Latest / Encrypted Ambition: Where Ambition Meets Encryption - Inside The Minds Of Disruptors. / 032322_Breaking-Cybersecurity-News-Raw&Unfiltered:What-is-the-Oauth-Firm-Breach&Why-Could-it-Ruin-Your-Day?

Transcript

032322_Breaking-Cybersecurity-News-Raw&Unfiltered:What-is-the-Oauth-Firm-Breach&Why-Could-it-Ruin-Your-Day? · Encrypted Ambition: Where Ambition Meets Encryption - Inside The Minds Of Disruptors.

• 0:15
  Erin: Welcome to today's PTG podcast, where we talk about the latest breaking cyber news.
• 0:21
  Erin: And.
• 0:22
  Erin: I was just reading where it says that, it looks like Russia.
• 0:26
  Erin: Is laying the groundwork for cyber attacks on us infrastructure.
• 0:30
  Craig: yup.
• 0:30
  Erin: So I know yesterday we were talking, I was like, oh, I wonder if they're going to hit small companies but really, again, looking at colonial pipeline, they could hit just about anything
• 0:41
  Craig: Well, and there was already I don't know if you saw this, but there was already.
• 0:44
  Craig: Some evidence of scans.
• 0:47
  Craig: Against, I think the top five energy companies in the United States.
• 0:51
  Erin: No, I didn't see
• 0:52
  BJ: that.
• 0:53
  BJ: Yep.
• 0:53
  BJ: They, the FBI reported that they literally have proof that they scan the systems for software vulnerabilities, which again is why we so strongly suggest using the right tool.
• 1:05
  BJ: Because even when vulnerabilities are found in software there's tools that can help to prevent, exploit even in the presence of vulnerability.
• 1:12
  BJ: Cause these, some of these software tools are very intelligent.
• 1:15
  Craig: Yup.
• 1:16
  BJ: It's really astonishing.
• 1:17
  BJ: Isn't it to think that there are, while we do know that right now, there's not a silver bullet, although we may be getting close to it.
• 1:22
  BJ: There's so many advancements happening in quantum computing last night, I was up just literally dropped to the floor.
• 1:29
  BJ: Like some of these advancements are just groundbreaking, but while we don't have a silver bullet right now, It's really shocking to see that critical places as our power grids and it's things like that, that our nation relies so heavily upon not using the best tools available.
• 1:44
  BJ: That is really shocking, like the best tools available right now.
• 1:48
  BJ: We know what they are and they're not using them.
• 1:50
  Erin: I feel like a lot of it is relationships versus common sense almost.
• 1:55
  Erin: So it's if they have existing relationships with vendors, even if it's not the right choice we've worked with some people too that were maybe a little behind the times.
• 2:04
  Erin: And it seems like a lot of things that are government related are be really behind And
• 2:12
  BJ: slow to.
• 2:13
  BJ: And you started tracking all the red tape all that.
• 2:17
  BJ: And then you don't have the swift ability to act the mobility and the agility that's required to stay aligned with the cutting edge and keep yourself protected, you start to fall behind
• 2:28
  Craig: I think it's similar to, I think it's similar to medical too, where a lot of those systems are they have big control systems and they're probably using outdated.
• 2:37
  Craig: Sadly, probably Microsoft's a windows operating systems that are outdated.
• 2:41
  Craig: Gosh, they're probably still using windows XP in certain situations.
• 2:44
  Craig: So, th you'd be surprised that the statistics of people still using ancient operating systems like that.
• 2:50
  Craig: And I think the big picture here is that you just can't connect those things to the internet, give them free reign.
• 2:57
  Craig: When there are so many security holes there.
• 3:00
  Craig: And that's why like BJ was saying what the XDR, that's a nice layer.
• 3:05
  Craig: Not going to protect against everything, but at least it's A more effective solution at detecting exploitation of some of these weaknesses and visibility.
• 3:13
  Craig: And then, certain situations, you might not be able to patch a scatter system for example, but.
• 3:19
  Craig: At least you have that sock.
• 3:20
  Craig: And first of all, you have the technology and then you have a sock, a 24 7 security operation center US-based background checks, cybersecurity engineers watching over everything, 24 7, at least you ha if you have that type of.
• 3:35
  Craig: in place.
• 3:35
  Craig: That's going to significantly reduce the odds of a breach.
