Craig Peterson - Secure Your Business, Your Privacy, and Save Your Sanity

Welcome Back!  

The big buzz word is Two-Factor or Multi-Factor Authentication when it comes to privacy, but there is a dirty little secret. In this segment, I will explain what is going on and why Biometrics is not the answer.

For more tech tips, news, and updates visit - CraigPeterson.com

---

Related Articles:

It is People and Shortcuts Not MFA that’s the Issue and Biometrics is not the Answer

---

Automated Machine-Generated Transcript:

Craig
Hello everybody quick waves everybody watching on video. Of course, we're are out on Facebook and YouTube. You can find me online Just go to Craig Peterson comm slash YouTube if that's what you want or slash Facebook, you'll see me there as well. Making sure all the equipment's working right, it looks like we are all set there. So let's get this whole thing going. There's the way there we go. Alright, so first up here, we were talking about some of the big problems that we have when it comes to encryption and the government's encroachment on the encryption. And it shouldn't come as a surprise to anybody because frankly, governments have been trying to monitor the people for a long time and that's why we have some of the laws and rights in the Constitution. And as I mentioned, I put an article wrote an article and put it up on my site at Craig Peterson dot com about all of this Well, now we're going to talk about the FBI. For those that aren't aware, I'm a member of something called the FBI infra guard program. And this is a program the FBI put together many years ago that's designed to help the FBI work with the critical infrastructure here in the US. And that means businesses that might be involved in financial transactions might be involved in manufacturing. In my case, I'm involved because of course, I do the security stuff. Hey, and if you're interested in working with me, let me know just me at Craig Peterson dot com, but you should be a member of FBI in regards to if you can pass a pretty simple background check near as I can tell, the background check is have you murdered anyone recently? Now this is not the normal FBI background check at all, but they want to make sure you're legit, you have a legitimate need to get this information and that you are going to participate in the program. So I have been involved with that for a while I get a lot of information from the FBI and from some other sources. I'm signing up also for some state of New Hampshire and, and mass and main sources to we'll see how that all goes. But the bottom line is, we need to know as the people who are the de facto security people in our organization or maybe we are trained security people, we need to know what's going on right now. So being a member of the info guard, and you can just go to info guard infragard.org enough regard as an infrastructure Guardian, I guess. infra guard.org you can sign up right there on the website. You can join your local chapter, there are chapters in pretty much every state. Some of them meet quarterly some of the monthly I was running for a couple of years. The FBI is online training the FBI infra guard webinars. As well as doing training for people. And of course, I continue to do a lot of that training. That's what this free training is that you guys sign up for and participate in. And then this week, of course, I've been doing the whole training on VPN. Next week, we're going to talk about mobile devices and then moving on to Wi Fi. And then we're moving on to security compliance for people might have compliance issues. But that's what I've been doing. And I've frankly, I've been really enjoying and helping out a lot of different people and businesses. So right now we have the FBI cyber Task Force, releasing what they call a pin now you'll get all of these pins as an infra garden member. Pin stands for private industry. Notice now these pins have different levels grades on them. A green means space that he can share with anybody and then it gets to yellow which is kind of a need to know basis. And then there's probably other colors that they just don't let me see or other infra garden members because they're not stupid. KC, but that that's what these pins are private industry notices. And they came out with one telling businesses to adopt biometric factors. Now, this, frankly, is a very big deal. And when we're talking about the biometric factors that we need to be worried about, they are

basically saying, Hey, listen, when you log in to a site, or when you have a way to authorize yourself, the best thing to do is have something you know, and something you have, well, something you know, would be a password. Something you have might be like what we use internally, it is called DUO.  In order to verify who we are, and it's a one-time password thing and it works great. But there might be something else too. And that is the biometric thing. So in some cases like on my MacBook Pro My laptop has a fingerprint reader that I can use to unlock things. Plus, I have a thumb key a USB key that I can stick into it that I have. And again, that's something I have. So biometric is really good for multifactor authentication. It's not perfect. It depends, right? We already know, to not use some of the older Samsung fingerprint readers because they can be easily defeated. But and there are problems as well with some of these facial recognition systems. But multifactor authentication is really where they're going. So this is an article from the Czech Republic that I have up on Craig peterson.com. And he's saying that Microsoft's group program manager for identity protection, Alex Weiner. So this is a guy that should know he's working for Microsoft, they have to keep their data You know, quiet, they have to keep it private. They want to keep their customer's data private. So this is a guy in the know, he said accounts that are using multi-factor authentication, we're more than 99.9% less likely to be compromised. Now, this is kind of interesting, because when we're going into Microsoft, and we're talking about Microsoft, there's something else that you might want to know. And that is that many managed services providers, and this includes some break, fix shops and things, but they are selling their customers office 365. And this includes huge companies, right? A lot of people go and buy from the big guys because then it's safer, right? And it's a bigger throat to choke and if something goes wrong, they can sue them and get the money out of them. All of which I disagree with entirely, right? Because the big guys don't care about you. They care about their bottom line. They have to, of course, keep their stock cool. Happy, there are smaller guys are paying more attention. But the IC the problem with most of the smaller guys is they don't keep up with these FBI pins, these private industry notices, they don't keep up with the latest in security. They're not moving their customers from one platform to another because they're selling them software as opposed to really selling them a service. So what we do and what I recommend you look for out there in a vendor is we have a monthly fee. And we will change the software that we're using to protect you will change to the hardware that we're using. If we're finding that there's something that's a lot better or if we find that there is a hole, we will fill that hole with new technology versus what normally what happens which is Okay, here you go. Here's the bill. Here's hardware, it's installed, See you later. The same thing over and over again. It's true with the, you know, anti-malware stuff, people are selling you, the Norton or the Symantec or some other sort of antivirus software, which, frankly, just plain old just doesn't work, right? It doesn't work well enough. So you got to be very, very careful. Google made a similar claim, by the way, in a blog post in May. So here's what happened. A huge, huge managed services provider got hacked. How did they get hacked? Well, it turns out they weren't using multifactor authentication, I already told you about how we are using multiple layers of multifactor authentication to protect our stuff, including we're using multifactor authentication for all of our Microsoft software and services that we're selling like the office 365, etc. So we're better than 99.9% less likely to be compromised, then these other guys and these big guys, what Microsoft has done now is they're forcing most these so-called managed services providers and people are just hanging up a shingle saying the managed services providers, and they can't manage services. They just don't know what they're doing. This is too complicated for them, but they hang up a shingle anyways. So Microsoft said, Okay, well, we're not going to stop them from selling our software because we want to make money.

We're going to go ahead and force them to use multi-factor authentication. So there you go. FBI has a big warning out Microsoft is now forcing people to start using multifactor authentication, for very, very good reasons. Sim swapping there. There's a whole bunch of stuff. Do you want to learn more about this? You can find this article up on my website that Craig Peterson dot com, stick around. When we get back, we're going to be talking about cyber theft. And, you know, if you think your data is not a target, you're wrong, and we'll explain why when we get back, you're listening to Craig Peterson and WGAN and online, Craig Peterson dot com

Transcribed by https://otter.ai

---

More stories and tech updates at:

www.craigpeterson.com

Don't miss an episode from Craig. Subscribe and give us a rating:

www.craigpeterson.com/itunes

Follow me on Twitter for the latest in tech at:

www.twitter.com/craigpeterson

For questions, call or text:

855-385-5553

Welcome Back!  

The big buzz word is Two-Factor or Multi-Factor Authentication when it comes to privacy, but there is a dirty little secret. In this segment, I will explain what is going on and why Biometrics is not the answer.

For more tech tips, news, and updates visit - CraigPeterson.com

---

Related Articles:

It is People and Shortcuts Not MFA that’s the Issue and Biometrics is not the Answer

---

Automated Machine-Generated Transcript:

Craig
Hello everybody quick waves everybody watching on video. Of course, we're are out on Facebook and YouTube. You can find me online Just go to Craig Peterson comm slash YouTube if that's what you want or slash Facebook, you'll see me there as well. Making sure all the equipment's working right, it looks like we are all set there. So let's get this whole thing going. There's the way there we go. Alright, so first up here, we were talking about some of the big problems that we have when it comes to encryption and the government's encroachment on the encryption. And it shouldn't come as a surprise to anybody because frankly, governments have been trying to monitor the people for a long time and that's why we have some of the laws and rights in the Constitution. And as I mentioned, I put an article wrote an article and put it up on my site at Craig Peterson dot com about all of this Well, now we're going to talk about the FBI. For those that aren't aware, I'm a member of something called the FBI infra guard program. And this is a program the FBI put together many years ago that's designed to help the FBI work with the critical infrastructure here in the US. And that means businesses that might be involved in financial transactions might be involved in manufacturing. In my case, I'm involved because of course, I do the security stuff. Hey, and if you're interested in working with me, let me know just me at Craig Peterson dot com, but you should be a member of FBI in regards to if you can pass a pretty simple background check near as I can tell, the background check is have you murdered anyone recently? Now this is not the normal FBI background check at all, but they want to make sure you're legit, you have a legitimate need to get this information and that you are going to participate in the program. So I have been involved with that for a while I get a lot of information from the FBI and from some other sources. I'm signing up also for some state of New Hampshire and, and mass and main sources to we'll see how that all goes. But the bottom line is, we need to know as the people who are the de facto security people in our organization or maybe we are trained security people, we need to know what's going on right now. So being a member of the info guard, and you can just go to info guard infragard.org enough regard as an infrastructure Guardian, I guess. infra guard.org you can sign up right there on the website. You can join your local chapter, there are chapters in pretty much every state. Some of them meet quarterly some of the monthly I was running for a couple of years. The FBI is online training the FBI infra guard webinars. As well as doing training for people. And of course, I continue to do a lot of that training. That's what this free training is that you guys sign up for and participate in. And then this week, of course, I've been doing the whole training on VPN. Next week, we're going to talk about mobile devices and then moving on to Wi Fi. And then we're moving on to security compliance for people might have compliance issues. But that's what I've been doing. And I've frankly, I've been really enjoying and helping out a lot of different people and businesses. So right now we have the FBI cyber Task Force, releasing what they call a pin now you'll get all of these pins as an infra garden member. Pin stands for private industry. Notice now these pins have different levels grades on them. A green means space that he can share with anybody and then it gets to yellow which is kind of a need to know basis. And then there's probably other colors that they just don't let me see or other infra garden members because they're not stupid. KC, but that that's what these pins are private industry notices. And they came out with one telling businesses to adopt biometric factors. Now, this, frankly, is a very big deal. And when we're talking about the biometric factors that we need to be worried about, they are

