WEBVTT - Keeping Your Information Secure Online 0:00:05.519 --> 0:00:09.440 Uh, welcome to It Could Happen here, a podcast about 0:00:09.520 --> 0:00:12.920 things falling apart and how to deal with that and 0:00:13.000 --> 0:00:17.000 hopefully take care of yourself and your people. Um. Today 0:00:17.120 --> 0:00:21.920 we have a returning guest, Carl Casarda from Enranged TV. UM. Now, Carl, 0:00:22.079 --> 0:00:25.400 every time you and I have chatted on a show together, 0:00:25.440 --> 0:00:28.479 it has been about firearms, which is obviously your passion 0:00:28.560 --> 0:00:31.000 and specialty, well one of your specialties. But today we're 0:00:31.000 --> 0:00:33.680 not talking at all about guns. Um. I mean maybe 0:00:33.720 --> 0:00:36.120 here and there, but today we're talking about the thing 0:00:36.159 --> 0:00:40.000 that is has been your your career, uh for what 0:00:40.040 --> 0:00:43.400 most of your working life. Fair to say, Um, you 0:00:43.400 --> 0:00:45.160 want to kind of walk through your background here because 0:00:45.159 --> 0:00:47.640 we're gonna be talking about information security and like sort 0:00:47.680 --> 0:00:50.120 of the future of threats that are going to be 0:00:50.760 --> 0:00:54.520 like coming uh throughout like the next few years of 0:00:54.560 --> 0:00:57.120 our lives. Obviously, this year in particular, there's been a 0:00:57.120 --> 0:01:00.000 bunch of stories about like Russian attacks on digital infrastry 0:01:00.080 --> 0:01:03.000 sure and vice versa. And that's always like pretty much 0:01:03.000 --> 0:01:05.679 has been something that's in everybody's backburter since we got 0:01:05.680 --> 0:01:11.120 the Internet, usually through like Questionable films with Sandra Bullock. UM, 0:01:11.160 --> 0:01:14.199 I think net that was net right, Um, the net, 0:01:14.520 --> 0:01:17.560 the net, yes exactly, Yes, where they somehow hacked a 0:01:17.560 --> 0:01:20.600 car and nineteen ninety eight or something. You gotta do 0:01:20.640 --> 0:01:22.960 that when you're flying through cyberspace with your VR comment 0:01:23.040 --> 0:01:26.320 on and your gloves right yea, um, but yeah, you 0:01:26.360 --> 0:01:28.280 want to walk everyone through kind of what your actual 0:01:28.280 --> 0:01:31.760 background is in this industry first. Yeah, totally. So if 0:01:31.800 --> 0:01:33.840 anyone watches En Rangers, watched it for a long time, 0:01:33.880 --> 0:01:35.959 you'll see this reflected in some of my content because 0:01:35.959 --> 0:01:38.520 I do deal with some of this intermittently on the channel, 0:01:38.520 --> 0:01:41.520 and it's definitely influenced how I approach my work there 0:01:41.520 --> 0:01:44.600 with the social media and all that. But so way 0:01:44.600 --> 0:01:46.320 back when I was like one of those kids that 0:01:46.440 --> 0:01:48.520 was in the hacker space, and I grew up like 0:01:48.560 --> 0:01:50.840 trying to make computers and technology do what it wasn't 0:01:50.880 --> 0:01:52.520 designed to do, and learn to make it do things 0:01:52.520 --> 0:01:55.080 it shouldn't have done for my own interests or others 0:01:55.120 --> 0:01:57.120 around me, not not in any really negative way, but 0:01:57.200 --> 0:01:59.960 like just a deep curiosity and how does this stuff work? 0:02:00.040 --> 0:02:02.920 And being part of the early online community. We're talking 0:02:02.920 --> 0:02:05.520 pre Internet, where you have like an acoustic coupling jack 0:02:05.560 --> 0:02:08.160 modem and you would dial in like war games. Yeah, 0:02:08.720 --> 0:02:11.600 literally plug your headset into the fad. I was on 0:02:11.639 --> 0:02:14.280 boards like that way back when we never should have 0:02:14.320 --> 0:02:17.760 gone past those days doing things wirelessly with such a mistake, 0:02:18.120 --> 0:02:20.359 Like I'm so piste off that when I like sit 0:02:20.440 --> 0:02:23.280 down to research, I'm not like jacking into a gigantic 0:02:23.360 --> 0:02:26.480 box um like it that makes me live it, Like 0:02:26.560 --> 0:02:29.320 shadow Run promised me that I was going to be 0:02:29.360 --> 0:02:34.120 