Easy Prey

With the 2020 elections right around the corner, do you know who is trying to influence you and how they're doing it? Listen on to learn about the ins and outs of disinformation, misinformation, interference, and influence.

Morgan Wright is an internationally recognized expert on cybersecurity strategy, cyberterrorism, and advanced technology. His landmark testimony before Congress on healthcare.gov changed how the government collected personally identifiable information. He has made hundreds of appearances on national news - radio, print, and web - and has spoken to audiences around the world.

• [1:21] - Morgan Wright shares his background, including his childhood in a military family and his original college major as music. He moved into law enforcement and then shifted in computer crime.
• [3:26] - Morgan moved into cybercrime because of his interest in both people and technology.
• [4:40] - On 9/11, Morgan was supposed to be in the Pentagon but was in the Reagan building instead. Because of the attacks on 9/11, he was thrown into cyberterrorism as well.
• [6:11] - Morgan also worked for Cisco and was the technical advisor for the show America's Most Wanted.
• [7:35] - Another facet of Morgan's career is even working on cold case homicide files.
• [8:36] - The next generation of leadership needs to be educated in technology. Every company is a software company whether you like it or not.
• [10:36] - Disinformation is information that is intentionally changed to achieve a particular objective. The person spreading the information knows it isn't true, but wants to incite public outrage against someone.
• [11:06] - Misinformation is when someone hears something and believes it to be correct and shares it, to then later find out that it wasn't accurate information.
• [11:40] - Twitter was monitored to see how quickly disinformation and misinformation spread and it spread faster than legitimate truthful news.
• [12:23] - Russia has been targeting people's biases by spreading disinformation since 1917 and they understand how to take advantage of how a system works.
• [14:56] - The real danger is when people or organizations understand how news spreads and take advantage of these algorithms to influence major decisions, events, and even human lives.
• [16:42] - Chris and Morgan discuss Pizzagate as an example of spreading disinformation and misinformation and how the use of social media spreads it extremely fast.
• [17:35] - Interference is a sovereignty issue. Morgan gives an example of how interference is even considered an act of war in some places.
• [17:59] - The United States has spent a great deal of money in the influence field.
• [18:58] - Influence is a massive social engineering operation.
• [21:03] - Disinformation runs so deep that sometimes even trained professionals miss it.
• [21:52] - You do not have to react to every single post you see. Take a moment to digest what you are seeing before you react to it as truth.
• [22:44] - Parents have to be vigilant about what their kids see and read on the internet. You need to curate what your kids view and what you yourself view as well.
• [24:08] - It is important for adults to be adults. Even with opposing views, you need to be able to be an adult and have a respectful conversation with others.
• [25:13] - It seems that we have lost the ability to get things done with others who have opposing views.
• [27:31] - It is a capital mistake to theorize before one has all the data. What happens is you twist facts to fit theories instead of twisting theories to fit the facts.
• [28:13] - Nobody wants to do their own research. They just want information spoon fed to them.
• [29:31] - The danger of conspiracy theories is that you are fed just enough kernels of truth to make it believable.
• [32:00] - Chris and Morgan discuss a few 9/11 conspiracy theories and why it is easier to believe them than to believe the truth.
• [33:47] - If you listen to the news, don't believe a thing you hear. Do your own independent research before you share something on social media.
• [35:00] - The oxygen this disinformation and influence operation needs to spread is you. It's you clicking that link and sharing it.

Thanks for joining us on Easy Prey. Be sure to subscribe to our podcast on iTunes and leave a nice review.

• Podcast Web Page
• Facebook Page
• whatismyipaddress.com
• Easy Prey on Instagram
• Easy Prey on Twitter
• Easy Prey on LinkedIn
• Easy Prey on YouTube
• Easy Prey on Pinterest
• Morgan Wright Web Page
• Morgan Wright on LinkedIn
• Morgan Wright on Twitter

With more and more dating moving online, how do we separate real honest people from those who are misrepresenting themselves and the outright scammers? Our guest today is Kezia Noble. Kezia is a leading female dating and attraction expert for men and author of the bestselling book The Noble Art of Seducing Women.

Kezia's company helps clients learn conversation skills and ways to overcome anxiety in dating situations. Starting in 2009, she has since become a YouTube sensation. She and her team have helped over 100,000 men to overcome a multitude of sticking points and limiting beliefs, and open their eyes to the skills, techniques, insights, and secrets needed to be successful in dating. She joins us today to talk about red flags on dating apps and how you can protect yourself from potential scammers.

