. 391 00:15:58,376 --> 00:16:01,106 You could disable the USB port altogether. 392 00:16:01,166 --> 00:16:04,436 Um, it's unlikely you're gonna do that on laptops. 393 00:16:04,976 --> 00:16:05,516 Um. 394 00:16:05,906 --> 00:16:07,821 been at companies where they disable USB, 395 00:16:08,336 --> 00:16:09,686 I'm just saying unlikely. 396 00:16:09,686 --> 00:16:09,746 I 397 00:16:09,951 --> 00:16:10,171 uh. 398 00:16:10,736 --> 00:16:12,806 I, I'm sure it happens, right? 399 00:16:12,896 --> 00:16:16,466 Uh, there are some companies that truly take their cybersecurity, uh, 400 00:16:16,496 --> 00:16:22,346 seriously, and they're like, you know, um, but un IWI wonder at that, 401 00:16:22,346 --> 00:16:27,381 at that those companies where they do that, do they also disallow, uh, BYOD. 402 00:16:28,256 --> 00:16:34,316 Uh, n So from the places that I've worked where they've done 403 00:16:34,316 --> 00:16:38,216 that, they don't disallow BYOD, 404 00:16:38,681 --> 00:16:38,831 Mm-hmm. 405 00:16:38,996 --> 00:16:39,146 they 406 00:16:39,311 --> 00:16:42,011 is bring your own device in case people don't know that. 407 00:16:43,016 --> 00:16:47,396 Uh, but it would basically be blocked from accessing pretty much 408 00:16:47,396 --> 00:16:48,896 anything on the corporate network. 409 00:16:49,286 --> 00:16:49,576 Okay. 410 00:16:50,381 --> 00:16:51,131 So they, yeah. 411 00:16:51,251 --> 00:16:51,641 All right. 412 00:16:51,851 --> 00:16:55,871 So they give 'em wifi to, to access the internet, but not to be able to access. 413 00:16:55,871 --> 00:16:56,141 Okay. 414 00:16:56,351 --> 00:16:56,591 yeah, 415 00:16:57,011 --> 00:16:57,311 Yeah. 416 00:16:57,491 --> 00:17:01,601 I, I've seen places that disable all USB ports, even on laptops. 417 00:17:01,601 --> 00:17:02,981 Or especially on laptops. 418 00:17:03,101 --> 00:17:03,401 Right. 419 00:17:04,061 --> 00:17:06,611 Um, and that's something that you should at least think about if you're 420 00:17:06,611 --> 00:17:09,746 not thinking about that, that would, that would've stopped this Right. 421 00:17:10,241 --> 00:17:12,791 I do wonder if they have the capability to just disable 422 00:17:15,906 --> 00:17:20,891 peripherals versus things like a monitor or, 423 00:17:21,671 --> 00:17:25,841 No, you, I think it's in the bios to disable basically USB Port 424 00:17:26,401 --> 00:17:26,936 No, no, no. 425 00:17:26,936 --> 00:17:27,056 I. 426 00:17:27,446 --> 00:17:33,416 like, what if you need to use a monitor for work and the company disables USBC? 427 00:17:35,531 --> 00:17:37,271 Oh, and it's A-U-S-B-C monitor. 428 00:17:37,436 --> 00:17:37,766 Yeah, 429 00:17:37,841 --> 00:17:38,231 Hmm. 430 00:17:38,861 --> 00:17:39,336 That's a good question. 431 00:17:40,301 --> 00:17:40,631 Right. 432 00:17:41,781 --> 00:17:41,901 I 433 00:17:42,011 --> 00:17:42,761 Um 434 00:17:42,836 --> 00:17:45,056 to differentiate between displays, but then you have to also worry about, 435 00:17:45,056 --> 00:17:49,826 okay, a display it also have a USB hub built into it, and now what happens 436 00:17:49,826 --> 00:17:50,936 with that and all the rest, so. 437 00:17:51,311 --> 00:17:51,731 hmm. 438 00:17:51,881 --> 00:17:53,741 Yeah, time to look into that. 439 00:17:54,086 --> 00:17:54,306 Hmm. 440 00:17:54,551 --> 00:17:57,491 Um, all right, so, uh, let's see. 441 00:17:57,491 --> 00:18:04,841 We talked about, um, so the, the, um, the USB stick hack didn't work because 442 00:18:04,841 --> 00:18:06,221 the malware was actually caught. 443 00:18:06,221 --> 00:18:08,471 Good job on the, on the police station. 444 00:18:08,621 --> 00:18:09,011 What. 445 00:18:09,491 --> 00:18:14,291 what Elliot, so Dar Elliot had asked Darlene to go drop the USB sticks, right? 446 00:18:14,291 --> 00:18:14,441 And 447 00:18:14,531 --> 00:18:14,921 Right. 448 00:18:14,951 --> 00:18:17,201 also created the package, the malware package. 449 00:18:17,771 --> 00:18:18,551 Oh yeah. 450 00:18:18,641 --> 00:18:19,301 Yeah. 451 00:18:19,451 --> 00:18:23,891 when it fails, because Elliot sees that someone had plugged in, he's like, oh. 452 00:18:23,891 --> 00:18:27,851 And then he starts to execute stuff and then basically he's not able 453 00:18:27,851 --> 00:18:29,771 to get it to fully run, and so 454 00:18:29,861 --> 00:18:32,201 That that's what, that's when it got detected. 455 00:18:32,261 --> 00:18:32,891 Right. 456 00:18:32,951 --> 00:18:34,661 And so El Elliot was what? 457 00:18:34,721 --> 00:18:37,391 Well, like I never took you for a script kitty, which is the 458 00:18:37,391 --> 00:18:39,041 term I haven't heard in a while. 459 00:18:39,281 --> 00:18:39,821 Right? 460 00:18:40,121 --> 00:18:41,621 Um, yeah. 461 00:18:41,681 --> 00:18:42,251 Uh, 462 00:18:42,371 --> 00:18:42,821 kitty is 463 00:18:43,031 --> 00:18:43,361 yeah. 464 00:18:43,361 --> 00:18:46,601 So this is basically somebody who's downloading and using other people's 465 00:18:46,601 --> 00:18:50,411 code, um, which interestingly enough is, has been escalated 466 00:18:50,411 --> 00:18:51,911 to like ransomware as a service. 467 00:18:51,941 --> 00:18:52,331 Right. 468 00:18:52,691 --> 00:18:55,151 Uh, because a, a true hacker. 