Latest / Brian Thomas / Tech Friday w/ Dave Hatter - Sponsored by Intrust IT - 8/21/2026
Transcript
- 0:00Speaker 1: Deep talk Station. If you have KCD talk station, Happy Friday,
- 0:05Speaker 1: a special time here on Friday. It's on the morning show.
- 0:08Speaker 1: It's time from intrust It, which you can find online.
- 0:11Speaker 1: And if you're a business and you have a computer
- 0:13Speaker 1: or computers, you need a game plan. You need someone
- 0:16Speaker 1: who can get at you out of problems. When you
- 0:18Speaker 1: ultimately get hacked, which apparently is going to happen, you's
- 0:20Speaker 1: got to wait for it. Intrust it dot com Dave
- 0:23Speaker 1: Hatter's company, the best in the business is the business courier.
- 0:26Speaker 1: Dave Hatter. Welcome back and thank you for the service
- 0:28Speaker 1: you provide to a lot of folks in this country
- 0:31Speaker 1: through this this discussion.
- 0:34Speaker 2: Always my pleasure.
- 0:35Speaker 3: Brian, happy to be here, and I hope we're doing
- 0:37Speaker 3: some good out there.
- 0:38Speaker 1: Well, when I read this subject matter hackers hack North Korea,
- 0:42Speaker 1: I was thinking maybe they're going inside North Korea to
- 0:44Speaker 1: steal their information and data. But no, it's more it's
- 0:47Speaker 1: more of an eye opener than that. This is a
- 0:50Speaker 1: frightening revelation. Talk to my listeners about what these people
- 0:53Speaker 1: who hacked into North Korea found.
- 0:55Speaker 3: Yeah, well, Brian, this just shows you that the war
- 1:00Speaker 3: that folks like me have been putting out there for
- 1:03Speaker 3: years about hackers and infiltration, critical infrastructure, etc. Are real,
- 1:09Speaker 3: and I agree with you, this is very disturbing. So
- 1:12Speaker 3: Wired magazine ran this story and a security researcher basically
- 1:19Speaker 3: was able to hack into some North Korean hackers. North
- 1:23Speaker 3: Korea has been in the press a lot around this subject.
- 1:25Speaker 3: If you can go back a few years, you'll see
- 1:27Speaker 3: the FBI, for example, has warned about North Korean hackers
- 1:31Speaker 3: being hired by American companies purportedly as employees and then
- 1:36Speaker 3: stealing secrets, money, that.
- 1:37Speaker 2: Sort of thing.
- 1:38Speaker 3: Wow, so this is not new, but this really kind
- 1:41Speaker 3: of confirms these warnings and really puts a finer point
- 1:44Speaker 3: on what folks have been saying about this. So this
- 1:47Speaker 3: guy was able to through a mistake they made, hack
- 1:51Speaker 3: into their systems, their network. And I'll just read directly
- 1:55Speaker 3: from the article. Since Greek based cybersecurity researcher Evangelis Stichis
- 1:59Speaker 3: gained system North Korean systems twenty two months ago. He
- 2:03Speaker 3: says he found evidence that one thousand, six hundred and
- 2:06Speaker 3: forty companies across fifty seven countries have been impacted by
- 2:10Speaker 3: the country's hacking operations. Among these stichis will detail at
- 2:14Speaker 3: black Hat. Black Hat is a cybersecurity conference that just
- 2:17Speaker 3: ended out in Vegas. Around seven hundred to eight hundred
- 2:22Speaker 3: impacted organizations. They had really damaging intrusions. So I'm reading
- 2:25Speaker 3: directly from the article. So sixteen hundred companies across the world,
- 2:31Speaker 3: many in the United States. It goes on to say,
- 2:34Speaker 3: now this gets a little nerdy, but it's company access,
- 2:37Speaker 3: its root access to servers. It's root access to AWS,
- 2:40Speaker 3: that's Amazon Web Services, you know, think Google Workspace, Microsoft
- 2:45Speaker 3: A sixty five. The term route means the highest level
- 2:49Speaker 3: of permissions in a computer system. So essentially he's an
- 2:54Speaker 3: administrator or they, or rather are these North Korean hackers
- 2:58Speaker 3: have gained access to these companies? Is that essentially have
- 3:00Speaker 3: an administrator access to their system, meaning they can do anything.