• [0:31] - Kezia is a Dating and Attraction Expert for men. She's been in this field for a decade and runs worldwide workshops.
• [1:10] - Kezia helps guys with their anxiety and builds confidence in being themselves when dating.
• [2:30] - Chris and Kezia discuss the impact Coronavirus has had on dating. Kezia is in the UK and there are fewer restrictions there now so people are back on the dating scene.
• [4:05] - Kezia shares the differences in men and women as targets on dating apps. It is easier to target men on dating apps than women.
• [4:30] - If a man suddenly receives many messages from a woman who is outrageously beautiful, it could be a red flag.
• [5:10] - Kezia doesn't use online dating because of the ease people have in lying online.
• [6:11] - Pay attention to the messages. Are they offering you everything you want to hear? Are they avoiding an in-person meeting?
• [7:00] - Love bombing is an attempt to influence a person by excessive attention and affection. This happens a lot with online dating.
• [8:01] - When creating your profiles, you should be cautious when posting that you are looking for a serious relationship because it makes you appear vulnerable and more of a target for scammers.
• [9:42] - Kezia creates a scenario of what she would do if she were a scammer and how some scammers can be very clever.
• [11:28] - Chris shares a story about a previous guest who is a man in his 60's who has seen his photo being used as a dating app scam.
• [12:50] - If you have any inkling that someone you are messaging on a dating app is a scammer, Kezia recommends to drop a hint that you don't have money and see what their reaction is.
• [15:22] - Another trick is to reverse look-up a photo from a dating app. Download the person's photo and search for it. If it shows up a lot as a stock photograph or shows up with a lot of different names, it is a red flag.
• [16:09] - There have been situations of celebrities using dating apps and people don't believe that they are actually who they say they are.
• [17:27] - You should always be careful because people exaggerate online easily. This is also apparent on Instagram photos.
• [19:06] - Even if you sit there and think that you won't be scammed, if you are in a desperate situation, you'll convince yourself to believe something.
• [20:18] - The biggest red flag is when someone will never meet up in person with you.
• [22:17] - One simple rule to live by is to never lend money to anyone you have never met.
• [25:09] - Kezia is the type of person who is very vigilant and looks for signs of danger everywhere. This is mostly due to Kezia's job to notice behaviors.
• [26:17] - In Kezia's experience, there are awful and dangerous people on dating apps, but they are in the minority. Kezia says that most people on dating apps are perfectly lovely people who are there for the right reasons.
• [27:56] - Kezia personally does not use dating apps because she feels it is a time waster. She shares how friends of hers are exhausted from dating and that's not how it should be.
• [30:01] - Chris and Kezia discuss how curated social media is, specifically Instagram. Kezia doesn't want to waste the time posing and setting up photos that aren't authentic.
• [31:38] - Social media ten years ago was a fun platform to share photos, but now social media has changed into a curated and exaggerated pretense.
• [33:10] - Kezia believes social media is toxic because people are constantly fighting to appear perfect.
• [34:12] - Social media is highly linked to dating. It sets up these unrealistic expectations.
• [35:03] - Kezia believes that people are even staying in unhappy marriages for social media purposes. Their online life is too important to them.
• [38:04] - The biggest red flag is if the potential scammer avoids meeting you in person. People question this by thinking, "What if they really are too busy?" Kezia argues that if that is the reality, then your relationship with this person is also too busy to have a real relationship with you.
• [39:54] - Kezia's business helps clients learn conversation skills and learn how to look for the right person. Commonalities breed friendships but connections breed attraction.

Thanks for joining us on Easy Prey. Be sure to subscribe to our podcast on iTunes and leave a nice review.

• Podcast Web Page
• Facebook Page
• whatismyipaddress.com
• Easy Prey on Instagram
• Easy Prey on Twitter
• Easy Prey on LinkedIn
• Easy Prey on YouTube
• Easy Prey on Pinterest
• Kezia Noble Web Page
• Kezia Noble on Twitter
• Kezia Noble on Instagram
• Kezia Noble on YouTube
• Kezia Noble on Facebook
• The Noble Art of Seducing Women by Kezia Noble

Have you ever received calls either at work or at home where the caller wants you to verify some information about yourself or someone else in the company? This could just be someone updating their records or it could be the start of social engineering.

Our guest today is Jack Rhysider. Jack is the host of the podcast DarkNet Diaries: True Stories From the Dark Side of the Internet. His podcast is about hackers, breaches, shadow government activity, hacktivism, cybercrime, and all things that dwell on the hidden part of the net.

• [0:45] - Jack originally went to college to study computer engineering and wound up getting a job managing firewalls for many different clients. In that time, he went to conferences and listened to podcasts to learn about the different types of hacking.
• [1:40] - DarkNet Diaries is a podcast of telling the stories behind hackers and different situations.
• [2:15] - Jack explains how social engineering started decades ago where a man traveled around selling things he didn't own.
• [3:31] - Today's social engineering is more about conning people within a company in order to gain access to data.
• [4:44] - Jack breaks down the levels of people within a company and why everyone is a target for specific reasons.
• [5:00] - Phishing is all about sending a link to someone to click that is harmful. When a phishing email is sent to a CEO, it is called Whaling.
• [7:27] - Even the nightly cleaning crew could be a target for social engineering.
• [7:58] - Individuals could also be hacked, especially if they use bitcoin or other form of value.
• [9:29] - There is a difference between phishing and spear phishing. Phishing is a lot of the time random, but spear phishing is when the hacker takes the time to get to know their target.
• [11:29] - People are the weakest link but are unintentionally the weakest link. But on the other hand, people who are aware and trained are often the strongest link in protecting companies from social engineering attempts.
• [12:28] - Oftentimes social engineering attempts are time sensitive, so if you get an unusual call or email that is pushing you to act on something very quickly, that is a red flag.
• [14:10] - If you get a call that you are unsure of, hang up and call the people they claim to be directly to verify their identity.
• [16:02] - Jack recommends you also make sure you keep everything updated, like apps on your phone, your operating systems on your phone and computer, etc.
• [16:37] - Jack also recommends using a password manager on your computer which gives you a long crazy password and remembers it. These passwords are very difficult to crack.
• [17:44] - The harder you make it to hack your information, the more resources it would take for a hacker to gain access. They will give up and move on.
• [18:05] - One of the biggest issues with social media is the amount of information people are giving out for free that make them vulnerable.
• [20:18] - Jack shares a story about how Sarah Palin was hacked simply because the answers to some of her security questions were public knowledge online.
• [21:10] - Two factors authorization is a must and Jack also recommends you take steps to secure your email addresses.
• [23:42] - In Gmail, there is a way to see what IP addresses have accessed your email.
• [25:50] - Jack shares a story about how he was targeted as a teenager buying a camera on eBay.
• [27:04] - Past experiences are great lessons to learn about how to use the internet safely.
• [29:00] - Anything that is outside of the norm, like paying a bill with a different credit card, purchasing gift cards to pay for something, or wiring money through Western Union are all big red flags.
• [29:45] - There is a huge criminal market in India that is targeting individual people, specifically elderly people.
• [31:49] - This type of awareness is the first level of security for yourself.
• [33:29] - Chris and Jack discuss the most recent issue of hackers using stimulus check reasons to gain information.
• [34:12] - Another recent scam is a man spamming ex-drug addicts pretending to sell pharmaceuticals to tempt them into sending money to him.
• [37:32] - Jack's podcast DarkNet Diaries covers stories from victims, law enforcement involved in cases, and even from the criminals themselves.

