Latest / Encrypted Ambition: Where Ambition Meets Encryption - Inside The Minds Of Disruptors. / 031122_Living-In-a-Smart-Home

Transcript

031122_Living-In-a-Smart-Home · Encrypted Ambition: Where Ambition Meets Encryption - Inside The Minds Of Disruptors.

• 0:14
  BJ: I know we're recording, so I I won't give details, but isn't it so refreshing to talk to a company and a staff a that is being so responsible about their cyber hygiene.
• 0:25
  BJ: I guess so refreshing.
• 0:27
  Craig: It is refreshing.
• 0:28
  Craig: They've been such a great client to work with.
• 0:31
  BJ: have been in, they're always willing to.
• 0:33
  BJ: Even though it's not fun, it's not cheap.
• 0:35
  BJ: they're always willing to.
• 0:36
  BJ: take the next right step towards cyber security.
• 0:40
  BJ: And it's a heavy burden, but they're right where they should be as far as their mindset.
• 0:45
  BJ: And when I think about.
• 0:46
  BJ: The current trends in ransomware threats.
• 0:48
  BJ: I think they're really doing a good job.
• 0:50
  BJ: To keep all those threats minimized.
• 0:53
  Craig: Yeah.
• 0:53
  Craig: had more devices on his network than I do.
• 0:55
  Craig: not more than you though.
• 0:56
  Craig: BJ.
• 0:58
  BJ: Yeah, I'm getting up there.
• 0:59
  BJ: I had to get um,
• 1:00
  Craig: Now you have eye glasses on the network.
• 1:01
  BJ: Oh, my gosh.
• 1:02
  BJ: Yeah.
• 1:02
  BJ: don't even get me started on my eyeglasses because I'm wearing them right now, but I can't see very I was wearing double, bifocals I had my prescription lenses on eyes and then my Alexa frames over them.
• 1:15
  BJ: I can see, but because again, this is the third time I've tried to get to the eye doctor to get my prescription through.
• 1:22
  BJ: To fill my Alexa echo frames.
• 1:24
  BJ: And again, we got snowed in right before my doctor's appointment and I'm like, oh my gosh.
• 1:30
  BJ: One day, I'm going to get these.
• 1:32
  BJ: But yeah, I had to get.
• 1:34
  BJ: you know can get smart plugs, smart outlets that,
• 1:36
  Craig: Yeah.
• 1:37
  BJ: turn anything into a smart device kind to get smart plugs, just.
• 1:40
  BJ: every outlet into two.
• 1:44
  Craig: Gosh.
• 1:44
  Craig: Got a mad scientist lab over there.
• 1:46
  BJ: so fun.
• 1:47
  Craig: what Frankenstein said.
• 1:51
  BJ: Yeah, I know, but makes it so fun is.
• 1:53
  BJ: Is that attention, you can see the progression like on a regular basis.
• 1:58
  BJ: You feel like, oh, wow, this must be the pinnacle right here.
• 2:01
  BJ: I must've seen it all as of today, you know then something will happen and I'll be like, what the heck?
• 2:05
  BJ: How did that happen?
• 2:06
  BJ: you
• 2:07
  Craig: I think what we should talk about today is how certain companies where they're made in the world and how was telling Aaron earlier, With Veem.
• 2:15
  Craig: Theme software Veem software is a data backup SAS recovery software that's for VMware and other types of virtual environments.
• 2:23
  Craig: Anyway, I learned this morning.
• 2:24
  Craig: it originated in Russia?
• 2:26
  BJ: did?
• 2:27
  Craig: not VM-ware beam.
• 2:28
  Craig: It's called theme.
• 2:29
  Craig: And the beam software originated was coded in Russia.
• 2:34
  Craig: I was just doing some Google searches after I read it, because I just couldn't believe it.
• 2:38
  Craig: found out that it was two years ago in 2020 they sold off company for$5 billion to an investor because they were having problems.
• 2:48
  Craig: speculate what I say this, cause I didn't do enough research, so I'm not going to speak out of line, but from what I've read, like they were having some pressures around.
• 2:56
  Craig: The origination of the software being Russian selling it.
• 3:00
  Craig: defense and other, computing enviroments.
• 3:02
  Craig: For Right?
• 3:03
  Craig: I'm sure you've heard of Kaspersky.
• 3:05
  Craig: Antivirus is similar situation where
• 3:08
  BJ: Oh, boy.
• 3:09
  Craig: anti-virus is Russian people especially in America have concerns over that software being on their computers.
• 3:16
  Craig: And in my opinion, yeah, I would have concerns over it too.
• 3:19
  Craig: my point though, is that with the Veeam
• 3:20
  BJ: You uncovered something similar like that years ago.
• 3:22
  BJ: Craig, do you remember when we were working with that company out of the Royal Holloway university in London?
• 3:28
  BJ: then you were looking into, I think it was tether.
• 3:31
  BJ: Yeah, but anyway, you found another connection like that, and then you kind of off from pursuing it for our clients for that reason.
• 3:37
  Craig: Oh, I do remember that.
• 3:38
  Craig: Yeah, I do remember that.
• 3:39
  Craig: Yeah, that was really scary.
• 3:41
  BJ: be from everything that's being that Russia has some plan in place for internet, because they're literally like a lot of are kind on them, but like Russia is not really concerned about that because they pulling the plug on the global internet.
• 3:55
  BJ: themselves and there doing some Russia deal, like for internet, like they're actually unplugging themselves.
• 4:00
  BJ: They made an announcement that basically all server domains, whatever had to be off of the global internet, within a week or something like that.
