Craig Peterson - Secure Your Business, Your Privacy, and Save Your Sanity

New Cyber Security Rules going into effect for the Federal Agencies next week.

Financial Accounts are going to be Hacked.  It is time to set up all your financial accounts like you are going to be hacked. 

Infant Social Security Numbers are worth the most on the Dark Web -- this is because they are unused for 10-15 years during which time someone can use their identity. 

DOD Weapon System cybersecurity and how the DOD, just isn't grappling with the scale of these vulnerabilities.

Do you know what data you have?  If you don't know what or where the sensitive data is then how do you know what you need to protect. That is why it is important to have a Cyber Liability Assessment done.

The Importance of Changing and Managing Passwords can't be stressed enough.

Have you guys heard about Deep fakes?  This is quite terrifying what the future of AI and fake news may bring.

Where was Microsoft's QA department? Can you believe Microsoft released an update that deletes your documents folder?  They have pulled the Windows 10 update now.

Have you rented an Airbnb lately? Apparently some Airbnb Hidden cameras in your Airbnb rental

Did you hear what students are willing to exchange for free coffee? Wow!  It is downright dangerous for them.

Craig is putting up a new insider site (Yes, it is free, but you have to sign up)  On it will have all his special reports that he puts out and you will be the first to get them.

These and more tech tips, news, and updates visit -CraigPeterson.com

---

Transcript:

Below is a rush transcript of this segment, it might contain errors.

Airing date: 10/13/2018

The Importance of Cyber Liability Assessments, Changing and Managing Passwords, Deep Fakes, Microsoft pulled the Windows 10 update, Digital IDs, Hidden cameras in your Airbnb rental, The danger of no Cash options at Coffee Shops

Craig Peterson: 0:00 Hey, Good Morning, everybody. Glad to have you here. We've had a very busy week. This week, we managed to do our three webinar series. Hopefully, you had a chance to attend. This as part of our master class, for small businesses, about security and the types of security things you need to be doing and paying attention to, kind of being careful of. So, if you didn't get it, we will be having other little series as time goes on. And, you know, I keep trying to do this, maybe one a week, maybe less, maybe more. But you know, time will tell. So, keep an eye out, we'll be doing more. We had a lot of great feedback. We've started doing some of these cyber liability assessments. Again, these are free things we're doing for listeners of the show, and people who attended the webinar. So, that we can tell them where they're starting. Isn't that the biggest problem? How can you get to where you want to go, if you have no idea where you're at, right. So, that's the whole idea behind this cyber liability assessment. And those are underway, we just did one for one lady that was really quite a shocking, at least to her I'm sure, a listener to the radio show, where there was well over a million dollars in liability if the data got out. So, we're thinking maybe one of the things we should do in the very near future is put together a little special report on how to keep that data safe. Especially, with the new regulations that are starting to go into place now. That is kind of following the whole GDPR thing over in Europe. So, that you know, the protection if you will, of your personal information. California already has them in place, they're moving over to the federal side. And it looks like the Department of Homeland Security is going to be adopting those some going into effect next week. In fact, federal agencies are special, and want to be compliant already, but, apparently, about 50% of them is all that really is ready to comply. So, we will be talking about this as time goes on. Probably put together a little master class on some of that stuff. What you have to do in order to comply with these new regulations. We've already been doing some stuff for GDPR for those businesses that are trying to do stuff, internationally. So, today we are going to talk about some of the articles up on my website. We do curation every week in fact, it's me going through a lot of articles hundreds of them every week, really we kind of skim through try and find the best. Some of the best this week that you'll find up on the site, everything you should do before and after you lose your phone. I had a conversation this week with a gentleman who just two weeks ago got ransomware in his computer and ended up taking it into the local Geek Squad over at BestBuy trying to get them to fix a few things up. Hopefully, that's all going to work out for him, but it really brought to mind that I've got to put together a little masterclass and special report on this very topic. How do you prepare yourself for the inevitable? And, that is one of our articles for today, let's see if we can find that there's so much stuff here. Election security is a mess. Microsoft pulled the Windows 10 update, the October update. and we'll talk about that and why really bad news, frankly there. Digital IDs extra harmful here way worse than you might suppose. Finding hidden cameras in your Airbnb rental. No cash at this cafe - What students are doing in order to get free coffee?

3:48 Terrifying future. Deep fakes. Have you have you guys seen this article? It's up on my website. Deep fakes 2.0, the terrifying future of AI and fake news.

3:59 Weapon System cybersecurity, The DOD, just isn't grappling with the scale of their vulnerabilities. The breach that killed Google Plus, wasn't a breach at all. I want to talk about this today. We'll get into it a little bit of detail. But, what's a breach? What's a vulnerability and what's in between? At what point do they have to report. Right now they have to report when they have a breach of personal information. Well, how about

4:25 if they don't know if they've been breached? If they found and closed some sort of a

4:29 vulnerability. As I was just talking about. You'll see this up on my website, as well. And this is how to set up your financial accounts like you are going to be hacked. Because you will be hacked, right. Isn't that kind of the bottom line? Isn't that what we've been finding. It's it's bad news, but it's the news, right. It's a real thing, frankly.

4:54 So let's get into this now. Your financial accounts and what to do about it.

5:05 Now, you might want to spend a little time looking at this article up on my website. In the past week. And I'm talking about right now, October 2018. We have more reports about hacks. So, the big companies. Now the small companies, as I explained in the master classes this week, those free master classes. The small companies, we don't hear about, because who cares, right. But bottom line, it's a big deal. Well, in the past week alone, we've seen Experian, Facebook, and Google, have all had hacks. Now Google's case and we'll talk about this a little bit more, here but it's kind of interesting because the hack happened seven months ago. And, that brings up some other privacy problems, but now you know there have been thousands of hacks over the last 12 months. It just continually going on. I mentioned a guy who was on my masterclass this week who was hacked. Who got ransomware. It's it's just absolutely crazy about how that all happens. So, I went through the anatomy of a hack and the Anatomy of an attack, just because what you got was a virus, for instance, and that infected your computer and spread to other computers, doesn't mean it wasn't a hack. A hack is kind of a broader term we're starting to use. We're using the term hack because of doxxing. Now doxxing made the news again this week and the reason doxxing hit the news again this week had to do with a couple, apparently here, of Senate staffers, Democrats Senate staffers who were getting the personal information the home phone numbers, etc. of congressmen who were voting for President Trump's nomination to the Supreme Court Brett Kavanaugh. They were posting home phone number cell numbers addresses, everything information about the senator's spouses about their kids. The just crazy stuff they were doing. By the way, yes indeed, they got arrested for all of that. But doxxing isn't just reserved for democratic senate staffers. Doxxing is also used by the bad guys to find out information about you, about your family, so that they can then use that to manipulate you into doing something they want you to do. And that, as it turns out, has been a $12 billion dollar business over the last 24 months, according to the FBI. That is huge, huge money.

7:45 So, we know that hacking occurs. We know that we are getting targeted. Every week I help companies and even individuals who have been hacked and help them understand what's going on, what to do about it. But, I much prefer this and in case you're wondering, listening on the radio, I am doing this also online. If you go to my website, you can watch the video of me here on the air. But, at Craig Peterson dot com, of course. But this, why not set everything up in advance as though that cloud service, that vendor, that customer, is going to be hacked. Because the odds are, with thousands of breaches that they could be. This is based on an article from Shira Frankel over the New York Times, and she goes through it as well. This particular article I put up is from life hacker that sometimes has some excellent stuff. And this is one of those cases, starts with the obvious stuff. I had I think it was about 70 people this week, Text me asking for my password special report. Because we had this Facebook hack this week. I spent some time going through that during this week's master class, I may try and post that up on my website. And I'll let you know if that ends up going up. On how to tell if your Facebook account was hacked this last week or if it has been cloned or if there's something else fishy going on with your Facebook account. So, we covered that in this week's master class. But, if you really want to protect yourself, obviously change your passwords, and make sure you're using a good Password Manager, pulling it all together. And if you did not get a copy of my special report on passwords. Where I go through everything about how to create them, how to choose a really good Password Manager for yourself for your business and how to use that. If you didn't get that make sure you text me, just send me your name and email at 855-385-5553 you can just text me right there. 855-385-5553. So, number one, use a great day password use something like last pass or one password, we use one password really great for businesses the last pass has some great features as well. But I like one password with the integration to DUO, you know two-factor authentication. So number two, make sure you check your credit report, look up your banking statements, maybe tie all of your accounts together or something like mint dot com. So, you can kind of keep track over all of this. And we had Mint's CEO on the show some time ago. You're going to want to freeze your credit too. Your kids, you know, nowadays they are issuing social security numbers, when the child is born, the government wants to track them from day one. You know, back in the day we applied for them. When we got our first job, right. Now you're born you get a social security number. One of the most valuable social security numbers out there is social security numbers of infants. Why infants? You might ask, why? Why would anybody care about an infant social security number? Well, the answer is actually rather straightforward. That infant is not going to notice, the social security number has been stolen for what, 10-20 years. So, they have that period of time to misuse and abuse that so security number, maybe the name, the date of birth, all of that sort of stuff, but the date of birth, they can manipulate, right. They're just going to lie about it. And now they have a way to work in the US and bank accounts and get it all of this stuff. So, one of the things they're advising is not only checked your kid's credit report but make sure you put a freeze on their accounts, as well, at the three main credit bureaus. Now, I mentioned what was this about a few weeks ago that freezes are about to be free, thanks to a bill, President Trump signed a number of months back. Those should be in place already, and double check with the credit agencies, but they should not be charging you for freezes or, un-freezes anymore, which is actually a really good thing because Equifax didn't seem to care, right, that they lost all of our personal information. And then kind of the last thing is two-factor authentication, if all you can do is two-factor authentication with your phone, getting a text message. Okay, I get it. I understand. It's complicated to do it with other devices. We have physical Yubikeys. We also have the one password that we can use and use that to do validation with one time passwords, using one password. So all of that again, up on my website.

12:50 This next one that brings up some interesting questions. And this is about a breach that killed Google Plus. Now, you might remember Google Plus when everyone was worried, you don't know it's going to take over from Facebook, because Google Plus is a social network and well, Google's behind it, right? So why would it not take over? Well, very few people ended up using Google Plus. And it turns out there was a major problem with the security on Google Plus. Now, this is where the interesting question comes in.

13:23 They had an API on Google Plus that could theoretically be used to access the personal information of as many as about a half a million users of Google Plus, actual hits. That's probably the total number of users of Google Plus, there just weren't very many of them. I had an account, but I never really used it. It never got traction,

13:44 right? They really never did.

13:47 So, this vulnerability would allow people to get in and get all this private information. But, there were only 432 people who ever registered to use the API on Google Plus. How's that for a slap in the face for Google? You know, Come on, guys, obviously, people just aren't using your platform. So why keep it up? Well, about seven months ago, they found this vulnerability and they fixed it, in March of this year. Now, did you notice, they didn't tell anybody? This vulnerability was never reported. Because the Google lawyers apparently looked at this. And this is a great article, from the Verge, that I put up on my website. But they apparently looked at it and said, The law requires us to report data thefts, data breaches. In this case, we don't know if anyone used this API, this programming interface. We don't know if anybody used it to steal personal information. Therefore, we're not going to tell anybody about it. We're just going to close the hole and not bother mentioning it. The Wall Street Journal found out about this when it got its hands on some memos. And that's what got this particular ball rolling. So Unknown 15:14 what here? Where's the

15:16 disconnect? What do you call something like this? Is it a bug? Is it a breach? Is it a vulnerability, the laws that are in place right now, and California has one of the strictest ones, none of them address this type of a problem? So, companies are kind of confused over, What they have to tell regulators? What they have to tell their customers? Because, Would you like to know that your data might have been lost? Unknown 15:47 You know a company doesn't really want to tell you your data might have been

15:50 lost. Because, if your data might have been lost, you're not going to be very happy with them. You know, we're looking at statistics right now, that says, 60 plus percent, in some cases, as much as 80% of people do not want to do any business at all with a company that had a data breach. So, if you're a small business, and you're not sure if you had a data breach, because small businesses, how often do you have loggers in place, that track things like potential data breaches? potential data losses? Right? Small businesses don't usually have those now, we've helped a lot of small businesses put those systems in place because they're required to by law. So, depending on what business you're in, you may or may not be mandated to have those systems in place. But, you probably don't know if you were breached. And if you were breached, and you found out which, by the way, on average, is six months if you found out six months later, and could you tell them what was lost or what might have been lost. So, businesses are just keeping silent about all of this, understandably, right, because most people will not do business with you again if you lost their data.

17:05 So, that makes all you know, a lot of sense, I think you probably feel the same way as

17:09 I do. I wouldn't want to be doing business with somebody that lost my personal private information. So, when we're talking about this, as the Project Zero guys over at Google, they're looking for zero-day attacks. We've got white hat bug hunters, who are out there looking to build the reputation. What, you know, Facebook just fell from grace, just a few weeks ago, 50 million-plus accounts were hacked, they were exposed. Look at what happened last week with, Did my account get hacked? I got this weird message. It said I should forward this and a friend did not accept my friend request, you know what's going on right

17:55 Industry is still trying to figure it out. It's yet another example of how we just I don't have the laws to keep up with

18:03 the technology, nowadays,

18:05 right? I guess that shouldn't be a surprise to anybody.

18:09 I've got to bring this one up. We've got a lot of weapons systems that are being developed, nowadays. I was reading some interesting stuff about World War Two technology and what was being done by the Germans and the Russians and others. And, you know, and it was very mechanical, right? The torpedoes back in the day had wires they ran all the way back to the submarine.

18:33 Interesting stuff. Today, wow, the Department of Defense now is trying to protect everything. We have some Department of Defense sub-subcontractors, as clients trying to help them out these huge reports they have to do. The training they have to do? Physical security, as well as computer security. So they're trying to tighten it up, but if you look at something like this and I'm holding up to the camera just a quick picture showing one particular weapon. And all of the computers are on board we're talking about something that's really a computer, right? It's not a missile it's a flying computer on a, you know, on a flight platform, frankly. In operational testing the DOD has routinely found, what they're calling mission-critical cyber vulnerabilities, in these systems that were under development, absolutely huge. Great article from gao.gov. They found that using simple tools, simple techniques that the whole - Are you familiar with the Red Team, Blue Team thing - Where you have a competing cyber team, someone's trying to defend the network while another team is trying to break into the network? The military does this all the time. We do this with private businesses, where it's intended external scan is kinda like a penetration test, but you, you're actively trying to defend, actively trying to hack, so that you can see how effective both tools are and you can't defend properly if you don't know a hack right isn't that kind of the bottom line, here. So they were doing it and they found that most of the time the bad guys quote unquote could get into these different and pass these defenses in these defense systems without even being detected. Now that's a very bad thing so the DOD has recently taken some steps are trying to improve the weapon system cybersecurity. They've got new policies, new guidelines, out there to incorporate cybersecurity. We found that some of our clients are there just manufacturers of widgets, basic widgets, things like wires or you know modules that might go into one of these DOD systems. Even down to that level where there's there's nothing active. There's no computer systems active at all. So even at the level of a wire, the cables and connectors the DOD is now going to those people and saying, hey listen you need to up your security, here are the new standards, and they have to meet these new NIST standards and others. A very big deal, very scary deal frankly. And we've we've got to pay attention to these systems and now we know why. The GAO the General Accounting Office has found that the DOD systems are severely lacking in security. Which is scary when you consider that we have potential adversaries, such as China or Russia or even North Korea, in Iran Who all are are very good at hacking all know how to get into systems and it couldn't be very bad frankly. Could end up being very bad.

21:57 next article

21:58 real quick you're going to want to go online and have a look at this. This articles from Wired and I have it up on my website as well, at least a link to it, at Craig Peterson dot com, but everything you should do before and after you lose your phone. It's really great. It goes through the features that you can use, from remote tracking, exactly how to do it. Where the settings are, protecting your lock screens, backing up data, face ID, passcodes, thumbprint readers, their preemptive measures, and what to do, contacting your carrier. Very good advice. Something that you probably should have a look at out there.

22:42 This is terrifying,

22:46 frankly. And, this is the future.