Thanks for joining us on Easy Prey. Be sure to subscribe to our podcast on iTunes and leave a nice review.

• Podcast Web Page
• Facebook Page
• whatismyipaddress.com
• Easy Prey on Instagram
• Easy Prey on Twitter
• Easy Prey on LinkedIn
• Easy Prey on YouTube
• Easy Prey on Pinterest
• DarkNet Diaries Web Page
• DarkNet Diaries on Twitter
• Jack Rhysider on Twitter

If your reputation or the reputation of your business gets trashed online, it can have a lasting impact. But there are things that you can do today to limit the impact of negative online statements about you and some of them are easier than you might expect.

Our guest today is Chris Silver Smith. Chris is the CEO of Argent Media, a marketing agency focused heavily on reputation management where Chris helps people clean up their reputations in search engines. Chris has also served as an expert witness in defamation lawsuits in state and federal court. In his long time column at Search Engine Land, he has advocated for reputation victims.

• [1:00] - Chris started his career in internet marketing and designing. He also worked for Verizon for many years and eventually made his way into researching and developing SEO (search engine optimization).
• [2:28] - After working for Verizon, he moved on to working for SEO companies and became intrigued by reputation management which was predicted to be fast-growing.
• [3:37] - Reputation management is compelling to Chris because of the personal stories that get involved with it.
• [4:20] - Reputation management could mean helping companies whose CEOs may have made a social media mistake or even smaller companies who have negative reviews.
• [5:48] - Chris shares a story about a CEO who was accused of many things by an escort and truly had not done the things he was accused of.
• [6:50] - Sometimes the bad reputation is because of actual unwise decisions that people have made.
• [7:35] - Chris says that his most memorable personal case was a porn revenge situation who was a trafficking victim. Chris wound up working as an expert witness for free.
• [9:30] - The woman did eventually get away from her harasser and he followed through with his threats of ruining her reputation. But she won the lawsuit and felt that her negative reputation was completely created by her harasser.
• [10:40] - There are more common reputation management cases that Chris has seen several times, such as college or high school students getting in trouble with the police.
• [11:21] - When I say reputation management, usually that means something bad appears when you google someone's name.
• [12:33] - Chris has dealt many times with fake mugshot sites that post mugshots and charge a fee for people to take them down.
• [13:45] - After Google de-optimized these mugshot sites, it is easier to take these posts down with Chris's help.
• [15:39] - There's so much out there and it is so easy to defame people on the internet.
• [17:11] - Chris references the story of the sex trafficking victim to answer how some of these reputation management victims don't care about the money. They really want their reputation cleared and prove that the accusations are false.
• [20:10] - People who have had their reputation damaged or attacked often have a really severe emotional response to it and are referred to counseling.
• [21:20] - People are surprised at how easy it is for their reputation to suddenly become tarnished.
• [22:24] - It is important to know the difference between your public persona and a private one and curate what you put up publicly. Maintaining this can come in handy when your reputation is attacked.
• [23:34] - Chris shares a story about a competitor who purchased the domain name for his new business and how he was able to amicably solve the problem.
• [26:04] - A strong online presence is a good idea. You should have a personal website and periodically Google your name.
• [26:50] - Chris recommends using Tumblr, Flickr, and YouTube under your name that could help create an online presence that would show up in the search results.
• [28:31] - Even informal stuff is great for basic SEO. Use your name as often as you can.
• [29:00] - It may feel like you're overhyping yourself, but that's optimization. Search engines work off text.
• [30:02] - Facebook is great because you can have a personal page for friends and family but can simultaneously have a business page.
• [31:47] - Chris shares many examples of common mistakes people make when video and audio is being recorded.
• [32:50] - Remember that every single thing you do publicly now is likely to be recorded and can be uploaded either on purpose or accidentally.
• [33:10] - Chris shares a story of employees who were connected to a man who ran a cult. They disclosed it and moved on.
• [35:02] - Chris's wife's name is Karen and now there are many memes and negativity surrounding the name.
• [36:51] - There are quite a few businesses out there that accidentally get sucked into the news because of their names when they really have no connection. Chris calls this name collision.
• [38:39] - There is a cost with fixing a damaged reputation and sometimes it is less costly to change names and move on.
• [39:47] - Chris has worked cases with restaurant chains that has actually resulted in some policy change within the companies.
• [42:32] - It is better to get ahead of the curve if you can.
• [43:40] - It is good to go ahead and claim your name for a personal webpage and on social media in case you ever need it. Prepare and protect your reputation upfront instead of fixing it later on.

Thanks for joining us on Easy Prey. Be sure to subscribe to our podcast on iTunes and leave a nice review.

