WEBVTT - Lab 055: Don't Get Hacked 0:00:00.160 --> 0:00:00.399 T T. 0:00:00.840 --> 0:00:03.200 I know, we already did an episode about scammers, The 0:00:03.320 --> 0:00:03.960 Art of the Con. 0:00:04.360 --> 0:00:09.200 Yes, we talked about what happened at Firefast. Firefast feels 0:00:09.240 --> 0:00:12.039 like it was forever ago and yesterday. 0:00:11.840 --> 0:00:14.520 Right, But you know what, I think it's gone all digital. 0:00:14.760 --> 0:00:18.919 Between inventing Anna, the tender swindler, that couple that was 0:00:18.960 --> 0:00:20.640 stealing bitcoin from people. 0:00:20.560 --> 0:00:23.000 People are getting advanced in their scamming technology. 0:00:23.440 --> 0:00:26.320 Yes, I've got to build up my digital fortress because 0:00:26.760 --> 0:00:29.760 it's looking grim out here. Yes, I've been getting so 0:00:29.840 --> 0:00:33.360 much digital spam that is actually scamming on the back end, 0:00:33.440 --> 0:00:36.279 like links that say track your package here, even if 0:00:36.280 --> 0:00:39.080 I haven't purchased any ash that has. 0:00:38.960 --> 0:00:42.159 Been going around a lot. I've gotten text messages that 0:00:42.200 --> 0:00:46.080 are like track your UPS package, which I might have 0:00:46.120 --> 0:00:49.040 a UPS package on the way, and so you're tempted 0:00:49.080 --> 0:00:51.640 to click it. But there's what is it? 0:00:51.920 --> 0:00:55.160 Scamware, spyware, ransomware, phishing attacks. 0:00:55.280 --> 0:00:56.520 I don't know any of those words. 0:00:56.600 --> 0:00:58.840 You remember when everybody was getting emails about those gift 0:00:58.840 --> 0:00:59.720 cards and people. 0:00:59.520 --> 0:01:00.200 Were buying them. 0:01:00.240 --> 0:01:03.560 People were buying gift cards and was not the gift. 0:01:03.360 --> 0:01:04.400 Yeah, just out of control. 0:01:05.760 --> 0:01:08.959 I'm TT and I'm Zakiyah and from Spotify. This is 0:01:09.040 --> 0:01:35.440 Dope Labs. Welcome to Dope Labs, a weekly podcast that 0:01:35.560 --> 0:01:39.160 mixes hardcore science, pop culture, and a healthy dose friendship. 0:01:39.440 --> 0:01:42.720 This week, we're talking all about cybersecurity. 0:01:42.120 --> 0:01:45.000 And with everything that's going on in Russia and Ukraine 0:01:45.040 --> 0:01:47.200 right now, there's been a lot of talks about a 0:01:47.360 --> 0:01:48.840 possible cyber attack. 0:01:49.200 --> 0:01:51.480 We really wanted to know more about how people's online 0:01:51.520 --> 0:01:54.760 data is collected and used, what happens during a cyber attack, 0:01:54.880 --> 0:01:57.240 and what we can do to stay safe. Ready for 0:01:57.320 --> 0:01:59.520 the recitation, Yes, let's get into the resitation. 0:02:03.240 --> 0:02:03.960 So what do we know? 0:02:04.400 --> 0:02:08.480 Well? I know that we are always online, whether it 0:02:08.480 --> 0:02:11.840 be for work or social media. Every time my phone 0:02:11.880 --> 0:02:14.000 tells me how long I've been, like the amount of 0:02:14.000 --> 0:02:16.280 screen time I've had, and I go and check the details, 0:02:16.280 --> 0:02:20.080 I'm like, hm, hmm. I spent a lot of time 0:02:20.320 --> 0:02:24.400 on TikTok and Instagram, And sometimes I'm ashamed because it'll 0:02:24.440 --> 0:02:26.720 be like, you were on there today for nine hours. 0:02:26.919 --> 0:02:29.240 How is that possible? When I work eight hours. 0:02:29.280 --> 0:02:31.959 That's nobody's business, all right, that's the first. 0:02:31.760 --> 0:02:34.119 Thing, that's my business, that's my visiness. 0:02:37.200 --> 0:02:39.040 We also know that there have been some pretty big 0:02:39.120 --> 0:02:43.120 cybersecurity breaches in the news. You remember the Colonial pipeline attack. 