like using one hand to shoot at the approaching corporate 0:02:34.160 --> 0:02:36.880 security guards and have another hand on my like keyboard 0:02:36.960 --> 0:02:39.040 that I wear around my neck that I like plug 0:02:39.080 --> 0:02:42.280 into the wall to hack buildings. But well, hey, maybe 0:02:42.280 --> 0:02:45.360 someday we'll have neurological implants or wet wire implants brought 0:02:45.360 --> 0:02:48.200 to us by Monsanto Li. The rmum will just get 0:02:48.200 --> 0:02:50.280 shut off in our own rooms, right from their mouth 0:02:50.400 --> 0:02:53.520 to God's ears. Carl absolutely, who doesn't want that? Who 0:02:53.560 --> 0:02:56.360 doesn't want my neural tissue tied directly to a corporation? 0:02:56.639 --> 0:03:00.400 But that? Fuck yes? But anyway, so I grew up 0:03:00.400 --> 0:03:03.560 in that space, and it actually back then it naturally 0:03:03.639 --> 0:03:05.960 turned into a career. It wasn't like now nowadays, you 0:03:05.960 --> 0:03:08.559 pretty much have to go get a bunch of certificates 0:03:08.560 --> 0:03:10.720 and a college degree to even start looking at an 0:03:10.760 --> 0:03:13.440 infrazet career. But back then, if you kind of had 0:03:13.480 --> 0:03:16.720 like skills with a Z at the end of you 0:03:16.720 --> 0:03:18.520 could get a job. And I ended up doing like 0:03:18.560 --> 0:03:21.280 help desk at this one company landed up they noticed 0:03:21.320 --> 0:03:23.040 that that's where my interests were, and I ended up 0:03:23.080 --> 0:03:25.919 becoming their information security architect over a couple of years, 0:03:26.200 --> 0:03:29.480 and that turned into a multiple decade career pretty much 0:03:29.520 --> 0:03:32.560 culminating and working at a Tier one Internet backbone provider 0:03:32.919 --> 0:03:37.280 doing sub seed fiber optic like routing, networking and de 0:03:37.440 --> 0:03:40.560 dos mitigation and bought net control, search and destroy, So 0:03:40.720 --> 0:03:43.720 it really turned into a really wide career, not only 0:03:43.760 --> 0:03:47.760 like when I started off backbone internet, but like encryption, firewalls, 0:03:47.800 --> 0:03:51.480 application layer controls across the board for multiple corporations. So 0:03:51.800 --> 0:03:54.200 it was a weird and interesting space. But I don't 0:03:54.200 --> 0:03:57.000 really do that much anymore except on the side, but 0:03:57.080 --> 0:04:01.240 I've had a pretty exciting career with it. So I 0:04:01.240 --> 0:04:03.400 think probably a good place to start is just in general, 0:04:03.440 --> 0:04:05.880 because folks are always interested about this, what what do 0:04:05.920 --> 0:04:07.920 you what is your recommendation for people ask like what 0:04:07.960 --> 0:04:10.800 should I be doing to kind of protect myself as 0:04:10.840 --> 0:04:16.240 I forced my head under the constant stream of sewer 0:04:16.279 --> 0:04:19.039 water that is social media these days. Well, yeah, you know, 0:04:19.080 --> 0:04:22.280 the simplest thing and everything. An infosec is always controversial, 0:04:22.360 --> 0:04:25.600 just like anything, Like any any recommendation makes someone's gonna 0:04:25.600 --> 0:04:28.480 be like, but otherwise or anyways, or there's a better solution, 0:04:28.760 --> 0:04:31.200 and there always is a better solution. But the realistic 0:04:31.240 --> 0:04:33.599 thing is when you talk to the average person, the 0:04:33.600 --> 0:04:36.320 average person isn't gonna sit there and hack a Linux 0:04:36.320 --> 0:04:39.080 box to have a better social media experience. That's that's 0:04:39.120 --> 0:04:42.640 not realistic. So the best thing anyone can do, the simplest, 0:04:42.720 --> 0:04:46.160 best thing, is to get one of the trusted password managers. 