basically saying, Hey, listen, when you log in to a site, or when you have a way to authorize yourself, the best thing to do is have something you know, and something you have, well, something you know, would be a password. Something you have might be like what we use internally, it is called DUO.  In order to verify who we are, and it's a one-time password thing and it works great. But there might be something else too. And that is the biometric thing. So in some cases like on my MacBook Pro My laptop has a fingerprint reader that I can use to unlock things. Plus, I have a thumb key a USB key that I can stick into it that I have. And again, that's something I have. So biometric is really good for multifactor authentication. It's not perfect. It depends, right? We already know, to not use some of the older Samsung fingerprint readers because they can be easily defeated. But and there are problems as well with some of these facial recognition systems. But multifactor authentication is really where they're going. So this is an article from the Czech Republic that I have up on Craig peterson.com. And he's saying that Microsoft's group program manager for identity protection, Alex Weiner. So this is a guy that should know he's working for Microsoft, they have to keep their data You know, quiet, they have to keep it private. They want to keep their customer's data private. So this is a guy in the know, he said accounts that are using multi-factor authentication, we're more than 99.9% less likely to be compromised. Now, this is kind of interesting, because when we're going into Microsoft, and we're talking about Microsoft, there's something else that you might want to know. And that is that many managed services providers, and this includes some break, fix shops and things, but they are selling their customers office 365. And this includes huge companies, right? A lot of people go and buy from the big guys because then it's safer, right? And it's a bigger throat to choke and if something goes wrong, they can sue them and get the money out of them. All of which I disagree with entirely, right? Because the big guys don't care about you. They care about their bottom line. They have to, of course, keep their stock cool. Happy, there are smaller guys are paying more attention. But the IC the problem with most of the smaller guys is they don't keep up with these FBI pins, these private industry notices, they don't keep up with the latest in security. They're not moving their customers from one platform to another because they're selling them software as opposed to really selling them a service. So what we do and what I recommend you look for out there in a vendor is we have a monthly fee. And we will change the software that we're using to protect you will change to the hardware that we're using. If we're finding that there's something that's a lot better or if we find that there is a hole, we will fill that hole with new technology versus what normally what happens which is Okay, here you go. Here's the bill. Here's hardware, it's installed, See you later. The same thing over and over again. It's true with the, you know, anti-malware stuff, people are selling you, the Norton or the Symantec or some other sort of antivirus software, which, frankly, just plain old just doesn't work, right? It doesn't work well enough. So you got to be very, very careful. Google made a similar claim, by the way, in a blog post in May. So here's what happened. A huge, huge managed services provider got hacked. How did they get hacked? Well, it turns out they weren't using multifactor authentication, I already told you about how we are using multiple layers of multifactor authentication to protect our stuff, including we're using multifactor authentication for all of our Microsoft software and services that we're selling like the office 365, etc. So we're better than 99.9% less likely to be compromised, then these other guys and these big guys, what Microsoft has done now is they're forcing most these so-called managed services providers and people are just hanging up a shingle saying the managed services providers, and they can't manage services. They just don't know what they're doing. This is too complicated for them, but they hang up a shingle anyways. So Microsoft said, Okay, well, we're not going to stop them from selling our software because we want to make money.

We're going to go ahead and force them to use multi-factor authentication. So there you go. FBI has a big warning out Microsoft is now forcing people to start using multifactor authentication, for very, very good reasons. Sim swapping there. There's a whole bunch of stuff. Do you want to learn more about this? You can find this article up on my website that Craig Peterson dot com, stick around. When we get back, we're going to be talking about cyber theft. And, you know, if you think your data is not a target, you're wrong, and we'll explain why when we get back, you're listening to Craig Peterson and WGAN and online, Craig Peterson dot com

Transcribed by https://otter.ai

---

More stories and tech updates at:

www.craigpeterson.com

Don't miss an episode from Craig. Subscribe and give us a rating:

www.craigpeterson.com/itunes

Follow me on Twitter for the latest in tech at:

www.twitter.com/craigpeterson

For questions, call or text:

855-385-5553

Welcome Back!  

Nation-States are continuing their push for superiority by stealing the intellectual property from US Companies. Listen in to find out who, what and for what.

For more tech tips, news, and updates visit - CraigPeterson.com

---

Related Articles:

Nation-State Cyber Theft May Cause US Aerospace Downfall

---

Automated Machine-Generated Transcript:

Craig
Hello, hello, everybody. Welcome to course Craig Peterson here on the air at WGAN and online so you'll find me on Craig Peterson dot com. In fact, if you sign up there and Craig Peterson dot com slash subscribe, you will be getting copies of all of the articles I'm talking about today, as well as alerts just like kind of that FBI pin that we were just talking about. But right now we are going to talk about our friends from China. As you can see, that's the title of this segment right now.

You know, this is this is a real problem for so many businesses, frankly. How do you deal with the problem of cyber theft and what is it What's going on? Most businesses just plain aren't aware of it. And they aren't doing anything about it. It's, again, I'm think I mentioned this earlier, it's kind of like the ostrich with the head in the sand. Right? If I don't see it, it's not real, it's not happening. Well, we already know that there have been 10s of billions of dollars of intellectual property theft that have happened. We've got President Trump out there right now, who is trying to negotiate with China to make it so that we don't have to give our intellectual property to the Chinese military. Remember, the socialist government in China requires all of their companies to follow their orders, and they have some pretty brutal ways of enforcing that idea. So yeah, there's some problems now, what China has been doing is if you want to have a business in China, first of all, you can start one you can Be the owner of a business in China, it has to be a Chinese national right, goes back to that throat to choke. I mentioned the last segment. And the that Chinese national now is under the thumb of the Chinese military, the People's Liberation Army. And the socialist government wants all of this stuff, all of this information so that it can continue to grow. And it's interesting to see companies like Google, Google's artificial intelligence lab, is in China. They have I think it's three artificial intelligence facilities over in China. So companies that are going to China, not only have to have a Chinese national in the majority of the company there in China, but all of your intellectual property has to be given to the socialist government and the Chinese military. So President Trump is saying, Wait a minute, this doesn't make sense. We're losing our country. Kind of advantage by giving all of this intellectual material to China. It's just not fair to us at all. Because we are building all of this really cool stuff. We have spent billions of dollars and trying to develop technology only do have it stolen by China. Now, if you look at Apple and what Apple does, they kind of keep some of their technology separate. So they'll load up some software in the US. They're building their high end machines here in the US now, and they're trying to keep this stuff safe. But because of the trade embargoes, the tariffs that are going on, there have been a lot of companies that have moved out of China, which I think is really, really good. I remember back in the late 90s, Walmart had signs everywhere Made in America. And some of this stuff wasn't it was being made in China and then Walmart shifted to live over the last 20 years. Almost every Everything is made in China. I hope to see that change. So what China's trying to do it now is okay. So if you bring your business to China, you've now given us all of your intellectual property. That's the problem, right, obviously. So some businesses are not taking their intellectual property to China. There are businesses who are here in the United States, who are contractors or subcontractors or sub sub contractors, to the military. And they have certain requirements to have us citizens working for them to keep information quiet and secret. The I tars compliance, so we've talked about on the show before the default requirement, and and that is some of that extends also to research that is being done by our universities. So how is China going to get their hands on all of this information? Well, it turns out what they have apparently been doing is they send people over to go to American universities and work in some of these university programs. And take that information then and bring it back to China acting effectively as spies for China. So they go back to China, they use that intellectual property, they use it for the PLA for their socialist military over in China. And they use it to compete on an unfair footing with the US and with other countries. Now, most of these universities are more than happy to take the money from the Chinese who want to come over here. And they they don't care, right. But President Trump's trying to stop that line. Well, that brings us to what we're talking about right now. I'm going to put that up on the screen again. But there is an airliner that China is releasing now. It's called IC 919. This is an airliner that is built domestically in China. And it's going to become commercially available sometime in the next few years. We'll see. But here's what starting to get interesting when they dug into this airplane, when the US dug into the airplane trying to figure out okay, so what components does it have? What is it doing? How did they do this? It got very, very concerning. CrowdStrike is a company you've heard about before they are involved with trying to diagnose the break in for the Democratic National Committee. CrowdStrike has been involved in a lot of stuff over the years when it comes to cyber security and they're pretty darn good at it. Okay, and doing some of these investigations.

