216: Coca-Cola Hack, Apple's Secret Zero-Day, Why Gen Z Loses Job Offers

Stereo Mix
===

[00:00:00] HD: right. There we go, there we go. Let's, let me go back to my thing so we can do our drops.

[00:00:05] music: Y- y- y- you are now watching the Tesla Road Talk hosted by HD and Son of Shorty.

[00:00:13] music: Hit the like

[00:00:15] HD: button. Oh. All right, we are back, we are back, we are back. Um, and now do it. This, this is number three in a row? I think we in a row finally.

[00:00:24] Cybershortieee: We is.

[00:00:25] HD: Yeah. I was telling... Who? I, I... Was that, it was either Bryce or Lee. I was stating how like, uh, our momentum keep going up and up when we able to do week to week to week to week, which is why I was like so keen on like, "All right, look, I know you finna go live it up this weekend.

[00:00:42] HD: Let's go knock..." Actually, do you wanna be open opened up about Friday?

[00:00:47] Cybershortieee: Nope. It was a long night.

[00:00:49] HD: It's gonna trigger you?

[00:00:50] Cybershortieee: Yes. Friday was... Ugh, I woke up and my car was towed, and that just started a lovely, eventful day.

[00:00:59] HD: [00:01:00] But do you... So let me ask you this then, 'cause I didn't, you know, I wasn't trying to fix your problems in the time the stuff was happening.

[00:01:06] HD: I literally just asked was you okay? 'Cause you said that the actual, you got like a app for your car or something, right, right?

[00:01:15] Cybershortieee: Yeah, and the app was showing that my car was at home. That's what really was aggravating me. Which

[00:01:18] HD: was kinda odd. '

[00:01:19] Cybershortieee: Cause

[00:01:19] HD: like- Was this through your, the, like the... Like I have this thing, which reminds me I need to go to the Honda dealership because they changed something, so now my app don't work.

[00:01:29] HD: So like if somebody was to take my car, I wouldn't know where it is. So I actually need to, they-

[00:01:33] Cybershortieee: You, oh, they probably just need to, um, probably unlock you or something, refresh it on their end.

[00:01:37] HD: Yeah, they, they did something and, and they said I gotta take it in to get fixed. But that means we probably should have like, probably like AirTags or something in our car.

[00:01:46] Cybershortieee: For sure. Yeah, I was so aggravated 'cause I was like, it's showing. And then like I was refreshing it, and it was showing at home.

[00:01:53] HD: Yeah. So we need to do-

[00:01:54] Cybershortieee: I'm like, hello, is it outside or no?

[00:01:57] HD: So at this point, zero trust on GPS.

[00:01:58] Cybershortieee: Zero trust. [00:02:00]

[00:02:00] HD: Um, what did I do? What have I did this weekend? Oh, before we get into everything, everything, you haven't seen "Toy Story 5," right?

[00:02:09] Cybershortieee: No. Just clips.

[00:02:11] HD: Okay. So yeah. I've seen "Toy Story 5," but we're not spoil it for anybody who has not seen it. I will say it's a good watch if you have young kids or if you're an adult. I thoroughly enjoyed it. Um, it was a lot of good lessons. Especially like now if you, different POVs. You see the stuff with the screen time.

[00:02:31] HD: You see the gist of how to ma- teach a child about who's a real friend and who's not when it comes to the- Oh, that's a good lesson ... the digital life. Also kids, like being kids, being, using your imagination, playing with toys, like there's nothing wrong with it. I just like, I think it's a good thing. It's something I actually see by myself.

[00:02:50] Cybershortieee: What, um, is your favorite "Toy Story" now that you've seen that? Wait, five. Four was when they was in the toy store, right? [00:03:00] Toy Story 4 is when they was in the toy store?

[00:03:03] HD: Mm, they was in the toy store a couple times They were in the toy store on number two, and then- On

[00:03:13] Cybershortieee: number two?

[00:03:13] HD: Yeah. Remember, they were, they were stuck in the toy store when Mi- uh, Mr.

[00:03:18] HD: Potato Head said, "I'm a married spud. I'm a married spud."

[00:03:20] Cybershortieee: Is that the one where Barbie was introduced? Yeah. Or was she... That's the, okay, that's the one I'm thinking about.

[00:03:23] HD: Okay. Yeah. Yeah, you got number two. Um-

[00:03:26] Cybershortieee: Wait, so what's three? Andy?

[00:03:28] HD: Three is- Or is two Andy? ... Andy is going to college, and- Or

[00:03:32] Cybershortieee: not Andy. Jesse.

[00:03:34] Cybershortieee: What's the one where they was s-

[00:03:35] HD: Two.

[00:03:36] Cybershortieee: Oh, so all of that happened in two.

[00:03:38] HD: Yeah.

[00:03:38] Cybershortieee: Okay. Okay.

[00:03:39] HD: Three is Andy's going to college, and he's getting rid of the toys, and they go- They

[00:03:43] Cybershortieee: went to a daycare or something, right?

[00:03:44] HD: Sunnyside.

[00:03:45] Cybershortieee: Yeah, yeah, yeah. Okay. I'm here. I'm here.

[00:03:47] HD: We always have fun at Sunnyside.

[00:03:48] Cybershortieee: I, I really like number two.

[00:03:50] Cybershortieee: That's probably my favorite one, with Jesse and then the guy who had to come and fix, um, Woody.

[00:03:57] HD: Yeah. I'ma say-

[00:03:59] Cybershortieee: Number one's [00:04:00] good too, though. Number one's OG, and number two.

[00:04:03] HD: I'ma probably say number one from the time I replayed... I replayed one and two so much. Three, I was actually pretty old when it came out to where, like, my younger siblings- Same

[00:04:14] HD: that's, that's kinda like their first intro to Toy Story, and so, like, they wore that movie out. That's why we... I could text them right now and say, "We all had fun at Sunnyside," and they'll start laughing, 'cause now they're all grown. They're 18, 21, 22. And then four, I saw four when I was grown too.

[00:04:31] Cybershortieee: My sister wore out Fat Albert.

[00:04:35] Cybershortieee: She wore that out.

[00:04:36] HD: That's my movie right there.

[00:04:37] Cybershortieee: She wore that out. She wore it out.

[00:04:39] HD: That, matter of fact, that, that... We'll probably have a segment later. It's like what's the top five movies you wore out like that.

[00:04:46] Cybershortieee: That is top. That.

[00:04:49] HD: Benji pain. Hey, hey, hey. Now I'm gonna sing a song for you. For you. That's my song right there.

[00:04:56] HD: Then

[00:04:56] Cybershortieee: they- The music was hitting. The music was hitting the whole film.

[00:04:59] HD: Yeah, 'cause, uh- [00:05:00]

[00:05:00] Cybershortieee: The music was hitting ...

[00:05:01] HD: I forgot that's when Mase came back, so that's when- Oh, ain't that, "Welcome back," You know what? Matter of fact- "Welcome back" ... matter of fact, we gonna cut this out of what's called the part, but you know what?

[00:05:09] HD: 'Cause every time that come on, it make you wanna walk like Mase.

[00:05:12] Cybershortieee: The video? I mean the song? Welcome back. Welcome back. This was a big song too, that whole summer

[00:05:24] HD: I know you like that

[00:05:28] Cybershortieee: Ain't the, ain't he on the podcast?

[00:05:30] HD: Him and Cam'ron? All the pretty chicks all want to smile at me. These rap cats, man, they all gotta die. He like, be always doing, like, little dances to the beat.

[00:05:41] Cybershortieee: He definitely do. When you see me. I remember this video.

[00:05:43] HD: You gonna lean.

[00:05:44] Cybershortieee: It was a big deal because it was, it was a banger.

[00:05:47] Cybershortieee: 'Cause

[00:05:47] HD: he came back.

[00:05:48] Cybershortieee: Yeah. Mississippi to

[00:05:49] HD: the Palm Springs. I want to say this might've been the thing he did to get him out his deal[00:06:00]

[00:06:05] HD: I explained it to my broker three bucks and they can top down

[00:06:11] Cybershortieee: All the, all was all the, uh, whole hood in the video

[00:06:20] Cybershortieee: Him going in there singing that is so funny

[00:06:31] Cybershortieee: He had on Polo

[00:06:32] HD: Mm-hmm.

[00:06:32] Cybershortieee: I remember this '

[00:06:34] HD: Cause yeah, I think like Ye had just bought the Polo back before this dropped. Well, not brought it back, but like mainstream the hip hop prep style. Yeah Welcome, welcome, welcome, and welcome back The hat

[00:06:48] Cybershortieee: though sick. I ain't seen a hat like that in so long

[00:06:51] HD: We should have like...

[00:06:52] HD: What, how, you know how, how fun it would be if, uh, if we did our event, but like if you came to the [00:07:00] podcast live event, it was like early 2000s dress code? Oh, that'd be fun. That would, that'd be fun. That's my type of vibe. That'd be fun. Let me

[00:07:08] HD: make sure I'm not getting interrupted.

[00:07:10] Cybershortieee: But- Jerseys, big clothes, Air Force, and some Air Force 1s.

[00:07:15] HD: Mm, mm, mm.

[00:07:16] Cybershortieee: Yeah.

[00:07:16] HD: Mm, mm. Matter of fact, shorty got on some, um- ... like Air Force 1s today. Only thing she don't have on is the gum bottom.

[00:07:22] Cybershortieee: Literally. Used to go in the store looking for them specifically. Wasn't even getting no, the o- no other pair if they didn't have the gum bottoms.

[00:07:30] HD: Yep, yep, yep. Um.

[00:07:31] Cybershortieee: They was hard to keep clean too.

[00:07:33] HD: But yeah, let me, let me put our topics on for us today, guys. Let me go back up here real quick. Do, do, do, do, do. It might cover my face a little bit, but I don't care. All right, so today's topics we have Coca-Cola was hacked, Apple versus OpenAI, scattered spider updates, LAPD in flock, encode, and much, much more.

[00:07:54] HD: Um, and before we get into the first article, you all may be watching this on the [00:08:00] main channel, but we have started a new channel strictly for the podcast, so the podcast can grow on its own, because in all actuality, it's a show, and it differs from when we do the interview style stuff and all the other content I throw in there.

[00:08:15] HD: So I made the decision to put it on its own thing, and it's gonna grow that way. Let me get one of these off of here, talking points. Okay. But if you're still with us right now, you know what to do. Go ahead and hit the like button, subscribe, all that, and run up the numbers for the new show.

[00:08:38] Cybershortieee: Let's get it.

[00:08:39] HD: Did you wanna go first about Coca-Cola?

[00:08:41] Cybershortieee: Sure. So our first segment of the day, they ransomwared the milk. So Coca-Cola disclosed to the SEC that its dairy subsidiary, Fairlife, got hit with ransomware, and Fairlife production across the entire [00:09:00] United States is temporarily suspended. If you drink Fairlife, if you buy Core Power protein shakes after the gym, this is that.

[00:09:10] Cybershortieee: So let's break down what happened. First, let's start with ransomware. So ransomware is malicious software that locks up an organization's files and systems, and then the attacker goes ahead and demands payment in order to unlock them. Um, now, the part that people are missing is that modern factor- factories, they don't run on people flipping switches on or off.

[00:09:33] Cybershortieee: They run on software. And so production scheduling, if you think about inventory, if you think about quality controls, the machines themselves Locking that software will actually stop the line, um, which means that milk does not get made. So Fairlife is not a small operation. It did an estimated $4 billion in sales in 2024.

[00:09:52] Cybershortieee: Canada's operations are unaffected. It's the US's that is currently down, and Coca-Cola did not say when systems would be [00:10:00] restored, and that's the part that's kind of worrisome. Um, we've seen this movie a million times. Arizona Beverages in 2019. We have, um, UNFI, the food distributor, last year. Both of those turned into weeks of disruption and empty shelves of those products.

[00:10:17] Cybershortieee: Now, what I want you to walk away with here is a couple things: IT versus OT. So IT is information technology. Think about your email, your laptop, your files. OT is operational technology, and these are the computers that actually run the physical machines. And so when IT gets hit, you're gonna lose data.

[00:10:37] Cybershortieee: When OT gets hit, things stop moving in the physical world for these companies. Um, and so for decades, those two worlds kept or have been kept separate. And so what we're seeing now in this instance is that they are very much so connected, um, because connecting them makes factories be able to operate and move a lot more efficiently.

[00:10:58] Cybershortieee: Um, so [00:11:00] every manufacturer should be kind of looking at the things that are happening in their, um, sector and seeing how they can prevent these type of things from happening in their own organization. Now, let's talk about the SEC filing and why this matters. So public companies must disclose material cybersecurity incidents.

[00:11:19] Cybershortieee: That rule is why you're hearing all about this. In the past, this was not a thing. Companies were not necessarily required to report it in the way that they are today. Um, so we have that compliance piece in place doing exactly what it was designed to do.

[00:11:35] music: What are your thoughts?

[00:11:37] HD: Um, it's crazy because I thought I was gonna be working in OT this year.

[00:11:43] Cybershortieee: Hmm.

[00:11:45] HD: But yeah, they're typically supposed to be segmented, but if you are not running your scans and doing stuff the right way, this is what can happen. And also, the way that you protect IT systems is different from [00:12:00] OT.

[00:12:00] Cybershortieee: Yeah.

[00:12:00] HD: Like for example, you can go do and do like a Qualys scan or whatever, but when you got anything that's connected to an OT environment, matter of fact, I want to say it's like called scanless, but they, they have certain type of tools where it's not actively scanning because it can stop production.

[00:12:15] HD: Yeah. Because of, uh, when I worked for, when we supported Disney, you couldn't run scans on a network because you could possibly stop a ride, somebody die or something like that. And so that's how important it is. The thing is, OT kind of was not talked about as much. It's pushed to the back burner. Now it's made a return where you have all these tensions with Iran and everything else.

[00:12:36] HD: Like a lot of that, that stuff that Striker hit would, what, I think it was like health tech that, that people can use. But, um, it's gonna eventually get to the OT parts. Your, your traffic lights.

[00:12:47] Cybershortieee: A lot of people, when they think about OT, they think about the, the power grids, but it's our food as well.

[00:12:54] HD: Yeah.

[00:12:54] Cybershortieee: And food, that's scary.

[00:12:55] HD: Yeah. Stop production on anything. Food, um, what were we talking about? You was talking about [00:13:00] sprinklers. Like anything that's operationally, um-

[00:13:02] Cybershortieee: Hospitals ...

[00:13:03] HD: tech driven. Yeah, all that stuff.

[00:13:05] Cybershortieee: All the things that are critical.

[00:13:07] HD: Warehouses. So if that guy gets on logistics. I

[00:13:10] Cybershortieee: think the hospital part scares me the most, 'cause people are in there fighting for their lives.

[00:13:14] Cybershortieee: They're fighting to save people lives. And granted, manufacturing is important. I'm not saying it's- Let,

[00:13:18] HD: let's go, let's talk about utilities. Hey, they hit the energy company. Oof. Now you can't, now your-

[00:13:23] Cybershortieee: Hit the power

[00:13:23] HD: grid ... now your air don't work.

