1 00:00:00,160 --> 00:00:03,240 But you'll have those same organizations that have that 2 00:00:03,680 --> 00:00:08,039 doing draconian password reset rules, like change your password 3 00:00:08,360 --> 00:00:12,800 every. 90. Days and it's got to be 16 4 00:00:12,800 --> 00:00:15,400 characters long, It's got to have upper and lower. 5 00:00:15,640 --> 00:00:20,480 It's got to, you know, it can't have been reused in the last 20 6 00:00:20,480 --> 00:00:23,120 passwords. And it's like, man, you're not 7 00:00:23,120 --> 00:00:26,280 following like the NIST recommendations. 8 00:00:26,560 --> 00:00:33,000 And if you think you can do it better than NIST, yeah, yeah, 9 00:00:33,480 --> 00:00:35,760 so. You know what drives me crazy is 10 00:00:35,840 --> 00:00:39,840 you've got, you know, a modern, very good authentication 11 00:00:39,840 --> 00:00:43,400 platform like an Azure or even an Octa, and you've got all the 12 00:00:43,400 --> 00:00:47,760 bells and whistles and you don't enforce MFA everywhere, right? 13 00:00:47,920 --> 00:00:50,120 You've got some other system that's like, ah, we don't have 14 00:00:50,120 --> 00:00:52,640 MFA on that one, but hey, we've got it on these other, you know, 15 00:00:52,640 --> 00:00:55,400 80 systems. Guess where? 16 00:00:55,480 --> 00:00:57,160 Guess where the targeted attacks are gonna go? 17 00:01:02,520 --> 00:01:07,720 This is identity at the center. If it has anything to do with 18 00:01:07,800 --> 00:01:15,240 IAM, this is the go to podcast now your hosts Jim McDonald and 19 00:01:15,240 --> 00:01:23,400 Jeff Stedman. Welcome to the Identity at the 20 00:01:23,400 --> 00:01:25,240 Center podcast. I'm Jeff and that's Jim. 21 00:01:25,240 --> 00:01:27,120 Hey, Jim. Hey, Jeff, how are you? 22 00:01:27,640 --> 00:01:31,360 Oh, not so bad yourself. Well, it's been a comedy of 23 00:01:31,360 --> 00:01:33,920 errors, technically, to get this episode started. 24 00:01:33,920 --> 00:01:38,880 So given all that, I'm, I'm good, I'm in a good mood. 25 00:01:39,160 --> 00:01:41,840 You know, next week we're going to be out in Las Vegas. 26 00:01:41,840 --> 00:01:47,320 I guess by the time this episode drops, it'll be this week in Las 27 00:01:47,320 --> 00:01:50,120 Vegas for Advent reverse. It's feels like we've been 28 00:01:50,120 --> 00:01:52,280 talking about it for the last six months, right? 29 00:01:52,520 --> 00:01:54,360 I think we have been talking about it for the last six 30 00:01:54,360 --> 00:01:56,400 months, but yeah, it is finally here. 31 00:01:56,400 --> 00:01:58,680 I think let's see, it'll be Monday when people listen to 32 00:01:58,680 --> 00:02:03,080 this and we'll probably be running around somewhere getting 33 00:02:03,080 --> 00:02:04,760 set up and prepped and ready to do stuff. 34 00:02:04,760 --> 00:02:07,080 But I think the the conference itself doesn't start till 35 00:02:07,080 --> 00:02:09,560 Tuesday. So yeah, we'll get forward to. 36 00:02:10,320 --> 00:02:12,400 It, yeah. I mean, I'm not trying to pat 37 00:02:12,400 --> 00:02:15,040 ourselves on the back or like congratulate ourselves. 38 00:02:15,040 --> 00:02:19,040 But you know, putting out a podcast requires a lot more work 39 00:02:19,040 --> 00:02:23,800 than the hour and 15 minutes that the podcast recording is. 40 00:02:23,880 --> 00:02:27,360 The output is right and the conference is especially like we 41 00:02:27,360 --> 00:02:30,200 have to get there a little bit early, kind of map out where 42 00:02:30,200 --> 00:02:34,440 we're going to be, make sure we have power and all the things 43 00:02:34,440 --> 00:02:36,880 that we never had to worry about before. 44 00:02:37,680 --> 00:02:40,200 It's a different set of, it's a different set of problems. 