Well, CrowdStrike is saying that based on information pieced together from multiple recent US Department of Justice, indictments From CrowdStrike own tracking of turbine Panda, which we my company has had involvement with before, without turbine Panda, by the way, is a Chinese government-backed cyber-espionage group that has been working in aerospace companies since 2010. So based on all of that, and the great article, by the way in dark reading that I'm quoting from you'll find on my website as well at Craig Peterson calm. But what they have found now is that at least some of the parts to this airplane look like they were stolen directly from the US by spies by people that were in these companies. government contractors government subcontracts, because remember if we're talking about Boeing, or basically any us manufacturing firm that makes airplanes, though they're working airplane models that are going to be used by the military, right. So they are US government subcontractors and they have to have a certain level of diligence when it comes to the data they have and how it is all being. How it's all been controlled. So apparently the scene on 19 It's a twin jet airliner. It's China's first homemade commercial jet. It's part of their made in China 2025 initiative. And they're trying to make their country completely self reliant and several key industries, including the military, and man, we could talk about the whole military thing but its phone already it flew about two years ago. And it looks like they have taken some of the technology from Boeing and from Airbus. How's that for fun? This article goes into a lot of detail on it. But I want to warn you, this is a complex problem. It's probably happening to you. These business email compromise is that we keep referring to many of them are coming from China. And your data is not safe. Even if you even if you have US citizens, be very, very careful with your data, your citizens working for you because China is getting their hands on it. And that means we will be at a disadvantage from a technology standpoint, maybe a military standpoint, and maybe your business will go under, like a company I know whose whole livelihood is threatened because of this. When we get back we're going to talk about Microsoft defender and a new feature in it. Of course, you are listening to Craig Peterson. You're watching me live and you will also see replays online.

Transcribed by https://otter.ai

---

More stories and tech updates at:

www.craigpeterson.com

Don't miss an episode from Craig. Subscribe and give us a rating:

www.craigpeterson.com/itunes

Follow me on Twitter for the latest in tech at:

www.twitter.com/craigpeterson

For questions, call or text:

855-385-5553

Welcome Back!  

Nation-States are continuing their push for superiority by stealing the intellectual property from US Companies. Listen in to find out who, what and for what.

For more tech tips, news, and updates visit - CraigPeterson.com

---

Related Articles:

Nation-State Cyber Theft May Cause US Aerospace Downfall

---

Automated Machine-Generated Transcript:

Craig
Hello, hello, everybody. Welcome to course Craig Peterson here on the air at WGAN and online so you'll find me on Craig Peterson dot com. In fact, if you sign up there and Craig Peterson dot com slash subscribe, you will be getting copies of all of the articles I'm talking about today, as well as alerts just like kind of that FBI pin that we were just talking about. But right now we are going to talk about our friends from China. As you can see, that's the title of this segment right now.

You know, this is this is a real problem for so many businesses, frankly. How do you deal with the problem of cyber theft and what is it What's going on? Most businesses just plain aren't aware of it. And they aren't doing anything about it. It's, again, I'm think I mentioned this earlier, it's kind of like the ostrich with the head in the sand. Right? If I don't see it, it's not real, it's not happening. Well, we already know that there have been 10s of billions of dollars of intellectual property theft that have happened. We've got President Trump out there right now, who is trying to negotiate with China to make it so that we don't have to give our intellectual property to the Chinese military. Remember, the socialist government in China requires all of their companies to follow their orders, and they have some pretty brutal ways of enforcing that idea. So yeah, there's some problems now, what China has been doing is if you want to have a business in China, first of all, you can start one you can Be the owner of a business in China, it has to be a Chinese national right, goes back to that throat to choke. I mentioned the last segment. And the that Chinese national now is under the thumb of the Chinese military, the People's Liberation Army. And the socialist government wants all of this stuff, all of this information so that it can continue to grow. And it's interesting to see companies like Google, Google's artificial intelligence lab, is in China. They have I think it's three artificial intelligence facilities over in China. So companies that are going to China, not only have to have a Chinese national in the majority of the company there in China, but all of your intellectual property has to be given to the socialist government and the Chinese military. So President Trump is saying, Wait a minute, this doesn't make sense. We're losing our country. Kind of advantage by giving all of this intellectual material to China. It's just not fair to us at all. Because we are building all of this really cool stuff. We have spent billions of dollars and trying to develop technology only do have it stolen by China. Now, if you look at Apple and what Apple does, they kind of keep some of their technology separate. So they'll load up some software in the US. They're building their high end machines here in the US now, and they're trying to keep this stuff safe. But because of the trade embargoes, the tariffs that are going on, there have been a lot of companies that have moved out of China, which I think is really, really good. I remember back in the late 90s, Walmart had signs everywhere Made in America. And some of this stuff wasn't it was being made in China and then Walmart shifted to live over the last 20 years. Almost every Everything is made in China. I hope to see that change. So what China's trying to do it now is okay. So if you bring your business to China, you've now given us all of your intellectual property. That's the problem, right, obviously. So some businesses are not taking their intellectual property to China. There are businesses who are here in the United States, who are contractors or subcontractors or sub sub contractors, to the military. And they have certain requirements to have us citizens working for them to keep information quiet and secret. The I tars compliance, so we've talked about on the show before the default requirement, and and that is some of that extends also to research that is being done by our universities. So how is China going to get their hands on all of this information? Well, it turns out what they have apparently been doing is they send people over to go to American universities and work in some of these university programs. And take that information then and bring it back to China acting effectively as spies for China. So they go back to China, they use that intellectual property, they use it for the PLA for their socialist military over in China. And they use it to compete on an unfair footing with the US and with other countries. Now, most of these universities are more than happy to take the money from the Chinese who want to come over here. And they they don't care, right. But President Trump's trying to stop that line. Well, that brings us to what we're talking about right now. I'm going to put that up on the screen again. But there is an airliner that China is releasing now. It's called IC 919. This is an airliner that is built domestically in China. And it's going to become commercially available sometime in the next few years. We'll see. But here's what starting to get interesting when they dug into this airplane, when the US dug into the airplane trying to figure out okay, so what components does it have? What is it doing? How did they do this? It got very, very concerning. CrowdStrike is a company you've heard about before they are involved with trying to diagnose the break in for the Democratic National Committee. CrowdStrike has been involved in a lot of stuff over the years when it comes to cyber security and they're pretty darn good at it. Okay, and doing some of these investigations.

Well, CrowdStrike is saying that based on information pieced together from multiple recent US Department of Justice, indictments From CrowdStrike own tracking of turbine Panda, which we my company has had involvement with before, without turbine Panda, by the way, is a Chinese government-backed cyber-espionage group that has been working in aerospace companies since 2010. So based on all of that, and the great article, by the way in dark reading that I'm quoting from you'll find on my website as well at Craig Peterson calm. But what they have found now is that at least some of the parts to this airplane look like they were stolen directly from the US by spies by people that were in these companies. government contractors government subcontracts, because remember if we're talking about Boeing, or basically any us manufacturing firm that makes airplanes, though they're working airplane models that are going to be used by the military, right. So they are US government subcontractors and they have to have a certain level of diligence when it comes to the data they have and how it is all being. How it's all been controlled. So apparently the scene on 19 It's a twin jet airliner. It's China's first homemade commercial jet. It's part of their made in China 2025 initiative. And they're trying to make their country completely self reliant and several key industries, including the military, and man, we could talk about the whole military thing but its phone already it flew about two years ago. And it looks like they have taken some of the technology from Boeing and from Airbus. How's that for fun? This article goes into a lot of detail on it. But I want to warn you, this is a complex problem. It's probably happening to you. These business email compromise is that we keep referring to many of them are coming from China. And your data is not safe. Even if you even if you have US citizens, be very, very careful with your data, your citizens working for you because China is getting their hands on it. And that means we will be at a disadvantage from a technology standpoint, maybe a military standpoint, and maybe your business will go under, like a company I know whose whole livelihood is threatened because of this. When we get back we're going to talk about Microsoft defender and a new feature in it. Of course, you are listening to Craig Peterson. You're watching me live and you will also see replays online.

Transcribed by https://otter.ai

---

More stories and tech updates at:

www.craigpeterson.com

Don't miss an episode from Craig. Subscribe and give us a rating:

www.craigpeterson.com/itunes

Follow me on Twitter for the latest in tech at:

www.twitter.com/craigpeterson

For questions, call or text:

855-385-5553

Welcome Back!  

Microsoft Windows has some built-in Anti-Malware.  It is called Windows Defender.  However, some cyber criminals found ways to defeat it and so now Microsoft has a new feature to prevent that from happening.  Listen in to find out more and how it can help you.