0:02:43.440 --> 0:02:45.200 You know, it's one thing to feel like it's the 0:02:45.240 --> 0:02:47.400 matrix and people are moving the zeros and ones and 0:02:47.400 --> 0:02:48.720 they're green and moving down the screen. 0:02:48.760 --> 0:02:49.480 But the gas. 0:02:49.520 --> 0:02:52.399 Honestly, like, how is gas even involved with this? Those 0:02:52.400 --> 0:02:54.080 types of things just go way over my head because 0:02:54.080 --> 0:02:56.119 every time I think of cyber attack, I just think 0:02:56.320 --> 0:02:57.079 digital stuff. 0:02:57.160 --> 0:02:59.720 What isn't it in the cloud? That gas is real? 0:03:03.440 --> 0:03:06.080 And right now with everything that's going on, all the 0:03:06.200 --> 0:03:10.720 tensions because Russia is invading Ukraine, the US banks are 0:03:10.760 --> 0:03:15.680 preparing for a potential retaliatory cyber attack from Russia. 0:03:15.720 --> 0:03:18.560 In the topic of cybersecurity, we're seeing that blow up. 0:03:18.600 --> 0:03:21.360 Even in entertainment. So I already mentioned inventing Anna, and 0:03:21.400 --> 0:03:24.160 we talked about Tender Swindler, but there's also the Matrix, 0:03:24.280 --> 0:03:26.919 So the old one and the reboot and Enemy of 0:03:26.960 --> 0:03:27.519 the State. 0:03:27.360 --> 0:03:28.200 Too, Yes? 0:03:28.800 --> 0:03:29.840 Is that the one with Will Smith? 0:03:30.160 --> 0:03:30.520 Yes? 0:03:30.919 --> 0:03:34.840 Yes? So what do we want to know? 0:03:35.240 --> 0:03:37.800 I want to know what's being collected? What are y'all 0:03:37.800 --> 0:03:39.640 taking off of my phone in my computer? 0:03:39.960 --> 0:03:41.080 What are you doing with it? 0:03:41.400 --> 0:03:42.320 Why do you want it? 0:03:42.600 --> 0:03:43.000 Yes? 0:03:43.720 --> 0:03:46.960 First and foremost, why I am very born. You want 0:03:46.960 --> 0:03:49.960 to see all these silly pet videos? I don't know why. 0:03:50.120 --> 0:03:53.640 And then what's legal versus what's illegal? What are people 0:03:53.840 --> 0:03:58.080 allowed to do with our information? Whatever they're collecting? My 0:03:58.200 --> 0:03:59.880 question is what is rants? 0:04:00.160 --> 0:04:04.880 Where? Here are a lot of things like ransomware, spyware? Where? Where? 0:04:05.520 --> 0:04:07.480 Where is all the stuff coming? 0:04:07.600 --> 0:04:09.160 Where isn't the where? Yeah? 0:04:09.600 --> 0:04:11.400 I don't understand any of it, and so I just 0:04:11.440 --> 0:04:14.720 want like clear definitions for all of this stuff. 0:04:14.920 --> 0:04:17.200 Yeah, and like you said, who wants our stuff? Are 0:04:17.240 --> 0:04:20.440 we the common people? Are we the targets of these 0:04:20.480 --> 0:04:23.680 types of cyber attacks? Or are they like high value 0:04:23.720 --> 0:04:26.640 assets like on mission impossible? Is it for the common people? 0:04:26.839 --> 0:04:28.479 Right? Because I feel like there's not enough money in 0:04:28.480 --> 0:04:30.480 my bank account for y'all to want to hack it. 0:04:30.720 --> 0:04:33.760 Yeah, I don't understand. But if I am a target 0:04:35.080 --> 0:04:37.440 just in case, what do I need to do to 0:04:37.480 --> 0:04:37.920 be safe? 0:04:37.920 --> 0:04:38.120 You know? 0:04:38.240 --> 0:04:40.160 Because Norton isn't out here anymore? 0:04:40.440 --> 0:04:41.680 No, I have Norton on myself. 0:04:42.040 --> 0:04:44.480 Nobody's here to save me. So what do I need 0:04:44.560 --> 0:04:44.800 to do? 0:04:44.920 --> 0:04:46.440 That's just out of how old we are. 0:04:47.520 --> 0:04:48.680 That's all right, I'm okay with that. 0:04:49.080 --> 0:04:50.400 Let's jump into the dissection. 0:04:53.839 --> 0:04:56.080 Our guest for today's lap is Christina Morillo. 0:04:56.360 --> 0:04:58.640 My name is Christina Marillo. I am based out of 0:04:58.640 --> 0:05:02.080 New York City. I am in information security and technology 0:05:02.279 --> 0:05:06.599 practitioner with about two decades of combined experience and everything 0:05:06.640 --> 0:05:10.680 from enterprise technology, information security, cloud. 