469 00:18:55,641 --> 00:18:59,871 As depicted in the show, a true hacker would write their own malicious code. 470 00:19:00,001 --> 00:19:00,221 Oh, 471 00:19:00,261 --> 00:19:00,681 Right. 472 00:19:00,801 --> 00:19:06,531 Which would, which would not be as detectable because it, there's not 473 00:19:06,531 --> 00:19:09,771 an established, uh, you know, IIOC. 474 00:19:09,891 --> 00:19:09,951 Yeah. 475 00:19:11,546 --> 00:19:14,906 today with ai, are all developers script kitties? 476 00:19:16,896 --> 00:19:17,116 Wow. 477 00:19:17,216 --> 00:19:18,351 That's a good question. 478 00:19:19,361 --> 00:19:20,291 That's a good question. 479 00:19:20,771 --> 00:19:23,861 And I, and also I wonder, is there malicious ai? 480 00:19:24,011 --> 00:19:28,181 Because like a lot of the ais that are out there, they have 481 00:19:28,241 --> 00:19:31,121 morals, you know, they have, 482 00:19:31,451 --> 00:19:31,691 Yeah. 483 00:19:32,021 --> 00:19:34,271 well, well they, it's like they act. 484 00:19:34,751 --> 00:19:39,491 So like I've, I've, I've tried to do things, not hack computers, but I've 485 00:19:39,611 --> 00:19:45,851 tried to get some LLMs to do something for me before, and it's like, and it, 486 00:19:45,881 --> 00:19:47,981 it's literally said, I don't think that's. 487 00:19:48,236 --> 00:19:50,456 I don't think you should be doing that. 488 00:19:50,846 --> 00:19:51,266 Right. 489 00:19:51,326 --> 00:19:52,946 And I'm like, um, hello. 490 00:19:53,186 --> 00:19:53,636 Right. 491 00:19:53,696 --> 00:19:57,596 Um, I, I just remember like, it wa I wasn't trying, I don't, I don't remember 492 00:19:57,596 --> 00:20:03,386 exactly, but I do remember me having an argument with an LLM going, but I, what? 493 00:20:05,166 --> 00:20:06,396 Do what I tell you. 494 00:20:06,396 --> 00:20:06,816 You know? 495 00:20:06,816 --> 00:20:10,596 And, and, um, it, it, it was like, no, I, I won't do that. 496 00:20:10,596 --> 00:20:12,576 And I'm like, okay, fine. 497 00:20:12,606 --> 00:20:13,806 I'll go use another LLM. 498 00:20:13,821 --> 00:20:14,241 Yep. 499 00:20:14,421 --> 00:20:15,351 Well, and that's the thing, right? 500 00:20:15,351 --> 00:20:17,361 It's all these companies, right? 501 00:20:17,361 --> 00:20:20,241 The AI companies that build safety models, 502 00:20:20,736 --> 00:20:21,276 Yeah. 503 00:20:21,531 --> 00:20:24,561 sure you're not able to do things like make chemical weapons 504 00:20:24,966 --> 00:20:25,536 Right. 505 00:20:25,746 --> 00:20:29,016 And, and malicious code, I guess is what, is what I'm suggesting. 506 00:20:29,046 --> 00:20:34,956 I don't, I, I don't know if, but I'm assuming there's also bad LLMs, right? 507 00:20:35,406 --> 00:20:38,706 Um, that are able to do, you know, literally whatever you want. 508 00:20:39,276 --> 00:20:45,186 Elliot gets this epiphany as he's talking to Mr. Robot in his stairwell. 509 00:20:45,516 --> 00:20:49,476 And by the way, the bad guys are keeping Elliot hostage and there are two guys 510 00:20:49,551 --> 00:20:50,001 Right. 511 00:20:50,106 --> 00:20:50,796 the time. 512 00:20:51,081 --> 00:20:51,441 Right. 513 00:20:51,491 --> 00:20:54,281 Well, by, by this point, Darlene has been taken hostage. 514 00:20:54,431 --> 00:20:54,821 Right? 515 00:20:54,821 --> 00:20:58,421 Because she came in to tell him what happened and, you know, and, 516 00:20:58,751 --> 00:21:00,761 um, uh, she got taken hostage. 517 00:21:00,761 --> 00:21:02,621 So now they have Darlene and Shayla. 518 00:21:02,711 --> 00:21:03,071 Yep. 519 00:21:03,131 --> 00:21:03,971 Um, yeah. 520 00:21:04,361 --> 00:21:07,421 And so Mr. Robot's like, oh yeah, you should go to the source. 521 00:21:07,421 --> 00:21:10,901 So he basically decides, Hey, I'm gonna go to the prison. 522 00:21:12,251 --> 00:21:12,731 And I'm 523 00:21:12,761 --> 00:21:13,061 Yeah. 524 00:21:13,121 --> 00:21:13,871 visit Vera. 525 00:21:13,901 --> 00:21:16,781 And by the way, when I'm there, and he tells him this, right? 526 00:21:16,781 --> 00:21:18,161 He's like, I came and talk to you. 527 00:21:18,161 --> 00:21:19,271 And Vera's so surprised. 528 00:21:19,271 --> 00:21:20,561 He's like, what are you doing here? 529 00:21:20,561 --> 00:21:21,581 Your face is on camera. 530 00:21:21,581 --> 00:21:23,501 He is like, it doesn't matter. 531 00:21:23,501 --> 00:21:26,501 I needed to drop my cell phone off in 532 00:21:26,591 --> 00:21:27,021 Right, right, 533 00:21:27,311 --> 00:21:28,031 place, right? 534 00:21:28,116 --> 00:21:28,466 right, 535 00:21:28,511 --> 00:21:29,811 allowed to take cell phones into the prison. 536 00:21:31,051 --> 00:21:31,531 And he's 537 00:21:31,661 --> 00:21:31,671 right. 538 00:21:31,801 --> 00:21:34,861 my phone is looking for wifi networks 539 00:21:34,931 --> 00:21:35,501 Right. 540 00:21:35,911 --> 00:21:37,321 to figure out, and he tells him. 541 00:21:37,321 --> 00:21:40,051 He is like, and you need to keep talking with me because 542 00:21:40,051 --> 00:21:41,491 my program needs time to run. 543 00:21:42,046 --> 00:21:42,836 Right, right. 544 00:21:42,896 --> 00:21:43,346 Yeah. 545 00:21:43,766 --> 00:21:45,566 And what happens with that? 546 00:21:45,626 --> 00:21:48,476 Is that how he detects the, the 547 00:21:49,181 --> 00:21:49,511 The cop 548 00:21:49,646 --> 00:21:50,066 go ahead. 