For more tech tips, news, and updates visit - CraigPeterson.com

---

Related Articles:

New Tools Keep CyberThieves From Disabling Your Cyber Protections

---

Automated Machine-Generated Transcript:

Craig
Craig Peterson here. Welcome back. We are live and of course, we are live on WGAN. And I love it when you guys send me an email, I got a few comments from our friends over listening on WGAN and some more people who are online as well. I love hearing from you and you can always just send me an email with a question etc me ME at Craig peterson.com. So let's get into this. This is I think, very, very good news for everybody who is using Microsoft or maybe those people who are security people who are using Microsoft or who are the support people they're supporting using Microsoft. Microsoft has something called defender and they also have a firewall that's built into Windows, there are a lot of misc and figuration frankly, with the whole Windows Firewall and, and the way Microsoft turns on services and has certain services loaded up and running all the time, I have some major disagreements with Microsoft on that. And that's what our hardening course is all about. But let's talk about Microsoft defender. If you are going to do nothing else, at the very least make sure you have Windows Defender turned on. And up to date. Microsoft has taken some of the best techniques, the best technologies to protect windows and combine them into this free package that comes with the latest versions of Windows, the Windows 10 that has the best version of it. They've had this around the action for a little while, but they keep improving it. And that brings us to help net security article about the new feature that Microsoft has added to Windows Defender. If, if you're like most people, you know, you're just somebody who's become the de facto, IT security specialist. Right? You're probably the de facto IT person, right? You're the person that people go to when they have a problem when they have a question, right? And so you got to figure out who do you go to? What can you trust and that's man, that's hard to do? Nowadays, you can search for any topic and see a million videos online about it. So let me give you the bottom line here. If you're going to do nothing else, turn on Windows Defender and turn on automatic Windows updates. That'll get you about 80% safe. So it's very, very good, right. If you want to get to 95 or 99.9% safe, there's a lot of other things you have to do and it can get expensive. But those two things are the biggest things that you can do. And you can do them easily you can do them quickly. Now, Windows Defender and one of the drawbacks to it is that you could make changes to the security settings, and potentially malware or hackers could make changes to it. So one of the things Apple has done for quite a while now is Apple has really tried to harden their OS even further and prevent the ability to make changes to all kinds of system-wide software like Catalina introduced some serious serious protections and caused a lot of applications to break. And that's been true in Microsoft's world as well. You can't just run XP code anymore on Windows 10, which is frankly a good thing. But what Microsoft Windows Defender has done now is it is added tamper protection to Windows That is absolutely phenomenal. Okay, very, very good. And when the features turned on and you should turn it on, this prevents malware, from disabling the virus and threat protection, real-time and cloud-delivered protection. And it also stops viruses and malware from turning off behavior monitoring or removing Security Intelligence updates. It's really really important to make sure it is turned on because this could save you big time. So here's a quote straight from Health Net security and from Microsoft. I don't have a name this is from there on Microsoft 365 Device Management Portal. tamper protection essentially locks Microsoft defender and prevents your security settings from being changed through apps and methods such as configuring settings and Registry Editor on new Windows machine, changing settings through power. Shell command lets editing or removing security settings through group policies, and so on. Obviously, it's something you should do now if you're running an Active Directory, you can push some of these settings out to all of the clients or new network, which I would suggest you do. home users, by the way, will still be able to switch tamper protection off by the Windows Security app. If you have admin permissions on the computer, enterprise users will not be able to do that. There are quite a few differences between the enterprise versions of Windows and the home versions. The home versions don't have all of the security settings even to begin with the enterprise versions you can schedule when you want software updates to be installed. The home versions you can't I got a call from a law firm who had a deposition that was due in the court by 4 pm. And it was like 230 and their machine decided to do update And they could not override it, because they were running the home edition of Windows not knowing the difference, right? Again, another example of a managed services provider not doing their client any good, which was certainly the case here. Tamper protection can be available to organizations that have Microsoft defender ATPE, five. Now, this again gets complicated. We've had this happen before we go into a company will do a security audit, we'll put together an action plan for them. And we'll say okay, well, we advise you to subscribe to this Microsoft service and we'll usually sell it to them. And there are various levels or different levels of Microsoft service for the basic office 365 or also for your windows licenses. There's a lot of different services that are out there. So a TP five is a level Microsoft has more than ten-thousand SKUs, if you can believe that 10,000 different products, so you have to really know what you're doing when you're buying the Microsoft licenses. So we'll go into an organization and will say, Okay, well, it's going to be this much per month, per desktop. And people will ask their smart uncle, hey, Uncle, you know, I'm been talking to this managed security services provider. And they say it's going to cost this much per machine per month, and those are

Microsoft Office and Windows only cost you five to $10 a month. What are they charging them for? Well, yeah, that's true. If you're getting the home version if you're not going to get any of the extra features. Yeah, that's very true. But it is not true if you want the professional version. So tamper protection, ATP five or higher, and only for endpoints that run the latest versions of Windows, which is Windows 10 1903. Which, by the way, is being dedicated, I think this week or next week. Alright, so there's a lot of stuff to understand. I know this is confusing. If you want help with any of this reach out to me, and my team will be glad to help you out and talk to you talk you through it. If you want my services to hire great. If not, that's fine, too. We are really here to help just email me and II at Craig Peterson calm because I understand this stuff is very, very complicated. So kudos to Microsoft for doing that. I think it's important, we need to understand that we need our systems to be safe. And that's one of the things that Windows Defender help so make sure you have that in place. Now another thing that I see very commonly when we're out in doing these assessments, these cyber health assessments or the security assessments and action plans Is that Moore's better? Have you got that, you know, basically, if, if I am going to run antivirus, and I bought Norton, let's say, and I got it at Staples, if I want better security, I'm going to get something else? So maybe you have Microsoft defender turned on. And then you also go out and you get bit defender and you get some anti-spyware software and you get Norton and you know what, it'd be even better, I'm sure if I went and got semantics software, or if I went and got you to know, you name it. There are a lot of them out there antivirus and anti-malware packages that don't tie together. Okay, so it's going to make your life more confusing, but potentially even worse than that. What is going to end up doing is it's going to have all of these pieces of anti-malware software anti-virus off We're competing with each other.

So we go out and we'll see that there are two or three different pieces of software out there. And they are fighting with each other. And they're complaining about each other because of it to all to each antivirus software package. The other antivirus software package looks like it's a virus because of what it can do, what it does do this signature that has onboard, etc, etc. So you see what, where I'm going here, you're much better off using a single end-to-end product that is going to keep you save this going to keep all of your systems safe. That's going to also alert you when something's going on. Because these point products that we're talking about my point product is like Microsoft defender, it runs on one computer it has one point of information, so it knows what it is seen. Now some of these pieces of software like When Microsoft defender does look in memory, others don't they only understand desk, etc, etc. But it's a point product, it's looking at one machine, versus what you need to be doing in this day and age where you're looking at all of the machines in concert. So you can see that there is an attack underway where the attack is coming from what kind of attack it is, where not only are the machines in your office working in concert, but they're tied into smart switches that can turn off the spread of ransomware. If someone brings ransomware into your office, right, because you don't want that to spread, you want to stop it right away. And one of the easiest ways to do that is if you have software that can turn that switch off automatically that port on the switch to shut off to isolate that machine that's trying to spread the ransomware or it's trying to spread a virus. And then beyond the switch. You have a smart next-generation firewall that's watching everything that's going on stopping things from getting in, watching the internal networks communicating with the switches communicating with the desktops, then going out even further. And all of these firewalls data are tied together. So we know right now China, North Korea, you name it is running an attack against us businesses in this way, watches forward and updates within seconds. That's what you want. You don't want all these point products fighting against each other to get complicated. Again, if you have any questions, just reach out to me at Craig Peterson calm and make sure you subscribe to my newsletter, Craig peterson.com slash subscribe. I'll keep you up to date on all the things you need to know. So stick around after the top of the hour will be back. We'll be talking about the Tor Browser. Is it the world's safest browser? What does it mean? What is it doing? All of that right here. So stick around. We'll be right back.

Transcribed by https://otter.ai

---

More stories and tech updates at:

www.craigpeterson.com

Don't miss an episode from Craig. Subscribe and give us a rating:

www.craigpeterson.com/itunes

Follow me on Twitter for the latest in tech at:

www.twitter.com/craigpeterson

For questions, call or text:

855-385-5553

Welcome Back!  

Microsoft Windows has some built-in Anti-Malware.  It is called Windows Defender.  However, some cyber criminals found ways to defeat it and so now Microsoft has a new feature to prevent that from happening.  Listen in to find out more and how it can help you.

