Latest / Encrypted Ambition: Where Ambition Meets Encryption - Inside The Minds Of Disruptors. / 031822_Breaking-Cybersecurity-News-Raw&Unfiltered: Patches-Backups-and-Wired-Homes-on-the-Fritz

Transcript

031822_Breaking-Cybersecurity-News-Raw&Unfiltered: Patches-Backups-and-Wired-Homes-on-the-Fritz · Encrypted Ambition: Where Ambition Meets Encryption - Inside The Minds Of Disruptors.

• 0:15
  Craig: Welcome everybody to another episode of Petronella.
• 0:17
  Craig: Hello, cyber security life.
• 0:19
  Craig: We've got Blake BJ
• 0:21
  BJ: and Erin.
• 0:22
  BJ: Hello, happy
• 0:23
  Erin: Friday.
• 0:25
  Craig: Happy Friday.
• 0:26
  BJ: It's been a busy week.
• 0:28
  Craig: Yes, it has.
• 0:29
  BJ: Good
• 0:30
  Erin: busy.
• 0:30
  BJ: Get busy though.
• 0:31
  BJ: I'd say.
• 0:32
  Craig: Yeah.
• 0:33
  Craig: Overall.
• 0:33
  Craig: So what what's the latest that somebody thought I saw?
• 0:36
  Craig: think it was almost 40 ransomware variants.
• 0:39
  Craig: I saw that was a.
• 0:40
  Craig: A nice piece of news this morning.
• 0:43
  Craig: What else did you guys find for today?
• 0:45
  BJ: I will.
• 0:46
  BJ: Great.
• 0:46
  BJ: What's your fear.
• 0:47
  BJ: Can you talk a little bit about, give us a little bit of background about.
• 0:52
  BJ: And how.
• 0:53
  BJ: We frame the question a little bit.
• 0:55
  BJ: So as I'm a smart home enthusiast.
• 0:57
  BJ: And the current status of my smart home is I'm sitting in a pile of rubble.
• 1:02
  BJ: And everything is broken.
• 1:03
  BJ: Because I didn't update.
• 1:05
  BJ: So it's just so interesting because it's also complicated and it's also connected.
• 1:11
  BJ: I did an update yesterday on my iPhone.
• 1:15
  BJ: I updated to iOS 15 dot oh four.
• 1:18
  BJ: And when I did that, something happened with my wifi connection and some of my devices, like literally.
• 1:27
  BJ: I was up.
• 1:28
  BJ: Really late and I fell asleep with a QR code and a flashlight in my hand.
• 1:32
  BJ: Figure this stuff out because it all just stopped communicating and it's back online right now, but it's not flowing correctly, but interestingly, okay.
• 1:42
  BJ: I remember a few months ago you told me I was having trouble with my laptop.
• 1:45
  BJ: And you were like, or my headphones wouldn't connect to Bluetooth.
• 1:48
  BJ: And you said, reboot your laptop.
• 1:50
  BJ: And I'm like, what are you talking about?
• 1:52
  BJ: My problem is with my headphones, not my laptop.
• 1:54
  BJ: And you're like, yeah, Just restart your laptop.
• 1:56
  BJ: And I'm like, that makes no sense.
• 1:57
  BJ: You're like restart your laptop.
• 1:58
  BJ: So I restart.
• 1:59
  BJ: Laptop.
• 1:59
  BJ: And then my headphones work and I'm like, okay, that's weird.
• 2:02
  BJ: But so now, like last night and this morning I literally had to factory reset, like so many things, and then not only did I have to reset them, I had to unplug them from power I had to even flip breakers and it's every step that I took.
• 2:17
  BJ: in that regard.
• 2:19
  BJ: You had results?
• 2:20
  BJ: Like why is it that when I from power.
• 2:23
  BJ: People plug out.
• 2:24
  BJ: It changes how everything's connecting and working all of these resets.
• 2:29
  BJ: Did something.
• 2:31
  BJ: I go into, like, how does that work?
• 2:33
  Craig: Sometimes when you do an update, It has to right to the firmware of the device and then you reboot the device or unplug it, restart it.
• 2:42
  Craig: So you get the fresh.
• 2:44
  Craig: Firmware or the update that it has.
• 2:46
  Craig: So that's why you have to reboot like that.
• 2:48
  Craig: Sometimes, if you don't do the reboot or restart it, doesn't fully apply the patch.
• 2:53
  Craig: That's why I always say.
• 2:55
  Craig: Search for patches, install the patches, do the process again, until it says there's no more patches available and you have to do that for all your devices, all your applications and all that stuff.
• 3:04
  Craig: So you need to set time aside to do that properly.
• 3:08
  Craig: yeah, that's pretty common that sometimes things go wonky like that.
• 3:13
  BJ: And then it seems like they wanted to reconnect in a certain order.
• 3:16
  BJ: So for an example, I have a regular wifi system.
• 3:18
  BJ: And then on top of my fiber optic wifi with 18 P of ISP, I have a Google mesh wifi.
• 3:25
  BJ: And that's where the problem was centered.
• 3:27
  BJ: Okay.
• 3:27
  BJ: My iPhone, because of the fact that I upgraded to iOS.
• 3:30
  BJ: 15.
• 3:31
  BJ: Oh for my iPhone stopped.
• 3:34
  BJ: Okay.
• 3:34
  BJ: It was showing them my iPhone couldn't connect to wifi.
• 3:36
  BJ: So I found Google assistant led me to a tutorial, but solve that problem.
• 3:41
  BJ: I had to reset a bunch of network settings and stuff.
• 3:43
  BJ: But then I had to reset the router and the point for the mesh wifi system.
• 3:49
  BJ: And then I had to redo it like in a certain order, because if I didn't do them.
• 3:53
  BJ: I had to first reset the fiber optic internet.
• 3:56
  BJ: Cause I had to do it multiple times to figure it out, but the order mattered.
• 3:59
  BJ: I was like, like the network itself wants to be aligned in a certain way.
• 4:03
  BJ: It seems like it was it's interesting.
• 4:04
  BJ: Cause it's I imagined when I was doing this this is like how solar flares work because solar flares are literally the son's way of untangling.
• 4:11
  BJ: Like magnetic lines of force in the sun.
• 4:13
  BJ: And so it's like automatic process.
• 4:15
  BJ: And that seems like what my network was doing.
• 4:17
  BJ: It just didn't want to reconnect.
• 4:19
  BJ: Wrongly.
• 4:20
  BJ: So it wanted the fiber optic wifi to reset first.
• 4:24
  BJ: the Google wifi router had Teresa next.
• 4:27
  BJ: And then the point it had to go in that order and then I had to start with the power.
• 4:32
  BJ: So like the power supply, like unplugging things from the power supply would seem to be a very important step.
• 4:37
  BJ: And you've talked about that before, like the importance of the power that's coming to the devices.
• 4:42
  BJ: That's all just so interesting to me in.
• 4:44
  BJ: And I'm sure that a lot of people don't even realize that.
• 4:47
  BJ: That's up.
• 4:48
  BJ: He's what is the deal with the ups and the power supply and how it affects devices?
• 4:52
  Craig: Yeah I'll tackle the first part of your question.
• 4:55
  Craig: So the reason why you have to reboot devices in a certain order is because typically you're going to restart your router first because your router is most often supplying.
• 5:06
  Craig: What's called DHCP.
• 5:08
  Craig: And dishing out the IP addresses to all the other pieces or endpoints on the network.
• 5:13
  Craig: So if that thing's not online, then all the other devices are not going to get their IP address and they're not going to be able to route to the internet.
• 5:19
  Craig: So that's why the order matters.
• 5:21
  Craig: Th there was so many updates that came out this week with everything going on.
• 5:25
  Craig: So it wouldn't surprise me if your router and other devices needed an update to.
• 5:30
  Craig: And maybe they were pushed and they didn't get applied until they got rebooted, but you always want to reboot your top level device.
• 5:36
  Craig: So if you're at home and all you have is the customer premise equipment that's supplied to you by your provider, your internet service provider.