• 3:39
  Craig: It's not going to protect against everything or all situations, but like I saw yesterday, there was Microsoft reported a huge OAuth breach and It's called OAuth.
• 3:49
  Craig: Oh, Off.
• 3:51
  Craig: And basically, have you ever logged into a website and it says.
• 3:55
  Craig: Instead of creating an account log in with Google or Facebook or something like
• 3:58
  BJ: yes, it does appeal to that these
• 4:01
  NA: days.
• 4:01
  Craig: Yeah.
• 4:02
  Craig: So that's what OAuth.
• 4:03
  Craig: is.
• 4:03
  Craig: It's that middleware that allows you to skip the account creation process.
• 4:10
  Craig: by granting access to one of the things, your username password for one of the other platforms, and then authorizing it by API.
• 4:18
  BJ: Okay.
• 4:19
  Craig: So that was breached.
• 4:20
  Craig: And that was confirmed yesterday.
• 4:23
  Craig: So if you have this is a perfect example of something like XDR, this would be out of scope, right?
• 4:27
  Craig: So that's on a cloud hosted, probably a big provider like micro.
• 4:31
  Craig: You and I are not going to have access to their security, right?
• 4:33
  Craig: It's not
• 4:34
  BJ: Oh, so explain that for a second though, please, Craig, because that's becoming very prevalent on the way.
• 4:38
  BJ: I've you see that with a lot of sites now where you can log in with Google or Facebook or apple even.
• 4:44
  BJ: And so what is it who is whose technology is that?
• 4:47
  BJ: And is it centralized?
• 4:48
  BJ: Like where, what is the vulnerability.
• 4:50
  Craig: I think it's an open source middleware.
• 4:53
  Craig: layer that typically uses what's called API technology to, to link two systems together.
• 4:59
  Craig: And it basically more rapidly allows for user creation and onboarding.
• 5:05
  Craig: of you creating A unique username and password, you would reuse like your Facebook login or your Gmail login, for
• 5:12
  BJ: But is that technology like owned by the same place and reused by all these different apps that use it?
• 5:18
  BJ: Or is it different?
• 5:19
  BJ: Although places it's used or.
• 5:22
  Craig: No, I think it is centralized.
• 5:23
  Craig: I'd have to research it to know for sure, but I'm pretty sure that it's a centralized almost like a Microsoft that.
• 5:29
  Craig: out with it.
• 5:30
  Craig: It might be open source though.
• 5:32
  Craig: Again, I'd have to research it.
• 5:33
  Craig: I, all I know is that it's like a middleware kind of software that allows the user to bypass the unique credential credit creation on the site.
• 5:42
  Craig: By leveraging.
• 5:43
  Craig: I never used to like it, to be honest with you.
• 5:45
  Craig: I've really not used that function before, because I always thought if they get breached, then.
• 5:51
  Craig: You know that's a problem.
• 5:52
  Craig: And then here we are, they got breached yesterday.
• 5:55
  BJ: Wow.
• 5:56
  BJ: Wow.
• 5:57
  BJ: Yeah, Cause it's there's, I've been seeing it.
• 5:59
  BJ: I've been seeing an uptick in the presence of that API.
• 6:04
  BJ: I used to see it like once in a while.
• 6:06
  BJ: And now I see it on almost every platform I use almost every platform offers me to log in that way.
• 6:12
  Erin: Did we just lose
• 6:13
  BJ: credits?
• 6:14
  BJ: No, I think he was just on,
• 6:15
  Craig: Yes.
• 6:15
  BJ: on mute
• 6:16
  Craig: I left everything open for you.
• 6:17
  Craig: So downstairs is all open.
• 6:18
  Craig: For the crawl space and whenever you're ready.
• 6:20
  Craig: to cross, the sciatic is right there.
• 6:23
  Craig: Great.
• 6:23
  Erin: That's I've thought about that.
• 6:25
  Erin: I'm like, okay.
• 6:26
  Erin: Do you
• 6:26
  Craig: and then You can change the media filters to
• 6:28
  Erin: Facebook or whatever.
• 6:29
  Erin: And I'm like,
• 6:30
  Craig: replace the filters.
• 6:32
  Erin: how does this work?
• 6:33
  Erin: I've never actually looked into it.
• 6:34
  BJ: So I use it all the time personally.
• 6:36
  BJ: Like I, cause I've been seeing it so much lately that, and it's so convenient, because gosh, that's.