• Podcast Web Page
• Facebook Page
• whatismyipaddress.com
• Easy Prey on Instagram
• Easy Prey on Twitter
• Easy Prey on LinkedIn
• Easy Prey on YouTube
• Easy Prey on Pinterest
• Chris Silver Smith on Twitter
• Argent Media
• Search Engine Land
• Chris Silver Smith on LinkedIn
• Chris Silver Smith Web Page

Conspiracy theories are all crazy, right? Well, maybe not. There's some history as to why so many people believe in them. What we really need is a conspiracy theory detection kit and that's what we have in today's episode.

Our guest today is Dr. Michael Shermer. Dr. Shermer is the founding publisher of Skeptic Magazine, the host of the Science Salon Podcast, and a presidential fellow at Chapman University where he teaches Skepticism 101. For 18 years he was a monthly columnist for Scientific American. He is the New York Times bestselling author of Why People Believe Weird Things and his latest book is Giving the Devil His Due: Reflections of a Scientific Humanist.

• [1:40] - Dr. Shermer's magazine is called Skeptic Magazine which is devoted to teaching critical thinking skepticism and scientific reasoning.
• [2:03] - None of us are omniscient. We can't know anything with certainty. Most of the decisions we make in life are made with uncertainty. So how best should we best make decisions?
• [2:39] - For centuries, we have developed methods, tools, and technology to help us with this problem of uncertainty.
• [4:47] - Finding the cause of something has many variables and once you start getting into economics and politics, things get messy.
• [5:50] - It is important to separate the correlation between seemingly cause and effect relationships. Dr. Shermer uses the fraudulent connection between vaccines and autism to demonstrate.
• [7:48] - The curse of knowledge is the Hindsight Bias. After the fact, it is clear what should have been done, but at the time it wasn't clear. Dr. Shermer shares several great historical events as examples of this.
• [9:27] - There's let something happen on purpose and make something happen on purpose and it is unfair to place blame on others using the Hindsight Bias.
• [11:40] - There is a difference between conspiracy and conspiracy theory. A conspiracy is something that actually happened and a conspiracy theory is the idea that there is something that is happening.
• [12:08] - The main reason people believe conspiracy theories are true is because many shocking conspiracies have actually happened. They are not so far out of the realm of possibility.
• [12:55] - It is not completely crazy to think that something will happen because historically something similar has happened. Dr. Shermer uses examples from the Kennedy administration.
• [14:49] - Another reason people are quick to believe conspiracy theories is because of the messiness of the world. Our brains are wired to try to simplify things.
• [15:39] - Money is a proxy for power and a lot of people believe that these people who have power are actually more powerful than they are. For example, Bill Gates is the center of some conspiracy theories, but in reality, what power does he actually have?
• [16:10] - This is not unreasonable for people to believe because there have been powerful people with money who have rigged the system.
• [16:58] - It is easier to believe that horrific things that happen in the world are controlled by a small group of people. This is an example of the human brain trying to simplify things.
• [17:17] - The fact is, nobody is running the world. And in a way, that is scary.
• [18:27] - The more people that have to be involved, the less likely the conspiracy is true. People don't typically keep secrets and have big mouths.
• [19:56] - Dr. Shermer uses a 9/11 conspiracy theory as an example of how crazy the theory sounds due to its complexity.
• [21:05] - Some conspiracy theories are harmless, but many can be harmful.
• [22:40] - An example of a dangerous conspiracy theory is the one surrounding Hitler's rise to power. Hitler's initial platform was spreading the conspiracy theory that the only reason they lost the first world war was because they were stabbed in the back by the Jewish community.
• [23:25] - People are very confused about the term freedom. You have to give up certain freedoms for security.
• [24:54] - The United States and Italy are examples of countries with a loose culture. This means that they are not rigidly following guidelines and the spread of COVID-19 is rapid in nations like this.
• [27:12] - Chris and Dr. Shermer discuss the title of Dr. Shermer's new book Giving the Devil His Due which was inspired by the play A Man For All Seasons by Robert Bolt.
• [29:12] - The book is a series of essays on the theme of free speech.
• [29:27] - The only way to make sure you haven't gone off the rails and believe things that aren't true is to interact with people who think differently from you. This gets you out of a bubble and gives you a better ability to make your own decisions and form your own opinions.
• [29:58] - Dr. Shermer is concerned about the lack of diversity in ideas and opinions within politics.
• [31:00] - The new book has had mostly positive reviews.
• [32:12] - Even scientists need critical review. This helps us determine if we should be skeptical.
• [33:27] - It is important to know and understand the arguments behind a differing opinion from your own.
• [35:04] - Dr. Shermer predicts that there will be many changes and feels that this is not always a bad thing. Some changes will be good and bad.
• [38:01] - Dr. Shermer offers tons of free content on his website and also offers courses for more information. You can find them in the links and resources.

Thanks for joining us on Easy Prey. Be sure to subscribe to our podcast on iTunes and leave a nice review.

• Podcast Web Page
• Facebook Page
• whatismyipaddress.com
• Easy Prey on Instagram
• Easy Prey on Twitter
• Easy Prey on LinkedIn
• Easy Prey on YouTube
• Easy Prey on Pinterest
• Michael Shermer Web Page
• Skeptic Salon Podcast
• Skeptic Magazine
• Why People Believe Weird Things by Michael Shermer
• Giving the Devil His Due: Reflections of a Scientific Humanist by Michael Shermer
• Michael Shermer on Facebook
• Michael Shermer on Twitter
• Skeptic Magazine on YouTube

Long gone are the days of companies giving away coolers on college campuses when students would sign up for high-interest credit cards. Unfortunately, there are still sneaky promotions, fine print, and ways these companies take advantage of unsuspecting customers.