[00:13:24] Cybershortieee: Forget

[00:13:25] HD: the air. Now you can't get no water. Ain't no, ain't

[00:13:25] Cybershortieee: no, ain't no electricity.

[00:13:25] Cybershortieee: No. Electricity, water. No internet. So

[00:13:32] HD: when you start really peeling back the onion of OT- It's,

[00:13:35] Cybershortieee: it's scary ...

[00:13:35] HD: and why it's important, I think that's why people should take notice to this. Now you know the crazy thing is? When I was searching to figure out what to name, like potentially name this episode, I was like, "Okay, let me type in Coca-Cola hack."

[00:13:48] HD: It wasn't too many videos. I was like, "Why isn't stuff that is this important not highlighted as much as it should be on YouTube-

[00:13:58] Cybershortieee: Mm-hmm ...

[00:13:58] HD: or anywhere else?" So I was [00:14:00] like, "That is odd that that is not up there."

[00:14:03] Cybershortieee: I think that, um- This is a good area for folks to kind of consider diving into, learning more about those, um, industrial control systems, those different solutions, and also looking at a 8-K, which is where they would describe whatever the cybersecurity incident that occurred for that public company.

[00:14:27] Cybershortieee: Um, so a lot of, a lot of great things to kind of take away from that article.

[00:14:31] HD: Yeah.

[00:14:31] Cybershortieee: I don't drink milk.

[00:14:33] HD: And a friend of the show, you got to meet him last year, Gabe.

[00:14:38] Cybershortieee: Mm-hmm.

[00:14:38] HD: Gabe- Yeah ... works for a OT company. Gabe's

[00:14:40] Cybershortieee: the only person I know who does OT.

[00:14:42] HD: Yeah. Him and I think I might know one more, I know one more person that I haven't had a chance to get him on the show, but it's so hard to get into OT.

[00:14:49] HD: Like- It is ... OT is if you luck up and get into it, you'll have a job forever, 'cause everybody doesn't have OT experience. Like, you could have knowledge of it, but it's one of those things [00:15:00] where you can't make a mistake.

[00:15:01] Cybershortieee: And Gabe a big dog. He d- he done, he done saw it.

[00:15:04] HD: He always been like that. Yeah. Shout out, shout out to, uh- Shout out to you

[00:15:07] HD: Detroit. What up, though? Oh, man. Um, but so, so last week we actually talked about OpenAI and Apple and the blunders that they had when it came to controlling their assets, confidential data, et cetera, et cetera. Now we see there's an update on that, so let's talk about it And I kind of put all this, so let's see.

[00:15:37] HD: Everything here is an allegation from Apple's complaint, nothing proven. OpenAI has said publicly it has no interest in other companies' trade secrets

[00:15:49] HD: Here's what's new. Apple alleges that Cheng Liu, the engineer who left Apple for OpenAI, kept accessing Apple's network storage weeks after he stopped working there, and the way he allegedly did it is the [00:16:00] part that matters. Hang on. What am I looking for real quick? Give me a second

[00:16:11] HD: I know I'm not tripping

[00:16:12] Cybershortieee: What?

[00:16:13] HD: Oh, duh.

[00:16:15] Cybershortieee: Oh, you're looking for a sound? I

[00:16:18] HD: have to go find that

[00:16:23] HD: And I need to put the thing on here.

[00:16:25] music: Um,

[00:16:25] HD: one second

[00:16:35] HD: Sorry, I'm back

[00:16:41] HD: Apple says he exploited a rare, previously unknown authentication bug. In the complaint's framing, that's a zero-day. A zero-day is a security flaw that vendor, that a vendor does not know about. Zero-days... What? I don't even like how they put this. A zero-day is a security flaw that the vendor doesn't know about yet.

[00:16:59] HD: [00:17:00] It takes zero days to fix it because they never had a chance. It's the most valuable class of vulnerability there is. Nation states buy them, and an authentication bug specifically means a flaw in the login process, something that lets you in when you shouldn't be able to get in. Now, Apple alleges Liu never returned his Apple laptop, that he told them he had another computer, that he allegedly used a current Apple's employee's laptop while she was still employed and he wasn't, that he didn't delete the program giving him access, and that he didn't report the bug, even though Apple says his employment agreement required him to.

[00:17:33] Cybershortieee: What?

[00:17:33] HD: I'm, I'm definitely kinda confused right here because what do they mean- What, what, what? ... he didn't... Let me, let me, let me go back to that. Let's, let's see what it g- it said again Apple alleges Lou never returned his laptop. Okay, that's one. That he told them that he had another computer that he allegedly used, a current Apple employee's laptop.

[00:17:56] HD: Oh, that he allegedly used a current Apple employee's laptop while she was still [00:18:00] employed and he wasn't, which is kinda interesting in, uh, itself.

[00:18:03] Cybershortieee: Okay, so for example... I don't understand. So we, you got a laptop, I don't work there and I'm using it 'cause I used to work there, but you work there now?

[00:18:12] HD: Right

[00:18:16] HD: Let's see

[00:18:19] Cybershortieee: But he wasn't with the company no more. Right. So why was he required to report-

[00:18:24] HD: No, he's supposed- ... the bug? You're supposed to return the laptop.

[00:18:27] Cybershortieee: Well, 1000% to that, but I'm saying they're saying that he didn't report the bug. Was this while he was employed or after? No, he, uh, um- Because he was accessing this after, and they're saying per his employee agre- agreement, but if he's not with the company anymore, is there still that reasonable expectation for him to report that bug?

[00:18:45] HD: Possibly if he's using it in a way, in a manner that he's using to access confidential files. If he wasn't, maybe not. So he didn't delete the program giving him access, and he didn't report the bug, even though Apple says his employment agreement required him so. [00:19:00] And then there's the message. Apple says that when Lu realized he still had access, he wrote to that coworker, "Lol, I found out I can access the network storage.

[00:19:07] HD: So funny."

[00:19:08] Cybershortieee: I'm screaming, "Please get this out of my face."

[00:19:12] HD: I need to sit here for a second because that message is the whole segment. That is not a master criminal. That's someone who found an unlocked door and thought it was funny, and that exactly how, that is exactly how most security incidents actually start, not with a hoodie in a dark room, but with the normal person who finds something they shouldn't have and doesn't stop to ask whether they should walk through it.

[00:19:33] HD: Every single one of you is going to hit a moment in your career where you have access to something you shouldn't: a folder, a dashboard, a database. What you do with that 30 seconds is your entire career Report it every time. That's the job. But if I'm not working with you anymore, I don't gotta report it.

[00:19:53] Cybershortieee: That's what I'm saying. That's the part that was confusing in the article because it sounds like they still wanted him to report it because he still had the access. [00:20:00]

[00:20:00] HD: But my thing is-

[00:20:00] Cybershortieee: But per his... They're saying, "Per your employee agreement-"

[00:20:04] HD: But if this guy was-

[00:20:05] Cybershortieee: And he voided?

[00:20:06] HD: If this guy was off-boarded, nobody saw him-

[00:20:09] Cybershortieee: He wasn't off-boarded.

[00:20:11] Cybershortieee: He wasn't. That's why he still had access.

[00:20:13] HD: So that goes back to, remember when I said he lied or s- Like, it's some fishy stuff going on where he wasn't not working with them. They still thought he was working with them.

[00:20:20] Cybershortieee: It's, it's, it is on Apple for not requiring him to, one, return that laptop or do wipe it.

[00:20:26] HD: I don't think-

[00:20:27] Cybershortieee: And also his, he didn't lose his access.

[00:20:29] HD: But the crazy thing is the moment he said he had another laptop, it's kinda odd 'cause how do you have... When did we give you another laptop? Because I can go through and check and see what laptops you have, and technically if you have one, the other one should be retired.

[00:20:42] HD: It shouldn't be in use. Only special cases when I've seen people have, like, two machines where one is, like, typically like a lab machine, but it's not, uh, something that has, like, all the software- But this

[00:20:52] Cybershortieee: is, but

[00:20:52] HD: this is w- ... everything

[00:20:53] Cybershortieee: else. I don't... This person had a big role in the company, but this is also why it's important for IT to make sure that [00:21:00] they are not giving these folks who have these, uh, roles in the company, 'cause a lotta times they'll come to the security team and be like, "Well, I just, I need the, I need the access."

[00:21:09] Cybershortieee: And you still have to go about things properly because things like this do happen. Just because you ask me for the access and this is your role doesn't mean that you deserve to get this access. Is there a lesser permission that we can assign in this particular instance? This was, this was a mess. A hot mess.

[00:21:26] Cybershortieee: And then the other person whose laptop they were using, are they in this scenario, too?

[00:21:37] HD: Interesting because what's they, what they, that's why he said allegedly said they was using the other employee's laptop, but he know he wasn't. When that person messaged him and said, "Hey, I can access this," so funny- They

[00:21:48] Cybershortieee: would, they, that's, that, the person should have reported it then.

[00:21:51] HD: Yeah.

[00:21:51] Cybershortieee: If they were doing what they should have been doing in alignment with the company. And 'cause that, 'cause that's basically, like, [00:22:00] if I was in that situation, I'd been like, "Oh my God, this is an insider risk situation."

[00:22:05] HD: Yeah. And so they said Apple's got some questions to answer, too. TechCrunch asked when they de- decommissioned his access and got no reply because here's the thing, the bug is Apple's bug.

[00:22:15] HD: Somebody's access should have been cut on day one. So background was Apple alleges Lu exploited a previously unknown authentication bug to reach Apple's cloud-based network storage after leaving, classified and reported as a zero-day. Apple says it has since fixed the bug and terminated his access, and that server logs show only Lu exploited it, though the bug could have let a few other people in.

[00:22:41] HD: So-

[00:22:43] Cybershortieee: Y'all, what?

[00:22:44] HD: But the key word is when I- I'm looking at this- You

[00:22:46] Cybershortieee: know, you know, you know what? We gonna have to wait until it unfolds to get this- We gonna probably just- 'Cause exa- ... keep up with this- 'Cause it's not gonna make- ...

[00:22:51] HD: like we been keeping up with the Sha ...

[00:22:52] Cybershortieee: it's not gonna make, it's not gonna make sense to us right now 'cause we don't have all the, the

[00:22:56] HD: details.

[00:22:56] HD: Well, right here it says he was, he accessed the [00:23:00] network storage after leaving, so apparently they knew he was gone. Why did they wait to terminate his access?

[00:23:07] Cybershortieee: The larger question is why was his access not terminated when he left the company?

[00:23:11] HD: That's what I just asked.

[00:23:11] Cybershortieee: Yeah. Like, that's the, that's the big question, and they dropped the ball there.

[00:23:17] HD: And additionally, the unreturned laptop claimed to have another computer used, coworker Yu- Yuting Peng's Apple laptop while she was still employed and he was not. Failed to delete the access program, failed to report the bug despite employment obligations. So it's actually on Yuting, not the guy who left.

[00:23:35] HD: That's what I'm saying. Yuting

[00:23:36] Cybershortieee: Peng. Both of them are insiders.

[00:23:38] HD: Mm-hmm.

[00:23:38] Cybershortieee: Period. Both of them.

[00:23:40] HD: Alleged so. A,

[00:23:41] Cybershortieee: a, a insider post working there and an insider that actually works there.

[00:23:45] HD: And let's take it further. With them names, how we know they're not working with, uh, what's the competitor to OpenAI in China that everybody was trying to go use they stuff and download the LLM?

[00:23:53] Cybershortieee: I know what you're talking about. I can't even

[00:23:55] HD: remember their name. Look it up if you can remember. It's like China's LLM, China's ChatGPT. [00:24:00] Um, where we at?

[00:24:04] HD: Apple wouldn't answer how the bug worked, how it was exploited, or when it cut off his credentials. So we've been talking about this the whole time, but off-boarding is a security control. This entire alleged incident traces back to access that outlived employment.

[00:24:18] Cybershortieee: DeepSea?

[00:24:19] HD: Yep, DeepSea. That's not exotic.

[00:24:21] HD: It's the single most common gap in corporate security. Zero-days aren't only for spies. The mythology says nation-state. The reality is sometimes the guy who noticed something working that shouldn't work is the problem Logs are what turned this into a case. Apple's whole ability to allege who did what comes from server logs.

[00:24:39] HD: No logging, no story, no lawsuit.

[00:24:42] Cybershortieee: I think that this is a really, really good article for folks to be sharing with their team, um, at work. Especially because- Oh, yeah ... because you do get those requests from said VP who's making it, um, a urgent priority for you that they need this access. But again, this is a prime example [00:25:00] of why we have the things in place that we have in place.

[00:25:02] Cybershortieee: Just because you want it doesn't mean you need it, and also what do we have in place for these protected users who are accessing content in our company that is the most confidential and the most, and, and it has the most business risk if it is exposed. That's a mess.

[00:25:19] HD: Yeah. Um, not only that, I think this is a good way of use cases.

[00:25:25] HD: I've seen times where I've seen the emails, "Hey, so-and-so didn't return their asset." Like, the w- best thing we could do is, like, they try to connect it.

[00:25:31] Cybershortieee: That's what I'm saying.

[00:25:31] HD: It won't access nothing. Yeah.

[00:25:33] Cybershortieee: But he wasn't even using it, so it didn't matter. No. His, his laptop never mattered because he wasn't using it.

[00:25:39] HD: The other thing is sometimes is, so what people do is if they're not connected to the network, they know that they could possibly log on locally. But once you log on locally, you shouldn't be able to do anything or access anything on a computer without being on a corporate network, and that's why you gotta contain it, 'cause time they try to do it, they should be called and say, "Hey, you can no [00:26:00] longer use your machine."

[00:26:01] music: Mm-hmm.

[00:26:01] HD: So, uh, definitely pretty interesting. Uh, hopefully we'll see a update for next week so we can kinda just keep on with the case that keeps on giving. But, uh, I thought that was pretty cool.

[00:26:13] Cybershortieee: It was a good update.

[00:26:14] HD: Did you wanna talk about the Mac malware real

[00:26:16] Cybershortieee: quick? Yeah. Let's get started. So, the malware that holds your Mac hostage until you type your password.

[00:26:26] Cybershortieee: Um, so the "Macs don't ever get viruses," that era is over. It's been over. Let's talk a little bit more about it. Researchers at Group-IB... I hope that's IB or 1B.

[00:26:36] HD: Yeah. One, yeah, IB Research.

[00:26:38] Cybershortieee: IB. Okay. Researchers at Group-IB found new macOS malware called ClickLock. It steals crypto, login credentials, password manager data, browser data, and it installs a backdoor for ongoing remote access.

[00:26:52] Cybershortieee: But how it works is one of the meanest things that we've read all year. So you will land on a webpage, and it will show you [00:27:00] a verify your human check. Looks like Cloudflare. It looks legitimate. There's that progress bar so you can see the whole nine. And then it tells you to paste a command into a terminal.