45 00:02:40,440 --> 00:02:44,000 Like, you know, at home it's Internet, certainly power and 46 00:02:44,240 --> 00:02:47,200 just the weirdness that AV can have a different OSS and 47 00:02:47,200 --> 00:02:49,520 browsers and stuff like that. But yeah, it gets you a 48 00:02:49,520 --> 00:02:50,960 conference. And the thing that I care about 49 00:02:50,960 --> 00:02:54,960 is that is there a power outlet within reach, right of where 50 00:02:54,960 --> 00:02:57,320 we're going to be recording so that we can do that. 51 00:02:57,320 --> 00:02:59,840 But yeah, it's it's going to be fun. 52 00:02:59,840 --> 00:03:02,320 I think we look forward to seeing a lot of, you know, 53 00:03:02,440 --> 00:03:04,840 friendly faces, new faces, meeting a lot of folks that had 54 00:03:04,840 --> 00:03:08,120 a lot of requests to, you know stop by different vendor booths 55 00:03:08,120 --> 00:03:10,400 and things like that. So I will try to get to as many 56 00:03:10,400 --> 00:03:14,280 as I can, but apologies in advance if I'm not able to hit 57 00:03:14,280 --> 00:03:17,040 everybody, it'll be pretty busy for both of us. 58 00:03:17,720 --> 00:03:21,640 Did you get the request for Ron to come over to his booth and 59 00:03:22,720 --> 00:03:25,800 check out the Belden chocolates? No, I didn't see that one. 60 00:03:26,200 --> 00:03:29,840 OK, well, I'll share that one with you because anybody that's 61 00:03:29,840 --> 00:03:32,840 gonna have chocolates at their booth, I'm suffering by. 62 00:03:32,840 --> 00:03:35,960 Yeah, yeah, that's a good one. I've had a lot of requests to 63 00:03:35,960 --> 00:03:39,840 meet for coffee, and I think if I met all the people for coffee 64 00:03:39,840 --> 00:03:43,160 that have asked, I drink a lot of more coffee than I was 65 00:03:43,160 --> 00:03:46,120 planning on drinking. What happens if you don't drink 66 00:03:46,120 --> 00:03:49,160 coffee like me? Drink a a soda or something like 67 00:03:49,160 --> 00:03:50,640 that. Yeah. 68 00:03:50,880 --> 00:03:54,960 Can we normalize like let's meet for a beverage rather than, you 69 00:03:54,960 --> 00:03:57,000 know, don't push her coffee agenda on me. 70 00:03:59,000 --> 00:04:00,800 Yeah, you're not a coffee guy or a. 71 00:04:00,920 --> 00:04:03,040 Tea guy. No caffeine. 72 00:04:03,160 --> 00:04:04,280 Soda. One or the other. 73 00:04:04,400 --> 00:04:10,160 Yeah, no, not of the above. So, So what should people do if 74 00:04:10,160 --> 00:04:15,640 they want to, you know, reach out and kind of like either set 75 00:04:15,640 --> 00:04:18,640 up time or at least let us know that they'd like to meet. 76 00:04:18,640 --> 00:04:21,959 Because anybody who wants to meet me, I want to meet them. 77 00:04:23,200 --> 00:04:26,360 I mean, LinkedIn probably is the best way get messages that way. 78 00:04:26,360 --> 00:04:28,120 I mean, just walk up and say hello. 79 00:04:28,120 --> 00:04:31,760 Or even if it looks like we're busy, just at least walk up, say 80 00:04:31,760 --> 00:04:32,880 hello. We'll try to make as much time 81 00:04:32,880 --> 00:04:36,760 as we can come stop by what's at Copper Leaf 7, where we're going 82 00:04:36,760 --> 00:04:39,360 to be recording and, you know, watch an episode and try to 83 00:04:39,360 --> 00:04:41,640 catch us. Maybe, you know, before or after 84 00:04:41,640 --> 00:04:44,200 an episode begins or ends, like, that's probably the best, the 85 00:04:44,240 --> 00:04:46,000 best spot. But seriously, you know, for 86 00:04:46,000 --> 00:04:48,960 anybody who wants to say hello or get a official fist bump of 87 00:04:48,960 --> 00:04:52,320 gratitude for listening, just literally just, you know, grab 88 00:04:52,320 --> 00:04:55,320 my arm or say hey Jeff or whatever, I'm happy to to stop 89 00:04:55,320 --> 00:04:57,880 and chat. Absolutely, yeah. 90 00:04:57,880 --> 00:05:02,400 Someone, someone messaged me and you know the real listener when 91 00:05:02,400 --> 00:05:06,400 they bring up something you said on one of the episodes, and it 92 00:05:06,400 --> 00:05:10,160 was, I was in the Atlanta airport the other day and I it 93 00:05:10,160 --> 00:05:11,960 didn't smell like a bathroom to me. 94 00:05:12,800 --> 00:05:14,520 It didn't for me either. I gotta tell you, I had a 95 00:05:14,520 --> 00:05:19,320 terrible flight home from Chicago that lasted from Sunday 96 00:05:19,400 --> 00:05:22,400 into Monday because of weather in the actual area. 97 00:05:23,000 --> 00:05:26,400 And I had to exit the airport and I didn't smell anything. 