Easy Prey

I've been telling people for years that they need to implement two-factor authentication wherever possible. Now that you've done that, imagine the havoc that would happen if those security codes were sent to somebody else enabling them to access your email, social media accounts, and worse your bank accounts. It is called SIM swapping, porting out, and SIM jacking. Today's guest is Haseeb Awan.

Haseeb is CEO of Efani, American's most secure and private cell phone service. He is an expert at protecting high profile individual cell phone numbers. Haseeb was also co-founder of the first bitcoin ATM company.

Haseeb shares his many experiences with working with SIM swapping. We talk about how we are all at risk and the precautions we can take to avoid becoming a victim of SIM swapping.

• [01:26] - SIM swap, SIM port, SIM hack, and telephone takeover are all the same. SIM swapping is when a criminal takes over your telephone.
• [02:05] - The criminal takes control of your social media accounts or email accounts and then drains your bank account.
• [04:06] - If a person gets your account number, pin number, and telephone number and then the criminal can transfer your phone number.
• [05:36] - Often they go online and buy a new SIM card and trick someone to transfer the number to them.
• [06:51] - Social engineering is as simple as pretending to be someone you are not to gain information maliciously or for fun.
• [08:05] - Telephone companies have the ability to sell, monetize, and track your data.
• [10:47] - If I haven't done anything wrong then why do I need privacy?
• [11:49] - The people that are criminals are working 24/7 to destroy you.
• [13:31] - The average customer is more at risk because they don't take as many precautions.
• [14:41] - Make sure your cell phone carrier supports a pin code at a minimum.
• [16:30] - Whatever setting you have the criminal can override.
• [19:42] - The port lock might help keep your number from being taken to a different carrier, but if they go to your carrier's store it doesn't help at all.
• [19:58] - These criminals only need a few hours to have complete access to everything.
• [20:36] - Often they attack when you are most vulnerable like after 9 PM in the evening.
• [21:16] - You should always use an app-based or hardware key vs. SMS two-factor identification.
• [23:32] - Keep it simple and have a password on your phone and then use the Google authenticator app.
• [24:52] - We often get attacked because we are lazy and put security off until tomorrow.
• [26:22] - Efani focuses on pricing and security.
• [27:18] - Most of their customers are people who don't want their information sold on the internet and want that extra layer of security.
• [28:15] - Doctors are the number one victims of SIM swapping attacks.
• [29:40] - Seniors are at a significantly higher risk.
• [31:19] - It is really easy to forge caller id, so never assume it is a real call.
• [32:25] - Within 90 days you will see a 90% reduction in spam calls with Efani.
• [33:27] - When you have a cell phone plan try not to be on a family plan.
• [33:47] - The two most important numbers in your life are your social security number and your cell phone number and you have way more linked to your cell phone number.
• [34:14] - He suggests getting two telephone numbers. Use one for all authentications and don't give that number out to anyone.
• [34:42] - Keep your cell phone software up to date and don't let children play on your phone.

Thanks for joining us on Easy Prey. Be sure to subscribe to our podcast on iTunes and leave a nice review.

• Podcast Web Page
• Facebook Page
• whatismyipaddress.com
• Easy Prey on Instagram
• Easy Prey on Twitter
• Easy Prey on LinkedIn
• Easy Prey on YouTube
• Easy Prey on Pinterest
• Have I Been Pwned
• Efani
• Haseeb on LinkedIn

Just because someone isn't trying to scam you out of your hard-earned money doesn't mean that they don't see you as a pawn, stepping stone, or a means to an end. Find out how to protect yourself from a narcissist. Our guest today is Dr. Ramani Durvasula.

Dr. Ramani Durvasula is one of the world-leading experts on narcissism. She is a clinical psychologist, professor, best selling author, and speaker. She is on a mission to demystify and dismantle the toxic influence of narcissism on all of our lives.

Dr. Ramani shares her many experiences with working with narcissists. We talk about warning signs and risks for being in a relationship or working for a narcissist. We also talk about how to protect yourself if you are in a relationship or working with a narcissist.