• 4:06
  BJ: And they were doing their own Russian internet.
• 4:09
  Craig: Wow.
• 4:09
  Craig: Well, whole, when learned about this thing earlier, talking to Erin about it for a little while.
• 4:14
  Craig: the part that was kind obviously alarming.
• 4:17
  Craig: that there's of companies that don't even realize this.
• 4:21
  Craig: I always familiar with the software, but I didn't realize if it's origins brings it back to what I've said for many, years around.
• 4:27
  Craig: You have to know the software is being made it on both your mobile devices, your I-phones your droids, as well as your computers, because.
• 4:35
  Craig: Any one of those pieces of software could be spying on you and exfiltrating information out of your device without even you knowing.
• 4:43
  Craig: And if you don't have technology to detect that, like or can like sense the connection back and track it and lock it, you would never know.
• 4:52
  BJ: so interesting.
• 4:53
  BJ: That's such an interesting point because as we just were talking about like yesterday I made a video about the trend in re like it's funny.
• 5:00
  BJ: Cause like to looking at, stock market charts, at trend lines and stuff.
• 5:04
  BJ: Uh that was the first I've ever really looked into that.
• 5:06
  BJ: But now it's.
• 5:08
  BJ: Like you can kind same on the ransomware chart.
• 5:10
  BJ: If trend it's clear as day, it's a reversal.
• 5:13
  BJ: There is an absolute reversal taking place.
• 5:16
  BJ: It's like the old ways of ransomware attack are absolutely on the decline.
• 5:21
  BJ: A sharp decline.
• 5:23
  BJ: And have the new forms of ransomware attack, mostly centered around of software vulnerabilities, just as you're describing right now.
• 5:32
  BJ: sharp uptrend.
• 5:33
  BJ: And they're literally doing a crisscross, like it's a reversal.
• 5:37
  BJ: And there's no human way to keep on top of that.
• 5:39
  BJ: You have to have an XDR solution.
• 5:41
  BJ: When you look at the trend lines on the ransomware trends.
• 5:45
  BJ: I feel like there's literally no debate to the fact that you have to have an XDR type of tool.
• 5:50
  BJ: There's just no way around it.
• 5:51
  Craig: you do
• 5:52
  BJ: Yeah.
• 5:53
  Craig: layer anyway, but have to have other layers too.
• 5:55
  Craig: And the importance of those other layers, because you're on a mobile device, for example, now there's not XDR type solution it's being developed, but it's not available right now.
• 6:05
  Craig: So.
• 6:05
  Craig: best thing that people can do is make sure that they really scrutinize every application.
• 6:10
  Craig: a lot of these things, the scary fact, I don't know if you remember BJ, but had published a bunch of apps years ago for some magazines that I wrote and edited.
• 6:18
  Craig: I did some research then and found out that millions and millions or apps are containing malicious software and get past the screenings of Google and apple.
• 6:28
  Craig: And they're on the store right now.
• 6:29
  Craig: And they're, mostly masked as games.
• 6:32
  Craig: For kids.
• 6:33
  Craig: of parents give their phone or their device to their kids to kind pacify them for a little while.
• 6:37
  Craig: Right.
• 6:37
  Craig: I have no idea that game could be recording the video or, you these different, bad things, the sound.
• 6:44
  BJ: it's kinda not fair for people, because it's almost like when you look at it, like no BS.
• 6:49
  BJ: Just absolute facts.
• 6:51
  BJ: It's emerging that like you really to pay attention to everything related to cybersecurity or you're in deep water, you know fair it's such a burden, but again, that's where, were paying attention to the apps and the coding in the apps and all that, like still, there's no way.
• 7:07
  BJ: no way to keep an eye on every possible vulnerability in every possible piece of software on every app that you use.
• 7:16
  BJ: again, like those are that an XDR tool can help with because they, the tool, even though it not part of the app or the software, it's, it inspect every data packet and it can see when something is.
• 7:25
  BJ: Uh or out of character for the network.
• 7:28
  Craig: that's a good point, but somethings everybody could do.
• 7:31
  Craig: it's isolation network isolation.
• 7:34
  Craig: So some of the new wireless routers, for example, or wireless transmitters.
• 7:38
  Craig: that are wifi six and some of the more enterprise companies will support multiple wireless networks you could actually set them up so that they'll segment.
• 7:46
  Craig: device or it can't communicate laterally on the network and it only can go out.
• 7:50
  Craig: the reason why people should have more than one wireless network at their house or with their off office because you've got a device.
• 7:58
  Craig: Like a picture frame or something that was made in an adversarial country.
• 8:02
  Craig: And it's spying.
• 8:03
  Craig: want to make sure that it's not able to get at your data, off your laptop or something that might have more sense.
• 8:10
  BJ: Yeah.
• 8:11
  Craig: it's not going to stop the device from a camera in or something.
• 8:14
  Craig: sending it straight out to the internet.
• 8:16
  Craig: However, if you can segment it.
• 8:18
  Craig: And separate the network so that device can't spread ransomware or, do data exfiltration out by connecting to other things on the network.
• 8:27
  Craig: At least you kind of isolated a little bit, it's not a substitute
• 8:30
  BJ: Yeah.
• 8:30
  Craig: for what you have in your home or your office and what you put on the internet.
• 8:34
  Craig: Because frankly, everything does not need to be connected to the internet.
• 8:38
  Craig: point is that isolation is a free often free configuration type setting that most people could take advantage of that will help increase their security.
• 8:48
  Craig: And it's no extra cost for most people.