- 3:03Speaker 3: They can create new accounts, they can delete accounts, they
- 3:06Speaker 3: can install backdoors, they can launch a ransomware attacker. Really,
- 3:10Speaker 3: they can do anything they want. They have access to
- 3:13Speaker 3: the entire system. So any information that you might not
- 3:16Speaker 3: want them to have access to, they're eventually going to
- 3:18Speaker 3: find it because of this quote root unquote. That's again,
- 3:21Speaker 3: that's the super nerdy thing. Brian level of access they've gained.
- 3:26Speaker 1: That's well, man, it's terrible. Individual information, people's medical records,
- 3:31Speaker 1: people's criminal history, anything anybody has gathered together as far
- 3:35Speaker 1: as information, most notably like, for example, how about the
- 3:40Speaker 1: intellectual property day that's worth billions of dollars out there,
- 3:43Speaker 1: and apparently they've hacked in and stolen billions of dollars
- 3:46Speaker 1: worth of intellectual property too.
- 3:48Speaker 3: Intellectual property depending on the organization, could be military secrets,
- 3:52Speaker 3: could be employee data, customer data. Yeah, to your point, Brian,
- 3:56Speaker 3: it could literally be anything. So if you get further
- 3:58Speaker 3: into this article, and I will say, Wired lately has
- 4:01Speaker 3: really been putting out some good stuff in the realm
- 4:04Speaker 3: of hacking. So if you're interested in these topics and
- 4:06Speaker 3: if you want to sort of see the state of affairs,
- 4:08Speaker 3: Wired is a great source for that. And it's always
- 4:10Speaker 3: I'll link this in my notes, but he says, the
- 4:13Speaker 3: researcher says, these include Boston Children's Hospital, what's called the
- 4:16Speaker 3: vast COVID nineteen database of American's personal health, the large
- 4:20Speaker 3: Japanese tech firm aon smart technology, Chinese phone manufacturer OPO,
- 4:24Speaker 3: cryptocurrency firm, so on and so forth, and then It
- 4:27Speaker 3: goes on to say Japan's Computer Emergency Response Team says
- 4:31Speaker 3: it confirmed the Securities Research security researchers findings and work
- 4:35Speaker 3: with a on smart technology on remediation. So again this
- 4:39Speaker 3: there seems to be evidence from people, you know, third
- 4:42Speaker 3: party validation of what this guy is saying. And I
- 4:46Speaker 3: think the bigger point for me, Brian is people like
- 4:49Speaker 3: me are constantly screaming about this, trying to get organizations
- 4:52Speaker 3: to take this stuff seriously. And there's still this ongoing
- 4:54Speaker 3: mentality of why I'm too small, this will never happen
- 4:57Speaker 3: to me. I'm boring. I don't have anything worth stealing.
- 4:59Speaker 3: Your money is worth stealing, your trade secrets are worth stealing,
- 5:02Speaker 3: your data is worth stealing. And it might be that
- 5:04Speaker 3: they're trying to break into you to get to another
- 5:07Speaker 3: party through you.
- 5:07Speaker 2: Like the Target hack, it's we gotta wake.
- 5:10Speaker 1: Up LinkedIn dot com where you find Dave Hatter and
- 5:13Speaker 1: the articles he's referring to don't go away. We're gonna
- 5:15Speaker 1: find out if maybe the same hackers stole are stole
- 5:18Speaker 1: your McDonald's dossier. Creepy coming up more Yes, six point
- 5:22Speaker 1: thirty six fifty station six forty fIF you have Kcdcalk
- 5:26Speaker 1: Station MP Friday Tech Party with Dave hat Or Intrust
- 5:29Speaker 1: dot Com, Businesses, interest it dot Com. You need to
- 5:33Speaker 1: get Dave and his crew on the job prevent things
- 5:36Speaker 1: like the foregoing segment talked about and pivoting over. You know,
- 5:39Speaker 1: I read this day this article about McDonald's building dossier's
- 5:42Speaker 1: on people. It's creepy, But then I immediately thought, well,
- 5:46Speaker 1: isn't that what the Kroger cards all about? Dave Hatter, Well.