• [00:48] - Dr. Ramani shares how she got involved in psychology.
• [02:55] - The fall out for the people that stay in relationships with narcissists with chronic invalidating was shredding.
• [04:46] - Narcissism is a pattern of a person who lacks empathy, is deeply entitled, arrogant, superficial, and constantly needs validation. They fall apart under criticism or feedback. They get very vindictive or rageful and feel like victims a lot. There is a core self-esteem issue.
• [05:34] - The chilling difference between narcissists and psychopaths is that narcissists do feel remorse. Psychopaths have very little if any remorse.
• [07:03] - Psychopaths are much like some narcissists. They can be charming, intelligent, clever, charismatic, and very confident.
• [08:17] - Sociopaths know the rules, but they still break them. They tend to be more combative and agitated.
• [09:03] - Narcissists are insecure and do feel anxiety and remorse. The psychopath doesn't feel any of those things. They are much calmer and calculated.
• [10:12] - Narcissists give more warning signs because they are so sensitive to criticism of any kind. Psychopaths will lie and they are the ultimate con man.
• [11:05] - Narcissists have huge advantages. They make more money and are more likely to end up in leadership positions.
• [12:28] - Narcissists are motivated to get validation.
• [14:48] - Narcissists win the most with social media because they love attention.
• [16:44] - Narcissists are incredibly hypocritical.
• [18:04] - Being in a relationship or working with a narcissist is very bad for your health. The risks include feeling chronically confused, feeling self-doubt, anxiety, depression, not sleeping, and more.
• [18:45] - These people stay in these relationships because they don't understand that narcissism doesn't change.
• [20:10] - Trauma, neglect, abuse, lack of consistency, and safety can lead to adult narcissism. The other pathway is a person that is over or under indulge.
• [22:02] - At the surface level, narcissists are very engaging, charming, and confident. People are drawn to them. They also have a dismissiveness.
• [23:14] - Narcissists are very entitled and believe that the rules don't apply to them.
• [24:40] - The key is having radical acceptance that they are not going to change and they are a jerk. Once you have radical acceptance you don't personalize it.
• [25:41] - Don't try to fix it and don't believe their false promises.
• [27:10] - Don't engage! There is nothing you can say to them without them getting angry.
• [30:02] - Their ego is so threatened that they have to destroy everything in their way.
• [31:01] - With a narcissist, a big part is figuring out what they need to have to feel like they have won. They want to hurt you, make you feel as bad as they do, and win.
• [33:55] - At a population level, there are more male narcissists than female narcissists. There are still a lot of narcissistic women out there.
• [36:22] - The expression of narcissism can look a little bit different based on gender.
• [37:49] - The vast majority of scammers are psychopaths or narcissists.
• [39:38] - These scammers play on people's vulnerabilities, aspirations, and hope and show no empathy.
• [41:54] - The best predictor of future behavior is past behavior.

Thanks for joining us on Easy Prey. Be sure to subscribe to our podcast on iTunes and leave a nice review.

• Podcast Web Page
• Facebook Page
• whatismyipaddress.com
• Easy Prey on Instagram
• Easy Prey on Twitter
• Easy Prey on LinkedIn
• Easy Prey on YouTube
• Easy Prey on Pinterest
• Have I Been Pwned
• Dr. Ramani's Website
• Should I Stay or Should I Go
• Don't You Know Who I Am
• Dr. Ramani on YouTube
• Dr. Ramani on Instagram

We've all had that random fraudulent charge show up on our credit card and we wonder how did that happen. Do I need to cancel my credit card? Do I need to get a new one? Today we talk about credit card skimming with Scott Schober.

Scott Schober is the president and CEO of Berkeley Varitronics Systems, a 48-year-old leading provider of advanced world-class wireless test and cybersecurity solutions. Scott is a highly sought after author and expert for live security events, media appearances, and commentary on ransomware, wireless threats, drone surveillance hacking, and cybersecurity for consumers and small businesses. He is the author of Hacked Again and Cybersecurity is Everybody's Business.

Scott shares his many experiences about personally being hacked and finally getting the money back. We talk about what you need to know, how to protect yourself, and more.