549 00:21:50,171 --> 00:21:53,201 So what happens is, so he ends up having this conversation with Vera. 550 00:21:53,201 --> 00:21:55,481 This is where Vera says, okay, you need to come out, you 551 00:21:55,481 --> 00:21:56,681 need to break me out tonight. 552 00:21:56,801 --> 00:21:59,981 And then as he's leaving the police station, he looks at his phone to 553 00:21:59,981 --> 00:22:02,891 see, okay, what did my uh, app find? 554 00:22:03,161 --> 00:22:06,251 And he realizes that it found a bunch of wifi networks, but 555 00:22:06,251 --> 00:22:09,221 they were all WPA two encrypted. 556 00:22:09,221 --> 00:22:09,401 And 557 00:22:09,581 --> 00:22:10,481 Right, 558 00:22:10,511 --> 00:22:11,921 me days to crack, 559 00:22:12,401 --> 00:22:12,881 right. 560 00:22:13,431 --> 00:22:17,901 What wifi WPA two is is for wifi, right? 561 00:22:17,901 --> 00:22:19,161 It's all wireless, right? 562 00:22:19,161 --> 00:22:22,641 You're not physically connected, and so technically, if you didn't 563 00:22:22,641 --> 00:22:26,271 have any sort of encryption, anyone could sit there and listen in over 564 00:22:26,481 --> 00:22:27,861 the air and just like download. 565 00:22:27,861 --> 00:22:29,631 It's just like how you get radio stations, right? 566 00:22:29,736 --> 00:22:30,126 Right. 567 00:22:30,426 --> 00:22:30,546 Right. 568 00:22:30,561 --> 00:22:30,871 listen to it. 569 00:22:32,211 --> 00:22:34,791 But with, uh, encryption, right? 570 00:22:34,821 --> 00:22:37,221 WPA is sort of one type of encryption. 571 00:22:37,221 --> 00:22:37,401 There are 572 00:22:37,716 --> 00:22:39,306 Mm-hmm. 573 00:22:39,441 --> 00:22:40,041 and three. 574 00:22:40,641 --> 00:22:44,811 Um, WPA two was what was available at the time the show was made, 575 00:22:45,136 --> 00:22:45,486 Right. 576 00:22:45,651 --> 00:22:51,561 It allows for your device and the access point you're connected to, to 577 00:22:51,561 --> 00:22:53,601 negotiate sort of an encryption key 578 00:22:53,651 --> 00:22:54,071 Mm-hmm. 579 00:22:54,321 --> 00:22:56,421 that all of your traffic is encrypted 580 00:22:56,721 --> 00:22:57,071 Right. 581 00:22:57,201 --> 00:23:00,831 one else listening in over the air will be able to decrypt your traffic. 582 00:23:01,551 --> 00:23:05,331 And he's like, I could do this if I have time, but I don't have, you know, 583 00:23:05,361 --> 00:23:07,011 because of he's saying it's gotta, yeah. 584 00:23:07,016 --> 00:23:08,396 So he, he needs to 585 00:23:09,066 --> 00:23:10,746 and what's, I was looking it up. 586 00:23:10,746 --> 00:23:16,476 I was trying to find out, but WPA two actually has flaws that allow attackers to 587 00:23:16,476 --> 00:23:18,786 crack your wifi password pretty quickly, 588 00:23:18,976 --> 00:23:19,676 Oh, okay. 589 00:23:20,286 --> 00:23:24,816 which is why they're, they've, uh, released WPA three, I think it's been 590 00:23:24,816 --> 00:23:27,366 out for four years, five years as a 591 00:23:27,546 --> 00:23:28,776 Mm. Right. 592 00:23:28,931 --> 00:23:34,086 secure than WPA two and eliminates a lot of the security vulnerabilities. 593 00:23:34,746 --> 00:23:38,946 So I guess that's a, that's an action item for people is to look into, uh, 594 00:23:38,946 --> 00:23:42,576 you know, upgrading to WPA three, if that's available on your device, 595 00:23:42,711 --> 00:23:43,491 but 596 00:23:43,656 --> 00:23:44,106 but. 597 00:23:44,241 --> 00:23:48,771 the problem is WPA three, if you want to use it, you have to enable 598 00:23:48,771 --> 00:23:53,211 it on your wifi router or your access point, which means all of your client 599 00:23:53,241 --> 00:23:55,701 devices need to support WPA A three. 600 00:23:56,061 --> 00:23:56,541 So 601 00:23:56,611 --> 00:23:57,231 Correct. 602 00:23:58,251 --> 00:24:02,361 devices, like old iPads or laptops, or a lot of. 603 00:24:03,576 --> 00:24:04,266 devices, 604 00:24:04,611 --> 00:24:05,001 Hmm. 605 00:24:05,286 --> 00:24:06,156 WPA three. 606 00:24:06,651 --> 00:24:07,166 Right, right. 607 00:24:07,266 --> 00:24:10,116 So even if you wanted to, you may not be able to. 608 00:24:10,116 --> 00:24:10,956 Now some do 609 00:24:10,971 --> 00:24:11,391 well you, 610 00:24:11,406 --> 00:24:16,416 the mechanism of sort of WPA two or three, so it can 611 00:24:16,821 --> 00:24:17,331 Yeah. 612 00:24:17,406 --> 00:24:18,366 the two, but it's not 613 00:24:18,441 --> 00:24:18,951 Yeah. 614 00:24:19,416 --> 00:24:22,176 Sort of like with the 2.4 and the five. 615 00:24:22,176 --> 00:24:22,536 Right. 616 00:24:22,986 --> 00:24:27,666 Um, and so, you know, once again, it's like upgrade it where you can. 617 00:24:27,726 --> 00:24:28,176 Right. 618 00:24:28,566 --> 00:24:32,916 Um, and, uh, I mean, I mean, I still have devices in my house that only do 2.4. 619 00:24:33,111 --> 00:24:33,441 Yeah, 620 00:24:34,181 --> 00:24:34,531 right. 621 00:24:34,641 --> 00:24:36,771 still have wifi three devices. 622 00:24:38,346 --> 00:24:38,856 Really, really? 