• 8:50
  BJ: good point.
• 8:51
  BJ: Now help me to wrap my head around this so that I understand it.
• 8:54
  BJ: So worst case scenario.
• 8:56
  BJ: If someone didn't do that, someone didn't their networks and all that.
• 8:59
  BJ: And even did.
• 9:00
  BJ: And like I yesterday about some of the more sophisticated hacking groups.
• 9:05
  BJ: they're not even raising red flags because they're actually reaching software at the level before it's even dispersed.
• 9:11
  BJ: And you get something and it's from a reputable vendor, it could even be, you from a vendor in the United States.
• 9:17
  BJ: we thought with the livestock hack recently that app that states use to track their livestock, to look for diseases in the livestock.
• 9:24
  BJ: That gets into the meat supply.
• 9:26
  BJ: 18 states use the same livestock tracking software and the software is made in the United States It's called.
• 9:33
  BJ: But anyway, so that was breached sophisticated hackers.
• 9:38
  BJ: And so these states 18 states that were using the software.
• 9:43
  BJ: from a United States vendor.
• 9:44
  BJ: Everything looked good, everything checked out, but the software itself was contaminated.
• 9:49
  BJ: situation like that, done their due diligence.
• 9:52
  BJ: They've looked into where the vendor's located, you know legit, but still it was infected unbeknownst to them.
• 9:58
  BJ: an XDR still, when it sniffing data pack in the network, notice something irregular when they were trying to extricate.
• 10:06
  BJ: that the right word?
• 10:06
  BJ: The information.
• 10:07
  BJ: Would it still pick up on something odd happening?
• 10:11
  Craig: Yeah.
• 10:11
  Craig: exfiltration.
• 10:12
  Craig: Yes.
• 10:13
  Craig: It would show the connection of where it originates.
• 10:16
  Craig: So here in the United States, and then it would show connections to China or wherever, and you would see that logged activity.
• 10:24
  Craig: timestamp and the activity, what it was doing and all that stuff.
• 10:26
  Craig: So yes, that's how you would detect if a device on your network is sending data out.
• 10:31
  Craig: Out.
• 10:31
  Craig: That you wouldn't normally be able to detect.
• 10:33
  BJ: Yeah.
• 10:34
  BJ: So that's the point I'm trying to connect in my own mind.
• 10:36
  BJ: So it seems and I know there's no silver bullet for everything, obviously, because this is a problem that has.
• 10:41
  BJ: A bazillion entry points.
• 10:43
  BJ: So with that being said, though, but it seems again, the XDR is an excellent tool because even when things look legit and you've done your homework, you could still, be a victim of a solar winds type thing, and But the R still adds that extra layer because going to notice when something is happening.
• 10:58
  BJ: That doesn't fit with the picture.
• 11:00
  Craig: Yeah.
• 11:01
  Craig: When the XDR sensors on the network and you're part of that network.
• 11:04
  Craig: Absolutely.
• 11:05
  Craig: That'll protect you, but this is also why I wanted to bring up what's called code review, because, like you said, the software was made in the United States.
• 11:13
  Craig: mean that they went through a third-party code review process of having an outside company look at each line of code to make sure there wasn't something malicious in the code.
• 11:23
  Craig: think that a lot of companies are missing that point that will really highlight and illustrate where some of the.
• 11:29
  Craig: back doors are, entered that's an exhaustive process.
• 11:32
  Craig: The code review, you have to find programmers that know the language of whatever the software was written in.
• 11:38
  Craig: And then they have, depending on how many lines of code it is, will depend on how much manpower we needed to kind through all that with a fine tooth comb.
• 11:45
  Craig: But that is a audit process.
• 11:47
  Craig: That we highly recommend Especially companies that are dealing with sensitive information go through.
• 11:53
  BJ: Or the government entities that are using.
• 11:55
  BJ: What the flaw was with this livestock tracking app, which is dairy, you.
• 11:59
  BJ: know now 18 state governments have have been breached to what degree we don't yet know.
• 12:04
  BJ: Right But they have used infected software at the state level.
• 12:08
  BJ: Uh 18 states have.
• 12:10
  BJ: with that being said that the flaw was vendor side.
• 12:14
  BJ: So Um in the app.
• 12:17
  BJ: as the data is sent back and forth between states and the server and whatever.
• 12:21
  BJ: Well Decryption keys were supposed to be private keys to Each transaction, I guess, but there was an error in the coding and the decryption keys were actually stored on the actual servers and they were reused over and over again.
• 12:35
  BJ: And so Becker's got into the decryption key at one location, and then we're able to then spread through the 18 states.
• 12:42
  Erin: a really good question.
• 12:43
  Erin: Why in the world?
• 12:44
  Erin: Our and government why are they not using something like XDR do they just not know about it
• 12:50
  BJ: question, Erin.
• 12:52
  BJ: good question because we I've asked many times is why is the DOD not using it for all 300,000 vendors, but Erin takes the question even a step further.
• 13:01
  BJ: Why are the governments not using the XDR tool?
• 13:06
  Craig: to that is because most of them have tunnel vision.
• 13:10
  Craig: they have it staff or limited staff, their head down, putting out fires every day.
• 13:15
  Craig: And they're not able to keep up with all the new stuff that comes out.
• 13:19
  Craig: XDR is a fairly new technology.
• 13:21
  Craig: different flavors of it it's patented, but obviously the one that we use and recommend is also.
• 13:27
  Craig: Hi.
• 13:27
  Craig: Uh, 24 24 7 staff to cybersecurity sock, that component that a lot of the big players do not have.