98 00:05:26,400 --> 00:05:30,000 So you know, if you listen to that episode, hope it sounds to 99 00:05:30,000 --> 00:05:32,840 me or it smelled to me like Atlanta had their their act 100 00:05:32,840 --> 00:05:37,080 together well. You know, I mean, you're like a 101 00:05:37,080 --> 00:05:42,320 pro traveler at this point. And I remember when I first 102 00:05:42,320 --> 00:05:46,680 started traveling, those kind of episodes would drive me badly. 103 00:05:46,960 --> 00:05:50,440 Like, you know you're supposed to be leaving at 4:00 and get 104 00:05:50,440 --> 00:05:53,280 there at 6:00 and then just just delayed, delayed. 105 00:05:53,680 --> 00:05:55,920 They cancel the flight at 1:00 in the morning. 106 00:05:56,720 --> 00:05:59,720 You go take a hotel, sleep for an hour, then come back for a 107 00:05:59,720 --> 00:06:02,040 6:00 AM flight. It gets push, push, push. 108 00:06:02,480 --> 00:06:05,000 You finally wind up getting home at like two or three in the 109 00:06:05,000 --> 00:06:07,800 after. You're just like I probably 110 00:06:07,800 --> 00:06:10,400 could have walked home faster. I definitely could have I I 111 00:06:10,400 --> 00:06:13,400 could have driven home from Chicago faster than it took for 112 00:06:13,400 --> 00:06:16,040 me to get just from Atlanta to Asheville. 113 00:06:16,040 --> 00:06:17,880 I got to Atlanta, no problem from Chicago. 114 00:06:18,720 --> 00:06:21,320 It was just, you know, there's weather and I get it, clouds and 115 00:06:21,320 --> 00:06:23,560 stuff like that. You know first what problems. 116 00:06:23,560 --> 00:06:26,920 You know my magical chair in the sky couldn't get me to where I 117 00:06:26,920 --> 00:06:31,040 needed to go in in the time frame that I expected. 118 00:06:31,120 --> 00:06:33,400 Oh well, what are you going to? Do Yeah. 119 00:06:33,400 --> 00:06:38,000 So you know, as far as the podcasting schedule, we've got 120 00:06:38,000 --> 00:06:40,720 two podcasts lined up on Tuesday morning. 121 00:06:40,720 --> 00:06:43,320 I know a lot of folks are flying in Tuesday morning. 122 00:06:43,800 --> 00:06:46,920 If you're flying in, it's probably, you're probably not 123 00:06:46,920 --> 00:06:52,080 going to get there in time to see us Podcast live Wednesday. 124 00:06:52,160 --> 00:06:54,720 At this point, it's looking like we're not going to be podcasting 125 00:06:54,720 --> 00:06:56,080 on Wednesday. It's like a. 126 00:06:56,120 --> 00:06:59,200 Free day. Like we may pull random stuff to 127 00:06:59,200 --> 00:07:01,320 happen that day. We could, yeah. 128 00:07:01,320 --> 00:07:04,280 But we don't want to make any promises yet because they're not 129 00:07:04,280 --> 00:07:07,280 scheduled, right. But Thursday we should do three 130 00:07:07,280 --> 00:07:10,560 episodes, So mid morning through mid afternoon. 131 00:07:10,880 --> 00:07:14,360 Like you said, Copper Leaf 7 is the room where we'll be. 132 00:07:15,080 --> 00:07:19,440 Hopefully we have like one of these style of, you know, 133 00:07:19,440 --> 00:07:22,560 placards in front of the room, but even if not, you know, 134 00:07:22,560 --> 00:07:25,920 Copper Leaf 7 is where we'll be and we would love to have you 135 00:07:25,920 --> 00:07:29,440 just drop in and listen. Yeah, come see the session. 136 00:07:29,440 --> 00:07:33,120 Also that I'm moderating around Cape, Continuous Access 137 00:07:33,120 --> 00:07:35,320 Evaluation profile, shared signals framework. 