623 00:24:38,871 --> 00:24:39,231 Yeah, 624 00:24:39,666 --> 00:24:39,966 Wow. 625 00:24:40,476 --> 00:24:40,716 Yeah. 626 00:24:40,716 --> 00:24:42,276 I have a new, my Sovi. 627 00:24:42,306 --> 00:24:45,756 My Sovi only does 2.4 and it's a new device. 628 00:24:45,756 --> 00:24:46,026 Yeah. 629 00:24:46,146 --> 00:24:46,536 Anyway. 630 00:24:46,731 --> 00:24:49,701 wifi three, I mean like 54 megabit per second. 631 00:24:49,731 --> 00:24:51,351 Fastest speed possible. 632 00:24:51,801 --> 00:24:55,581 Wow, that, that's some, that's some old stuff right there. 633 00:24:55,671 --> 00:24:57,051 Yes, it's my printer. 634 00:24:57,921 --> 00:24:58,911 Oh, of course. 635 00:24:58,911 --> 00:24:59,571 Well, yeah. 636 00:25:00,471 --> 00:25:02,121 Um, what's a printer? 637 00:25:02,181 --> 00:25:03,021 Anyway, sorry. 638 00:25:03,651 --> 00:25:07,371 All right, so, so he goes with O option number three, right? 639 00:25:07,371 --> 00:25:09,921 So first thing failed, second thing failed. 640 00:25:09,921 --> 00:25:10,821 He goes with option number three. 641 00:25:11,676 --> 00:25:15,996 Which is he realizes that the police cars are connected to the network 642 00:25:15,996 --> 00:25:22,536 via 4G and, um, uh, and he can connect to the car via Bluetooth. 643 00:25:23,286 --> 00:25:32,766 And, um, this is where, you know, he, he relies on a time tested method and 644 00:25:32,766 --> 00:25:38,106 that is sex, um, and stupid boys, right? 645 00:25:38,166 --> 00:25:39,516 So he gets, um. 646 00:25:39,681 --> 00:25:40,671 appeal, if you 647 00:25:40,686 --> 00:25:41,766 Sex appeal? 648 00:25:41,766 --> 00:25:42,246 Yeah. 649 00:25:42,276 --> 00:25:44,016 Well, not sex, I guess not sex. 650 00:25:44,016 --> 00:25:44,286 Right. 651 00:25:44,286 --> 00:25:45,336 But, but sex appeal. 652 00:25:45,336 --> 00:25:45,666 Yeah. 653 00:25:46,176 --> 00:25:51,426 Uh, so he gets Darlene to, you know, sort of, she drops her thing, you 654 00:25:51,426 --> 00:25:55,416 know, down the shoulder and she goes over to, Hey, how are you? 655 00:25:55,416 --> 00:25:55,866 Right. 656 00:25:56,136 --> 00:26:00,546 And the stupid cop, you know, because boys are stupid. 657 00:26:00,966 --> 00:26:04,446 The stupid cop is like, oh, hello, how are you? 658 00:26:04,476 --> 00:26:06,606 You know, just, you know, like, like he. 659 00:26:07,971 --> 00:26:12,201 Thi this is what I would call bad situational awareness, right? 660 00:26:12,471 --> 00:26:18,111 He needs to understand, and, and I'm surely that he's taught this, not just 661 00:26:18,111 --> 00:26:25,401 from a cybersecurity perspective, but from a, um, from a life's perspective. 662 00:26:25,491 --> 00:26:27,321 He's a police officer. 663 00:26:27,501 --> 00:26:33,621 Bad things, you know, can happen and that they can literally bring up. 664 00:26:33,621 --> 00:26:36,711 I mean, I, I've watched Alia, I've watched all of Alias, right? 665 00:26:38,091 --> 00:26:43,401 75% of the plots of alias are Jennifer Garner looking amazing, 666 00:26:43,401 --> 00:26:45,141 trying to distract somebody. 667 00:26:45,141 --> 00:26:45,561 Right? 668 00:26:46,221 --> 00:26:51,141 And, uh, that, that, that happens, you know, uh, that I know that 669 00:26:51,141 --> 00:26:53,151 happens all over the place, right? 670 00:26:53,511 --> 00:26:58,731 But you, you'd think that a police officer would be trained better than to, you know, 671 00:26:58,731 --> 00:27:03,081 for some situational awareness that if some girl just comes up and approaches you 672 00:27:03,081 --> 00:27:05,241 and leans in and starts hitting on you. 673 00:27:06,066 --> 00:27:09,006 Maybe you should just, you know, check your six. 674 00:27:09,156 --> 00:27:09,606 Right. 675 00:27:10,806 --> 00:27:11,016 but 676 00:27:11,046 --> 00:27:11,316 he, 677 00:27:11,346 --> 00:27:15,726 also might be that maybe he did look around the car because he 678 00:27:15,726 --> 00:27:17,406 thought, like, as a cop, right? 679 00:27:17,406 --> 00:27:20,706 He was like, oh yeah, maybe other people might be approaching me. 680 00:27:21,156 --> 00:27:23,766 But he's not necessarily looking at his computer screen. 681 00:27:23,886 --> 00:27:24,276 I don't know. 682 00:27:24,336 --> 00:27:27,966 Well, it's just, it's his job to look at the computer screen, right? 683 00:27:28,146 --> 00:27:28,551 No, I 684 00:27:28,656 --> 00:27:30,156 Isn't that part of his job? 685 00:27:30,156 --> 00:27:33,006 Not, not, I don't mean in terms of supervising, and I'm just saying, 686 00:27:33,846 --> 00:27:34,026 But 687 00:27:34,176 --> 00:27:34,596 you know. 688 00:27:34,926 --> 00:27:36,096 when he needs to, he will 689 00:27:36,276 --> 00:27:39,756 Well, in this time he didn't look at it none of the time because he's 690 00:27:39,756 --> 00:27:41,556 looking at Darlene the whole time, 691 00:27:41,886 --> 00:27:42,246 And so 692 00:27:42,306 --> 00:27:42,756 right? 693 00:27:42,846 --> 00:27:46,566 so just for, for people, so the cop is sitting in the PA in the driver's seat. 694 00:27:46,986 --> 00:27:47,436 Yeah, 695 00:27:47,526 --> 00:27:48,906 is at his window on his 696 00:27:48,936 --> 00:27:49,386 yeah, 697 00:27:49,626 --> 00:27:51,636 his computer screen is on his right. 698 00:27:51,966 --> 00:27:52,476 yeah. 699 00:27:52,596 --> 00:27:57,921 And he, she has all his attention because that scene lasted. 