• [01:02] - Scott shares how he got involved in cybersecurity.
• [02:01] - Cybercriminals want to silence you. They don't want you to share tips or expertise on how to keep companies secure or even individuals. These attacks lead to the creation of his first book, Hacked Again.
• [03:02] - In that process, he learned that there were some fundamental things that they were doing wrong. So he had to relearn and reimplement best practices for the company and himself.
• [03:34] - We should create more secure passwords and not use them across multiple sites.
• [06:14] - Anonymity is extremely powerful in the criminal empire. Criminal gangs often get educated to conduct criminal activity.
• [08:42] - We can now use technology to fight back.
• [10:29] - The challenge is to get the skimmers out before it even happens.
• [12:02] - Follow the money and it usually tells you why things are done or not done.
• [14:12] - Scott uses Apple Pay and Google Wallet when possible.
• [15:22] - When you're at a gas station use cash if you are afraid of a skimmer. Use common sense. If things look like they have been tampered with, use caution.
• [17:17] - The part of the iceberg sticking out of the water is the surface web that we use for searches and purchases. Below is tons of information that don't make a lot of sense to us working at the surface web.
• [19:38] - If you see a small transaction on your credit card ($0.50/$1) it could likely be that it is on the dark web and has been posted to be tested.
• [21:37] - It is hard for law enforcement because this is an attractive way to make money.
• [22:50] - Don't be complacent. Start out by doing best practices across the board in your personal life and business.
• [23:12] - The best thing to do is to add layers of security like multi-factor or two-step authentication.
• [24:29] - Scott doesn't share his actual birthday on social media, because that is one of the critical pieces of information if someone tries to compromise your identity.
• [26:07] - When setting up security questions put a password instead of the actual answer that can be researched about you.
• [27:42] - They discuss the pros and cons of freezing your credit.
• [29:25] - The process and investigation when Scott lost $65,000 took months, but he did finally did get the money back.
• [31:28] - Cybercriminals create fictitious accounts, steal money from multiple people in a bank, and quickly close them out.
• [33:32] - You can do things to prevent it from happening to you.
• [35:49] - You can't be too trusting to anyone. Don't use their means of communication to verify.
• [37:49] - Take a few minutes to question everything. Use caution.
• [40:07] - Many of these scams look very convincing.
• [42:50] - Your better to spend the time and effort upfront securing things then pay for it later.
• [44:04] - A small business owner can do small practical things to protect themselves.

Thanks for joining us on Easy Prey. Be sure to subscribe to our podcast on iTunes and leave a nice review.

• Podcast Web Page
• Facebook Page
• whatismyipaddress.com
• Easy Prey on Instagram
• Easy Prey on Twitter
• Easy Prey on LinkedIn
• Easy Prey on YouTube
• Easy Prey on Pinterest
• Have I Been Pwned
• Berkeley Varitronics Systems
• Scott's Website
• Hacked Again
• Cybersecurity is Everybody's Business

Many of us have seen James Veitch's comedic YouTube videos of him interacting with email scammers. Today's guest shares how he helps real-world victims of those scams and he has participated in taking down criminal enterprises.

Wayne May is the owner of scamsurvivors.com. He began as a scam baiter in 2005 before concentrating and helping the victims of scams. Scam Survivors was created in 2012 by Wayne along with a small group of like-minded volunteers. He has appeared in the media worldwide as well as being a guest speaker at the IDate conferences discussing romance scams.

Wayne shares his many experiences working with email scams, sextortion, and romance scams. We also discuss specific things you can look for when receiving a spammy email and how to research and check it out for yourself. Awareness and education are the keys to helping more people.

• [01:01] - He created the Scam Survivors website fifteen years ago when he was looking for something fun to do.
• [01:52] - He started as a scam baiter and fell into working with romance scammers. People would write to him and ask for his help.
• [02:41] - He went from having fun with scammers to really helping the people who were being scammed or thought they were being scammed.
• [03:57] - When receiving a scammy email a scam baiter would write back and ask for more details instead of deleting the email. Then you can post the information online to warn other people.
• [05:41] - It is important to get the scammer information out there so the public can find it.
• [07:21] - Wayne isn't seeing a lot of new scams. Instead, he is seeing variations of old scams.
• [08:07] - The first step in getting the site taken down is to get as much information as you can from the scammer. He then sends all the information to the hosting company in the hope that they will take down the site.
• [10:41] - Wayne shares about the horrible sextortion situations he has seen.
• [13:39] - Wayne shares other experiences dealing with minors.
• [13:58] - You don't give scammers money.
• [16:57] - He hopes that they have so much success that all the scammers stop. In reality, they hope to get more people involved and educate more people.
• [17:45] - Wayne's site has a forum where you can share spam emails and they will check them out for you.
• [19:08] - They try to get as much information as possible because then they can do more about it. You need their email address, not just their name.
• [20:19] - The emails are often repeated because they are scripts.
• [20:52] - People can do the same checks and searches they do at home.
• [22:02] - One telltale sign is inconsistency in language or grammar.
• [23:01] - As soon as anyone asks for money you know it is a scam.
• [25:17] - He does not use cash baiting because you are not getting the scammers money you are actually getting some other victim's money.
• [26:38] - Wayne has a book called The Stupid Scammer Files where he shares the stupid things that scammers say.
• [27:31] - Wayne shares some examples of stupid things scammers have said.
• [30:15] - If you get these emails, come to their website and post them to help other people that don't realize it is a scam.