[00:27:11] Cybershortieee: Now, what? We need that broken record sound there. Uh, Terminal is, if you're not familiar, it's just a text-based command line on your Mac. So whatever you obviously will paste there, your computer will do it, uh, with no questions asked. Now, a real human verification check will never ask you to open any Terminal, not once, not ever.

[00:27:33] Cybershortieee: The researcher said it plainly, "Any page telling you to open Terminal is trying to compromise your machine, no matter how professional it looks." Now, the lure has a name. It's called ClickFix. It's everywhere right now. Now, the coercion part, once it's running, it pops up a fake macOS password box using your real username and a real Apple icon so it looks legitimate.

[00:27:56] Cybershortieee: And if you cancel, it doesn't give up. It sets itself to [00:28:00] relaunch, and then it starts killing your applications. Finder, Dock, Terminal, Activity Monitor. You have your System Settings, your browsers, over and over and over, several times a second, leaving nothing on your screen but that password box. Um, and group 1B says the loop is configured to run for roughly 83 hours.

[00:28:17] Cybershortieee: Oh my God. Imagine, imagine that. People can't even stand 10 minutes of that. 83 hours is a really long time. So that's three and a half days. It will sit there and fight you for three and a half days until you give up and type in your password. Um, now, if you kind of listen to this article, there's no exploit here, no zero-day, no admin privileges.

[00:28:38] Cybershortieee: The researchers were explicit about what kind of happened. The malware works purely through social engineering and forced interaction. So it makes your computer obviously unusable. Um, so unusable that surrendering that password, in this case, is what feels like the fix will be. Um, so this is more a, of a psychological attack.

[00:28:59] Cybershortieee: Um, the [00:29:00] numbers are at least 100 systems in 33 countries since May, when group, um, IB published. So not a single security vendor on VirusTotal was detecting it. Uh, so a couple things to take away here. One, never paste a command into Terminal that you didn't write or fully understand, especially not because a website told you to.

[00:29:20] Cybershortieee: Two, if your Mac goes crazy and demands your password while everything else is dying, do not type it. Hold the power button down, force the shutdown, boot into safety mode, and that is coming straight from the researchers who have worked on that fix. And number three, text this link of this episode to whoever in your life has a Mac or a crypto wallet right now so that they can make sure that they are protecting themselves.

[00:29:45] Cybershortieee: Um, so yeah, that's kind of what happened here.

[00:29:51] HD: Yeah. I'm just glad that Mac is finally getting some flack '

[00:29:55] Cybershortieee: Cause forever Macs don't get viruses. Mac, no, it can't, it can't, it can't. [00:30:00]

[00:30:01] HD: Yeah. And that was the funny thing, I think once I started- I'm

[00:30:04] Cybershortieee: never gonna lie, I used to believe it ...

[00:30:06] HD: Well, once I started working in environments where you had- Pre

[00:30:08] Cybershortieee: tech

[00:30:09] HD: macOS and Windows, and I started seeing, like, Macs would get adware and other little stuff too. I was like, the only difference is, is just more people use Windows. So at the time, what was happening is just attackers would write more stuff for Windows. Mm-hmm. But as time went on, now they're getting a little bit, you know, tricky and just pretty much going against the human, like they have to do with everything else in order to attack macOS.

[00:30:33] HD: 'Cause I mean, I will say for the most part, it's pretty secure though. It's gonna ask you about any and everything you do. Do you approve this? Put your fingerprint down here. Do this, do this, do this. Give it, uh, access. Which, you know, Windows does now too, but I know in the past it definitely was a little bit loosey with the controls.

[00:30:50] Cybershortieee: Mm-hmm.

[00:30:50] HD: So all in all, I think if you do have a Mac, that is something you need to watch out for.

[00:30:55] Cybershortieee: I don't have time for that.

[00:30:57] HD: But-

[00:30:57] Cybershortieee: Three days, three and a half days. I'm [00:31:00] just thinking about somebody

[00:31:00] HD: who- But why are you posting stuff in the terminal? You ain't never used terminal before. I

[00:31:02] Cybershortieee: know. I mean, I would never do that.

[00:31:04] Cybershortieee: This is the type of stuff you gotta tell your grandp- I mean, most, I don't... Some grandparents might have Macs, but- Mm-hmm ... this the type of stuff you gotta tell your grandparents, your, your au- your aunts, your uncles. I think, I'm not gonna say everybody, but I feel like more people my age and maybe a little bit younger and maybe a little bit older would know that that is something that you don't do.

[00:31:27] Cybershortieee: Because the term- First of all, you're not even using the terminal on the regular-

[00:31:30] music: Mm-hmm ...

[00:31:31] Cybershortieee: as a Mac user, unless that's your, your lane. So if you're never getting into this application, it should kind of be like a red flag. Like, hold on, I ain't never even used this before.

[00:31:41] HD: Mm-hmm. For sure. Now, guys, we- Do you

[00:31:44] Cybershortieee: know we always say that?

[00:31:46] HD: What?

[00:31:46] Cybershortieee: I was watching, like, a episode when

[00:31:47] HD: I was- For

[00:31:47] Cybershortieee: sure ... getting dressed. Like, we say that all the time, for sure, for sure.

[00:31:50] HD: Yeah, that's, that's our in between to get to the next topic. It's either that or bet or that's dope or whatever. But nah, let's have some fun. [00:32:00] Let's have some fun. I have one of our favorite segments, the Reddit time, where we always reacting to people having some, uh, interesting life choices.

[00:32:11] HD: So let me put that right here. It's Reddit time. It's Reddit time, and I'm about to read it

[00:32:23] HD: I actually have some funny stuff on here. Um, so one of these ones, uh, it's pretty short, but it was a recruiter invited my current boss to an interview. Somehow instead of inviting me to a Zoom call, a recruiter emailed my current boss, who was listed as a reference to my interview next week. My boss messages me asking me what the meeting is.

[00:32:42] HD: FML.

[00:32:45] Cybershortieee: No. '

[00:32:48] HD: Cause I'm like, why did you have your boss down for a reference, number one? That's crazy.

[00:32:54] Cybershortieee: Without telling them, clearly.

[00:32:56] HD: They said it looks like your boss applied for the same job as you. Tell him it's a [00:33:00] surprise party

[00:33:03] Cybershortieee: How do you explain that?

[00:33:04] HD: Oh, the boss offered to be a reference Never provide a reference to a prospective employer until they have made you an offer.

[00:33:11] HD: There is never a reason any perspective... Is it perspective or prospective?

[00:33:18] Cybershortieee: Prospective. '

[00:33:19] HD: Cause I feel like-

[00:33:21] Cybershortieee: They probably spelt it wrong.

[00:33:22] HD: Yeah, and they making me sound bad. Yeah, they may ask for them, but you have to be firm and say that your references are a precious commodity and you do not want them called out of the blue unless there's a

[00:33:36] HD: serious opportunity. Who is calling references? People do. People do. Um, let's see. I'll reject your rejection. Thank you for your... Dear hiring team, thank you for your interest in rejecting my application. I have reviewed your rejection email and was impressed by your decision-making process and commitment to moving forward with other candidates.

[00:33:50] HD: However, I have received many rejection emails this year. Therefore, after careful consideration, I have decided not to accept your rejection at this time. Once again, I appreciate your courage to reject me [00:34:00] and wish you every success in rejecting other candidates. I look forward to joining the team soon.

[00:34:04] HD: That's funny. Um, okay. The job scam one. This is probably the longest one, and there was another one after that. All right, guys. I

[00:34:14] Cybershortieee: have a good one, too.

[00:34:16] HD: Okay, I'll let you go after this one. I just got job scammed. I'm really disappointed for almost completely falling for it. I've been trying so hard to find a job in this economy, and when this recruiter reached out to me, I thought my luck was beginning to turn.

[00:34:30] HD: But I'm such an idiot. The rest of this experience you're about to read is gonna be extremely lengthy and sound very cringe. How it started was through Handshake. I applied to a job for a remote position as a data entry specialist that didn't require any prior experience and only a high school degree because I literally have nothing on my resume after graduating college.

[00:34:49] HD: I didn't realize the title of the company name was not legitimate. Like, it was a company called Nutra Data Ink. The Ink should've been typed as capital I-N-C period for professional companies. [00:35:00] I got the offer from a recruiter with that job I applied for, I applied for and linked to it, but they welcomed me for an interview with a different company name, Pacific Depot

[00:35:14] HD: When I clicked the link to the job post I applied for, it was gone, but they wanted me to message them on Microsoft Teams for an interview and provided the link. I clicked it, and we started messaging to set up a proper interview. They gave me a survey to fill out as their way of interviewing, and I completed it.

[00:35:29] HD: They asked me to log in again the next morning at a specific time. I logged in the next morning, hours earlier than agreed upon, but they still told me I got the job offer anyway. I was so glad because I desperately needed insurance, which were they were offering for the job. I accepted the offer, and they started the onboarding process.

[00:35:47] HD: So then I was told that I'll be starting this month on the 27th and that I would need to acquire... I seen this scam before. I would need to acquire the equipment needed for the job position, and they were giving a lot. [00:36:00] A whole new laptop, iPad, desk chair, and everything. Then they asked me what bank institutions I use so they could send me the checks to purchase the items from their selected vendors.

[00:36:09] HD: I told them, and then they sent me the checks through email, and I tried to deposit in my account.

[00:36:14] Cybershortieee: What? They sent the checks through what?

[00:36:17] HD: They sent the checks to purchase the items from their selected vendors. I told them. They sent me the checks through email, and then

[00:36:25] Cybershortieee: I- Thank you. Hello? What are you talking about?

[00:36:27] Cybershortieee: How did they send you a check through email? That is blasphemous

[00:36:33] HD: I, I really don't get how he fell for this. Now let's see where we at. Um, and tried to deposit in my account. The checks were placed on hold for processing and would be available on the 25th, about two days before I had to be prepared to start the job.

[00:36:47] HD: So I told them how long it would take, and then they urged me to buy the items as soon as possible because two days to buy and deliver the items to my house after the check clear was not gonna be enough time to prepare. Then they proceeded to ask me if I could purchase the items with my own [00:37:00] money and that I'll be reimbursed later with those checks incoming.

[00:37:03] HD: I said I only have so much of the equipment to buy with about $1,000 currently in my bank. I'm bluffing because I sense something was wrong at this moment. They told me to use what I had and urged me to continue with the purchasing process. I agreed, and then they instructed me on how they want me to buy the equipment from the authorized affiliate vendors.

[00:37:22] HD: They asked me to use a phone number given by their affiliate vendor and use Apple Pay, sending $1,000.

[00:37:27] Cybershortieee: Oh my God.

[00:37:28] HD: That's it. I set up my Apple Pay and then took a step back. Who are these vendors anyway? I know a vendor typically has a legitimate name and source, so I asked them, "May I ask who the vendor is I'll be purchasing this equipment from?"

[00:37:39] HD: They paused, then replied, "Company's authorized affiliated vendors." Yeah, no shit, Sherlock. I asked again, "I understand, but I would like to know what is the exact name of the vendor?" They paused again, longer this time. Then a message glitch happened. They replied with my name backwards and said, "His name is Scott."

[00:37:58] Cybershortieee: Oh my God. [00:38:00] This is a mess.

[00:38:00] HD: I would like to know the name of the vendor Scott works for and the equipment I would be buying from him. They asked me how much do I have to purchase the equipment. That wasn't my request, I told them. As mentioned earlier, I only have about $1,000 to possibly purchase a few of the items needed for this job, but before I proceed to send this, I would like to know the name of the vendors I'll be purchasing this equipment from and what exact equipment I will be buying from them.

[00:38:24] HD: They listed out three useless items, two of which was not part of the initial list of equipment the company was going to provide for this job. It wasn't even important equipment. It was computer specs and software. How would I use those without a PC they claim they were going to provide? Why wouldn't they suggest I purchase the PC over anything else?

[00:38:41] HD: They also gave me the name, the same name for the vendor this time. It's Scott Malcolm. So then it was clear to me this job offer was a complete scam. I shouldn't have had to ask them three times for a name if it were a legitimate company from legitimate vendors. I shouldn't have to send my money first to an unknown number through text [00:39:00] messages.

[00:39:00] HD: The number they wanted me to send the money to, I was curious if they were a real vendor, and since it was my money, I wanted to see if I could get the confirmation from the vendor themselves about their partnership with the company. The person on the other end had no idea what I was talking about and told me I had the wrong number.

[00:39:14] HD: I then contacted the recruiter again telling them how I felt this process, how I felt about this process. I told them how I don't feel like they answered my questions fully, and I don't feel comfortable proceeding with the purchase if they never gave me a proper name of the vendor. They still asked me a few minutes later if I would proceed and I eliminate the onboarding process.

[00:39:32] HD: And with that, they finally end our wonderful conversation with, "Okay, thanks for wasting my time." And me being stupid and petty replied, "No problem. Your AI could use some improvements." The scammer then replied, "Will AI send you a check?" Mm. A check I'm sure was gonna bounce if I had agreed to give my money to a mysterious vendor.

[00:39:47] HD: I then said, "You may cancel that process," and report blocked and completely ended the conversation. This was the most embarrassing and dumbest experience of my life.

[00:39:56] Cybershortieee: Well, I mean, it wasn't that embarrassing and dumb because you didn't [00:40:00] follow through with a lot of it. You asked some good questions at the appropriate times to get yourself out of that situation.

[00:40:06] Cybershortieee: I still-

[00:40:08] HD: No, it's definitely embarrassing ...

[00:40:09] Cybershortieee: I still can... The email me the check. The buy your own equipment, first of all. Yeah. They had me stuck, uh, they had me stuck there. Then we gonna email you a check? Then Apple Pay? What?

[00:40:25] Cybershortieee: Apple Pay is crazy.

[00:40:27] HD: Apple Pay-

[00:40:28] Cybershortieee: Apple Pay, a phone number ...

[00:40:29] HD: the crazy thing is, so most of the girls know this, but- How

[00:40:32] Cybershortieee: much money do you have?

[00:40:34] HD: Right.

[00:40:34] Cybershortieee: It's crazy.

[00:40:36] HD: And I would just throw the number in the Cash App.

[00:40:39] Cybershortieee: That's, I was just thinking that. I literally was just thinking that. But at least he called to get...

[00:40:43] Cybershortieee: I mean-

[00:40:44] HD: Yeah, that's the oldest trick in the book. They'll, like, uh, I wish I could... I probably could find it somewhere in my email. I had a client at the time, they really were trying to get a job at the time, and they were so anxious to get one to where it was one of them things where they had to fill out a survey and said, "You got the job."

[00:40:58] HD: I was like, [00:41:00] "You would think this job paying you..." I forgot what they was paying him at the time, or trying to, at least they was gonna pay him. But it was like 75, 85,000. I said, "You think they gonna pay you $85,000 and all you had to do was fill out a questionnaire?"

[00:41:12] music: Mm-hmm.

[00:41:13] HD: I said, "This is not legitimate." And he was like, "Dang, yeah, you right.