0:05:11.440 --> 0:05:15.200 Christina recently published a book called ninety seven Things Every 0:05:15.360 --> 0:05:19.080 Information Security Professional Should Know, and it's a practical guide 0:05:19.120 --> 0:05:21.839 from a variety of information security experts. 0:05:22.080 --> 0:05:25.360 So we ask Christina, what exactly is cybersecurity? 0:05:25.640 --> 0:05:30.480 Cybersecurity is pretty much the practice of protecting systems, networks, 0:05:30.520 --> 0:05:34.120 and programs from digital attacks. It's like the equivalent of 0:05:34.279 --> 0:05:36.920 an intruder coming into your home and taking your stuff 0:05:37.040 --> 0:05:39.080 right or accessing or touching your stuff. 0:05:39.680 --> 0:05:41.479 I can't imagine somebody coming to my house and just 0:05:41.520 --> 0:05:43.720 touching stuff. Oh that just seems gross. 0:05:43.720 --> 0:05:46.599 That makes me feel sick, even when I think about 0:05:46.640 --> 0:05:50.279 stuff that I'm looking at on my phone, things that 0:05:50.320 --> 0:05:52.680 I'm saving. Like, I know, I share a lot of links, 0:05:52.680 --> 0:05:54.440 but I don't want everybody all up in my stuff. 0:05:54.440 --> 0:05:57.040 And I don't know about it exactly exactly. I don't 0:05:57.080 --> 0:05:58.520 know about you, but I keep a lot of tabs 0:05:58.560 --> 0:06:00.480 in bookmarks. What would you do if you lost all 0:06:00.520 --> 0:06:01.080 of that, I. 0:06:01.000 --> 0:06:03.400 Wouldn't even know where to begin. I think a problem 0:06:03.440 --> 0:06:05.880 that I have now is that because I use my 0:06:06.000 --> 0:06:09.760 phone and my finger on my computer to enter my passwords, 0:06:09.839 --> 0:06:12.120 I don't remember my passwords anymore. I don't feel like 0:06:12.200 --> 0:06:15.159 I have to. But I know it's important because if 0:06:15.240 --> 0:06:17.920 all that stuff was wiped away, I would still need 0:06:17.960 --> 0:06:20.520 to have access to all of my things, yes, like 0:06:20.560 --> 0:06:23.640 my email and everything that requires a password, right, So 0:06:23.640 --> 0:06:25.000 I would feel some type of way. 0:06:25.240 --> 0:06:29.880 And so all of this, you know, quote unquote stuff, numbers, passwords, 0:06:29.960 --> 0:06:33.040 all of these things, and also like browsing behavior and 0:06:33.120 --> 0:06:35.800 what we like and don't like. It's really hard to 0:06:35.880 --> 0:06:40.239 understand what's legally collected versus, you know, what's illegally collected. 0:06:40.279 --> 0:06:43.400 So let's start with the legal collection of our stuff 0:06:43.600 --> 0:06:44.240 on the Internet. 0:06:44.400 --> 0:06:47.480 The reason why data is collected in the first place 0:06:47.720 --> 0:06:51.720 is to help answer like everyday questions, right, evaluate outcomes, 0:06:51.800 --> 0:06:54.480 and also make predictions about trends. So all of our 0:06:54.560 --> 0:06:55.480 data is valuable. 0:06:55.680 --> 0:06:57.760 So this changes how we've been thinking about it. T 0:06:57.880 --> 0:07:00.839 t Absolutely, people want to know when we see a page, 0:07:00.880 --> 0:07:02.440 what we clicked on, why we clicked on it, to 0:07:02.480 --> 0:07:04.320 help them understand what's useful. 0:07:04.480 --> 0:07:06.400 Yeah, like if you come to this website, what are 0:07:06.440 --> 0:07:09.520 most people clicking on? So that it gives like a 0:07:09.560 --> 0:07:12.280 lot of people information like what's most popular? What are 0:07:12.280 --> 0:07:15.360 people interested in? Christina likes to think about data in 0:07:15.480 --> 0:07:18.520 four categories. The first is personal data. 0:07:18.720 --> 0:07:23.160 That's like any personally identifiable information like social security numbers 0:07:23.520 --> 0:07:27.760 or your gender, even your IP address, your device ID. Right, 0:07:27.840 --> 0:07:29.840 like stuff that can be tied back to you as 0:07:29.840 --> 0:07:31.240 a human, as an individual. 