Thanks for joining us on Easy Prey. Be sure to subscribe to our podcast on iTunes and leave a nice review.

• Podcast Web Page
• Facebook Page
• whatismyipaddress.com
• Easy Prey on Instagram
• Easy Prey on Twitter
• Easy Prey on LinkedIn
• Easy Prey on YouTube
• Easy Prey on Pinterest
• Have I Been Pwned
• Scam Survivors
• Wayne on LinkedIn
• The Stupid Scammer Files
• Stupid Scammers Website

Accounting doesn't sound like a sexy career choice. How about forensic accounting and getting to work with the FBI and Secret Service? Now that's getting interesting. White-collar crime is typically committed by business or government professionals that engage in fraud, insider trader, embezzlement, or cybercrime. It can destroy companies, individuals, and families. What happens when a murder occurs during these cases?

Richard Brody is a professor and chair of the accounting department at the Anderson School of Management at the University of New Mexico. He is a certified fraud examiner, certified public accountant, and a forensic certified public accountant. He serves as an expert witness and has experience in both civil and criminal cases. He has worked with the U.S. Secret Service, the U.S. Department of Justice, and the New Mexico Attorney General's office.

Rich shares many experiences working in white-collar and red-collar crime. We also discuss ways to help you be more knowledgeable because education is the only solution.

• [01:14] - Rich shares the background on how he got started in white-collar crime.
• [03:14] - He is very proud that he has been able to go out and speak to so many people about white-collar crime.
• [03:57] - Trust no one until you can verify. Use the same standard for interacting online as you do in person.
• [05:02] - White-collar crime includes occupational fraud, embezzlement, and more on the business side and scam artist, identity theft, and romance fraud on the individual side.
• [05:59] - It's not a small number of people that are doing this and it is a huge number of people that have been victimized.
• [06:11] - It is highly profitable and fairly low risk.
• [09:07] - Most people proceed by accepting it as an expensive lesson.
• [10:12] - Filing a police report is an easy thing for a business to do.
• [10:31] - In the area of identity theft, filing a police report will then give you the ability to get free services from the credit reporting agencies.
• [12:10] - One of Rich's goals is educating people. It is all about prevention.
• [13:38] - Without trust, you don't have fraud.
• [14:37] - White-collar crime is something that is considered to be a violation of trust, but it doesn't involve any violence.
• [16:19] - A red-collar criminal is a person who commits a violent and brutal act on a person when they expect that this person can expose their criminal behavior.
• [19:01] - There are many cases where you have the sudden death of a crucial witness in a case. Just because it seems like a suicide, it might not be.
• [19:56] - Sometimes the violent act can actually be against yourself.
• [20:48] - Anytime you have a white-collar crime, the person who is involved in that crime is a potential suicide candidate based on the embarrassment.
• [22:41] - Now scammers are going on social media, collecting personal information, and using that to convince them the scam is a legitimate situation.
• [23:21] - What is even scarier about the red-collar area is that the victim doesn't have to be someone who profited from the situation or is involved in any way.
• [24:53] - There is a misconception that white-collar criminals are not like violent criminals.
• [26:13] - Anybody can become a victim of white-collar crime.
• [26:28] - In the original case that motivated the term itself, the victim knew that something was going on.
• [27:43] - Many red-collar criminals are psychopaths.
• [28:06] - The fraud triangle has the three common elements of fraud.
• [30:01] - Red-collar criminals view killing someone as just as viable as a solution as any other solution.
• [30:51] - We have to deal with the white-collar aspect to prevent the red-collar aspect.
• [33:15] - Rich views this as a service to try to educate people. Education is the only solution to these problems.

Thanks for joining us on Easy Prey. Be sure to subscribe to our podcast on iTunes and leave a nice review.