22:53 Now, we know about AI,

22:55 right? Artificial intelligence, machine learning, which is kind of the precursor to artificial and machine learning is kind of where we're at now. There's no real artificial intelligence by the strictest of definitions, but

23:09 it's coming

23:10 In this article is about something called Deep fakes. Have you heard about this before you've heard about the fake news, right? So what's a deep fake, a deep fake, as it turns out, is a video in this case that looks like it's someone doing something else. And these deep fakes were discovered over on Reddit, which is a bulletin board, some really interesting stuff. But, what they had done is they had taken some porn video and had a computer, analyze it, and had taken some video of Emma Watson and had the computer analyze that. And, of course, when it comes to celebrity, there are lots of videos, you've got all of the facial tics, the way they express themselves away, they move. The computers are analyzing their gate, you know, as they're walking, their vocal patterns, etc, etc. And these deep fakes, now have gotten so good that they've been able to take Emma Watson's face and stick it on another body and create a whole new video. One that never existed before. So, Emma Watson never did any of this. Remember, Watson was not videotaped performing any of these acts. Obviously, somebody was, today, but it looks like it was her. Absolutely amazing. Now, I went on to Reddit. These have been taken down, its against Reddit policies to have that type of stuff up online. But deep fakes, are only the first step in a chain of technology that's coming our way, and coming our way fast. We can now do all kinds of stuff. Think of Gollum for instance, from Lord of the Rings. There was an actor that was moving, did you see that any of the behind the scenes stuff on this, he was moving, he had these kinds of balls all over him, so the computer could track his movements, and it did very coarse movements. If he'd move his arms, the computer can move his arms and you saw the computer animation with this kind of turned him into a stick figure so that they could make Golem move basically the same way. And then they went in afterwards. And then they tried to do the face, make the face just write a move just right, don't have to do any of that today. Today, you can just take a video, just a regular video. And from that regular video, put it on top of another regular video. Within its expected here. And this is an article from Daily Dot. And it's quite fascinating. But it's expected that within the next 10 years, this sort of thing will be extremely easy to you to do.

26:03 It's this article goes on for about eight pages. But this technology will end up being used for producing clones. You'll be able to use these in when with a psychiatrist where you got issues with your mom or your dad or someone else they can in a virtual world, today eventually, maybe not even a virtual world but today they can bring that person in and have you chat with them. That you know barely, right 10 years from now. It will be pretty, darn good. And 20 years from now it may be indistinguishable from reality. Just like you're talking right now with some of these chatbots, online. Where it's just you typing back and forth without really a computer the other end. In the near future it's going to be like you're on Skype with someone but then the person at the other end isn't a person. It's a computer, a computer program. So there's a few more we did not get to today. I hope check them out online. What students are doing to pay their tab. Hidden cameras at Airbnb rentals. Digital IDs, very scary things. Do not install Windows 10 updates, before you have a good backup. They are, Windows 10 updates I've been deleting all your documents. And not fun and election security is an absolute mess. But we can't get today so visit me online Craig Peterson dot com. Make sure you sign up for my next master class. Sign up for my email list just Craig Peterson dot com slash subscribe. Love to see you there. We'll keep you up to date. Every week we send out these articles to everybody that is a subscriber. Craig Peterson dot com slash subscribe or text me anytime. Any question. 855 385 5553. Have a great week. We'll be back next week and in fact we will be podcasting on Monday again. Take care bye-bye.

 ---

Related articles:

Face It! You’re Going To Be Hacked, So Set Up Your Financial Accounts Like You're Going To Be Hacked 

Breach, Bug, Hack. When Does A Business Have A Responsibility To Inform Its Customers?

Weapon Systems Cybersecurity: Looks Like Our Weapons Are Easy To Hack

Election Security Is A Mess, And The Cleanup Won't Arrive Until 2021

Millennials Will Give Away Their Personal Information In Exchange For A Cup Of Coffee

DEEPFAKES 2.0: Computers Can Already Create Convincing, Fake Videos Of Anyone

Everything You Should Do Before—And After—You Lose Your Phone

Use Airbnb? How To Find Hidden Cameras In Your Airbnb Rental

Microsoft Update Has Been Deleting Documents

Digital Ids Are More Dangerous Than You Think
---

More stories and tech updates at:

www.craigpeterson.com

Don't miss an episode from Craig. Subscribe and give us a rating:

www.craigpeterson.com/itunes

Message Input:

Message #techtalk

Follow me on Twitter for the latest in tech at:

www.twitter.com/craigpeterson

For questions, call or text:

855-385-5553

New Cyber Security Rules going into effect for the Federal Agencies next week.

Financial Accounts are going to be Hacked.  It is time to set up all your financial accounts like you are going to be hacked. 

Infant Social Security Numbers are worth the most on the Dark Web -- this is because they are unused for 10-15 years during which time someone can use their identity. 

DOD Weapon System cybersecurity and how the DOD, just isn't grappling with the scale of these vulnerabilities.

Do you know what data you have?  If you don't know what or where the sensitive data is then how do you know what you need to protect. That is why it is important to have a Cyber Liability Assessment done.

The Importance of Changing and Managing Passwords can't be stressed enough.

Have you guys heard about Deep fakes?  This is quite terrifying what the future of AI and fake news may bring.

Where was Microsoft's QA department? Can you believe Microsoft released an update that deletes your documents folder?  They have pulled the Windows 10 update now.

Have you rented an Airbnb lately? Apparently some Airbnb Hidden cameras in your Airbnb rental

Did you hear what students are willing to exchange for free coffee? Wow!  It is downright dangerous for them.

Craig is putting up a new insider site (Yes, it is free, but you have to sign up)  On it will have all his special reports that he puts out and you will be the first to get them.

These and more tech tips, news, and updates visit -CraigPeterson.com

---

Transcript:

Below is a rush transcript of this segment, it might contain errors.

Airing date: 10/13/2018

The Importance of Cyber Liability Assessments, Changing and Managing Passwords, Deep Fakes, Microsoft pulled the Windows 10 update, Digital IDs, Hidden cameras in your Airbnb rental, The danger of no Cash options at Coffee Shops

Craig Peterson: 0:00 Hey, Good Morning, everybody. Glad to have you here. We've had a very busy week. This week, we managed to do our three webinar series. Hopefully, you had a chance to attend. This as part of our master class, for small businesses, about security and the types of security things you need to be doing and paying attention to, kind of being careful of. So, if you didn't get it, we will be having other little series as time goes on. And, you know, I keep trying to do this, maybe one a week, maybe less, maybe more. But you know, time will tell. So, keep an eye out, we'll be doing more. We had a lot of great feedback. We've started doing some of these cyber liability assessments. Again, these are free things we're doing for listeners of the show, and people who attended the webinar. So, that we can tell them where they're starting. Isn't that the biggest problem? How can you get to where you want to go, if you have no idea where you're at, right. So, that's the whole idea behind this cyber liability assessment. And those are underway, we just did one for one lady that was really quite a shocking, at least to her I'm sure, a listener to the radio show, where there was well over a million dollars in liability if the data got out. So, we're thinking maybe one of the things we should do in the very near future is put together a little special report on how to keep that data safe. Especially, with the new regulations that are starting to go into place now. That is kind of following the whole GDPR thing over in Europe. So, that you know, the protection if you will, of your personal information. California already has them in place, they're moving over to the federal side. And it looks like the Department of Homeland Security is going to be adopting those some going into effect next week. In fact, federal agencies are special, and want to be compliant already, but, apparently, about 50% of them is all that really is ready to comply. So, we will be talking about this as time goes on. Probably put together a little master class on some of that stuff. What you have to do in order to comply with these new regulations. We've already been doing some stuff for GDPR for those businesses that are trying to do stuff, internationally. So, today we are going to talk about some of the articles up on my website. We do curation every week in fact, it's me going through a lot of articles hundreds of them every week, really we kind of skim through try and find the best. Some of the best this week that you'll find up on the site, everything you should do before and after you lose your phone. I had a conversation this week with a gentleman who just two weeks ago got ransomware in his computer and ended up taking it into the local Geek Squad over at BestBuy trying to get them to fix a few things up. Hopefully, that's all going to work out for him, but it really brought to mind that I've got to put together a little masterclass and special report on this very topic. How do you prepare yourself for the inevitable? And, that is one of our articles for today, let's see if we can find that there's so much stuff here. Election security is a mess. Microsoft pulled the Windows 10 update, the October update. and we'll talk about that and why really bad news, frankly there. Digital IDs extra harmful here way worse than you might suppose. Finding hidden cameras in your Airbnb rental. No cash at this cafe - What students are doing in order to get free coffee?

3:48 Terrifying future. Deep fakes. Have you have you guys seen this article? It's up on my website. Deep fakes 2.0, the terrifying future of AI and fake news.

3:59 Weapon System cybersecurity, The DOD, just isn't grappling with the scale of their vulnerabilities. The breach that killed Google Plus, wasn't a breach at all. I want to talk about this today. We'll get into it a little bit of detail. But, what's a breach? What's a vulnerability and what's in between? At what point do they have to report. Right now they have to report when they have a breach of personal information. Well, how about

4:25 if they don't know if they've been breached? If they found and closed some sort of a

4:29 vulnerability. As I was just talking about. You'll see this up on my website, as well. And this is how to set up your financial accounts like you are going to be hacked. Because you will be hacked, right. Isn't that kind of the bottom line? Isn't that what we've been finding. It's it's bad news, but it's the news, right. It's a real thing, frankly.

4:54 So let's get into this now. Your financial accounts and what to do about it.

5:05 Now, you might want to spend a little time looking at this article up on my website. In the past week. And I'm talking about right now, October 2018. We have more reports about hacks. So, the big companies. Now the small companies, as I explained in the master classes this week, those free master classes. The small companies, we don't hear about, because who cares, right. But bottom line, it's a big deal. Well, in the past week alone, we've seen Experian, Facebook, and Google, have all had hacks. Now Google's case and we'll talk about this a little bit more, here but it's kind of interesting because the hack happened seven months ago. And, that brings up some other privacy problems, but now you know there have been thousands of hacks over the last 12 months. It just continually going on. I mentioned a guy who was on my masterclass this week who was hacked. Who got ransomware. It's it's just absolutely crazy about how that all happens. So, I went through the anatomy of a hack and the Anatomy of an attack, just because what you got was a virus, for instance, and that infected your computer and spread to other computers, doesn't mean it wasn't a hack. A hack is kind of a broader term we're starting to use. We're using the term hack because of doxxing. Now doxxing made the news again this week and the reason doxxing hit the news again this week had to do with a couple, apparently here, of Senate staffers, Democrats Senate staffers who were getting the personal information the home phone numbers, etc. of congressmen who were voting for President Trump's nomination to the Supreme Court Brett Kavanaugh. They were posting home phone number cell numbers addresses, everything information about the senator's spouses about their kids. The just crazy stuff they were doing. By the way, yes indeed, they got arrested for all of that. But doxxing isn't just reserved for democratic senate staffers. Doxxing is also used by the bad guys to find out information about you, about your family, so that they can then use that to manipulate you into doing something they want you to do. And that, as it turns out, has been a $12 billion dollar business over the last 24 months, according to the FBI. That is huge, huge money.

7:45 So, we know that hacking occurs. We know that we are getting targeted. Every week I help companies and even individuals who have been hacked and help them understand what's going on, what to do about it. But, I much prefer this and in case you're wondering, listening on the radio, I am doing this also online. If you go to my website, you can watch the video of me here on the air. But, at Craig Peterson dot com, of course. But this, why not set everything up in advance as though that cloud service, that vendor, that customer, is going to be hacked. Because the odds are, with thousands of breaches that they could be. This is based on an article from Shira Frankel over the New York Times, and she goes through it as well. This particular article I put up is from life hacker that sometimes has some excellent stuff. And this is one of those cases, starts with the obvious stuff. I had I think it was about 70 people this week, Text me asking for my password special report. Because we had this Facebook hack this week. I spent some time going through that during this week's master class, I may try and post that up on my website. And I'll let you know if that ends up going up. On how to tell if your Facebook account was hacked this last week or if it has been cloned or if there's something else fishy going on with your Facebook account. So, we covered that in this week's master class. But, if you really want to protect yourself, obviously change your passwords, and make sure you're using a good Password Manager, pulling it all together. And if you did not get a copy of my special report on passwords. Where I go through everything about how to create them, how to choose a really good Password Manager for yourself for your business and how to use that. If you didn't get that make sure you text me, just send me your name and email at 855-385-5553 you can just text me right there. 855-385-5553. So, number one, use a great day password use something like last pass or one password, we use one password really great for businesses the last pass has some great features as well. But I like one password with the integration to DUO, you know two-factor authentication. So number two, make sure you check your credit report, look up your banking statements, maybe tie all of your accounts together or something like mint dot com. So, you can kind of keep track over all of this. And we had Mint's CEO on the show some time ago. You're going to want to freeze your credit too. Your kids, you know, nowadays they are issuing social security numbers, when the child is born, the government wants to track them from day one. You know, back in the day we applied for them. When we got our first job, right. Now you're born you get a social security number. One of the most valuable social security numbers out there is social security numbers of infants. Why infants? You might ask, why? Why would anybody care about an infant social security number? Well, the answer is actually rather straightforward. That infant is not going to notice, the social security number has been stolen for what, 10-20 years. So, they have that period of time to misuse and abuse that so security number, maybe the name, the date of birth, all of that sort of stuff, but the date of birth, they can manipulate, right. They're just going to lie about it. And now they have a way to work in the US and bank accounts and get it all of this stuff. So, one of the things they're advising is not only checked your kid's credit report but make sure you put a freeze on their accounts, as well, at the three main credit bureaus. Now, I mentioned what was this about a few weeks ago that freezes are about to be free, thanks to a bill, President Trump signed a number of months back. Those should be in place already, and double check with the credit agencies, but they should not be charging you for freezes or, un-freezes anymore, which is actually a really good thing because Equifax didn't seem to care, right, that they lost all of our personal information. And then kind of the last thing is two-factor authentication, if all you can do is two-factor authentication with your phone, getting a text message. Okay, I get it. I understand. It's complicated to do it with other devices. We have physical Yubikeys. We also have the one password that we can use and use that to do validation with one time passwords, using one password. So all of that again, up on my website.

12:50 This next one that brings up some interesting questions. And this is about a breach that killed Google Plus. Now, you might remember Google Plus when everyone was worried, you don't know it's going to take over from Facebook, because Google Plus is a social network and well, Google's behind it, right? So why would it not take over? Well, very few people ended up using Google Plus. And it turns out there was a major problem with the security on Google Plus. Now, this is where the interesting question comes in.

13:23 They had an API on Google Plus that could theoretically be used to access the personal information of as many as about a half a million users of Google Plus, actual hits. That's probably the total number of users of Google Plus, there just weren't very many of them. I had an account, but I never really used it. It never got traction,

13:44 right? They really never did.

13:47 So, this vulnerability would allow people to get in and get all this private information. But, there were only 432 people who ever registered to use the API on Google Plus. How's that for a slap in the face for Google? You know, Come on, guys, obviously, people just aren't using your platform. So why keep it up? Well, about seven months ago, they found this vulnerability and they fixed it, in March of this year. Now, did you notice, they didn't tell anybody? This vulnerability was never reported. Because the Google lawyers apparently looked at this. And this is a great article, from the Verge, that I put up on my website. But they apparently looked at it and said, The law requires us to report data thefts, data breaches. In this case, we don't know if anyone used this API, this programming interface. We don't know if anybody used it to steal personal information. Therefore, we're not going to tell anybody about it. We're just going to close the hole and not bother mentioning it. The Wall Street Journal found out about this when it got its hands on some memos. And that's what got this particular ball rolling. So Unknown 15:14 what here? Where's the

15:16 disconnect? What do you call something like this? Is it a bug? Is it a breach? Is it a vulnerability, the laws that are in place right now, and California has one of the strictest ones, none of them address this type of a problem? So, companies are kind of confused over, What they have to tell regulators? What they have to tell their customers? Because, Would you like to know that your data might have been lost? Unknown 15:47 You know a company doesn't really want to tell you your data might have been

15:50 lost. Because, if your data might have been lost, you're not going to be very happy with them. You know, we're looking at statistics right now, that says, 60 plus percent, in some cases, as much as 80% of people do not want to do any business at all with a company that had a data breach. So, if you're a small business, and you're not sure if you had a data breach, because small businesses, how often do you have loggers in place, that track things like potential data breaches? potential data losses? Right? Small businesses don't usually have those now, we've helped a lot of small businesses put those systems in place because they're required to by law. So, depending on what business you're in, you may or may not be mandated to have those systems in place. But, you probably don't know if you were breached. And if you were breached, and you found out which, by the way, on average, is six months if you found out six months later, and could you tell them what was lost or what might have been lost. So, businesses are just keeping silent about all of this, understandably, right, because most people will not do business with you again if you lost their data.

17:05 So, that makes all you know, a lot of sense, I think you probably feel the same way as

17:09 I do. I wouldn't want to be doing business with somebody that lost my personal private information. So, when we're talking about this, as the Project Zero guys over at Google, they're looking for zero-day attacks. We've got white hat bug hunters, who are out there looking to build the reputation. What, you know, Facebook just fell from grace, just a few weeks ago, 50 million-plus accounts were hacked, they were exposed. Look at what happened last week with, Did my account get hacked? I got this weird message. It said I should forward this and a friend did not accept my friend request, you know what's going on right

17:55 Industry is still trying to figure it out. It's yet another example of how we just I don't have the laws to keep up with

18:03 the technology, nowadays,

18:05 right? I guess that shouldn't be a surprise to anybody.

18:09 I've got to bring this one up. We've got a lot of weapons systems that are being developed, nowadays. I was reading some interesting stuff about World War Two technology and what was being done by the Germans and the Russians and others. And, you know, and it was very mechanical, right? The torpedoes back in the day had wires they ran all the way back to the submarine.