Our guest today is Sara Rathner. Sara is a NerdWallet travel and credit cards expert. She appeared on the Today Show, Nasdaq, and CNBC's Nightly Business Report and has been quoted in Yahoo Finance, Time, Business Insider, and MarketWatch. She's held a total of 23 credit cards using travel reward points to see the world on a budget. A proud Northwestern University alum, she also has a certificate in financial planning from Boston University. She's here today to talk about personal finance scams and how to manage your credit cards.

• [1:40] - Sara's passion is personal finance and people reach out to her to ask questions. She really wants finances to be empowering and not scary.
• [3:04] - Chris remembers the days when he was in college seeing booths of credit card companies setting college students up with credit cards. Sara explains the Card Act that changed the law to protect young adults.
• [4:31] - There are times when your credit limit can really help you in a bind.
• [5:10] - Sara recommends everyone read the fine print of every credit card you apply for, even though it is not enjoyable to do so. You can find all this information before you even fill out an application.
• [6:06] - You want to find a card that provides greater value than its annual cost. You want to find a card that has rewards that you will actually redeem and use.
• [6:32] - The credit card industry is seeing a lot of change due to the pandemic.
• [7:29] - Sara explains how revolving credit accounts work and where credit card balances can get dicey.
• [9:14] - If you pay your credit card bills every month rather than the minimum payment, you won't deal with interest.
• [10:00] - Chris shares an experience of reading the fine print on a store credit card application that claimed to be interest-free for the first 12 months. Sara confirms how that works and cautions people to know that fine print.
• [12:30] - Interest rates are negotiable to an extent.
• [13:11] - Missing a payment is huge. Many cards have late fees and a late payment could hit your credit score by 100 points or more overnight.
• [14:05] - The thing that you need or want now is great, but if it causes you long term financial struggle, oftentimes it wasn't worth it in the first place.
• [15:23] - Sara recommends for those really large purchases to save up money rather than taking on the stress of debt if you can.
• [16:30] - There are a lot of recent scams, specifically small business loans and unemployment insurance, that are popping up after the pandemic caused people to lose their job and reliable income.
• [19:05] - Sara recommends going directly to the government agencies that offer financial assistance during this time and never to go to an outside source no matter how legitimate they appear.
• [20:58] - Sara shares an experience with a credit card company contacting her about a problem with her account and asked her for her credit card number to verify. She refused and called the number on the back of her card to make sure.
• [23:13] - Any time you are trying to buy and sell items on platforms like Craigslist and Facebook Marketplace, be very careful because there are scams there, too.
• [26:07] - It is much more important to be careful and seem paranoid than take a risk. You're dealing with strangers so their opinion doesn't matter.
• [28:06] - Chris and Sara discuss sketchy ways scammers try to snag you. But there are legitimate credit repair resources online and many of them are free. NerdWallet is an excellent resource.
• [29:49] - It takes a few months for positive behaviors to show up on your credit reports, so if you stick with it you will be rewarded.
• [30:27] - NerdWallet is your financial best friend that has tons of great articles and calculators. Check out the app and website.
• [31:01] - Sara shares her most valuable piece of advice for those who think they have been a victim of a scam, including a website to report potential scams.

Thanks for joining us on Easy Prey. Be sure to subscribe to our podcast on iTunes and leave a nice review.

• Podcast Web Page
• Facebook Page
• whatismyipaddress.com
• Easy Prey on Instagram
• Easy Prey on Twitter
• Easy Prey on LinkedIn
• Easy Prey on YouTube
• Easy Prey on Pinterest
• Sara Rathner on NerdWallet
• Sara Rathner on Twitter
• NerdWallet on Twitter
• NerdWallet Web Page
• NerdWallet on Facebook
• NerdWallet on Instagram
• Report a Potential Scam

To what extremes are you willing to go for complete privacy and security? No one takes privacy as seriously as today's guest, John McAfee.

John McAfee is known for founding McAfee Antivirus, being a crypto currency evangelist and a privacy activist. In this episode, John shares the lengths he goes to protect his own privacy with significant unexpected costs. John lives and plays by his own rules and this interview is no exception. If you are sensitive to profanity, I suggest that you head over to EasyPrey.com/26 for a clean transcript.

Listen on to find out how John maintains his extremely private lifestyle.