For more tech tips, news, and updates visit - CraigPeterson.com

---

Related Articles:

New Tools Keep CyberThieves From Disabling Your Cyber Protections

---

Automated Machine-Generated Transcript:

Craig
Craig Peterson here. Welcome back. We are live and of course, we are live on WGAN. And I love it when you guys send me an email, I got a few comments from our friends over listening on WGAN and some more people who are online as well. I love hearing from you and you can always just send me an email with a question etc me ME at Craig peterson.com. So let's get into this. This is I think, very, very good news for everybody who is using Microsoft or maybe those people who are security people who are using Microsoft or who are the support people they're supporting using Microsoft. Microsoft has something called defender and they also have a firewall that's built into Windows, there are a lot of misc and figuration frankly, with the whole Windows Firewall and, and the way Microsoft turns on services and has certain services loaded up and running all the time, I have some major disagreements with Microsoft on that. And that's what our hardening course is all about. But let's talk about Microsoft defender. If you are going to do nothing else, at the very least make sure you have Windows Defender turned on. And up to date. Microsoft has taken some of the best techniques, the best technologies to protect windows and combine them into this free package that comes with the latest versions of Windows, the Windows 10 that has the best version of it. They've had this around the action for a little while, but they keep improving it. And that brings us to help net security article about the new feature that Microsoft has added to Windows Defender. If, if you're like most people, you know, you're just somebody who's become the de facto, IT security specialist. Right? You're probably the de facto IT person, right? You're the person that people go to when they have a problem when they have a question, right? And so you got to figure out who do you go to? What can you trust and that's man, that's hard to do? Nowadays, you can search for any topic and see a million videos online about it. So let me give you the bottom line here. If you're going to do nothing else, turn on Windows Defender and turn on automatic Windows updates. That'll get you about 80% safe. So it's very, very good, right. If you want to get to 95 or 99.9% safe, there's a lot of other things you have to do and it can get expensive. But those two things are the biggest things that you can do. And you can do them easily you can do them quickly. Now, Windows Defender and one of the drawbacks to it is that you could make changes to the security settings, and potentially malware or hackers could make changes to it. So one of the things Apple has done for quite a while now is Apple has really tried to harden their OS even further and prevent the ability to make changes to all kinds of system-wide software like Catalina introduced some serious serious protections and caused a lot of applications to break. And that's been true in Microsoft's world as well. You can't just run XP code anymore on Windows 10, which is frankly a good thing. But what Microsoft Windows Defender has done now is it is added tamper protection to Windows That is absolutely phenomenal. Okay, very, very good. And when the features turned on and you should turn it on, this prevents malware, from disabling the virus and threat protection, real-time and cloud-delivered protection. And it also stops viruses and malware from turning off behavior monitoring or removing Security Intelligence updates. It's really really important to make sure it is turned on because this could save you big time. So here's a quote straight from Health Net security and from Microsoft. I don't have a name this is from there on Microsoft 365 Device Management Portal. tamper protection essentially locks Microsoft defender and prevents your security settings from being changed through apps and methods such as configuring settings and Registry Editor on new Windows machine, changing settings through power. Shell command lets editing or removing security settings through group policies, and so on. Obviously, it's something you should do now if you're running an Active Directory, you can push some of these settings out to all of the clients or new network, which I would suggest you do. home users, by the way, will still be able to switch tamper protection off by the Windows Security app. If you have admin permissions on the computer, enterprise users will not be able to do that. There are quite a few differences between the enterprise versions of Windows and the home versions. The home versions don't have all of the security settings even to begin with the enterprise versions you can schedule when you want software updates to be installed. The home versions you can't I got a call from a law firm who had a deposition that was due in the court by 4 pm. And it was like 230 and their machine decided to do update And they could not override it, because they were running the home edition of Windows not knowing the difference, right? Again, another example of a managed services provider not doing their client any good, which was certainly the case here. Tamper protection can be available to organizations that have Microsoft defender ATPE, five. Now, this again gets complicated. We've had this happen before we go into a company will do a security audit, we'll put together an action plan for them. And we'll say okay, well, we advise you to subscribe to this Microsoft service and we'll usually sell it to them. And there are various levels or different levels of Microsoft service for the basic office 365 or also for your windows licenses. There's a lot of different services that are out there. So a TP five is a level Microsoft has more than ten-thousand SKUs, if you can believe that 10,000 different products, so you have to really know what you're doing when you're buying the Microsoft licenses. So we'll go into an organization and will say, Okay, well, it's going to be this much per month, per desktop. And people will ask their smart uncle, hey, Uncle, you know, I'm been talking to this managed security services provider. And they say it's going to cost this much per machine per month, and those are

Microsoft Office and Windows only cost you five to $10 a month. What are they charging them for? Well, yeah, that's true. If you're getting the home version if you're not going to get any of the extra features. Yeah, that's very true. But it is not true if you want the professional version. So tamper protection, ATP five or higher, and only for endpoints that run the latest versions of Windows, which is Windows 10 1903. Which, by the way, is being dedicated, I think this week or next week. Alright, so there's a lot of stuff to understand. I know this is confusing. If you want help with any of this reach out to me, and my team will be glad to help you out and talk to you talk you through it. If you want my services to hire great. If not, that's fine, too. We are really here to help just email me and II at Craig Peterson calm because I understand this stuff is very, very complicated. So kudos to Microsoft for doing that. I think it's important, we need to understand that we need our systems to be safe. And that's one of the things that Windows Defender help so make sure you have that in place. Now another thing that I see very commonly when we're out in doing these assessments, these cyber health assessments or the security assessments and action plans Is that Moore's better? Have you got that, you know, basically, if, if I am going to run antivirus, and I bought Norton, let's say, and I got it at Staples, if I want better security, I'm going to get something else? So maybe you have Microsoft defender turned on. And then you also go out and you get bit defender and you get some anti-spyware software and you get Norton and you know what, it'd be even better, I'm sure if I went and got semantics software, or if I went and got you to know, you name it. There are a lot of them out there antivirus and anti-malware packages that don't tie together. Okay, so it's going to make your life more confusing, but potentially even worse than that. What is going to end up doing is it's going to have all of these pieces of anti-malware software anti-virus off We're competing with each other.

So we go out and we'll see that there are two or three different pieces of software out there. And they are fighting with each other. And they're complaining about each other because of it to all to each antivirus software package. The other antivirus software package looks like it's a virus because of what it can do, what it does do this signature that has onboard, etc, etc. So you see what, where I'm going here, you're much better off using a single end-to-end product that is going to keep you save this going to keep all of your systems safe. That's going to also alert you when something's going on. Because these point products that we're talking about my point product is like Microsoft defender, it runs on one computer it has one point of information, so it knows what it is seen. Now some of these pieces of software like When Microsoft defender does look in memory, others don't they only understand desk, etc, etc. But it's a point product, it's looking at one machine, versus what you need to be doing in this day and age where you're looking at all of the machines in concert. So you can see that there is an attack underway where the attack is coming from what kind of attack it is, where not only are the machines in your office working in concert, but they're tied into smart switches that can turn off the spread of ransomware. If someone brings ransomware into your office, right, because you don't want that to spread, you want to stop it right away. And one of the easiest ways to do that is if you have software that can turn that switch off automatically that port on the switch to shut off to isolate that machine that's trying to spread the ransomware or it's trying to spread a virus. And then beyond the switch. You have a smart next-generation firewall that's watching everything that's going on stopping things from getting in, watching the internal networks communicating with the switches communicating with the desktops, then going out even further. And all of these firewalls data are tied together. So we know right now China, North Korea, you name it is running an attack against us businesses in this way, watches forward and updates within seconds. That's what you want. You don't want all these point products fighting against each other to get complicated. Again, if you have any questions, just reach out to me at Craig Peterson calm and make sure you subscribe to my newsletter, Craig peterson.com slash subscribe. I'll keep you up to date on all the things you need to know. So stick around after the top of the hour will be back. We'll be talking about the Tor Browser. Is it the world's safest browser? What does it mean? What is it doing? All of that right here. So stick around. We'll be right back.

Transcribed by https://otter.ai

---

More stories and tech updates at:

www.craigpeterson.com

Don't miss an episode from Craig. Subscribe and give us a rating:

www.craigpeterson.com/itunes

Follow me on Twitter for the latest in tech at:

www.twitter.com/craigpeterson

For questions, call or text:

855-385-5553

Welcome Back!

Have you heard of TOR?  Do you know what it is or how it is used? It is available to anyone but there are caveats. Listen in and I will break it down more 

For more tech tips, news, and updates visit - CraigPeterson.com

---

Related Articles:

Protect your Anonymity is all about Layers 

---

Automated Machine-Generated Transcript:

