Episode Transcript
Available transcripts are automatically generated. Complete accuracy is not guaranteed.
Speaker 1 (00:00):
Six thirty one fifty five Kercity talk station Happy Friday,
(00:02):
always made well. The information may not make you happy,
but it's valuable. Interest it dot Com is where you
find Dave Hatter and tech Friday. You can find Dave
online get the resources he used in support of his
comments on this segment at LinkedIn dot com to search
for Dave. How do you find He's got his substack
list and he'll tell you all about it in full detail.
Dave Hatter, welcome back in a very happy Friday to you,
(00:23):
and thank you to interest it your company for sponsoring
this segment. Business Career says you guys are the best
in the business when it comes to business computer needs.
Could you have you back on sir?
Speaker 2 (00:32):
Always my pleasure, Brian. I look forward to it each week.
Speaker 1 (00:35):
Uh, people have lost billions to social media scams, consistent
with literally everything you've told us every week for the
past couple of years their Dave.
Speaker 2 (00:44):
Yeah, yeah, unfortunately, Brian. You know, I always hate to
be the bear or bad news, but I think it's
good to get some external validation of this sort of thing,
you know, I do. We'll talk about this stuff a lot.
I do a lot of in person presentations on this,
and you know, talk to to medium and small businesses,
and I fully understand why people don't believe the doom.
(01:05):
I understand why people don't want to think about this stuff.
I mean, I get it right, But I think it's
important for folks to be able to go out and
see these government agencies that are collecting data about these
incidents and attacks and threats and such that are out there.
Because it's one thing to go to Microsoft or Google
or any of these big tech companies who are ultimately
(01:26):
trying to sell you something. You know, It's it's another
thing to come talk to someone like me who ultimately,
at the end of the day, is trying to sell
you something. Right, But the FTC is not trying to
sell you anything. Nor is the FBI. And you know
there are two agencies that roll up a lot of
this data. So in this FTC report, you know, the
FBI every year, and we've talked about it many times,
(01:46):
puts out a report. Maybe we'll talk about that one
next week because it goes into a lot more detail
than this. This is focused exclusively on social media. But
just think about this for a second. Billions of dollars
just in social media a loon. You know, they're saying
over two point one billion, and I need to remind
folks that's just what was reported. Yeah, you know a
(02:07):
lot of these crimes are not there's no requirement to
report them, especially if you're an individual. I saw an
FBI agent. There's there's an agent organization called Infraguard. It's
a public private partnership with the FBI and people like me,
companies like Intrust and other companies around town. There's a
Cincinnati chapter. In fact, one of my colleagues runs it.
And the whole idea is just information sharing, trying to
(02:30):
share with the FBI what we're seeing, trying to hear
from the FBI what they're seeing. Strong focus on critical infrastructure,
which you and I talk about all the time, And
I saw an FBI agent at one of these events
say they believe that only maybe ten to twenty percent
of all the actual crime that's happened is ever reported
to them. So my point, yeah, my point, even with
this FTC thing, Brian, is that you know, at two
(02:52):
point one billion dollars for one year, they say an
eight x increase since twenty twenty. That's just what they
know about so I can guarantee you the number is
a lot larger. And the point I'm trying to get
to is folks need to be skeptical. They need to
understand that social media is nothing more than a giant
channel for bad guys to get in to get to you. Right,
(03:14):
most of the criminals conducting this fraud are not super
technical wizards. They're not the Elon Musks of cybercrime, if
you will, They're con artists who are using technology to
get to you and steal your money. And if I
can get on Facebook and find, you know, several billion
users or TikTok, Instagram, fill in the blank, even things
(03:36):
I wouldn't personally think of as much as social media discord, Reddit, Slack,
even video games. Right, there are hundreds of thousands, millions,
possibly billions of people in these virtual spaces. If I
can get in there, create a fake profile, pretend to
be someone else, whether it's a romance scam, which continue
to be one of the top ways people lose money,
(03:58):
or it's a hey, I made a bunch of money
bitcoin or gold or whatever it is. Right, they're connors.
They'll say whatever they need to say. Yeah, they'll they'll
learn about you through your profile and the things you're
posting online. They might you know, see look at your friends,
and then create a fake profile as one of your
so called friends that you don't really know. The point
(04:18):
being they're professional on artists using social media to reach
you and then unfortunately scam you, as this article.