[00:41:16] HD: I should have known, but I think I was just anxious." Yeah, I know, genuine. But you know, good things come to those that wait. If a company's trying to send you a check to buy something though, mostly you would never have to buy company equipment to work for somebody. If anything, they have these different type of ordeals where like, um, you get these allowances to where you could buy stuff for your home office, and then they'll reimburse you, stuff like that.

[00:41:44] HD: But it's not to really do the job. It's like, "Ooh, I want me a com- a, a computer desk," or, "I want a new chair."

[00:41:49] Cybershortieee: I feel like that's illegal.

[00:41:51] HD: What?

[00:41:52] Cybershortieee: What they were trying to get him. I mean, duh, the whole thing was illegal, but I feel like, I feel like that's illegal.

[00:41:57] HD: Yeah, they trying

[00:41:58] Cybershortieee: to- Like, there's gotta be some-

[00:41:59] HD: Yeah, 'cause [00:42:00]

[00:42:00] Cybershortieee: they was gonna take- There has to be some separation of vouchers

[00:42:01] HD: they was gonna take the money and then leave him stuck with whatever

[00:42:04] Cybershortieee: happened. 'Cause u- 'cause usually you have a, a company card-

[00:42:08] HD: Mm-hmm ...

[00:42:08] Cybershortieee: which is a, a, tied to some type of, some sort of bank account that the company is then, you know, liable for. Well,

[00:42:14] HD: not even, not even that. I'm just talking about a lower level of, well, if you starting a job, they ain't...

[00:42:19] HD: 'Cause everybody don't get a company card.

[00:42:21] Cybershortieee: Well, well no, before that though, you, if you, if they're asking you to purchase it is what I'm saying. Oh, yeah, yeah. Usually you have a com- Yeah, yeah ... a corporate card. But if, in this circumstance, usually they, there's a online inventory, and you go through and you choose...

[00:42:35] Cybershortieee: They might give you some options to choose- Mm-hmm ... which device for your particular role, or it might already be, "This is the, the device we have slated for everybody that starts." Like, it's insane.

[00:42:48] HD: Nah, facts.

[00:42:50] Cybershortieee: Okay, I have a good one.

[00:42:51] HD: Okay.

[00:42:52] Cybershortieee: Final year cybersecurity student looking for ideas for my graduation project.

[00:42:56] Cybershortieee: I thought that this was really good for folks that are [00:43:00] more, um- Open with their experience to try something different. So this is what someone put on Reddit. They said, "Hey everyone, I'm a final year cybersecurity student, and I'm currently trying to decide what to build for my graduation project. Rather than making assumptions about what people need, I thought it would be better to ask those who actually work in SOC, blue team incident response, detection engineering, or security engineering.

[00:43:24] Cybershortieee: From your experience, what's the biggest frustration in your day-to-day work that today's tools still don't handle well? It could be anything, whether it's investigating incidents, dealing with false positives, alert fatigue, lack of context, repetitive manual work, poor integration between tools, or something else entirely.

[00:43:41] Cybershortieee: If you could have one new feature or one completely new tool built that would genuinely make your job easier, what would it be? I'm not trying to promote anything or do market research. I just want to understand the problems professionals face so I can build something that's actually useful instead of another project that solves a problem [00:44:00] nobody has.

[00:44:00] Cybershortieee: I'd really appreciate hearing your thoughts, even if it's just a small annoyance that you run into every day. Thanks." And they got some really, really, really good responses on it, and I just wanted to point that out as a Reddit being just another area where you can go and get some feedback. Um, you could as easily post this type of stuff on LinkedIn and hopefully get some responses as well, but I thought that this was a, a dope use of one's time to try to pick...

[00:44:25] Cybershortieee: 'Cause this person is lucky they can even pick their projects.

[00:44:29] HD: Yeah. I mean, so what I'll also tell this person is that just because the problems may have been solved already don't mean it was done the right way.

[00:44:36] Cybershortieee: Mm-hmm.

[00:44:37] HD: We have-- Think about how many-

[00:44:39] Cybershortieee: Tools we have that, that

[00:44:39] HD: solve- Or do the same thing Yeah.

[00:44:41] HD: But one is maybe better than the other.

[00:44:42] Cybershortieee: Yeah.

[00:44:43] HD: So don't think that if you try to do something that's already done, that you can't improve on what's already been done, because sometimes you don't have to reinvent the wheel.

[00:44:51] music: Mm-hmm.

[00:44:51] HD: And it's not about who did it first, it's about who did it right. Preach.

[00:44:58] HD: Jerks said that, by the way. [00:45:00] But, um, but no, I mean, what's something that'll make your day easier?

[00:45:06] Cybershortieee: Mm.

[00:45:08] HD: I bet I know what it is.

[00:45:09] Cybershortieee: An agent.

[00:45:10] HD: I know. Yeah. But I was gonna take it a step further. A fully functional AI deep fake agent that could just join your calls and could talk for you. That sounds just like you.

[00:45:21] Cybershortieee: Ooh, don't talk for me.

[00:45:24] HD: You would be... Let's say for instance, you would be sitting over there, and you're looking at the agent, and it's you, but it ain't you, but you listening, but you talking back through the agent. That way you ain't gotta be on the call for real.

[00:45:34] Cybershortieee: I like, um-

[00:45:35] HD: And the agent is listening better than you, 'cause it's listening.

[00:45:38] Cybershortieee: I do like... I, I love a agent. If a agent could help me square away, like, "This is what I think you should focus in on for the day," requires it to be plugged up to a lot of different things. But that would, that would make my day a lot easier. It do so? Yeah. 1,000%.

[00:45:53] HD: For me, I mean, we are using a lot of that stuff though, to be honest.

[00:45:56] HD: We...

[00:45:56] Cybershortieee: I, I have some of those capabilities available to me, you know, [00:46:00] to use. Um, I would just have to build it out myself. But yeah, I don't want to.

[00:46:06] HD: Yeah. We, we are... All our tools now, like, have, like, AI in it. Now whether it works the best or not-

[00:46:12] Cybershortieee: Mm-hmm ...

[00:46:13] HD: neither here nor there. Um, but I don't know. Now personally for me, I need a good agent that could do marketing for me, that I don't have to do all the marketing.

[00:46:24] HD: Preach. So if I can do that, uh, that'll definitely help me, which I know I probably could. It's just a lot that gotta go into building it out and connecting it so it sends out everything when it needs it. But the hard thing is, no matter what different AI tools there are, whether it's the Opus or any other tool, it never gets the cuts just right the way that I would probably like them or that would resonate with whoever's watching the content.

[00:46:47] HD: So it's, it's one of those things where you always gotta-

[00:46:50] Cybershortieee: You still need that, you still need that human touch.

[00:46:52] HD: Mm-hmm. Human in the loop to kind of go through everything and, um, and see how it's playing out. Let me see. Did I have [00:47:00] one more for Reddit time? That was a long Reddit.

[00:47:09] HD: Oh, this was a good one. So the question would be, do degrees in cybersecurity create incompetence in cybersecurity? And here's the Reddit five days ago. "I was legit the first graduating class in the US to have a BS in cybersecurity. My first job was at a Fortune 500, and everyone was shocked to see me in the room because it's historically been for people halfway out the door trying to retire with five to 10 years of fatter paychecks.

[00:47:36] HD: I quickly learned that while the concepts I learned in school applied and were valuable, this was also because no one took security seriously at all, so the best practices didn't really exist or weren't real known. We're talking early 2000s. My best friend happens to work for a major insurance company in the cybersecurity department.

[00:47:53] HD: We've had plenty of long conversations, and basically it comes down to the fact that the more companies who are hiring younger [00:48:00] security people with BS degrees, the more incompetent those companies are in their security department and the less coverage and payouts they end up getting because of this." I disagree, but let's keep going on.

[00:48:11] HD: "These days, your 20 year industry experience... Yeah, your 20 years industry experience is far more valuable, and everyone knows the core concepts around security just being in the industry that long. So not only is the degree oversaturating the market, it's also making companies less secure in general as managers put blind faith in someone with a diploma that says they're an expert over the experts that paid their dues through decades of experience.

[00:48:35] HD: I'm curious to what other people think about the quality of work you get out of graduates. I always discourage getting a cybersecurity degree and think everyone should get a much broader one because especially I think it's bad to start off in a niche education when you don't even know what security really is.

[00:48:50] HD: In many ways, and many may want to go down a different path after they have five plus years in the industry. Disclaimer, I got out early for greener pastures and you [00:49:00] know the insurance people, so I'm curious if you see this in person. Half my information is hearsay." Hey, the first comment said, "After reading this twice, I still have no clue what you're trying to say."

[00:49:13] Cybershortieee: Um, just because you get a degree does not mean you're an expert.

[00:49:16] HD: I, yeah, I, I don't

[00:49:18] Cybershortieee: really- And just, and just because you have 20 years of experience also does not mean you're an expert

[00:49:26] HD: I don't really understand it either because some of those people will come in and get rotational programs, don't mean they're an expert. I can also confidently say just 'cause you were 20 years in don't mean you are an expert. You probably the last 10 years been BS'ing.

[00:49:44] Cybershortieee: I don't, I don't think that, uh, I don't agree.

[00:49:48] Cybershortieee: That's what I think. I don't agree with him.

[00:49:50] HD: Nobody agrees.

[00:49:51] Cybershortieee: Yeah.

[00:49:52] HD: I, it doesn't make sense 'cause like I said, I've worked with these people that's been there a long time and they not, they're not better than the people that's [00:50:00] labbing every day. So how in the world, like you know a lot of policy-

[00:50:04] Cybershortieee: And then that just, I think it, it's coming from a perspective that assumes that all cybersecurity programs are treated the same, and they're not.

[00:50:12] HD: And he's basing this off of when they came out of school in the early 2000s versus- That was a long- ... what it is now ... time ago.

[00:50:18] Cybershortieee: Yeah.

[00:50:19] HD: I mean, companies don't want to pay the extra for seasoned security professionals. That's why there are so many juniors in these roles. Hardly see why that's the cyber degree problem.

[00:50:28] HD: The degree is blamed because it's easier to blame the little guy

[00:50:34] Cybershortieee: Sure.

[00:50:36] HD: I saw someone with a Sec+ dox themselves on Reddit using a black highlighter on the cert, and I'm just like, "Damn, some company's putting their faith in that dude." That doesn't mean that. Another where a guy going for cyber BS didn't know if something was phishing when it was the VP contacting him and 100 plus others from a random Gmail account and not a company email.

[00:50:55] HD: Another where a guy said eight gigs of RAM was useless for finance school and [00:51:00] light browsing, not realizing what the speed was or how well optimized it was with the hardware, and he got dragged in the comments. That's IT to the same point. Well, I was just

[00:51:07] Cybershortieee: about to eat that one up

[00:51:13] HD: Yeah, so it's like, uh

[00:51:18] HD: I don't know. I, I, I really don't agree. I think this is, uh, one to put back on the audience and saying, "Hey, how do you feel about cybersecurity degrees? Do you think they're incompetent or not?" Which I don't. I just don't... I really wish I could talk to the person 'cause he's probably older. If, if he's talking about early 2000s, um, I was 18 by 2010, and so we're gonna say this person was, uh, already probably close to 30 by the time I was 18.

[00:51:46] HD: So now he should be what? Close to 50. So they got a different perspective on, on things, so I, I really don't agree with that 'cause it doesn't make a lot of sense at all. He didn't really-- It was more opinion-based. It was really nothing that stated that why [00:52:00] that person couldn't do the job. Like- Yeah ... 'cause he was talking about, like you said, theory and concepts, so you don't know things, but you know, know what some people did in school, which is right here, plug in SNHU Uh, matter of fact, I might put the clip in from my guy Rob, Rob Burse.

[00:52:18] music: Mm-hmm.

[00:52:19] HD: We were having a call, a client call the other day, and, um, we were talking about how he was enjoying SNHU so much with their program and how he's actually doing, um He's doing things for the program, and he is, uh, learning stuff, and it's not just all paperwork and inserts. And I was like, "Cool, that's what I'm glad to hear 'cause I really-

[00:52:42] HD: And

[00:52:43] Cybershortieee: again, back to that article, all programs are not treated the same. All programs are not supposed to be the same. Some stuff is supposed to be quick, fast, and easy for you. Some stuff is supposed to require more from you.

[00:52:55] HD: Facts. Facts. Did you wanna get on Scatter Spider?

[00:52:59] Cybershortieee: Yes. [00:53:00] All right, so five and a half years.

[00:53:04] Cybershortieee: Scatter Spider gets sentenced. So the UK's National Crime Agency announced that two young men have been sentenced for a cybers attack, for the cyberattack on Transport for London, the agency that runs the Underground, which is their buses, and really just the whole city's transit system. Um, Tala Joubert, 20, from East London, Owen Flowers, 18, from Walsall, five years and six months each.

[00:53:34] Cybershortieee: They were both leading members of the group known as Scatter Spider. Scatter Spider has been one of the most disruptive cybercrime collectives over the last few years, and their signature isn't elite code, it's actually social engineering. If you're a long timer here, we have talked about them time and time again, um, so hopefully that rings a bell.

[00:53:52] Cybershortieee: Um, but they are notable for calling help desk, impersonating employees, SIM swapping phones to steal the codes that [00:54:00] are text to you. The FBI Cyber Division said exactly that. Data extortion, SIM swap, social engineering, same thing as one of our segments that we kind of talked about today. Now the damage is, uh, 27,000 employees had to physically go into an office to reset their passwords.

[00:54:18] Cybershortieee: 148 systems went down. 29 million pounds in losses and recovery. But it's which systems that got me. Dial-a-Ride, the service that provides transport for vulnerable Londoners, disrupted. Concessionary travel cards, Oyster photo cards for children and young people, the refund system, so people were out of their money for even longer than, you know, they would have been on a normal circumstance.

[00:54:47] Cybershortieee: When people picture a cyberattack, they picture a corporation losing money. Look at who actually got hurt in this particular circumstance. We have, um, disabled individuals who couldn't book their ride. We have [00:55:00] kids who couldn't get their travel cards. The most vulnerable users of a public system are always the ones who feel an outage first because they are the ones who usually have fewer alt- alternatives.

[00:55:11] Cybershortieee: Um, the NCA said if the attack had actually shut down the transport network, the estimated cost to the UK economy could have been up to 56 billion pounds. When Flowers was arrested, he was at that moment in the middle, he was in the middle of hacking two American healthcare companies. Investigators seized laptops, towers, hard drives, USB sticks.

[00:55:34] Cybershortieee: One laptop had a screenshot of network connectivity to TFL infrastructure. It also had videos he had recorded of his partner accessing TFL systems during the attack. So they recorded themselves obviously. Obviously they kept it. Um, they both pleaded guilty on the morning they were due to stand trial, and the NCA credited TFL for something specific, engaging law enforcement early.