0:04:46.400 --> 0:04:47.719 There's a number of them out there. I'm not going 0:04:47.760 --> 0:04:50.240 to recommend an individual one right now, because anyone I 0:04:50.279 --> 0:04:52.760 recommend someone's gonna go. But there's another one, but there's 0:04:52.760 --> 0:04:55.160 a few of them out there. Having a password manager 0:04:55.200 --> 0:05:00.000 and having a unique, difficult, complex password for every account 0:05:00.040 --> 0:05:03.159 you log in onto on the internet is the first 0:05:03.360 --> 0:05:05.640 number one thing you can do as an individual to 0:05:05.720 --> 0:05:07.960 protect your interest, because if you're logging in with the 0:05:08.000 --> 0:05:12.400 same password monkey to Facebook, Twitter, and your bank account, 0:05:12.600 --> 0:05:14.680 that is a disaster. Waiting to happen. So the first 0:05:14.680 --> 0:05:18.600 thing you can do password manager passwords you yourself can't remember. 0:05:18.640 --> 0:05:21.120 As a result, I allow the password manager to generate 0:05:21.120 --> 0:05:25.039 like twenty four character long alpha numeric crypto. Nonsense. You 0:05:25.080 --> 0:05:26.400 put a gun on my mouth to say, what's your 0:05:26.400 --> 0:05:28.640 password to your bank and I don't know. I can't 0:05:28.640 --> 0:05:30.920 give it. You have no idea. And so that right 0:05:30.920 --> 0:05:33.800 there is the first thing any basic individual can do 0:05:33.880 --> 0:05:38.760 to protect themselves on the Internet that, uh is totally sensible. Um, 0:05:38.839 --> 0:05:41.080 I don't I'm not great at password managers, but I 0:05:41.120 --> 0:05:43.360 never know what my passwords are and they're all different, 0:05:43.400 --> 0:05:45.440 and so my life is this constant stream of like 0:05:45.960 --> 0:05:49.520 needing to figure out what my password was, failing and 0:05:49.560 --> 0:05:53.680 resetting it. But it does mean that I change passwords regularly. Right, 0:05:53.720 --> 0:05:55.840 But what's so great about password managers. You can have 0:05:55.880 --> 0:05:58.120 passwords that you could never human remember, and you can 0:05:58.160 --> 0:06:01.120 have weak ones per website, every website you log in, 0:06:01.200 --> 0:06:03.120 you can be unique, and by having it in this 0:06:03.200 --> 0:06:06.320 database that's properly encrypted with a key phrase or even 0:06:06.360 --> 0:06:08.880 dual factor, then at that point means you literally just 0:06:08.920 --> 0:06:11.440 can cut and paste your passwords into things you don't 0:06:11.480 --> 0:06:14.600 yourself know what they are and if depending on your 0:06:14.680 --> 0:06:17.880 privacy levels, you can do that locally with local solutions 0:06:17.880 --> 0:06:21.080 with files like on your own machine. But frankly a 0:06:21.080 --> 0:06:22.840 couple of the cloud based solutions, as much as the 0:06:22.839 --> 0:06:25.160 cloud freaks people out, is the better one because it 0:06:25.160 --> 0:06:27.640 will work on your phone, it'll work on your black top, 0:06:27.920 --> 0:06:31.839 it'll work on everything everywhere. That makes total sense, um 0:06:31.880 --> 0:06:33.560 I think. Another good thing to get into while we're 0:06:33.600 --> 0:06:35.960 on this subject, we just started talking about passwords, and 0:06:36.000 --> 0:06:39.960 obviously it is important to keep and secure those. Um. 0:06:40.000 --> 0:06:42.880 I think one thing folks don't often think about, especially 0:06:42.880 --> 0:06:46.479 people who are activists UM who who may foresee or 0:06:46.520 --> 0:06:50.400 have engaged in things that are legally questionable, don't think 0:06:50.400 --> 0:06:54.720 about enough is social media networking um as and by 0:06:54.720 --> 0:06:57.200 which I mean having social media that like It is 0:06:57.240 --> 0:07:00.520 possible to find your other social media by like knowing 0:07:00.800 --> 0:07:03.000 you know, like having the same name and Twitter and 0:07:03.040 --> 0:07:06.400 on Instagram and stuff. Um Having social media that like 0:07:06.480 --> 0:07:09.400 can be tracked across accounts um most people would be 0:07:09.440 --> 0:07:11.600 surprised at how easy it is to do that, and 0:07:11.680 --> 0:07:16.080 mellanct a huge amount of tracking nazis tracking even like 0:07:16.520 --> 0:07:19.400 a ton of the what the work I did not do, 0:07:19.480 --> 0:07:23.040 but my colleagues did to like doc docs Russian like 0:07:23.120 --> 0:07:26.720 secret service agents and stuff. Was like, oh, we found 