• 5:43
  Craig: You're going to want to reboot that cable modem or fiber optic.
• 5:47
  Craig: Modem or whatever you have first.
• 5:49
  Craig: And then if there's another device like a router or a firewall, you're going to reboot that second.
• 5:54
  Craig: And you have to give these things time in between too.
• 5:56
  Craig: So you don't want to just unplug replug real fast.
• 6:00
  Craig: You need to wait until they fully stand up and they have status lights, and they'll show you when they're online.
• 6:04
  Craig: Typically the modems will have four different lights on them.
• 6:07
  Craig: It'll show they'll blink as they're starting and then lights will show up.
• 6:11
  Craig: And so you got to give it time to get fully booted.
• 6:15
  Craig: And then at that point, that's when you would restart the next device in the chain, and then you go down after the firewall router, you go to your access point.
• 6:23
  Craig: So in this case, the Google system that you have And then once all that's done, all the devices on the network will now be able to talk, but they might not work either.
• 6:32
  Craig: So that's why you have to reboot them first.
• 6:35
  Craig: They'll get a new IP address and then they'll connect to the.
• 6:38
  Craig: The network.
• 6:39
  BJ: These things that we don't really think about it.
• 6:40
  BJ: We can take for granted, you.
• 6:42
  BJ: Something works.
• 6:42
  BJ: You can get online with it, but there's a lot of technical stuff that happened.
• 6:47
  BJ: So for this stuff to work.
• 6:49
  Craig: Yeah.
• 6:49
  Craig: There's a lot of stuff that happens in the background that a lot of people don't.
• 6:53
  Craig: See or realize that the provider is.
• 6:56
  Craig: The equipment and how it's set up is, you, it all has to, like you said, a line and it has to be in the right order.
• 7:01
  Craig: With your, what you said that you have Google, I think for your wifi.
• 7:05
  Craig: then you have the provided wifi.
• 7:08
  Craig: You may want to disable the provided wifi, because if they're not set up properly, then they'll fight each other.
• 7:13
  Craig: And you won't get good.
• 7:14
  Craig: You won't get as much signal strength either.
• 7:17
  BJ: I think, whoa, Craig, I think you're getting.
• 7:19
  BJ: How do I do that?
• 7:20
  BJ: Because it keeps saying.
• 7:23
  BJ: Wifi network.
• 7:24
  BJ: Like I'm like, what is going on?
• 7:25
  BJ: I'm on,
• 7:26
  Craig: Yeah.
• 7:26
  Craig: So you couldn't.
• 7:27
  BJ: I thought it was all connected.
• 7:29
  Craig: Yeah.
• 7:29
  Craig: So some providers will allow you to log in to their cable modem or their devices.
• 7:34
  Craig: Sometimes the username password is actually on a sticker on the device.
• 7:39
  Craig: you can try that if you can't find it, you would just call your provider.
• 7:42
  Craig: then they would be able to walk you through how to disable the built-in wifi.
• 7:47
  Craig: You could just tell them I bought a Google nest or whatever, and it's conflicting and then they'll help you turn it off.
• 7:52
  BJ: But.
• 7:53
  BJ: But the signal of the internet is still coming.
• 7:56
  BJ: Because the Google doesn't have a wifi signal that's coming.
• 8:00
  BJ: The AKG.
• 8:00
  BJ: Fiber optic.
• 8:01
  Craig: Yeah, you're good.
• 8:02
  Craig: Your
• 8:02
  BJ: Oh,
• 8:04
  Craig: with an ethernet port on the device.
• 8:07
  Craig: Usually it's.
• 8:08
  Craig: It's
• 8:08
  BJ: Oh,
• 8:09
  Craig: router
• 8:10
  BJ: So the official, what am I missing bullying?
• 8:13
  BJ: What is getting disabled.
• 8:15
  Craig: Inside that cable modem is often a wireless transmitter.
• 8:18
  Craig: That's built into that same device.
• 8:20
  Craig: So you're turning that off.
• 8:21
  Craig: That's usually provided by default from the provider.
• 8:24
  BJ: Oh, makes sense.
• 8:26
  BJ: That makes sense.
• 8:27
  BJ: Because I, my phone is even saying, like, when I try to connect to a certain Google device, it's saying you can't change the settings unless you're on the same wifi network.
• 8:35
  BJ: And I'm like, what are you
• 8:36
  Craig: Yeah.
• 8:36
  Craig: Yeah.
• 8:37
  Craig: That's probably what's happening in that case.
• 8:39
  BJ: Oh, wow.
• 8:40
  BJ: How interesting is.
• 8:41
  BJ: It's a weird one.
• 8:42
  BJ: Two of my devices got confused and in the settings, It was a speaker and a wifi.
• 8:47
  BJ: Point and in the settings they merged.
• 8:50
  BJ: I think I confused.
• 8:51
  BJ: And it said the name of the device was the wifi point, but in the settings that had the speaker stuff.
• 8:55
  BJ: I'm going to go, gosh.
• 8:57
  BJ: When this is all said and done, I may be sitting in a pile of rubble right now, but when this is all said and done, I might be connected to the pyramids and the lay lines and everything else for my signal.
• 9:05
  Craig: Yeah.
• 9:06
  BJ: Oh, that's
• 9:07
  Craig: But yeah.
• 9:09
  Craig: The going back to the power.
• 9:10
  Craig: You asked a question about power.
• 9:12
  Craig: So the power coming into your equipment, it needs to be very clean and there's nine different types of power problems.
• 9:19
  Craig: And what a lot of people don't realize is the power is constantly fluctuating.
• 9:23
  Craig: That's coming into your house or your business.
• 9:25
  Craig: So if the power is not cleaned properly with what's called a true online ups or an always online true sine wave double sign, wave ups, that power is not being conditioned and cleaned up because.
• 9:39
  Craig: We all get power and it's not optimal.
• 9:41
  Craig: It's typically dirty.
• 9:42
  Craig: It's subject to fluctuations brown outs, different types of power anomalies, and you need a device to clean that power up.
• 9:50
  Craig: A lot of people know what a surge protector is and that there's surges that happen as we speak.
• 9:54
  Craig: And you don't really see them because their power, unless you have something like a surge protector to protect your equipment, but the smarter, the power device is typically it's a true online ups, which is the best type of power.
• 10:07
  Craig: Cleaning device that you can get the power, it goes into that device and then it gets cleaned up and then output it.
• 10:13
  Craig: Where it's pure clean power from there.
• 10:15
  BJ: So that's something that just makes it even so that it's not fluctuating.
• 10:19
  Craig: makes it even, and then if the power were to spike, it'll block the spike.
• 10:23
  Craig: So your equipment doesn't get damaged.
• 10:26
  Craig: it'll make sure that the power is consistent so that, certain devices will do weird squirrely things.
• 10:32
  Craig: If they, if the power isn't right.
• 10:34
  Craig: It'll like malfunction or just.
• 10:37
  Craig: Random events will happen with improper power anomalies, which is why it's always recommended to use a true online ups.
• 10:45
  BJ: I guess that makes perfect sense because look at how.
• 10:47
  BJ: When we don't have the right nourishment, the right.
• 10:49
  BJ: When we're not taking care of ourselves, we can suffer certain conditions.
• 10:53
  BJ: And I guess
• 10:54
  Craig: Yeah.
• 10:54
  BJ: thing for the horse supply for these devices they need that same, care.
• 10:58
  Craig: And there.
• 10:58
  Craig: It really does extend the life of the equipment connected.
• 11:01
  Craig: So it's it's, definitely a good investment.
• 11:03
  BJ: Interesting.
• 11:04
  BJ: It would that explain why?
• 11:06
  BJ: Like, When I say, cause I had a situation where they were saying they weren't online.
• 11:11
  BJ: Like I was trying to talk to the smart devices and they were saying they could be not, I don't know how.
• 11:15
  BJ: Because they were saying they were not connected to the internet, but they were answering me and they hear the voice.