138 00:07:36,280 --> 00:07:38,480 That'll be fun and interesting. I had a prep session earlier 139 00:07:38,480 --> 00:07:41,760 today with the with the group to talk about what we're going to 140 00:07:41,760 --> 00:07:44,680 talk about. I don't want to spoil the 141 00:07:44,680 --> 00:07:47,800 surprise, but there will be things for audience members to 142 00:07:47,800 --> 00:07:49,840 obtain. I don't want Sean to get mad at 143 00:07:49,840 --> 00:07:52,440 me, so I don't know and I'm not. I don't know if that's a secret 144 00:07:52,440 --> 00:07:55,240 or not, but I would just say if you attend there is the 145 00:07:55,240 --> 00:08:00,880 opportunity to receive something related to Cape and SSF and 146 00:08:00,880 --> 00:08:03,480 things like that. Hopefully that's cryptic enough 147 00:08:03,480 --> 00:08:06,880 to drive people in and I balance the line where Sean doesn't get 148 00:08:06,880 --> 00:08:11,120 out of me. Well, Sean is from Disney. 149 00:08:11,120 --> 00:08:13,640 So when you said it was. I can tell you it's not anything 150 00:08:13,640 --> 00:08:16,320 Disney related. I was disappointed when you said 151 00:08:16,320 --> 00:08:19,040 it was related to Cape and not to Disney. 152 00:08:19,360 --> 00:08:21,440 It is, yeah. It's yeah, it's not the Iron Man 153 00:08:21,440 --> 00:08:23,960 outfit or anything like that. I would love to have like that. 154 00:08:23,960 --> 00:08:25,920 But no, it is. It is not that. 155 00:08:26,240 --> 00:08:29,320 But you know kind of a neat little thing to be to may be 156 00:08:29,320 --> 00:08:31,200 received. Definitely a limited edition, 157 00:08:31,320 --> 00:08:31,920 Let's put it that. Way. 158 00:08:32,880 --> 00:08:34,440 Yeah. The other thing I'll mention is 159 00:08:34,440 --> 00:08:37,000 like if you if you're getting there and you haven't kind of 160 00:08:37,000 --> 00:08:42,360 like solidified your after hour schedule Tuesday night we are Co 161 00:08:42,360 --> 00:08:48,440 hosting an event, Identity the Center Podcast, RSM and Taos 162 00:08:48,440 --> 00:08:53,120 Group were having a happy hour at the Lift bar, which is in the 163 00:08:53,120 --> 00:08:58,160 Aria in my opinion is like the best bar in the area. 164 00:08:58,160 --> 00:09:01,520 I've only been there and Jim would know 'cause one time, but 165 00:09:01,960 --> 00:09:04,720 you know, and I've already formulated opinion on the best, 166 00:09:04,720 --> 00:09:08,760 but I'll say that, you know, we'd love to have folks there. 167 00:09:09,760 --> 00:09:12,040 I'm not really sure where we are in terms of the list. 168 00:09:12,040 --> 00:09:15,320 I'm not managing it this year, but we might already be getting 169 00:09:15,320 --> 00:09:18,400 close to full. But either way, best way to to 170 00:09:18,400 --> 00:09:22,720 reach out is LinkedIn Direct Messages, and we'll keep an eye 171 00:09:22,720 --> 00:09:25,440 on that during the week. Yeah, there's a guest list and a 172 00:09:25,440 --> 00:09:28,720 registration link. So I'm limited spots, so I know 173 00:09:28,720 --> 00:09:30,720 I've sent out a couple already. But if you're interested in 174 00:09:30,720 --> 00:09:32,680 attending, hit us up on LinkedIn. 175 00:09:32,680 --> 00:09:35,440 We can provide the link. And like you said, Jim, we're 176 00:09:35,440 --> 00:09:38,240 not in charge of the list, but you know, hopefully we can, you 177 00:09:38,240 --> 00:09:41,080 know, maybe influencer, we can get some listeners in as well. 178 00:09:41,840 --> 00:09:44,920 Yeah, you and I will probably be hanging out when we do have free 179 00:09:44,920 --> 00:09:47,080 time. We're not podcasting or you're 180 00:09:47,080 --> 00:09:52,680 not facilitating. We'll be at the Taos Group 181 00:09:53,200 --> 00:09:55,840 booth, what they've allowed us to kind of like park ourselves 182 00:09:55,840 --> 00:09:58,040 there. So that's going to be a good way 183 00:09:58,040 --> 00:10:01,160 to to find us as well. Yeah, probably bounce around 184 00:10:01,160 --> 00:10:02,800 between sessions and stuff like that too. 185 00:10:02,840 --> 00:10:06,160 So yeah, you know, actually attending the conference and 186 00:10:06,360 --> 00:10:08,120 hopefully hearing from people and learning stuff. 