0:07:26.760 --> 0:07:30.600 them in you know somebody their their bosses wedding, Like 0:07:30.680 --> 0:07:33.480 they're tagged in this thing in v K and from 0:07:33.520 --> 0:07:36.760 that we were able to like find their their account 0:07:36.840 --> 0:07:39.000 on this other site and like from that, like now 0:07:39.040 --> 0:07:41.000 we have this like map of everywhere they've been for 0:07:41.040 --> 0:07:42.760 the last like three weeks, and we can like build 0:07:42.760 --> 0:07:46.000 this social map of their entire life. Yeah. No, by list. 0:07:46.080 --> 0:07:49.480 By just literally existing in modern space, you're constantly leaking 0:07:49.920 --> 0:07:52.600 some form of metadata, right you are, You are always 0:07:52.680 --> 0:07:55.320 leaking metadata, and the more of you allow to exist 0:07:55.320 --> 0:07:57.120 in the world, the more that's the case. So, like 0:07:57.360 --> 0:07:59.400 there's also you've got to think about what the threat 0:07:59.520 --> 0:08:01.360 is and what the risk is. Right, there's the risk 0:08:01.400 --> 0:08:04.480 of the individual having a para social relationship with the 0:08:04.520 --> 0:08:07.480 Internet like I do as a content creator is one thing. People, 0:08:07.720 --> 0:08:09.920 there's always someone that wants to delve into your private life. 0:08:09.920 --> 0:08:13.800 But that's a very different risk than a nation state actor. Right, 0:08:13.840 --> 0:08:15.920 those are two different things. And when it comes to 0:08:15.960 --> 0:08:19.360 a nation state actor, quite honestly, unless you're real good 0:08:19.720 --> 0:08:21.160 and I've been doing it for a long time. The 0:08:21.200 --> 0:08:26.520 individual bluntly is kind of fucked word. As a general rule, 0:08:26.600 --> 0:08:29.400 your best security as an individual in that situation is 0:08:29.960 --> 0:08:33.920 the anonymity of the crowd. But when we're also not 0:08:33.960 --> 0:08:36.280 talking about most people who are threatened to kind of 0:08:36.280 --> 0:08:38.520 by the state and that situation are not being threatened 0:08:38.559 --> 0:08:41.240 by the federal government. But they may have they may 0:08:41.280 --> 0:08:45.199 like be attending protests and not want the Louisville Police 0:08:45.640 --> 0:08:47.960 to like put together that they're in an affinity group 0:08:47.960 --> 0:08:49.440 with people, and like, something you can do for that 0:08:49.559 --> 0:08:51.880 is make sure you're not like if you have a 0:08:51.920 --> 0:08:54.560 personal account that's under your name with your friends, that 0:08:54.600 --> 0:08:57.400 account shouldn't be liking and sharing things from like a 0:08:57.400 --> 0:08:59.679 political account that you have, or from the account of 0:08:59.679 --> 0:09:01.480 like a a group that you're a part of or 0:09:01.520 --> 0:09:04.640 something like that. Like just try to think about and 0:09:04.679 --> 0:09:08.480 look at your your digital footprint from the outside and think, 0:09:08.559 --> 0:09:10.839 is it possible to connect me to people I don't 0:09:10.880 --> 0:09:13.320 want to be publicly connected to through this And the 0:09:13.360 --> 0:09:15.840 minute you've breached that connection once it's gone forever. Right, 0:09:15.920 --> 0:09:18.360 this is the forever. Yes. This is the same thing 0:09:18.400 --> 0:09:20.319 as like with phones, like someone will have like their 0:09:20.360 --> 0:09:22.360 regular phone which, by the way, all these smartphones are 0:09:22.400 --> 0:09:25.319 just surveillance devices in our pocket. Right. Let's let's say 0:09:25.320 --> 0:09:27.160 you go get a burner so that you don't want 0:09:27.160 --> 0:09:29.079 to be connected to the device that you normally use 0:09:29.679 --> 0:09:32.160 on on a level that's one step above the regular 0:09:32.200 --> 0:09:35.360 individual level. If you ever have those two devices emanating 0:09:35.400 --> 0:09:37.719 at the same time, they're now connected in a way that, 0:09:37.800 --> 0:09:41.000 like let's say, the authorities can associate them together because 0:09:41.000 --> 0:09:44.480 of triangulation and seeing