18:33 Interesting stuff. Today, wow, the Department of Defense now is trying to protect everything. We have some Department of Defense sub-subcontractors, as clients trying to help them out these huge reports they have to do. The training they have to do? Physical security, as well as computer security. So they're trying to tighten it up, but if you look at something like this and I'm holding up to the camera just a quick picture showing one particular weapon. And all of the computers are on board we're talking about something that's really a computer, right? It's not a missile it's a flying computer on a, you know, on a flight platform, frankly. In operational testing the DOD has routinely found, what they're calling mission-critical cyber vulnerabilities, in these systems that were under development, absolutely huge. Great article from gao.gov. They found that using simple tools, simple techniques that the whole - Are you familiar with the Red Team, Blue Team thing - Where you have a competing cyber team, someone's trying to defend the network while another team is trying to break into the network? The military does this all the time. We do this with private businesses, where it's intended external scan is kinda like a penetration test, but you, you're actively trying to defend, actively trying to hack, so that you can see how effective both tools are and you can't defend properly if you don't know a hack right isn't that kind of the bottom line, here. So they were doing it and they found that most of the time the bad guys quote unquote could get into these different and pass these defenses in these defense systems without even being detected. Now that's a very bad thing so the DOD has recently taken some steps are trying to improve the weapon system cybersecurity. They've got new policies, new guidelines, out there to incorporate cybersecurity. We found that some of our clients are there just manufacturers of widgets, basic widgets, things like wires or you know modules that might go into one of these DOD systems. Even down to that level where there's there's nothing active. There's no computer systems active at all. So even at the level of a wire, the cables and connectors the DOD is now going to those people and saying, hey listen you need to up your security, here are the new standards, and they have to meet these new NIST standards and others. A very big deal, very scary deal frankly. And we've we've got to pay attention to these systems and now we know why. The GAO the General Accounting Office has found that the DOD systems are severely lacking in security. Which is scary when you consider that we have potential adversaries, such as China or Russia or even North Korea, in Iran Who all are are very good at hacking all know how to get into systems and it couldn't be very bad frankly. Could end up being very bad.

21:57 next article

21:58 real quick you're going to want to go online and have a look at this. This articles from Wired and I have it up on my website as well, at least a link to it, at Craig Peterson dot com, but everything you should do before and after you lose your phone. It's really great. It goes through the features that you can use, from remote tracking, exactly how to do it. Where the settings are, protecting your lock screens, backing up data, face ID, passcodes, thumbprint readers, their preemptive measures, and what to do, contacting your carrier. Very good advice. Something that you probably should have a look at out there.

22:42 This is terrifying,

22:46 frankly. And, this is the future.

22:53 Now, we know about AI,

22:55 right? Artificial intelligence, machine learning, which is kind of the precursor to artificial and machine learning is kind of where we're at now. There's no real artificial intelligence by the strictest of definitions, but

23:09 it's coming

23:10 In this article is about something called Deep fakes. Have you heard about this before you've heard about the fake news, right? So what's a deep fake, a deep fake, as it turns out, is a video in this case that looks like it's someone doing something else. And these deep fakes were discovered over on Reddit, which is a bulletin board, some really interesting stuff. But, what they had done is they had taken some porn video and had a computer, analyze it, and had taken some video of Emma Watson and had the computer analyze that. And, of course, when it comes to celebrity, there are lots of videos, you've got all of the facial tics, the way they express themselves away, they move. The computers are analyzing their gate, you know, as they're walking, their vocal patterns, etc, etc. And these deep fakes, now have gotten so good that they've been able to take Emma Watson's face and stick it on another body and create a whole new video. One that never existed before. So, Emma Watson never did any of this. Remember, Watson was not videotaped performing any of these acts. Obviously, somebody was, today, but it looks like it was her. Absolutely amazing. Now, I went on to Reddit. These have been taken down, its against Reddit policies to have that type of stuff up online. But deep fakes, are only the first step in a chain of technology that's coming our way, and coming our way fast. We can now do all kinds of stuff. Think of Gollum for instance, from Lord of the Rings. There was an actor that was moving, did you see that any of the behind the scenes stuff on this, he was moving, he had these kinds of balls all over him, so the computer could track his movements, and it did very coarse movements. If he'd move his arms, the computer can move his arms and you saw the computer animation with this kind of turned him into a stick figure so that they could make Golem move basically the same way. And then they went in afterwards. And then they tried to do the face, make the face just write a move just right, don't have to do any of that today. Today, you can just take a video, just a regular video. And from that regular video, put it on top of another regular video. Within its expected here. And this is an article from Daily Dot. And it's quite fascinating. But it's expected that within the next 10 years, this sort of thing will be extremely easy to you to do.

26:03 It's this article goes on for about eight pages. But this technology will end up being used for producing clones. You'll be able to use these in when with a psychiatrist where you got issues with your mom or your dad or someone else they can in a virtual world, today eventually, maybe not even a virtual world but today they can bring that person in and have you chat with them. That you know barely, right 10 years from now. It will be pretty, darn good. And 20 years from now it may be indistinguishable from reality. Just like you're talking right now with some of these chatbots, online. Where it's just you typing back and forth without really a computer the other end. In the near future it's going to be like you're on Skype with someone but then the person at the other end isn't a person. It's a computer, a computer program. So there's a few more we did not get to today. I hope check them out online. What students are doing to pay their tab. Hidden cameras at Airbnb rentals. Digital IDs, very scary things. Do not install Windows 10 updates, before you have a good backup. They are, Windows 10 updates I've been deleting all your documents. And not fun and election security is an absolute mess. But we can't get today so visit me online Craig Peterson dot com. Make sure you sign up for my next master class. Sign up for my email list just Craig Peterson dot com slash subscribe. Love to see you there. We'll keep you up to date. Every week we send out these articles to everybody that is a subscriber. Craig Peterson dot com slash subscribe or text me anytime. Any question. 855 385 5553. Have a great week. We'll be back next week and in fact we will be podcasting on Monday again. Take care bye-bye.

 ---

Related articles:

Face It! You’re Going To Be Hacked, So Set Up Your Financial Accounts Like You're Going To Be Hacked 

Breach, Bug, Hack. When Does A Business Have A Responsibility To Inform Its Customers?

Weapon Systems Cybersecurity: Looks Like Our Weapons Are Easy To Hack

Election Security Is A Mess, And The Cleanup Won't Arrive Until 2021

Millennials Will Give Away Their Personal Information In Exchange For A Cup Of Coffee

DEEPFAKES 2.0: Computers Can Already Create Convincing, Fake Videos Of Anyone

Everything You Should Do Before—And After—You Lose Your Phone

Use Airbnb? How To Find Hidden Cameras In Your Airbnb Rental

Microsoft Update Has Been Deleting Documents

Digital Ids Are More Dangerous Than You Think
---

More stories and tech updates at:

www.craigpeterson.com

Don't miss an episode from Craig. Subscribe and give us a rating:

www.craigpeterson.com/itunes

Message Input:

Message #techtalk

Follow me on Twitter for the latest in tech at:

www.twitter.com/craigpeterson

For questions, call or text:

855-385-5553

New Cyber Security Rules going into effect for the Federal Agencies next week.

Financial Accounts are going to be Hacked.  It is time to set up all your financial accounts like you are going to be hacked. 

Infant Social Security Numbers are worth the most on the Dark Web -- this is because they are unused for 10-15 years during which time someone can use their identity. 

DOD Weapon System cybersecurity and how the DOD, just isn't grappling with the scale of these vulnerabilities.

Do you know what data you have?  If you don't know what or where the sensitive data is then how do you know what you need to protect. That is why it is important to have a Cyber Liability Assessment done.

The Importance of Changing and Managing Passwords can't be stressed enough.

Have you guys heard about Deep fakes?  This is quite terrifying what the future of AI and fake news may bring.

Where was Microsoft's QA department? Can you believe Microsoft released an update that deletes your documents folder?  They have pulled the Windows 10 update now.

Have you rented an Airbnb lately? Apparently some Airbnb Hidden cameras in your Airbnb rental

Did you hear what students are willing to exchange for free coffee? Wow!  It is downright dangerous for them.

Craig is putting up a new insider site (Yes, it is free, but you have to sign up)  On it will have all his special reports that he puts out and you will be the first to get them.

These and more tech tips, news, and updates visit -CraigPeterson.com

---

Transcript:

Below is a rush transcript of this segment, it might contain errors.

Airing date: 10/13/2018

The Importance of Cyber Liability Assessments, Changing and Managing Passwords, Deep Fakes, Microsoft pulled the Windows 10 update, Digital IDs, Hidden cameras in your Airbnb rental, The danger of no Cash options at Coffee Shops

Craig Peterson: 0:00 Hey, Good Morning, everybody. Glad to have you here. We've had a very busy week. This week, we managed to do our three webinar series. Hopefully, you had a chance to attend. This as part of our master class, for small businesses, about security and the types of security things you need to be doing and paying attention to, kind of being careful of. So, if you didn't get it, we will be having other little series as time goes on. And, you know, I keep trying to do this, maybe one a week, maybe less, maybe more. But you know, time will tell. So, keep an eye out, we'll be doing more. We had a lot of great feedback. We've started doing some of these cyber liability assessments. Again, these are free things we're doing for listeners of the show, and people who attended the webinar. So, that we can tell them where they're starting. Isn't that the biggest problem? How can you get to where you want to go, if you have no idea where you're at, right. So, that's the whole idea behind this cyber liability assessment. And those are underway, we just did one for one lady that was really quite a shocking, at least to her I'm sure, a listener to the radio show, where there was well over a million dollars in liability if the data got out. So, we're thinking maybe one of the things we should do in the very near future is put together a little special report on how to keep that data safe. Especially, with the new regulations that are starting to go into place now. That is kind of following the whole GDPR thing over in Europe. So, that you know, the protection if you will, of your personal information. California already has them in place, they're moving over to the federal side. And it looks like the Department of Homeland Security is going to be adopting those some going into effect next week. In fact, federal agencies are special, and want to be compliant already, but, apparently, about 50% of them is all that really is ready to comply. So, we will be talking about this as time goes on. Probably put together a little master class on some of that stuff. What you have to do in order to comply with these new regulations. We've already been doing some stuff for GDPR for those businesses that are trying to do stuff, internationally. So, today we are going to talk about some of the articles up on my website. We do curation every week in fact, it's me going through a lot of articles hundreds of them every week, really we kind of skim through try and find the best. Some of the best this week that you'll find up on the site, everything you should do before and after you lose your phone. I had a conversation this week with a gentleman who just two weeks ago got ransomware in his computer and ended up taking it into the local Geek Squad over at BestBuy trying to get them to fix a few things up. Hopefully, that's all going to work out for him, but it really brought to mind that I've got to put together a little masterclass and special report on this very topic. How do you prepare yourself for the inevitable? And, that is one of our articles for today, let's see if we can find that there's so much stuff here. Election security is a mess. Microsoft pulled the Windows 10 update, the October update. and we'll talk about that and why really bad news, frankly there. Digital IDs extra harmful here way worse than you might suppose. Finding hidden cameras in your Airbnb rental. No cash at this cafe - What students are doing in order to get free coffee?

3:48 Terrifying future. Deep fakes. Have you have you guys seen this article? It's up on my website. Deep fakes 2.0, the terrifying future of AI and fake news.

3:59 Weapon System cybersecurity, The DOD, just isn't grappling with the scale of their vulnerabilities. The breach that killed Google Plus, wasn't a breach at all. I want to talk about this today. We'll get into it a little bit of detail. But, what's a breach? What's a vulnerability and what's in between? At what point do they have to report. Right now they have to report when they have a breach of personal information. Well, how about

4:25 if they don't know if they've been breached? If they found and closed some sort of a

4:29 vulnerability. As I was just talking about. You'll see this up on my website, as well. And this is how to set up your financial accounts like you are going to be hacked. Because you will be hacked, right. Isn't that kind of the bottom line? Isn't that what we've been finding. It's it's bad news, but it's the news, right. It's a real thing, frankly.

4:54 So let's get into this now. Your financial accounts and what to do about it.

5:05 Now, you might want to spend a little time looking at this article up on my website. In the past week. And I'm talking about right now, October 2018. We have more reports about hacks. So, the big companies. Now the small companies, as I explained in the master classes this week, those free master classes. The small companies, we don't hear about, because who cares, right. But bottom line, it's a big deal. Well, in the past week alone, we've seen Experian, Facebook, and Google, have all had hacks. Now Google's case and we'll talk about this a little bit more, here but it's kind of interesting because the hack happened seven months ago. And, that brings up some other privacy problems, but now you know there have been thousands of hacks over the last 12 months. It just continually going on. I mentioned a guy who was on my masterclass this week who was hacked. Who got ransomware. It's it's just absolutely crazy about how that all happens. So, I went through the anatomy of a hack and the Anatomy of an attack, just because what you got was a virus, for instance, and that infected your computer and spread to other computers, doesn't mean it wasn't a hack. A hack is kind of a broader term we're starting to use. We're using the term hack because of doxxing. Now doxxing made the news again this week and the reason doxxing hit the news again this week had to do with a couple, apparently here, of Senate staffers, Democrats Senate staffers who were getting the personal information the home phone numbers, etc. of congressmen who were voting for President Trump's nomination to the Supreme Court Brett Kavanaugh. They were posting home phone number cell numbers addresses, everything information about the senator's spouses about their kids. The just crazy stuff they were doing. By the way, yes indeed, they got arrested for all of that. But doxxing isn't just reserved for democratic senate staffers. Doxxing is also used by the bad guys to find out information about you, about your family, so that they can then use that to manipulate you into doing something they want you to do. And that, as it turns out, has been a $12 billion dollar business over the last 24 months, according to the FBI. That is huge, huge money.

7:45 So, we know that hacking occurs. We know that we are getting targeted. Every week I help companies and even individuals who have been hacked and help them understand what's going on, what to do about it. But, I much prefer this and in case you're wondering, listening on the radio, I am doing this also online. If you go to my website, you can watch the video of me here on the air. But, at Craig Peterson dot com, of course. But this, why not set everything up in advance as though that cloud service, that vendor, that customer, is going to be hacked. Because the odds are, with thousands of breaches that they could be. This is based on an article from Shira Frankel over the New York Times, and she goes through it as well. This particular article I put up is from life hacker that sometimes has some excellent stuff. And this is one of those cases, starts with the obvious stuff. I had I think it was about 70 people this week, Text me asking for my password special report. Because we had this Facebook hack this week. I spent some time going through that during this week's master class, I may try and post that up on my website. And I'll let you know if that ends up going up. On how to tell if your Facebook account was hacked this last week or if it has been cloned or if there's something else fishy going on with your Facebook account. So, we covered that in this week's master class. But, if you really want to protect yourself, obviously change your passwords, and make sure you're using a good Password Manager, pulling it all together. And if you did not get a copy of my special report on passwords. Where I go through everything about how to create them, how to choose a really good Password Manager for yourself for your business and how to use that. If you didn't get that make sure you text me, just send me your name and email at 855-385-5553 you can just text me right there. 855-385-5553. So, number one, use a great day password use something like last pass or one password, we use one password really great for businesses the last pass has some great features as well. But I like one password with the integration to DUO, you know two-factor authentication. So number two, make sure you check your credit report, look up your banking statements, maybe tie all of your accounts together or something like mint dot com. So, you can kind of keep track over all of this. And we had Mint's CEO on the show some time ago. You're going to want to freeze your credit too. Your kids, you know, nowadays they are issuing social security numbers, when the child is born, the government wants to track them from day one. You know, back in the day we applied for them. When we got our first job, right. Now you're born you get a social security number. One of the most valuable social security numbers out there is social security numbers of infants. Why infants? You might ask, why? Why would anybody care about an infant social security number? Well, the answer is actually rather straightforward. That infant is not going to notice, the social security number has been stolen for what, 10-20 years. So, they have that period of time to misuse and abuse that so security number, maybe the name, the date of birth, all of that sort of stuff, but the date of birth, they can manipulate, right. They're just going to lie about it. And now they have a way to work in the US and bank accounts and get it all of this stuff. So, one of the things they're advising is not only checked your kid's credit report but make sure you put a freeze on their accounts, as well, at the three main credit bureaus. Now, I mentioned what was this about a few weeks ago that freezes are about to be free, thanks to a bill, President Trump signed a number of months back. Those should be in place already, and double check with the credit agencies, but they should not be charging you for freezes or, un-freezes anymore, which is actually a really good thing because Equifax didn't seem to care, right, that they lost all of our personal information. And then kind of the last thing is two-factor authentication, if all you can do is two-factor authentication with your phone, getting a text message. Okay, I get it. I understand. It's complicated to do it with other devices. We have physical Yubikeys. We also have the one password that we can use and use that to do validation with one time passwords, using one password. So all of that again, up on my website.

12:50 This next one that brings up some interesting questions. And this is about a breach that killed Google Plus. Now, you might remember Google Plus when everyone was worried, you don't know it's going to take over from Facebook, because Google Plus is a social network and well, Google's behind it, right? So why would it not take over? Well, very few people ended up using Google Plus. And it turns out there was a major problem with the security on Google Plus. Now, this is where the interesting question comes in.

13:23 They had an API on Google Plus that could theoretically be used to access the personal information of as many as about a half a million users of Google Plus, actual hits. That's probably the total number of users of Google Plus, there just weren't very many of them. I had an account, but I never really used it. It never got traction,

13:44 right? They really never did.