Speaker 1 (04:25):
Points out, you know, Dave, and one thing that just
popped on my head this is this is like a
televangelists on steroids. You know, there's people that build people.
Oh you need to send in you know, X amount
of money for Jesus or whatever, and you know, you
find out that they're just spending on a lavish lifestyles.
It doesn't go to help people at all. This is
like that just exponentially increased. The net that you cast
(04:52):
is so much wider with billions of people in the world.
What do you need some fraction of a percentage point
to make yourself millions of dollars? That's what it comes
down to.
Speaker 2 (05:00):
That's exactly right, Brian. And it says in here most
of these scams that they again that were reported, it's
not all scams. They don't know about all scams.
Speaker 1 (05:06):
That's why I thought the religious minded out there because
they probably wouldn't want to reveal that they have been
ripped off with some religious scam going on out there.
Exercise and abundance of caution.
Speaker 2 (05:17):
Yes, And I just remind folks, even though I get
that it might be embarrassing if you fall and prey
to one of these scams, it is valuable for you
to report it to the FTC or the FBI. Maybe
it's some novel new approach they haven't seen before. They
can warrant about it. Plus it gives them more accurate
statistics to help paint a stronger picture of what's really
happening out there. But if you read this FTC article again,
(05:38):
I'll post it on my substack and link it from
LinkedIn and acts and such. You know, they talk about
some of the main types of scams out there. They
say that Facebook is by far the biggest mechanism for
the scams that were reported, but it's it's everywhere, it's
all the platforms. So yeah, folks, be skeptical that soulmate
you found on Facebook or TikTok or whatever that seems
(05:59):
to know everything about you and like has all the
same interests as you. Well, that may be because they
see everything you've posted, and they're just turning the dials,
you know, based on what they know about you to
create that rapport and relationship.
Speaker 1 (06:10):
Don't go away. Modern headphones tracking more than just music,
and I know kidding Dave had her on that next
first butt overmotors cautation. Thanks to interest it dot com
for bringing Dave Hatter here. I'm thinking about Theresey morning
Shore every week to talk tech. Oh I laugh when
I saw this one. No kidding, Modern headphones tracking more
than just music, Dave. Internet of Things maybe, Ah.
Speaker 2 (06:32):
Well, Brian, as you know, I'm not a huge fan
of the Internet of Things. You talk about this all
the time. Yeah, And for what it's worth, I created
a separate substack where all I'm doing now is just
collecting articles like this so people can see for themselves
that when you hear me talk about why you don't
want a room to sweeper or some kind of IoT
(06:55):
doorbell or whatever. And again, folks, reminder, Internet of things,
smart device, it's your or Internet connected coffee maker, doorbell, refrigerator,
washer dryer, et cetera. But it's also your car now,
I mean increasingly, Yes.
Speaker 1 (07:09):
I wrote it down. Sensors in automobiles, Joe, that's coming
our way, sensors to detect your eye movements and your
your focus on driving. Least, you have a choice if
you want an Internet of Things device or you don't.
You have an option to not get it. This is
going to be mandated. We are not going to have
the freedom to choose whether we want to get an
Internet of Things device or not. That frankly pisses me off.
Speaker 2 (07:31):
We should we should make a point to talk about
that as a separate topic, Brian, And you know Rush
predicted this in nineteen eighty one with the song Red Barchetta.
We can oh, yeah, yeah, we can have Joe queue
that up and well we can that the whole car
space could easily we could talk about it for the
whole thirty minute.
Speaker 1 (07:48):
Yeah, but that was a gleaning alloy aircar, not an
electric vehicle in that in that song.
Speaker 2 (07:52):
Yeah, go ahead, a country place no one knows about anyhow.
My problem was so much of the stuff is you
get opted into things. If they're collecting data that you
don't understand or even possibly believe they can be collecting.