[00:55:58] Cybershortieee: They said that these convictions likely [00:56:00] wouldn't have happened otherwise. Reporting early is what helped this case, um, be made. Um, now, these are two young men with real technical talent who are going to spend their 20s in prison. Nobody wins here. The NCA points people toward a program called Cyber Choices.

[00:56:16] Cybershortieee: It exists specifically to help young people with these skills use them legally. I learned about this in school. Um, if you're listening and you're young and you're good at this, there is a legal version of every single thing that excites you about using these different technologies. Bug bounties pay, um, red teaming pays, CTFs are free and legal and fun.

[00:56:37] Cybershortieee: Um, the line between the highest paying career in tech in five and a half years is authorization. Um, so kind of think about that. This is only the second UK prosecution too, under their Computer Misuse Act, which is crazy. Him being caught in the middle of hacking two companies, also crazy.

[00:56:59] HD: Okay.

[00:56:59] Cybershortieee: Cyber [00:57:00] Choices, kinda cool though.

[00:57:01] HD: Yeah.

[00:57:02] Cybershortieee: Imagine what type of gurus they got there.

[00:57:06] HD: You know, I always be like that, but sometimes it do. While you were reading that amount, I wanted to see how much 56, um-

[00:57:15] Cybershortieee: How much it was in

[00:57:15] HD: American dollars? I actually did that wrong Yeah. So 56 billion pounds in US dollars is $75 billion. Oof.

[00:57:29] Cybershortieee: Like- That's a lot of money.

[00:57:31] Cybershortieee: And I don't think America doesn't have the most consistent public transportation system 'cause some cities don't have public transportation. I don't know about states, but I know s- like a lot of cities in the DFW area, they don't. I

[00:57:46] HD: know. To that number real quick.

[00:57:48] music: I beg your pardon?

[00:57:50] HD: That's a lot of bread.

[00:57:51] Cybershortieee: That's a lot of money for, for just transportation.

[00:57:55] HD: Yeah. That's, that's crazy. Um, but yeah, I mean, I, I [00:58:00] think that... So one of the things that happens is once you catch these people and they start facing consequences, it starts making people second guess what they're doing. And then a lot of times these people will eventually get jobs somewhere because they were able to do some stuff to their networks or whatever, and it's like, "How did you do it?"

[00:58:17] Cybershortieee: Five years is nothing- Yeah ... first of all.

[00:58:20] HD: They'll be out in like two years probably.

[00:58:21] Cybershortieee: Five years, and they gonna be in that cyber program, and they gonna go work and help those folks over there do whatever it is they trying to do. That's crazy. Yeah, man. Five years? That's a slap on the fingers, not even the wrist.

[00:58:35] Cybershortieee: Mm-hmm.

[00:58:37] HD: Let me see. Speaking of that, let's, let's switch, let's switch to Mooda real quick. Let me go here, and let's

[00:58:54] HD: Have some fun

[00:58:58] Cybershortieee: My ear is itching. What that mean? [00:59:00] Put that in, put it in the comments. What does it mean when your ear itch? Ain't somebody talking about me?

[00:59:03] HD: You finna get some money.

[00:59:05] Cybershortieee: No, that's your hand.

[00:59:07] HD: Let's talk about... And we should've did this one right after what we were talking about with, uh, when I was talking about SNHU, um, with Full Sail University.

[00:59:19] HD: But let's have some fun and talk about our favorite generation

[00:59:26] HD: Let me get the play speed Test

[00:59:45] HD: Right

[00:59:47] music: This is what we mean when we say we're losing recipes. Gen Z, you know, professionalism really goes over their heads. All of those skills that millennials and previous generations learned, yeah, Gen Z and, you know, the [01:00:00] other generations following them, they are losing the recipes, the art of professionalism.

[01:00:04] music: Now, not all of the antics, but there are some skills that are important in the world of being a professional and showing that you're a grown-up. So right now there is a video of this girl who looks pretty young, so she's presumably Gen Z, who is crying about how she got this dream job and the dream job rescinded their offer.

[01:00:20] music: So basically, she's already quit her current job in the state that she's in. She's already packed up all of her stuff, got a brand new ap- apartment in a state across the country, okay. She's three days away from moving into said apartment across the country. The dream job, okay, they had certain deliverables that needed to be signed, notarized, and sent in by a certain date.

[01:00:35] music: She did not do those things, and so they rescinded the job offer. And this is where the skills of professionalism really come in, okay, because somebody was supposed to teach her that while she was e- in all of her excitement getting all of those things together, she needed to be prioritizing, right, the deadlines that her job is giving her.

[01:00:52] music: Deadlines are not suggestions. They're not-- They don't give you a grace period when you are getting paid to deliver a product by a certain date. [01:01:00] Now, we all know that most of the process of getting a job these days is BS, but the gist of the other things like having deadlines and schedules and such, that is to show that you are able to meet deadlines, because when they start paying you for this, you're getting paid for that.

[01:01:14] music: That's your job. Like y'all are forgetting the way that jobs think, right? There's so much ethos, there's so much, like ethics and emotions that are being placed into the professional field, and it's not to say that that's wrong, but at the same time, emotion doesn't necessarily live in business, right? So when you are trying to think about how a business is perceiving you as an applicant, you have to think about how they think about their business structure and their business model.

[01:01:37] music: So historically, hiring young people isn't good for business. Why? Because the turnover rate is way too high, so you have to spend a lot of money in training new people who are constantly coming in the door, right? You don't have like a sound person in that position then, so that creates instability in that section of the organization.

[01:01:54] music: Like there, there are levels in which one employee can create an entire domino ripple [01:02:00] effect up and down the chain in the organization. So it's not just about you and the couple of days of grace period that you feel like you might need. Again, that's something that you communicate, because at the end of the day, what your business, what a, what a job is thinking is, is this person gonna be reliable?

[01:02:14] music: Is this person gonna be somebody that I can count on and make sure that I don't have to hold their hand so that my business doesn't fall apart?

[01:02:20] HD: No, she is actually- It

[01:02:22] Cybershortieee: a- it actually starts at home.

[01:02:25] HD: But look, she actually is saying what the guy thought he said. The

[01:02:31] Cybershortieee: last episode?

[01:02:32] HD: With the cybersecurity degree When the sensor he was talking about- All the skills

[01:02:36] HD: the, the people coming in- Yeah ... and they don't know this and theory. That's what you were saying, and I agree. This happened on, this was on X before too. A guy lost out an offer 'cause he didn't follow up on an email or something he got. And I'm here to say, if you get an offer, check your email-

[01:02:51] Cybershortieee: Regularly

[01:02:51] HD: every, every minute- Yeah ... every

[01:02:52] Cybershortieee: hour. Yeah, for real.

[01:02:53] HD: Like, if you don't understand what they gonna send you, talk to the recruiter or send them a text, then call them, "Hey, can I expect, what type [01:03:00] of documentation can I expect? When will it be here?" Et cetera, et cetera. So you can make sure you did your part and not them.

[01:03:05] HD: Like, let it be on them, not you. 'Cause that is something to teach. But it goes back into let's maybe cut the young lady some slack. Maybe nobody in her family had a corporate job.

[01:03:14] Cybershortieee: That's why I just said it, it starts at home, too, and maybe she was never even held to that regard and that standard. Some... Yeah.

[01:03:25] HD: But I think it goes to

[01:03:26] Cybershortieee: that- Being on time, that's stuff you learn at home, you know what I mean? Timeliness and, and following up and how back when we were coming up, you used to actually call a job. I'm checking out my res- Mm ... you know, it was different. And our, some of our folks are still telling us to call the people and follow up on- Yeah

[01:03:40] Cybershortieee: and that ain't even a thing no more. But it's, it, a lot of s- a lot of that stuff can, can be learned in school and can be taught at home.

[01:03:48] HD: Yeah. I would say initiative, though. Remember that, that I word, initiative, where... Your ear itch. It's- It's,

[01:03:56] Cybershortieee: I... What is tea?

[01:03:58] HD: And you got on green. [01:04:00] But, um, it's one of those things.

[01:04:02] HD: Like my baby brother, he's getting ready to start his job, I think like two weeks. I was always like, "Hey, did you, they send you anything else what you gotta sign?" I'm, I, on him 'cause, hey, you miss something, hey, sorry, you gonna have to go to the next training class, the next one. Like, so people think when they get the offer, it's done.

[01:04:16] HD: It's not. And I know they, I feel bad for her, um, because she was ill-advised

[01:04:22] Cybershortieee: to move.

[01:04:23] HD: It, it was a

[01:04:24] Cybershortieee: good

[01:04:24] HD: lesson learned. Yeah.

[01:04:24] Cybershortieee: It was a good

[01:04:25] HD: lesson learned. But it's a tough lesson learned.

[01:04:25] Cybershortieee: It's a, it's a, it's a, it's a tough lesson. I'm sad she had to learn that lesson, but she ain't gonna do it again.

[01:04:30] HD: Yeah.

[01:04:31] Cybershortieee: You know what I mean?

[01:04:32] HD: Yeah. Just poor baby. But, um, what y'all think? Have y'all ever got a job offer rescinded because you didn't fill out your deliverables?

[01:04:42] Cybershortieee: No. Why? I was so thirsty for the job.

[01:04:46] HD: Hey.

[01:04:46] Cybershortieee: When you on your knuckles and you- Listen ... trying to get them, you is, like you said, you checking that email. You check- You emailing them.

[01:04:52] Cybershortieee: Look- "Hey, you said you were gonna send it today. I didn't get anything. Just making sure." That's... Yes.

[01:04:57] HD: Yeah, no, like, deadass, [01:05:00] when I was about to start at McAfee, I was at LA Fitness right there on Main Street in, uh, Tollway. I just happened to go check... Like, it was either about to play ball or was in between games.

[01:05:15] HD: I looked at the phone. Email, "Hey, this is so-and-so from so-and-so. Hey, when can you meet? Today?"

[01:05:21] Cybershortieee: No, for real. And when you, when you are... What do we call that?

[01:05:27] HD: Ready?

[01:05:29] Cybershortieee: Mm-mm. I'm wanting a more magical word. I don't know. But when that is the type of person that you are, you're gonna hit the... Even when it comes to setting up interviews, you know, you trying to get in ASAP, not later.

[01:05:41] Cybershortieee: I mean, of course, according to your schedule. Or when it comes time to do your background check, if there's an appointment tomorrow and you can go, why would you choose an appointment next week?

[01:05:51] HD: Let's see. You got, uh, prepared, primed, conditioned. [01:06:00]

[01:06:00] Cybershortieee: Hmm.

[01:06:02] HD: Willing, inclined. Hungry. Prone.

[01:06:07] Cybershortieee: I like hungry.

[01:06:09] HD: Favorable, prompt, predisposed, responsive.

[01:06:16] HD: I never seen this word before, delirious. Desirous Oh, desirous. Ooh, got me. That's right, desi- oh, it's, it's formed based off the root word would be desire, but the way it's spelled, it made me think it's erious. Enthused, accommodating, quick.

[01:06:36] Cybershortieee: I think hundred.

[01:06:37] HD: Oh, one of our favorite rappers' words. Expeditious.

[01:06:42] Cybershortieee: Expeditious, yeah.

[01:06:44] HD: Tia. Nah, he said-

[01:06:46] Cybershortieee: Expeditiously ... that,

[01:06:46] HD: that day, they was like, "When can you start?" I said, "When y'all need me."

[01:06:50] Cybershortieee: No, that's how... Like, seriously, seriously. And then because, because you already, you're eager, and I'm not saying this young lady wasn't eager, but [01:07:00] Times are different

[01:07:02] HD: Matter of fact, listen, you know how be dedicated and ready you gotta be to go home to put a suit on to go meet somebody?

[01:07:09] HD: They wasn't in no suit at all. I had that suit on off for like three minutes.

[01:07:14] Cybershortieee: And then also too, we getting, we getting back to a lot of, um, 'cause my brother just got a, a new tech role and he interviewed in person and I'm like, "Bro, I, I have never interviewed in person for a tech role." That's crazy. Real crazy.

[01:07:29] HD: Hmm. Beat me back right there. While we are on the job topic, I thought this one was pretty good. Um, that's not it

[01:07:45] HD: Now let me

[01:07:49] HD: That boy got stretchy pants. That boy got stretchy pants

[01:07:53] Cybershortieee: What five movies did you burn out as a kid?

[01:07:57] HD: Uh, easy. Major [01:08:00] Payne.

[01:08:00] Cybershortieee: I was... That's top for me too. Yeah.

[01:08:03] HD: Major Payne, School of Rock, Little Rascals.

[01:08:06] Cybershortieee: Little Rascals for me.

[01:08:08] HD: Roll Bounce, Three Ninjas. All of them.

[01:08:12] Cybershortieee: I'm gonna say BAPS. I'm gonna say Major Payne, Fat Albert, The Klumps, the first one, The Nutty Professor.

[01:08:18] Cybershortieee: Actually, The Nutty Professor, 'cause The Klumps is the second one. The Nutty Professor and Little Rascals. Burn- burnt them up.

[01:08:26] HD: Hey, if you are watching us still, you in the comments, can we get a spolioli?

[01:08:31] Cybershortieee: What is that?

[01:08:32] HD: You done, you done burned out Little Rascals and not know what that is. When they do the hand like, "Spolioli, spolioli."

[01:08:38] HD: I haven't watched it

[01:08:39] Cybershortieee: in a really long time.

[01:08:40] HD: I can do it word for word.

[01:08:41] Cybershortieee: I haven't watched it in a long time. But I do like watching movies that I used to watch a lot as a kid, as an adult. Like, when I watched BAPS, I was offended. Really? I was like, "Who wrote this?"

[01:08:50] HD: You gotta go Tyson on them, girl.

[01:08:52] Cybershortieee: What... Who wrote this?

[01:08:53] Cybershortieee: It's about two ghetto girls. Like, it, it's a lot going on. Black exploitation. It's a lot going on in the movie.

[01:08:59] HD: [01:09:00] Don't say it unless you mean it. I mean it.

[01:09:03] Cybershortieee: I mean it.

[01:09:05] HD: No, we always laugh at that movie. It's still funny, though.

[01:09:08] Cybershortieee: What she say? "Uh-uh, we finna go to the bathroom." It's funny. After he couldn't buy them no, no, uh...

[01:09:13] Cybershortieee: What was that, like $2?

[01:09:15] HD: Uh-huh.

[01:09:15] Cybershortieee: The beers.

[01:09:16] HD: I think so.

[01:09:16] Cybershortieee: Ladies get in free. Ladies, ladies, ladies. I can... No, I can word for word that down.

[01:09:22] HD: I can tell. I can tell that's your movie.

[01:09:23] Cybershortieee: That's my movie.

[01:09:24] HD: Mine is... I be, nah, I be stemming off- Major

[01:09:26] Cybershortieee: Payne, too ... Major

[01:09:27] HD: Payne. Matter of fact, hang on. 'Cause y'all know this my movie, 'cause watch this.

[01:09:31] HD: Let's do this, Johnny

[01:09:35] Cybershortieee: Is that Chris Tucker?