700 00:27:58,731 --> 00:28:01,881 Minute or so, you know, uh, yeah. 701 00:28:01,881 --> 00:28:06,651 And he's over there like hacking away and the guy, and he's, you know, uh, Elliot is 702 00:28:06,651 --> 00:28:11,271 taking control of his computer and if he just looks over there for like a second, 703 00:28:11,271 --> 00:28:13,821 he would see, and he does towards the end. 704 00:28:13,821 --> 00:28:17,481 Towards the end, he is like, oh, and his reaction is, oh, my computer's 705 00:28:17,481 --> 00:28:22,581 on the fritz, not, why is there a command and control window up in 706 00:28:22,581 --> 00:28:26,031 front of my, I mean, I get that, like the average person probably doesn't 707 00:28:26,031 --> 00:28:27,106 understand what that would mean. 708 00:28:27,951 --> 00:28:32,121 Um, and, um, but yeah, so he does successfully. 709 00:28:32,901 --> 00:28:37,641 Um, and there was that he, uh, Elliot does have a moment where 710 00:28:37,641 --> 00:28:40,221 he allows them to free Darlene, 711 00:28:40,326 --> 00:28:40,686 yep. 712 00:28:41,091 --> 00:28:45,711 uh, because he's like, I, I just need to press go, but I'm not gonna press go 713 00:28:45,711 --> 00:28:47,871 until you drive away and let Darlene go. 714 00:28:47,901 --> 00:28:48,321 Right? 715 00:28:48,831 --> 00:28:51,981 Uh, so he does that and we do later find out that it's a good thing 716 00:28:51,981 --> 00:28:53,601 that he did that because, you know, 717 00:28:53,796 --> 00:28:54,066 Yeah. 718 00:28:54,351 --> 00:28:54,621 got. 719 00:28:54,906 --> 00:28:59,586 here's one thing I want to know, right, is if you were the prison 720 00:28:59,586 --> 00:29:01,116 network or whatever else, right, the 721 00:29:01,201 --> 00:29:01,621 Mm-hmm. 722 00:29:01,706 --> 00:29:02,406 Mm-hmm. 723 00:29:02,796 --> 00:29:09,096 would you allow a cop car, which is probably not very secure, 724 00:29:09,636 --> 00:29:10,056 Um, 725 00:29:10,146 --> 00:29:11,941 access to your prison network? 726 00:29:13,626 --> 00:29:17,286 well, the answer would be, um, video download. 727 00:29:17,766 --> 00:29:20,346 No, but even then, it should be a very specific 728 00:29:20,856 --> 00:29:25,746 Yes, it should be a very specific use case, a very specific port and a system. 729 00:29:26,106 --> 00:29:28,086 You're allowed to, you know, do this. 730 00:29:28,116 --> 00:29:28,596 Right. 731 00:29:28,836 --> 00:29:29,136 Because 732 00:29:29,436 --> 00:29:29,976 Agreed. 733 00:29:30,366 --> 00:29:33,966 Elliot FTP something to the cop car, and then from the cop car, 734 00:29:33,966 --> 00:29:36,456 he f TPed that, or migrated that 735 00:29:36,611 --> 00:29:36,901 Yeah. 736 00:29:36,971 --> 00:29:37,261 Yeah. 737 00:29:37,326 --> 00:29:37,746 network. 738 00:29:38,151 --> 00:29:38,586 Right, right. 739 00:29:39,861 --> 00:29:43,641 Um, which then gave him, uh, control of the prison network. 740 00:29:44,421 --> 00:29:46,521 Um, yeah, it's a very good point, right? 741 00:29:46,521 --> 00:29:49,701 I was also gonna add Bluetooth security, right? 742 00:29:49,731 --> 00:29:51,201 Uh, because that does exist. 743 00:29:51,201 --> 00:29:52,521 It exists in most anything. 744 00:29:52,521 --> 00:29:56,451 And you have to, like, you, if you're gonna control a device with Bluetooth, 745 00:29:56,451 --> 00:30:00,651 it's like, you know, when you first pair something, it's gonna pop up a number. 746 00:30:00,651 --> 00:30:04,941 It should pop up a number, and you need to look at the screen and tell 747 00:30:04,941 --> 00:30:08,631 the number, which in any scenario would've stopped this attack. 748 00:30:09,486 --> 00:30:15,066 If you use a standard Bluetooth security, it would've popped up a number on the 749 00:30:15,216 --> 00:30:18,936 screen of the cop car, and he would not have been able to see the number 750 00:30:19,086 --> 00:30:23,496 unless he employed Darlene to go to, to say the number out loud or something. 751 00:30:24,471 --> 00:30:28,071 Well, I think that works in some scenarios, Curtis, but I don't think 752 00:30:28,071 --> 00:30:32,031 in all, for instance, keyboard has 753 00:30:32,071 --> 00:30:32,421 Uhhuh, 754 00:30:32,691 --> 00:30:32,961 dongle. 755 00:30:33,606 --> 00:30:33,996 right. 756 00:30:34,296 --> 00:30:34,626 Right. 757 00:30:34,626 --> 00:30:35,436 I plug it in. 758 00:30:35,436 --> 00:30:36,756 It doesn't ask me for anything. 759 00:30:37,431 --> 00:30:39,021 No, it doesn't, but I'm saying it could. 760 00:30:39,186 --> 00:30:40,146 It could, yes. 761 00:30:40,221 --> 00:30:40,641 Right. 762 00:30:40,641 --> 00:30:45,621 And, and in this scenario, you would think that the, the Bluetooth that is capable 763 00:30:45,621 --> 00:30:52,046 of controlling the, the car would, uh, would have that as a feature, right? 764 00:30:52,326 --> 00:30:55,116 the other thing is, do they even need Bluetooth? 765 00:30:55,461 --> 00:30:55,881 Yeah, that, 766 00:30:56,256 --> 00:30:56,586 Right. 767 00:30:56,631 --> 00:30:57,801 I was about to say the same thing. 768 00:30:58,041 --> 00:30:59,931 Why does it, why does it need Bluetooth? 769 00:30:59,931 --> 00:31:00,381 Right. 