• Podcast Web Page
• Facebook Page
• whatismyipaddress.com
• Easy Prey on Instagram
• Easy Prey on Twitter
• Easy Prey on LinkedIn
• Easy Prey on YouTube
• Easy Prey on Pinterest
• Have I Been Pwned
• Rich on LinkedIn
• Rich - Fraud Triangle

Have you ever wondered what strange things a digital forensic investigator has to dig through? Listen to this episode to find out.

Our guest for this episode is Jake Moore. Jake Moore is a cybersecurity specialist for ESET, Europe's number one internet security and anti-virus company. Jake previously worked in the police force for 14 years investigating cybercrime in the Digital Forensics Unit and Cyber Crime Team in Dorset. In 2016, he was asked to implement cybersecurity advisers in order to make local communities more aware of ever-increasing cybersecurity threats.

Jake shares many experiences working in digital forensics and cybersecurity. We also discuss simple things you can do to keep cybercriminals away and social media accounts safe.

• [01:05] - Jake shares the background on how he got started in cybersecurity.
• [03:20] - Without an understanding of cybercrime and what they are doing there is a huge chance that these companies are going to end up losing millions of dollars down the line.
• [03:57] - When Chris was in college he was very interested in crime scene investigation and he did a ride-along with a crime scene investigator.
• [06:13] - Jake shares a story about a time he received a laptop as part of a murder investigation.
• [08:37] - In the UK, they have a system for reporting all cybercrimes called Action Fraud.
• [09:53] - Cybercrime and fraud are making up over 50% of crime in the UK.
• [11:03] - Prevention is the best cure.
• [12:31] - Use a password manager. 90% of people are using two or three passwords for everything.
• [13:29] - Jake also suggests turning on two factor or multifactor identification. Every social media and email account offers it.
• [15:14] - If it hasn't happened to them or their nearest and dearest then people think cybersecurity won't happen to them.
• [17:22] - Sometimes in scamming emails they include an old password that they acquired from a data breach.
• [18:39] - Jake likes to make people aware that you can phish people's information.
• [21:04] - Even people with awareness tend to forget about things as soon as something amazing comes along.
• [23:24] - Cybercriminals are very crafty and they are doing their homework.
• [24:34] - They often feed their victims' egos just enough to get them to bite.
• [25:24] - Cybercriminals use urgency as one of the key factors.
• [26:06] - The use of authority is another key factor.
• [28:14] - Always backup your data. This is a good practice for everyone and can be beneficial in many different circumstances.
• [30:31] - It is important to have a local back-up and a cloud back-up.
• [32:01] - Chris has two back-up cloud services and a rotating clone of his hard drive.
• [34:15] - Chris shares a back-up story about a company that he worked for.
• [35:19] - Some people learn the hard way and sometimes that is what it takes.
• [36:46] - It is important to have a place to store your photos and just use your phone for recent photos.
• [37:21] - If Jake's 73-year-old mum can do it then anyone can.
• [39:12] - Sometimes providing more information can almost backfire and trip people up.
• [39:44] - Awareness and education have to go hand and hand.
• [40:36] - The number one rule is never to click on any link in an email.
• [41:02] - Jake's best advice is to do one of the things they talked about today in the podcast.

Thanks for joining us on Easy Prey. Be sure to subscribe to our podcast on iTunes and leave a nice review.

• Podcast Web Page
• Facebook Page
• whatismyipaddress.com
• Easy Prey on Instagram
• Easy Prey on Twitter
• Easy Prey on LinkedIn
• Easy Prey on YouTube
• Easy Prey on Pinterest
• Have I Been Pwned
• Jake's Website
• Jake on Twitter

I have always been curious as to why so many people fall for scams. What are some of the consistent elements that scammers use to hook us? In this episode, we find out. We talk about the different psychological tactics scammers use to successfully scam their victims.

Our guest for this episode is Dr. Stacey Wood. Dr. Wood is a clinical neuropsychologist and full Professor of Psychology at Scripps College in Claremont, California. She is an expert on a number of issues related to neuropsychology including aging, decision making, and capacity issues. Dr. Wood also works on the frontline with fraud victims as a consulting neuropsychologist with Adult Protective Services on cases in Riverside and San Bernardino, California.

Dr. Wood shares her experiences working with scam victims including the psychological tactics she sees scammers using the most. We also discuss red flags and practical tips for helping and talking with parents and grandparents.