• 6:42
  BJ: That account creation step is such a hassle and it's just so tiresome to do it over and over again.
• 6:48
  BJ: it's very convenient, but here we go with the convenience versus security thing, like who's, I wonder what we'll have to do some research and see who's technology.
• 6:55
  BJ: Is it, and is it is it one piece of technology that's being used over and over again by lots of different platforms?
• 7:01
  Craig: Yeah.
• 7:02
  Craig: Yeah.
• 7:02
  Craig: I, again, I'd have to research it to know for sure.
• 7:05
  Craig: I don't know if it's, if the breach was associated with just the OAuth layer itself or was it.
• 7:11
  Craig: O auth with Microsoft or OAuth with Google.
• 7:15
  Craig: I don't know if all of the systems were breached.
• 7:17
  Craig: I just have, I just know that.
• 7:19
  Craig: Prior to yesterday.
• 7:21
  Craig: I knew there were some vulnerabilities and risks there.
• 7:23
  Craig: But then I saw the news yesterday that there, there was a breach.
• 7:27
  Craig: So, let me see here.
• 7:28
  Craig: Pasted a couple of
• 7:29
  BJ: That's I always hold my breath.
• 7:31
  BJ: When that question comes up, who done it
• 7:32
  Craig: So it says Lapsis L a P S U S dollar sign.
• 7:37
  Craig: Lapses hacking group.
• 7:39
  Craig: Breached Microsoft and an authentication from Okta.
• 7:43
  Craig: So it looks like the authentication it's w the company is called Okta.
• 7:47
  Craig: So it looks like that's one single company.
• 7:50
  Craig: I don't, it must be centralized like one centralized company.
• 7:53
  BJ: So also big news yesterday was the Greek public postal system was hit with ransomware their services were offline.
• 8:02
  BJ: So literally like people were not getting mail, I guess their postal service public postal service was offering.
• 8:08
  Craig: Yeah, I saw that.
• 8:09
  Craig: Here's the, I'm going to share my screen here and I'll show you.
• 8:13
  Craig: I'm just going to make this a little bigger so you can probably see it.
• 8:16
  Craig: But this is right on okta.com.
• 8:19
  Craig: Can you see that?
• 8:20
  BJ: Yes.
• 8:21
  BJ: Yes.
• 8:22
  Craig: So this is right on okta.com website.
• 8:24
  Craig: This is their statement.
• 8:25
  Craig: They're looking to do a thorough investigation.
• 8:29
  Craig: About the hacker group.
• 8:30
  Craig: So it says that a small percentage of customers, approximately 2.5% have been impacted.
• 8:36
  Craig: And their data may have been viewed or acted upon.
• 8:39
  Craig: So they have a breach.
• 8:40
  Craig: It looks like their initial investigation says it's 2.5%, they'll have to do their forensics to figure out if it was really more than that or not.
• 8:48
  Craig: But.
• 8:48
  BJ: And we know from, we know just from how breaches work, that what the initial picture looks like is not always the accurate
• 8:54
  Craig: What's strange though, It's like they, then they go over here and say, Octa service has not been breached.
• 9:00
  Craig: And remains fully operational.
• 9:03
  Craig: So it's confusing.
• 9:04
  Craig: It's So was it preached or not?
• 9:05
  Craig: Cause it
• 9:06
  NA: Yeah.
• 9:06
  Craig: here.
• 9:07
  BJ: So it sounds like maybe some of they're saying that some of their, a small portion of customers got breached, but not they're saying not their technology somehow.
• 9:17
  Craig: Yeah, I don't know what.
• 9:18
  Craig: I have to study this some more.
• 9:20
  Craig: I think what they're saying is Only 2.5% of their customers were affected.
• 9:26
  Craig: what's weird is they use the, they don't use the word breach there and then they say here, That it wasn't breached down here.
• 9:33
  Craig: So it's confusing.
• 9:35
  Craig: we'll have to just wait and see what the final.
• 9:38
  Craig: Report says.
• 9:39
  Craig: but other websites were saying that it was breached.
• 9:42
  Craig: So I don't know.
• 9:44
  Craig: It's kinda early to tell
• 9:46
  Erin: Yeah it sounds like to me, what I'm taking away from this, and I could be wrong of course, but it sounds to me almost like they were breached, but they don't necessarily know the extent of the breach, because it says that they're looking into the claims that.