Craig
Hello, everybody, Craig Peterson here. Welcome back. I hope you're enjoying today's show. We got about an hour left here as we go through some of these topics. We're going to talk about the Tor Browser. Is this what you've been looking for? Is this going to keep you safe online? We're going to be talking about Facebook's new Libra cryptocurrency and what they're doing with that we'll talk about this fake iOS jailbreak site and I OT attacks, there is so much to learn and understand that it really gets confusing and, and I get it so we're trying to make this a little bit simpler for everybody. Hopefully, it'll be simpler for you. Hopefully, you'll be able to understand it and life will be good right life will be all better. Well if you have questions about What we're talking about today, there are a few ways to reach me. Now, I do get a lot of emails, I get thousands a day sometimes thank goodness, I've got good email filters that block most of those out because I've had the same email address now for almost, well, almost 30 years, so quite a while with the same email address, and I've had email even longer than that. But I'm getting all these emails. So sometimes you might send me something and it might take me a little bit to get back to, you know, don't be afraid to send something again, if you don't reach me and me at Craig Peterson calm is probably the best place to reach out for me. So it's, you know, it's a good place good information that we provide in our newsletter every week. So make sure you are on the newsletter. That way you'll get my show notes. It's Craig peterson.com slash subscribe to the show notes. If I was just responding to Facebook message a Facebook mail. And it was a gentleman who has been running a small it firm kind of a break-fix shop, little IT shop. And he had some questions that he was presenting and said he loves to listen to the podcast. And yes, indeed, you'll find my podcasts almost everywhere as well, if you enjoy podcasts, and I'd love to hear from you if you are online listening if you have questions or comments. So the other way to reach me is to text me you can text me directly. I'm not using a short code. This is a phone number that goes to me and my team 855-385-5553 you can just send me a text anytime. Any questions, anything that you might be wondering about, I can even sign me up for the weekly show notes that go out typically Saturday mornings, we try and get those things out. So let's get into this whole story. browser thing is there are many people out there that really have some questions about it. But I bet you, you guys, most of you have not even heard of the Tor browser. So maybe we should start with a little bit of an explanation here. So Tor Browser was put together as part of the onion network, this Tor network that's out there by the US military. In fact, the military in the United States is still paying to maintain this network. Now this network is used a lot by bad guys. This is where the Silk Road was. We might have heard of this. You could buy almost anything you wanted. On the Silk Road. You could go there, you could buy drugs, have them shipped to your home, just all kinds of things. This is where they supposedly had the red rooms, and just It's a crazy place, but it was designed to provide anonymity for the people that used it, and was designed and put in place by our military, because we wanted the ability to have people within these countries that were really kind of suppressed. But to be able to have those people be able to send messages to our State Department, our CIA, or even to communicate with each other. You've probably heard about these Hong Kong protests. And they've been using an app that allows them to communicate directly with each other and does not send it through the public Internet. And of course, the Chinese government not happy about that at all. And the reason they're not happy about it is that they don't know what people are saying. And you know how I feel about cryptography. So Apple pulled that app from the store so that these Chinese protesters couldn't use it to coordinate their activities. And then they got a lot of publicity Sure, and so Apple put it back on the store, my understanding is it's back off the store now. So this is all important stuff to understand. And that's where Torah came from. So people like people in Hong Kong, could use the public Internet and could communicate and do it under the radar. Now, it's not 100% under the radar, for instance, our clients and this is particularly true for clients that have financial information or that have military requirements. Our clients we haven't set up so that what is called Tor exit nodes are blocked so that their internal people cannot just use Tor now to steal information provided to the Chinese. You've probably heard me in the last hour, talking about how the Chinese apparently stole all kinds of technology from our major contractors Boeing and Airbus military contractors. subcontractors, they got engine technology, they got flood control technology. They got all kinds of stuff that they stole. So you don't want your employees to be able to take your intellectual property and use it now to get a job somewhere else, right? So yeah, yeah, you can hire me. And I will bring all of Tesla's electric car technology with me. That is a legitimate lawsuit that's been going on, where a guy was accused of having stolen the technology from Tesla and took it to his next employer and vice versa, has happened to it's happening every day. Now, you can use this Tor Browser, even if you're not an activist over in Hong Kong, even if you're not someone trying to communicate with the State Department department or the NSA. You can use the Tor browser to go almost anywhere online. You don't have to be on the dark web. You can be just Online cruising around. And the idea behind it is they use multiple exit nodes so that when you connect it, it is a VPN. And your data is transmitted to a Tor node. And it's encrypted wallets in transit when it gets to the remote and it then goes out onto the regular internet. But the other thing that's happening as it's in transit is it decides which exit node to use. So you might actually be using multiple exit nodes. So you can't be tracked very easily because they don't know you know, the ISP for this tour exit node doesn't know who you are.

Because that's going through the Tor network is, again, think of it as a VPN. But the big difference between a normal VPN and a Tor type VPN is it is constantly switching you to different exit nodes so that even the ISP of that VPN doesn't know where you're going. So I know this is really complicated. If you have any questions, let me know. If you want me to help you set it up for you to know, let me know, for you to know how to do it, right. Whether you're trying to do it for business or you're trying to do it for yourself, I'd be glad to do it. We could even arrange a bit of training on it if that's something that interests you as well. Journalists use this a lot. And it's used to kind of stay under the radar of maybe a business or government agency that that might be squealing on. The Tor browser is legal in the US. I'm pretty sure it's legal in Canada, not sure about Mexico. But it is illegal in some of these foreign countries like in China and in Iran and North Korea, various other places but dissidents are using it journalists using it a lot. You can get the browser for your Linux, your Mac your windows. It's also available Mobile on Android, the Google Play Store, there's something called the onion browser that you can get I have it installed on my iOS devices. And I use it when I really kind of need to be super-secret. And that's the idea behind it. The Tor network is called the onion. This whole onion browser, the whole concept is there are multiple layers, right? So they might be able to get to one layer, but hopefully, they can't get to the next I. I don't want to go into much more detail here because it gets really rather confusing. good article, I put it up on my website at Craig peterson.com that came from CSL online that I'm referring to right now. That's the one I'm holding my hands if you're watching this, either live or in replay on video. But it's basically a three-layer proxy think like three VPN and that's what the whole thing is all about. So they explain it in pretty good detail in this article. So when should you use it? Well, if you need real anonymity. And that has to do with anonymity from the government. Maybe you are a whistleblower you're trying to communicate this is what an Edward Snowden would use, for instance, or you just want to keep your data private. You don't want your internet service provider monitoring, where you're going and what you're doing online. Because if you're using the Tor browser, and you know, one of these onion browsers, they're not going to be able to tell where you're going and what you're doing there. There's a big caveat here. Because in some cases, if you're using the Tor Browser, now, the business owner might start getting suspicious, the government might start getting suspicious. And you might find yourself as a matter subject of investigation, a little extra investigation, right? Because they're not quite sure what you're doing. But I do use it from time to time and I've found it to be pretty good, frankly. But in most cases with our clients, we block access to it. So keep that in mind as well. It is great for anonymity. Tor has spelled EF those guys asking TORT or the Tor browser, and it is something that I think many people should use and consider using, you know, part of our security that we've been talking about. Look at it and play with it. Okay. Any questions? just email me at Craig Peterson calm, be more than glad to answer those questions for you. Or again, you can text me 855-385-5553 Hey, when we come back, we're going to talk a little bit about cryptocurrencies. And Libra. What's this all about? Why is it fall flat on its face? You're listening to Craig Peterson on WGAN and online, Craig peterson.com. Stick around.

Transcribed by https://otter.ai

---

More stories and tech updates at:

www.craigpeterson.com

Don't miss an episode from Craig. Subscribe and give us a rating:

www.craigpeterson.com/itunes

Follow me on Twitter for the latest in tech at:

www.twitter.com/craigpeterson

For questions, call or text:

855-385-5553

Welcome Back!

Have you heard of TOR?  Do you know what it is or how it is used? It is available to anyone but there are caveats. Listen in and I will break it down more 

For more tech tips, news, and updates visit - CraigPeterson.com

---

Related Articles:

Protect your Anonymity is all about Layers 

---

Automated Machine-Generated Transcript:

Craig
Hello, everybody, Craig Peterson here. Welcome back. I hope you're enjoying today's show. We got about an hour left here as we go through some of these topics. We're going to talk about the Tor Browser. Is this what you've been looking for? Is this going to keep you safe online? We're going to be talking about Facebook's new Libra cryptocurrency and what they're doing with that we'll talk about this fake iOS jailbreak site and I OT attacks, there is so much to learn and understand that it really gets confusing and, and I get it so we're trying to make this a little bit simpler for everybody. Hopefully, it'll be simpler for you. Hopefully, you'll be able to understand it and life will be good right life will be all better. Well if you have questions about What we're talking about today, there are a few ways to reach me. Now, I do get a lot of emails, I get thousands a day sometimes thank goodness, I've got good email filters that block most of those out because I've had the same email address now for almost, well, almost 30 years, so quite a while with the same email address, and I've had email even longer than that. But I'm getting all these emails. So sometimes you might send me something and it might take me a little bit to get back to, you know, don't be afraid to send something again, if you don't reach me and me at Craig Peterson calm is probably the best place to reach out for me. So it's, you know, it's a good place good information that we provide in our newsletter every week. So make sure you are on the newsletter. That way you'll get my show notes. It's Craig peterson.com slash subscribe to the show notes. If I was just responding to Facebook message a Facebook mail. And it was a gentleman who has been running a small it firm kind of a break-fix shop, little IT shop. And he had some questions that he was presenting and said he loves to listen to the podcast. And yes, indeed, you'll find my podcasts almost everywhere as well, if you enjoy podcasts, and I'd love to hear from you if you are online listening if you have questions or comments. So the other way to reach me is to text me you can text me directly. I'm not using a short code. This is a phone number that goes to me and my team 855-385-5553 you can just send me a text anytime. Any questions, anything that you might be wondering about, I can even sign me up for the weekly show notes that go out typically Saturday mornings, we try and get those things out. So let's get into this whole story. browser thing is there are many people out there that really have some questions about it. But I bet you, you guys, most of you have not even heard of the Tor browser. So maybe we should start with a little bit of an explanation here. So Tor Browser was put together as part of the onion network, this Tor network that's out there by the US military. In fact, the military in the United States is still paying to maintain this network. Now this network is used a lot by bad guys. This is where the Silk Road was. We might have heard of this. You could buy almost anything you wanted. On the Silk Road. You could go there, you could buy drugs, have them shipped to your home, just all kinds of things. This is where they supposedly had the red rooms, and just It's a crazy place, but it was designed to provide anonymity for the people that used it, and was designed and put in place by our military, because we wanted the ability to have people within these countries that were really kind of suppressed. But to be able to have those people be able to send messages to our State Department, our CIA, or even to communicate with each other. You've probably heard about these Hong Kong protests. And they've been using an app that allows them to communicate directly with each other and does not send it through the public Internet. And of course, the Chinese government not happy about that at all. And the reason they're not happy about it is that they don't know what people are saying. And you know how I feel about cryptography. So Apple pulled that app from the store so that these Chinese protesters couldn't use it to coordinate their activities. And then they got a lot of publicity Sure, and so Apple put it back on the store, my understanding is it's back off the store now. So this is all important stuff to understand. And that's where Torah came from. So people like people in Hong Kong, could use the public Internet and could communicate and do it under the radar. Now, it's not 100% under the radar, for instance, our clients and this is particularly true for clients that have financial information or that have military requirements. Our clients we haven't set up so that what is called Tor exit nodes are blocked so that their internal people cannot just use Tor now to steal information provided to the Chinese. You've probably heard me in the last hour, talking about how the Chinese apparently stole all kinds of technology from our major contractors Boeing and Airbus military contractors. subcontractors, they got engine technology, they got flood control technology. They got all kinds of stuff that they stole. So you don't want your employees to be able to take your intellectual property and use it now to get a job somewhere else, right? So yeah, yeah, you can hire me. And I will bring all of Tesla's electric car technology with me. That is a legitimate lawsuit that's been going on, where a guy was accused of having stolen the technology from Tesla and took it to his next employer and vice versa, has happened to it's happening every day. Now, you can use this Tor Browser, even if you're not an activist over in Hong Kong, even if you're not someone trying to communicate with the State Department department or the NSA. You can use the Tor browser to go almost anywhere online. You don't have to be on the dark web. You can be just Online cruising around. And the idea behind it is they use multiple exit nodes so that when you connect it, it is a VPN. And your data is transmitted to a Tor node. And it's encrypted wallets in transit when it gets to the remote and it then goes out onto the regular internet. But the other thing that's happening as it's in transit is it decides which exit node to use. So you might actually be using multiple exit nodes. So you can't be tracked very easily because they don't know you know, the ISP for this tour exit node doesn't know who you are.