• [01:01] - Dr. Wood shares how she got into the psychology aspect of scams and frauds. She has worked with older adults most of her career, and she loves that.
• [03:43] - When you are interviewing scam victims you start to understand the complexity of these scams.
• [04:05] - Dr. Wood goes on calls to interview scam victims and she works with the Elder Abuse Forensic team.
• [05:59] - Scammers use very complex psychological tactics.
• [07:48] - There are certain risk factors among older people that are more common.
• [07:58] - A loss in the past year greatly increases the chance of fraud.
• [08:07] - Cognitive impairment is a huge risk factor in older adults.
• [08:54] - Scammers are like a virus. They change and mutate incredibly quickly. Scammers went from mailing solicitations to older people to phishing emails, robocalls, and now social media.
• [10:06] - When someone suffers a loss it is a huge transition in their life. It can be a loss of a sounding board and create isolation.
• [12:41] - Adult children should initiate conversations with their parents about money because the parents most likely won't do that.
• [13:08] - Dr. Wood suggests adding an adult child to a bank account just for monitoring purposes.
• [15:58] - You have taken care of me and watched over me all these years, now I have to start thinking about laying the groundwork of taking care of you guys as you age.
• [18:30] - Most decisions we make are more impulsive and automatic. We really don't have the resources to dig into every small decision we make during the day.
• [19:57] - When there is scarcity it causes consumers to act more quickly.
• [21:12] - Dr. Wood recommends taking time out or finding a sounding board before making a decision.
• [22:38] - Urgency, scarcity, and authority are all red flags to be watching out for.
• [23:44] - Scammers use the fire hose approach. They target everyone and hope that certain consumers will be in an emotional state or be prime to respond to their solicitation.
• [25:06] - There are three types of reactions by consumers.
• [25:22] - If you are wary about an email at all just delete it.
• [28:48] - Scammers don't care who they cheat.
• [29:54] - When someone is scammed they are often terrified to tell anyone because they are in fear of how they would be perceived and how it would hurt their reputation.
• [31:31] - Scammers often use the psychological tactic of always calling and always being in their life.
• [32:01] - The bad guys only have to get it right once. The good guys have to get it right 100% of the time.
• [32:44] - Having an open family dialogue about these issues is useful. Be more aware in these times of uncertainty.
• [34:54] - Discussing your decisions with your parents may open the door to a broader discussion. It may help to foster a better conversation in general.

Thanks for joining us on Easy Prey. Be sure to subscribe to our podcast on iTunes and leave a nice review.

• Podcast Web Page
• Facebook Page
• whatismyipaddress.com
• Easy Prey on Instagram
• Easy Prey on Twitter
• Easy Prey on LinkedIn
• Easy Prey on YouTube
• Easy Prey on Pinterest
• Have I Been Pwned
• Dr. Stacey Wood's website
• Dr. Wood at Scripps College

Have you ever wondered how hackers find vulnerabilities and how companies can find and fix their own? You will find out today! On average 30,000 new websites are hacked every day.

Our guest for this episode is James Kettle. James is the Director of Research at PortSwigger Web Security where he explores new ways to attack websites and designs and refines vulnerability detection techniques for the Burp Suites scanner.

James shares his hacking experience and hard work helping companies keep their websites secure from all the crazy stuff going on out there. On today's episode, James shares his expertise to help you be more aware of possible red flags and prevention measures to take to protect yourself and your website.

• [00:40] - When James was at university he saw that Google said they would pay anybody that could hack their website. He thought that sounded like fun and spent a huge amount of time doing that.
• [01:02] - Now James works at PortSwigger and researches new techniques to hack websites.
• [01:11] - Bounty programs are where a company wants to make sure their product or website doesn't get hacked by malicious people so they go out and publicly say that anyone is welcome to try and hack their website. If you are successful and you don't do any damage, but you tell them how you did it they will pay you for it and then fix it.
• [03:45] - Pen testing is the classic approach to securing your website where you pay a consultant to spend one or two weeks trying to hack your website.
• [05:14] - It is totally worth it to get that third party view. Developers often can't find problems with their own products.
• [06:13] - If you want to find a vulnerability on a website you need to use an attack technique.
• [07:15] - These days they see a lot of cross-site scripting vulnerabilities and it's the most common one they see.
• [07:37] - One of the most common causes of high impact breaches is access control issues.
• [08:45] - James shares the biggest data breach they were able to do during their testing.
• [10:31] - Try to use a framework whenever possible, because it makes things like sequel injection less likely to happen.
• [11:01] - The standard approach after you make the website is to try to get someone else to look at it.
• [11:27] - With Wordpress, it is very important to keep it up to date, install as few plug-ins as possible, and choose a good password.
• [14:08] - Use as few browser extensions as possible to avoid possible malware issues.
• [15:25] - Most people are not being personally targeted by hackers so the threats that most people need to watch out for are things that can be automated.
• [16:10] - If you are using the same password on multiple websites you are going to get hacked.
• [17:02] - A common misconception is that if you have a strong unique password then it doesn't matter if you reuse it.
• [18:03] - James uses websites with the assumption that all the data I give this website is going to end up public at some point.
• [18:45] - Provide the minimum information possible.
• [20:19] - James shares his all-time favorite story.
• [22:33] - If an entity builds their security around detecting when people are attacking them then running a bug bounty would be harmful because they have no idea who is legitimate or hostile. If your website is on the internet, it is being attacked.
• [23:35] - When you are being attacked, it is important to know that it most likely isn't personal.