13:47 So, this vulnerability would allow people to get in and get all this private information. But, there were only 432 people who ever registered to use the API on Google Plus. How's that for a slap in the face for Google? You know, Come on, guys, obviously, people just aren't using your platform. So why keep it up? Well, about seven months ago, they found this vulnerability and they fixed it, in March of this year. Now, did you notice, they didn't tell anybody? This vulnerability was never reported. Because the Google lawyers apparently looked at this. And this is a great article, from the Verge, that I put up on my website. But they apparently looked at it and said, The law requires us to report data thefts, data breaches. In this case, we don't know if anyone used this API, this programming interface. We don't know if anybody used it to steal personal information. Therefore, we're not going to tell anybody about it. We're just going to close the hole and not bother mentioning it. The Wall Street Journal found out about this when it got its hands on some memos. And that's what got this particular ball rolling. So Unknown 15:14 what here? Where's the

15:16 disconnect? What do you call something like this? Is it a bug? Is it a breach? Is it a vulnerability, the laws that are in place right now, and California has one of the strictest ones, none of them address this type of a problem? So, companies are kind of confused over, What they have to tell regulators? What they have to tell their customers? Because, Would you like to know that your data might have been lost? Unknown 15:47 You know a company doesn't really want to tell you your data might have been

15:50 lost. Because, if your data might have been lost, you're not going to be very happy with them. You know, we're looking at statistics right now, that says, 60 plus percent, in some cases, as much as 80% of people do not want to do any business at all with a company that had a data breach. So, if you're a small business, and you're not sure if you had a data breach, because small businesses, how often do you have loggers in place, that track things like potential data breaches? potential data losses? Right? Small businesses don't usually have those now, we've helped a lot of small businesses put those systems in place because they're required to by law. So, depending on what business you're in, you may or may not be mandated to have those systems in place. But, you probably don't know if you were breached. And if you were breached, and you found out which, by the way, on average, is six months if you found out six months later, and could you tell them what was lost or what might have been lost. So, businesses are just keeping silent about all of this, understandably, right, because most people will not do business with you again if you lost their data.

17:05 So, that makes all you know, a lot of sense, I think you probably feel the same way as

17:09 I do. I wouldn't want to be doing business with somebody that lost my personal private information. So, when we're talking about this, as the Project Zero guys over at Google, they're looking for zero-day attacks. We've got white hat bug hunters, who are out there looking to build the reputation. What, you know, Facebook just fell from grace, just a few weeks ago, 50 million-plus accounts were hacked, they were exposed. Look at what happened last week with, Did my account get hacked? I got this weird message. It said I should forward this and a friend did not accept my friend request, you know what's going on right

17:55 Industry is still trying to figure it out. It's yet another example of how we just I don't have the laws to keep up with

18:03 the technology, nowadays,

18:05 right? I guess that shouldn't be a surprise to anybody.

18:09 I've got to bring this one up. We've got a lot of weapons systems that are being developed, nowadays. I was reading some interesting stuff about World War Two technology and what was being done by the Germans and the Russians and others. And, you know, and it was very mechanical, right? The torpedoes back in the day had wires they ran all the way back to the submarine.

18:33 Interesting stuff. Today, wow, the Department of Defense now is trying to protect everything. We have some Department of Defense sub-subcontractors, as clients trying to help them out these huge reports they have to do. The training they have to do? Physical security, as well as computer security. So they're trying to tighten it up, but if you look at something like this and I'm holding up to the camera just a quick picture showing one particular weapon. And all of the computers are on board we're talking about something that's really a computer, right? It's not a missile it's a flying computer on a, you know, on a flight platform, frankly. In operational testing the DOD has routinely found, what they're calling mission-critical cyber vulnerabilities, in these systems that were under development, absolutely huge. Great article from gao.gov. They found that using simple tools, simple techniques that the whole - Are you familiar with the Red Team, Blue Team thing - Where you have a competing cyber team, someone's trying to defend the network while another team is trying to break into the network? The military does this all the time. We do this with private businesses, where it's intended external scan is kinda like a penetration test, but you, you're actively trying to defend, actively trying to hack, so that you can see how effective both tools are and you can't defend properly if you don't know a hack right isn't that kind of the bottom line, here. So they were doing it and they found that most of the time the bad guys quote unquote could get into these different and pass these defenses in these defense systems without even being detected. Now that's a very bad thing so the DOD has recently taken some steps are trying to improve the weapon system cybersecurity. They've got new policies, new guidelines, out there to incorporate cybersecurity. We found that some of our clients are there just manufacturers of widgets, basic widgets, things like wires or you know modules that might go into one of these DOD systems. Even down to that level where there's there's nothing active. There's no computer systems active at all. So even at the level of a wire, the cables and connectors the DOD is now going to those people and saying, hey listen you need to up your security, here are the new standards, and they have to meet these new NIST standards and others. A very big deal, very scary deal frankly. And we've we've got to pay attention to these systems and now we know why. The GAO the General Accounting Office has found that the DOD systems are severely lacking in security. Which is scary when you consider that we have potential adversaries, such as China or Russia or even North Korea, in Iran Who all are are very good at hacking all know how to get into systems and it couldn't be very bad frankly. Could end up being very bad.

21:57 next article

21:58 real quick you're going to want to go online and have a look at this. This articles from Wired and I have it up on my website as well, at least a link to it, at Craig Peterson dot com, but everything you should do before and after you lose your phone. It's really great. It goes through the features that you can use, from remote tracking, exactly how to do it. Where the settings are, protecting your lock screens, backing up data, face ID, passcodes, thumbprint readers, their preemptive measures, and what to do, contacting your carrier. Very good advice. Something that you probably should have a look at out there.

22:42 This is terrifying,

22:46 frankly. And, this is the future.

22:53 Now, we know about AI,

22:55 right? Artificial intelligence, machine learning, which is kind of the precursor to artificial and machine learning is kind of where we're at now. There's no real artificial intelligence by the strictest of definitions, but

23:09 it's coming

23:10 In this article is about something called Deep fakes. Have you heard about this before you've heard about the fake news, right? So what's a deep fake, a deep fake, as it turns out, is a video in this case that looks like it's someone doing something else. And these deep fakes were discovered over on Reddit, which is a bulletin board, some really interesting stuff. But, what they had done is they had taken some porn video and had a computer, analyze it, and had taken some video of Emma Watson and had the computer analyze that. And, of course, when it comes to celebrity, there are lots of videos, you've got all of the facial tics, the way they express themselves away, they move. The computers are analyzing their gate, you know, as they're walking, their vocal patterns, etc, etc. And these deep fakes, now have gotten so good that they've been able to take Emma Watson's face and stick it on another body and create a whole new video. One that never existed before. So, Emma Watson never did any of this. Remember, Watson was not videotaped performing any of these acts. Obviously, somebody was, today, but it looks like it was her. Absolutely amazing. Now, I went on to Reddit. These have been taken down, its against Reddit policies to have that type of stuff up online. But deep fakes, are only the first step in a chain of technology that's coming our way, and coming our way fast. We can now do all kinds of stuff. Think of Gollum for instance, from Lord of the Rings. There was an actor that was moving, did you see that any of the behind the scenes stuff on this, he was moving, he had these kinds of balls all over him, so the computer could track his movements, and it did very coarse movements. If he'd move his arms, the computer can move his arms and you saw the computer animation with this kind of turned him into a stick figure so that they could make Golem move basically the same way. And then they went in afterwards. And then they tried to do the face, make the face just write a move just right, don't have to do any of that today. Today, you can just take a video, just a regular video. And from that regular video, put it on top of another regular video. Within its expected here. And this is an article from Daily Dot. And it's quite fascinating. But it's expected that within the next 10 years, this sort of thing will be extremely easy to you to do.

26:03 It's this article goes on for about eight pages. But this technology will end up being used for producing clones. You'll be able to use these in when with a psychiatrist where you got issues with your mom or your dad or someone else they can in a virtual world, today eventually, maybe not even a virtual world but today they can bring that person in and have you chat with them. That you know barely, right 10 years from now. It will be pretty, darn good. And 20 years from now it may be indistinguishable from reality. Just like you're talking right now with some of these chatbots, online. Where it's just you typing back and forth without really a computer the other end. In the near future it's going to be like you're on Skype with someone but then the person at the other end isn't a person. It's a computer, a computer program. So there's a few more we did not get to today. I hope check them out online. What students are doing to pay their tab. Hidden cameras at Airbnb rentals. Digital IDs, very scary things. Do not install Windows 10 updates, before you have a good backup. They are, Windows 10 updates I've been deleting all your documents. And not fun and election security is an absolute mess. But we can't get today so visit me online Craig Peterson dot com. Make sure you sign up for my next master class. Sign up for my email list just Craig Peterson dot com slash subscribe. Love to see you there. We'll keep you up to date. Every week we send out these articles to everybody that is a subscriber. Craig Peterson dot com slash subscribe or text me anytime. Any question. 855 385 5553. Have a great week. We'll be back next week and in fact we will be podcasting on Monday again. Take care bye-bye.

 ---

Related articles:

Face It! You’re Going To Be Hacked, So Set Up Your Financial Accounts Like You're Going To Be Hacked 

Breach, Bug, Hack. When Does A Business Have A Responsibility To Inform Its Customers?

Weapon Systems Cybersecurity: Looks Like Our Weapons Are Easy To Hack

Election Security Is A Mess, And The Cleanup Won't Arrive Until 2021

Millennials Will Give Away Their Personal Information In Exchange For A Cup Of Coffee

DEEPFAKES 2.0: Computers Can Already Create Convincing, Fake Videos Of Anyone

Everything You Should Do Before—And After—You Lose Your Phone

Use Airbnb? How To Find Hidden Cameras In Your Airbnb Rental

Microsoft Update Has Been Deleting Documents

Digital Ids Are More Dangerous Than You Think
---

More stories and tech updates at:

www.craigpeterson.com

Don't miss an episode from Craig. Subscribe and give us a rating:

www.craigpeterson.com/itunes

Message Input:

Message #techtalk

Follow me on Twitter for the latest in tech at:

www.twitter.com/craigpeterson

For questions, call or text:

855-385-5553

China is at it again - The Peoples Liberation Army is using our hardware to hack into the government and our businesses.

Testing the Presidential Alert System and why it that test is important.

What do you think about Youtube replacing textbooks?  Well it is happening in many schools.

These and more tech tips, news, and updates visit - CraigPeterson.com

---

Related Articles:

The Big Hack: How China Used A Tiny Chip To Infiltrate Major U.S. Companies

Why Didn’t I Get an Emergency Presidential Alert Text?

YouTube Is Replacing Textbooks In Classrooms Across America

---

Transcript:

Below is a rush transcript of this segment, it might contain errors.

Airing date: 10/10/2018

China Hack, Youtube replacing Textbooks in schools, iWatch4 and Presidential Alerts

Craig Peterson: 0:00 Hey, Good morning. Craig Peterson, here. We've talked about a couple of different things this morning including Ken went in to check out that new Apple Watch. So, if you have older eyes, you're going to want to hear what he had to say about it. But, today we talked about the Presidential alert system. Did you get one of those alerts this week? A YouTube study that came out from Pearson Education, this is absolutely going to affect your kids. And this, China hack - did they hack our hardware? Who's at risk? What's really going on here? Its smaller than a grain of rice. It's just amazing what's happening what's going on out there today. Also, the third webinar today of our little webinar series, its the last one. It's for Small businesses on cybersecurity and we're offering one free cyber security, cyber liability, actually, sigh liability assessment. One free for small companies. So go to Craig Peterson dot com sign up for the webinar. Webinar attendees will get one free assessment. This is something that normally cost hundreds of dollars and thousands if you're doing it across the company. We've had a lot of great feedback from people on this who learned a lot of things. I appreciate everybody who's there so check it out Craig Peterson dot com and here we go with this morning Phil and Ken because Matt is out, well on vacation

1:36 I wonder if this theme song is nominated the rock and roll Hall of Fame. I wonder if Craig Peterson is a nominee for the rock and roll hall of fame. I suspect not. Craig, nothing personal. Maybe the Technology Hall of Fame? Certainly. I would agree with that. Hello. Unknown 1:51 How are you? Great job. I don't know if we have those. You know, the jocks end up working for the geek. But the geeks just never manage to get their own hall of fame.

2:01 Yes, that's true. They are prejudiced against geeks

2:06 The geeks and running in the world, what are you talking about?

2:08 So, I have to tell you, Craig, my wife is not a big fan of Donald Trump. And when she got this Presidential Text, she literally screamed. She really thought that the President was texting her directly, and then thought that was gonna be followed up with another text or a Twitter from him about something because of they

2:27 don't we, it's not

2:28 Don't we run the risk of the president being able to just kind of send something out to everybody, whether we like it or not? Or is that not a risk at all?

2:38 Wouldn't that be something?

2:43 Was it sounds like xo, xo or anything on the end? Or?

2:46 No, I doubt it.

2:50 Yeah, well, we've, you know, we have an Emergency Alert System. And if you're living down in the coast right now, there's probably hurricane sirens going off to warn everybody. And you might have seen before weather alerts that come into our phones right, here, If there's a heavy storm, flooding expected, etc. And so typically these things are run by the state. Do you remember? A lot of this was early on, I think in President Trump's presidency, or maybe it was under President Obama, that in Hawaii, all of the air raid sirens started going off because there was an imminent inbound missile that was going to hit Hawaii. Do you remember that one? Yeah, yeah. And, you know, so those things are typically run by the state. In the case of Hawaii, of course, it was it was a false alarm. But, this what you had last week was not President Trump reaching out to all of the women in the country

3:48 What it was was an emergency presidential text alert. The same types of messages that you've been getting from the state, historically now, the Feds can do. And this is the third time they've run a test it's been a little while since I tested it last time not everybody got these alerts and the idea is if there is something imminent, something urgent that happening and everybody needs to know about it that's how the messages going to get out because most people have a cell phone all of the major carriers are participating in this. and you know Ken we remember his kids learning "duck and cover" right, because of the Soviet threat at the time, when we were in school. This is kind of the modern-day version of this Now, they are calling this a presidential alert. It really is a federal alert but yeah not everybody got it which is kind of interesting and that's the reason they're testing it. In order to make sure that everyone does get it. So, that the in the event that there is some form of a national emergency and everyone needs to be notified right away they'll be able to to use it. So tell your wife, Don't worry about it he's probably she's probably not going to get another personal message from the president. We're talking with Craig Peterson our tech guru that man over there is Ken Auchulter

5:14 Yeah, you like the godfather of the WGAN morning news I'm, I guess I'm the guest today Filling in. Craig let me follow up on that for just real briefly because there's other things I, I'm curious to get your opinion on. My understanding is that not everyone got that presidential alert text, I, I'm I'm one of them. Maybe it's because

5:36 I didn't care at all about you. Sometimes, it's about someone else. Well, frankly, it was only the important people Unknown 5:48 Not everyone got that. In fact I was on a phone call, when it came in. Because I forgot that it was coming right or I would have waited and my phone call was completely interrupted and the alert came through. And then it was reconnected after a few seconds. And then the guy in the other end of the phone cut the presidential alert. So, I know it leads to people that got it. But yeah, there are still some number of people that didn't get it. And they were on various carriers. So, some Verizon people got it some didn't to some T- Mobile got it from didn't. I'm not sure of all of the details as to why some got it and some didn't. Other than some glitches in the system, which is why they felt they had to test it again.

6:34 Let's go to a different place. I'm really eager to get your opinion and analysis of this story that came out about an Unknown 6:42 tiny chip in China

6:45 equipment that's now infiltrating US Companies. Yes, please. Tell us. Give us give us to tell us what's happening. Craig? Well, this is there. Wow. Intrigue, okay. I don't even know where to start with this one. This is fascinating because of a story came out in Bloomberg last week. And Bloomberg was saying that major US corporations, and they named specifically Amazon, and they also named Apple. That US corporations had been infiltrated by the People's Liberation Army, at least their equipment had been. The Bloomberg story when it is some detail about it. And we've had over the weekend now, absolute denials from Amazon and Apple about this. Now, this is let's talk about the accusation. And then in fact, this week, there have been more confirmations that have happened. Apparently, China has this little teeny tiny chip that may be about the size of a grain of rice. And the allegation is that the Chinese military has been embedding these chips into computer circuit boards, into the motherboards of certain computers made by a server manufacturer, that that I've used for years called Supermicro, they make some really good stuff. They are a Taiwanese company like guy that owns it's based out in the San Francisco Bay Area. And they've been around for very long time. And apparently what this chip does is when the computer when the server boots up, it basically just opens up the phone line to China and gives them complete control over the computer. Now, the Bloomberg story said that Amazon figured this out, and started removing these pieces of equipment from the network's. Same things true with Apple, they figured it out, as well. Although, as I said, both companies have denied it. And this week, we have a company that says they have a examined these systems. And yes, indeed, there are spy chips on all of these devices, including devices that are used by the military and the federal government, including things like cameras, video cameras, and others. So, this is really kind of interesting, at least from my standpoint, because you know, I love the security stuff and figuring it all out and helping businesses with it. But we're talking about potential infiltration by the Chinese military of the CIA, as well as divisions, major divisions of the military, and maybe even some of our major corporations that are handling all of our data. And I frankly, I wouldn't put it past the Chinese to do something like that. We have

9:57 been talking to Craig Peterson, our Tech Guru who joins us, every Wednesday at 738

10:04 YouTube. I watch you to all the time, you know, I'm a, I don't know if you know, this big pickleball player and I, I go to YouTube all the time to learn, how to play pickle a ball. So if I can learn pick up all by YouTube. Can't our students learn their lessons in school by YouTube?