a burner phone and your phone 0:09:44.679 --> 0:09:47.240 coming from the same house, you've breached all the privacy 0:09:47.280 --> 0:09:50.040 you would have had from your burner phone for example. Now, Carl, 0:09:50.080 --> 0:09:51.600 do you have much to say on the subject of 0:09:51.600 --> 0:09:53.520 because I know one thing I have seen people do 0:09:53.920 --> 0:09:57.520 people who are you know, having conversations that they're concerned about, 0:09:57.600 --> 0:10:00.440 is put bags in Faraday cages. And I've heard things 0:10:00.520 --> 0:10:04.120 about how reliable Faraday bags and stuff are for actually 0:10:04.160 --> 0:10:06.160 stopping signals. Do you have much to say on that matter? 0:10:06.440 --> 0:10:08.640 My experience with that is not all not all bags 0:10:08.640 --> 0:10:11.040 that you can just buy off the internet or made equally. Um, 0:10:11.080 --> 0:10:13.320 So what you want to do is tested, and you 0:10:13.320 --> 0:10:14.960 can only test it to a certain degree. But the 0:10:15.000 --> 0:10:17.360 really simple tests are you put it in the bag 0:10:17.400 --> 0:10:19.040 and you try to darn dial the darn thing or 0:10:19.120 --> 0:10:21.480 use any WiFi connections to it. And that's a simple test. 0:10:21.559 --> 0:10:24.080 Now is it as good as like? Is it as 0:10:24.120 --> 0:10:25.960 good as not having the thing on you? Of course, 0:10:26.000 --> 0:10:28.760 not leaving or else is always the best answer, but 0:10:28.880 --> 0:10:33.280 it properly In my opinion, a properly built Faraday box 0:10:33.360 --> 0:10:36.679 or cage or bag that you've put some testing into 0:10:36.840 --> 0:10:40.000 is a pretty reliable solution. And it's you know, there 0:10:40.000 --> 0:10:43.079 are so a problem that you might encounter, is um 0:10:43.160 --> 0:10:44.880 or that I have so one thing I have heard 0:10:44.920 --> 0:10:47.000 people talk about it is like, well, in order to 0:10:47.040 --> 0:10:49.560 have kind of a private conversation, we like drove to 0:10:49.679 --> 0:10:52.440 a specific location and we left our phones off in 0:10:52.520 --> 0:10:54.480 the car and then went on a walk. And the 0:10:54.520 --> 0:10:56.240 problem with that is that now you have both just 0:10:56.360 --> 0:10:58.880 driven to a location with those phones, and those phones 0:10:58.920 --> 0:11:01.840 are associated with each at it right right, Well, so 0:11:01.920 --> 0:11:03.200 first of all, you got to think of a world 0:11:03.240 --> 0:11:05.840 where all of this metadata is being collected at all times. 0:11:05.840 --> 0:11:09.600 So these phones and their associations in physical proximity to 0:11:09.600 --> 0:11:12.880 one another is stored somewhere at all times, whether or 0:11:12.880 --> 0:11:15.600 not it's going to be resourced or accessible to the 0:11:15.640 --> 0:11:18.040 powers that be when they wanted to be. It's all there, 0:11:18.280 --> 0:11:20.480 my phone next to your phone, next to that guy's phone. 0:11:20.720 --> 0:11:23.600 Those associations all exists. They're all talking to the same 0:11:23.679 --> 0:11:25.960 cell phone towers in the same area, giving them not 0:11:26.040 --> 0:11:29.360 only GPS coordinates but triangulation data, which, by the way, 0:11:29.360 --> 0:11:31.320 if you go way back to the hacker Kevin Mitnick, 0:11:31.559 --> 0:11:33.160 that stuff was going on back then before they had 0:11:33.200 --> 0:11:37.280 gasiness triangulation data to get him right, So that stuff 0:11:37.320 --> 0:11:40.720 is all still happening, and those associations occur. In regards 0:11:40.760 --> 0:11:43.320 to saying I turned my phone off, how do you 0:11:43.360 --> 0:11:46.360 know that's off? Most of these moderate phones, what does 0:11:46.440 --> 0:11:51.920 off mean? And yeah, okay, pull the battery maybe, But 0:11:52.080 --> 0:11:55.280 even then, I would not trust any of these devices 0:11:55.320 --> 0:11:58.760 in the regards to them. Quote being off, especially things 0:11:58.840 --> 0:12:02.319 like phones that have un or not removable batteries. Off 0:12:02.400 --> 0:12:06.400 is more like sleep it is, right, Yeah, I