Thanks for joining us on Easy Prey. Be sure to subscribe to our podcast on iTunes and leave a nice review.

• Podcast Web Page
• Facebook Page
• whatismyipaddress.com
• Easy Prey on Instagram
• Easy Prey on Twitter
• Easy Prey on LinkedIn
• Easy Prey on YouTube
• Easy Prey on Pinterest
• Have I Been Pwned
• PortSwigger
• Burp Suite
• Web Security Academy
• BurpSuite on Twitter

You have probably heard of multi-level marketing also called MLM or network marketing. A multi-level marketing company is a company that recruits people to sell their products to their network including their friends and family. Network marketers typically buy inventory and then try to sell it. They can also recruit people underneath them and create a triangular shape in which they can collect commissions on the people underneath them who are also making sales.

Casey Bond is a certified personal finance counselor and a lifestyle reporter for Huff Post covering money, home, and living. Her work has also appeared on Business Insider, Yahoo! Finance, MSN, The Motley Fool, U.S. News & World Report, Forbes, TheStreet, and more. Casey has been reporting on MLM's for the past year.

The big question many people wonder is if multi-level marketing is a great business opportunity or an opportunity to lose thousands. On today's episode, Casey shares her expertise to help you make the decision that is right for you and help you beware of possible red flags.

• [01:13] - A multi-level marketing company is a company that recruits people to sell their products to their friends and family and their network. It is also called network marketing or direct selling.
• [01:29] - They typically buy inventory and then try to sell it. They can also recruit people underneath them and create a triangular shape in which they can collect commissions on the people underneath them who are also making sales.
• [02:14] - You will find a wide range of products offered including everything from kitchen knives to insurance products.
• [02:23] - Most multi-level marketing companies sell products that are traditionally marketed towards women.
• [04:06] - These days the gig economy is huge. One-third of adults are involved in the gig economy somehow.
• [05:02] - It is often presented as a way to make a ton of money in your spare time, and be able to win vacations, cars, and extra products. That is usually the case for a small percentage of people involved in MLM's who usually got in very early and built a huge downline.
• [05:41] - The key for being successful in an MLM is not necessarily making a lot of sales, but instead recruiting a lot of people underneath you.
• [06:37] - A big red flag is having to buy your inventory upfront.
• [08:10] - Another big red flag is when the initial details of this opportunity are vague or coming from someone you don't know very well.
• [09:40] - MLM's really play into the emotional side of people who would really like to have something of their own and who would really like to become more financially independent.
• [10:39] - The FTC watches and keeps an eye on the MLM industry.
• [12:14] - Illegal pyramids schemes do operate legally until they are caught.
• [12:50] - The Direct Selling Association oversees all MLM and direct selling companies.
• [13:48] - Casey is very hesitant to recommend multi-level marketing to anyone because it is so easy to get in a hole with debt or overspending when there are so many other ways to make extra income.
• [14:28] - It's best to go out and create something for yourself instead of relying on an MLM.
• [14:52] - The FTC does have an option on their website to report companies that are operating questionably.
• [15:46] - Working for an MLM can put strains on relationships and friendships.

Thanks for joining us on Easy Prey. Be sure to subscribe to our podcast on iTunes and leave a nice review.