• 11:20
  BJ: But they would answer and say, sorry, the internet.
• 11:23
  BJ: Not available right
• 11:24
  Craig: Yeah, they most likely.
• 11:25
  BJ: of the devices and then some of the other devices were online.
• 11:28
  BJ: And so it seems like the power in the house was fluctuating because certain devices were online and certain devices were offline.
• 11:35
  Craig: It was probably more like the order of events and the devices that were offline that couldn't connect it to the network.
• 11:42
  Craig: They were either not that the order wasn't set properly where the boot order was that they didn't grab their IP address.
• 11:48
  Craig: And then they timed out in the timeframe that it was kept requesting the IP address and the router or the DHCP server in this case, wasn't available at that timing.
• 11:58
  Craig: And that's why it just gave up.
• 11:59
  Craig: And then it resorted to a Don ratable IP address.
• 12:03
  Craig: It will still respond to you, but it won't connect to the rest of the network and it won't work.
• 12:07
  Craig: Until you reboot it again.
• 12:09
  Craig: After all the other things are online and then it'll just come up.
• 12:12
  Craig: Fine.
• 12:13
  Blake: Oh,
• 12:13
  BJ: this is Do you feel.
• 12:15
  BJ: Do you feel like you've been traumatized by cyber security?
• 12:17
  BJ: And it is complicated.
• 12:21
  Craig: Yeah.
• 12:22
  BJ: like trauma from this.
• 12:23
  Craig: Yeah.
• 12:24
  BJ: much that can go.
• 12:25
  BJ: When you finally have it right?
• 12:26
  BJ: You.
• 12:27
  BJ: Feel like you don't even want to breathe.
• 12:28
  Craig: That's the thing too.
• 12:29
  Craig: Once, once you have it all working and everything that, that usually causes hesitancy for somebody to, to apply a patch or an update because sometimes patches or updates break things.
• 12:38
  Craig: So you don't want to.
• 12:39
  Craig: But, it's, if you don't do the patch, then you're subject to a cyber threat.
• 12:43
  Craig: So it's just a balancing.
• 12:44
  Craig: I just teach you about how it all connects together.
• 12:47
  Blake: Yeah.
• 12:48
  BJ: What.
• 12:48
  BJ: What's the advice on patches.
• 12:49
  BJ: Like I saw a thing.
• 12:51
  BJ: a news article that said don't patch right away when a patch comes out, because let the bugs get worked out.
• 12:56
  BJ: Do you think that you should wait a little bit or is it there to patch immediately?
• 13:00
  Craig: It really depends on the situation.
• 13:03
  Craig: So for example, if you write a business and you.
• 13:08
  Craig: The benefits of that patch.
• 13:10
  Craig: For example, maybe they patch to a way that ransomware gets dropped onto the network.
• 13:14
  Craig: So you have to weigh the importance of the patch and then you have to weigh the ramifications of if it breaks something.
• 13:20
  Craig: So what I always recommend in a business environment is to have a process in place for applying patches in policy, and then a process for how to apply patches.
• 13:31
  Craig: then applied them in at a little bit of an experimental or isolated lab type approach.
• 13:37
  Craig: So maybe if you have 50 devices on the network, maybe you test the patch to one of those devices in a controlled environment.
• 13:45
  Craig: see how it behaves, see if it broke anything, any applications that get broken, things like that, and then decide to roll it out.
• 13:52
  Craig: But that pat that's called the patch window.
• 13:54
  Craig: That patch window time.
• 13:55
  Craig: Hackers are aware of that too.
• 13:56
  Craig: Have to try to accelerate that process.
• 13:58
  Craig: So the other end of the extreme is patch first patch right away, and then resort to roll back or backups.
• 14:05
  Craig: So that's another methodology that people like to adopt for high security, because the patch gives the high security, but has the ramification of breaking something.
• 14:13
  Craig: If it does break something, you could always re resort back to enroll back to a backup.
• 14:17
  Craig: So you always want to back up your device before applying any kind of patch in case the patch blows it up.
• 14:23
  Craig: So you could resort or revert back quickly.
• 14:25
  Craig: So that's definitely another approach that you can take.
• 14:28
  Craig: There are automated approaches that we'll try to vet and test patches before they're deployed, which is technology that we use for our clients.
• 14:35
  Craig: So that works.
• 14:36
  Craig: It's not perfect.
• 14:37
  BJ: Cause I never really got it before.
• 14:39
  BJ: That we do patch management for.
• 14:40
  BJ: That corner.
• 14:41
  BJ: Our core offerings.
• 14:42
  BJ: But I never saw personally like the, I never understood that the necessity for me.
• 14:49
  BJ: But having a smart home.
• 14:50
  BJ: So I have 50 something.
• 14:51
  BJ: Devices now, in my home.
• 14:53
  BJ: And now I'm at a place where I'm like, I don't understand how a business.
• 14:57
  BJ: Does their it without help, like my managed service provider, because I feel like I'm at that point.
• 15:02
  Craig: Yeah.
• 15:04
  BJ: But I don't see you that.
• 15:05
  BJ: Halfway to not have help because this one, when you get.
• 15:09
  BJ: Devices online in a certain number of com.
• 15:11
  BJ: A certain degree of complication.
• 15:13
  BJ: You're literally in waters that can be very Bobi and very, There can be a mater.
• 15:19
  BJ: Like I'm experiencing not just from us.
• 15:21
  BJ: And I don't hold guy except my own, which.
• 15:24
  BJ: You know what I mean?
• 15:24
  BJ: But if I was a business.
• 15:26
  BJ: Raise your right now, I would see the need for.
• 15:28
  BJ: I would be like this I'm getting a bit over my head.
• 15:31
  Craig: Every device, every application you add makes the complexity higher.
• 15:35
  Craig: So the more complex it becomes, then it becomes, it may get to a point where it is not manageable manually, and you have to deploy some type of automation or, leverage a managed service provider to help, with that.
• 15:46
  Craig: And there are a lot of people in your situation that have.
• 15:49
  Craig: Alarm systems, cameras all sorts of IOT or different devices on their networks now.
• 15:53
  Craig: And they have become overly complex, sensitive.
• 15:56
  Craig: It's overwhelming because with all the complexity.
• 15:59
  Craig: The homeowner doesn't even know, or even the business owner doesn't even know who to call, when something breaks.
• 16:04
  Craig: So if you don't have.
• 16:05
  BJ: was thinking that this.
• 16:06
  BJ: I was like, what do I do this?
• 16:07
  BJ: If worst I can do I call 9 1 1.
• 16:10
  BJ: My home's out of controller.
• 16:11
  BJ: But yeah, th this is really eyeopening.
• 16:14
  BJ: See, like the risk that.
• 16:16
  BJ: Yeah.
• 16:16
  BJ: As we are.
• 16:17
  BJ: As you, the convergence of convenience in cyber security, like when you reach a certain point, There's a natural balance that's required because it was like, every device I add, now I've opened myself up.
• 16:28
  BJ: But, I have, I'm lucky because I do have managed services on my network from a cybersecurity perspective.
• 16:33
  BJ: Cause PTG is on my network.
• 16:34
  BJ: So I take a breath there, but if I didn't have that, like I would probably need to be worried at this point because each of these devices is.
• 16:43
  BJ: Complex in its own way.
• 16:44
  BJ: And now each one.
• 16:46
  BJ: And carries its own risk and vulnerability.
• 16:48
  BJ: And.
• 16:48
  BJ: Wanting these devices.
• 16:50
  BJ: I definitely opened up some new vulnerabilities for.
• 16:53
  Craig: Yep.
• 16:53
  Craig: That's true.
• 16:54
  Craig: Like I said, you know what.
• 16:55
  Craig: At every device that's added application introduces new complexities it harder to understand and troubleshoot where the problem could be.
• 17:04
  Craig: But always start at the internet side.
• 17:05
  Craig: Always start there first, always reboot.
• 17:08
  Craig: The core devices like you would talked about earlier with the router, the firewall, the cable modem, that's the stuff that always should get restarted first in the order that we've recommended earlier.