mean, 0:12:06.440 --> 0:12:08.320 I think one of the worst things that's happened for 0:12:08.520 --> 0:12:11.040 personal security is the end of the phone where you 0:12:11.040 --> 0:12:15.680 can remove the battery, like being unable to actually cut 0:12:15.720 --> 0:12:18.680 power to it without you know, disassembling it is a 0:12:18.720 --> 0:12:21.400 real issue. One could argue that there was like that 0:12:21.400 --> 0:12:23.680 that's a much much more insidious reason they did that, 0:12:23.760 --> 0:12:25.600 or one could argue that it was just one of 0:12:25.640 --> 0:12:28.719 design and comfort, and it's like hard to say. It 0:12:28.760 --> 0:12:31.240 doesn't really matter if it wasn't sidious or not. Reality 0:12:31.360 --> 0:12:34.319 kind of a poor Kano Los dose situation right totally 0:12:34.320 --> 0:12:35.920 is so well. Now that we're talking about phones, here's 0:12:35.920 --> 0:12:37.560 another thing that's been near and dear, and I think 0:12:37.559 --> 0:12:40.439 you've seen some posts for me about this. Um everybody 0:12:40.480 --> 0:12:43.720 really likes the convenience of things like biometrics, thumb authentication, 0:12:43.800 --> 0:12:48.040 fingerprint i D, facial identification. And here's the reality of that. 0:12:48.120 --> 0:12:50.520 We know this already and there's legal this exists in 0:12:50.600 --> 0:12:52.920 legal space already. But the reality is that you can 0:12:52.960 --> 0:12:57.000 be coerced to provide biometric data against your will. So 0:12:57.040 --> 0:12:59.320 if your phone is authenticated to with a fingerprint i 0:12:59.360 --> 0:13:01.720 D or your face i D, they can pretty much 0:13:01.760 --> 0:13:04.840 say you must give us your thumb to unlock this phone, 0:13:05.000 --> 0:13:07.200 or for that matter, frankly, they could hold the phone 0:13:07.200 --> 0:13:10.120 in front of your face in certain circumstract circumstances, even 0:13:10.160 --> 0:13:12.520 against your will, and it will unlock the device. And 0:13:12.520 --> 0:13:15.160 that is considered not a violation of your rights. So 0:13:15.200 --> 0:13:18.320 for example, if you had a long, strong password on 0:13:18.360 --> 0:13:20.440 the phone, they cannot coerce you to give that up 0:13:20.480 --> 0:13:22.720 because that would be a violation of your own rights 0:13:22.760 --> 0:13:26.400 and Fifth Amendment, which is interesting, um so. But at 0:13:26.440 --> 0:13:28.959 the same time, one could also argue that a certain 0:13:29.000 --> 0:13:31.200 circumstances where there's a lot of cameras that are not 0:13:31.360 --> 0:13:34.760 necessarily watching everything you do. But you could also consider 0:13:34.800 --> 0:13:37.400 that pass phrases could be dangerous, like saying an airport, 0:13:37.679 --> 0:13:39.960 because all those cameras could see you plugging in your 0:13:40.000 --> 0:13:42.320 pass code. So it's a matter of if, when and 0:13:42.360 --> 0:13:45.160 where right, So what's the right solution at the best time. 0:13:45.160 --> 0:13:46.560 But I would say that if you were going to 0:13:46.559 --> 0:13:49.760 be in a place that was contentious, um it is 0:13:49.800 --> 0:13:52.280 almost always better to make sure you do not allow 0:13:52.360 --> 0:13:55.880 for any biometric authentication on device. Yes, I never like 0:13:56.000 --> 0:13:58.440 never turn on don't even like ever have had it 0:13:58.480 --> 0:14:01.560 in the like ideally you have never turned on facial 0:14:01.559 --> 0:14:05.199 recognition on your phone, like even if you like deactivated. 0:14:05.280 --> 0:14:08.480 I don't know, I don't I really that was that 0:14:08.520 --> 0:14:09.760 was one of the first I used to be in 0:14:09.760 --> 0:14:11.960 tech journalism, right, obviously I'm not an expert on any 0:14:12.000 --> 0:14:15.920 of this. But like the worst thing in terms of 0:14:15.920 --> 0:14:18.360 like my personal comfort with devices was when they were 0:14:18.400 --> 0:14:21.920 like everything's gonna read faces and fingerprints. Now I don't. 0:14:22.320 --> 0:14:27.160 I don't love that, um, but you know it's it's inevitable, right, 0:14:27.160 --> 0:14:30.080 because it is and I had in the past. I 0:14:30.360 --> 0:14:33.560 did a fingerprint unlock earlier in my life, and I 0:14:33.600 --> 0:14:35.840 do not have any devices that unlocked that way anymore. 