770 00:31:01,146 --> 00:31:08,166 Is it what, what exactly Well is like, maybe is is is camera, the, the, the body 771 00:31:08,166 --> 00:31:10,146 cam, is that connecting via Bluetooth? 772 00:31:10,236 --> 00:31:11,076 No, they didn't. 773 00:31:12,666 --> 00:31:15,246 They had Bluetooth because that's what the plot needed. 774 00:31:15,306 --> 00:31:15,696 Okay. 775 00:31:15,696 --> 00:31:16,216 Prasanna. 776 00:31:16,281 --> 00:31:20,301 The cop wanted to listen to his music on the, on the stereo? 777 00:31:21,516 --> 00:31:21,576 Yeah. 778 00:31:21,576 --> 00:31:23,706 With his Bluetooth, with his AirPods. 779 00:31:24,006 --> 00:31:29,076 Um, back then, 'cause there's actually one, there's actually AirPods. 780 00:31:29,631 --> 00:31:29,871 Yeah. 781 00:31:30,321 --> 00:31:32,991 Probably AirPods, but not, but the Bluetooth headsets did, 782 00:31:33,051 --> 00:31:33,291 Yeah. 783 00:31:33,651 --> 00:31:36,321 uh, there's actually one in the episode I remember. 784 00:31:36,861 --> 00:31:45,591 Uh, when, um, when Angela goes to visit Terry Colby, the sun turns his 785 00:31:45,591 --> 00:31:47,421 head and he's got one of those black 786 00:31:47,511 --> 00:31:48,291 i I had 787 00:31:48,681 --> 00:31:51,261 yeah, yeah, I had one of those too. 788 00:31:51,921 --> 00:31:56,106 It, you look like, you look like such a. Uh, idiot. 789 00:31:56,436 --> 00:31:58,866 I think back when you, when you wore those, I don't know, you 790 00:31:58,866 --> 00:32:01,146 just seem like you know, whatever 791 00:32:01,326 --> 00:32:04,266 love the Bluetooth headsets, especially on calls. 792 00:32:06,306 --> 00:32:08,526 you mean back then now or, you know. 793 00:32:09,186 --> 00:32:09,606 Yeah. 794 00:32:09,636 --> 00:32:09,876 Yeah. 795 00:32:09,881 --> 00:32:11,496 I, I as well, but I don't know. 796 00:32:11,496 --> 00:32:12,606 They were just so big. 797 00:32:12,606 --> 00:32:13,626 They just, I don't know. 798 00:32:13,986 --> 00:32:16,686 There was something, I think when you, when they first came out, they, 799 00:32:16,686 --> 00:32:17,826 they looked kind of, I don't know, 800 00:32:20,106 --> 00:32:20,946 but anyway. 801 00:32:21,066 --> 00:32:21,276 them. 802 00:32:21,456 --> 00:32:22,476 I still like them. 803 00:32:22,731 --> 00:32:23,556 I, I did too. 804 00:32:23,646 --> 00:32:24,186 I had, 805 00:32:24,816 --> 00:32:24,996 headset. 806 00:32:25,146 --> 00:32:29,706 had one of the Plantronics ones that went around the ear and the thing over here. 807 00:32:30,096 --> 00:32:30,666 Oh, do you? 808 00:32:31,206 --> 00:32:31,446 Why? 809 00:32:31,446 --> 00:32:32,646 Why do you still have it? 810 00:32:32,866 --> 00:32:34,396 Well, it's not broken. 811 00:32:36,306 --> 00:32:39,486 You know what I remember, I remember I had a Plantronics 812 00:32:39,546 --> 00:32:44,196 desktop, um, Bluetooth for my phone. 813 00:32:44,556 --> 00:32:45,036 Okay. 814 00:32:45,516 --> 00:32:47,586 Uh, 'cause I had a desk phone. 815 00:32:48,036 --> 00:32:48,486 Right. 816 00:32:49,026 --> 00:32:51,486 And what I remember was 817 00:32:53,766 --> 00:32:56,616 I would forget that I was on a desk call 818 00:32:56,676 --> 00:32:56,826 Oh, 819 00:32:56,886 --> 00:33:01,536 and I had my Bluetooth headset, and I would get in my car and drive away. 820 00:33:02,316 --> 00:33:05,646 And then at some point, the, the, the, the thing would drop. 821 00:33:05,706 --> 00:33:08,226 And I'm like, oh, sorry, crap. 822 00:33:08,286 --> 00:33:13,176 I still use a over the ear headset for my calls. 823 00:33:14,646 --> 00:33:15,096 Really? 824 00:33:15,576 --> 00:33:16,026 Why? 825 00:33:16,371 --> 00:33:21,441 Uh, I find it more comfy than, and the quality audio quality is better. 826 00:33:21,471 --> 00:33:25,491 And then I also like the fact that it comes with the mic, that you can actually 827 00:33:25,491 --> 00:33:27,351 flip up to know for sure that something 828 00:33:27,456 --> 00:33:27,906 Okay. 829 00:33:28,266 --> 00:33:28,716 Okay. 830 00:33:28,971 --> 00:33:32,151 because I never can remember is it muted or is it not? 831 00:33:32,151 --> 00:33:32,571 And 832 00:33:33,036 --> 00:33:35,286 Oh, oh, it mutes when you flip the mic up. 833 00:33:35,436 --> 00:33:36,366 Gotcha, gotcha. 834 00:33:37,086 --> 00:33:37,386 Alright. 835 00:33:37,386 --> 00:33:42,426 One funny story and then we'll, we'll put this episode to bed. 836 00:33:43,671 --> 00:33:48,951 A hundred years ago I was working at a consulting company and we used 837 00:33:48,951 --> 00:33:52,191 to live in corporate housing and there were like three of us that 838 00:33:52,191 --> 00:33:53,271 were in this corporate housing. 839 00:33:53,931 --> 00:33:57,771 This story takes place in Marina Delrey for those of you that are familiar with 840 00:33:57,771 --> 00:34:00,081 that in the Oakwood corporate housing. 841 00:34:01,131 --> 00:34:02,601 And we were all sitting around. 842 00:34:02,631 --> 00:34:06,141 We had a speaker phone, we were all sitting around on the mandatory, 843 00:34:06,141 --> 00:34:12,591 like Monday morning conference call and this our direct boss. 844 00:34:13,311 --> 00:34:14,721 Was blabbering on. 845 00:34:15,621 --> 00:34:15,981 Okay. 846 00:34:17,571 --> 00:34:23,661 And I reached over, pressed the mute button, and I said, 847 00:34:24,531 --> 00:34:25,701 what are you still talking? 