[01:09:36] HD: Mm-mm. They pitched the voice up, but that's Sweetness.

[01:09:40] Cybershortieee: From what movie?

[01:09:41] HD: Roadhouse.

[01:09:42] Cybershortieee: Oh. You know, I was not a Roadhouserer.

[01:09:44] HD: Really?

[01:09:44] Cybershortieee: I on- I only watched it a couple times. Let me see if I can

[01:09:46] HD: hit

[01:09:46] Cybershortieee: it real quick. It was, it was big, but it wasn't my thing. I remember, I remember the plot.

[01:09:51] HD: Let me see. "Make some noise for Sweet..." I can't even do it that high. I can't do it. Uh, but I used to be able to do that Sweet-[01:10:00]

[01:10:06] Cybershortieee: towel. He skating now That was with Bow Wow Uh-huh Bow Wow was arguing with his dad in the garage

[01:10:07] HD: Brenda T. Jackson- Yeah ... uh, Jurnee Smollett, Making Good, Nick Cannon

[01:10:11] Cybershortieee: Brandon was on the roof for some reason

[01:10:13] HD: Wesley Jonathan. Who?

[01:10:14] Cybershortieee: He was on the roof in the movie, on a rooftop or something.

[01:10:17] HD: Who?

[01:10:18] Cybershortieee: In the movie, Brandon.

[01:10:20] Cybershortieee: I made that up.

[01:10:20] HD: You thinking about Lottery Ticket. Two separate

[01:10:21] Cybershortieee: movies. I'm

[01:10:21] HD: 1,000%

[01:10:22] Cybershortieee: thinking about

[01:10:23] HD: Lottery Ticket. You thinking about, "I can't eat."

[01:10:24] Cybershortieee: Yeah, I'm thinking about Lottery Ticket. Yeah, yeah, yeah.

[01:10:26] HD: But, uh, let's play this one real quick. It's, um... She's talking about why she don't like one-way AI interviews.

[01:10:33] music: I personally refuse to do one-way interviews because, as a Black woman, all of the major AI systems have shown to have error rates as high as 35% for women specifically of color. You know, so when you have a darker complected person, it is harder to determine whether or not, you know, the look on my face is just my general resting, you know, B face, or if it is, you know, in fact that I am hostile or angry or, you know, something.

[01:10:56] music: But they're using basically those visual indicators to determine whether or not I'm [01:11:00] a good cultural fit. And we, we see a lot of this, um, going into the pipeline for employment, for jobs, and I think that the outcome is going to be that we're going to start seeing a lot less diversity in the hiring because, you know, the systems are gonna basically pick the people who are what they feel is the best fit.

[01:11:18] music: And I think that until we get those biases addressed, these systems trained, then we're going to continue to start seeing some of those downstream impacts.

[01:11:26] HD: I agree though. Um-

[01:11:27] Cybershortieee: Is that, is that... I mean, I know people do AI interviews, but is it, is it more popular than what I'm thinking?

[01:11:34] HD: It's trash.

[01:11:34] Cybershortieee: I know it's trash.

[01:11:36] Cybershortieee: It's popular. I've s- I've seen it on, um, I've seen it on TikTok. They'll keep asking you the same questions over and over, or they might end the interview.

[01:11:43] HD: I don't even like the... If it's, even if it's not, I don't like one-way interviews because-

[01:11:48] Cybershortieee: What's a one-way inter- Well, like when you have to, uh, answer the, like when they ask you the question and like you're recording.

[01:11:53] HD: You gotta do a response. Yeah, yeah, yeah. It's just weird. It's-

[01:11:54] Cybershortieee: I've done a couple of them

[01:11:55] HD: And I don't like them. I didn't get them jobs either.

[01:11:57] Cybershortieee: I was gonna say, I think that, I, [01:12:00] I hope that in this AI world, that leaders, um, especially those in recruiting, I hope that they see how important it is to, for a cultural fit, you need to actually talk to that person and not allow an AI tool to make its own inferences about if this person is good for your culture, just like she said.

[01:12:20] HD: Yeah.

[01:12:21] Cybershortieee: I don't, I don't... How you, how you gonna, how you gonna know if I'm good for the culture if you ain't never talked to me?

[01:12:27] HD: Yeah. You got a point.

[01:12:29] Cybershortieee: And I, not me talking at the AI, 'cause I'm, you're talking at it, not to it. I don't know. I didn't know it... I knew it was happening, but I d- I d- I, I guess I don't understand how big it is right now.

[01:12:46] HD: Right. And then let's go to the ghost job thing, and then we'll get back on track with Flock, and then [01:13:00] we'll close it out with the Nolan AI stuff and whatever else I'm missing that we didn't bring up.

[01:13:10] Cybershortieee: Mm. Mm, mm, mm, mm, mm. Five snacks as a kid. What was you eating? What was your snacks?

[01:13:16] HD: Um, Honey Buns, Star Crunch.

[01:13:21] Cybershortieee: Ugh.

[01:13:21] HD: Zebra Cakes, uh, Nutty Buddies And I'ma go What's the, the cupcakes, the Hostess cupcakes?

[01:13:32] Cybershortieee: The white ones?

[01:13:34] HD: The-

[01:13:34] Cybershortieee: Or the... No, the-

[01:13:35] HD: The orange ones.

[01:13:36] Cybershortieee: Oh, you was, you was too greedy. You was too greedy. I'm gonna say, I was- I've always been, like, a cracker, Chex Mix, or Ch- Cheez-Its type of gal, so Cheez-Its, any fruit roll-up, um, hot popcorn, Cherry Heads, and I was, like, a pickle- I'm still...

[01:13:59] Cybershortieee: I, I was- [01:14:00] actually, I'm not even gonna go pickle 'cause I still eat pickles. I'ma go hot sausage.

[01:14:03] HD: Speaking of that-

[01:14:05] Cybershortieee: Out the jar ...

[01:14:05] HD: that's how I can tell you from up North, 'cause you can say sausage. Yep. Oh,

[01:14:08] Cybershortieee: yeah.

[01:14:09] HD: You, you- My

[01:14:09] Cybershortieee: grandma can't ...

[01:14:09] HD: you ever ask somebody from Down South to say sausage? Sha-shush. Sha-shush. Yeah, they can't, they can't say sausage.

[01:14:13] HD: Yeah. Sha-shush. Uh, but nah, speaking of, since you said Cherry Heads-

[01:14:20] Cybershortieee: Oh, I used to bust them down ...

[01:14:21] HD: what about Lemonheads?

[01:14:23] Cybershortieee: I was more of a Cherry Head person.

[01:14:24] HD: And then what about Warheads?

[01:14:25] Cybershortieee: Grapeheads.

[01:14:28] HD: Warhead- You didn't like Warheads?

[01:14:28] Cybershortieee: No, I was... I'm telling you, Cherry Heads, Grapeheads. I could do Appleheads, the green ones.

[01:14:34] Cybershortieee: I didn't really do the lemon ones like that. Okay. I didn't... I also hate the chewy ones. Okay. Get them out of here. Get them out of here.

[01:14:39] HD: What about, uh, bubble tape?

[01:14:44] Cybershortieee: Gum. The one that... I was a bubble gummer.

[01:14:47] HD: What about the Big Chew? They're like tobacco, but it's gum.

[01:14:50] Cybershortieee: Any gum, as long as I can blow a bubble with it.

[01:14:52] HD: What about Ring Pops?

[01:14:53] Cybershortieee: Yes. Ate

[01:14:54] HD: them up. Push Pops?

[01:14:55] Cybershortieee: I was a Push Pop kid, the orange ones. What about- 'Cause it was kinda... it was like a [01:15:00] low-key, like, a sherbet.

[01:15:01] HD: What about Nik-L-Nips? Nik-L-Nips. You know what I'm talking about? That's like little wax candy. They had, like, little juice in it, and you could chew on it.

[01:15:06] Cybershortieee: Yes, you could chew on it. Yep.

[01:15:07] HD: Uh-

[01:15:08] Cybershortieee: They used to sell them at, like, Save-A-Lot.

[01:15:09] HD: What about, um, not Chico Sticks. They like butter... It's like these, like, zebra, like, type of candy.

[01:15:20] Cybershortieee: Caramel apple suckers.

[01:15:22] HD: Oh, fire. My- one of my faves. The green ones? Yeah. Um, what's it called? Uh-

[01:15:27] Cybershortieee: Were you a Skittles or a Starburst person?

[01:15:30] HD: Um-

[01:15:31] Cybershortieee: I could only- ...

[01:15:31] HD: purple Skittles ...

[01:15:32] Cybershortieee: I can only do sour Skittles, and really, I just like to, like, suck the sour stuff off and be done with it. I do like Starbursts, prefer the, the pink ones.

[01:15:43] HD: Here they go. The peanut butter candy. These right here, these joints

[01:15:50] Cybershortieee: I do remember those ...

[01:15:51] HD: them joints, and then, um, yeah, but like, what-

[01:15:53] Cybershortieee: Did you, did you, did your mom used to let you get the fake cigarettes?

[01:15:56] HD: Mm-hmm.

[01:15:57] Cybershortieee: They, they had lost they mind when they started making, like, fake [01:16:00] Swishers.

[01:16:00] HD: The Marvel, uh, then you had, like, the beef jerky that was like, uh, tobacco. I remember all this stuff.

[01:16:06] Cybershortieee: Oh, I remember those.

[01:16:07] HD: I remember all these things, all this candy. Um, okay.

[01:16:10] Cybershortieee: Okay, real quick, real quick. Uh, peanut butter and jelly on the, on the, on the, on the wafer thing. Did you used to eat those?

[01:16:17] HD: On the wafer thing?

[01:16:18] Cybershortieee: On the graham crackers, sorry.

[01:16:20] HD: I think I know what you're talking about, yes.

[01:16:21] Cybershortieee: It was like a cold lunch.

[01:16:22] Cybershortieee: You would have those

[01:16:22] HD: things. Did you eat the, um, Dunkaroos?

[01:16:24] Cybershortieee: The donuts.

[01:16:25] HD: No, they're not donuts.

[01:16:28] Cybershortieee: Milk? No.

[01:16:31] HD: You didn't eat these?

[01:16:32] Cybershortieee: Mm-mm. Mm-mm. Nope

[01:16:36] HD: You wouldn't buy... That's crazy. You didn't, you knew you could buy- What type

[01:16:38] Cybershortieee: of, what type of Pop-Tarts did you used to eat?

[01:16:41] HD: Strawberry, wild cherry, um-

[01:16:43] Cybershortieee: With or without frosting?

[01:16:45] HD: Uh, with.

[01:16:47] Cybershortieee: Every time?

[01:16:48] HD: Mm-hmm.

[01:16:49] Cybershortieee: I like the strawberry ones without frosting.

[01:16:51] HD: And then, um, also, uh, they used to have like the yogurt Pop-Tarts where you could freeze them.

[01:16:56] Cybershortieee: Mm.

[01:16:57] HD: The Oreo was meh.

[01:16:59] Cybershortieee: Toaster [01:17:00]

[01:17:00] HD: Strudels. What, what about Toaster Scrambles?

[01:17:02] Cybershortieee: What's that?

[01:17:03] HD: It's the Toaster Strudel, but it's, it's, like, got eggs and- Nope

[01:17:06] HD: cheese and stuff in it. Mm-mm. It's fire.

[01:17:09] Cybershortieee: Eggo. Buttermilk or home style?

[01:17:12] HD: Blueberry.

[01:17:14] Cybershortieee: You too freaky.

[01:17:15] HD: I had a blueberry Waffle House waffle the other day.

[01:17:18] Cybershortieee: You, so you will eat those today? Yes. Yes. I don't, I, plain waffle me. I got

[01:17:21] HD: kids.

[01:17:22] Cybershortieee: Plain waffle me.

[01:17:23] HD: Anything. Shoot.

[01:17:24] Cybershortieee: As a kid, though, I used to eat all of that stuff on them.

[01:17:26] HD: Oh.

[01:17:26] Cybershortieee: Chocolate chip, banana. I'm not gonna-

[01:17:28] HD: You got pancake on a stick. I mean-

[01:17:30] Cybershortieee: I used to tear that up. With the, with the little sausage in the middle?

[01:17:34] HD: Mm-hmm. Yeah. Um, crescent rolls. Shoot, I'm right down the street from Cheddar's right now, what you mean?

[01:17:39] Cybershortieee: Ooh, I love Cheddar's.

[01:17:40] HD: Hey, them little- Ooh,

[01:17:41] Cybershortieee: them, ooh ...

[01:17:41] HD: hey.

[01:17:42] HD: Hey, who- Mm. Okay. Mm. We are right here. Who decided that, hey, we ain't gotta feed these Black people all this time, just get them some rolls and they gonna be full off the rolls. They not gonna eat nothing.

[01:17:52] Cybershortieee: The rolls are so

[01:17:52] HD: good. 'Cause, 'cause why is starch one of our arch enem- enemies?

[01:17:57] Cybershortieee: And how much, how much bread they give you at Texas Roadhouse should be [01:18:00] illegal.

[01:18:00] Cybershortieee: That's what I'm talking about. It's so, it's so yeasty.

[01:18:02] HD: Man, it be good, though. It

[01:18:03] Cybershortieee: be, it do be good. You

[01:18:04] HD: be like, "Well-

[01:18:05] Cybershortieee: Logan Taps has good rolls ...

[01:18:06] HD: when I tell you anybody who loves starches, they will love Zellie, Zellie love her some starch.

[01:18:10] Cybershortieee: I'm, I'm a potato girl.

[01:18:12] HD: We have to like, "Hey, listen- She like

[01:18:13] Cybershortieee: potatoes and chips

[01:18:14] HD: you, you better eat that chicken. You not getting no more fries." At this point I'd be like, "You-

[01:18:19] Cybershortieee: Yeah ...

[01:18:20] HD: you barking up the wrong tree." For real. Um, let's play this one real quick, and we'll, we'll get back into it. This is about LinkedIn and ghost jobs.

[01:18:31] music: Word around the net is that Texas just launched an investigation into LinkedIn.

[01:18:34] music: If you're new here, my name is Dalita. I was laid off at the end of last year from corporate, and have been struggling, like many others, uh, to get back into- Actually, I already sped that there, huh? ... the corporate world. Excuse my dog. So the Texas general attorney is investigating them over ghost jobs. If you haven't heard, if you haven't been on LinkedIn, or if you have, you most likely have heard of their ghost jobs or have encountered one.

[01:18:52] music: Um, so ghost jobs are generally roles that are posted or reposted online. Um, and the company has zero intention of filling them or even hiring 'cause [01:19:00] they're fake jobs, uh, just there for whatever reason, uh, that the company may have. Yeah, and to add into that mess, they charge a monthly premium that is supposed to basically give you a leg up in the hire, in hiring.

[01:19:10] music: LinkedIn is such a great, needed platform, but I think there's been a struggle to maintain it as just strictly an, a work-related platform. Um, I'm pretty sure we all know what I'm talking about. Um, but yeah, so- Mm-hmm ... I don't know how long this has been going on, but, uh, from my experience, the last year LinkedIn has really showed their ass.