- 5:51Speaker 3: Ryan, yeah, this is for people like me who generally
- 5:55Speaker 3: don't join loyalty programs. Right now, I understand the argument
- 6:00Speaker 3: in favor of it, and understand why people do it.
- 6:04Speaker 3: And you know, I put on my twenty five plus
- 6:07Speaker 3: years experience as a guy building the sort of systems
- 6:10Speaker 3: that are collecting the data we're about to talk about,
- 6:12Speaker 3: and I say, do I really want to let them
- 6:15Speaker 3: build this extensive dossier on me? And now I know
- 6:19Speaker 3: folks are going to argue, well, if you pay with
- 6:21Speaker 3: a credit card, they're going to know this anyway. Maybe,
- 6:24Speaker 3: but the least number of hands that have this information
- 6:27Speaker 3: about me the better. And I can always choose, at
- 6:31Speaker 3: least today to not pay with a credit card. Right So,
- 6:36Speaker 3: I get why people do this, and I think, to
- 6:38Speaker 3: a large extent, Brian, it's because people don't really realize
- 6:41Speaker 3: as this Yet another Wired article points out the amount
- 6:45Speaker 3: of data that is being collected and then how it
- 6:47Speaker 3: can potentially be used not only by the organization collecting it,
- 6:51Speaker 3: by whoever ultimately buys it from them. Because did you
- 6:57Speaker 3: read the eighty page terms of service confused that says
- 7:00Speaker 3: they're probably going to sell your data to other companies.
- 7:03Speaker 2: No, we not, and even if you did, you probably
- 7:04Speaker 2: wouldn't understand it.
- 7:06Speaker 1: So you sign up for a McDonald's loyalty program so
- 7:09Speaker 1: you get a discount on fries or whatever. And that's
- 7:12Speaker 1: the moment in time when they started collecting every single
- 7:14Speaker 1: purchase that you made. And as this article points out,
- 7:17Speaker 1: we have somebody in California who apparently, in California, you
- 7:19Speaker 1: can get the data they've collected on you. And when
- 7:22Speaker 1: we got it back, Dave five hundred and fifteen page
- 7:26Speaker 1: file on one customer.
- 7:29Speaker 3: Yeah, it's pretty wild. So the article I'm going to
- 7:31Speaker 3: quote says when customers sign up for loyalty programs like
- 7:34Speaker 3: the one opportunit the McDonald's app, they might not realize
- 7:37Speaker 3: the extent to which their data is being aggregated and
- 7:39Speaker 3: using predictive models. And then again they might not realize
- 7:43Speaker 3: how that data could be sold to other third parties
- 7:46Speaker 3: who sell it to other third parties who sell out
- 7:48Speaker 3: to you, fifth parties, sixth parties, et cetera. Data brokers,
- 7:51Speaker 3: these companies behind the scenes, collecting and aggregating all this
- 7:55Speaker 3: data and building incredibly detailed profiles of you, and then
- 7:59Speaker 3: sometimes data. Even if these companies are all above board,
- 8:02Speaker 3: even if you've essentially consented to this because you've signed
- 8:05Speaker 3: up for the thing, then the data gets leaked. We've
- 8:08Speaker 3: said this so many times on your show, Brian, I
- 8:10Speaker 3: can guarantee you there's probably not a single person in
- 8:13Speaker 3: your listening audience who hasn't gotten at least one data break.
- 8:16Speaker 2: Notification oh from some company that had their data.
- 8:19Speaker 3: In many cases, they don't even know how that company
- 8:22Speaker 3: got their data because it's happened to me. It's because
- 8:25Speaker 3: of data brokers and companies like this selling your data
- 8:28Speaker 3: or leaking your data. But to dig down into this,
- 8:30Speaker 3: you know, I encourage people. I'll post the link here
- 8:32Speaker 3: in a bit on my substack. I'll link it from
- 8:34Speaker 3: LinkedIn Facebook acts all that stuff. I encourage people to
- 8:38Speaker 3: read this so you'll understand. And this is not just
- 8:41Speaker 3: a loyalty app. It's the so called free apps on
- 8:44Speaker 3: your phone. Yeah, it's the so called smart devices that
- 8:47Speaker 3: are collecting your data. So yeah, this is just from
- 8:50Speaker 3: the table this guy put together. Estimated a number of
- 8:52Speaker 3: visits during the next six weeks two point one six.