187 00:10:08,760 --> 00:10:10,720 That's a foreign concept to me, man. 188 00:10:10,720 --> 00:10:14,000 It's like we've gone to the conferences so many times and 189 00:10:14,000 --> 00:10:16,160 like barely been able to go to sessions. 190 00:10:16,160 --> 00:10:19,840 But every year I go determined that this this year is going to 191 00:10:19,840 --> 00:10:21,920 be different. I'm going to hit more sessions. 192 00:10:21,920 --> 00:10:25,040 And you know, this year, especially with Wednesday being 193 00:10:25,040 --> 00:10:29,120 kind of an open day for me, you have the the session, I'll be 194 00:10:29,120 --> 00:10:32,040 there for your session. But before and after that, I'm 195 00:10:32,040 --> 00:10:35,120 planning to hit as many sessions as possible. 196 00:10:35,320 --> 00:10:38,240 And always, as always, the keynotes are, you know, I'm 197 00:10:38,240 --> 00:10:40,280 always there for the cue notes, yeah. 198 00:10:40,320 --> 00:10:42,280 You know, it's is it sad that one of the things I'm looking 199 00:10:42,280 --> 00:10:46,480 forward to is getting a new headshot done. 200 00:10:47,040 --> 00:10:50,920 So you know, pro, pro tip, if you don't have a headshot, go 201 00:10:50,920 --> 00:10:52,720 get one. Like conferences are a great 202 00:10:52,920 --> 00:10:54,840 time to do that. You stand in line for a couple 203 00:10:54,840 --> 00:10:57,720 minutes, you get a few, you know, high quality pictures 204 00:10:57,720 --> 00:10:59,800 taken, and boom, you've got a new headshot. 205 00:11:00,480 --> 00:11:03,240 Absolutely. So during the day when you 206 00:11:03,240 --> 00:11:05,400 decide to wear your business casual clothes. 207 00:11:06,320 --> 00:11:08,440 Right. Or at least not your Metallica 208 00:11:08,440 --> 00:11:10,840 T-shirt crop, right? Or hey, if you want to wear 209 00:11:10,840 --> 00:11:12,680 Metallica sheet AT shirt, that's fine. 210 00:11:12,680 --> 00:11:14,560 I mean, that just more personality, right? 211 00:11:14,560 --> 00:11:17,920 Yeah, who knows, Maybe you know, Metallica's hiring and they want 212 00:11:17,920 --> 00:11:19,760 to look for an identity person to gatekeep. 213 00:11:19,800 --> 00:11:22,000 You know all their their secret recordings. 214 00:11:24,080 --> 00:11:27,400 Probably not, but yeah. Hey man, I can dream. 215 00:11:29,240 --> 00:11:30,440 Yeah. What? 216 00:11:30,560 --> 00:11:33,120 You know, I feel like this is our last chance to do a promo. 217 00:11:33,120 --> 00:11:35,040 Also, for it, should we mention our discount code? 218 00:11:35,440 --> 00:11:38,120 Even though, like, at this point, man, you should, we 219 00:11:38,120 --> 00:11:39,960 really should have registered for you to show up at 220 00:11:39,960 --> 00:11:43,400 identivers, yeah? Yeah, if you're counting the 221 00:11:43,400 --> 00:11:46,040 discount code now, that will be a record. 222 00:11:46,040 --> 00:11:48,840 I don't think anybody's ever used it on the day before the 223 00:11:48,840 --> 00:11:51,240 conference, but right. Why don't you go ahead and give 224 00:11:51,240 --> 00:11:53,240 it one more time? Yeah, and it'll be in our show 225 00:11:53,240 --> 00:11:58,640 notes too, but IDV 2, four dash, IDAC 25, if you like, just 226 00:11:58,640 --> 00:12:01,600 decide on a whim to hop on a plane or you're in the Vegas 227 00:12:01,600 --> 00:12:04,000 here and you're like, oh, I'm going to stop by identiverse and 228 00:12:04,000 --> 00:12:06,840 just casually do that. You know, that gets you 25% off 229 00:12:07,160 --> 00:12:08,840 and hopefully it works on the same day. 230 00:12:08,880 --> 00:12:10,520 Actually, I don't even know. Hopefully it works. 