• [1:12] - John McAfee begins explaining the precautions he takes to keep his privacy safe by stating that he and his wife do not own cell phones.
• [1:39] - Even with a brand new mobile phone, when you call just three people, a government could find you and John explains how cell phones are susceptible to spyware.
• [2:05] - John also explains that he lives in a faraday cage, which blocks signals from coming in and out of the room. It is also sound proof.
• [2:52] - John also has a very serious VPN that goes through 9 different countries to ensure his privacy.
• [4:41] - While on trips and vacations, John and his wife take many pictures but don't post them immediately. This keeps people guessing where they actually are at any given time.
• [5:42] - John also adds bogus information to photos that are posted, like varying dates.
• [7:19] - Chris asks John how he feels about Tor and John explains that it was infiltrated by the CIA so it isn't possible to have any privacy or anonymity.
• [9:13] - If it is advertised at all, it is something that is owned by somebody and there is no privacy there.
• [10:09] - John explains that the only secure email out there is Google and it is also not very secure either.
• [10:37] - Google never trusts anybody. As long as they get their money, they're happy and they'll give you what privacy they can, given the constraints of reality.
• [10:58] - If you want any privacy at all, there's no way to do that other than Gmail.
• [11:40] - John explains that he does not have a bank account or credit cards. He strictly uses cryptocurrency only, including large purchases like homes and cars.
• [12:50] - He is also particular on what cryptocurrency he uses and does not suggest using large or older companies like Bitcoin.
• [14:07] - Bitcoin specifically is easily tracked and can be followed.
• [15:00] - The newer cryptocurrency companies are much better about keeping your information safe and private.
• [17:54] - John explains how when moving from country to country, he has multiple legal passports.
• [19:56] - Because he is frequently recognized when he's with his wife, they split up when traveling and meet up later. He wears hats, hoodies, various glasses, and due to Covid-19, masks.
• [21:40] - John also makes sure to lie to his friends and family as well so that his location at any given time is not revealed.
• [24:01] - John explains how the costs of good privacy are very steep.
• [25:06] - How important is this level of privacy to the average person? John doesn't advise this lifestyle for anybody. But for John and his wife Janice, it is critical.
• [25:50] - Striking a balance is tough, specifically if you own a smartphone.
• [27:45] - All this possible tracking done by smart phones is granted access by the actual user. You sign up to be spied on.
• [29:21] - John feels that he has to live the way he does in order to not be silenced by government agencies who don't want him spreading what he knows to be the truth.
• [31:50] - John founded his computer security company by understanding the reality of the world.
• [34:04] - When asked about Julian Assange, John says, "A hero is someone capable of accomplishing." John says Assange and Snowden are both very smart but were not prepared.
• [35:41] - John has been arrested 21 times in 11 different countries but because of how he chooses to live in private seclusion, he is free to speak out.

Thanks for joining us on Easy Prey. Be sure to subscribe to our podcast on iTunes and leave a nice review.

• Podcast Web Page
• Facebook Page
• whatismyipaddress.com
• Easy Prey on Instagram
• Easy Prey on Twitter
• Easy Prey on LinkedIn
• Easy Prey on YouTube
• Easy Prey on Pinterest
• John McAfee on Twitter

Twenty years ago, cybersecurity was something that only nerds talked about. Now cybersecurity has gone mainstream. Listen in as we talk about common scams, the recent Twitter hack, and organized crime with Graham Cluley from The Smashing Security Podcast.

Graham Cluley has been working in the computer security industry since the early 1990's. He was in senior roles with Sophos and McAfee. In 2011, he was inducted into the Infosecurity Europe Hall of Fame. Graham runs his own award-winning computer security blog and hosts the Smashing Security Podcast which has been a successful cybersecurity podcast since 2016.

Join us as we discuss cybersecurity threats both past and present and learn more about how to protect yourself, your business, and your loved ones.

• [1:00] - Graham shares how he started in the cybersecurity business as a poor college student who created Shareware games. Someone sent him a package with a job offer with an anti-virus company.
• [2:46] - When Graham began working, there were about 200 new computer viruses per month and had to send out anti-virus updates through the mail on a floppy disk.
• [3:27] - Today there are literally hundreds of thousands of new pieces of malware being written everyday. In the blink of an eye there's more than one new piece of malware released.
• [4:01] - We see much more organized crime and state sponsored cybercrime these days.
• [5:59] - Back in the day, hackers tended to be young people writing malware to show off. But now, malware is harder to detect because they don't want to be detected.
• [7:45] - Graham shares a story about The New York Times being targeted and hacked. Hackers were able to see articles and information as they were being drafted, including information on secret informants.
• [9:05] - Don't be too complacent and assume that you won't ever be targeted due to lack of interest in your company. Hackers may not be interested in your company, but may be interested in your suppliers or customers.
• [10:35] - Business email compromise scams are when hackers get into a business email account and can see correspondence. They then can jump into the thread and can pose as an employee or contractor to receive funds. Businesses have lost millions to this scam.
• [11:50] - You can have all the defenses in place, all the layers of security, and all the patches in place, but you can't patch the human brain.
• [13:40] - Email compromise scams are very simple but successful and a huge threat.
• [14:51] - Have a procedure set up where it is okay to say no to senior management so when a scam email comes through suggesting a break to a rule, an employee can say no and avoid a problem.
• [16:31] - Graham and Chris discuss the recent bitcoin Twitter hack, which included big name accounts like Barack Obama and Bill Gates.
• [18:39] - The Twitter hackers social engineered people by emailing them posing as a Twitter IT department member. They convinced them to type their information into a fake site that appeared to be Twitter and while doing so, the hackers gained access to their real accounts.
• [20:19] - Similar to the recent Twitter hacks, scammers have been known to pose as your bank and gain access to your accounts.
• [22:28] - The saddest part about cybercrime is the effect it has had on average people becoming petrified of learning new technology.
• [23:44] - Graham recommends products like iPads or Chromebooks for basic computer use because they are more locked down. Although there are still risks, these are great options.
• [25:21] - Because of new Covid-19 websites, anti-virus companies were being notified of suspicious behavior because the websites were so new.
• [27:32] - Short Twitter names are more likely to be targeted than the more difficult long ones.
• [28:48] - Graham explains the problem of organized cybercrime that produces targeted attacks through malware designed to steal data from their targeted company.
• [30:32] - Garmin was targeted by an organized cybercrime entity called Evil Corp and they were ransomed for ten million dollars.
• [32:05] - Evil Corp is led by Maksim V. Yakubets in Russia.
• [35:40] - VPN companies can be created and run by organized cybercrime entities.
• [36:31] - There are situations where using a VPN is fine, such as using one to access streaming content.
• [38:40] - If you're in your home and you trust your internet service provider, you won't need to use a VPN.
• [39:33] - Graham says to stay abreast of security news and listen to Smashing Security. It is a lighthearted take on cybersecurity.