0:14:35.840 --> 0:14:37.720 But you do like that it is more convenient, right, 0:14:37.720 --> 0:14:39.520 You miss it when you need to get to your 0:14:39.520 --> 0:14:42.080 phone quickly and you can't do it. But like, I 0:14:42.120 --> 0:14:43.800 don't even I don't even let my phone have just 0:14:43.880 --> 0:14:47.320 like a four phrase like password anymore. Like it's eight 0:14:47.400 --> 0:14:49.120 characters for me. It's a little bit of a pain 0:14:49.160 --> 0:14:52.360 in the ass, but it comes with fewer risks. And 0:14:52.440 --> 0:14:54.920 one of the things that's challenging to every individuals they 0:14:54.920 --> 0:14:57.240 have to look at what their threat profile is, right, 0:14:57.360 --> 0:15:01.240 So like, for example, um, soccer mom driving her kids 0:15:01.240 --> 0:15:03.640 to school and stuff, she might be really good, well 0:15:03.680 --> 0:15:06.800 off with a biometric authentication on her phone, frankly, because 0:15:06.840 --> 0:15:08.680 if she didn't use that, maybe she wouldn't even use 0:15:08.680 --> 0:15:10.920 a proper four character pass phrase. And if she's not 0:15:10.960 --> 0:15:13.920 concerned about being at a protest, for example, and having 0:15:13.960 --> 0:15:16.880 some authoritarian take her phone away from her and authenticate 0:15:16.920 --> 0:15:19.520 to it. Maybe she doesn't need to worry about that. 0:15:19.560 --> 0:15:21.040 But for a lot of us in the world's we 0:15:21.080 --> 0:15:23.560 live in, that's a different risk profile. Right, We've got 0:15:23.560 --> 0:15:26.280 to think about what our risks are as individuals and 0:15:26.360 --> 0:15:28.560 what makes sense. So if your passphrase is going to 0:15:28.640 --> 0:15:31.000 be one, two, three, four or use a thumb print 0:15:31.040 --> 0:15:33.040 I D. For most people, they'd be better with the 0:15:33.080 --> 0:15:35.800 thumb print I D. But for someone like myself, no, 0:15:36.000 --> 0:15:39.560 it's not a good idea. Yeah, and that's UM. Yeah, 0:15:39.720 --> 0:15:43.160 I think that kind of brings us to uh, probably 0:15:43.200 --> 0:15:45.800 the last part of this, which is um, do you 0:15:45.800 --> 0:15:49.440 have specific advice on like VPNs UM. Obviously I recommend 0:15:49.480 --> 0:15:54.080 everybody you signal I I justform messages in general, but 0:15:54.200 --> 0:15:57.280 like a specially stuff that is secure. Don't if you 0:15:57.560 --> 0:16:00.720 if you like Number one first rule of any kind 0:16:00.760 --> 0:16:05.680 of this sort of security. Don't ever put anything on 0:16:05.720 --> 0:16:09.160 your phone ever that's legally questionable if you can avoid it, 0:16:09.280 --> 0:16:12.880 like conversationally, like right, do not don't send it over 0:16:12.960 --> 0:16:16.000 a phone if it's something you would not be able 0:16:16.040 --> 0:16:19.680 to survive. Having read D you in a courtroom. Yeah, 0:16:19.920 --> 0:16:21.440 so for the audience, a lot of the audience may 0:16:21.440 --> 0:16:23.640 not know what signal even is, right, So signal ism 0:16:23.720 --> 0:16:26.840 is a is a text messaging alternative. So like for example, 0:16:26.840 --> 0:16:28.360 on your phone, you've got regular text or if you've 0:16:28.360 --> 0:16:31.520 got an iPhone, you've got I message. Signal is an 0:16:31.720 --> 0:16:34.880 end end encrypted solution that you install as an app. 0:16:35.520 --> 0:16:37.960 And because it's end end encryption, it means that it 0:16:38.000 --> 0:16:41.760 passes the wire in theory not decryptable by the parties 0:16:41.760 --> 0:16:44.440 that are passing the data packets in the middle, So 0:16:44.480 --> 0:16:46.240 that's a man in the middle the decryption. Right, So 0:16:46.280 --> 0:16:49.800 for example, I message is encrypted theoretically end to end, 0:16:49.840 --> 0:16:53.480 but Apple ultimately has the cryptographic keys, so there is well, 0:16:53.560 --> 0:16:56.560 