231 00:12:10,520 --> 00:12:14,960 But yeah, if if that's something that you that you forget to 232 00:12:14,960 --> 00:12:16,760 register, that has happened before. 233 00:12:16,880 --> 00:12:21,120 I won't name names, but somebody did show up and it wasn't me. 234 00:12:21,480 --> 00:12:25,840 Showed up and realized that they did not register and had to pay 235 00:12:26,040 --> 00:12:28,760 same day rates to get in the conference. 236 00:12:29,480 --> 00:12:31,120 It's definitely not me this year. 237 00:12:31,160 --> 00:12:35,160 Usually I registered and then I checked with one of our folks on 238 00:12:35,160 --> 00:12:38,240 the inside at the conference to make sure that my registration, 239 00:12:38,520 --> 00:12:41,000 even though I had all the confirmation emails, it's just I 240 00:12:41,560 --> 00:12:45,240 didn't want to be that guy. Yeah, so I know we planned on 241 00:12:45,240 --> 00:12:47,760 making this episode a little bit shorter, but we should probably 242 00:12:47,760 --> 00:12:49,320 talk about something identity related. 243 00:12:50,480 --> 00:12:55,320 There was a report, The 2024 State of Passwordless Identity 244 00:12:55,320 --> 00:12:58,800 Assurance that just came out produced by Hyper. 245 00:12:58,800 --> 00:13:00,480 Do you want to talk a little about that? 246 00:13:00,480 --> 00:13:01,680 Kind of just set the table for you. 247 00:13:03,200 --> 00:13:06,640 Yeah, Yeah. I mean you know the the basis of 248 00:13:06,640 --> 00:13:11,600 the report is about organizations were surveyed in 249 00:13:11,600 --> 00:13:15,720 terms of you know what kind of identity related breaches 250 00:13:15,760 --> 00:13:19,120 they've experienced, what percentage of those 251 00:13:19,120 --> 00:13:21,760 organizations have experienced those breaches. 252 00:13:23,200 --> 00:13:26,080 I think my biggest takeaways, I mean I I went through the 253 00:13:26,080 --> 00:13:30,340 document really quickly and just released yesterday, the take 254 00:13:30,340 --> 00:13:34,320 away was like what a high percentage of organizations are 255 00:13:34,960 --> 00:13:40,640 running into these breaches like something like 75% and of those 256 00:13:40,920 --> 00:13:45,320 like over 90% was either the credentials were fumble or the 257 00:13:45,320 --> 00:13:48,520 authentication was weak. So those are two things that 258 00:13:48,520 --> 00:13:54,160 really jumped out at me. Yeah, I what What jumped out at 259 00:13:54,160 --> 00:13:57,120 you from that report? Well, I had three numbers that I 260 00:13:57,120 --> 00:14:02,440 had picked out and you picked one of them which was 91% of 261 00:14:02,440 --> 00:14:05,840 breached organizations basically said that authentication 262 00:14:05,840 --> 00:14:08,760 weaknesses were a leading cause of why they had an issue. 263 00:14:09,040 --> 00:14:12,160 So that's a lot to attribute to it. 264 00:14:12,160 --> 00:14:14,760 You mentioned this, it was 78% experience, some sort of 265 00:14:14,760 --> 00:14:17,840 identity based attack. I got two other numbers for you. 266 00:14:19,040 --> 00:14:20,400 Let's let's see if you can guess. 267 00:14:21,080 --> 00:14:25,760 The average cost of authentication related breaches 268 00:14:25,760 --> 00:14:31,280 in the last 12 months was X million dollars. 269 00:14:31,560 --> 00:14:35,080 Solve for X. Oh, it's at least one million, 270 00:14:35,080 --> 00:14:36,320 though. You're giving me that hint. 271 00:14:36,520 --> 00:14:38,080 I am. All right. 