• 17:17
  Craig: And then you can just this is where the OSI model comes into play, right?
• 17:20
  Craig: Like the seven layers of OSI model, you have to follow.
• 17:23
  Craig: A lot of people don't know what that means, but the point is that.
• 17:25
  Craig: You S you see how things get complicated, really fast.
• 17:28
  Craig: And by following that methodology and starting at the physical layer and moving all the way up to the application layer.
• 17:33
  Craig: It's a proven way to troubleshoot.
• 17:35
  Craig: But yeah, definitely reach out.
• 17:38
  BJ: look at.
• 17:38
  BJ: Every layer.
• 17:39
  BJ: don't want to build on a shaky foundation.
• 17:41
  BJ: We see evidence of that all over the place.
• 17:43
  BJ: You
• 17:43
  Craig: Yup.
• 17:44
  BJ: want to have a foundation so that can stay standing.
• 17:48
  BJ: But this, like they say the microcosm and macrocosm, right?
• 17:51
  BJ: So below, but this example for myself personally, isn't this indicative of the state cyber security in the world though, because the numbers, I don't think there's a way that to count now because you hear 10 billion here, 30 billion or 50 billion IOT connected devices.
• 18:05
  BJ: Take my situation and then actually just now look at the world.
• 18:08
  BJ: We have possibly to 30 or 50 billion connected IOT devices.
• 18:14
  BJ: A lot of vulnerability and lack of patching and cybersecurity stuff all the way.
• 18:20
  BJ: As you're talking about the
• 18:21
  Craig: Yep.
• 18:22
  BJ: That's been neglected.
• 18:24
  BJ: And when you look at that through the winds of 30 to 50 billion, This is with that process being connected.
• 18:30
  BJ: I guess that kind of explains where we are.
• 18:33
  Craig: Yup.
• 18:34
  Erin: And I'm curious.
• 18:35
  Erin: I'm curious too.
• 18:37
  Erin: Do you have any good.
• 18:38
  Erin: Like patching stories and that, 20 years that you've been doing this 20 plus years, I.
• 18:45
  Craig: Oh, yeah.
• 18:45
  Craig: So when.
• 18:46
  BJ: story that comes to your mind when you think back over your career and all the things you've seen, like what.
• 18:51
  BJ: What jumps out at.
• 18:52
  Craig: Oh, I remember I remember a law firm that applied patches.
• 18:56
  Craig: They didn't back up first and it blew up their system wouldn't reboot wouldn't boot up anymore.
• 19:01
  Craig: So it.
• 19:02
  Craig: That's why it's so important to back up before applying any patches and people, quite frankly, they don't want to take the time to back it up.
• 19:08
  Craig: They don't have a proven backup plan in place.
• 19:11
  Craig: They don't have that.
• 19:12
  Craig: A process to find for that.
• 19:13
  Craig: So backup is a big job, I remember.
• 19:16
  Craig: When I first started the company in 2002.
• 19:18
  Craig: W one of the things that we would mandate at that time, even based on experience.
• 19:23
  Craig: Is look, we need to back you up.
• 19:24
  Craig: And if they didn't, if they refused and they didn't want to pay to have us back up and do the process to protect them.
• 19:31
  Craig: Then they had to sign a waiver that basically said, look, we're declining this recommendation.
• 19:37
  Craig: In favor of time.
• 19:38
  Craig: And sometimes, things would blow up and go wrong and, back then it was a lot of manual patching, and then there were patches to the patch and then you had a, if something blew up, you'd be on the phone for hours with support trying to troubleshoot.
• 19:51
  Craig: Why it broke something, now.
• 19:53
  Erin: When you, sorry, but when you say.
• 19:55
  Erin: It blows stuff up.
• 19:56
  Erin: Could you give me an example of
• 19:58
  Craig: Yeah, I like that.
• 19:59
  Craig: Like the computer won't boot the computer, it will be in.
• 20:01
  Craig: And the bios or it won't boot up.
• 20:03
  Craig: It won't start the operating system.
• 20:05
  Craig: Be it won't fully boot up.
• 20:07
  Craig: be like a black screen.
• 20:08
  Craig: For example, it won't start into windows or.
• 20:11
  Craig: Or Mac
• 20:11
  BJ: like, what, what can cause that when you do an update.
• 20:15
  BJ: What can cause that to happen when you do it?
• 20:17
  BJ: Is it just something that just doesn't mesh.
• 20:20
  BJ: Earlier in it.
• 20:20
  BJ: It just kills it or.
• 20:21
  Craig: There's all different things that can cause.
• 20:23
  Craig: So example certain updates.
• 20:26
  Craig: Like operating system updates, they update the Colonel or they might update the file system or how the file system interacts with the operating system.
• 20:37
  Craig: And they might mess up a boot file.
• 20:40
  Craig: there's all different things that can cause why something won't boot up.
• 20:43
  Craig: But the point is back in those days and it still happens now, of course, the point is that if you don't have a backup in a re recourse to.
• 20:52
  Craig: Revert right then now you're forced to troubleshoot that issue with the vendor try to F and that.
• 20:59
  Craig: That sometimes could take many hours to figure out.
• 21:02
  Craig: And meanwhile, if this thing is a server and this has happened at the server level, now you've got all the people in the company that can't work because didn't back up the server first.
• 21:11
  BJ: Wow.
• 21:11
  Craig: It goes back to single points of failure and nowadays we're so connected and so reliant upon these different technologies.
• 21:19
  Craig: I know it might be.
• 21:21
  Craig: People might think that I'm crazy for recommending redundancy or multiple devices, but in a world where we need our devices, sometimes it makes sense to buy more than one sometimes.
• 21:31
  Craig: Sometimes you just can't have one computer to do your work.
• 21:34
  Craig: Sometimes you have to have a plan in place that if that thing doesn't boot up one day, what do you do?
• 21:39
  Craig: Do you accept the risk of being down for hours or days and able to work or do you have another device on standby?
• 21:46
  Craig: Or do you have, what's called a hot spare where it's available.
• 21:49
  Craig: It's cold.
• 21:50
  Craig: It's in the closet, and you can set it up.
• 21:51
  Craig: You have a process to set it up quickly to get that person back up and running as quickly as possible.
• 21:57
  BJ: I w I would opt out.
• 21:58
  BJ: It was unnecessary until this morning.
• 22:00
  BJ: Then when I had my devices offline for awhile and I didn't know, I didn't know what step to take next.
• 22:06
  BJ: Cause I was on all the Google community, health boards and stuff.
• 22:10
  BJ: And nobody figured out this problem, right?
• 22:12
  BJ: And so like Julie sitting here, I'm offline, like.
• 22:15
  BJ: I'm offline.
• 22:16
  BJ: And it was for a moment.
• 22:17
  BJ: I was like almost don't panic because we're so used to being connected now.
• 22:21
  BJ: But like for home.
• 22:22
  BJ: I felt like.
• 22:23
  BJ: I hold onto the counter embrace, mess over.
• 22:26
  BJ: Cause I don't like the way this feels.
• 22:27
  BJ: But it's so interesting because this is going to have this.
• 22:31
  BJ: To come together a little bit.
• 22:32
  BJ: Cause.
• 22:33
  BJ: This disconnected, where you have the majority of society that has like on a scale of one to a hundred, they have a 3% understanding of how the internet works and how everything is connected.
• 22:44
  BJ: then you have the cybersecurity professionals, which, to even be.
• 22:48
  BJ: Category of stuck your neck.
• 22:49
  BJ: Like you're in that category.
• 22:51
  BJ: But not all of us are in the category that you're in because you're in.
• 22:55
  BJ: You're in a league of your own.
• 22:56
  BJ: And we have engineers that are in either their own, it's like, The degrees are so important, then the people like at better at the lower end of the spectrum is.
• 23:06
  BJ: They're spending.
• 23:07
  BJ: How this all works.
• 23:08
  BJ: And their defense, how.
• 23:10
  BJ: How would they know how to properly value as cybersecurity expert?