0:07:31.360 --> 0:07:35.600 And in addition to personal data, there's also engagement data. 0:07:35.520 --> 0:07:38.200 So that's how customers interact with the business. So that 0:07:38.240 --> 0:07:42.840 could be like social media apps, texts, navigating to different websites. Right, 0:07:42.920 --> 0:07:45.600 everyone is now aware of the cookie pop up that 0:07:45.640 --> 0:07:47.040 comes up, which is super annoying. 0:07:47.120 --> 0:07:49.600 We see this all the time on websites. But what 0:07:49.800 --> 0:07:50.960 exactly are cookies? 0:07:51.120 --> 0:07:56.440 Cookies are pretty much little software programs that retain information. 0:07:56.880 --> 0:08:00.480 As an example, they retain maybe your pre di for instance, 0:08:00.640 --> 0:08:03.120 if you like your website icons to be larger when 0:08:03.160 --> 0:08:06.280 you visit CNN dot com, if you always search for 0:08:06.280 --> 0:08:09.920 a specific topic, you know, if you have favorites listed 0:08:10.000 --> 0:08:13.040 on the site for any reason. Also, you're signing your 0:08:13.040 --> 0:08:16.200 logging information This is like little pieces of software that 0:08:16.240 --> 0:08:19.120 are downloaded onto your computer to retain your history. 0:08:19.520 --> 0:08:23.920 The cookie pop up is something that depending I might 0:08:24.000 --> 0:08:27.160 just say, fine, whatever, just accept, but sometimes I take 0:08:27.160 --> 0:08:29.600 this time. I'm like, no, just only collect what is 0:08:29.680 --> 0:08:32.400 necessary or whatever it says, like I switch all those 0:08:32.440 --> 0:08:36.160 things off. But I think my default is just like except. 0:08:35.840 --> 0:08:38.800 No manage my settings. One trust. I want those things 0:08:38.880 --> 0:08:41.560 all off. I only want the bare minimum that they need. 0:08:41.760 --> 0:08:44.920 They're taking advantage of the impatient folks. I'm like, move 0:08:45.000 --> 0:08:47.360 this thing out the way, let me see this toothpaste. 0:08:47.559 --> 0:08:50.839 Then there's like behavioral data, So that's transactional information, so 0:08:50.960 --> 0:08:53.760 your purchase history, usage. You know, when you swipe that 0:08:53.840 --> 0:08:56.840 credit card, you swipe that debit card, all of that 0:08:56.880 --> 0:09:00.080 information is being stored the credit card to you. There 0:09:00.160 --> 0:09:03.960 is the time, the location the store all of that information. 0:09:04.200 --> 0:09:06.559 And last is attitudinal data. 0:09:06.559 --> 0:09:09.920 That's more about consumer satisfaction. So that's like looking at 0:09:09.920 --> 0:09:12.920 criteria to purchase an item or a service. 0:09:13.120 --> 0:09:14.840 That's a lot of different kinds of data. I think 0:09:14.920 --> 0:09:17.600 previously I would have thought it was all just one thing. 0:09:17.760 --> 0:09:22.520 So we've hit personal data, engagement data, behavioral data, and 0:09:22.559 --> 0:09:24.160 then attitudinal data. 0:09:24.280 --> 0:09:27.760 Yeah, I think most people just think it's your passwords. Yeah, 0:09:28.320 --> 0:09:29.240 that's all they're selling. 0:09:29.320 --> 0:09:32.400 And so all of these things can be legally collected. 0:09:32.720 --> 0:09:35.000 But where does it all go? That's my question? 0:09:35.080 --> 0:09:37.480 Yeah, and how are companies using that data? 0:09:37.600 --> 0:09:40.240 So once you have all of this information, all of 0:09:40.240 --> 0:09:44.400 this information is like dumped into the terabytes and petabytes 0:09:44.520 --> 0:09:46.000 on hard drives and databases. 