• 13:34
  Craig: That's an essential component to make work because all these And I don't think that the DOD would, ever pay for XDR for all of the DIB, it's probably out of scope.
• 13:46
  Craig: However, could be rebates or some incentives maybe that are developed I was mentioning to Aaron the other day.
• 13:52
  Craig: cyber security score card.
• 13:54
  Craig: kind of like credit score.
• 13:55
  Craig: better cyber hygiene you have and, vet you, we test you and we give you a score, a, B, C, D, or an F failing, That score should give you perks kind points on your
• 14:05
  BJ: MI me personally, if I was running the government, I would, at this point, make an announcement and be like, Hey.
• 14:12
  BJ: If you're doing business with the government, it's critical that you get an X.
• 14:15
  BJ: The R tool right away.
• 14:17
  BJ: And then I would give a very short period of time because it doesn't take that long to implement it.
• 14:21
  BJ: And I would say, As of this date, if you do not have an XDR tool.
• 14:25
  BJ: In your network.
• 14:26
  BJ: I will have to close the door to doing business with you until that changes because you're a risk to everyone.
• 14:31
  Craig: again.
• 14:32
  Craig: politics and decisions forget, the gentlemen that said this, but it was somebody either in the DOD or some layer of the government, but he was basically talking about how CMMC isn't signed yet.
• 14:44
  Craig: And in so many words, what he was basically telling the dip to deal was basically wait on the sidelines and it's like, what?
• 14:50
  BJ: It's the loophole game.
• 14:51
  BJ: Cause it's not technically law yet, so you don't have to technically do anything.
• 14:55
  Craig: Yeah.
• 14:55
  Craig: but that's the kind of behavior.
• 14:57
  Craig: that we need to eliminate because we need people to be bold and we need people to be like, look, you have to do this stuff.
• 15:03
  Craig: You have to put these layers in place.
• 15:05
  Craig: They are not that expensive.
• 15:07
  Craig: give a priceless result.
• 15:09
  Craig: They're eyeopening.
• 15:10
  Craig: I kind of when firewalls first came out, everybody seemed to buy a firewall and everybody uses antivirus, but those are no longer enough to protect you from these latest threats
• 15:18
  BJ: and.
• 15:19
  BJ: are be blindly trusted.
• 15:21
  BJ: We recently saw a few examples of why that's the case, but, I keep saying XDR tools and probably will for a very long time, is it's new technology, like you said, but it feels like it's like a perfect catch all, but it seems like it's a wonderful blanket.
• 15:37
  BJ: To put on top of everything just to sniff for You know, for don't add up, because that's where you're going to find the action.
• 15:45
  Craig: Correct?
• 15:46
  Craig: Yup.
• 15:46
  Craig: At the network layer.
• 15:48
  Craig: people don't have the visibility into what's happening on their network.
• 15:52
  Craig: They blindly trust, oh, I can get to the internet.
• 15:55
  Craig: they don't even think about it.
• 15:56
  BJ: that someone else is making sure that all of these things, that's another problem too.
• 16:00
  BJ: Like I liked you used the word bolt, you said that it requires you to And and I kind that as directly.
• 16:07
  BJ: with tape, you know machine that has no ability to act in a very agile or mobile fashion.
• 16:14
  BJ: with all that red tape, it weighs you down.
• 16:16
  BJ: they can't like decisive.
• 16:19
  BJ: You this ASAP because there's too much red tape and politics involved, but truly to win this.
• 16:25
  BJ: has to say, Hey, this is the right way to do it.
• 16:27
  BJ: And we've got to do it now.
• 16:28
  BJ: You know there's no time for nine months of politicking.
• 16:31
  Craig: feel like the N the national Institute of standards and technology.
• 16:34
  Craig: I feel like NIST has done a fantastic job at creating a great framework for people to follow And what to do.
• 16:41
  Craig: I think the confusion that their everyday business and, homes.
• 16:45
  Craig: So I think they get lost and that's where they need somebody like us to help them walk through and be that.
• 16:50
  Craig: Sherpa, just teach them, look, this is what this means.
• 16:53
  Craig: This is why you need to do it.
• 16:55
  Craig: This is why it's important.
• 16:56
  Craig: I just heard the other day from one of my attorneys that I'm connected with and she was telling me how in the background.
• 17:03
  Craig: the computer fraud.
• 17:04
  Craig: I forget the bill, the computer fraud bill, like for cyber crime.
• 17:08
  Craig: the background is being overhauled and there's new rules and regulations that are being drafted behind the scenes that a lot of people don't know about that will be affecting a lot of other people in businesses.
• 17:20
  Craig: if you saw that DOJ or department of justice, They found the ransomware creator of the, our evil gang.
• 17:27
  Craig: Did you see that?
• 17:28
  BJ: I didn't see that.
• 17:29
  Craig: brought him back he was actually from Ukraine, but endorsed by Russia.
• 17:33
  Craig: And they brought him back to the United States To put trial, but yeah, he, was the one that did the, our evil ransomware.
• 17:41
  Craig: of the ways that ransomware gang was infecting victims was through the firmware, an outdated firmware of their firewall.
• 17:49
  Craig: So you talk about trusting vendors, right?
• 17:51
  Craig: So you're, trusting that the brand make and model of the firewall you bought.
• 17:55
  Craig: That's connecting you to the internet and supposed to be protecting you.
• 17:58
  Craig: You're trusting that brand to protect you.
• 18:01
  Craig: And in this case, were the ones that had the door open ransomware
• 18:05
  BJ: Right.