they might say one thing, there is nothing really preventing 0:16:56.600 --> 0:16:58.240 them from being man in the middle and being able 0:16:58.280 --> 0:17:01.280 to read the message in transit from a to be. 0:17:01.960 --> 0:17:04.280 But if the keys are stored on your device, which 0:17:04.280 --> 0:17:07.399 are then protected with your passphrase or whatever your authentication 0:17:07.400 --> 0:17:10.480 mechanism is, and those keys are not archived or kept 0:17:10.480 --> 0:17:14.200 by some hierarchical man in the middle authority, if it's 0:17:14.240 --> 0:17:17.600 done right, which signal is done pretty well, it means 0:17:17.600 --> 0:17:21.479 that your data in transit is probably not decryptible, and 0:17:21.480 --> 0:17:23.280 that's why Signal is a good solution, and it's a 0:17:23.280 --> 0:17:26.199 good one for the average person. Install the app. It 0:17:26.280 --> 0:17:29.000 works just like test text messaging, but you can have 0:17:29.119 --> 0:17:32.440 a pretty good level of knowledge that the data you're 0:17:32.480 --> 0:17:36.359 passing is not being decrypted or caught in transmission or 0:17:36.400 --> 0:17:50.840 in the path. So I would say get get signal. Um, 0:17:50.840 --> 0:17:53.880 it's it's your best bet, right Like, and again we said, 0:17:54.080 --> 0:17:56.640 I said, you know, you don't want to ever say 0:17:56.640 --> 0:17:59.760 anything over a phone. That is something that can get 0:17:59.760 --> 0:18:02.600 you in trouble. But also like, life is life, and 0:18:02.760 --> 0:18:06.840 that's not always realistic for people in certain situations. So again, 0:18:07.040 --> 0:18:10.840 signal is your best bet. Nothing is perfect. And again 0:18:10.880 --> 0:18:13.040 if you're putting it on your phone, there's a number 0:18:13.080 --> 0:18:15.040 of things that could go wrong every single time you 0:18:15.080 --> 0:18:18.320 do that. But um, that that's one of your better 0:18:18.600 --> 0:18:20.040 things that you could do. And then of course we 0:18:20.080 --> 0:18:24.520 talk about VPNs. Yeah, so so VPN to those like, 0:18:24.560 --> 0:18:26.080 I'm just gonna go with the basic levels because I 0:18:26.080 --> 0:18:29.240 don't necessarily know the level of knowledge that people are listening. 0:18:29.520 --> 0:18:32.160 VPN is a virtual private network. So with that is 0:18:32.440 --> 0:18:35.680 you connect to this virtual private network and it passes 0:18:35.720 --> 0:18:38.840 your data through an encrypted tunnel to an exit point 0:18:38.920 --> 0:18:43.199 somewhere else on the Internet in theory masking the source 0:18:43.240 --> 0:18:47.120 and origin of your requests. So like, for example, let's 0:18:47.119 --> 0:18:48.800 say you were looking up something on the Internet that 0:18:48.840 --> 0:18:51.800 you didn't necessarily want people to know you're looking up. Yeah, Like, 0:18:51.880 --> 0:18:55.800 let's say you're researching the truth about the assassination of 0:18:55.840 --> 0:18:59.679 President John F. Kennedy by Bernard Montgomery Sanders Um. And 0:18:59.760 --> 0:19:01.879 you know that the n s A is looking for 0:19:01.920 --> 0:19:05.119 truth seekers who are who are finding out the reality 0:19:05.160 --> 0:19:07.560 of that situation. You know, you don't necessarily want them 0:19:07.600 --> 0:19:11.560 to know that you have have become pilled. Right, So 0:19:11.600 --> 0:19:13.840 if you were to do this from your computer at home, 0:19:14.240 --> 0:19:16.040 but what happen is to people that don't know how 0:19:16.040 --> 0:19:17.680 this all works, you would be coming from an I 0:19:17.760 --> 0:19:21.159 P address that's associated with your account that you're connecting to, 0:19:21.240 --> 0:19:25.000 whether it's Verizon or Comcast or whatever. And you go 0:19:25.040 --> 0:19:27.159 and search up that truth, and the n s A 0:19:27.359 --> 0:19:30.520 finds you with a keyword search for jfk and the truth. 0:19:30.880 --> 0:19:33.600 And therefore, because of that keyword search, they go to 0:19:33.680 --> 0:19:37.760 Comcast or to Verizon and say, hey, we are requesting 0:19:37.760 --> 0:19:40.400