• 10:03
  Erin: the hacker group breach them.
• 10:07
  Erin: So to me, it sounds like.
• 10:08
  Erin: They don't.
• 10:09
  Erin: Yeah.
• 10:09
  Erin: they.
• 10:09
  Erin: don't know yet.
• 10:10
  Erin: They probably were.
• 10:11
  Erin: So there, they can probably say this with honesty, but it's a little bit, it seems like it might be a little misleading and maybe I'm being a little bit cynical, But that's kinda what it sounds like to me.
• 10:24
  Craig: what's strange is so if you pull up another website, like here, CNN.
• 10:28
  Craig: It says Octa concedes, hundreds of clients could be affected by breach.
• 10:33
  Craig: And then it says here on wall street journal, this was an hour ago.
• 10:36
  Craig: Okta says hundreds
• 10:37
  Erin: Yeah.
• 10:37
  Craig: customers may have been caught in a hack.
• 10:40
  Craig: Or in hack.
• 10:41
  BJ: Yeah, it says they've got Octa has over 15,000 customers.
• 10:45
  BJ: So I'm guessing that's a lot of the platforms that we see that technology on.
• 10:50
  Erin: But yeah.
• 10:51
  BJ: Yeah, it seems very clear that there, there's trying, they're scrambling to clarify what's going on.
• 10:57
  BJ: So there's not really a clear answer
• 10:58
  Erin: right now.
• 10:59
  Erin: And it sounds a little bit too okay.
• 11:01
  Erin: So if you think about it, they have hundreds of customers.
• 11:05
  Erin: How many.
• 11:06
  Erin: Credentials did all those hundreds of customers have.
• 11:09
  Erin: Cause it's it's almost like they're trying to minimize the impact of it, but it's, so if
• 11:15
  Craig: one of those or whatever, like that
• 11:19
  Erin: It could be millions.
• 11:20
  BJ: That's a good point.
• 11:21
  BJ: Cause there are mentioning 15,000 customers, but these are not, they don't seem like consumer customers are platforms.
• 11:28
  Erin: My
• 11:28
  BJ: takeaway.
• 11:29
  BJ: Yeah, That have, who knows how many customers, so a lateral movement on a platform, on a system like that when you have 50,000.
• 11:36
  BJ: Platforms that have millions of customers, the lateral movements that we know are so common in, in breaches now.
• 11:43
  BJ: I'm no mathematician, but that sounds exponential to me.
• 11:47
  Erin: Craig, can you make me a co-host real quick?
• 11:50
  Erin: I'm sorry.
• 11:50
  Erin: I think when I made you the host it.
• 11:52
  Erin: Yeah,
• 11:53
  BJ: Microsoft confirmed that the lapses extortion focused hacking crew has gained limited access to it.
• 12:00
  BJ: Systems authentication services provider, Octa that nearly 2.5.
• 12:05
  BJ: Okay.
• 12:06
  BJ: So 2.5% of its customers have potentially been breached.
• 12:09
  BJ: And it sounds like Microsoft was one of them.
• 12:11
  Craig: Yeah.
• 12:12
  BJ: mom that they're there.
• 12:14
  BJ: They have that ha hacky crew has gained limited access to its systems.
• 12:18
  Erin: That's huge.
• 12:20
  BJ: That
• 12:20
  Erin: could be huge.
• 12:21
  Craig: Yeah.
• 12:22
  BJ: That's so interesting because not all things just seem to go in tandem because when I was talking, when we first started today about the jaw dropping advancements in quantum computing lately, they sent around the weaker.
• 12:33
  BJ: Microsoft has partnered with ion Q, which is they're really leading things in the contract computing space with their trapped ion technology.
• 12:41
  BJ: But so that's, what's going on Microsoft Azure, but also Microsoft has released a groundbreaking breakthrough that their team has made in regards to topological cubits.
• 12:51
  BJ: And that's really significant.
• 12:53
  BJ: And so it's interesting that now Microsoft is now.
• 12:56
  BJ: Their systems have at least partially been breached, like how interesting, how it goes in tandem.
• 13:00
  Craig: Isn't it also interesting that these big providers like Microsoft and obviously they're the.
• 13:07
  Craig: They're in the cross hairs of the hackers.
• 13:08
  Craig: Cause there's the bigger payday, isn't it also interesting how people over to the these platforms for, cloud services, right?