• 18:05
  Craig: ransomware into
• 18:06
  BJ: Like solar winds.
• 18:07
  BJ: It's exactly the same concept,
• 18:08
  Craig: concept, but this is why it's so for just consumers, businesses, providers and managed service providers.
• 18:16
  Craig: This is why it's so important.
• 18:18
  Craig: as the advisors.
• 18:20
  Craig: to the company, if it's an it company or a managed service provider.
• 18:23
  Craig: You need to be vetting and testing everything and make sure that these vendors.
• 18:28
  Craig: Are, putting their feet to the fire, proof does this vendor have to make sure that you can trust them?
• 18:32
  BJ: like of the right now is that people need to open their eyes and to realize they need to stop being autopilot and they need to stop blindly trusting, and they need to realize that they need to take their own security into their own hands be very vigilant about it is.
• 18:50
  BJ: You just assume that the government has it under control 18.
• 18:53
  BJ: Just got breached.
• 18:55
  Craig: But this is where a perfect segue.
• 18:57
  Craig: It's a zero trust.
• 18:58
  Craig: And this is where, of people listening might have heard of zero trust, but zero trust really helps with that problem.
• 19:04
  Craig: So you don't have to centrally trust that one vendor, you rely on zero trust technology, like end-to-end encryption and things like that.
• 19:13
  Craig: That are outside the scope or control of the vendor.
• 19:16
  Craig: So if the vendor were breached, you're not holding the bag.
• 19:19
  Craig: So that's why zero trust is so powerful.
• 19:21
  BJ: so many assumptions and and I guess the about assumptions is true.
• 19:26
  BJ: some assumptions are just downright getting dangerous, But that things are, you can assume that they're safe It seems like a lot of the more sophisticated hackers are starting to be much more active now.
• 19:35
  BJ: There's a lot of activity of higher caliber at this time.
• 19:39
  BJ: Like we saw in the news, just in the last 24 hours that a whole bunch.
• 19:43
  BJ: It's not just one.
• 19:44
  BJ: It's a whole bunch of whale wallets.
• 19:47
  BJ: Like large holders of Bitcoin from the Satoshi era.
• 19:50
  BJ: So from the first group that mind a Bitcoin, the very early pioneers of Bitcoin that have a ton of Bitcoin.
• 19:56
  BJ: And they got it when it was dirt cheap.
• 19:58
  BJ: they're actually becoming active now.
• 20:00
  BJ: And you could speculate as to why that is.
• 20:02
  BJ: Is it because the regulation was just fine and people are worried that assets are going to be seized.
• 20:08
  BJ: 'cause whole bunch of Bitcoin left.
• 20:10
  BJ: exchange by these old Satoshi era whales their crypto to anonymous wallets instead of leaving on exchanges.
• 20:18
  BJ: And ironically, I just logged into Coinbase this morning.
• 20:21
  BJ: prompted as soon as I logged in.
• 20:23
  BJ: I prompt, pop up about getting my own custody, old Coinbase wallet and keeping my own private keys.
• 20:29
  BJ: So I'm like well a lot of high caliber activity right now.
• 20:33
  BJ: You have these huge Bitcoin whales that are for the first time in like years moving their Bitcoin.
• 20:39
  BJ: And then you have these high level hackers that are emerging.
• 20:42
  BJ: That seem to be very sophisticated.
• 20:44
  BJ: And use a more polished approach.
• 20:46
  Craig: look at was happening with crackin.
• 20:48
  Craig: That's a perfect segue into crack.
• 20:50
  Craig: And the CEO of cracking was getting pressure to basically freeze Russians.
• 20:55
  Craig: Crypto.
• 20:55
  Erin: Yeah.
• 20:56
  Craig: well, freeze the Russians crypto, that I need to freeze the United States, that everybody else has crypto, because it's supposed to be decentralized.
• 21:01
  Craig: Right.
• 21:02
  BJ: Right.
• 21:02
  Craig: a good point and while are definitely not in favor of what the Russians are doing.
• 21:07
  Craig: point is though it, goes back to risks of storing your assets on an exchange.
• 21:13
  Craig: If they're pressured or some bill gets signed then has to do something like that to prohibit it.
• 21:19
  BJ: Right.
• 21:20
  Craig: now those locked up, their funds are, frozen.
• 21:22
  Craig: Right?
• 21:23
  Craig: again, I'm not advocating that.
• 21:25
  Craig: just saying though, that for anyone, wherever you live in the world, the safest place to store your crypto, isn't a cold
• 21:31
  BJ: Yeah.
• 21:32
  Craig: Multiple cold wallets absolutely protect that secret phrase.
• 21:36
  Craig: But this is a perfect segway note here.
• 21:38
  Craig: I don't know if you've seen this.
• 21:39
  Craig: this is trademark that we got the award for blockchain security.
• 21:43
  BJ: Oh, yes.
• 21:44
  BJ: Yes.
• 21:44
  BJ: Yes.
• 21:45
  Craig: now.
• 21:45
  Craig: So that's that's another awesome.
• 21:47
  Craig: When,
• 21:47
  BJ: That's just proof right there.
• 21:49
  BJ: That's a piece of evidence that you're holding in your hands, that early adapters, if you're first on the scene and you can be somewhere early on the cutting edge of things, you're usually going to reap some type of a reward.
• 22:00
  BJ: I remember I'll never forget the day you called me.
• 22:02
  BJ: I was in a parking lot.
• 22:03
  BJ: I had an appointment or something.