- 8:54Speaker 3: Estimated average order spend during the next six weeks thirteen
- 8:57Speaker 3: point five Yeah, four nine dollars customer attriction likelihood zero
- 9:01Speaker 3: dollars frequency monetary derived top product large diet coke, uh
- 9:06Speaker 3: top drive product, wraps chicken.
- 9:09Speaker 2: I mean, And then he goes on to explain this
- 9:11Speaker 2: in detail.
- 9:12Speaker 3: They talk to people like the Center for Democracy and Technology,
- 9:16Speaker 3: you know now based saying here, McDonald's takes data privacy
- 9:19Speaker 3: and security seriously, and we take robust steps to safeguard customer.
- 9:23Speaker 3: McDonald's spokesperson tells Wired, how many times have we talked
- 9:26Speaker 3: about data breaches on this show, Brian More, If your
- 9:29Speaker 3: listeners have gotten that letter saying your data has been.
- 9:32Speaker 1: Breached more times than I'm sure to remember.
- 9:35Speaker 3: I'm sure they do take it seriously. That doesn't mean
- 9:38Speaker 3: it won't get leaked either. Through them or through a
- 9:41Speaker 3: company they might be selling it to.
- 9:43Speaker 1: This is like five hundred and fifteen page. This guy
- 9:46Speaker 1: went to McDonald's way too many times is the one
- 9:48Speaker 1: thing I can conclude.
- 9:49Speaker 2: I mean serious, agreed.
- 9:50Speaker 1: Wow, you might want to take a take some stock
- 9:53Speaker 1: in your health. Oh we'll be doing that in the
- 9:54Speaker 1: seven o'clock hour with Keith and George are restore wellness folks,
- 9:57Speaker 1: and I'm sure they will tell you do. I don't
- 10:00Speaker 1: go to McDonald's now, Dave, don't go away, because it's
- 10:03Speaker 1: got one more to talk about. Flock. I know your
- 10:05Speaker 1: favorite thing or flocks. You've seen the talk station six
- 10:09Speaker 1: fifty fifty five KCD talk station Brian Thomas with Dave
- 10:13Speaker 1: Hatter from intrust It interest it dot Com our tech
- 10:16Speaker 1: genius and Guru heed what Dave has to say, And
- 10:20Speaker 1: don't go down the road to flock cameras. I guess
- 10:22Speaker 1: I saw Oxford, Ohio, and I misstated it was the
- 10:25Speaker 1: most recent city to get rid of flock cameras, but
- 10:28Speaker 1: the first one in southwest Ohio. I guess to get
- 10:30Speaker 1: rid of flock cameras. Everybody's revolting against them, the surveillance state.
- 10:34Speaker 1: People are starting to pay attention to it. And you've
- 10:36Speaker 1: been on that bandwagon for a long time, Dave, And
- 10:37Speaker 1: I guess it's just getting worse.
- 10:40Speaker 2: It is getting worse, Brian.
- 10:42Speaker 3: But I want to go back to that last and
- 10:43Speaker 3: then story and connect it back to this in a second.
- 10:46Speaker 3: So again the McDonald's dot CA from this Wired reporter
- 10:50Speaker 3: You'll see where I'm going with this. So again from
- 10:52Speaker 3: the Wired article on many of the data points of
- 10:54Speaker 3: McDonald's report, when viewed individually, seem innoculous. The accumulation of
- 10:57Speaker 3: information over years creates a creepily create picture of habits
- 11:02Speaker 3: you know, blah blah blah blah, as well as it's
- 11:05Speaker 3: processing through AI can create pretty invasive and personal information
- 11:09Speaker 3: about when you're going to be there, what you do
- 11:11Speaker 3: during the day, and so forth. So that's the point
- 11:15Speaker 3: I'm always trying to make over time company excess collected
- 11:19Speaker 3: this data?
- 11:20Speaker 2: Company?
- 11:20Speaker 3: Why collect some data? Companies? E collects data. It's bought
- 11:23Speaker 3: and sold. So McDonald's or whomever has a loyalty program
- 11:28Speaker 3: might be enriching their data about you from other data sources.
- 11:32Speaker 3: All this data is everywhere, and then AI is processing it.