You don't know where it's going, you don't know who
has access to it. You don't know who it's being
(08:12):
sold to, you don't know what the consequences to you
are of that. And so much of these so called
smart devices, you know, as I say all the time,
they're not geared towards your privacy and security. That's not
the incentive for them to be in the market. The
geared towards ease of use, market share, speed to market,
and collecting as much of your data as possible, because
the data is where the real money is. Look at
the profit margins of companies like Google and Meta who
(08:35):
basically make virtually nothing. They just provide so called free
services to you, collect your data and turn in you know,
billions and billions of dollars a year. But this was
an interesting art article came from the Wirecutter section of
the Times. They focus exclusively on technology, and I just
want to read a little bit of it here. So again,
this isn't my opinion. This is what the report and
(08:56):
the editors you know, have turned up from their research.
Over time, they've added microphones, control buttons, and bluetooth chips,
meaning of the headphones. Those chips have become increasingly advanced.
In line manufacturers to add features like adaptive active noise cancelation,
heart rate tracking, body temperature measurement, location tracking on BOYD,
voice controls, AI power transcription and translation, audiogram based sound adjustment,
(09:19):
and even brain wave monitoring activity. So you plug these
things into your ears and they're potentially capturing all this
and maybe more data depending on the advanced nature of
the sensors that are in these things. Where is that
data going? You know, if it's an Apple AirPod, is
it only going to Apple? Do you care that Apple
has all this information? Maybe not I do. I wouldn't
(09:39):
use any of this. But if it's not Apple, if
it's some third party brand, So now it's going to
your phone, It's going to this third party who knows
where it's going, who knows what they're doing with it,
who knows who they might be selling it to. There's
no hip or protection on any of this health related data.
Are people making decisions about whether they should rent to
you or whether they should provide insurance to you as
(10:00):
a result of data like this that they're buying? Maybe?
So again, I'm not inherently against this stuff, Brian, i'man
against the fact that it's the capabilities are rapidly increasing,
the data collection is rapidly increasing. People don't understand what
data is collected, they don't understand how it can be used,
they don't understand how to turn it off, and that
it's almost always they opt you in as soon as
(10:22):
you sign up. And if you don't want these sorts
of capabilities, if they're even if they can even be disabled,
you have to dig down into it and figure out
how to turn it off. So I would encourage people
before you buy any IoT device, but especially something that
is touching your body and potentially collect this sort of
very sensitive data about you with zero privacy protection outder
(10:43):
than whatever they claim they'll do. Again, there's no hippo
or anything like that. You should think about it. You
should read the privacy policy, which will probably be an
eighty page confuse optly of mumbo jumbo that will be
completely incomprehensible, and then you know, choose accordingly. There's nothing
wrong with getting headphones that have a cord plug into
your device and don't do any of this stuff.
Speaker 1 (11:02):
Got some of those on right now. Dave Hatter, Yes,
Dave Hatter. We'll continue with Dave. We'll talk about researchers tracking. Oh, look,
by fifty and fifty five kr s DE talk station.
After the top of the our news Dave Wollyams from
the Taxpayer Protection Alliance. Great topics with Dave is always
hope you can stick around for that. Meantime another Dave
Dave Hatter's on the phone Tech Friday with Dave Hatter
Intrust dot Com and look compromise Credentials Dave Hatter.
Speaker 2 (11:27):
Pretty significant numbers, it is, Brian, And I want to
want to just start out and tell you that you occasionally,
because people see me out talking about this because I'm
on the radio or TV or whatever, you know, people
will just individuals will call at Intrust and want help
with this, you know. And unfortunately, as a business, you know,
we don't really come out and help individuals. It just
(11:49):
doesn't make sense financially. But I always try to be
helpful for folks because again I understand how problematic some
of this stuff can be. And I had a very
nice lady call. She thinks that, you know, perhaps some
of her devices, her Internet of Things devices we just
talked about. And when I post my links, Brian, again,
I'll post the links specifically to just the substack I've
(12:09):
started on the Internet of Things and all I'm really
doing is is just showing a list of all the
different problems that are keep cropping up in the news,
and think concerns you should have. She thinks her devices
are compromised. So we have a conversation and we get
back to passwords and multi factor authentication. Now, I want
to be clear, multi factor authentication is not bulletproof. It's
increasingly being defeated, but it still makes you way more
(12:32):
secure than people who don't have it, especially when you've
used the same password across all your devices. Then you
know that's kind of what this article is talking about.