272 00:14:38,080 --> 00:14:45,360 I was going to say 2 million. Nope. $5.48 million five and a 273 00:14:45,360 --> 00:14:49,480 half basically to solve for to fix you know authentication 274 00:14:49,480 --> 00:14:51,600 related breaches. So you know it's probably a 275 00:14:51,600 --> 00:14:53,600 decent qualification there. They're talking about not all 276 00:14:53,600 --> 00:14:56,840 breaches breaches that were based on authentication. 277 00:14:56,840 --> 00:14:59,480 That's a lot of money you know. Hopefully that gives folks out 278 00:14:59,480 --> 00:15:03,920 there some some ammunition to basically say hey we probably 279 00:15:03,920 --> 00:15:06,520 should have MFA in place and conditional rules, adaptive 280 00:15:06,520 --> 00:15:10,600 rules, maybe go pass worthless or you know the alternative is 281 00:15:10,880 --> 00:15:12,960 this is something you might be looking at paying out in the 282 00:15:12,960 --> 00:15:14,840 future if you have fall prey to this attack. 283 00:15:16,040 --> 00:15:19,080 Yeah, 544 million dollars is going to show up on your annual 284 00:15:19,080 --> 00:15:23,520 report, you know and that's to me kind of one of the litmus as 285 00:15:23,600 --> 00:15:27,360 of you know, how bad was it. It's not something you just kind 286 00:15:27,360 --> 00:15:31,240 of keep within your department and again we'll let that happen. 287 00:15:31,240 --> 00:15:36,720 Again, that's a potentially a career limiting type of event to 288 00:15:36,720 --> 00:15:40,360 take place, so. But I think. 289 00:15:41,600 --> 00:15:43,840 You know who's really surprised by that? 290 00:15:44,240 --> 00:15:47,840 When you talk about like a breach taking place and data 291 00:15:47,840 --> 00:15:52,280 being exfiltrated from your organization or ransomware being 292 00:15:52,280 --> 00:15:57,360 planted on your systems, what What choice do you have really, 293 00:15:57,360 --> 00:16:02,160 but to pay the ransom or at least deal with the consequences 294 00:16:02,160 --> 00:16:04,520 of that? Or if your data is exfiltrated, 295 00:16:05,000 --> 00:16:09,560 providing services like identity protection services to the 296 00:16:09,560 --> 00:16:12,760 individuals affected. Plus your PR groups out there, 297 00:16:12,760 --> 00:16:17,080 like, you know, trying to make it sound like it's not as it 298 00:16:17,840 --> 00:16:20,680 really probably was. Yeah. 299 00:16:20,680 --> 00:16:23,080 So this cost is trying to mount and mount and mount. 300 00:16:24,280 --> 00:16:27,600 Yeah. And if I had, if I had to add up 301 00:16:27,600 --> 00:16:30,880 all the credit monitoring stuff that I have for free because of 302 00:16:30,880 --> 00:16:33,720 breaches, I think I'm good for the next couple decades. 303 00:16:34,080 --> 00:16:35,360 It seems like the de facto thing. 304 00:16:35,360 --> 00:16:41,240 But let's see, there was another number. 89% of organizations 305 00:16:41,240 --> 00:16:44,480 believe passwordless authentication provides the 306 00:16:44,480 --> 00:16:48,520 highest level of security. Now obviously you know this was 307 00:16:48,520 --> 00:16:52,120 hyper and they are a vendor that plays in this space, but that's 308 00:16:52,120 --> 00:16:54,640 a pretty decent number. I wonder what the other 11% 309 00:16:54,640 --> 00:16:57,840 think when it comes to why they don't consider passwordless the 310 00:16:57,840 --> 00:17:01,440 highest level of authentication. I wonder if it's maybe I can I 311 00:17:01,440 --> 00:17:04,200 have any insurance levels or they're thinking maybe you know 312 00:17:04,200 --> 00:17:09,119 some super Uber cryptography and you know or maybe it's the 313 00:17:09,200 --> 00:17:13,480 other. Way around maybe they think MFA 314 00:17:13,480 --> 00:17:16,480 plus password is good enough. Could be. 315 00:17:17,359 --> 00:17:20,640 I mean, you know, it's I'm not going to pick on any 316 00:17:20,640 --> 00:17:25,119 organization specifically, but you see it happen so often where 317 00:17:25,119 --> 00:17:30,480 it's like they have a high end MFA tool like the Azure 318 00:17:30,480 --> 00:17:33,320 Authenticator where it'll throw a number on the screen. 