Thanks for joining us on Easy Prey. Be sure to subscribe to our podcast on iTunes and leave a nice review.

• Podcast Web Page
• Facebook Page
• whatismyipaddress.com
• Easy Prey on Instagram
• Easy Prey on Twitter
• Easy Prey on LinkedIn
• Easy Prey on YouTube
• Easy Prey on Pinterest
• Graham Cluley Web Page
• Smashing Security Podcast
• Graham Cluley on Twitter
• Graham Cluley on YouTube
• Graham Cluley - Naked Security by Sophos
• Infosecurity Europe Hall of Fame

Due to the coronavirus pandemic, we've rapidly changed the way we work, how we play, and how we're educated. This sudden shift leaves us and our families exposed to privacy and security risks we previously hadn't thought about or planned for. Listen up for any blindspots you might have.

Our guest today is Rebecca Herold. Rebecca, also known as The Privacy Professor, has over 25 years of experience in system engineering, information security privacy, and compliance. She has authored 19 books with the 20th on its way. She has been a member of the NIST CyberSecurity IOT Development Team, and was an adjunct professor for Norwich University's Masters of Science in Information and Security and Assurance Program for 9 years. Today she will share with us her experiences with privacy and security and will also share things for you to keep in mind when using various apps and services.

• [1:06] - Rebecca started out as a systems engineer in 1988 and around 1990 got into system security and established security systems for banks.
• [3:50] - Rebecca created her own consulting company and began teaching as an adjunct professor at Norwich University. Her adjunct professor position helped her learn even more about the practicality and various needs in security.
• [6:40] - When you have a career in which you use technology that is constantly changing, it keeps things interesting. Rebecca has had to constantly adapt and learn.
• [7:20] - Risks don't go away. You just accumulate new ones that you have to keep addressing. That's something that many security and privacy practitioners forget. They keep up to date on new risks but sometimes forget the existing ones.
• [9:32] - Privacy tends to be an afterthought and we need to shift our thinking to start setting up security and privacy controls from the beginning.
• [12:30] - Throughout the COVID-19 pandemic, Rebecca has gotten a lot of questions from business owners regarding their employees and how to gain information on them to remain safe and help manage their self-insured expenses.
• [13:40] - Some business owners are trying to bypass doctors and healthcare professionals because they are self-insured. They also want to know where their employees have been to avoid them coming in with COVID-19. These are huge privacy issues.
• [16:24] - "COVID tracker apps" may be used by business owners to try to avoid their insurance rates going up. These examples show the problem with tracker apps not being used transparently.
• [17:01] - There are hundreds of these COVID tracking apps and some were built with privacy and security integrated but many were not.
• [18:24] - Always think about apps and what data they might be collecting.
• [19:23] - Rebecca gives examples of apps asking for information that is unnecessary for tracking COVID-19, such as your exact date of birth.
• [21:42] - There are situations where apps are being portrayed and communicated to users that privacy and security are built in, however a lot of privacy features have been overlooked.
• [22:22] - We need to get this pandemic under control and have insights, but we don't want to create other problems. There has to be a balance. What can we do to track this but keep people's privacy safe?
• [23:35] - Always ask yourself why is this information necessary when signing up for various apps and websites.
• [26:62] - If people are asking you for information and it's not necessary for the purpose in which you are using a service or product, you don't have to give it to them.
• [29:20] - Social media has a long way to go. They've been around a while, but they have to be the "latest and the greatest" to stay in business.
• [30:33] - With so many people working from home right now, people don't realize that their home environment is much different than the private and secure environment in the workplace.
• [31:40] - Zoom became the go-to site for online education and business meetings, but meetings are not always secure.
• [34:00] - Because you're participating in a meeting from home, other people involved can see the inside or outside of your home and may use that information maliciously.
• [35:40] - Rebecca shares examples of smart toys and apps being used maliciously.
• [37:50] - In your workplace, there are security measures in place and IT professionals available to make sure things are working smoothly. But that isn't the case at home.
• [39:01] - Part of Rebecca's job is to find open access points to demonstrate to clients how this information can be used.
• [41:10] - Rebecca shares the possibility of people accessing baby monitors and home security cameras through open access points.
• [42:39] - With remote learning going on, teachers and students need to have some basic training on privacy and security measures such as multi-factor authorization and understanding devices like Amazon Echo.
• [45:06] - Rebecca shares examples of smart toys and devices that are listening and recording data, even though they are advertised to only respond to key words. These types of devices should be shut off when students are learning from home.
• [46:52] - Social engineering is a big concern with online education and parents need to be aware of possibilities and educate their children. This could include strangers coming into contact through an online video conference or even sharing files.
• [48:34] - Privacy and security is a lot for people to learn in a very short period of time.
• [49:24] - The environment your child is learning in from home should be similar to the environment in their classroom. This is applicable to work-from-home environments as well.
• [50:15] - Rebecca shares an experience with the president of a South American country using video footage from the president's son with which people could gather many pieces of private information.
• [51:32] - There's so many possibilities that people don't think about before they naively show where they're at.
• [52:51] - When Rebecca shares herself through a webcam in her home office, she uses privacy screens to prevent people from seeing her home behind her.
• [53:40] - Rebecca recommends keeping your webcam disconnected until you need to use it because some apps are given access to your webcam that you may not realize.
• [54:22] - Taking a little bit of precaution will prevent you from someday saying "Why didn't I just do that?" when faced with a privacy problem.
• [56:09] - Rebecca Herold is currently in the final editing of a new book called Security and Privacy When Working From Home and Traveling, which spans 23 chapters of privacy, security, and compliance risks with real-world examples.