10:22 It's an interesting question. And my grandfather plays Pickleball, by the way, Ken Unknown 10:28 say that ages me doesn't it? Yeah,

10:30 yeah, there. There you go.

10:34 Yeah, YouTube, it's an interesting thing. Because there is basically everything you want out on YouTube, the quality of what you're going to learn is always a little bit questionable. But we're seeing more and more, online learning going on. You know, my wife and I, we homeschooled all of our kids. And you have eight children? Yeah, you have eight children. Oh, my

10:58 god, you're a saint

11:00 today, we homeschooled them all the way up to college. Then there was no YouTube, right? There wasn't any of this stuff. And it was a different world. You know, we use Texas Tech and some other things to help with the curriculum. Well, now we're finding that YouTube is replacing the textbooks and lectures in a lot of the schools, nationwide. And some studies have been done looking at the different generations of students and have found that millennials prefer to learn from textbooks, 60% of them, but it's switched now the next generation, which is called Generation Z, is preferring to learn from YouTube, about 60% of them. So Ken you have something in common with Gen Z. There you go. Yeah. So, and we're talking about Gen Z, we're still talking about the young kids, right, early high school all the way up through through college, frankly. But this, is going to be happening more and more, hopefully, they're vetting it properly. But, it really brings in an interesting question about our future and the future of our universities and our schools, high schools. There's a lot of lot of kids here in Maine that are living in very rural areas that are using online curriculum. There is some incredible stuff out there from every major university. So, I think that's a good move I think its overall a good move, let me put it that way. The study that was done by Pearson Education I had some good and interesting numbers in it I've got it up on my website as well as these other articles. But this is the trend of the future, guys Unknown 12:50 All right, our tech guru joins us every Wednesday 738. By the way, Craig, I saw the iWatch four I went to the Apple Store to look at it. Yeah, It really looks impressive and I don't even wear a watch but I yeah I think I think it's on my Christmas list now

13:06 Can you see it? Can you read it well enough?

13:07 You know, I believe it or not I look at the 40 and the 44, watches the 44 just looked too big on my wrist because I've got, you know, I'm small, I'm five feet five. So, I looked at the forty and you know frankly, yeah wasn't that hard to read. I mean it's not it's not the same as my iPhone Xs max, which I love by the way I love by the way, but I love the right just the iPhone particular with cellular service now, you don't have your iPhone I think it's really been a quantum leap forward Unknown 13:41 Yeah, nice. Nice good recommendation there yep. From Ken Auchulter also there you go.

13:46 Thank you next week.

13:48 Bye.

13:51 Don't forget register early register often Craig Peterson dot com you'll get into today's webinar and we do have a replay that's going to be up for a few days if you missed this it's so important for small businesses. Small businesses, you are the target. Small-medium businesses, because you just can't afford the people that frankly you need in order to keep your system safe. And, you also have a lot more at risk a look at the list. There are dozens of things that you have that are your business assets that if they were unavailable to you or stolen would be just a horrific thing. So, make sure you register and maybe you can get into the next series that I put on probably coming up in a few months. Craig Peterson dot com. Have a great day. Take care guys. Bye-bye.

---

Don't miss any episode from Craig. Visit http://CraigPeterson.com/itunes. Subscribe and give us a rating!

Thanks, everyone, for listening and sharing our podcasts. We're really hitting it out of the park. This will be a great year! 

---

More stories and tech updates at:

www.craigpeterson.com

Don't miss an episode from Craig. Subscribe and give us a rating:

www.craigpeterson.com/itunes

Follow me on Twitter for the latest in tech at:

www.twitter.com/craigpeterson

For questions, call or text:

855-385-5553

China is at it again - The Peoples Liberation Army is using our hardware to hack into the government and our businesses.

Testing the Presidential Alert System and why it that test is important.

What do you think about Youtube replacing textbooks?  Well it is happening in many schools.

These and more tech tips, news, and updates visit - CraigPeterson.com

---

Related Articles:

The Big Hack: How China Used A Tiny Chip To Infiltrate Major U.S. Companies

Why Didn’t I Get an Emergency Presidential Alert Text?

YouTube Is Replacing Textbooks In Classrooms Across America

---

Transcript:

Below is a rush transcript of this segment, it might contain errors.

Airing date: 10/10/2018

China Hack, Youtube replacing Textbooks in schools, iWatch4 and Presidential Alerts

Craig Peterson: 0:00 Hey, Good morning. Craig Peterson, here. We've talked about a couple of different things this morning including Ken went in to check out that new Apple Watch. So, if you have older eyes, you're going to want to hear what he had to say about it. But, today we talked about the Presidential alert system. Did you get one of those alerts this week? A YouTube study that came out from Pearson Education, this is absolutely going to affect your kids. And this, China hack - did they hack our hardware? Who's at risk? What's really going on here? Its smaller than a grain of rice. It's just amazing what's happening what's going on out there today. Also, the third webinar today of our little webinar series, its the last one. It's for Small businesses on cybersecurity and we're offering one free cyber security, cyber liability, actually, sigh liability assessment. One free for small companies. So go to Craig Peterson dot com sign up for the webinar. Webinar attendees will get one free assessment. This is something that normally cost hundreds of dollars and thousands if you're doing it across the company. We've had a lot of great feedback from people on this who learned a lot of things. I appreciate everybody who's there so check it out Craig Peterson dot com and here we go with this morning Phil and Ken because Matt is out, well on vacation

1:36 I wonder if this theme song is nominated the rock and roll Hall of Fame. I wonder if Craig Peterson is a nominee for the rock and roll hall of fame. I suspect not. Craig, nothing personal. Maybe the Technology Hall of Fame? Certainly. I would agree with that. Hello. Unknown 1:51 How are you? Great job. I don't know if we have those. You know, the jocks end up working for the geek. But the geeks just never manage to get their own hall of fame.

2:01 Yes, that's true. They are prejudiced against geeks

2:06 The geeks and running in the world, what are you talking about?

2:08 So, I have to tell you, Craig, my wife is not a big fan of Donald Trump. And when she got this Presidential Text, she literally screamed. She really thought that the President was texting her directly, and then thought that was gonna be followed up with another text or a Twitter from him about something because of they

2:27 don't we, it's not

2:28 Don't we run the risk of the president being able to just kind of send something out to everybody, whether we like it or not? Or is that not a risk at all?

2:38 Wouldn't that be something?

2:43 Was it sounds like xo, xo or anything on the end? Or?

2:46 No, I doubt it.

2:50 Yeah, well, we've, you know, we have an Emergency Alert System. And if you're living down in the coast right now, there's probably hurricane sirens going off to warn everybody. And you might have seen before weather alerts that come into our phones right, here, If there's a heavy storm, flooding expected, etc. And so typically these things are run by the state. Do you remember? A lot of this was early on, I think in President Trump's presidency, or maybe it was under President Obama, that in Hawaii, all of the air raid sirens started going off because there was an imminent inbound missile that was going to hit Hawaii. Do you remember that one? Yeah, yeah. And, you know, so those things are typically run by the state. In the case of Hawaii, of course, it was it was a false alarm. But, this what you had last week was not President Trump reaching out to all of the women in the country

3:48 What it was was an emergency presidential text alert. The same types of messages that you've been getting from the state, historically now, the Feds can do. And this is the third time they've run a test it's been a little while since I tested it last time not everybody got these alerts and the idea is if there is something imminent, something urgent that happening and everybody needs to know about it that's how the messages going to get out because most people have a cell phone all of the major carriers are participating in this. and you know Ken we remember his kids learning "duck and cover" right, because of the Soviet threat at the time, when we were in school. This is kind of the modern-day version of this Now, they are calling this a presidential alert. It really is a federal alert but yeah not everybody got it which is kind of interesting and that's the reason they're testing it. In order to make sure that everyone does get it. So, that the in the event that there is some form of a national emergency and everyone needs to be notified right away they'll be able to to use it. So tell your wife, Don't worry about it he's probably she's probably not going to get another personal message from the president. We're talking with Craig Peterson our tech guru that man over there is Ken Auchulter

5:14 Yeah, you like the godfather of the WGAN morning news I'm, I guess I'm the guest today Filling in. Craig let me follow up on that for just real briefly because there's other things I, I'm curious to get your opinion on. My understanding is that not everyone got that presidential alert text, I, I'm I'm one of them. Maybe it's because

5:36 I didn't care at all about you. Sometimes, it's about someone else. Well, frankly, it was only the important people Unknown 5:48 Not everyone got that. In fact I was on a phone call, when it came in. Because I forgot that it was coming right or I would have waited and my phone call was completely interrupted and the alert came through. And then it was reconnected after a few seconds. And then the guy in the other end of the phone cut the presidential alert. So, I know it leads to people that got it. But yeah, there are still some number of people that didn't get it. And they were on various carriers. So, some Verizon people got it some didn't to some T- Mobile got it from didn't. I'm not sure of all of the details as to why some got it and some didn't. Other than some glitches in the system, which is why they felt they had to test it again.

6:34 Let's go to a different place. I'm really eager to get your opinion and analysis of this story that came out about an Unknown 6:42 tiny chip in China

6:45 equipment that's now infiltrating US Companies. Yes, please. Tell us. Give us give us to tell us what's happening. Craig? Well, this is there. Wow. Intrigue, okay. I don't even know where to start with this one. This is fascinating because of a story came out in Bloomberg last week. And Bloomberg was saying that major US corporations, and they named specifically Amazon, and they also named Apple. That US corporations had been infiltrated by the People's Liberation Army, at least their equipment had been. The Bloomberg story when it is some detail about it. And we've had over the weekend now, absolute denials from Amazon and Apple about this. Now, this is let's talk about the accusation. And then in fact, this week, there have been more confirmations that have happened. Apparently, China has this little teeny tiny chip that may be about the size of a grain of rice. And the allegation is that the Chinese military has been embedding these chips into computer circuit boards, into the motherboards of certain computers made by a server manufacturer, that that I've used for years called Supermicro, they make some really good stuff. They are a Taiwanese company like guy that owns it's based out in the San Francisco Bay Area. And they've been around for very long time. And apparently what this chip does is when the computer when the server boots up, it basically just opens up the phone line to China and gives them complete control over the computer. Now, the Bloomberg story said that Amazon figured this out, and started removing these pieces of equipment from the network's. Same things true with Apple, they figured it out, as well. Although, as I said, both companies have denied it. And this week, we have a company that says they have a examined these systems. And yes, indeed, there are spy chips on all of these devices, including devices that are used by the military and the federal government, including things like cameras, video cameras, and others. So, this is really kind of interesting, at least from my standpoint, because you know, I love the security stuff and figuring it all out and helping businesses with it. But we're talking about potential infiltration by the Chinese military of the CIA, as well as divisions, major divisions of the military, and maybe even some of our major corporations that are handling all of our data. And I frankly, I wouldn't put it past the Chinese to do something like that. We have

9:57 been talking to Craig Peterson, our Tech Guru who joins us, every Wednesday at 738

10:04 YouTube. I watch you to all the time, you know, I'm a, I don't know if you know, this big pickleball player and I, I go to YouTube all the time to learn, how to play pickle a ball. So if I can learn pick up all by YouTube. Can't our students learn their lessons in school by YouTube?

10:22 It's an interesting question. And my grandfather plays Pickleball, by the way, Ken Unknown 10:28 say that ages me doesn't it? Yeah,

10:30 yeah, there. There you go.

10:34 Yeah, YouTube, it's an interesting thing. Because there is basically everything you want out on YouTube, the quality of what you're going to learn is always a little bit questionable. But we're seeing more and more, online learning going on. You know, my wife and I, we homeschooled all of our kids. And you have eight children? Yeah, you have eight children. Oh, my

10:58 god, you're a saint

11:00 today, we homeschooled them all the way up to college. Then there was no YouTube, right? There wasn't any of this stuff. And it was a different world. You know, we use Texas Tech and some other things to help with the curriculum. Well, now we're finding that YouTube is replacing the textbooks and lectures in a lot of the schools, nationwide. And some studies have been done looking at the different generations of students and have found that millennials prefer to learn from textbooks, 60% of them, but it's switched now the next generation, which is called Generation Z, is preferring to learn from YouTube, about 60% of them. So Ken you have something in common with Gen Z. There you go. Yeah. So, and we're talking about Gen Z, we're still talking about the young kids, right, early high school all the way up through through college, frankly. But this, is going to be happening more and more, hopefully, they're vetting it properly. But, it really brings in an interesting question about our future and the future of our universities and our schools, high schools. There's a lot of lot of kids here in Maine that are living in very rural areas that are using online curriculum. There is some incredible stuff out there from every major university. So, I think that's a good move I think its overall a good move, let me put it that way. The study that was done by Pearson Education I had some good and interesting numbers in it I've got it up on my website as well as these other articles. But this is the trend of the future, guys Unknown 12:50 All right, our tech guru joins us every Wednesday 738. By the way, Craig, I saw the iWatch four I went to the Apple Store to look at it. Yeah, It really looks impressive and I don't even wear a watch but I yeah I think I think it's on my Christmas list now

13:06 Can you see it? Can you read it well enough?

13:07 You know, I believe it or not I look at the 40 and the 44, watches the 44 just looked too big on my wrist because I've got, you know, I'm small, I'm five feet five. So, I looked at the forty and you know frankly, yeah wasn't that hard to read. I mean it's not it's not the same as my iPhone Xs max, which I love by the way I love by the way, but I love the right just the iPhone particular with cellular service now, you don't have your iPhone I think it's really been a quantum leap forward Unknown 13:41 Yeah, nice. Nice good recommendation there yep. From Ken Auchulter also there you go.

13:46 Thank you next week.

13:48 Bye.

13:51 Don't forget register early register often Craig Peterson dot com you'll get into today's webinar and we do have a replay that's going to be up for a few days if you missed this it's so important for small businesses. Small businesses, you are the target. Small-medium businesses, because you just can't afford the people that frankly you need in order to keep your system safe. And, you also have a lot more at risk a look at the list. There are dozens of things that you have that are your business assets that if they were unavailable to you or stolen would be just a horrific thing. So, make sure you register and maybe you can get into the next series that I put on probably coming up in a few months. Craig Peterson dot com. Have a great day. Take care guys. Bye-bye.

---

Don't miss any episode from Craig. Visit http://CraigPeterson.com/itunes. Subscribe and give us a rating!

Thanks, everyone, for listening and sharing our podcasts. We're really hitting it out of the park. This will be a great year! 

---

More stories and tech updates at:

www.craigpeterson.com

Don't miss an episode from Craig. Subscribe and give us a rating:

www.craigpeterson.com/itunes

Follow me on Twitter for the latest in tech at:

www.twitter.com/craigpeterson

For questions, call or text:

855-385-5553

50 million Facebook accounts were compromised, was your account one of them? Find out more as Craig and Jim discussed the recent Facebook hack as well as some great advice on how to create the perfect and secure password.

These and more tech tips, news, and updates visit - CraigPeterson.com

---

Related Articles:

The Best Password Advice Right Now

PHISHING WARNING: One In Every One Hundred Emails Is Now A Hacking Attempt

50 million Facebook accounts were compromised. Was yours?

---

Transcript:

Below is a rush transcript of this segment, it might contain errors.

Airing date: 10/09/2018

Facebook Hack Clone Messages - Have You Been Hacked

Craig Peterson: [00:00:00] Hi everybody. Craig Peterson here I have some feedback from yesterday's podcast about the the whole Facebook the hack the cloning, everything I went into a lot of detail on that are right here walk you through how to verify if your accounts been hacked how to check if your accounts and cloned what were these messages that you got from messenger and then while you're in there change your password so I got some password advice as well all of that and more this is probably one of the more important segments for you to listen to. I think you'll find it very, very helpful to help make sure all of your stuff

Unknown 0:40
is safe. So here we go with Jim

Unknown 0:43
if there was ever a moment when we need Craig Peterson This is it. I can't take getting any more of these messages on Facebook joining us now. The man the myth, the legend Craig Peterson. Good morning, sir.

Unknown 1:00
Good morning, Jim.

Unknown 1:02
Yeah, so I'm getting these messages. Okay. Over and over again. It's they're all the same. Hi, I actually got another friend request from you, which I ignored. So you may want to check your account, hold your finger on the message until the forward button appears. Then he hit forward and all the people you want to forward to. I had to do the the people individually. Please do not accept a new friendship from me at this time. What is this? What is this? Am I hacked? Or are they hacked or people just sending around the same stupid message?