Because that's going through the Tor network is, again, think of it as a VPN. But the big difference between a normal VPN and a Tor type VPN is it is constantly switching you to different exit nodes so that even the ISP of that VPN doesn't know where you're going. So I know this is really complicated. If you have any questions, let me know. If you want me to help you set it up for you to know, let me know, for you to know how to do it, right. Whether you're trying to do it for business or you're trying to do it for yourself, I'd be glad to do it. We could even arrange a bit of training on it if that's something that interests you as well. Journalists use this a lot. And it's used to kind of stay under the radar of maybe a business or government agency that that might be squealing on. The Tor browser is legal in the US. I'm pretty sure it's legal in Canada, not sure about Mexico. But it is illegal in some of these foreign countries like in China and in Iran and North Korea, various other places but dissidents are using it journalists using it a lot. You can get the browser for your Linux, your Mac your windows. It's also available Mobile on Android, the Google Play Store, there's something called the onion browser that you can get I have it installed on my iOS devices. And I use it when I really kind of need to be super-secret. And that's the idea behind it. The Tor network is called the onion. This whole onion browser, the whole concept is there are multiple layers, right? So they might be able to get to one layer, but hopefully, they can't get to the next I. I don't want to go into much more detail here because it gets really rather confusing. good article, I put it up on my website at Craig peterson.com that came from CSL online that I'm referring to right now. That's the one I'm holding my hands if you're watching this, either live or in replay on video. But it's basically a three-layer proxy think like three VPN and that's what the whole thing is all about. So they explain it in pretty good detail in this article. So when should you use it? Well, if you need real anonymity. And that has to do with anonymity from the government. Maybe you are a whistleblower you're trying to communicate this is what an Edward Snowden would use, for instance, or you just want to keep your data private. You don't want your internet service provider monitoring, where you're going and what you're doing online. Because if you're using the Tor browser, and you know, one of these onion browsers, they're not going to be able to tell where you're going and what you're doing there. There's a big caveat here. Because in some cases, if you're using the Tor Browser, now, the business owner might start getting suspicious, the government might start getting suspicious. And you might find yourself as a matter subject of investigation, a little extra investigation, right? Because they're not quite sure what you're doing. But I do use it from time to time and I've found it to be pretty good, frankly. But in most cases with our clients, we block access to it. So keep that in mind as well. It is great for anonymity. Tor has spelled EF those guys asking TORT or the Tor browser, and it is something that I think many people should use and consider using, you know, part of our security that we've been talking about. Look at it and play with it. Okay. Any questions? just email me at Craig Peterson calm, be more than glad to answer those questions for you. Or again, you can text me 855-385-5553 Hey, when we come back, we're going to talk a little bit about cryptocurrencies. And Libra. What's this all about? Why is it fall flat on its face? You're listening to Craig Peterson on WGAN and online, Craig peterson.com. Stick around.

Transcribed by https://otter.ai

---

More stories and tech updates at:

www.craigpeterson.com

Don't miss an episode from Craig. Subscribe and give us a rating:

www.craigpeterson.com/itunes

Follow me on Twitter for the latest in tech at:

www.twitter.com/craigpeterson

For questions, call or text:

855-385-5553

Welcome Back!

We are discussing cryptocurrencies in general as well as the pros and cons of Facebook's Libra. Listen in to find out why some of their payment company partnerships got cold feet. 

For more tech tips, news, and updates visit - CraigPeterson.com

---

Related Articles:

Facebook’s Libra cryptocurrency loses all but one payment company

---

Automated Machine-Generated Transcript:

Craig  
Hello, everybody, Craig Peterson here. We're going to talk a little bit about cryptocurrency right now, Facebook was trying to get into the market, and basically, everybody's bailed on them. So we're going to talk about that and a little bit about Bitcoin and what are the real advantages? What are these guys and gals that are trying to bring the cryptocurrencies to market? What's really behind them and motivating them? I know a number of people who have these crypto currencies that they're trying to sell, and they're just in it for the money, frankly, you know, oh, yeah, it's great. And there are all of these initial coin offerings. You might have seen them these Icos that are out there, that are where people are saying, Yeah, we're the one to go with buying ours and of course, Bitcoin and looking back at the history of Bitcoin, how it came to be And it was a total farce. They were just nasty. They were driving up the value of Bitcoin on purpose they were, they were buying thousands of them and then selling them and buying them back and forth and losing money to try and drive up the value of this cryptocurrency now a crypto currency. It's kind of like a US dollar bill, for instance, remember it used to be we're on the gold standard and the dollar bill, in fact, all of our currency said that it was redeemable in gold and then they said redeemable in silver. And now they don't claim pie here. They just say that. While it's good for all debts, public and private. Well, people accepted the currency back in the day because they could take it and go to the Treasury and get gold or silver. But then it became just so common, that everybody basically accepted it, you know, and it's fine. It's great. Let's use it and off they go. What's it worth today? What wants $1 bill worth? Well obviously there's been inflation but it's only worth what people will accept it for isn't is not the bottom line it's not worth that piece of paper probably isn't even worth a penny it's made out of scrap cotton is what it's made out of. So it's really not worth very much money. So how then do we value something like the dollar well be we value it because we all agree what it's worth and that that six of those dollars a buy a couple of expense, a couple of moderately expensive coffee, I guess there's coffee that's like 200 bucks a cup But anyways, that's why it's worth what it's worth. So how about a cryptocurrency? All a cryptocurrency is is a number basically. And that number has been quote mind unquote and the way it was mind is it Just had a computer looking for the special type of a number, and it's using massive prime numbers and things already compute them. So it's worth what people say it's worth. And it has been worth as much as I think it hit $20,000 per Bitcoin now, there are many other types of cryptocurrencies but Bitcoin is what you're most likely to know and understand. But there are other types of currencies that are out there right now that are these crypto currencies. And I think Bitcoin last I checked was worth what about $8,000 7000 per Bitcoin? What has driven up the value of Bitcoin dramatically is actually ransomware because that's what people have been using to pay the ransoms and that's part of the beauty of cryptocurrency. This is why I was actually excited about Facebook's Libra currency. Now you know, I don't like Facebook. I don't like Zuckerberg, I don't like all of the allegations surrounding how he cheated the twins out of their money, and then the investments and the things he's done, where he's been lying to Congress and lying to users. And, you know, I don't like the man, bottom line.

However, this type of currency could change the world. If we had a crypto currency that was commonly accepted by governments, and that was backed by large financial institutions. Well, then we really got something. Here's what happened. Facebook announced this Libra cryptocurrency that they were going to come out with, and that was supposedly sometime 2020. And you had PayPal, jump on board, MasterCard, Visa, e Bay, stripe. Mercado, they were all on board. So the idea was, they would set a par value for this Libra cryptocurrency and they would probably offer kind of like an IPO, people would buy this currency, that currency would then be available for people to generally use and, and Facebook would kind of be the Clearinghouse, the bank if you will for these transactions and then the transactions would go through on the back end to these companies I mentioned. So you could go on to eBay, and you could buy things on eBay using your Libra cryptocurrency. Now all of these cryptocurrencies, ultimately our trackable you the secret service has tracked down people. That's how they arrested the guy that was running the whole Silk Road on the dark web using Tor that we talked about last time, right. So cryptocurrencies are not entirely private. In fact, if they wanted them to be they could be entirely tracked.