Thanks for joining us on Easy Prey. Be sure to subscribe to our podcast on iTunes and leave a nice review.

• Podcast Web Page
• Facebook Page
• whatismyipaddress.com
• Easy Prey on Instagram
• Easy Prey on Twitter
• Easy Prey on LinkedIn
• Easy Prey on YouTube
• Easy Prey on Pinterest
• Rebecca Herold on Twitter
• Rebecca Herold on LinkedIn
• Privacy Guidance Web Page
• Privacy Security Brainiacs Web Page
• Privacy Professor Blog
• Shodan Search Engine
• NIST - National Institute of Standards and Technology

I'm contacted by people on a regular basis who believe that their devices have been compromised and that they're being stalked and spied on. Sometimes they've misinterpreted what they're looking at but sometimes they are actually being digitally stalked. Find out what to do about it in this episode.

Today's guest is John Bambenek. John is the Vice President of Security Research and Intelligence at ThreatSTOP and the President of Bambenek Consulting where he provides security consulting, penetration testing, forensics, and auditing. He has spoken at numerous security conferences including Black Hat. He has spent 20 years doing investigation work on cybercrime threats.

John is going to go over what Stalkerware is, in what scenarios it is most common, and things we can do to mitigate the harm it can do.

• [1:00] - John Bambenek is the Vice President of Security Research and Intelligence at ThreatSTOP and owns his own company, Bambenek Consulting. He has been working in cybersecurity since college.
• [3:01] - John explains that Stalkerware is a malicious mobile app that is put on your phone to track your movements, monitor who you are talking to, see your texts, and other various activities through your phone.
• [3:26] - Stalkerware is most commonly found in cases of former relationships, but John shares his experience with Stalkerware found on the mobile device of an assassinated politician in South America.
• [4:39] - Odds are, if there is Stalkerware on your phone or mobile device, that that is not all that is going on. There are usually many signs of abusive or controlling behavior.
• [5:45] - There are also ways that people can be stalked without installing Stalkerware, such as monitoring Instagram and Facebook activity.
• [6:29] - Multiple IP addresses and their locations are often misinterpreted.
• [9:14] - Stalkerware is most commonly installed onto someone's phone by someone who has physical access to it, although remote installation is possible.
• [9:58] - There are also built-in features that can be misused, such as Find My Friends on an iPhone.
• [11:18] - Stalkerware is different from malware that is accidentally downloaded where hackers may have access to a device belonging to someone they don't know. Stalkerware is intentional and usually involves some prior relationship.
• [14:08] - Whenever you can, have a password on your phone that you don't give to someone, multi-factor authentication on accounts and other important logins.
• [14:50] - Multi-factor authentication is a very useful early warning system. John shares an experience he had in another country and how multi-factor authentication helped catch something unusual early on.
• [16:07] - John is a unique case because he wants a device compromised to aid him in his career in security research and shares some stories about his experiences.
• [18:12] - Chris and John discuss devices to bring or not to bring to conferences like Black Hat.
• [21:52] - A factory reset and changing all passwords is largely sufficient in eliminating Stalkerware installed on a phone.
• [24:28] - Once you start getting real-world indication that you are being stalked, establishing a police report is an important next step.
• [25:28] - With effort and with a court order, it may be possible to determine who has installed the Stalkerware on your device if you don't know who it is.
• [26:31] - One thing to keep in mind is when you wipe the phone, you also wipe the evidence.
• [27:13] - Taking down the people who create these Stalkerware malware is more valuable to police and investigators than individual cases of Stalkerware.
• [28:23] - The Coalition Against Stalkerware is a community of activists providing resources to victims and who are trying to figure out what can be done about Stalkerware on a larger scale.
• [29:30] - Language needs to be precise because there are software creators whose intentions are not malicious.
• [31:40] - There are laws that need to be changed and police detectives need to be educated so they can become experts in examining mobile phones.
• [33:00] - John explains that if you give someone access to your phone years ago and then they install Stalkerware on your phone maliciously later, they will not go to jail for it because you gave them permission at some point.
• [34:43] - There are industry coalitions and other groups dedicated to helping victims of stalking, but stalking has been a prevalent behavior in long term documented history.
• [35:27] - There are people who want these tools to monitor and control someone's movements and there are people who want to make money by providing this malware to them.
• [36:01] - There are lots of ways someone can be stalked without the use of Stalkerware. Because of the nature of social media sites like Facebook, we are leaking information all the time that can be watched and used.
• [37:41] - People don't understand the difference between anonymous and private. John gives examples of how this can be a problem.
• [39:10] - To get the benefits of advancing technology, we have to give up something in exchange. These things are not necessarily good or bad, you just need to understand what you're giving up to have this service.
• [40:16] - Every decision has its pros and cons and you have to be mindful of what they are and be okay with that. And sometimes there are ways to mitigate some of those harms.
• [40:40] - John explains the problem with Bluetooth: We have so many devices and it's all or nothing.
• [43:16] - There are many contact tracing apps that are created for a legitimate purpose that can be misused for the purpose of stalking.

Thanks for joining us on Easy Prey. Be sure to subscribe to our podcast on iTunes and leave a nice review.

• Podcast Web Page
• Facebook Page
• whatismyipaddress.com
• Easy Prey on Instagram
• Easy Prey on Twitter
• Easy Prey on LinkedIn
• Easy Prey on YouTube
• Easy Prey on Pinterest
• John Bambenek on Twitter
• John Bambenek on LinkedIn
• ThreatSTOP
• Bambenek Consulting
• Coalition Against Stalkerware