- 11:36Speaker 3: Do you want McDonald's selling this information to your insurance company.
- 11:40Speaker 2: So that your.
- 11:40Speaker 3: Insurance company knows that you eat six quarter pounders a
- 11:43Speaker 3: day and drink thirty five diet cokes.
- 11:46Speaker 2: You think that's going to help your insurance premium.
- 11:48Speaker 3: Wow, So that's the point people often don't connect up
- 11:52Speaker 3: is that's and if you trust, go ahead.
- 11:54Speaker 1: I was just saying, that's like our autobiles collecting data
- 11:56Speaker 1: about our speed and driving habits and selling off our
- 11:58Speaker 1: insurance companies as well. One more headed data points.
- 12:01Speaker 3: Yeah, so even if you trust the company that's doing
- 12:04Speaker 3: the initial collection, again, they could leak the data. The
- 12:07Speaker 3: data could be sold to another company you don't trust,
- 12:10Speaker 3: and then they The last point I want to make
- 12:12Speaker 3: so California has a privacy law as Kentucky does now
- 12:17Speaker 3: where you can request this data and they basically have
- 12:21Speaker 3: to give it to you, and then depending on the
- 12:22Speaker 3: state and the law, you might be able to demand
- 12:25Speaker 3: that they delete it. So I think we're moving in.
- 12:28Speaker 2: The right direction on this.
- 12:29Speaker 3: That is, and now to get back to the flocks.
- 12:32Speaker 3: So there's another company out there signal trace. The idea
- 12:36Speaker 3: here is in addition to the capabilities of the flock cameras,
- 12:40Speaker 3: which I don't think most people really understand, and I
- 12:42Speaker 3: won't go too deep down this because frankly, I find
- 12:45Speaker 3: this even more disturbing than the capabilities of Flock. And
- 12:48Speaker 3: you know, Flock has become the coke of this conversation. Yeah,
- 12:51Speaker 3: I mean is you know a lot of people will
- 12:53Speaker 3: say coke when they mean pepsi or some other type
- 12:56Speaker 3: of yea coke.
- 12:57Speaker 1: Like drink, Kleenex for facial tissue, same thing.
- 12:59Speaker 3: Yeah, yes, yes, So there are other companies that build
- 13:05Speaker 3: technology very similar to Flock, and I just want to
- 13:07Speaker 3: point that out because saying get rid of Flock, Okay,
- 13:10Speaker 3: well we don't have Flock, Well, do you have some
- 13:12Speaker 3: other type of mass surveillance technologyhot?
- 13:14Speaker 1: Well taken.
- 13:16Speaker 3: Yeah, this company is building something that ideally reads the
- 13:20Speaker 3: Bluetooth signals coming off the devices in your car. So
- 13:24Speaker 3: you know, you happen to ride to work in a
- 13:25Speaker 3: car pool every day, and let's say there's three other
- 13:27Speaker 3: people in there. Well, their phone, their EarPods, their other
- 13:32Speaker 3: they're smart watch, there are other devices that are throwing
- 13:35Speaker 3: off some sort of Bluetooth signal or other type of
- 13:39Speaker 3: Wi Fi RFID type of signals gets picked up and
- 13:43Speaker 3: gets associated.
- 13:44Speaker 1: With that car, uniquely ident each one of those is
- 13:47Speaker 1: uniquely identifiable, right, it is.
- 13:50Speaker 3: Internally it has like a Mac address and other unique identifiers.
- 13:54Speaker 3: But you know, I'm just just real quick and I
- 13:57Speaker 3: because I know we're going to run out of time.
- 13:59Speaker 3: You know, you don't have to look too far to
- 14:00Speaker 3: find examples of people pulled over because the license plate.
- 14:04Speaker 2: Reader was wrong.
- 14:05Speaker 3: You know, there's an article that wrote a very detailed
- 14:08Speaker 3: and very disturbing story about how he ended up at
- 14:10Speaker 3: gunpoint because he was testing a range Rover and it
- 14:12Speaker 3: was reported as stolen and next thing you know, the
- 14:15Speaker 3: guys surrounded by cops pointing guns at it. Here's a
- 14:18Speaker 3: story from Breitbart mag gasine. A couple driving through Sherwood,
- 14:23Speaker 3: Arkansas in February was stopped and coveed at gunpoint. Where
- 14:25Speaker 3: are six week year olds six week old son and
- 14:29Speaker 3: another child in the vehicle? Let go after police identified
- 14:32Speaker 3: the confused stolen vehicle based on misreading of the license plate.