0:09:46.080 --> 0:09:49.840 Right from there, the data is organized into large data sets. 0:09:50.200 --> 0:09:54.280 Then the companies hire data scientists to develop software to 0:09:54.440 --> 0:09:57.480 analyze the data sets, and from this they can use 0:09:57.480 --> 0:10:00.560 the data to discover patterns and make p dictions. 0:10:00.840 --> 0:10:03.480 So they take all this data and then they can say, okay, 0:10:03.480 --> 0:10:05.520 well we can predict that. You know, I don't know 0:10:05.600 --> 0:10:08.920 the twenty twenty one Nissan is going to sell more 0:10:08.960 --> 0:10:11.040 than any other vehicle in twenty twenty two. 0:10:11.320 --> 0:10:15.240 So okay, if there's a lot of engagement around a 0:10:15.280 --> 0:10:18.920 big collection or something that comes out, people can't predict. 0:10:19.080 --> 0:10:20.760 This is going to make a big splash. People are 0:10:20.760 --> 0:10:22.280 going to spend a lot of money here. People are 0:10:22.280 --> 0:10:26.720 clicking here, there's this much interest. Maybe companies adjust once 0:10:26.760 --> 0:10:29.320 they see how people are responding to things they put out. 0:10:29.400 --> 0:10:30.960 Right, Yeah, and I can see how that can be 0:10:31.040 --> 0:10:33.760 valuable to a business. You want to know where to 0:10:33.760 --> 0:10:36.880 put your marketing dollars. So you're like, if I know 0:10:37.000 --> 0:10:40.200 that everybody wants this twenty twenty one Nissan, I'm going 0:10:40.280 --> 0:10:42.480 to put my marketing dollars behind that twenty twenty one 0:10:42.559 --> 0:10:46.240 Nissan and not another car, because then it just be 0:10:46.280 --> 0:10:48.160 wasting money. Or if I am, I'm just going to 0:10:48.280 --> 0:10:50.800 like put more here and a little bit less there. 0:10:50.880 --> 0:10:53.120 That makes a lot of sense. And this really highlights 0:10:53.120 --> 0:10:56.520 what Christina told us is the motivation behind collecting this 0:10:56.640 --> 0:10:57.600 data in the first place. 0:10:57.880 --> 0:11:00.400 At the end of the day, though, it truly about 0:11:00.480 --> 0:11:03.760 getting us to buy more or use more of something. 0:11:04.240 --> 0:11:06.960 So, just like you said, TT companies are using this 0:11:07.000 --> 0:11:11.440 for marketing. They're trying to create specific targeted marketing campaigns. 0:11:11.520 --> 0:11:14.480 It's getting us to use more social media, getting us 0:11:14.520 --> 0:11:17.400 to buy more at Target. Right, Like, for example, when 0:11:17.440 --> 0:11:19.480 you go to Target and you go in to buy soap, 0:11:19.559 --> 0:11:22.120 but you coincidentally walk out with like four hundred dollars 0:11:22.120 --> 0:11:24.560 worth of stuff that you didn't really need. It's not 0:11:24.679 --> 0:11:25.719 by coincidence. 0:11:25.840 --> 0:11:28.480 Right. There have been so many times where I have 0:11:28.840 --> 0:11:33.000 online shop and I'm like, I just need a plane 0:11:33.440 --> 0:11:36.680 white blouse and next thing, I know, my car is 0:11:36.720 --> 0:11:40.920 filled with fourteen items and I've got to figure out 0:11:41.200 --> 0:11:43.120 what is going on and how did those items get 0:11:43.120 --> 0:11:46.240 in there. I know I put them there, but it 0:11:46.400 --> 0:11:48.920 just feels like everything is being put in front of 0:11:48.960 --> 0:11:51.320 me in a very specific way that makes me want 0:11:51.400 --> 0:11:52.040 to purchase. 0:11:52.280 --> 0:11:55.320 Do you know how on some of the sites, it'll say, Okay, 0:11:55.360 --> 0:11:58.240 you're looking at this white blouse, and other shoppers who 0:11:58.240 --> 0:12:01.000 looked at this also looked at this tan belt with 0:12:01.040 --> 0:12:03.640 this gold detail. Yes, I want that with my white glass. 