Unknown 1:40
That's a really good question while he asked them know, here, here's what's going on. Facebook did just have a really big hack. And you know, we know Zuckerberg was part of that at least 50 million users. Right? We talked a bit about that last week. Yeah, yeah. And people are consuming what's going on here now was I one of the 50 million people that was hack there's another problem that's been floating around Facebook lately and that is people have been cloning account someone. Someone will create another gym Polito account and we'll put your happy smiling face on it and some other things and and basically pretend they are you. So what's going on here? So it's a kind of an impersonation thing was I have, etc? Well, the Azar No, you weren't half However, you can check to see if you were hacked. And the easiest way, Jim, if you're on the Facebook page, and anybody listening the one double check right now Go Go to the Facebook page. Okay, and Jim Polito show.

Unknown 2:52
Yeah, I got to so can I go to gym? Pulido first.

Unknown 2:57
Yeah, you're gonna want to check each one of your okay. Not not just Jim. So in the top right hand corner of the computer of the screen there. Now that you're logged into, there's a little menu icon? Yep, I got it. Okay. So click on that. And if you're on a phone, by the way, you're going to select Settings, because you're not going to have that little menu icon. Ok. So now you can click on security. Yep. And then underneath security, you're going to see something that says where you're logged in where you are logged. Yes. And wait. And wait,

Unknown 3:35
hold on.

Unknown 3:37
You see, messenger. Wait a minute. You know what? I'm on my I'm on my desktop. And when I click on the little the upside down arrow doesn't give me security says activity log news feed pro settings. settings. And then go to security. Yeah.

Unknown 4:00
username. Contact that account temper

Unknown 4:04
snack. Giving me security. Oh, security and login. Sorry. Yeah, yeah, I'm holding up everybody here. Like, everybody's like, Jim, for god sakes. can see Danny in there. Okay, go ahead.

Unknown 4:17
For now where you're logged in. This is the important one day if you have to go to this later on today, just whomever you want to get in the settings and security and then we're locked in. Because that will show you if someone else's logged into your account, which means you have an in house

Unknown 4:38
don't freak out. If you see yourself logged in from a different town does not mean that it's it's that you've been hacked, necessarily, hey, so our internet addresses, which is how Facebook's figuring out where we are. Our internet addresses aren't like a street address. So your internet service provider and Facebook take an educated guess as to where you were last year. So if if you're her in the Forrester and it's showing you as lost in in Boston, I might be a little bit worried or in Springfield might be a little worried about if it's a neighboring town. Yeah, I wouldn't want to worry about it too much. Now, what you can do is you can tell Facebook there to log off all logins all of your accounts. So if you log off everybody, then you're going to have to log back in again. So that that's the safe thing to do. And during the half last week, that's what Facebook fit for you. Okay, they lost you off of all of these other machines. All In fact, every machine that was out there, yeah, so we're talking about two different thing. Well, three different six. Really. Okay, so that's how to check its use in half. Now, obviously, while you're in security, make sure you change your password, you know, you should be using two factor identification sometimes called to essays or to fit

Unknown 6:09
the you know, so that's going to get a code from your phone, which is reasonable thing to do. If you're a business, you might want to get fancier. But turn that on. So right now, while you're in there, change your password, turn on your two factor authentication, have them send you a text when you're trying to log in. And you can also turn on alerts but unrecognized locket. Okay. So that's Hack number two is clone. So the next thing you're going to want to do is go up to the search bar. Yeah. And you're going to search for your name.

Unknown 6:42
Yeah, so just put in me.

Unknown 6:44
Yeah, they'll put in me or Jim Polito. I put in Jim played all fibers

Unknown 6:50
Yeah.

Unknown 6:52
And now search to see if there's any other pages that come back claiming to be you now there might be another GIMP Leto in the billion accounts. Yeah.

Unknown 7:02
Yeah. Cuz he got Jim Polito. You know, when they could ask you. If you I think it was for email or whatever, you know, you want Jim Polito and I didn't put it in quick enough. So I ended up with Jimmy Polito

Unknown 7:17
oh yeah yeah I thought Craig Peterson back in the day and then I didn't really pay attention to it and somebody stole it from me that's not good anyways yeah so if there is another gym Toledo pretending to be huge. Yeah, when you get on that page, you can click again on the menu button. And you can say reports this page Yeah. Now Facebook is telling us that they have right now have basically a 24 hour guarantee if you report somebody as cloning your page and other words for tending there. You they've taken content from your page, maybe your picture et cetera, and they put it up on a different page. If you reported clone, then Facebook says within 24 hours, they will investigate and reboot the page. Okay, then. so helpful. We're talking to Craig Peterson, our tech talk guru, just about this whole Facebook thing.

Unknown 8:14
So okay, that's good. That's too easy ways. And you know what, I passed the test. And because Danny told me where our corporate login is. And that's on my, on my desktop. I'm logged into the corporate. And then the last time my mobile was logged in, it was logged in, in my town. So I'm good. I mean, I'm good. And there's no other Hey, come on. When they when they made me they broke the mold. Craig, you know that

Unknown 8:49
too. So that's good folks are Craig Peterson, our tech talk guru getting us up to speed. This is the kind of stuff and at the end of the segment, when I give you when you gives you a number, you should text My name to it. And it will help you to get all this kind of information during the week. And no, he doesn't try to sell you anything.

Unknown 9:10
One more thing on this data production, which goes back to your original question. Hi, I actually got another friend request from you like these messages that we've been getting. Yeah, and I got them as well. And I got them. In fact, I got one from a mutual friend of ours, this is a whole, okay, this is this does not mean you were hacked. This does not mean that the sender's account was hacked in the, you know, the generic sense of the word. So the thing to do with these is just ignore them. Okay. It's just like you receive a spam, email of phishing attempts, etc. Just ignore these types of messages and emails. And I'm going to be talking more about those on the webinar today, because I'm doing those three free trial webinars on small business security. If you haven't signed up, make sure you go to http://craigpeterson.com, there's a sign up right on the homepage. But according to the FBI, Jim, you look at this message. Okay. Yeah, and it's not a hoax. And a lot of people recognize the grammars kind of poor and wait a minute, this looks weird. But according to the FBI, $14 billion has been stolen from small businesses because of this type of thing. And I mean dollars from bank accounts, not $14 billion worth of loss work, $14 billion stolen from businesses in the last two years. So when you get a message like this one that came in over the weekend, primarily on Sunday from Facebook, or you get a message like this in the email, do not respond to it. Do not click on it early, if it's from your CEO, okay? Or somebody else telling you to make some sort of final manful transaction don't do it. Okay. Simple enough.

Unknown 11:05
Alright, so you'll get all that information folks at the end of this segment. And you'll be able to

Unknown 11:12
get that webinar Now, before I let you go. The important thing passwords, passwords that are to protect you from hacking, what are they and how do you do it?

Unknown 11:25
Well, good timing, because, of course, as we just said passwords on Facebook. Um, here's the trick. For years and years, the advice has been Make sure you use our complicated password and you change it every 90 days, like uppercase, lowercase numbers, who have special characters and all this other stuff, right? That's what you're supposed to have done. However, not and by the way, that's still what the HIPAA standards say. And that's still what others standards is saying. So the federal government has not caught up to the National Institute of Standards and Technology. Two years ago, they came up with this bottom line us a few words strung together, so have a phrase three or four words that don't normally go together as a good way to do it. So pick four, right kind of random ish, we're use those as your password six dash or number or something in between them. That is the most secure password that studies out right now shows us the old advice of you know, forcing people to change their password using random letters and everything else. those standards have now been proven to make passwords left the cure know it's used for work together. You're going to string together like I hard Jim, Danny, have, you know, Craig? Any new password, right?

Unknown 12:54
Yeah. And. And then that is overriding decades of old advice. It's simple, it's easy to remember, which is important. And it's almost impossible for computers again, because there are so many characters involved. Just you just think of that one particular string, it's got to be 2030 characters. Wow. So that's the best kind of password. That's the best. That makes sense. That makes that makes a lot of sense. words that don't go together the hyphen, stuff like that those symbols, and how often should you change that password though?

Unknown 13:35
Danny said, How often should you change that password?

Unknown 13:38
Oh, well, the beauty is, it's such a good password, and you don't have to write it down that you can get away with that password for a very long time. We're talking about a year, two years, even three years, as long as you don't use it on any other system. Okay. Now, this is this is general password advice, right? Yeah, you're right. One of my FBI compatriots are different,

Unknown 14:03
right. But for the normal

Unknown 14:04
for the average person. Yeah, yeah, exactly. Home user. That's the best possible advice that I think you'd get anywhere. Wow, this was a great session. Craig. Craig Peterson, our tech talk guru, everybody. Okay. So what you do if you want to get this kind of information on a regular basis and warnings on a regular basis and you but you don't want somebody to try to sell you something or pester you He won't do. It just checks to my name, Jim to this number.

Unknown 14:40
855-385-5553. That's 855-385-5553.

Unkown 14:45

standard data and text rates apply and you'll get all this great information. Craig, I want to thank you so much for your help. Today was invaluable.

Unknown 14:55
Hey, thanks, Jim. Take care. Take care

Unknown 14:58
when we return a final word.

---

Don't miss any episode from Craig. Visit http://CraigPeterson.com/itunes. Subscribe and give us a rating!

Thanks, everyone, for listening and sharing our podcasts. We're really hitting it out of the park. This will be a great year! 

More stories and tech updates at:

www.craigpeterson.com

Don't miss an episode from Craig. Subscribe and give us a rating:

www.craigpeterson.com/itunes

Follow me on Twitter for the latest in tech at:

www.twitter.com/craigpeterson

For questions, call or text:

855-385-5553

50 million Facebook accounts were compromised, was your account one of them? Find out more as Craig and Jim discussed the recent Facebook hack as well as some great advice on how to create the perfect and secure password.

These and more tech tips, news, and updates visit - CraigPeterson.com

---

Related Articles:

The Best Password Advice Right Now

PHISHING WARNING: One In Every One Hundred Emails Is Now A Hacking Attempt

50 million Facebook accounts were compromised. Was yours?

---

Transcript:

Below is a rush transcript of this segment, it might contain errors.

Airing date: 10/09/2018

Facebook Hack Clone Messages - Have You Been Hacked

Craig Peterson: [00:00:00] Hi everybody. Craig Peterson here I have some feedback from yesterday's podcast about the the whole Facebook the hack the cloning, everything I went into a lot of detail on that are right here walk you through how to verify if your accounts been hacked how to check if your accounts and cloned what were these messages that you got from messenger and then while you're in there change your password so I got some password advice as well all of that and more this is probably one of the more important segments for you to listen to. I think you'll find it very, very helpful to help make sure all of your stuff

Unknown 0:40
is safe. So here we go with Jim

Unknown 0:43
if there was ever a moment when we need Craig Peterson This is it. I can't take getting any more of these messages on Facebook joining us now. The man the myth, the legend Craig Peterson. Good morning, sir.

Unknown 1:00
Good morning, Jim.

Unknown 1:02
Yeah, so I'm getting these messages. Okay. Over and over again. It's they're all the same. Hi, I actually got another friend request from you, which I ignored. So you may want to check your account, hold your finger on the message until the forward button appears. Then he hit forward and all the people you want to forward to. I had to do the the people individually. Please do not accept a new friendship from me at this time. What is this? What is this? Am I hacked? Or are they hacked or people just sending around the same stupid message?

Unknown 1:40
That's a really good question while he asked them know, here, here's what's going on. Facebook did just have a really big hack. And you know, we know Zuckerberg was part of that at least 50 million users. Right? We talked a bit about that last week. Yeah, yeah. And people are consuming what's going on here now was I one of the 50 million people that was hack there's another problem that's been floating around Facebook lately and that is people have been cloning account someone. Someone will create another gym Polito account and we'll put your happy smiling face on it and some other things and and basically pretend they are you. So what's going on here? So it's a kind of an impersonation thing was I have, etc? Well, the Azar No, you weren't half However, you can check to see if you were hacked. And the easiest way, Jim, if you're on the Facebook page, and anybody listening the one double check right now Go Go to the Facebook page. Okay, and Jim Polito show.

Unknown 2:52
Yeah, I got to so can I go to gym? Pulido first.

Unknown 2:57
Yeah, you're gonna want to check each one of your okay. Not not just Jim. So in the top right hand corner of the computer of the screen there. Now that you're logged into, there's a little menu icon? Yep, I got it. Okay. So click on that. And if you're on a phone, by the way, you're going to select Settings, because you're not going to have that little menu icon. Ok. So now you can click on security. Yep. And then underneath security, you're going to see something that says where you're logged in where you are logged. Yes. And wait. And wait,

Unknown 3:35
hold on.

Unknown 3:37
You see, messenger. Wait a minute. You know what? I'm on my I'm on my desktop. And when I click on the little the upside down arrow doesn't give me security says activity log news feed pro settings. settings. And then go to security. Yeah.

Unknown 4:00
username. Contact that account temper

Unknown 4:04
snack. Giving me security. Oh, security and login. Sorry. Yeah, yeah, I'm holding up everybody here. Like, everybody's like, Jim, for god sakes. can see Danny in there. Okay, go ahead.

Unknown 4:17
For now where you're logged in. This is the important one day if you have to go to this later on today, just whomever you want to get in the settings and security and then we're locked in. Because that will show you if someone else's logged into your account, which means you have an in house

Unknown 4:38
don't freak out. If you see yourself logged in from a different town does not mean that it's it's that you've been hacked, necessarily, hey, so our internet addresses, which is how Facebook's figuring out where we are. Our internet addresses aren't like a street address. So your internet service provider and Facebook take an educated guess as to where you were last year. So if if you're her in the Forrester and it's showing you as lost in in Boston, I might be a little bit worried or in Springfield might be a little worried about if it's a neighboring town. Yeah, I wouldn't want to worry about it too much. Now, what you can do is you can tell Facebook there to log off all logins all of your accounts. So if you log off everybody, then you're going to have to log back in again. So that that's the safe thing to do. And during the half last week, that's what Facebook fit for you. Okay, they lost you off of all of these other machines. All In fact, every machine that was out there, yeah, so we're talking about two different thing. Well, three different six. Really. Okay, so that's how to check its use in half. Now, obviously, while you're in security, make sure you change your password, you know, you should be using two factor identification sometimes called to essays or to fit

Unknown 6:09
the you know, so that's going to get a code from your phone, which is reasonable thing to do. If you're a business, you might want to get fancier. But turn that on. So right now, while you're in there, change your password, turn on your two factor authentication, have them send you a text when you're trying to log in. And you can also turn on alerts but unrecognized locket. Okay. So that's Hack number two is clone. So the next thing you're going to want to do is go up to the search bar. Yeah. And you're going to search for your name.

Unknown 6:42
Yeah, so just put in me.

Unknown 6:44
Yeah, they'll put in me or Jim Polito. I put in Jim played all fibers

Unknown 6:50
Yeah.

Unknown 6:52
And now search to see if there's any other pages that come back claiming to be you now there might be another GIMP Leto in the billion accounts. Yeah.

Unknown 7:02
Yeah. Cuz he got Jim Polito. You know, when they could ask you. If you I think it was for email or whatever, you know, you want Jim Polito and I didn't put it in quick enough. So I ended up with Jimmy Polito

Unknown 7:17
oh yeah yeah I thought Craig Peterson back in the day and then I didn't really pay attention to it and somebody stole it from me that's not good anyways yeah so if there is another gym Toledo pretending to be huge. Yeah, when you get on that page, you can click again on the menu button. And you can say reports this page Yeah. Now Facebook is telling us that they have right now have basically a 24 hour guarantee if you report somebody as cloning your page and other words for tending there. You they've taken content from your page, maybe your picture et cetera, and they put it up on a different page. If you reported clone, then Facebook says within 24 hours, they will investigate and reboot the page. Okay, then. so helpful. We're talking to Craig Peterson, our tech talk guru, just about this whole Facebook thing.

Unknown 8:14
So okay, that's good. That's too easy ways. And you know what, I passed the test. And because Danny told me where our corporate login is. And that's on my, on my desktop. I'm logged into the corporate. And then the last time my mobile was logged in, it was logged in, in my town. So I'm good. I mean, I'm good. And there's no other Hey, come on. When they when they made me they broke the mold. Craig, you know that

Unknown 8:49
too. So that's good folks are Craig Peterson, our tech talk guru getting us up to speed. This is the kind of stuff and at the end of the segment, when I give you when you gives you a number, you should text My name to it. And it will help you to get all this kind of information during the week. And no, he doesn't try to sell you anything.

Unknown 9:10
One more thing on this data production, which goes back to your original question. Hi, I actually got another friend request from you like these messages that we've been getting. Yeah, and I got them as well. And I got them. In fact, I got one from a mutual friend of ours, this is a whole, okay, this is this does not mean you were hacked. This does not mean that the sender's account was hacked in the, you know, the generic sense of the word. So the thing to do with these is just ignore them. Okay. It's just like you receive a spam, email of phishing attempts, etc. Just ignore these types of messages and emails. And I'm going to be talking more about those on the webinar today, because I'm doing those three free trial webinars on small business security. If you haven't signed up, make sure you go to http://craigpeterson.com, there's a sign up right on the homepage. But according to the FBI, Jim, you look at this message. Okay. Yeah, and it's not a hoax. And a lot of people recognize the grammars kind of poor and wait a minute, this looks weird. But according to the FBI, $14 billion has been stolen from small businesses because of this type of thing. And I mean dollars from bank accounts, not $14 billion worth of loss work, $14 billion stolen from businesses in the last two years. So when you get a message like this one that came in over the weekend, primarily on Sunday from Facebook, or you get a message like this in the email, do not respond to it. Do not click on it early, if it's from your CEO, okay? Or somebody else telling you to make some sort of final manful transaction don't do it. Okay. Simple enough.