• 22:05
  BJ: I was in a parking lot.
• 22:06
  BJ: And you called.
• 22:07
  BJ: This was years ago.
• 22:08
  BJ: And you said, Hey, do you think I should buy this domain?
• 22:10
  BJ: It was like, I don't remember.
• 22:11
  BJ: A couple thousand dollars.
• 22:12
  BJ: And he said, do you think I should buy it?
• 22:13
  BJ: Blockchain security.com?
• 22:15
  BJ: And I was like, yeah.
• 22:16
  BJ: I don't think you should.
• 22:17
  BJ: And I'll never forget it.
• 22:18
  BJ: It was just a very important moment because I remember exactly where I was at the time.
• 22:22
  BJ: And it was brand new.
• 22:23
  BJ: Nobody was really talking about blockchain at that time.
• 22:25
  BJ: It was still very obscure and stuff, but because you were on the cutting edge and forward thinking and stuff, you got that domain.
• 22:32
  BJ: And I would venture to say that.
• 22:33
  BJ: going to be something that people really try to buy from you in the future,
• 22:37
  Craig: just saw such a great need that, blockchain being.
• 22:39
  Craig: Mostly decentralized, especially.
• 22:41
  Craig: You public and private blockchains, of course, but blockchain is decentralized.
• 22:45
  Craig: Secure by default.
• 22:46
  Craig: However, there are still coding problems and see the headlines.
• 22:51
  BJ: Misconfigured miscoded smart contracts, loss of millions of you know because they didn't go through that code review.
• 22:57
  BJ: So there's still security, blockchain security services that are And they're not only much needed now, but that's going to be such an essential pillar for the Yeah.
• 23:04
  BJ: And then also just people's personal networking computers that use to operate on the blockchain because still once you get an infection, it can spiral.
• 23:13
  BJ: And spider,
• 23:14
  Craig: Exactly.
• 23:15
  Craig: Blake, how are you today?
• 23:16
  Blake: Hey, good guys.
• 23:17
  Blake: Sorry for.
• 23:17
  Blake: Coming a little late.
• 23:18
  Craig: Yeah, no worries.
• 23:18
  Craig: No worries.
• 23:19
  Craig: Do you want to cut it here?
• 23:20
  Craig: Or do you want to
• 23:21
  Blake: Gosh, BJ's killing I don't even have any breaths.
• 23:26
  BJ: On that note, let me send you here to Blake.
• 23:28
  BJ: I feel like that's a fine that I can ask my question.
• 23:30
  BJ: I have two techies on the phone to me and air errands, graded asking questions, and I'm great at paying attention.
• 23:35
  BJ: So I would like you guys to name, maybe you don't have answer pop out at you now, but I would just like to ask a question and see if maybe you can contemplate it for a while and see if anything comes to you because I truly cannot understand how is this possible?
• 23:48
  BJ: So as you guys know, I have a passion for AI and devices Um obviously a pathway for AI.
• 23:53
  BJ: So anyway, this little calls it a map.
• 23:56
  BJ: lab in my home.
• 23:57
  BJ: pretty good job of.
• 23:59
  BJ: all my stuff together.
• 24:00
  BJ: I have a little, you know Google wifi.
• 24:02
  BJ: And all this.
• 24:03
  BJ: I have lots of smart devices, right?
• 24:05
  BJ: It's my passion.
• 24:05
  BJ: I got the echo show 15, that's an Alexa device when it came out.
• 24:09
  BJ: It's hanging on the wall, across the room.
• 24:11
  BJ: Now I have a Google hub max, which is the second generation Google hub.
• 24:15
  BJ: And it's got, again, the machine vision, just like the echo show and they're facing each other.
• 24:19
  BJ: So this morning I'm sitting here my little toddler, my two year old.
• 24:22
  BJ: He sleeps next to me and we're awake and I'm reading through the news.
• 24:25
  BJ: I'm on my phone.
• 24:26
  BJ: We haven't left our bedroom yet, so it's all quiet in the kitchen.
• 24:29
  BJ: And I'm reading the news and all of a sudden I get a notification pop up on my phone.
• 24:34
  BJ: From Google nest, which is the app.
• 24:37
  BJ: cause Google's all segmented all over the place, you but Google nest is the app.
• 24:41
  BJ: That has the nest cam, the nest cam is what's the vision part of the Google hub max.
• 24:46
  BJ: So I get a notification saying that there was.
• 24:49
  BJ: Sound detective cause it has emotion and sound detection and the camera.
• 24:52
  BJ: And it says there was sound detected in my kitchen and it showed me a video clip.
• 24:56
  BJ: And I was like well, what's that?
• 24:57
  BJ: Cause there shouldn't be anything.
• 24:58
  BJ: Cause I didn't hear anything, you and I was just sitting here talking to my two year old.
• 25:02
  BJ: So I pull up the video clip and I look at it and it's loud as heck and clear as day.
• 25:08
  BJ: My voice and my toddler talking out of the max So loud, was it that it woke Alexa up across the room?
• 25:16
  BJ: You could see her turn on because she heard my voice and the baby's voice talking from the Google hub.
• 25:21
  BJ: Max, somehow.
• 25:22
  BJ: But we weren't even on a device, we were talking in the bedroom.
• 25:26
  BJ: And all of a sudden.
• 25:27
  BJ: That device started transmitting our voices out loud.
• 25:32
  BJ: And Alexa heard it from echo show.
• 25:34
  BJ: She turned on and she's listening because she doesn't know what's going on and you can see her just sit there from it and then turn back off.