848 00:34:25,701 --> 00:34:27,081 He is like, why are you still talking? 849 00:34:27,351 --> 00:34:27,741 You know? 850 00:34:27,741 --> 00:34:28,791 But I muted. 851 00:34:28,911 --> 00:34:32,781 And then I was like, I said, I exclaimed something. 852 00:34:33,951 --> 00:34:37,761 And then there was a pause and it was like, what? 853 00:34:37,791 --> 00:34:38,571 What did you say? 854 00:34:39,531 --> 00:34:39,806 And I go. 855 00:34:41,391 --> 00:34:44,931 Uh, that's when we learned and we found out later that the, that the mute button. 856 00:34:45,201 --> 00:34:48,081 It didn't work on the speaker, 857 00:34:48,201 --> 00:34:48,981 no, 858 00:34:49,101 --> 00:34:53,391 light would come on, but it didn't, but it, it didn't actually mute the call. 859 00:34:53,451 --> 00:34:58,491 And so I, so luckily there were several of us, and this was 860 00:34:58,521 --> 00:35:00,261 because nowadays would like zoom. 861 00:35:00,441 --> 00:35:03,801 It would be like, Curtis just blurb something else. 862 00:35:03,801 --> 00:35:08,691 You know, your, your picture would pop up on the screen, but at least in this 863 00:35:08,691 --> 00:35:13,101 case, just some random, and I said, it really whatcha talking about, you know. 864 00:35:13,431 --> 00:35:15,951 And, and I was like, what, what was that? 865 00:35:16,071 --> 00:35:16,491 And I was like, 866 00:35:21,196 --> 00:35:21,416 Uh, 867 00:35:21,921 --> 00:35:25,551 and this is how Curtis almost got fired anyway. 868 00:35:26,271 --> 00:35:27,081 the 10th time 869 00:35:28,011 --> 00:35:28,401 Yeah. 870 00:35:28,731 --> 00:35:29,091 Yeah. 871 00:35:30,681 --> 00:35:35,541 I've only been fired, hired like three times in my life when I 872 00:35:35,571 --> 00:35:36,861 all, all, when I was younger. 873 00:35:37,611 --> 00:35:38,271 Um, 874 00:35:38,391 --> 00:35:41,241 So, all right, so what's the recap for this episode? 875 00:35:42,276 --> 00:35:45,546 So again, continued security, right? 876 00:35:45,546 --> 00:35:49,506 So obviously, uh, devices or USB devices bad, right? 877 00:35:49,506 --> 00:35:52,446 Trusting USB ports, bad trusting. 878 00:35:52,896 --> 00:35:57,696 Um, even, even the fact that like if you're, if you're truly concerned 879 00:35:57,696 --> 00:36:01,566 about like cell phone security, put that cell phone in a Faraday bag, 880 00:36:01,611 --> 00:36:01,811 Mm-hmm. 881 00:36:01,866 --> 00:36:02,226 right? 882 00:36:02,316 --> 00:36:02,946 That's the thing. 883 00:36:03,396 --> 00:36:04,541 Um, that would've stopped. 884 00:36:05,226 --> 00:36:06,096 bag for people 885 00:36:06,181 --> 00:36:10,251 a Faraday bag, uh, comes from the idea of the Faraday cage, which is come from 886 00:36:10,251 --> 00:36:14,031 the name of the guy, and basically you put the cell phone in a Faraday bag. 887 00:36:14,031 --> 00:36:16,401 It's unable to communicate outside that bag. 888 00:36:16,941 --> 00:36:20,751 I've been in facilities where you had to leave your phone and you 889 00:36:20,751 --> 00:36:21,951 had to put it in a Faraday back. 890 00:36:21,996 --> 00:36:23,916 In schools, they make you do that too for kids? 891 00:36:24,471 --> 00:36:24,921 Oh, do they? 892 00:36:25,146 --> 00:36:25,506 Yeah. 893 00:36:25,566 --> 00:36:28,626 They make you put it in a bag so you can't communicate outside. 894 00:36:28,626 --> 00:36:31,566 And then I think it has like a lock that only opens at certain times. 895 00:36:32,146 --> 00:36:32,706 Interesting. 896 00:36:33,246 --> 00:36:37,696 Um, and then, if you have an external device, in this case a police car 897 00:36:37,696 --> 00:36:42,016 that has network access, that device should be very limited, right? 898 00:36:42,076 --> 00:36:46,846 It should be for the very specific use case, the very specific port and device. 899 00:36:46,846 --> 00:36:47,026 Yeah. 900 00:36:47,056 --> 00:36:52,816 you should at least be monitoring to be like, Hey, why is it uploading files to an 901 00:36:53,071 --> 00:36:54,691 Yeah, yeah, 902 00:36:55,006 --> 00:36:56,566 when that should never be happening? 903 00:36:57,211 --> 00:36:57,541 yeah. 904 00:36:57,631 --> 00:37:00,901 I, I would say yes, and I would say, and you should be 905 00:37:00,901 --> 00:37:04,561 monitoring, but, um, and then, um, 906 00:37:06,841 --> 00:37:12,221 oh, and if you get offered something enticing, check your six. 907 00:37:12,566 --> 00:37:16,046 Yeah, or just think about if it's too good to be true. 908 00:37:16,046 --> 00:37:22,046 It's like, Hey, why don't you see, uh, CISO come out to this great resort. 909 00:37:22,046 --> 00:37:24,536 We're doing this giant conference and we'll 910 00:37:24,581 --> 00:37:25,031 Yeah, 911 00:37:25,046 --> 00:37:26,216 about things and 912 00:37:26,291 --> 00:37:26,831 yeah, 913 00:37:28,001 --> 00:37:29,471 And you've never heard of the place. 914 00:37:29,771 --> 00:37:30,251 yeah. 915 00:37:30,761 --> 00:37:31,031 Do you mind 916 00:37:31,031 --> 00:37:36,431 I, I actually watched, uh, I watched an exploit with that where basically they. 917 00:37:37,541 --> 00:37:39,491 They wanted to exploit a person. 