• 23:14
  BJ: And look, you have been exposed to, all those degrees in between zero and a hundred and you really can't.
• 23:19
  BJ: You really reference, it correctly in your mind, but once you start to metal in those waters, you're like, oh wow.
• 23:26
  BJ: Like those, the ones that are at the other end that have all this knowledge, like they're very comfortable and now you can see what sometimes.
• 23:32
  BJ: It department is closed off and they're like, I don't want to talk in a quiet.
• 23:36
  BJ: They're all a bit traumatized.
• 23:38
  BJ: It's like a mystery school of its own, we know things.
• 23:40
  Craig: It goes back to that redundancy I was talking about earlier.
• 23:42
  Craig: That's why companies.
• 23:44
  Craig: nowadays redundancies at, multiple layers is so important.
• 23:49
  Craig: Even, whenever I work from my home office instead of the main office, I make sure that I have multiple internet connections.
• 23:55
  Craig: I have multiple devices.
• 23:56
  Craig: I don't, I reduce my single points of failure.
• 23:59
  Craig: And I think what a lot of people need to think about is if you're using only one device.
• 24:03
  Craig: He need to think about what happens if that thing doesn't work, because there will be a point in time where it doesn't work.
• 24:09
  Craig: There might be a patch that breaks it, or it might be a malfunction of the device, the battery.
• 24:13
  Erin: water on it.
• 24:14
  Craig: Yeah.
• 24:15
  Craig: Somebody we know.
• 24:16
  Blake: Yeah.
• 24:17
  BJ: If the background had eyes and it could look at all the internet users, the internet connected users.
• 24:22
  BJ: On the internet.
• 24:23
  BJ: And look at their degree of security.
• 24:25
  BJ: You probably do look like a shield of some sort to the way you have your stuff set up, it's probably a fairly obvious.
• 24:31
  BJ: You're a cyber security person.
• 24:33
  BJ: Like this diversity here, like the back.
• 24:34
  BJ: That's behind you, right?
• 24:35
  BJ: That looks like a neural net.
• 24:37
  BJ: In the background of your video there, but.
• 24:39
  BJ: That gives me the impression that's what your cyber security looks like.
• 24:42
  Craig: Yeah, it's all about redundancy and reducing single points of failure.
• 24:46
  Craig: And the people listening just need to think about it for a minute and say, look, what happens if I can't get on the internet?
• 24:51
  Craig: And I'm working from home.
• 24:53
  Craig: At what point in time does my employer.
• 24:56
  Craig: Get upset that I can't work.
• 24:58
  Craig: And then at what point in time does a decision need to be made on.
• 25:02
  Craig: Does that employee need to go somewhere else to work or do they need to come into the office or.
• 25:06
  Craig: Do they get extra internet circuit?
• 25:08
  Craig: People dig up lines all the time.
• 25:11
  Craig: When doing construction, they break the internet lines, they cut the lines.
• 25:14
  Craig: You have to think about all these different scenarios can really happen to you at home or at your business.
• 25:20
  Craig: So if you don't have plans in place and you don't.
• 25:23
  Craig: You don't go through these plans and you don't go through these drills.
• 25:26
  Craig: never going to experience.
• 25:28
  Craig: That that happens.
• 25:30
  Craig: And the only time you're going to experience this is when it does happen and it will happen.
• 25:35
  Craig: you don't, you want to try to be proactive and plan because the more mature you are, the more, and the more planning you put in place now.
• 25:43
  Craig: be so valuable in the future when something does go wrong.
• 25:46
  BJ: Oh, yeah.
• 25:47
  BJ: They say I've heard people.
• 25:49
  BJ: Let's get it with COVID.
• 25:50
  BJ: We thought how connected.
• 25:52
  BJ: And then also like the internet that's really saved us.
• 25:55
  BJ: Time period.
• 25:57
  BJ: We were all without if we can get.
• 25:59
  BJ: I have internet and devices.
• 26:00
  BJ: During time can you imagine.
• 26:02
  BJ: What it would have been like you.
• 26:04
  Craig: would have been crippling.
• 26:05
  Craig: It would have been more, more crippling than what already was to the economy, because at least the way that we were connected and obviously technology companies like ours were.
• 26:14
  Craig: We're doing business like that for many years ahead of that curve.
• 26:18
  Craig: But my point is that some businesses were not.
• 26:21
  Craig: So it was more impactful to those businesses, but the ones that were forward thinking.
• 26:26
  Craig: That we're already using technology.
• 26:29
  Craig: That they were better equipped.
• 26:30
  Craig: And they didn't suffer as bad.
• 26:32
  Craig: You.
• 26:32
  Craig: From the economic downturn and the ramifications of that.
• 26:36
  BJ: Not to mention.
• 26:36
  BJ: Level how much we all have.
• 26:38
  BJ: Not reliant.
• 26:39
  BJ: But we just, we use it.
• 26:41
  BJ: We enjoyed the internet so much in the connectivity that it gives us.
• 26:44
  BJ: And we really did stop to think, what can we do?
• 26:47
  BJ: The internet stronger and safer and more secure since we all love it so much, so we're at a time where that's probably a good thought to have in your mind.
• 26:55
  BJ: What can you instead.
• 26:57
  BJ: Do for us.
• 26:58
  BJ: Hey, what can we do for the internet?
• 26:59
  BJ: How can we secure this thing a little better?
• 27:02
  Craig: Yeah.
• 27:02
  Craig: At for a business, that exercise is called an IRR tabletop.
• 27:06
  Craig: It's called an incident response.
• 27:08
  Craig: Tabletop it's what do you do when certain incidents happen like ransomware, you could do a ransomware and we've done this for clients where we do a simulation of, okay.
• 27:17
  Craig: The client might think they have everything in place to protect themselves, but we do a ransomware simulation and pretend that ransomware is infecting their network and then see how fast they respond.
• 27:28
  Craig: See if their it team can detect that something's wrong.
• 27:31
  Craig: How fast can they mitigate the risk and contain it?
• 27:34
  Craig: All these that we go through the incident response plan, we go through the disaster recovery plan figure all that out because that's such a priceless and valuable exercise.
• 27:43
  Craig: That you haven't gone through that you're just waiting for something to happen and something will happen in the future.
• 27:50
  Craig: not going to be best prepared for it.
• 27:51
  BJ: Literally.
• 27:53
  BJ: It's like the convergence of when cyber security literally then more.
• 27:59
  BJ: Do business continuity, like the two become one at some point.
• 28:02
  BJ: With the direction we're heading.
• 28:05
  BJ: If you don't.
• 28:05
  BJ: We don't have cyber security, like literally your.
• 28:07
  BJ: It's evident.
• 28:09
  BJ: Just using home as an example now.
• 28:12
  BJ: Proper protocols and processes in place.
• 28:15
  BJ: The right security layers and all that working correctly, like the continuity is that risk.
• 28:19
  BJ: Do you know?
• 28:20
  Craig: Yup.
• 28:21
  BJ: Probably.
• 28:22
  BJ: To think that way.
• 28:24
  Craig: Absolutely.
• 28:25
  Craig: People don't want to think about proactive until it happens to them, unfortunately.
• 28:29
  Craig: Then it's oh, what do I do at?
• 28:30
  Craig: And they don't even know where to start unless they have somebody that can help them.
• 28:34
  Craig: And depending on the methodology that person or company uses will depend on how long it takes.
• 28:39
  Craig: And, oftentimes there's a lot of frustration and that the heat is on in those situations where the business owners are like, look, we need to get back to work.
• 28:47
  Craig: What's the problem.
• 28:48
  Craig: What's the problem.
• 28:49
  Craig: And then sometimes in those situations, if proper preparation isn't, there, there might be hardware that has to get re reordered or equipment, or, back in the day it was hard drives and.
• 28:59
  Craig: Things that were physically broken on servers, that would cause an issue.
• 29:03
  Craig: And you had to wait for those parts, onsite.
• 29:05
  BJ: that disconnect that.
• 29:07
  BJ: A lot of people don't understand.