0:12:03.880 --> 0:12:06.960 You know, they also like I'm like, oh no, you 0:12:07.040 --> 0:12:07.960 know I also like. 0:12:08.040 --> 0:12:10.920 This, yes, And so all of that, I guess is 0:12:11.000 --> 0:12:15.240 behavioral and attitudinal data that is being collected to inform 0:12:15.280 --> 0:12:18.439 my shopping, to make me continue to shop. I'm reinforcing 0:12:18.480 --> 0:12:20.959 the algorithm because you know, I'm adding it to my cart. 0:12:20.920 --> 0:12:25.920 Always, always, always. All of this feels a little bit creepy, but. 0:12:25.960 --> 0:12:29.000 It is legal and it is working. It is right. 0:12:29.080 --> 0:12:31.400 I wanted to see that, and I think that's the 0:12:31.440 --> 0:12:34.680 strangest part. Do you remember TT when we went to 0:12:35.080 --> 0:12:36.239 we were in New York. 0:12:36.280 --> 0:12:38.240 Yes, I know this story, and we. 0:12:38.080 --> 0:12:41.840 Were shopping and I was really torn on these pink Adidas. 0:12:42.000 --> 0:12:44.720 They were what Stella McCartney, Yes, I think they might 0:12:44.760 --> 0:12:46.640 have been Stella McCartney. And they had this really interesting 0:12:46.640 --> 0:12:49.360 gum soul that was pinkish reddish, but it was really 0:12:49.360 --> 0:12:52.560 giving me all the vibes I needed. And we stood 0:12:52.559 --> 0:12:54.240 there and I was like, Oh, I just bought an 0:12:54.240 --> 0:12:55.480 orange Stella McCartney hat. 0:12:55.520 --> 0:12:55.880 Instead. 0:12:56.800 --> 0:13:01.360 We left and that shoe showed up everywhere. Yeah, and 0:13:01.880 --> 0:13:03.679 any chance there was for me to get an ad 0:13:04.040 --> 0:13:04.719 it showed up. 0:13:04.800 --> 0:13:07.800 It also showed up for me. Yeah, I got Instagram 0:13:07.840 --> 0:13:11.880 ads about that specific shoe, which let us know that 0:13:12.320 --> 0:13:16.320 even like where you're standing within a store, Like some 0:13:16.440 --> 0:13:19.920 of these businesses have worked with companies that let them 0:13:20.120 --> 0:13:22.520 track where you're standing, how long you're standing there. 0:13:22.360 --> 0:13:25.120 Bluetooth Wi Fi all even if you don't connect, you 0:13:25.240 --> 0:13:28.040 still have device IDs, right, and that's your personal information. 0:13:28.440 --> 0:13:31.240 And so this divitation kids, we know it likes this 0:13:31.400 --> 0:13:32.920 type of stuff, Hugh. 0:13:33.480 --> 0:13:34.800 And it's all legal. 0:13:35.080 --> 0:13:38.679 Yes, it's all of these statistics, and it's all around 0:13:38.679 --> 0:13:41.800 the data science and the psychology around it. It's usually 0:13:41.840 --> 0:13:46.120 coordinated by like different demographics, right, it could be based 0:13:46.160 --> 0:13:49.959 on age, sex, location, how much you make if you've 0:13:50.000 --> 0:13:50.880 gotten your education. 0:13:51.360 --> 0:13:53.960 And some companies don't just use data for their own 0:13:54.000 --> 0:13:57.960 marketing purposes, they also package and sell the data to 0:13:58.000 --> 0:14:02.440 different companies and organizations. Christina points to Facebook as one example. 0:14:02.720 --> 0:14:06.400 They collect a bunch of information, including attitude and on data. Right, 0:14:06.720 --> 0:14:10.280 they know of you're feeding, side, depressed, lonely, and they're 0:14:10.320 --> 0:14:14.760 able to then serve up content that matches your mood, 0:14:14.840 --> 0:14:18.000 your demographic, how much money you make, what you like, 0:14:18.080 --> 0:14:18.720 et cetera. 0:14:18.520 --> 0:14:18.880 Et cetera. 0:14:19.040 --> 0:14:21.280 I'm not a big Facebook user, but I can say 0:14:21.360 --> 0:14:24.640 on Instagram, yes, if something is happening and I like 0:14:24.800 --> 0:14:27.840 one of those you know, text posts, and I'm like, hmm, 0:14:28.200 --> 0:14:31.120 if wait and see, or if I can show you 0:14:31.120 --> 0:14:32.520 better and I can tell you was a person when 0:14:32.520 --> 0:14:35.280 I'm feeling spicy, and I like that. It serves me 0:14:35.360 --> 0:14:37.600 up more content just like that, even if I'm not 0:14:37.640 --> 0:14:39.160 following people exactly. 