918 00:37:39,671 --> 00:37:43,541 They sent him an invitation to be a speaker at their show, 919 00:37:43,546 --> 00:37:43,626 hmm. 920 00:37:43,841 --> 00:37:44,351 right? 921 00:37:44,411 --> 00:37:48,611 They had a full like, you know, trade show website and everything. 922 00:37:49,001 --> 00:37:51,401 And they said, we'd like you to speak at this show. 923 00:37:51,821 --> 00:37:58,991 And then, um, they, um, um, so I lost my train of thought. 924 00:37:59,021 --> 00:37:59,351 Oh. 925 00:37:59,831 --> 00:38:02,471 And so they said we'd like to just have a quick zoom call. 926 00:38:02,711 --> 00:38:02,981 Hmm. 927 00:38:03,491 --> 00:38:06,521 Prior to the show to just make sure, you know, set expectations 928 00:38:06,521 --> 00:38:07,331 and everything, like I said. 929 00:38:07,391 --> 00:38:07,841 Sure. 930 00:38:07,991 --> 00:38:09,851 And so they sent him a link. 931 00:38:10,601 --> 00:38:12,641 That link was not a Zoom link. 932 00:38:12,731 --> 00:38:13,421 Hmm. 933 00:38:13,451 --> 00:38:17,081 That link was a malicious link that immediately downloaded the 934 00:38:17,081 --> 00:38:18,731 malware and then opened up Zoom 935 00:38:19,076 --> 00:38:19,296 Mm. 936 00:38:19,901 --> 00:38:24,071 so it could have been stopped by, you know, and so basically what you're 937 00:38:24,071 --> 00:38:28,361 counting on is the person being distracted because they're, you know, they're, um. 938 00:38:29,096 --> 00:38:30,446 Their pride, et cetera. 939 00:38:30,506 --> 00:38:32,696 You know, they're, they're just thinking about, oh, I'm gonna, I'm gonna, and, 940 00:38:32,696 --> 00:38:33,866 and they had like a speaker's fee. 941 00:38:33,866 --> 00:38:36,236 They were gonna pay a speaker's fee and so Yeah. 942 00:38:36,266 --> 00:38:36,866 Boom, boom, boom. 943 00:38:36,866 --> 00:38:40,226 And the guy clicks on the thing and it, and the, the exploit runs in like, 944 00:38:40,601 --> 00:38:40,901 Yep. 945 00:38:40,976 --> 00:38:43,646 you know, milliseconds and then he opens up Zoom and so you 946 00:38:43,646 --> 00:38:45,416 never thought anything of it. 947 00:38:45,536 --> 00:38:45,866 Right. 948 00:38:46,676 --> 00:38:49,856 Um, and uh, then immediately they're controlling the guy's network. 949 00:38:50,126 --> 00:38:51,301 people are the weakest link. 950 00:38:52,226 --> 00:38:52,736 They are. 951 00:38:53,096 --> 00:38:54,686 They will continue to be that way. 952 00:38:55,496 --> 00:38:55,826 All right. 953 00:38:55,826 --> 00:38:58,496 Well thanks Prasanna for, uh, having another chat. 954 00:38:59,666 --> 00:38:59,996 No, this was good. 955 00:38:59,996 --> 00:39:03,656 I'm gonna go hunt around for some random USB sticks on my next walk. 956 00:39:03,656 --> 00:39:05,156 So have you 957 00:39:05,306 --> 00:39:05,756 I'm going to 958 00:39:05,786 --> 00:39:07,316 USB stick on your walk yet? 959 00:39:08,546 --> 00:39:08,966 No, 960 00:39:09,116 --> 00:39:09,296 Okay. 961 00:39:09,536 --> 00:39:13,201 I have encountered USB sticks in the wild, but not on any of my walks. 962 00:39:13,416 --> 00:39:13,706 Okay. 963 00:39:13,796 --> 00:39:14,816 I have encountered. 964 00:39:16,016 --> 00:39:17,486 Really weird stuff. 965 00:39:17,876 --> 00:39:22,316 The my favorite thing that I picked up yesterday was, um, was, 966 00:39:22,376 --> 00:39:27,386 um, the instruction manual for some sort of electronic device. 967 00:39:28,616 --> 00:39:30,986 I was like, a lot of the stuff I understood, like it was like, 968 00:39:30,986 --> 00:39:34,796 you know, slim jim wrappers and, you know, things like that. 969 00:39:34,796 --> 00:39:37,616 Like it, it's, somebody bought a snack into seven 11, they want to throw it 970 00:39:37,616 --> 00:39:40,966 out the window before they get home and get busted for having a slim jim. 971 00:39:41,516 --> 00:39:42,866 But why was there. 972 00:39:43,101 --> 00:39:43,321 Um, 973 00:39:43,436 --> 00:39:43,646 don't know. 974 00:39:43,676 --> 00:39:44,306 I don't know that. 975 00:39:44,336 --> 00:39:51,506 But anyway, I'm gonna drive around and, you know, hope that some young girl 976 00:39:51,506 --> 00:39:52,796 leans in the window and talks to me. 977 00:39:55,831 --> 00:39:56,121 okay. 978 00:39:57,326 --> 00:39:59,426 But if she does, I will check my six. 979 00:39:59,481 --> 00:39:59,701 Yes. 980 00:40:00,146 --> 00:40:02,711 Well, thanks, uh, for listening everybody. 981 00:40:02,966 --> 00:40:04,141 That is a wrap. 982 00:40:07,021 --> 00:40:11,731 The backup wrap up is written, recorded and produced by me w Curtis Preston. 983 00:40:12,301 --> 00:40:17,101 If you need backup or Dr. Consulting content generation or expert witness 984 00:40:17,101 --> 00:40:19,651 work, check out backup central.com. 985 00:40:20,401 --> 00:40:23,521 You can also find links from my O'Reilly Books on the same website. 986 00:40:24,181 --> 00:40:28,261 Remember, this is an independent podcast and any opinions that you 987 00:40:28,261 --> 00:40:30,181 hear are those of the speaker. 988 00:40:30,246 --> 00:40:32,106 And not necessarily an employer. 989 00:40:33,006 --> 00:40:33,726 Thanks for listening. 990 00:40:47,881 --> 00:40:48,001 I.