Unknown 11:05
Alright, so you'll get all that information folks at the end of this segment. And you'll be able to

Unknown 11:12
get that webinar Now, before I let you go. The important thing passwords, passwords that are to protect you from hacking, what are they and how do you do it?

Unknown 11:25
Well, good timing, because, of course, as we just said passwords on Facebook. Um, here's the trick. For years and years, the advice has been Make sure you use our complicated password and you change it every 90 days, like uppercase, lowercase numbers, who have special characters and all this other stuff, right? That's what you're supposed to have done. However, not and by the way, that's still what the HIPAA standards say. And that's still what others standards is saying. So the federal government has not caught up to the National Institute of Standards and Technology. Two years ago, they came up with this bottom line us a few words strung together, so have a phrase three or four words that don't normally go together as a good way to do it. So pick four, right kind of random ish, we're use those as your password six dash or number or something in between them. That is the most secure password that studies out right now shows us the old advice of you know, forcing people to change their password using random letters and everything else. those standards have now been proven to make passwords left the cure know it's used for work together. You're going to string together like I hard Jim, Danny, have, you know, Craig? Any new password, right?

Unknown 12:54
Yeah. And. And then that is overriding decades of old advice. It's simple, it's easy to remember, which is important. And it's almost impossible for computers again, because there are so many characters involved. Just you just think of that one particular string, it's got to be 2030 characters. Wow. So that's the best kind of password. That's the best. That makes sense. That makes that makes a lot of sense. words that don't go together the hyphen, stuff like that those symbols, and how often should you change that password though?

Unknown 13:35
Danny said, How often should you change that password?

Unknown 13:38
Oh, well, the beauty is, it's such a good password, and you don't have to write it down that you can get away with that password for a very long time. We're talking about a year, two years, even three years, as long as you don't use it on any other system. Okay. Now, this is this is general password advice, right? Yeah, you're right. One of my FBI compatriots are different,

Unknown 14:03
right. But for the normal

Unknown 14:04
for the average person. Yeah, yeah, exactly. Home user. That's the best possible advice that I think you'd get anywhere. Wow, this was a great session. Craig. Craig Peterson, our tech talk guru, everybody. Okay. So what you do if you want to get this kind of information on a regular basis and warnings on a regular basis and you but you don't want somebody to try to sell you something or pester you He won't do. It just checks to my name, Jim to this number.

Unknown 14:40
855-385-5553. That's 855-385-5553.

Unkown 14:45

standard data and text rates apply and you'll get all this great information. Craig, I want to thank you so much for your help. Today was invaluable.

Unknown 14:55
Hey, thanks, Jim. Take care. Take care

Unknown 14:58
when we return a final word.

---

Don't miss any episode from Craig. Visit http://CraigPeterson.com/itunes. Subscribe and give us a rating!

Thanks, everyone, for listening and sharing our podcasts. We're really hitting it out of the park. This will be a great year! 

More stories and tech updates at:

www.craigpeterson.com

Don't miss an episode from Craig. Subscribe and give us a rating:

www.craigpeterson.com/itunes

Follow me on Twitter for the latest in tech at:

www.twitter.com/craigpeterson

For questions, call or text:

855-385-5553

Facebook accounts are being spoofed.  

Find out more as Craig talks with Jack Heath on WGIR.

These and more tech tips, news, and updates visit - CraigPeterson.com

---

Related Articles 

---

Below is a rush transcript of this segment, it might contain errors.

Airing date: 10/8/2018

Fake Facebook Accounts -- "I have been hacked"

Craig Peterson: 0:00 Good morning. Craig Peterson, here. This morning I talked a little bit about this whole Facebook hack over the weekend. Did you get an email from your friends, telling you that "oh, my their Facebook account had been compromised"? I got a couple of those, or something and message asking in just kind of odd English, asking you to forward something along or like something. Well, that's what I talked about this morning with Mr. Jack Heath. Also, a quick reminder tomorrow. Tuesday is day two of our mini-webinar series, so make sure you tune in for that as well Craig Peterson.com sign up right there in the homepage. So, here we go with jack Unknown 0:46 Welcome back to our show. Craig Peterson, a little bit later on this morning. and Craig I believe it's Craig right Justin, Craig, Good morning. How Unknown

0:55 Craig, How are you, sir.

0:57 doing great

0:59 and let me ask you about this. Up over the weekend, Justin I was just talking about this number of people I noticed people that have contact with the show "saying that it was not them" sending a friend request from Facebook with instructions that they have been hacked. Was there a little bit of hacking over the weekend for Facebook? Cuz I saw about three or four different people post that today.

1:19 Yeah, I saw that as well this weekend. I started digging into a little bit, and a lot of people are concerned because of the big hack that happened just about two weeks ago where 15 million Facebook accounts were hacked due to just incredible incompetence on the part of some of these people over at Facebook. It was a very very sophisticated hack, but still, they should have known better. These messages that you've been seeing, and they pretty much peaked yesterday, on Sunday are something that you can ignore. These accounts have not been hacked. There were all of these messages going out that you might have gotten asking people to click on things and talk to about accounts being cloned. If you are worried about your Facebook account being clone the easiest way to tell if it's happened is just search for yourself on Facebook. If you see another account in your name, that maybe has your photo, it is a fake account. If you see that, there's a little button that you can click on that other account and report it as fake. Facebook has stepped up their enforcement actions, and they say that within 24 hours they will delete it, but very few of these accounts were cloned. This appears to be related to the hack of Facebook that happened recently, and just like some of the business email compromise emails that you're getting. The best thing to do is to don't click on anything. You just ignore it and move on. You're probably just fine. Yeah, it is so hard to keep track of all this. Then and then half of the time, I don't know about if this just happens, but once in a while, it'll change your username and your password just from time to time, to mix it up. Half the time, half the time though this problem is, we

3:09 think we remember things, half the time when you go to do, it says you got to put in your current password, people you can't remember, right.

3:15 Craig. sure my password should be something different than 1234. That's Not a password, Yeah, you should follow the advice of the Democrat Party and use password as the password

3:29 on that right now. Oh crap. funny one. Craig does these. He's had his Wheaties, this morning. On Monday morning. Columbus Day.

3:37 Yeah, the best advice for passwords, nowadays. This changed a couple of years ago. Although, Congress has not updated the HIPAA regulations or others. But the best passwords, nowadays, are phrases using a few words strung together that's much better than a random password we found that these passwords that businesses have been enforcing where their password to be letters and numbers and special characters. These have become less secure, because of how people handle them. So, the best advice, Justin and Jack and everybody listening, is stringing together three or four random words with a dash or number between the words. Use that as a password and please use different passwords on every website. Use a password manager too. Yes, send me an email if you want more info on passwords I wrote up a special report about that.  All right, great stuff on business on great business Appreciate it. On Craig Peterson, dot com Thank you, Craig. As well and by this 

4:40 The first episode of our webinars, a little mini-series is up. We've got this masterclass going on, and we covered the Anatomy of an Attack. I think I'm going to end up having to add one more thing to this because there were a lot of questions. So, we may end up with two or maybe three more little webinars as part of our masterclass. I am not selling a thing this is all about giving stuff away. So make sure you sign up Craig Peterson dot com. I want to help 100 small businesses by the end of the year minimum. Okay. And, a lot of them have already signed up. I have the resources for it, and I want to help you this is true. I want to help. So, make sure you sign up at Craig Peterson dot com Take care. Have a great day. We'll be back again tomorrow as well as with a webinar tomorrow.

---

More stories and tech updates at:

www.craigpeterson.com

Don't miss an episode from Craig. Subscribe and give us a rating:

www.craigpeterson.com/itunes

Message Input:

Message #techtalk

Follow me on Twitter for the latest in tech at:

www.twitter.com/craigpeterson

For questions, call or text:

855-385-5553

Facebook accounts are being spoofed.  

Find out more as Craig talks with Jack Heath on WGIR.

These and more tech tips, news, and updates visit - CraigPeterson.com

---

Related Articles 

---

Below is a rush transcript of this segment, it might contain errors.

Airing date: 10/8/2018

Fake Facebook Accounts -- "I have been hacked"

Craig Peterson: 0:00 Good morning. Craig Peterson, here. This morning I talked a little bit about this whole Facebook hack over the weekend. Did you get an email from your friends, telling you that "oh, my their Facebook account had been compromised"? I got a couple of those, or something and message asking in just kind of odd English, asking you to forward something along or like something. Well, that's what I talked about this morning with Mr. Jack Heath. Also, a quick reminder tomorrow. Tuesday is day two of our mini-webinar series, so make sure you tune in for that as well Craig Peterson.com sign up right there in the homepage. So, here we go with jack Unknown 0:46 Welcome back to our show. Craig Peterson, a little bit later on this morning. and Craig I believe it's Craig right Justin, Craig, Good morning. How Unknown

0:55 Craig, How are you, sir.

0:57 doing great

0:59 and let me ask you about this. Up over the weekend, Justin I was just talking about this number of people I noticed people that have contact with the show "saying that it was not them" sending a friend request from Facebook with instructions that they have been hacked. Was there a little bit of hacking over the weekend for Facebook? Cuz I saw about three or four different people post that today.

1:19 Yeah, I saw that as well this weekend. I started digging into a little bit, and a lot of people are concerned because of the big hack that happened just about two weeks ago where 15 million Facebook accounts were hacked due to just incredible incompetence on the part of some of these people over at Facebook. It was a very very sophisticated hack, but still, they should have known better. These messages that you've been seeing, and they pretty much peaked yesterday, on Sunday are something that you can ignore. These accounts have not been hacked. There were all of these messages going out that you might have gotten asking people to click on things and talk to about accounts being cloned. If you are worried about your Facebook account being clone the easiest way to tell if it's happened is just search for yourself on Facebook. If you see another account in your name, that maybe has your photo, it is a fake account. If you see that, there's a little button that you can click on that other account and report it as fake. Facebook has stepped up their enforcement actions, and they say that within 24 hours they will delete it, but very few of these accounts were cloned. This appears to be related to the hack of Facebook that happened recently, and just like some of the business email compromise emails that you're getting. The best thing to do is to don't click on anything. You just ignore it and move on. You're probably just fine. Yeah, it is so hard to keep track of all this. Then and then half of the time, I don't know about if this just happens, but once in a while, it'll change your username and your password just from time to time, to mix it up. Half the time, half the time though this problem is, we

3:09 think we remember things, half the time when you go to do, it says you got to put in your current password, people you can't remember, right.

3:15 Craig. sure my password should be something different than 1234. That's Not a password, Yeah, you should follow the advice of the Democrat Party and use password as the password

3:29 on that right now. Oh crap. funny one. Craig does these. He's had his Wheaties, this morning. On Monday morning. Columbus Day.

3:37 Yeah, the best advice for passwords, nowadays. This changed a couple of years ago. Although, Congress has not updated the HIPAA regulations or others. But the best passwords, nowadays, are phrases using a few words strung together that's much better than a random password we found that these passwords that businesses have been enforcing where their password to be letters and numbers and special characters. These have become less secure, because of how people handle them. So, the best advice, Justin and Jack and everybody listening, is stringing together three or four random words with a dash or number between the words. Use that as a password and please use different passwords on every website. Use a password manager too. Yes, send me an email if you want more info on passwords I wrote up a special report about that.  All right, great stuff on business on great business Appreciate it. On Craig Peterson, dot com Thank you, Craig. As well and by this 

4:40 The first episode of our webinars, a little mini-series is up. We've got this masterclass going on, and we covered the Anatomy of an Attack. I think I'm going to end up having to add one more thing to this because there were a lot of questions. So, we may end up with two or maybe three more little webinars as part of our masterclass. I am not selling a thing this is all about giving stuff away. So make sure you sign up Craig Peterson dot com. I want to help 100 small businesses by the end of the year minimum. Okay. And, a lot of them have already signed up. I have the resources for it, and I want to help you this is true. I want to help. So, make sure you sign up at Craig Peterson dot com Take care. Have a great day. We'll be back again tomorrow as well as with a webinar tomorrow.

---

More stories and tech updates at:

www.craigpeterson.com

Don't miss an episode from Craig. Subscribe and give us a rating:

www.craigpeterson.com/itunes

Message Input:

Message #techtalk

Follow me on Twitter for the latest in tech at:

www.twitter.com/craigpeterson

For questions, call or text:

855-385-5553

The Chinese are at it again!  Now they have been caught implanting spy chips in the server motherboards they have been manufacturing. Listen in while I explain why this is a big deal and why it proves the point that President Trump is making about the Chinese. 

Why isn't anyone adopting the NIST Password Standards?  I will explain why they are easier to use and more secure. 

Why are schools using Youtube for Teaching?  Listen in and I will explain the thinking behind this and why it is a bad idea.

Airlines are continually under attack.  This week another one is breached.  Listen in as I discuss why they are targets and how they can stop it.

They tried something new for Alerting the Public Nationwide.  The Presidential Alert System -- There were some issues.  Did you get a text at 2:18 on Tuesday?

Craig is putting up a new insider site (Yes, it is free, but you have to sign up)  On it will have all his special reports that he puts out and you will be the first to get them.

These and more tech tips, news, and updates visit - CraigPeterson.comoard

---

Transcript:

Below is a rush transcript of this segment, it might contain errors.

Airing date: 10/06/2018

China implants spy chips in popular server motherboards. Password Advice. Textbooks are so old school, Now its Youtube in Classrooms. Airline Hacks. Presidential Emergency Alerts. 

Craig Peterson: Hey, welcome of course you're listening to Craig Peterson. I am live on the radio every Saturday morning on some of these Northeast I Heart Radio Stations. So, I'm glad you're joining me. Hopefully, you join me every week. If you want to get a notification about the show, make sure you send me a text. I'll make sure to send you one when we go live every week, or if there is a big emergency. And, unfortunately, there have been a lot of emergencies, lately. Did Did you get one of those texts this week? Yeah, we'll talk about that, as well. These new presidential alarms. Well, text me 855-385-5553 with any questions, we'll try and get to them in the show, or I'll respond to you directly. Usually, within a couple of days, we can, I am usually busy doing some other things. So, it's hard to say, Well, today we are going to be covering a bunch of subjects. We have eight different subjects, you'll see them in this morning's email of my show notes to you. We've got YouTube replacing textbooks in classrooms. What do you think about that, huh? What you do with passwords. Turns out that the old advice is bad advice. And, there have been a couple of updates and we'll talk about, as well. A huge warning about our emails out there, something you might not be familiar with and I think you should, frankly. A bit of a an analysis here for the British Airways hack. If you're bigger business, you might fall for this same ploy, I got to tell you about this one, as well. Man, we're not going to get to all of this today. But, China, they've done some amazing things. Right now, there's some accusations about some of the stuff that they have done in order to spy on some of America's best corporate citizens. We've got new phishing scams, voice phishing scams, they're more clever than ever. And, the Fed here looks like for the first time may have broken into an iPhone x, well they got into it anyways, and will tell you about how that all worked, as well. Stick around, because here we go.