0:14:39.480 --> 0:14:43.600 Look at your explore page. Your explore page is curated 0:14:43.760 --> 0:14:46.920 based off of the posts that you like, and my 0:14:47.080 --> 0:14:49.600 explore page does not look like your Explore page. 0:14:49.680 --> 0:14:49.760 Right. 0:14:49.760 --> 0:14:54.600 As a kid, yes, mine is all cooking videos, sassy quotes, and. 0:14:56.440 --> 0:14:56.960 Animals. 0:14:58.200 --> 0:15:02.960 Mine is like eyebrow babies acting silly I don't even 0:15:03.000 --> 0:15:04.040 know travel blog stuff. 0:15:05.120 --> 0:15:08.840 And now Instagram also has suggested posts in the feed, 0:15:09.000 --> 0:15:11.800 so they're constantly giving us content so that we'll say yes, 0:15:11.840 --> 0:15:13.200 I like it, no I don't. They're just trying to 0:15:13.240 --> 0:15:14.560 learn what we like and don't like. 0:15:14.800 --> 0:15:16.800 The more they learn about you, the better they can 0:15:16.880 --> 0:15:20.560 serve you. Now, because Facebook collects all of this data, 0:15:20.600 --> 0:15:24.160 that makes them extremely valuable. Because now if I'm another corporation, 0:15:24.240 --> 0:15:26.160 let's say I'm Colgate and I want to sell you 0:15:26.200 --> 0:15:29.560 more toothpaste, I need to know how you tick, why 0:15:29.640 --> 0:15:31.880 you shop, how you feel a certain way, how I 0:15:31.920 --> 0:15:35.600 can market to you as the consumer or to your demographic. 0:15:36.080 --> 0:15:38.440 And so I would go to a company like Facebook 0:15:38.440 --> 0:15:40.560 and I would say, Okay, can I buy this data set? 0:15:40.680 --> 0:15:43.080 Can I pay a charge to access this data set? 0:15:43.360 --> 0:15:47.080 Or can I pay a feed to market on your platform? 0:15:47.120 --> 0:15:49.800 Because I want to sell more toothpaste and the demographic 0:15:49.840 --> 0:15:52.080 I really want to sell to, you know, our top 0:15:52.240 --> 0:15:54.800 users on Facebook. What a lot of people don't understand 0:15:54.920 --> 0:15:57.240 is that when we do not pay for a service, 0:15:57.440 --> 0:15:58.400 we are the product. 0:15:58.760 --> 0:16:02.400 Zakia, you say this all the time. 0:16:02.840 --> 0:16:06.720 Yes, if you're not paying for it, you're on the shelf, baby. 0:16:06.600 --> 0:16:09.800 Okay, nothing in this life is free. You paying somehow. 0:16:10.600 --> 0:16:12.400 We don't pay for Twitter, we don't pay for Facebook, 0:16:12.440 --> 0:16:15.560 we don't pay for Google, we don't pay anything. What 0:16:15.680 --> 0:16:17.200 we pay with is our data. 0:16:17.400 --> 0:16:20.160 We don't pay cash, but we pay an information about 0:16:20.200 --> 0:16:23.440 who we are, what we believe, what we're interested in, 0:16:23.720 --> 0:16:27.320 what we will buy. All of those things, inform companies 0:16:27.360 --> 0:16:30.400 and help them make money off of our clicks, off 0:16:30.480 --> 0:16:33.080 what we choose to share. All of those things are 0:16:33.240 --> 0:16:36.280 just embedded into the process. You can feel kind of helpless, 0:16:36.320 --> 0:16:38.760 right because if you don't choose to let this information 0:16:38.840 --> 0:16:48.520 be shared, you can't use the site. Do you remember 0:16:48.520 --> 0:16:51.360 when there were all those emails coming out about companies 0:16:51.440 --> 0:16:52.840 updating their privacy policy. 0:16:53.440 --> 0:16:56.400 Yes, Oh my gosh, that was a wild time. I 0:16:56.560 --> 0:16:57.840 completely forgot about that. 0:16:57.880 --> 0:17:00.000 It was like everybody was sending emails at the same time. 0:17:00.120 --> 0:17:02.880 I'm about what they would and would not collect and 0:17:02.920 --> 0:17:04.919 all of this stuff. And that wasn't even tied to 0:17:04.960 --> 0:17:05.800 the United States. 