• 13:17
  Craig: So a lot of customers, small, medium and large enterprise have moved to the cloud and moved their information and their data to the cloud.
• 13:25
  Craig: And then now there's all these breaches that are happening.
• 13:29
  Craig: it'd be interesting to learn and understand if they're going to, there's going to be a push backwards, to bring things back in house for businesses, on premise, opposed to cloud.
• 13:39
  Craig: And, I always recommend that use encryption, even when using a cloud service, because at least if you encrypt your data in the cloud and hackers breach defenses of Microsoft, for example, then at least again, it's a layered approach, right?
• 13:53
  Craig: So at least they would hit a encrypted payload.
• 13:56
  Craig: it's just interesting that.
• 13:57
  Craig: We're in this kind of dynamic where lots of companies for I don't know, past decade or so have moved to the cloud because it's oh, it's grass is greener in the cloud.
• 14:06
  Craig: It's, utility cost it's cheaper.
• 14:08
  Craig: I don't have to buy expensive servers anymore.
• 14:11
  Craig: And then now I think you're going to see.
• 14:13
  Craig: I've already saw some data on this, where companies are actually bringing the stuff back in house now, and they're not doing cloud anymore.
• 14:20
  Craig: So it's it was like this big experiment.
• 14:23
  BJ: And here's this guys, this was buried in an article, like way down deep.
• 14:26
  BJ: I find so many interesting things buried, right?
• 14:29
  BJ: Craig taught us with the settings the other day, the interesting tidbits are always buried.
• 14:33
  BJ: So I found an article last night.
• 14:35
  BJ: That was, oh my gosh.
• 14:37
  BJ: I have to mention that to you guys.
• 14:38
  BJ: But listen to this, it's buried in this article.
• 14:40
  BJ: It says of particular concern.
• 14:42
  BJ: This.
• 14:42
  BJ: From CloudFlare is saying this of particular concern is that the breach has it.
• 14:48
  BJ: Hadn't been reported for the last two months.
• 14:49
  BJ: So this is not new.
• 14:50
  BJ: This is only being talked about now it happened two months ago.
• 14:53
  BJ: So they've had two months of dwell time.
• 14:55
  BJ: Now this lap lapses and of particular concern to me reading this is that it says Microsoft described lots of us as a group following pure extortion and destruction model without deploying ransomware payloads.
• 15:07
  BJ: So this sounds more an attack.
• 15:10
  BJ: Seeking to destroy.
• 15:11
  BJ: They're not asking for ransoms, they're just trying to destroy.
• 15:14
  BJ: So when that happens, then when we start being state actors and things of that nature, but listen to this, I read an article last night and the headlines were totally misleading.
• 15:22
  BJ: The article said something about the headlines of the article said that hackers and especially like foreign threat hackers are now focusing on like financial.
• 15:30
  BJ: And the financial system and the AIS and the financial system.
• 15:33
  BJ: But when you dig into the article and start reading it, there's actually a term for it.
• 15:37
  BJ: Now it's called machine learning security, because I guess of these some of the AI machine learning, models that especially are used in the financial the financial sector, those models are very bold.
• 15:50
  BJ: 'cause they there's never been, this is a evolving field.
• 15:53
  BJ: And so the machine learning models are vulnerable to cyber attack.
• 15:58
  BJ: And so I guess some of the state actors are actively looking to exploit the machine learning models used in the financial sector.
• 16:04
  BJ: And here's the tidbit that was hidden at the bottom.
• 16:07
  BJ: The real concern here is that they're worried that they can't.
• 16:10
  BJ: Exploit vulnerabilities in these financial machine learning models and cause them to believe certain things to be true and cause it to affect pricing on the stock markets.
• 16:19
  BJ: Wow.
• 16:20
  Craig: So what's
• 16:21
  BJ: They're talking about the algorithms that decide the pricing
• 16:24
  NA: models.
• 16:25
  Craig: I think kind of sheds more light on is the need for code review of the, the coding layer of the machine learning in this case.
• 16:32
  Craig: There needs to be annual or quarterly code review.
• 16:35
  Craig: The language that's chosen like Python, for example, is popular at AI and ML.
• 16:39
  Craig: But the point is that.
• 16:40
  Craig: you're not vetting and testing the code, how do you know what's really in there?
• 16:44
  Craig: It's what I've said for a long time.