• Podcast Web Page
• Facebook Page
• whatismyipaddress.com
• Easy Prey on Instagram
• Easy Prey on Twitter
• Easy Prey on LinkedIn
• Easy Prey on YouTube
• Easy Prey on Pinterest
• Huff Post
• Casey on Huff Post
• Casey Lynn Bond on Twitter

Workplace bullying and violence seldom happens in a vacuum but rather are led up to with warning signs and events. In this episode, I talk with Timothy Dimoff about workplace bullying and violence. Workplace bullying is usually not physical, but it is ongoing. We talk about steps you can take if you are a victim of workplace bullying and ways to prevent it from the very beginning.

Timothy Dimoff is president of SACS Consulting and Investigative Services, a high-risk HR and security consulting and investigation firm. As a nationally recognized expert in high-risk security and human resources, he is a sought after consultant, speaker, media commentator, and expert witness. Timothy has more than 40 years of experience in law enforcement, corporate security, and consulting.

We talk about workplace bullying and violence and exactly what they are and the difference between the two. We specifically discuss what types of behaviors to look out for, things you can do to limit these behaviors, and how you can protect yourself from emotional and physical violence. Timothy shares steps you can take if you are a victim of workplace bullying or violence.

• [00:48] - Timothy's first career was 20 years in law enforcement at an Akron, Ohio police department, and then the federal task force.
• [02:04] - His career has been rewarding because he has been able to take everything he has been taught in both careers and apply it toward a positive.
• [02:34] - The low-level workplace bullying is intimidation. People go out of their way to embarrass, intimidate, or degrade someone to get themselves to a higher level, promotion, or even just look better.
• [03:21] - Higher-level workplace bullying is when somebody that really just has a higher level of anger or dislike for someone and they really want to go out of their way to damage them in some way. It could be physical, but a lot of times it is just mental or social.
• [04:05] - You need to watch out for someone setting up and presenting you as somebody that you're not.
• [05:18] - Human nature is simple. Where you get your reaction is where you continue and the severity increases. Try and downplay anything that happens especially in the beginning stages.
• [06:50] - Bullying is defined by one major thing. It is an ongoing continuous off and on type of action.
• [07:39] - You should be logging what is going on with the date, time, what they said, and what they did.
• [09:47] - About a third of the accusations that happen they discover are false.
• [10:27] - It is very difficult for companies to investigate these types of cases internally by themselves. Using an outside company sets the tone that this type of behavior will not be tolerated.
• [12:49] - If the bullying goes unanswered by management it can turn into workplace violence.
• [14:50] - Sometimes employers terminate an employee and get some pretty strong messages of aggression or potential retaliation. Once you have any kind of termination and there is an indication of these things you need to put some precautionary measures in place.
• [17:02] - SACS has a threat response team that they deploy out to boost security, research the potential perpetrator, assess their level of anger and aggression, monitor them, and figure out how to track them and defuse them down.
• [18:32] - As a society, we are showing more aggression as an answer to disagreements. Many people think that it is a proper reaction and they have a right to respond that way.
• [19:23] - Sports, politics, and other types of events and debates can get very aggressive, mean, and attacking.
• [19:48] - Timothy's number one suggestion for any employee that feels uncomfortable or unsafe is logging the instances. That gets more effective results than anything else they can do.
• [20:16] - What if it's the owner of the company that is treating their employees this way?
• [22:37] - If you are having problems with your direct supervisor then you take your complaints to the CFO, HR person, or another supervisor you respect and ask if they can help you.
• [23:12] - Bullying is not just between employee and employee. A supervisor has a distinct advantage to use their level against an employee in the wrong way.
• [24:05] - SACS Consulting works with both companies and individuals. Most companies call them to objectively find the truth.
• [26:37] -SACS Consulting will work with companies if they want to find and live with the truth.

Thanks for joining us on Easy Prey. Be sure to subscribe to our podcast on iTunes and leave a nice review.

• Podcast Web Page
• Facebook Page
• whatismyipaddress.com
• Easy Prey on Instagram
• Easy Prey on Twitter
• Easy Prey on LinkedIn
• Easy Prey on YouTube
• Easy Prey on Pinterest
• SACS Consulting and Investigative Services
• SACS Consulting on Facebook
• SACS Consulting on Twitter
• SACS Consulting on LinkedIn
• SACS Consulting on YouTube
• Timothy's Website
• Timothy on Facebook
• Timothy on Twitter
• Timothy on LinkedIn
• Timothy on YouTube