- 14:37Speaker 2: Is this has happened many times? That said, I imagine
- 14:41Speaker 2: the next step.
- 14:42Speaker 3: Now the smart watch you're wearing writing in the carpool,
- 14:45Speaker 3: or that someone is wearing writing in the carpool with you.
- 14:48Speaker 3: Somehow through all of this data aggregation and sale and
- 14:51Speaker 3: identification through AI that we just talked about from the
- 14:54Speaker 3: McDonald's article says, Hey, this smart watch was linked to
- 14:58Speaker 3: a crime.
- 14:59Speaker 2: It was in your car. At some point, your car.
- 15:02Speaker 3: Drives by one of these things, the license plate reads it,
- 15:04Speaker 3: and next thing you know, you're pulled over again.
- 15:06Speaker 2: Wow, because that.
- 15:07Speaker 3: Smart watch was associated with a murder or whatever fill
- 15:10Speaker 3: in the blank. So I'm hoping that by going back
- 15:14Speaker 3: to this McDonald's thing and the data collection and the
- 15:17Speaker 3: data sale and the idea of using AI and other
- 15:20Speaker 3: technologies to enrich this data filled out ever more data
- 15:24Speaker 3: and link things together could potentially have you pulled over
- 15:28Speaker 3: at gunpoint because some device that was in your car
- 15:31Speaker 3: doesn't even belong to you. Somebody was riding in your
- 15:34Speaker 3: car is now getting you pulled over.
- 15:40Speaker 1: Frightening stuff.
- 15:41Speaker 3: It's it's literally pre crime, right out of Minority Report. Yeah,
- 15:46Speaker 3: you know, I've been on the Internet of Things for
- 15:48Speaker 3: a long time, Brian and trying to warn people how
- 15:50Speaker 3: all of these devices that seem so cool and so
- 15:52Speaker 3: convenient have this very large potential downside, not the least
- 15:57Speaker 3: of which is at some point they could all be
- 15:59Speaker 3: switched off or used in some sort of nefarious way
- 16:03Speaker 3: to flood the Internet with traffic report wrong data like stucksnet.
- 16:07Speaker 3: You know, we have rapidly progressed into this incredibly interconnected
- 16:12Speaker 3: digital society and it is unbelievably fragile, and it's fraught
- 16:16Speaker 3: with all of these issues that unless you do what
- 16:18Speaker 3: I do, you can't It's difficult to understand. And I
- 16:22Speaker 3: get that, but I'm just saying, folks, we have got
- 16:24Speaker 3: to shed ourselves of this sort of thing. You know, Brian,
- 16:28Speaker 3: these sorts of canvas were used by Russia to target
- 16:32Speaker 3: things in Ukraine. They were used by Israel to target
- 16:35Speaker 3: things in Iran. This goes so far beyond just well,
- 16:40Speaker 3: you know, I don't like the mass surveillance, which I
- 16:42Speaker 3: don't like. We have got to really get serious about
- 16:46Speaker 3: defending this stuff and thinking about does this.
- 16:49Speaker 1: Make sense all of this stuff? No, it doesn't. These
- 16:52Speaker 1: are all finer points on why we shouldn't use these devices.
- 16:55Speaker 1: Just let your default position be ludite and then move
- 16:58Speaker 1: forward from there. I guess the best thing you can do.
- 17:01Speaker 1: Dave Hatter, God bless you, sir. I listen to what
- 17:03Speaker 1: he has to say. He's not lying, He's looking out
- 17:05Speaker 1: for our collective best interest, so Leen Ludit says Dave
- 17:09Speaker 1: hatter that's my boiled down summary. Dave will do this
- 17:11Speaker 1: again next Friday. Tinfoil hat friend, keep up the great
- 17:15Speaker 1: work and I'll recommend again LinkedIn search for Dave Hatterer
- 17:18Speaker 1: to get the articles. Dave, have a great weekend, my friend.
- 17:22Speaker 2: Thanks Brian, I look forward to chat with you next week.
- 17:25Speaker 1: Appreciate that