• 16:45
  Craig: Like when you buy products off the shelf, you don't know if there's hidden back doors and
• 16:50
  BJ: And there are techniques that they use, like those heavy DVOs techniques and like where they use okay.
• 16:55
  BJ: We know, that they became very good at like social media profiles, like mass amounts of fake profiles.
• 17:00
  BJ: That's the concern with the financial machine learning models that they can produce these high level.
• 17:06
  BJ: Inaccurate profiles and information and they can cause the actual machine learning algorithms models to make decisions contrary to what the financial system wants them to make based on their coding.
• 17:18
  BJ: But they're making these decisions based on the high level of inaccurate information they're being fed by the hacking teams.
• 17:24
  BJ: And so literally we're talking about.
• 17:27
  BJ: A possible upheaval of a financial system, because if the stock markets were to be affected by these machine learning models, what is the ramifications of that?
• 17:37
  BJ: Wow.
• 17:38
  BJ: We're talking about groundbreaking potential here.
• 17:40
  BJ: This is a possible upheaval of a whole system possibly.
• 17:43
  BJ: If that, that is huge.
• 17:46
  Erin: That's definitely crazy to think about for sure.
• 17:49
  BJ: With.
• 17:50
  BJ: Based on a large amount of information data that these machine learning models were fed.
• 17:55
  BJ: You could have a complete.
• 17:56
  Craig: Could you imagine if some hackers changed the price to like Microsoft or Google stock to a dollar, even if it was just for an hour and then if people bought it that price, now they have supporting evidence that they paid a dollar for it or whatever.
• 18:09
  Craig: So like, do you fix that?
• 18:11
  BJ: Yeah.
• 18:11
  BJ: How can you, yeah, right?
• 18:13
  BJ: Especially if the algorithm, it wasn't, it didn't go down.
• 18:15
  BJ: It just made a decision.
• 18:17
  BJ: Because it makes its decision based off the data.
• 18:19
  Craig: the glitch that I took a screenshot of?
• 18:21
  Craig: I think it was like six months ago where it was a glitch in the crypto system.
• 18:26
  Craig: I think it was on Coinbase or, And it said that I was like a, truly an error or something.
• 18:30
  Craig: I was
• 18:30
  BJ: yesterday, my baby, it started playing this game on his fire tablet.
• 18:34
  BJ: He's two years old.
• 18:35
  BJ: He's going to be three.
• 18:36
  BJ: this is the one that calls himself.com dragon.
• 18:38
  BJ: He was playing this game called subway surfer.
• 18:40
  BJ: And you guys probably heard of it.
• 18:42
  BJ: I'm not a gamer, but it's a very popular game and you have to buy tokens like with actual cash, you buy tokens.
• 18:47
  BJ: Some glitch happened in his tablet and he has 10 trillion tokens.
• 18:51
  BJ: I, my daughter, who's 12 gamer.
• 18:53
  BJ: She's beside herself.
• 18:55
  BJ: She's Oh, my God.
• 18:56
  BJ: And she won't give his tablet back.
• 18:57
  BJ: Cause she like, she's bought everything.
• 19:00
  BJ: Get some goods has awarded my baby 10 trillion tokens on this game.
• 19:04
  BJ: And she's a big gainer and she's that's impossible.
• 19:06
  BJ: Like I've never seen that before.
• 19:08
  BJ: But yeah, he's got every, everything you can possibly have in this game now.
• 19:12
  Craig: Oh, my
• 19:12
  BJ: And that's crazy.
• 19:13
  BJ: Something just happened.
• 19:15
  BJ: I don't know
• 19:15
  Erin: what happened, but something, oh, you better check and make sure that he didn't accidentally find a way to buy all
• 19:21
  Craig: Yeah, you're going to get the
• 19:23
  BJ: That person, my bank account, it would have been denied.
• 19:26
  BJ: No, this was But now I'm just hoping the same blitz happens to my crypto wallet.
• 19:30
  BJ: Sorry.
• 19:31
  BJ: Yeah,
• 19:31
  Erin: pretty please.
• 19:32
  Erin: Or maybe the AI will get into the stock market.
• 19:35
  Erin: Everything will go down and we'll be all be trillionaires.
• 19:38
  BJ: Yeah.
• 19:38
  BJ: It's the same queue.
• 19:39
  BJ: Cause I posted an article to you guys in the chat this morning about some analysts, some big crypto analysts are predicting that.