0:17:06.000 --> 0:17:09.520 Right. In May twenty eighteen, the General Data Protection Regulation 0:17:09.800 --> 0:17:12.920 or GDPR was put into effect. And this is an 0:17:12.920 --> 0:17:16.439 Internet privacy and security law passed by the European Union. 0:17:16.600 --> 0:17:20.200 But since the Internet is global and most websites process 0:17:20.320 --> 0:17:24.960 data from EU citizens. It pretty much affected the entire Internet, and. 0:17:24.920 --> 0:17:29.360 So what did that mean for our privacy? As users 0:17:29.400 --> 0:17:30.359 of these websites. 0:17:30.480 --> 0:17:33.439 People basically own their data. They have a right to 0:17:33.520 --> 0:17:37.480 delete their data, to collect their data, to request that 0:17:37.560 --> 0:17:39.879 a company delete their data. So because of that, there 0:17:39.880 --> 0:17:42.560 has been a lot of legislation around privacy and more 0:17:42.560 --> 0:17:48.120 discussions around privacy and security. So now companies have to 0:17:48.160 --> 0:17:51.680 tell us that they're collecting and what they're collecting. It's 0:17:51.720 --> 0:17:55.960 a great win for privacy. It's a terrible hit to useability. 0:17:56.080 --> 0:17:59.240 It makes experience terrible because people rarely know what they're 0:17:59.280 --> 0:18:02.800 clicking on. People also don't know what they're being asked 0:18:02.840 --> 0:18:03.359 to click on. 0:18:03.840 --> 0:18:06.280 Yes, it slows down the process where you're going from 0:18:06.280 --> 0:18:07.080 site to site. 0:18:07.240 --> 0:18:09.320 Yeah, Like I said, if I'm in a rush, I'm 0:18:09.359 --> 0:18:11.879 just hitting accept because I just need to get to 0:18:12.000 --> 0:18:13.919 what I'm looking for. And I'm like, I don't have 0:18:14.000 --> 0:18:16.600 time for this. Yes, except the cookies. I love cookies, 0:18:16.600 --> 0:18:19.280 It's perfect. I prefer chocolate chill and so I just 0:18:19.359 --> 0:18:21.199 click accept and keep it moving. You know. 0:18:21.320 --> 0:18:24.080 Another option is to use Duck Duck Go. That's a 0:18:24.119 --> 0:18:28.400 browser that limits what can be collected about your browsing activity. 0:18:28.440 --> 0:18:30.320 My mom actually put me onto Duck duck Go. 0:18:30.760 --> 0:18:33.600 Really mm hmyh VICKI you want it. 0:18:34.640 --> 0:18:37.480 I use a browser called Duck Duck Go. I use 0:18:37.520 --> 0:18:39.520 it when I want to go navigate something and I 0:18:39.560 --> 0:18:43.040 don't want to be trapped or I don't want any 0:18:43.160 --> 0:18:46.119 potential malicious by whear or anything to be installed. 0:18:46.200 --> 0:18:49.560 I think this helps us get a really solid understanding 0:18:49.720 --> 0:18:52.880 of what all the various types of data are, how 0:18:52.920 --> 0:18:55.280 it's being used by companies. I mean, it seems like 0:18:55.320 --> 0:18:58.080 it's being used in aggregate, you know, so in groups 0:18:58.400 --> 0:19:01.679 to understand trends and behavior and what people like. And 0:19:01.720 --> 0:19:04.240 all this stuff is legal. But we're going to take 0:19:04.240 --> 0:19:05.760 a break and when we come back, we're going to 0:19:05.840 --> 0:19:08.359 talk about the things that are illegal. So what happens 0:19:08.400 --> 0:19:11.320 when there's a data breach or a cyber attack, and 0:19:11.400 --> 0:19:13.600 what we can do to keep our data protected. 0:19:27.320 --> 0:19:30.520 We're back and we've been talking to expert Christina Morillo 0:19:30.640 --> 0:19:34.120 about data privacy and how to have more control over 0:19:34.160 --> 0:19:36.600 the data that's shared with companies online. 0:19:36.800 --> 0:19:39.800