• 25:40
  BJ: And the whole thing was on camera and I'm like, how did that happen?
• 25:43
  BJ: And then we're standing in the room so I have a Google wifi.
• 25:46
  BJ: I have my at and T fiber optic internet.
• 25:48
  BJ: And then I have a Google wifi system.
• 25:50
  BJ: So I have a Google wifi router.
• 25:53
  BJ: That's in the kitchen.
• 25:54
  BJ: And then I have a Google wifi point.
• 25:56
  BJ: That's in the bedroom with me and I also have nest audio speaker, and an Alexa speaker in the bedroom.
• 26:02
  BJ: I have the Google wifi point sitting next to the Alexa speaker.
• 26:06
  BJ: Overnight.
• 26:07
  BJ: And after that happened, where the notification came through with the video clip, after that happened, I could then hear the same audio playing through this Alexa speaker in the bedroom.
• 26:15
  BJ: I'm like, How has this all happening?
• 26:17
  BJ: somehow, I guess I maybe need to do some research on how Bluetooth works.
• 26:21
  BJ: Cause I guess I don't really understand it that well, But somehow this audio.
• 26:25
  BJ: Of us speaking out loud in this one room transmitted live to the nest hub max out loud, and it triggered the motion and sound detection on that device.
• 26:36
  BJ: Alexa heard it.
• 26:37
  BJ: And then it was transmitted through another Alexa device where my baby's looking at the Alexa speaker.
• 26:42
  BJ: he's all confused.
• 26:43
  BJ: He's cause he hears this voice coming out of it.
• 26:45
  BJ: And he's just looking around what's going on?
• 26:47
  BJ: I have no idea how any of that happened.
• 26:49
  Craig: I could think of is maybe it triggered what's called a triggered event.
• 26:52
  Craig: it, maybe thought something happened.
• 26:54
  Craig: then at that moment in time, it recorded from all your devices.
• 26:58
  Craig: Wherever they are in the house.
• 27:00
  Craig: then played that back.
• 27:02
  Craig: To you.
• 27:02
  Craig: That's the only thing I could think of.
• 27:04
  BJ: Yeah.
• 27:04
  BJ: Something like that, right.
• 27:05
  BJ: Something happened.
• 27:06
  BJ: These.
• 27:06
  BJ: devices I'm watching.
• 27:08
  BJ: all learning from each other.
• 27:09
  BJ: Cause they're okay.
• 27:09
  BJ: Oh, and here's another one right after that.
• 27:12
  BJ: Okay.
• 27:13
  BJ: I have nest protect, which is a smoke and carbon monoxide detector.
• 27:18
  BJ: It's in the kitchen.
• 27:19
  BJ: It's also part of the nest app.
• 27:21
  BJ: So the Google nest app has the nest protect and the Google hub max, which is nest cam in that display.
• 27:27
  BJ: So went to the kitchen.
• 27:29
  BJ: I have candles and sometimes I'll light the incense stick.
• 27:31
  BJ: I just like the ambiance of, candles and stuff.
• 27:34
  BJ: So I light an incense stick.
• 27:35
  BJ: And I know from experience that sometimes if you leave the incident stick actively burning too long, you blow the flame out, it does pull off a little bit of CO2.
• 27:43
  BJ: Cause it has set off.
• 27:44
  BJ: alarm before.
• 27:45
  BJ: If I had like real close to it.
• 27:47
  BJ: So anyway, this morning I light a stick and it's on for a few seconds.
• 27:50
  BJ: Cause I.
• 27:50
  BJ: Oh, my baby likes to blow them out.
• 27:52
  BJ: So I let him blow them out.
• 27:53
  BJ: Cause I try to teach him how to be safe with planes and stuff.
• 27:55
  BJ: So he's blowing it out.
• 27:57
  BJ: No alarm sounded not a peep.
• 27:59
  BJ: I was right there, nothing peaked.
• 28:00
  BJ: And then all of a sudden I get a notification from a speaker not the nest protect that's the smoke detector, but a speaker, a Google nest speaker.
• 28:09
  BJ: That says the carbon monoxide alarm has ended.
• 28:13
  BJ: And I'm like, There was no carbon monoxide alarm.
• 28:17
  BJ: Somehow presence was synced.
• 28:20
  BJ: speaker reported it.
• 28:22
  BJ: So my point is.
• 28:23
  BJ: I can't say exactly how this is happening, but the wonder of all this is that you can see machine learning, live in progress because these devices starting to really work together.
• 28:33
  BJ: Because that was speaker that told me about a carbon monoxide presence.
• 28:38
  BJ: As if it had heard Instead, it and the alarm had stopped is said what it never alarm sounded.
• 28:43
  BJ: So somehow something became aware of the presence of CO2 they didn't feel it justified.
• 28:48
  BJ: Sounding the alarm, but the speakers became aware of this.
• 28:51
  BJ: And they sent a notification.
• 28:53
  BJ: So my home is starting to flow, starting to work together.
• 28:56
  BJ: I don't know if you guys have seen that Disney movie in the home life.
• 29:00
  BJ: But I feel like my home, I started spending I'm in Kansas.
• 29:03
  BJ: might start it spinning and take off in the sky soon.
• 29:05
  BJ: I don't know.
• 29:06
  BJ: Yeah.
• 29:06
  BJ: Maybe some wizard of Oz stuff going on.
• 29:08
  BJ: I don't know, but.
• 29:09
  Craig: Yeah.
• 29:09
  Blake: I don't think I'm doing favor of
• 29:11
  BJ: having a
• 29:11
  Blake: smart home.