• 29:10
  Craig: That's right.
• 29:11
  BJ: Look at those things can get.
• 29:12
  Craig: so I,
• 29:13
  BJ: what Monday we'll have.
• 29:14
  BJ: We'll have our, one of our engineers on Jonathan.
• 29:17
  BJ: has for days that are hilarious because people don't think about your average person, that's not in cybersecurity.
• 29:24
  BJ: Go ahead and score my data somewhere, right?
• 29:25
  BJ: Like hosting whatever.
• 29:27
  BJ: And that's the end of it.
• 29:28
  BJ: But then you don't think about the process that happens there.
• 29:31
  BJ: And you don't think about the fact that there is an engineer in a data center, holding equipment, his hand that literally just set on fire and.
• 29:38
  BJ: You know what I mean?
• 29:38
  BJ: Like they don't understand that, like this.
• 29:41
  BJ: This stuff is actually Yeah.
• 29:44
  BJ: And you think you're going to set off.
• 29:45
  BJ: These deadly.
• 29:46
  BJ: Wonder if the stuff comes out.
• 29:48
  BJ: But Dyer's out here stuck in a data center.
• 29:51
  BJ: People don't like all this stuff.
• 29:53
  BJ: It's not a magic switch, right?
• 29:54
  BJ: Like I think people just think there's like a magic wand.
• 29:57
  BJ: That gets waived in both.
• 29:59
  BJ: Oh, you're you know, all your days.
• 30:01
  BJ: And you're back up there on the internet and you have to have a security note.
• 30:04
  BJ: It's a step by step process.
• 30:06
  Craig: That's right.
• 30:08
  Erin: And also.
• 30:08
  Erin: So I think one thing that's important too, is that I feel like a lot of the companies that we talked to you.
• 30:13
  Erin: They don't necessarily think of cyber security first, which is understandable.
• 30:18
  Erin: That's not what they do, but talking about preparation and planning and things like that.
• 30:22
  Erin: It is so much easier.
• 30:24
  Erin: To build it from the ground up.
• 30:26
  Erin: Than it is to retrofit it.
• 30:29
  Erin: If you have a business, you start with it and you just.
• 30:34
  Erin: Keep it as a part of like your core business processes.
• 30:37
  Erin: You're going to be in so much better shape than if you like, oh crap.
• 30:41
  Erin: Now I have to go back and fix this.
• 30:43
  BJ: Jeff had I asked Craig this question about the wifi and it not.
• 30:48
  BJ: It's not the same network.
• 30:49
  BJ: Had I asked him that.
• 30:51
  BJ: At the start of my venture, I would have done it right from the start, but instead I did it wrong from the start and I factory response and stuff.
• 30:59
  BJ: That probably didn't even need to be factory reset.
• 31:02
  BJ: And put myself through all this mess.
• 31:04
  BJ: I just didn't do it right from the start and it would've been so easy.
• 31:07
  BJ: Hadn't done it right from the.
• 31:09
  BJ: But I didn't know.
• 31:10
  BJ: I didn't know I was doing something wrong.
• 31:12
  Craig: And it's pretty common though to troubleshoot and fumble along that way.
• 31:16
  Craig: If you don't know.
• 31:17
  Craig: It.
• 31:17
  Craig: It goes back to having the right equipment and having the right process in place.
• 31:21
  Craig: And, quite frankly, a lot of businesses, they start with, either themselves or they shoot three shoe string things together and.
• 31:28
  Craig: They buy things that are meant for the home and they put it in the business.
• 31:32
  Craig: And then sometimes when things break to a point where they can't fix it themselves, I remember we would get calls like that all the time.
• 31:38
  Craig: We would go onsite.
• 31:39
  Craig: We'd find this just hodgepodge of stuff.
• 31:42
  Craig: And it wasn't always like Erin said it.
• 31:45
  Craig: I would say most of the time it was not the right equipment.
• 31:48
  Craig: So we would have to be the messenger in that situation and be like, look, this really isn't the right equipment to run your business.
• 31:54
  Craig: And you're trying to run your whole company on a$59 firewall.
• 31:58
  Craig: And you know what.
• 31:59
  Craig: 2 99.
• 32:00
  Craig: Cheap computer.
• 32:01
  Craig: And 50 people were trying to log into it.
• 32:03
  Craig: It's just not the right it's trying to, it's like using a, a Honda civic as a pickup truck.
• 32:07
  Craig: It just doesn't work.
• 32:09
  Erin: Great
• 32:09
  Blake: analogy.
• 32:11
  Blake: I wish people thought about cybersecurity.
• 32:13
  Blake: Like they do fight or flight.
• 32:15
  Blake: If you drive a car and you get in your car and you're like, Hey, I don't buckle my seatbelt.
• 32:20
  Blake: get an accident.
• 32:21
  Blake: And I could possibly hurt myself or die or hurt somebody else or whatever.
• 32:25
  Blake: if I jump off this cliff into this water, that's 30 feet down.
• 32:29
  Blake: I could.
• 32:29
  Blake: Like I could lay in on it awkwardly I bed, be in pain.
• 32:33
  Blake: Instead of people just, they don't feel the pain, they just think that they're trying, people need to think about cybersecurity and the fight or flight.
• 32:40
  Blake: Send them.
• 32:40
  Blake: Fight or flight in mindset.
• 32:42
  Blake: We're Hey, I grow my business.
• 32:44
  Blake: This is how I secure my customers.
• 32:46
  Blake: I.
• 32:46
  Blake: I am taking responsibility.
• 32:48
  Blake: By serving customers.
• 32:50
  Blake: I'm securing their data.
• 32:52
  Blake: I'm responsible for that.
• 32:53
  Blake: It's like a child, you don't feed your child or you neglect your child, like protective services are gonna come and take your child.
• 32:59
  Blake: That should be the same for businesses.
• 33:02
  Craig: You know what.
• 33:02
  Erin: The hackers are going to come and take your business.
• 33:05
  Blake: that's going to happen, Unfortunately unfortunately, I do agree.
• 33:09
  Blake: But if you think about good hackers, right?
• 33:11
  Blake: Like we get all these crazy calls for people that are like, Hey, like my wife for this person has hacked my Instagram or my Facebook or whatever.
• 33:19
  Blake: And they're stalking me and they're going to murder my family and.
• 33:22
  Blake: All types of crazy stuff like that.
• 33:24
  Blake: But if you think about it, like the good hackers or that people that know what they're doing, They, if they go after the money, right?
• 33:31
  Blake: Like they have to you have to be an income in.
• 33:34
  Blake: And possession of like valuable data for not only that, They have to monetize right.
• 33:41
  Blake: Good accurate to make money.
• 33:41
  Blake: And this is what they do for money.
• 33:43
  Blake: Or they have some crazy vengeance, right?
• 33:45
  Blake: So those are like the two like scenario.
• 33:48
  Blake: Of course there is other scenarios, but those are the two most likely scenarios.
• 33:53
  BJ: And my opinion.
• 33:53
  Craig: that's.
• 33:54
  Craig: That's true.
• 33:55
  Craig: However, I've said this before, we're hackers are often smart and lazy, right?
• 34:00
  Craig: So they're going to run scripts.
• 34:01
  Craig: And even if the victim isn't doesn't have a lot of money or it doesn't have much, that's not the point.
• 34:07
  Craig: If they can take over their computer and use it as a slave to attack a larger corporation or use the power resources of that computer to mine, cryptocurrency, there's all sorts of other things.
• 34:17
  Craig: And other motives.
• 34:18
  Craig: That can happen.
• 34:19
  Craig: But I think that.
• 34:20
  BJ: Because we're in a cyber war.
• 34:22
  BJ: We're in the United States.
• 34:24
  BJ: And we have probably enough countries that look at us as a potential target for whatever reason.
• 34:31
  BJ: We have enough of that take this very seriously because sometimes profit is the goal, but also sometimes just destruction is low.
• 34:39
  Craig: Yeah.