• 19:45
  BJ: Th that crypto Bitcoin and altcoins is going to go parabolic in April.
• 19:49
  BJ: And it's wow.
• 19:50
  BJ: When you really look at all this, like they're worried about the financial models being manipulated, and then you have a possible crypto bull run come in.
• 19:59
  BJ: Cause we've been expecting it for, we've been in a holding pattern.
• 20:02
  BJ: Everybody thought it was coming like last summer and definitely by the winter, it didn't come.
• 20:05
  BJ: Maybe there was, who knows what was going on behind the scenes.
• 20:08
  BJ: But it seems like now there's a lot of chatter about it.
• 20:11
  BJ: And then you have the inflation, you have all this stuff, like even Tesla raised their prices on their satellite internet recently space X, because of inflation and we've seen evidence of this happening with cash.
• 20:21
  BJ: And then now you have talked with the bull run with crypto and you have risk of financial models, making decisions based off whatever data they're being fed by bad actors.
• 20:30
  BJ: is wow, are we on the verge of a perfect storm
• 20:33
  Erin: here?
• 20:33
  Craig: maybe
• 20:35
  BJ: Yeah.
• 20:35
  BJ: And the, oh my gosh.
• 20:36
  BJ: If I can find it quick enough, I'll read to you what Microsoft didn't post this very publicly, but they sure did put it on their research blog about this advancement, right?
• 20:46
  BJ: Okay.
• 20:46
  BJ: Here it is about their topological cubits.
• 20:48
  BJ: This is a major breakthrough and they say on their books.
• 20:51
  BJ: From Microsoft and we believe ultimately it will power a fully scalable quantum machine in the future, which will in turn, enable us to realize the full promise of quantum to solve the most complex and pressing challenges.
• 21:04
  BJ: Our society faces.
• 21:05
  BJ: This is major
• 21:06
  Craig: Yeah.
• 21:07
  Craig: That's awesome.
• 21:08
  BJ: Yeah, it's very interesting, but it sounds like they might need the help of their quantum machine to deal with their possible that happened with the AP, because I guess there's no time like the present for the machine to rise up and help.
• 21:21
  Erin: And Craig, I told BJ when we talked a little bit this morning and I told her.
• 21:26
  Erin: That if Bitcoin or crypto did take off and I do become a millionaire, I'll stay working for you.
• 21:32
  Craig: Oh, thanks.
• 21:33
  Erin: I was like, if we can do podcasts every day, we can keep doing this every day.
• 21:38
  Erin: And my boyfriend can just go build a boat somewhere.
• 21:41
  Erin: I was like, life would be great.
• 21:43
  Craig: That's right.
• 21:44
  Craig: Yup.
• 21:45
  BJ: Great.
• 21:45
  BJ: You guys, because last year, Craig I spent a lot of time researching altcoins and I, to this day firmly believe that some of the decisions that were made were very smart.
• 21:55
  BJ: And even though they haven't been fruitful yet, I don't think that changes the fact that they were very smart decisions because of.
• 22:02
  BJ: Power and research and digging deep into things yields good results.
• 22:06
  BJ: There was an article popped up this morning and it says that basically, and maybe this has something to do with people talking about crypto going parabolic next month, but there was this quiet article saying that internet computers.
• 22:18
  BJ: Point is possibly the layer to web three because it takes the reliance off of web two tech away because this internet, computer blockchain, it ties all the web three blockchains together and makes them interoperable.
• 22:32
  BJ: And and that's the internet computer.
• 22:34
  BJ: And and we know that there's the CYA coin that, has the decentralized storage and it's actually running the most transactions of any blockchain per day.
• 22:42
  BJ: And.
• 22:43
  BJ: I find that internet technology on it.
• 22:44
  BJ: And when you factor that with internet computer, that all the blockchains together, you can see yesterday, we were talking about the current tech.
• 22:51
  BJ: If you were to picture it as one, entity was a patched, a monster walking around on crutches.
• 22:55
  BJ: But then you look at what I just described there and you see something different.
• 22:58
  BJ: Like more like a quantum machine, possibly.
• 23:01
  BJ: So maybe it's all, at the same hour.
• 23:03
  BJ: We have a possible crypto bull run because we have that final layer with the internet company.
• 23:08
  Craig: I guess we'll have to see.