[01:19:25] music: Um, they just seem very greedy. Uh, so- My experience lately has just been seeing sponsored ads for jobs online. And to be honest, it, in my eyes, um, if I apply for a role and it just keeps getting re-reposted and reposted, I clearly get the message. But it's, it just, to me, looks bad on the company, but also bad on the platform that is allowing these companies to be so, uh, careless in that way.

[01:19:44] music: So yeah, those are my two cents. Let me know what you guys' experience has been with this, um, in the comments. And, uh, if you know a friend who is in the job hunt, share this video with them and let them know that somebody's kind of thinking about us.

[01:19:57] HD: Yeah. Uh, speaking of that, it reminds me of a post Erica made the other [01:20:00] day.

[01:20:00] HD: She said, um

[01:20:09] HD: Oh, Eric, I just saw your post. Oh. Lensa is a scam. Swooped is a scam. Talentfile.io is a scam. Jobot is a scam. Cybercoder is a scam. Scam job postings run rampant here and on other trusted platforms. Stolen job posts that trick you into pro- providing your resume and personal information only to find out these trickster companies are not actually the ones hiring for the position.

[01:20:31] HD: If you see a job you like, find the company's career page with a legit live job posting, apply there, period. Add to the list, spread the word. LinkedIn, can you make it to where we can block a company or at least never have to show up and suggest the jobs or search results again? We're tired of these resume farmers.

[01:20:48] Cybershortieee: It's so, it's so crazy how you kinda have to be online today to even know any of this Like, you have to be connected to, to know any of it. To know [01:21:00] anything about a, a ghost job, you gotta be online.

[01:21:04] HD: Facts. Yeah, I tell everybody the same thing that Erica just said. I say, "Go to the actual company page to see if it's still there."

[01:21:09] HD: And to see if

[01:21:09] Cybershortieee: that posting's

[01:21:10] HD: there. If some stuff don't be adding up or they already closed the rec but it's still on the other posting and they- Yep ... they not hiring for it, so. '

[01:21:15] Cybershortieee: Cause these are still tools. That's a tool that they're using. That's not their in- that's not their internal tool. It's a tool that they're using to kind of recruit for the company.

[01:21:24] Cybershortieee: So they could put something in there a- and put the wrong... They're learning how to use the tool. Mm-hmm. You know what I mean?

[01:21:30] HD: Yeah. Oh, yeah, speaking of, let me do something real quick, 'cause, you know, I had went off, I had a whole tangent last week about why AI don't know everything about resumes, right? So I had this consult with this guy, and we were supposed to be meeting a couple of weeks back, and I sent him a job 'cause he got a lot of experience.

[01:21:48] HD: He really should be an exec or senior director or something like that. And I sent him something, said, "I think this is a good look for you." And I said... This was Saturday. This was only yesterday. I said, um... He said, "Thanks." "You're [01:22:00] welcome." And I said, "If things don't change and you wanna take a stab at the resume and link them more in-depth, let me know.

[01:22:04] HD: I'll deduct whatever you spent on that call from one of my offerings." And this what he said verbatim: "I made the changes you recommended, got a couple of messages and lots of connection requests." And I was like, "Man, that was quick, but I told you the small things make a big difference." And that's what people don't rec- or realize about their pages.

[01:22:23] HD: 'Cause this guy, if I was to show you, watch this. I'm, y'all, Shorty is, don't even know this guy. Um, she can verify what I just said. She can scan it. Y'all know me, I ain't gotta lie.

[01:22:33] music: Mm-hmm.

[01:22:34] HD: I ain't gotta lie, period. So, like, now look at this guy's stuff. He was telling me he went a while where, like, he was not getting no emails, no nothing.

[01:22:43] HD: You can scroll. He wasn't getting emails or anything, and I'm like, "Bro, you have a lot of experience. Your email should be, like, they should be breaking down your email." And so I kinda just made some- Did

[01:22:55] Cybershortieee: he redo his, his page?

[01:22:57] HD: He probably made some tweaks I told him to do. I had him [01:23:00] remove some stuff or change some things.

[01:23:02] HD: I had him adjust some stuff on his resume.

[01:23:05] Cybershortieee: Why? He got a lot

[01:23:05] HD: of experience. Yeah. That's what I'm saying. Why? Ain't no way possible you should not be in another role.

[01:23:10] Cybershortieee: I like the... Did he change this, too, his headline?

[01:23:13] HD: I would have to go to our Loom call to see if he did it or not. I mean,

[01:23:16] Cybershortieee: it looks good now, or I don't know what it looked like before, but It's, it's giving you enough

[01:23:22] HD: I think he had most of this last time too.

[01:23:24] HD: Uh, but he, he has a lot of experience, but that's the thing. It's just like, uh- You

[01:23:28] Cybershortieee: gotta tell, you gotta tell that good story ...

[01:23:30] HD: what is it? I was talking to somebody. I was saying how, and the girls, y'all can get with this, the c- perfect little trinkets or accessories can make your whole outfit. That's the same thing when it come to your LinkedIn or your resume.

[01:23:46] HD: Oh, for

[01:23:46] Cybershortieee: sure.

[01:23:46] HD: The smallest things, the little changes, whether it's a format change or whatever, or certain words that we remove or add to the LinkedIn, can make it blow.

[01:23:55] Cybershortieee: I'm gonna give you an example. Um, I think mine says cloud security. What cloud? [01:24:00] I put in parentheses Azure 'cause somebody was like, "Well, maybe you should be a little bit more specific into..."

[01:24:06] Cybershortieee: You know, I love feedback, so I put Azure in and why are you talking to me about AWS? Does it say AWS? Does it say GCP? Does it say any of these other providers on there? Um, so the little things.

[01:24:17] HD: Yeah. '

[01:24:17] Cybershortieee: Cause, because they, I c- I... Inmails are crazy. If, if it's not listed, why would you be asking me about it?

[01:24:26] HD: No, and that's facts.

[01:24:28] HD: That's facts. Um, speaking of, have you ever seen the movie Denzel had called "The Little Things"?

[01:24:32] Cybershortieee: What's it about?

[01:24:33] HD: He is a, I wanna say he's a detective, and he's working with this other detective, uh, they're accounting somebody got killed.

[01:24:40] Cybershortieee: Is it for a little girl? No. I,

[01:24:42] HD: I think so. There was, like, a serial killer on the loose.

[01:24:45] Cybershortieee: Maybe.

[01:24:46] HD: It's called "The Little Things." It's, like, an underrated Denzel movie. It's not like, like I said, it's not the best thing, and I feel like we've talked about that last week, but I can't remember if we talked about it or not. But I know that we are supposed to get back into [01:25:00] Flock.

[01:25:01] Cybershortieee: I'm reading or you reading?

[01:25:02] HD: You.

[01:25:03] Cybershortieee: Okay. LAPD walks away from Flock. LAPD, the third largest police department in the country and one of Flock Safety's biggest government customers, is letting its three-year contract with Flock expire. The reason they gave on record: serious concerns around civil liberties and civil rights, particularly privacy and the data being collected from these cameras.

[01:25:28] Cybershortieee: Flock runs automated license plate readers, cameras mounted around your city that photograph every plate that passes, log the time and location, and make that searchable for police. Flock has at least eight- 80,000 cameras across the US, and the cameras are operated by Flock, a private company in Atlanta, not by the police department using them.

[01:25:50] Cybershortieee: That's the big issue here. This isn't a police database, it's a private company's database that police officers or whoever, [01:26:00] um, that they are then able to query. LAPD's CIO said they're discontinuing until data privacy, security, and sharing concerns get ironed out contractually. They're not banning it forever.

[01:26:12] Cybershortieee: They're saying not on these terms, and honestly, that's a, that's some really good leverage here. Um- LAPD isn't alone. Mountain View, California, South Poland, Maine, some of those cities cited concerns that federal immigration officials were using the cameras to track people in violation of local sanctuary policies.

[01:26:33] Cybershortieee: Now, the part that people Um, should think a little bit more. The part that should matter to everyone regardless of politics is accuracy. Researchers have documented a rise in motorists being pulled over, detained at gunpoint, or jailed because of false positives from license plate readers. Just last week, a journalist at The Drive described being tracked for days and then boxed in by police because a flat camera misread the plate on a loaner review, [01:27:00] review car as stolen.

[01:27:02] Cybershortieee: A false positive is when a system flags something as a match that isn't. In a spam filter, a false positive is annoying. In a system that dispatches armed police to your car, a false positive can be a life-threatening event. Um, so if you kinda think about who bears the most risk when police approach a car believing that that vehicle is stolen, um, and for some of us, that's not really a big hypothetical.

[01:27:27] Cybershortieee: Now, there's a security story that's kind of in here, too. So Flock has had lapse, lapses that expose cameras and data. In one case, 404 Media was able to watch themselves on publicly exposed Flock cameras. Lawmakers have pushed federal regulators to investigate, warning that many police logins to the system aren't protected with MFA.

[01:27:50] Cybershortieee: Bye. And 404 Media reported the DEA used a local officer's password without his knowledge to run immigration surveillance searches. Yuck. So we know what [01:28:00] MFA is. I'm not gonna break that down again. Um, but if a nationwide surveillance tool or police surveillance tool, if those accounts are not behind MFA, they are literally just one phish password away, um, from those keys being released.

[01:28:19] Cybershortieee: Um, now Flock says the expiry caught them by surprise, and that they're confident they can clear up misconceptions. They wouldn't say which misconceptions, um, but I think that this is kind of what accountability looks like when it is actually working. I'm actually really proud for NYPD because that- You mean LAPD?

[01:28:38] Cybershortieee: Earth, Lord. LAPD. No, it was NYPD, I thought. No, it's LAPD. LAPD. I'm proud of LAPD for kind of standing on business when it comes to that. That's a lot. First of all, when you are one of the biggest police agencies, you do kind of get to show other folks what's, what you are agreeing to [01:29:00] be acceptable risk, and then where you're kinda drawing the line.

[01:29:03] Cybershortieee: We already know California is a different state in its own. They have a lot of other things that, in place that other states don't. So I think it was a really good stand, and I'm proud of them. I st- I stand with them.

[01:29:14] HD: So I'm not biased on this take, but I, I think I have a little bit more insight than Um, the average person when it comes to this as I was like in a brief process with them, 'cause I brought up that thing, the, the public feed stuff.

[01:29:31] HD: I brought up

[01:29:32] Cybershortieee: the- In your interview?

[01:29:33] HD: Mm-hmm.

[01:29:33] Cybershortieee: How was that received?

[01:29:35] HD: Cool. I was talking to the product security dude actually when I brought that up. So, um, I brought up the things where they're bringing up about the police using it the wrong way. So here's the thing. Everybody points the finger at Flock, but it's no different than your company using AWS, but they didn't put up the parameters to make things safe in AWS, the standard security processes.

[01:29:59] HD: [01:30:00] They, on the admin side, if everybody's console, they have access to see what police are looking at and what they're doing. So if they're abusing the system- So

[01:30:06] Cybershortieee: who, who's performing those queries and when?

[01:30:08] HD: Yeah. Yeah. So they're suppo- Like, I was talking, when I was bringing these things up, I was like, yeah, anything like that, it should be all tied to a case, not something you should be looking at.

[01:30:16] HD: 'Cause there was a situation where one cop would just spy on his girlfriend throughout the city through, through Flock. So-

[01:30:23] Cybershortieee: Don't aggravate me ...

[01:30:24] HD: they have built out things, but the thing is, we already know how cop- cops are trying to act like they're so morally worried about us, and it's like, one, it's a cost to everything.

[01:30:34] Cybershortieee: I, so does that mean they won't be reviewing- They probably- ... record, recording the footage or is they going with somebody else?

[01:30:41] HD: Uh, it stays... I f- I asked about that too. It, I think it stays on the- Also, the thing with the, the 404 people who were able to view it, it really wasn't on the Flock thing. They partner with different cell carriers.

[01:30:56] HD: It was one of those issues, like a third party thing. Mm. But it's been labeled as, [01:31:00] hey, Flock, 'cause, you know, people don't like it 'cause they deem it as surveillance. So they do get a bad name. All they're doing is providing the software.

[01:31:08] Cybershortieee: Yeah.

[01:31:09] HD: The people that's working there aren't people that's taking advantage of anything.

[01:31:13] HD: I think that's the big issue. It actually is either HOAs use them and, and cops use them. They are the people that need to make sure that they're being used the right... It's no different than somebody handing you a gun and what you gonna do with it. Guns don't kill people. People with guns kill people. So having said all that, I think that's why, like, they get such a bad rap and everybody's so negative on them.

[01:31:34] HD: They only focus on that part. They don't focus on, hey, if your car actually is stolen, it can be found, or they don't focus on the missing persons and, and how it can identify stuff. So there's good things about- There

[01:31:43] Cybershortieee: are some good things that are going on there, but also some, you know-

[01:31:47] HD: Yeah, but I'm, but,

[01:31:47] Cybershortieee: but-

[01:31:48] HD: things that could be better ... what I'm saying is the people that's there, they aren't doing anything. It's more so who's using it, what are they doing with it. That's the real thing. So the-

[01:31:57] Cybershortieee: But also too, just like you said, [01:32:00] uh, a lot of these companies... I mean, the person who was giving this was the CIO of LAPD.

[01:32:06] Cybershortieee: Um, but a lot of these folks are not-

[01:32:09] HD: Think about how often- ... that are,

[01:32:10] Cybershortieee: that are managing these massive software tools, they, they don't even know about-

[01:32:15] HD: It should be, it should be the IT people. It should be the IT people. But also-

[01:32:19] Cybershortieee: It don't be a lot of them ...

[01:32:20] HD: let's even talk about that. They wanna talk about that.

[01:32:21] HD: Let's talk about how, what they be doing with the evidence, putting guns and stuff back on the street, drugs. So I get this is where you wanna try to draw the line, but I think there are bigger fish to fry when, when they do other things. I just think this is a clever way to say, "Hey, we wanna use y'all, but we want the rates to go down."

[01:32:37] HD: It's, it's one of them things. But I, all in all, I mean, I think it's cool, but as I was able to learn more about it, I, I realized that, man, it, it's no different than I use Gemini and they got, Google got so much access around everything. It... What is Google doing with the data? Mm-hmm. So it's, it's the same thing but different.

[01:32:56] HD: That's how I view it. Uh, so, um, people in the comments can let me [01:33:00] know how they feel about Flock. I don't work there, but I just think they do get a, a bad

[01:33:05] Cybershortieee: name. Did they have a commercial with a bird? Or am I thinking about insurance?

[01:33:09] HD: I don't know. That's a good question. That's a very good question. I don't know

[01:33:17] Cybershortieee: I'm gonna look them up.

[01:33:20] Cybershortieee: See what their logo looks like

[01:33:26] HD: Let's see.