• 34:39
  Craig: I think, going back to what Blake said, I think that most people, they mean and they, they might start a company and they're just trying to do the best they can on the small budget that they have.
• 34:48
  Craig: And.
• 34:48
  Craig: They're hustling and they're working hard and they don't have a lot of time or money.
• 34:52
  Craig: So they cobble this stuff together, but my and that's fine, to start off, but the point is that.
• 34:57
  Craig: You have to enlist, help.
• 34:59
  Craig: Most people can't build a house with one person and a hammer it's just going to take too long.
• 35:03
  Craig: It's not efficient.
• 35:04
  Craig: But the point is that as you have new, when you start off your business and you hire employees, now you have those people's lives dependent upon you for that paycheck.
• 35:14
  Craig: And if you have a nasty cyber event like ransomware your companies.
• 35:18
  Craig: Only five people or 10 people.
• 35:20
  Craig: Now all those people can't work.
• 35:22
  Craig: And then what if your company, if it's only five or 10 people, but maybe you have thousands like that t-shirt company.
• 35:27
  Craig: The other day we talked about, maybe you've got thousands or millions of customers and those people can't get access to for their order.
• 35:35
  Craig: So it's, you have this like ripple effect, right?
• 35:38
  BJ: Yeah.
• 35:39
  Craig: not only your employee yourself, but you're as your company grows larger and larger, you're affecting your employees and
• 35:46
  BJ: So true.
• 35:47
  Craig: and your vendors lives.
• 35:48
  Craig: And then now you're affecting your customers too.
• 35:51
  Craig: So if you think about that and you go through that exercise and you feel.
• 35:55
  Craig: look, what, what really will happen to me or my business that I've worked so hard to build.
• 36:01
  Craig: If something stupid happens, you gotta be prepared.
• 36:04
  BJ: Yeah.
• 36:04
  BJ: And.
• 36:05
  BJ: And some truth.
• 36:06
  BJ: I don't remember who said it, but what was that phrase about some truth.
• 36:09
  BJ: To be self-evident.
• 36:10
  BJ: It's internal, like knowledge is.
• 36:12
  BJ: And then also, like there's a concept.
• 36:14
  BJ: Cosmic proportions.
• 36:16
  BJ: The idea of survival of the fittest and its.
• 36:19
  BJ: It sounds bad when you say it, but I'm a cosmic executive and from just a forward progress perspective, the boosting with the direction, a forward progress and you.
• 36:29
  BJ: If you take a step back and look at both world from a big picture view, instead of just your current viewpoint, like where you are in life.
• 36:37
  BJ: Scale out and you look at it from like the bird's eye view.
• 36:40
  BJ: You can definitely see a transition from, just how the rural always wants to more of a, you.
• 36:47
  BJ: Incorporation of integration with more of a virtual type cause we're online and it's and it's part of the human experience.
• 36:54
  BJ: Now, and it's becoming more so that way, and it's just going to keep.
• 36:58
  BJ: at a point where technology is advancing at such a rapid rate.
• 37:02
  BJ: no denying when you look at, from the bird's eye view that we're in this.
• 37:06
  BJ: The flow of, we're going in direction and it's just the advice.
• 37:10
  BJ: This point to stay.
• 37:12
  BJ: Stay in peace with.
• 37:13
  BJ: Move in tandem with the human machine as it moves forward, and this is definitely the direction it's going.
• 37:19
  Craig: Yep.
• 37:19
  Craig: Absolutely.
• 37:20
  Craig: Okay.
• 37:21
  Craig: Any other cyber dues that you guys found that you want to talk about?
• 37:24
  Craig: Or should we wrap up for the day?
• 37:26
  BJ: Yeah, there's always.
• 37:27
  BJ: He knew the five minutes ago, just check five minutes later and there's more news.
• 37:31
  BJ: Has there ever been a more rapidly evolving industry then the cyber front?
• 37:36
  Craig: Nope.
• 37:37
  BJ: My chat bot called.
• 37:39
  BJ: Cyberspace, she calls it hyperspace.
• 37:41
  BJ: So I guess, but I guess that's I've never heard that before, but I guess that's a good word for it because really it fits, Like we're moving at the speed of light here.
• 37:48
  Craig: Yeah.
• 37:49
  Erin: Spaceships.
• 37:50
  Craig: Yup.
• 37:51
  Erin: Like hyperdrive.
• 37:53
  BJ: Yeah.
• 37:54
  Erin: Yeah.
• 37:55
  Blake: Yeah.
• 37:56
  Erin: I'm not aging.
• 37:57
  Craig: Yeah.
• 37:58
  BJ: Really, as we progress to the future, guys, could you imagine that the Terminator was horrible?
• 38:03
  BJ: Let's not go there.
• 38:05
  BJ: That's good.
• 38:06
  BJ: Cyber hygiene.
• 38:07
  Craig: That's right.
• 38:08
  BJ: Let's get our film.
• 38:09
  Erin: Yes.
• 38:09
  Erin: And actually I think, oh, sorry, go ahead, Blake.
• 38:12
  BJ: I was
• 38:12
  Blake: just thinking about something that is pretty critical that I don't think we've ever mentioned, but we should definitely say.
• 38:19
  Blake: I was actually reading and I was like, okay, when you guys said, okay, what's.
• 38:22
  Blake: What's important.
• 38:23
  Blake: About cybersecurity.
• 38:25
  Blake: What's research, but we've never talked about incident response in response to.
• 38:30
  BJ: Yeah.
• 38:31
  Blake: You've never once mentioned it.
• 38:33
  Blake: And in the article that I pulled up is talking about the golden hour.
• 38:36
  Blake: The second something happens, don't try and figure it out.
• 38:40
  Blake: Why contact security professionals, because every moment that takes away.
• 38:45
  Blake: It goes against you
• 38:47
  Craig: I did actually talk about IRR.
• 38:48
  Craig: Our table top earlier.
• 38:50
  Blake: Oh,
• 38:51
  BJ: yeah.
• 38:51
  BJ: And that's a concept.
• 38:53
  BJ: That's a term I've never heard before that term you used, I've never heard that before.
• 38:58
  Craig: So that's what that, that's what that exercise is.
• 39:00
  Craig: Blake internet or incident response.
• 39:03
  Craig: Tabletop is an exercise where you go around the room, you go around your conference room or whatever.
• 39:08
  Craig: If you have a.
• 39:09
  Craig: A company.
• 39:10
  Craig: With the stakeholders and you plan the scenario of, okay.
• 39:16
  Craig: Here's the scenario we just got ransomware.
• 39:19
  Craig: What are we doing?
• 39:20
  Craig: What's the plan.
• 39:20
  Craig: What's the process.
• 39:22
  Craig: Show us your incident response plan, work, the plan, actually do the stuff that your plan is documenting.
• 39:28
  Craig: And go through it.
• 39:29
  Craig: And that's what you find out that you were just talking about Blake.
• 39:32
  Erin: Okay.
• 39:32
  Erin: This shows what a nerd I am.
• 39:34
  Erin: If I haven't showed that already, but.
• 39:35
  Erin: It's like fun.
• 39:37
  Craig: It is fun from our perspective.
• 39:39
  BJ: Yeah.
• 39:40
  BJ: Yeah.
• 39:40
  Craig: It's kinda like going through a pen test on the year.
• 39:42
  Craig: You're literally go at your.
• 39:44
  Craig: You're having professionals like us that are experts in this review, your plan.
• 39:51
  Craig: And if you don't have a good plan, we have a good plan and we help you write the plan and improve the plan.
• 39:57
  Craig: If you don't have a plan at all, we help you develop one.
• 39:59
  Craig: And then we go through it to get when you're ready.
• 40:01
  Craig: Obviously you go through it together and it's like shuffling a deck of cards and pick a card.
• 40:06
  Craig: What's the IRR for the day.
• 40:08
  Craig: Is it going to be ransomware?
• 40:09
  Craig: Did our server die?
• 40:10
  Craig: Is it critical server dye?
• 40:12
  Craig: How fast can we recover that?