I guess this first article should not be a big surprise to most people. If you're familiar with the online world, in the least, you've heard of YouTube. I remember interviewing the founder, a young kid, of YouTube years ago. Well, it's become very big. Of course, now it's owned by Google, and it's replaced a lot of online, not not always, excuse me, as replace a lot of TV viewing. We have a lot of people who go online now in classrooms across the country, even. And, maybe even around the world. But, the classrooms are using YouTube. Now, remember when I was a kid and we would watch filmstrips, right now, it may be the occasional movie, they'd bring a projector and I was the guy that always set it up, because that was kind of cool. And, then we got these reel to reel recording machines. It was just really kind of cool. It used video tape. And so you'd string that tape between the reels and do all of that. It was really neat. And you edited it, just like we used to edit the audio where we take a razor blade to the tape and cut it up and tape it back together. We made our own videotapes. Yeah, that was just so cool. Later years of school for that one. But, now YouTube is where it's at. We're not watching those films in the classroom, filmstrips, boy, it has is changed. They are using YouTube. And the Generation Z has grown up with YouTube. Now, you might ask who's he was? Well, you know, the millennials, and then you had Generation X. And then Generation Y, and generations. Y name Y's name that became millennials. So, Y is millennials and now of course after y comes z. These are students that are the ages of 14 to 23, right now. So, they are getting into college, maybe even getting out of college and into high school. And, they're finding that Generation Z students preferred to learn from YouTube, versus books. Millennials like to learn a little bit more from textbooks and Generation Z it's down. So, it used to be 60% of millennials. Well, in fact, it still is preferred textbooks now, Generation Z, 60% of them prefer YouTube online. Now is not something, YouTube launched in 2005. So, most of these Gen Z kids grew up with it. 85% of teenagers say they use you to more than any other social platform. That's kind of interesting to. I don't know, there's anything terribly scary about this certainly a shift, I think it might be a shift in the right direction. Since now, you can get so much great information online on YouTube. You know why why not use it, frankly,

if you're a business, you probably have a server, a file server, we were helping them in fact, just this week as small accountancy firm, they have a few accountants, they have a Microsoft server in the middle of all of this, and they have all of their accountants data on that server, right. And they're trying to keep it safe. So, what did they do to keep it safe, they went ahead and they put VMware, which is really quite advanced for most small companies. But, it's a phenomenal tool if you use it, right. Of course, they weren't using it quite right. But they, they had an encrypted desk. So, the thinking was, wow, you know, we, when we boot our machine, even though it's in the VM infrastructure, we still have to give it the key in order for to boots, therefore, all of our data is safe. And, of course, we went in, and we did an analysis for them risk analysis, and we told them, okay, well, here's what we found, you're keeping your windows up to date, they're using Windows 10, and they have the professional versions, and they have auto updates turned on, which everybody should do. But none of your other applications were kept up to date. So, there are tons of potential security holes, there. And just encrypting the hard disk is not going to protect the data on it. Unless your server stolen, physically stolen,

What are the likelihood of that happening, right? It could happen, but it's not very likely. So, how do the bad guys get into these machines? And we discussed that a little bit with him. And there are a lot of routes in. Well, this route in just came out on Thursday morning, Bloomberg was reporting this. And that's kind of the amazing part. But, wow, wow, wow, wow. Chinese spies have reached almost 30 US companies here, including the big guys Amazon Apple, and it could be a lot more than 30. And, what they've done is they've compromised the technology supply chain. So, for instance, when we go into a place, right, we're going to a business we're trying to help the business and how do we help them? What's the best way to help the business out? Well, first off, we do a risk analysis, try and figure out if the data was lost, what would the risk be? What would their exposure be? And what do they need to protect, here ultimately, in order to keep their business safe? I think that makes sense. So, you go through this whole process, then you figure out, Okay, what are our priorities? What do we actually have to keep safe? And then how do we keep all of that safe. So, those servers are made by a few different companies, one of the biggest companies out there has been having some serious problems, for a while. And ,we've used their servers for a long time the company's name is Supermicro. And, it was founded by a Taiwanese guy, it's based in the US, out in California, they do all of their designs out there. They make these machines that are used for servers around the world. It can be a Windows Server could be a Unix server, it could be doing almost anything, for almost any company. But what appears to have happened here, and we're still waiting to hear confirmations from various companies. But, this is as Bloomberg is reporting it. They're saying back in 2015, Amazon began quietly evaluating a company called elemental technologies as a potential acquisition. They're trying to help with an expansion of a streaming video service. It's now called amazon prime video. So, elemental made software for compressing these massive video files, like the movies and TV shows that are part of amazon prime video. And getting them for different ready for different devices, and that's called transcoding. Well, it was kind of interesting, when they started doing the research, they found a course they done the work for the Olympic Games, which is pretty impressive, making sure all of that goes around. They've done stuff for the International Space Station. They had drone footage for the CIA that have been funneled over there. So, it's kind of cool. And it turned out of course, because of the drone footage elemental had some national security contracts. Well, it was really interesting, not going to go into a lot of details here. But Supermicro computer. A company we've used for years, apparently, had been infiltrated. At least one of their suppliers had been. Nesting on some of these servers motherboards that Amazon examined apparently was a tiny microchip. Not much bigger than grain of rice. And it was not part of the boards original design. Apparently they hid it inside the PC board itself, the printed circuit board right inside it, it's just nuts. These elemental servers can be found inside the Department of defense network, CIA drone operations, onboard networks, for Navy ships and elemental was one of hundreds of companies that use these Supermicro computers. So, they had a top secret probe, that still open apparently after more than three years. But, it determined that the chips allowed the attackers, to create a stealth doorway into any network that included any of these altered machines. Absolutely phenomenal here. So, an interesting article, you'll find it up on my website, along with all of the articles for today, of course, Craig Peterson.com , make sure you visit me online. Be glad to see you, there. But this is scary, because we have now, bad guys altering the guts of the computers. Oh, by the way, who were the bad guys, kind of looks like it was the People's Liberation Army. And not only did they find the chip, they found what the chip did, how it embedded itself. And in fact, it was sending traffic out, that the companies, in this case, Amazon and Apple, just weren't expecting to go out. So, both companies apparently have had a little program in place, quietly replacing all the SuperMicro Machines, but are denying in fact that they have them at least so far. We'll see where that ends up at.

Well, let's move on to the best password advice. This is one of the top questions people have asked me, we have a special report dive prepared on passwords. And if you want a copy of it, and you want to know how to properly generate and maintain your passwords, I've got some emails, you have some of the top password programs out there password managers and things, you can just go ahead and text me let me know my direct text number, its toll free 855-385-5553. Of course, you might have text rates or data rates that you might have to pay, but I'm not going to charge ya, 855-385-5553 and just ask for my password special report. Be glad to send it to you.

But a few years back, and NIST which is the National Institute of Standards and technologies, they submitted some, digital identity guidelines. In other words, these are the guys in the government that come up with the password advice. And they had some new recommended password policies that were frankly running parties, contrary to decades of previous advice out there. And then that's shall they said, instead of having these long, complex, frequently changing passwords, you should do something different, because they found that if you have long and complex and frequently changing passwords, companies were at greater risk, because it increases the odds that people will reuse those hard to remember passwords and multiple unrelated security domains. Okay, so the compromise of one domain or one machine can more easily lead to another. So, what's NIST saying now? Well, they've got more than two decades of compromises, backing them up, they've captured logged on credentials, logged on credentials, as well. Otherwise unrelated security documents and domains. They've cruised the dark web out there to find out what's going on. It's almost impossible to count the number of compromise that have happened. But it's easy enough to look at the passwords. And here's what their guidelines are, keep them easily remembered, use multiple words. Most of our passwords nowadays are three or four words randomly chosen, and some combination with some special characters in there as well. But none of the major computer security regulations or guidelines, including HIPAA, SOX, PCI, NERC and CIS are recommending the newer password policy advice, after years now, since NIST came out with this new advice. So, should you obey the HIPAA policies if your small medical practice or the NIST guidelines, I think you'd be on pretty good footing, but you might want to talk to your lawyer frankly. But I think you'd be on pretty good footing if what you decided to do was follow the NIST guidelines, it's going to be easier for your employees. They are going to have better passwords and you are guaranteed to have better security.

Alright, well, back in the "Can they unlock them or not category" we're going to talk about the feds and an iPhone x. Well, this is a huge problem, frankly, for well, bad guys. And it might be a bad problem for yo, too if you are trying to keep your information safe. Because, ultimately, if the Feds can get that information, maybe the bad guys can, as well. And that's obviously something you don't want to have happen. So, an iPhone x is different than many of these other phones that we've had in the past in that it has the ability to use your face, right? So, you just hold it up and it recognizes your face and then unlocks. Well, we know that some courts have upheld that they can force you to give your fingerprints, right that you have to give your fingerprints they are taken anyways, when you go ahead and you are arrested, right when you're in jail, or maybe not quite in jail. But in the police station. Well, how about your face? Do you have the right to keep your face private to keep it I don't know, safe, whatever you might want to call it that kind of the bottom line question here. What can you do in order to keep your iPhone 10 locked or locked, I should say? Well, there's another investigation that Forbes had come up with here recently about a child abuse case. And Forbes, was was able to uncover the first known case in which law enforcement used Apple face ID facial recognition to open a suspects iPhone. That by the way, is by any police agency anywhere in the world. They did a bunch of research to try and figure out, Are the police doing this? Can they force you to? This happened in August, it was an FBI search of a 28-year-olds home in Columbus, Ohio. And that month, he was also charged with receiving and possessing child pornography. So, they went in with a search warrant, and this federal investigator told him to put his face in front of the phone, which he did. And that allowed the agent to pick through his online chats, his photos, whatever else he deemed worthy of investigation. So, this is a pretty significant moment here. Where we're talking about whether law enforcement can or should, be able to force you, frankly, to be able to unlock your phone to unlock your device.

We'll see we'll see what happened. We still have two companies that are saying that they can unlock all iPhones, including the iPhone 10.
It's a device, here that costs 15 to $30,000, that they can buy in order to break into iPhones. see GreyKey and the other Yeah, the other one Cellebrite. So, now facekeys been used for the same purpose, We'll see what happens using a person's face as evidence or to obtain evidence is normally considered lawful. How about when it's used to unlock something? We'll keep an eye on this for you will let you know what ends up happening, as we go forward. And of course, as the case progresses.

This week, and it was something interesting happened has never happened before. Because it's never existed before. I was on a phone conversation. And right in the middle of that conversation, my phone came up with an alert. Did you get that alert? This is part of the Federal Emergency Management Agency, and they put a whole new service in play. And, it's called FEMA's new wireless Emergency Alert System. Some people didn't want to get the message. But they got it any way. Steve was on a phone call at the time. And while he's on the phone call, of course, what ends up happening, this alert goes off. And the guy on the other end of the line also had the alert go off. So, that's a bit of an issue, right? Having that alert go off in the middle of a phone call. So, not only did the alert go off, but in on top of it all, it cut off the phone conversation now didn't hang up. But the audio from that phone conversation stopped for about two seconds, while he was on that phone call. Well, some people got it. And there wasn't a warning that went out before. I don't know if you heard that they were going to do this. I certainly did. But four staffers at Wired magazine, who published an article about this, did not get the alert at all. And they were all on major carriers. I was on T-Mobile at the time. Verizon and T Mobile both had users that did not receive that alert. So, this is a whole new tech, we've never really had this before. Brand new phones insome cases didn't get the message, others did. And that's why you run a test. I just like, remember in Hawaii last year, before President Trump was able to stop North Korea from sending all of these missiles over Hawaii

In Hawaii last year, they accidentally sent out an alert. In fact, they I think they even sound at all of the sirens, air raid sirens and everything else. Well, you don't know if it's going to work unless you try it. So they tried it. And, the whole idea is to improve the warning delivery. So, if there is something major about to happen, you just might get an alert, you should also be getting them if you're in an area that may have a flash flood warning or some severe storm activity. I've gotten them before, that's controlled, in most cases, by the state's themselves. So, the state's decide what they want to send out. What they're not going to send out. And, this case is the only one I know of where the feds have tried to send something out. And they can, by the way, they can send these things to just individual localities. So, there's a tornado that hit as it's moving, they can send out warnings, tornado, you probably know it's it's on your doorstep. But that's usually done by the states. And who knows what the feds can use it for. So, you may have gotten that this week. You may not have gotten it, this week. But I think it's kind of cool. It's a good use of our cell phones for emergency presidential alerts.

So next up, we've got a phishing warning. Now we've talked about phishing. This is the pH fishing. And this is a very big problem. And it's it's huge, and the hugeness of it I think will become pretty apparent to you here shortly.

But this is where an email comes in, and it looks legit. Now as part of my webinar series I'm doing right now. And in fact, you can even watch the replays. Still, if you're interested, just let me know I'm doing free webinars for small businesses, telling them some of the secrets here behind small business cybersecurity, things that need to be aware of, and things I can do to fix the problem ultimately. So, it's continuing on this week, we'll have a couple more sessions. So you can just email me at Craig Peterson dot com here if your interested, But part of what we covered was the anatomy of an attack. And when we're talking about this type of attack, you know, most people, this is different. Most people think of, oh, there's a hacker and they're sitting there and they're trying different passwords, and they're trying software that's cracking their way into our organization. No. In most cases, that's not how an attack happens. And we're talking about a huge attack vector. The FBI says that $12 billion dollars has been stolen from businesses using this type of an attack. That's, that's a huge deal. I'm very, very big deal. It's not theoretical either. So, the Department of Justice just published some documents, and it's showing how email played a key role in the 2014 Sony Pictures breach, remember that one. Remember the hack of the DNC, the Democratic National Committee, where they said the Russians hacked them. It wasn't hack, either. It was this type of email phishing that was happening. And it only takes one of these malicious phishing attacks, to destroy a small business. And about 50% of small businesses find that if, if that small businesses hacked if they lose their customers data that in about half of the cases their customers don't want to do business with them anymore. So, that's a pretty, pretty big deal. So, researchers are out there, here's a stat that's going to surprise you, over a half a billion emails were examined by researchers over at Fire Eye they're looking at emails that were sent just the first six months of this year, isn't that amazing? A half a billion emails they have access to. And they found that 1% one in 100 emails
were out right malicious. Now, we're not talking about regular spam, where someone's trying to get you to buy this special pump, that's going to help you out right, we're talking about malicious, nasty email. The whole goal of these things was compromising a user or network. And when you get rid of the spam from that pool, so in other words, when you consider all of the messages that weren't spam, only one third of emails were considered clean. So, two thirds of non-spam emails, were malicious in nature. So, we're talking about a huge problem, a problem that can absolutely kill your business. And, that this isn't just true for businesses, right? This is true for individuals in their homes and everything else because you get email too, not just businesses, 10% of these are blocked, typically. 90% of them don't involve malware in the initial attack. And with my training I'm doing this week I'm showing you how exactly it happened. I walk through a woman who is doing exactly that. And she is not using malware, she is not using viruses, she's not using ransomware to get her nastiness into the businesses networks. So we walked through I'll show you exactly how it happens. Be careful this is a brand new article it's on from ZD net and it's up on my website as are all of the articles today, that we're talking about. Quick hit here before we run out of time today. Voice fishing is becoming even more prevalent than ever has before. Its easy to forget that we have got scam artists out there, but they're using your your voicemail. To fool you up, here's a sample of female voice explaining the credit union, to block phony looking charges in Ohio made to his debit ATM card. And, then she read him the last four digits of the card. It he pulled out this card from the wallet it was the correct last four digits. So she he told the lady need to replacement card immediately because he was going to travel out of state without missing a beat. The caller said he could keep us card and the credit union would simply block any future charges, that weren't made in either Oregon or California. Okay, so this struck that guy's a little off and a little research happened. So, be careful of phone calls. You never know. They may or may not be legit

Hackers, here they got into British Airways defenses and they got behind the doors. They disclosed British Airways, a little bit about what happened. But, we're talking about a data breach impacting information from roughly 400,000 bookings that were made just 400,000 over the course of about month. Three weeks, actually, it's crazy. So, names, addresses, email, sensitive information, pay card details, it looks like even some passport information was all compromised. Why? Well, because they had a problem on their website. This page that was compromised, hadn't been modified since December 2012. So, we're to the wise of your business person. And if you have a website and you are not maintaining it properly, or applying patches to it, making sure its using the latest, greatest code, you could have your information stolen. And, like British Airways, and so many other businesses lose customers. Because remember what I said the latest stat 47% of people will not do business with any business that has had a compromise. So that's frankly, I think that's a big deal. There's a lesson to be learned there for all of us. So thanks for joining us today. Again, if you want some more information, make sure you sign up for my webinar. It's you're going to be coming in in the middle because this is a webinar series but you'll find it right on my homepage at Craig Peterson dot com, this is free, no credit card for registration, right. I'm not I'm not stealing your money from you. But I can going through explaining this stuff and how it applies to small business. Because small businesses, they are the backbone of our economy. They are the job creators in this country. We need to make sure they're protected. And frankly, they are amongst the least protected of everyone out there. Well, with the exception of homes and in most cases homes, then you might benefit from this, as well. But we're really talking about small businesses, I really hope that somebody's going to come up with a great solution for homes. But still, the costs are too high. I'm unable to get them down for small businesses. But as far as homes go there, they're still not in the right price range. But at least all of this wonderful code and software that's been available for the fortune 500 companies for all these years, is now available through small businesses or for small businesses I should say through us. So, anyways, this is all free. I'm trying to help, you're going to learn a lot. You can take the replays of the previous sessions, if you'd like to, and you can ask some questions, you can get on as we have a couple more sessions this week. I'll be holding more webinars as time goes on. But Craig Peterson dot com register right there. I'm not a spammer. I'm not going to sell your information. Anyways, have a have a great week and we'll chat again next week. Bye-bye.

 ---

Related articles:

Feds Force Suspect To Unlock An Apple iPhone X With Their Face

The Big Hack: How China Used A Tiny Chip To Infiltrate Major U.S. Companies

Why Didn’t I Get an Emergency Presidential Alert Text?

PHISHING WARNING: One In Every One Hundred Emails Is Now A Hacking Attempt

YouTube Is Replacing Textbooks In Classrooms Across America

How Hackers Slipped By British Airways' Defenses

Voice Phishing Scams Are Getting More Clever

The Best Password Advice Right Now

---

More stories and tech updates at:

www.craigpeterson.com

Don't miss an episode from Craig. Subscribe and give us a rating:

www.craigpeterson.com/itunes

Message Input:

Message #techtalk

Follow me on Twitter for the latest in tech at:

www.twitter.com/craigpeterson

For questions, call or text:

855-385-5553