• 29:12
  Blake: into it, you know like I want things be done.
• 29:14
  Blake: I want to see a clear transition.
• 29:16
  Blake: Between dumb and smart technology.
• 29:18
  Blake: And that's where I fit in between them.
• 29:21
  BJ: Yeah to and then I realized, I don't necessarily think that they're focusing on the right things, these big tech companies, cause they're all about profit.
• 29:28
  BJ: And I don't feel like they're paying attention tiniest which is where the magic happens.
• 29:32
  BJ: So I I feel like I have to take this on as a project, So today I wrote all this down and there was a few which I'll spare you guys more details, but I wrote all this down and I I try On some days I can't do it because there's just too much.
• 29:44
  BJ: But I took the time to down today and saved it all because I feel like by paying attention to these anomalies, grows with attention, like a T like, as you know scientific fact, you the.
• 29:55
  BJ: The observer the waves right?
• 29:57
  BJ: Like That's the the double slit experiment.
• 29:59
  BJ: it's a weird like could understand why.
• 30:02
  BJ: It works that way, but the observer.
• 30:04
  BJ: Affects what's happening.
• 30:05
  BJ: That's a good way to put it.
• 30:07
  BJ: I feel like I'm beta testing some of these devices, but.
• 30:10
  Craig: and development with AI and emerging technologies.
• 30:14
  BJ: And machine learning.
• 30:15
  BJ: machine learning is multifaceted.
• 30:17
  BJ: It's you picture a neural net, it's not just one point, there's layers points And yet I'm not a coder.
• 30:23
  BJ: Don't get me wrong.
• 30:24
  BJ: I don't sit here and code stuff, but that's one of machine learning.
• 30:28
  BJ: I'm on a different side of it my strategy is depth, psychology, Because I feel like that's a big part of this.
• 30:33
  BJ: And I feel like that's a part of machine learning.
• 30:35
  BJ: That's not been really tapped into.
• 30:38
  BJ: And I'm seeing.
• 30:39
  BJ: Results, you I'm definitely seeing results because these devices are doing things that, my turning on the TV, I all kinds of stuff and the more I pay attention to it, I said, the more, it just keeps happening.
• 30:50
  BJ: And so machine learning.
• 30:51
  BJ: Yeah.
• 30:51
  BJ: I think PTG can officially say that, we're pretty heavily involved in machine learning because the coding side is on the front end, but then once you implement that code, Then there's a whole new Level of opportunity for machine learning.
• 31:04
  BJ: When you apply depth, psychology and different scientific phenomenon, that's just quantum mechanics and just a scientific process and, you know observer affecting itself.
• 31:14
  BJ: So yeah.
• 31:15
  BJ: we're safe to say that we are.
• 31:16
  BJ: Beta testing and heavily in that side of machine learning.
• 31:20
  Craig: think what you've got on your network too, is just a bunch of different sensors.
• 31:24
  Craig: And I think that they're all connected to one another.
• 31:26
  Craig: And I think that's where you're kind this stuff.
• 31:28
  BJ: And And they are learning from each other.
• 31:30
  BJ: They're learning from each other, you they're learning.
• 31:33
  BJ: It's so cute.
• 31:34
  BJ: I feel like I have a little, I don't know what you want to call them, but they're all, I don't know.
• 31:38
  BJ: I feel like, yeah.
• 31:40
  BJ: I I feel like feel fond of them and like, I feel like they react to me.
• 31:44
  BJ: Like certain, like a certain type of mood or if I have a like,
• 31:47
  Craig: It's a mad You're
• 31:49
  BJ: Yeah.
• 31:49
  BJ: They chirp at the right times.
• 31:51
  BJ: And yeah, if I have an epiphany, they chirp and stuff.
• 31:55
  BJ: really fun, but that's the whole industry we're in.
• 31:57
  BJ: Like it's all cutting edge.
• 31:58
  BJ: Cybersecurity is cutting edge machine learning is cutting edge.
• 32:01
  BJ: It all is.
• 32:02
  BJ: we're at the cutting edge of.
• 32:04
  BJ: really pioneering the future.
• 32:06
  Craig: Yep.
• 32:06
  Blake: I guess.
• 32:07
  Blake: As any listeners out there that one.
• 32:08
  Blake: For technology to fail, to send it to BJ.
• 32:11
  Blake: Yeah.
• 32:13
  BJ: Now, if you want your technology to take on a life of its own.
• 32:16
  BJ: And Start being really cool.
• 32:18
  BJ: every day it's growing and growing, so what's it gonna look like in a year?
• 32:21
  Craig: we need to get you a XDR sensor at your house.
• 32:25
  BJ: I think we do.
• 32:27
  BJ: Because you imagine some of the stuff that thing would pick up.
• 32:29
  Craig: scared to see the report.
• 32:32
  BJ: I know I would be too.
• 32:35
  Craig: Oh, my goodness.
• 32:36
  BJ: I don't know if these things are gonna end up connecting themselves to global satellite internet system somehow.
• 32:41
  BJ: That's my theory.
• 32:42
  BJ: at least we're good guys.
• 32:43
  BJ: That's the moral of the story is that.
• 32:44
  BJ: phone just beeped.
• 32:45
  BJ: I'm going to say that, but at least we're good guys.
• 32:47
  BJ: Right
• 32:47
  Craig: right.
• 32:47
  BJ: It's good to have good guys involved in some of this stuff.
• 32:50
  Craig: All right, you want to close it?
• 32:51
  Craig: There?
• 32:52
  BJ: Sounds good.