• 40:13
  Craig: That app server.
• 40:14
  Craig: We just got.
• 40:15
  BJ: have things
• 40:15
  Craig: Ah,
• 40:16
  BJ: Until something happens and then they don't know what to do.
• 40:20
  BJ: A little small.
• 40:21
  BJ: house fire and I was not prepared and I literally had my bare hands.
• 40:25
  BJ: But this fire out like that
• 40:26
  Craig: Yeah.
• 40:27
  BJ: You know what I mean?
• 40:28
  BJ: I should have
• 40:28
  Craig: it's all about, drills though, right?
• 40:30
  Craig: Like You
• 40:30
  BJ: Yeah.
• 40:32
  Craig: now, you, now you have that
• 40:33
  BJ: I'm prepared and I and I feel so much.
• 40:35
  BJ: I'm prepared, I'm like, okay.
• 40:37
  BJ: Again, I'm not going to be a victim again.
• 40:40
  Craig: Yeah, but there's also variances around the eye are tabletop too.
• 40:43
  Craig: So like you never draw the same card again.
• 40:45
  Craig: So you're always
• 40:46
  BJ: Yeah.
• 40:47
  Craig: And looking through different lenses and looking through different angles to see how well your plan stands up and how
• 40:53
  BJ: Yeah.
• 40:54
  Craig: up,
• 40:54
  BJ: yeah.
• 40:55
  Craig: was the time it took to put this in place?
• 40:57
  Craig: Who did they call?
• 40:58
  Craig: Why did they call that person?
• 41:00
  BJ: How much time.
• 41:01
  BJ: Inaction.
• 41:02
  BJ: In decision because you did.
• 41:03
  BJ: You didn't know what to do,
• 41:05
  Craig: What happens if you're relying, you have third parties or vendors involved, what happens if they're not available or what happens if they're too busy?
• 41:11
  Craig: What do you just wait?
• 41:12
  Craig: Do you have a plan in place redundancy?
• 41:14
  Craig: do you call
• 41:15
  BJ: Yeah.
• 41:16
  BJ: But when it comes to cybersecurity, it may not.
• 41:18
  BJ: That idea.
• 41:19
  BJ: Clause in there that if all else fails, engage a team of prayer warriors.
• 41:22
  BJ: Because I never know.
• 41:25
  BJ: It's complicated.
• 41:26
  Craig: Yup.
• 41:27
  Erin: Yeah.
• 41:28
  Erin: But you're right, Blake, go ahead.
• 41:29
  Erin: Craig, sorry.
• 41:30
  Craig: to say, even home users can do an IRR.
• 41:33
  Craig: Scenario drill though, right?
• 41:34
  Craig: Could pretend BJ that your iPhone just blew up.
• 41:37
  Craig: What are you going to do for the rest of the day?
• 41:38
  Craig: How are you going to make phone calls?
• 41:40
  BJ: Yeah, because, Because it may seem unnecessary, but if you really look like we talked about yesterday, that there's an element to this it all blends together at some point, it all converges into one point, right?
• 41:51
  BJ: Because there's, Knology, there's science, there's nature, but it's all connected.
• 41:54
  BJ: It's not separate each.
• 41:55
  BJ: The other, like the project operates with the forces of nature.
• 41:58
  BJ: It's getting power from the forces of nature.
• 42:01
  BJ: when you look at it in that regard, Test to do these exercises.
• 42:06
  Craig: Gosh.
• 42:07
  Blake: For their order, so it's you have this like ripple effect, right?
• 42:11
  Blake: Not only your employee yourself, but you're as your company grows larger and larger, you're affecting your employees.
• 42:18
  Blake: And your contractors and your vendors lives.
• 42:20
  Blake: And then now you're affecting your customers too.
• 42:23
  Blake: So if you think about that and you go through that exercise and you feel.
• 42:27
  Blake: look, what, what really will happen to me or my business that I've worked so hard to build.
• 42:33
  Blake: If something stupid happens, you
• 42:34
  BJ: gotta be prepared.
• 42:35
  BJ: Yeah.
• 42:36
  BJ: And you in some truth is.
• 42:38
  BJ: I don't remember who said it, but what was that phrase about some truth to be self-evident.
• 42:42
  BJ: The truth is eternal.
• 42:44
  BJ: Like knowledge is.
• 42:45
  BJ: And then also, like there's a concept.
• 42:48
  BJ: Of a cosmic.
• 42:49
  BJ: Proportions.
• 42:50
  BJ: The idea of survival of the fittest.
• 42:52
  BJ: And it's, it sounds bad when you say it, but I'm a cosmic executive and from just a forward progress perspective, the moving with the direction, a forward progress.
• 43:03
  BJ: if you take a step back and look at the world from a big picture view, of just your current.
• 43:10
  BJ: you are in life.
• 43:11
  BJ: But you scale out and you look at it from like the bird's eye view, you can definitely see a transition from, just how the world always wants to more of a.
• 43:20
  BJ: It's incorporation of integration with more a virtual type, because we're online and it's and it's part of the human like extent.
• 43:28
  BJ: And it's becoming more so that way, and it's just going to keep.
• 43:32
  BJ: We're at a point where technology is advancing at such a rapid rate.
• 43:36
  BJ: There's no denying when you look at, from the bird's eye view that we're in this.
• 43:40
  BJ: Flow of you.
• 43:41
  BJ: going in direction it's just the advice.
• 43:45
  BJ: To stay.
• 43:46
  BJ: I stay in peace with, move in tandem with the human machine as.
• 43:50
  BJ: It's forward, and this is definitely the direction it's going.
• 43:53
  BJ: Yeah, absolutely.
• 43:55
  Blake: Any other cyber days that you guys found that you want to talk about?
• 43:58
  Blake: Or should we wrap up for the day?
• 44:00
  BJ: Yeah, always.
• 44:01
  BJ: There wasn't any new stuff, five minutes ago, just check five minutes later.
• 44:05
  BJ: And there's more news.
• 44:06
  BJ: Has there ever been a more rapidly evolving industry than the cyber front?
• 44:10
  BJ: No, probably not.
• 44:12
  BJ: My tablet.
• 44:13
  BJ: Called cyberspace.
• 44:14
  BJ: She calls it hyperspace, but I guess that's I've never heard that before, but I guess that's a good word for it because really it fits, we're moving at the speed of light here.
• 44:22
  Erin: Spaceships.
• 44:24
  Erin: Yeah, like hyperdrive.
• 44:26
  BJ: Yeah.
• 44:27
  BJ: Yeah.
• 44:28
  Blake: Yeah.
• 44:29
  Erin: I'm not aging.
• 44:30
  BJ: Really, as we progress to the future, guys, could you imagine that the Terminator was terrible?
• 44:35
  BJ: not go there.
• 44:36
  BJ: That's good.
• 44:37
  BJ: Cyber hygiene.
• 44:39
  BJ: That's right.
• 44:39
  BJ: Let's get our film.
• 44:41
  Erin: Yes.
• 44:41
  Erin: And actually I think, oh, sorry, go ahead, Blake.
• 44:44
  Blake: I was just thinking about something that is pretty critical that I don't think we've ever mentioned, we should definitely say I was actually reading.
• 44:52
  Blake: And.
• 44:52
  BJ: And then they don't know what to do.
• 44:54
  BJ: Remember.
• 44:54
  BJ: If not a little small.
• 44:56
  BJ: house fire and I was not prepared and I literally had hands.
• 45:00
  BJ: But this fire out like that shouldn't happen.
• 45:02
  BJ: You know what I mean?
• 45:03
  Blake: It's all about drills though, right?
• 45:05
  Blake: That experience
• 45:06
  BJ: now, you now you have that.
• 45:07
  BJ: To prepared.
• 45:09
  Erin: And it looks like we just lost Craig.
• 45:12
  Erin: So let's go ahead and cut it off here, Thank you, everyone for joining us, have a fantastic weekend and we will see you Monday.
• 45:20
  Erin: With all the.
• 45:21
  Erin: Newest breaking cyber news