• 23:09
  BJ: which is currently down 98%, just so everyone knows just FYI, we don't give financial advice, but it is down 98%
• 23:18
  Erin: might be an
• 23:18
  BJ: opportunity to buy.
• 23:19
  BJ: Yeah, I sure.
• 23:21
  BJ: I sure am looking into it.
• 23:22
  Craig: All right guys.
• 23:23
  Craig: We should probably.
• 23:24
  Erin: right before we go, Craig I just want to ask, so what is it, do you have any advice that we can give our listeners as to what to do to protect against this OAuth now?
• 23:37
  Craig: Yeah.
• 23:37
  Craig: What I would do is I would log in to any websites that you're using.
• 23:42
  Craig: And change it, you can change it so that you can change your password and, maybe create an account or set up a different email.
• 23:49
  Craig: That's secondary and just just, that's one way to mitigate the risk.
• 23:54
  Craig: So it's not affecting you.
• 23:56
  Craig: it could be, there's so much more investigation that has to happen to see, but it could be too late, meaning it could be that your data was already, you could be one of the 2.5%,
• 24:05
  BJ: have to be one of the 2.5% cause Microsoft was, and
• 24:08
  Craig: Yeah.
• 24:09
  BJ: to Microsoft.
• 24:09
  BJ: That's where the numbers get tricky.
• 24:11
  BJ: Because Microsoft was part of the 2.5%, but everyone's part of Microsoft.
• 24:15
  Craig: Yeah.
• 24:16
  Erin: I guess too, though if that is the case, if their data is already stolen, that sucks, but maybe it's a good time to go.
• 24:25
  Erin: And like you said, update passwords.
• 24:28
  Craig: Yeah.
• 24:28
  Craig: Yup.
• 24:29
  Erin: addresses, things like that, because if they steal your credentials, then you're you reusing the same password and login information.
• 24:36
  Erin: They can get into whatever they
• 24:37
  Craig: So this is.
• 24:38
  BJ: time to look at the right tools.
• 24:40
  BJ: XDR cause like you pointed out Craig, it's not a, it doesn't have a protection for something like this, but what it does have is the ability to change its code.
• 24:47
  BJ: Every.
• 24:48
  BJ: And be coded to look for certain things.
• 24:50
  BJ: so once we know what this breach is doing, that algorithm will be coded to look for those things.
• 24:56
  BJ: So that's, again, the XDR is the right way to go for this kind of.
• 25:00
  Craig: Yeah.
• 25:01
  Craig: But even putting that aside that I, this is why I don't usually use something like That because let's give you an example.
• 25:08
  Craig: Let's say I go to a website and I don't create an account, But.
• 25:12
  Craig: I click on, Maybe I use Gmail and I click on okay.
• 25:14
  Craig: Use Gmail instead of, and skip the account creation process because it's faster and easier.
• 25:19
  Craig: The reason why I've never done it is I don't want if they have a breach, now they have my Gmail username and password.
• 25:25
  Craig: So I have multi-factor set up on all my properties.
• 25:29
  Craig: So even if they got the username password, they're going to get stopped by that layer.
• 25:33
  Craig: But it's still though, like you're trusting.
• 25:35
  Craig: It goes about how much do you trust each of the vendors that, you're doing business with, or if you're not even doing business and you just use their service, you still have to give them a certain amount of trust.
• 25:46
  Craig: And quite frankly, with the world that we live in now and the threat.
• 25:49
  Craig: I think we should move to more of a zero trust or a trustless, methodology where create an account on your own.
• 25:57
  Craig: Go through the extra hoops and layers, use a unique username and password.
• 26:01
  Craig: Apple has recently took it a step further.
• 26:04
  Craig: they even create what's called burner emails.
• 26:06
  Craig: so, you can actually never disclose your email address and create fake emails that are associated with yours.
• 26:11
  Craig: Okay.
• 26:12
  Craig: You can, as a consumer, be more stingy about the information that you give out and that'll better protect you too.
• 26:19
  Erin: Thank you for
• 26:19
  BJ: that.
• 26:20
  Craig: yeah.
• 26:21
  Craig: Let's wrap up here for today.
• 26:22
  Craig: And then we can continue on tomorrow.
• 26:25
  Erin: Sounds good.
• 26:25
  Erin: Do you guys have a great day?
• 26:27
  Craig: Thanks you too.
• 26:28
  Craig: All right, bye.