So Oh, What Why was I so excited was excited because now, I could sell something to someone in Timbuktu in Northern Africa. And I wouldn't have to worry about the currency exchange, I wouldn't have to worry about any of that stuff. I could sell things to people in Europe. I wouldn't have to worry about GMI taking a pound sterling versus a euro versus what? Right? The Russian ruble, what, you know, the Chinese currencies, whatever in the world, I'm just saying, Yeah, it's to Libra. And now those people in those countries that don't have access to a banking system as we do, where I could take a Philippine peso or Mexican peso, or whatever currency I want to I can do that because I have good banks here in the US. But people overseas people in Africa, people in these smaller nations don't have access to it. But if they had access to something like the Libra that was accepted worldwide, that the value of which was well known and well established, then then we could really do something. That's why I was so excited. So this last week, PayPal came out and said, No, we're second fun. No Libra for us, MasterCard then came on said we're not going to be involved with the Libra visa came out after MasterCard and said No way. We have eBay coming out stripe came out. Mercado, all of them came out and said, No, we are not going to accept a Libra. So it's a shame, but that's kind of where it stands right now. On this last Monday, there was a bunch of very non-optimistic news about all of this. A good idea good article on this by the way over naked security. So it doesn't look like it's going to happen. Well, the reason that is not going to happen apparently, is that there's a lot of pushback by a lot of governments because they're worried about regulations being able to track the flow of money, just like in the US where you can have $10,000 or more cash transactions, etc, etc, right? global stable coins and it's absolutely crazy. France has also rejected Libra. The g7 draft report said no, we're not going to do it. The FSB said the same thing over in Russia, the BBC set was reporting the same thing. So now, there is only one firm left that says that they would work with the Libra into Dutch firms called pay you and apparently, the BBC tried Reach out to them. And they hadn't responded as of the time this article was written. So it's a shame. But it looks like Libra is dead. And it's mostly due to governments who were upset that they wouldn't be able to track transactions and way they wanted to that they couldn't tax them. Now we know in the US and some other countries, the tax man is coming after all kinds of virtual stuff. If you own virtual properties in some of these online communities that aren't real, you have to pay taxes on that as well. So no surprise, I guess. Goodbye Libra. We hardly knew the next up. We're going to talk about iOS, jailbreaking and some problems people been running into serious problems. You're listening to Craig Peterson on WGAN. And online at Craig Peterson dot com

Transcribed by https://otter.ai

---

More stories and tech updates at:

www.craigpeterson.com

Don't miss an episode from Craig. Subscribe and give us a rating:

www.craigpeterson.com/itunes

Follow me on Twitter for the latest in tech at:

www.twitter.com/craigpeterson

For questions, call or text:

855-385-5553

Welcome Back!

We are discussing cryptocurrencies in general as well as the pros and cons of Facebook's Libra. Listen in to find out why some of their payment company partnerships got cold feet. 

For more tech tips, news, and updates visit - CraigPeterson.com

---

Related Articles:

Facebook’s Libra cryptocurrency loses all but one payment company

---

Automated Machine-Generated Transcript:

Craig  
Hello, everybody, Craig Peterson here. We're going to talk a little bit about cryptocurrency right now, Facebook was trying to get into the market, and basically, everybody's bailed on them. So we're going to talk about that and a little bit about Bitcoin and what are the real advantages? What are these guys and gals that are trying to bring the cryptocurrencies to market? What's really behind them and motivating them? I know a number of people who have these crypto currencies that they're trying to sell, and they're just in it for the money, frankly, you know, oh, yeah, it's great. And there are all of these initial coin offerings. You might have seen them these Icos that are out there, that are where people are saying, Yeah, we're the one to go with buying ours and of course, Bitcoin and looking back at the history of Bitcoin, how it came to be And it was a total farce. They were just nasty. They were driving up the value of Bitcoin on purpose they were, they were buying thousands of them and then selling them and buying them back and forth and losing money to try and drive up the value of this cryptocurrency now a crypto currency. It's kind of like a US dollar bill, for instance, remember it used to be we're on the gold standard and the dollar bill, in fact, all of our currency said that it was redeemable in gold and then they said redeemable in silver. And now they don't claim pie here. They just say that. While it's good for all debts, public and private. Well, people accepted the currency back in the day because they could take it and go to the Treasury and get gold or silver. But then it became just so common, that everybody basically accepted it, you know, and it's fine. It's great. Let's use it and off they go. What's it worth today? What wants $1 bill worth? Well obviously there's been inflation but it's only worth what people will accept it for isn't is not the bottom line it's not worth that piece of paper probably isn't even worth a penny it's made out of scrap cotton is what it's made out of. So it's really not worth very much money. So how then do we value something like the dollar well be we value it because we all agree what it's worth and that that six of those dollars a buy a couple of expense, a couple of moderately expensive coffee, I guess there's coffee that's like 200 bucks a cup But anyways, that's why it's worth what it's worth. So how about a cryptocurrency? All a cryptocurrency is is a number basically. And that number has been quote mind unquote and the way it was mind is it Just had a computer looking for the special type of a number, and it's using massive prime numbers and things already compute them. So it's worth what people say it's worth. And it has been worth as much as I think it hit $20,000 per Bitcoin now, there are many other types of cryptocurrencies but Bitcoin is what you're most likely to know and understand. But there are other types of currencies that are out there right now that are these crypto currencies. And I think Bitcoin last I checked was worth what about $8,000 7000 per Bitcoin? What has driven up the value of Bitcoin dramatically is actually ransomware because that's what people have been using to pay the ransoms and that's part of the beauty of cryptocurrency. This is why I was actually excited about Facebook's Libra currency. Now you know, I don't like Facebook. I don't like Zuckerberg, I don't like all of the allegations surrounding how he cheated the twins out of their money, and then the investments and the things he's done, where he's been lying to Congress and lying to users. And, you know, I don't like the man, bottom line.

However, this type of currency could change the world. If we had a crypto currency that was commonly accepted by governments, and that was backed by large financial institutions. Well, then we really got something. Here's what happened. Facebook announced this Libra cryptocurrency that they were going to come out with, and that was supposedly sometime 2020. And you had PayPal, jump on board, MasterCard, Visa, e Bay, stripe. Mercado, they were all on board. So the idea was, they would set a par value for this Libra cryptocurrency and they would probably offer kind of like an IPO, people would buy this currency, that currency would then be available for people to generally use and, and Facebook would kind of be the Clearinghouse, the bank if you will for these transactions and then the transactions would go through on the back end to these companies I mentioned. So you could go on to eBay, and you could buy things on eBay using your Libra cryptocurrency. Now all of these cryptocurrencies, ultimately our trackable you the secret service has tracked down people. That's how they arrested the guy that was running the whole Silk Road on the dark web using Tor that we talked about last time, right. So cryptocurrencies are not entirely private. In fact, if they wanted them to be they could be entirely tracked.

So Oh, What Why was I so excited was excited because now, I could sell something to someone in Timbuktu in Northern Africa. And I wouldn't have to worry about the currency exchange, I wouldn't have to worry about any of that stuff. I could sell things to people in Europe. I wouldn't have to worry about GMI taking a pound sterling versus a euro versus what? Right? The Russian ruble, what, you know, the Chinese currencies, whatever in the world, I'm just saying, Yeah, it's to Libra. And now those people in those countries that don't have access to a banking system as we do, where I could take a Philippine peso or Mexican peso, or whatever currency I want to I can do that because I have good banks here in the US. But people overseas people in Africa, people in these smaller nations don't have access to it. But if they had access to something like the Libra that was accepted worldwide, that the value of which was well known and well established, then then we could really do something. That's why I was so excited. So this last week, PayPal came out and said, No, we're second fun. No Libra for us, MasterCard then came on said we're not going to be involved with the Libra visa came out after MasterCard and said No way. We have eBay coming out stripe came out. Mercado, all of them came out and said, No, we are not going to accept a Libra. So it's a shame, but that's kind of where it stands right now. On this last Monday, there was a bunch of very non-optimistic news about all of this. A good idea good article on this by the way over naked security. So it doesn't look like it's going to happen. Well, the reason that is not going to happen apparently, is that there's a lot of pushback by a lot of governments because they're worried about regulations being able to track the flow of money, just like in the US where you can have $10,000 or more cash transactions, etc, etc, right? global stable coins and it's absolutely crazy. France has also rejected Libra. The g7 draft report said no, we're not going to do it. The FSB said the same thing over in Russia, the BBC set was reporting the same thing. So now, there is only one firm left that says that they would work with the Libra into Dutch firms called pay you and apparently, the BBC tried Reach out to them. And they hadn't responded as of the time this article was written. So it's a shame. But it looks like Libra is dead. And it's mostly due to governments who were upset that they wouldn't be able to track transactions and way they wanted to that they couldn't tax them. Now we know in the US and some other countries, the tax man is coming after all kinds of virtual stuff. If you own virtual properties in some of these online communities that aren't real, you have to pay taxes on that as well. So no surprise, I guess. Goodbye Libra. We hardly knew the next up. We're going to talk about iOS, jailbreaking and some problems people been running into serious problems. You're listening to Craig Peterson on WGAN. And online at Craig Peterson dot com

Transcribed by https://otter.ai

---

More stories and tech updates at:

www.craigpeterson.com

Don't miss an episode from Craig. Subscribe and give us a rating:

www.craigpeterson.com/itunes

Follow me on Twitter for the latest in tech at:

www.twitter.com/craigpeterson

For questions, call or text:

855-385-5553