Here another recent article from Security Week, a very well
known magazine that nerds like me read, analysis of six
billion passwords shows stagnant user behavior. Most common stolen passwords one, two, three, four,
five six adminuted password. So not only do the bad
(12:54):
guys know that people have these bad habits, and they'll
use a week password on all their accounts for multiple accounts.
Think about this for a second, Brian, do you think
that it would be harder to hack through someone's firewall
and get into their systems to do whatever nefarious teach
you want, then it would be to guess crack or
(13:16):
buy a password off the dark web and just walk
right into your accounts.
Speaker 1 (13:19):
I think the latter is the obvious answer to that.
But everybody should be using password one, two three as
their password.
Speaker 2 (13:26):
Yeah, make sure you do that. And when you do,
just go ahead and take all your money. Put it
in a pile on the front stoop with a sign
in the front yard that says, this is steal my
money if you're using these weak passwords real.
Speaker 1 (13:38):
Quick, Dave, going back to your point about information sharing,
I don't care. I've got nothing. I don't care if
they take my information. What about your dog's name or
what about something like that? People use their dog's name
or their mother's name or whatever. Regular things that people
can easily find on the internet will be tried. And
the effort bole you made all the normal stuff that
people kind of defall to. So do something, really, this
isar and weird, and get a password manager right day.
Speaker 2 (13:59):
Atter, that's exactly right. Get a password manager. Turn on
MFA for all your accounts. The password manager. I would
recommend one password. It's number one password. I'll put this
in the links today too. There are other good password
managers out there Keeper you can use like c net,
zd net, various magazines to see what their editors think
(14:19):
of various password managers. But whether you get a password
manager or not, which I recommend, you need strong unique
passwords on all your accounts. Again, if I'm a criminal
and I can use a tool that will just attempt
to brute force your passwords until he guesses one, or
to your point, I can see your dog's name, your
kid's name, or whatever online. Again, six billion passwords shows
(14:41):
these patterns. The bad guys know what People who aren't
ten four hat nuts like me are doing. They know,
And I want to make one last point before we
run out of time. Folks, if you don't have strong
unique passwords and MFA on your critical accounts like your
bank account and so forth, you're going to get hacked.
But I would also tell you, and I hear the
all the time why I don't care. I don't have
anything in my email, think about this for a second,
(15:03):
prime and all your listeners. If you've had to reset
a password on any account before, how does that typically work? Well?
It sends an email to the email address on file
for you, and then you click a link, you go in,
you enter a new password, You're good to go. If
I can get into your email, I can see every
password reset you've done. I can see everyone you've done
(15:24):
business with if you've ever gotten an email from them.
If I can get into your email account, I can
change your password, lock you out of the account, and
now start resetting the passwords on all of your accounts,
including your bank. I now own you. I can wreck
your life. I can steal all of your money by
taking over your email account. Happy. I must, Yes, you
(15:44):
must have a strong password, unique password on your email
account and any critical account. You must turn an MFA
and year after year these password analysis like this of
the data that's leaked again in the billion six billion
in this one case, the bad guys know how to
get your stuff. Strong unique password, MFA at minimum, Password manager,
(16:04):
do it today.
Speaker 1 (16:04):
Two factor authentication, yes, do it, do it. It can
be a pain from time to time, but I really
really get a lot of comfort from the two factor
authentication because I'm the only ones got the cell phone.
Speaker 2 (16:17):
Yeah, and keep in mind bran that and know itself again.
Not bulletproof, No, you can work around that, but it's
it's much much harder and in most cases, unless you
are being targeted. They're just gonna move on. They don't
want to spend to it. Three days there you go
attacking you when they can walk right into someone else's
account and take whatever it is they want.
Speaker 1 (16:34):
Right like speed bumps on a road, You're gonna drive
slower because you can't crash the speed bumps. Screw that,
I'm gonna move on to something else and go after
someone who hasn't listened to Dave hat Or, interest it
dot com and of course LinkedIn dot com. Search for
Dave hat Or you'll find him, get the links to
these stories and all the other things that he's doing
throughout the week. Keep up the great work and thanks
to all the help you provide businesses in the Tri
State area through interest it. Find him again online interest
(16:57):
it dot com. We'll do it again next Friday. Dave Hatter,
have a wonderful Mother's Day weekend.
Speaker 2 (17:02):
My friend,