[01:33:28] Cybershortieee: No, no, that's not it. I've never seen this logo before

[01:33:37] HD: Yeah, I'm, I'm not doing the encode one. Let's do All right, we did that one

[01:33:51] HD: All right. Let me talk about this real quick

[01:33:58] HD: Um, let's ch-[01:34:00]

[01:34:07] HD: All right. Ernst & Young's breach through a help desk tool. One of the big four accounting firms, they have 406,000 employees, $53.2 billion in global revenue, clients in 150 plus countries, is notifying customers of a data breach. The entry point, a third party support ticket system used by EY's IT staff. And support tickets, it turns out sometimes had documents attached containing client tax information.

[01:34:35] HD: And that's actually a vital point. A lot of times if we found out about like a third party w- that used like some type of tool or whatever, you gotta put out these different, um, issues for them to fix. We always say, "Hey, do any of our tickets contain any proprietary information?" So I just want to throw that out there.

[01:34:53] HD: Think about what a support ticket looks like. "Hey, IT, this file won't open," and you attach the file. Nobody thinks of the help desk as a data repository. And you're [01:35:00] right. When we actually break it down, there's so much knowledge in the help desk.

[01:35:04] Cybershortieee: People be sending you stuff

[01:35:04] HD: you don't even

[01:35:05] Cybershortieee: need.

[01:35:05] HD: And, and your ticketing system.

[01:35:07] HD: And this is another security thing I learned.

[01:35:11] Cybershortieee: I didn't even think about that. This is a good... I'm feeling this one.

[01:35:13] HD: Yeah. And it's another security thing I thought about is, um, years ago working at Optiv, the principal guy pretty much, not schooled me, but taught me something. When I was like, "Hey, why don't we submit whatever we're doing for detection rules in Snow?"

[01:35:27] HD: And he was like, "Well, we don't put in the ServiceNow because if we had an insider, they'd start looking at how we writing detections, what the detection's about and maneuver around them. We need to only have them access to the people that need to see them." So a lot of people don't think about that. And most people that if you are a ServiceNow admin or whatever, it should be RBAC.

[01:35:46] HD: It's only should be certain stuff you should view. Like I can view different things based on my role, because we need access to view changes, tickets, and everything else. If you're a regular person, you really should only be seeing stuff that's related to you But let's keep, uh, [01:36:00] going

[01:36:03] HD: That's called data sprawl, and it's everywhere. The timeline, the attacker access March 28th to April 12th. EY detected anomalous activity April 23rd. Notifications going out now in July. Man, that was four months ago.

[01:36:16] Cybershortieee: Long time.

[01:36:18] HD: Yeah. No, three months ago. Three months ago.

[01:36:19] Cybershortieee: Inserts the ROI.

[01:36:20] HD: No, wait. Four months ago.

[01:36:24] HD: EY says it secured its systems, notified federal law enforcement, removed the unauthorized access, and has no indication of misuse or targeting of specific individuals. Affected clients get 24 months of identity monitoring through Experian. Boo. No group has claimed the attack. And notice the pattern for the third time.

[01:36:43] HD: It wasn't EY's system, it was a vendor's. Look at your own ticketing system at work. What's sitting in old attachments? That question is a free win you could bring to your manager on Monday. Nobody thinks as the help desk as a database, but that's exactly what it becomes one attachment at a [01:37:00] time.

[01:37:01] Cybershortieee: Mm. And then help desk is working with everybody, HR, VPs.

[01:37:08] Cybershortieee: There's no discrimination, uh, uh, there's no... Everybody's calling help desk.

[01:37:12] HD: Right. Let me do this one 'cause I think it's a callback f- to last week since it's very quick. It is. It's very quick So a follow-up to last episode, we told you to go turn off that Instagram toggle so people couldn't pull your photos into AI images.

[01:37:27] HD: Meta rev- removed the controversial feature after the backlash. I want y'all to sit with that. We covered it, a whole lot of people made noise, and the company reversed course inside a few days. Two lessons. One, user pressure works, and faster than regulations do. Two, go check your settings anyway. When a feature gets pulled, toggles don't always reset, and features come back in new forms.

[01:37:50] HD: The habit of checking is the actual win, not the outcome of any one fight.

[01:37:54] Cybershortieee: 1000% agree because TikTok be doing some interesting stuff. Mm-hmm. I do go in my TikTok settings a [01:38:00] lot and just double-check, um, and make sure that there isn't a new something, and if I don't know what it means, I'ma, I'ma, uh, put it into Chat or Claude and be like, "What is this setting in TikTok?"

[01:38:09] HD: Mm-hmm. We talked about it, y'all made noise, and it got pulled. Don't let anybody tell you paying attention doesn't do anything. Real quick, Sister Act one or two?

[01:38:20] Cybershortieee: Two

[01:38:23] HD: What's your favorite song on there?

[01:38:25] Cybershortieee: Mm. I sing because I knew,

[01:38:28] HD: I knew you was finna say that. I knew you was finna say that.

[01:38:31] Cybershortieee: She ate that up.

[01:38:33] HD: Of

[01:38:33] Cybershortieee: course.

[01:38:33] Cybershortieee: His eye is on the sparrow, honey.

[01:38:35] HD: And the Lord hear. Mm.

[01:38:39] Cybershortieee: Rugrats in Paris or Rugrats Gone Wild?

[01:38:43] HD: Um, the first one

[01:38:47] Cybershortieee: Gone wild

[01:38:50] HD: Really? All I like on that one is, "Should I stay or should I go?"

[01:38:54] Cybershortieee: Take me there. I wanna go there. Let's go there. I remember as a kid. Hmm. [01:39:00] I remember that being out. We went to go see that, like, in theaters as kids.

[01:39:04] HD: I remember seeing that.

[01:39:07] Cybershortieee: Favorite Jim Carrey movie?

[01:39:09] HD: Um, probably Bruce Almighty

[01:39:16] HD: Yeah, Bruce Almighty. I know what you about to say.

[01:39:18] Cybershortieee: What?

[01:39:18] HD: Ace Ventura: Pet Detective.

[01:39:19] Cybershortieee: Nope, nope.

[01:39:20] HD: The Mask.

[01:39:21] Cybershortieee: I was gonna say that, but I think Me, Myself, and Irene.

[01:39:24] HD: That is a good one. Oh, you know what's good too? Liar, Liar.

[01:39:26] Cybershortieee: Liar, Liar's a real good one Actually, the Grinch. The, the, the Grinch. Ugh, I can't wait till Christmas.

[01:39:40] Cybershortieee: I'm so excited. Midsummer, can't wait till Christmas

[01:39:45] HD: Guess what I've been listening to? I've been, I've been on my, uh, cyber shorty, been listening to, uh, 2 Chainz a little bit.

[01:39:51] Cybershortieee: Hey, 2 Chainz. I

[01:39:54] HD: told you, you motherfucking right.

[01:39:56] Cybershortieee: I like KL. That's probably... I can listen to that, I can listen to that every [01:40:00] day.

[01:40:00] HD: We know.

[01:40:00] Cybershortieee: KL. KL.

[01:40:02] HD: That came on for me one day

[01:40:08] Cybershortieee: I am spoken on that You ready? Yes

[01:40:21] HD: Muhi Ai. Let me make sure it's gonna play faster. Let's go

[01:40:27] music: I will not hold a funeral for my son, Nolan. A fake AI-generated video of Nolan Wells' mom is going viral online. She had to post on Facebook and tell people it wasn't her, and the Jackson County Sheriff's Office says that the fake videos are actively complicating the investigation because they're filling an information gap with false or misleading details while investigators are still trying to establish what happened.

[01:40:42] music: But this use of AI is part of a broader pattern. When generative AI tools first started going mainstream, one of the first ways people weaponized them was to make fake videos of Black women to profit off of racist stereotypes and outrage. Fox News ran a story about SNAP benefits using AI-generated videos of Black women ranting, treating them as real.

[01:40:55] music: The videos went viral and shaped political opinion. Here, the AI is being used to profit off of a Black family's pain [01:41:00] while confusing an active investigation. It's putting words into a grieving mother's mouth that she never said, and there's nothing she can do about it. We keep talking about AI like it's a future problem.

[01:41:07] music: It's not

[01:41:12] Cybershortieee: We just both exhaled. It's exhausting. It's exhausting, and it's sad.

[01:41:17] HD: Yeah. Um- And- She shouldn't have to deal with that ...

[01:41:19] Cybershortieee: and I, that's the part that just breaks my heart. She's already going to be grieving for a long time, and she can't even grieve in peace because you got this stuff going on. And then I think the part that's really sad is it's complicating the investigation.

[01:41:36] Cybershortieee: You

[01:41:36] HD: know what's crazy about this AI deep fake stuff is, like Gemini said, "Hey, make sure you have the rights to use photos." Granted, they my stuff, but it still has no way to validate you do.

[01:41:47] music: Mm-hmm.

[01:41:48] HD: There is going to be a way, so like the simpler term for YouTube, if somebody come and upload my content, it's gonna show me, hey, how much of my content it matches.

[01:41:58] HD: I can choose to copyright strike them or [01:42:00] just say, "Hey, take it down." Eventually, and I don't know how that's gonna be, it's kinda scary too, 'cause this means everything that you do is in a database, but you're gonna probably have copyright or something face right to your face, your voice, and probably you're gonna be able to ask people can they use it or not.

[01:42:20] HD: Now I know that's what's gonna happen in the music industry and stuff, but for regular people. I've said this before on a, on a funny tip when I was like with the AI, somebody acting like your boyfriend, girlfriend is over at the house with you, or they leaving fake voice notes and stuff 'cause they took a video of you talking to clone your voice.

[01:42:38] HD: But all the stuff is here, and whoever did that is crazy. Nobody ever checks. People just believe AI without even thinking it's AI. Why,

[01:42:47] Cybershortieee: why... Because it, I mean, because it... Three, four years ago, we could tell it was AI. We could tell. Mm-hmm. Still, if you are using a lot of these tools, we can still tell, or we have an [01:43:00] inkling that it may be AI.

[01:43:02] Cybershortieee: Um, but for people who don't, especially the older, more vulnerable population-

[01:43:07] HD: Mm-hmm ...

[01:43:07] Cybershortieee: they see a video and then they, they count it as true. Yeah. It looked like her.

[01:43:11] HD: Yeah. Yeah, man. And then, and that's, and that is the other thing about like all these cases that go to social media. You don't know what's true and what's not.

[01:43:21] HD: This person said they seen this, this, this, this. People don't understand how you can tell if a video's been spliced up or not. There's nobody asking the right questions, "Hey, where's the initial video?" And show us-

[01:43:32] Cybershortieee: The logs.

[01:43:33] HD: No, show us the hash from the OG video and show, whatever y'all showing us, compare the hashes to see if they the same.

[01:43:38] Cybershortieee: Mm-hmm.

[01:43:39] HD: That's how we know if it's been changed- But that's, that's- ... file integrity ...

[01:43:41] Cybershortieee: digital forensics.

[01:43:42] HD: So-

[01:43:43] Cybershortieee: And I think it might be, it might be even become a even more hotter area for folks to work in with all this AI stuff going on.

[01:43:51] HD: Could be, but the pay gonna have to raise.

[01:43:53] Cybershortieee: The pay

[01:43:53] HD: absolutely does. At least on the, on the legal side, on the legal side.

[01:43:56] HD: Um, so, uh, everybody should be watching this [01:44:00] on Monday. Um, hopefully y'all are going to start your day or y'all are listening to this in the car, whatever you may do. Um, shorty, what you got planned for this week?

[01:44:08] Cybershortieee: Um, nothing. Just relaxing, getting back on track. I've been Miss Speedy Gonzalez. I just wanna sit still for a little bit.

[01:44:18] Cybershortieee: What about you?

[01:44:19] HD: Mm-hmm. Oh, I got a lot to do. I got a lot to do. Uh, but these last couple weeks I've been so busy. I've been, I've been grinding, uh, no clips. But, um, we shall make it. We shall overcome.

[01:44:33] Cybershortieee: We shall.

[01:44:34] HD: Uh, okay. Before we go, 'cause y'all, as y'all see, shorty got the buffs on.

[01:44:38] Cybershortieee: Oh my God.

[01:44:38] HD: She's buffed up.

[01:44:39] HD: All white buffies.

[01:44:41] Cybershortieee: Please.

[01:44:41] HD: Y'all know the rest. I put on my story, name your favorite Buffed Up line.

[01:44:48] Cybershortieee: From the movie?

[01:44:49] HD: Yeah. What's yours? I know what yours is, but say another one.

[01:44:52] Cybershortieee: Um, that's my favorite line. That movie is so... Actually, whatever day you had [01:45:00] commented that little GIF or whatever, I went back and I was watching, like, some clips of it.

[01:45:05] Cybershortieee: It is so urban. That's, it is urban. It is so urban.

[01:45:10] HD: I know what my, I

[01:45:12] Cybershortieee: know what my favorite line is. What?

[01:45:12] HD: Hang on, let me look at you and say it, 'cause it's funnier if I look at you.

[01:45:21] HD: You let a nigga steal your glasses? Like, shh. Or he went up to them little dudes, "Hey, you seen anybody with glasses?" Or Gudo got the fake, the fake glasses. Yeah, he's the Bow Wow edition.

[01:45:31] Cybershortieee: It was so much going on for a pair of glasses. It was so much going on. Why

[01:45:36] HD: did they, why they try to explain those? 'Cause the movie start off with the dude stealing the glasses.

[01:45:40] HD: Hey, man, if, if you ain't got the Buffy, you say you got Buffy issues.

[01:45:42] Cybershortieee: The way they was running through that house, the way they was hiding behind houses, the way... That, that's a good, that's a good movie. Ca- Cash Doll in there. Look, that's what I'm saying, it's so urban. She looked so different. I mean, she still look like herself, but- Uh-huh

[01:45:55] Cybershortieee: she was way younger when that came out.

[01:45:57] HD: Yeah. How old you think Cash Doll is? 'Cause she be acting like she ain't [01:46:00] older than me.

[01:46:00] Cybershortieee: She's 40 something.

[01:46:03] HD: You think so? I know my, my-

[01:46:04] Cybershortieee: Or, or she's in her late 30s, I think ...

[01:46:06] HD: my mans that I met- I- ... uh, off YouTube, he from, um, Detroit, too. He was like, "Cash Doll went to school with them."

[01:46:12] HD: She like, if I'm 34, he says she, like, she'll be 35,

[01:46:15] Cybershortieee: 36. Oh, I, I'm sorry, K- Keisha. Got you all bent, sis.

[01:46:19] HD: I think she older.

[01:46:22] Cybershortieee: Why, well, what would she get out of lying?

[01:46:24] HD: Everybody lie about they age.

[01:46:25] Cybershortieee: Why?

[01:46:26] HD: Why not?

[01:46:27] Cybershortieee: Why so?

[01:46:28] HD: Hmm, why so serious? But guys, um, we have made it to the end of our scheduled program. Appreciate everybody that tuned in with us, and make sure you subscribe to the new channel.

[01:46:40] HD: We got a lot of stuff in the works, but until next time, we out. Peace.