319 00:17:33,320 --> 00:17:36,600 And it used to be like OK pick one of these three hacker, fig 320 00:17:36,600 --> 00:17:41,880 just get lucky. So but now it's like oh you see 321 00:17:41,880 --> 00:17:44,480 the number on the screen if entered in. 322 00:17:44,480 --> 00:17:49,240 So like, I think that MFA tool is really strong, but you'll 323 00:17:49,240 --> 00:17:53,160 have those same organizations that have that doing draconian 324 00:17:53,160 --> 00:17:59,960 password reset rules like change your password every. 90 days and 325 00:17:59,960 --> 00:18:01,960 it's. Got to be 16 characters long. 326 00:18:01,960 --> 00:18:03,680 It's got to have upper and lower. 327 00:18:03,960 --> 00:18:08,800 It's gotta, you know, it can't have been reused in the last 20 328 00:18:08,800 --> 00:18:11,440 passwords. And it's like, man, you're not 329 00:18:11,440 --> 00:18:14,560 following like the NIST recommendations. 330 00:18:14,880 --> 00:18:21,320 And if you think you can do it better than NIST, yeah, yeah, 331 00:18:21,760 --> 00:18:24,080 so. You know what drives me crazy is 332 00:18:24,120 --> 00:18:28,120 you've got, you know, a modern, very good authentication 333 00:18:28,120 --> 00:18:31,680 platform like an Azure or even an Octa, and you've got all the 334 00:18:31,680 --> 00:18:36,080 bells and whistles and you don't enforce MFA everywhere, right? 335 00:18:36,240 --> 00:18:38,800 You've got some other system that's like, we don't have MFA 336 00:18:38,800 --> 00:18:41,160 on that one, but hey, we've got it on these other, you know, 80 337 00:18:41,160 --> 00:18:43,720 systems. Guess where? 338 00:18:43,760 --> 00:18:45,440 Guess where the targeted attacks are gonna go? 339 00:18:46,560 --> 00:18:48,120 Yeah. Yeah. 340 00:18:48,120 --> 00:18:53,760 So I think that could explain some of the other 11%. 341 00:18:53,920 --> 00:18:58,000 I think there's also just a portion of the population that 342 00:18:59,320 --> 00:19:03,960 probably doesn't know. Yeah, because pastoralist is 343 00:19:03,960 --> 00:19:08,360 like on the multi, wouldn't call it like multiple choice. 344 00:19:10,080 --> 00:19:11,720 They might just say. That's not a real thing. 345 00:19:11,720 --> 00:19:14,080 You can't get rid of passwords. It's not a real thing. 346 00:19:14,080 --> 00:19:16,280 They're not keeping it up and it's like no, this is real. 347 00:19:16,280 --> 00:19:20,720 It's really your now. But I so from what I've been 348 00:19:20,720 --> 00:19:24,360 reading is that one of the things that we're going to have 349 00:19:24,360 --> 00:19:29,080 Andrew Shakyar as one of our guests at Identiverse and so 350 00:19:29,800 --> 00:19:33,160 supposedly he's going to announce some news right here. 351 00:19:33,160 --> 00:19:37,160 So make sure you're downloading episodes over the next two weeks 352 00:19:37,160 --> 00:19:40,720 as we're dropping them. But what I've I've read 353 00:19:40,720 --> 00:19:44,080 somewhere was that Fido is starting to say, OK yeah we we 354 00:19:44,160 --> 00:19:48,480 kind of like come so far with the past years and it's the best 355 00:19:48,480 --> 00:19:52,280 form of authentication for web applications like possession 356 00:19:52,280 --> 00:19:56,440 based authentication. But now, what's the next? 357 00:19:56,760 --> 00:20:02,360 What's the next? Generation of improvement and 358 00:20:02,360 --> 00:20:06,400 it's like the identity verification process, you know, 359 00:20:06,760 --> 00:20:12,200 doing a validated or verified credential, I'll say you're not 360 00:20:12,240 --> 00:20:14,680 proofing. Like non web apps is also too 361 00:20:14,680 --> 00:20:18,480 like that's always a challenge is like I don't think like SSO 362 00:20:18,480 --> 00:20:21,960 and MFA is a challenge if you're already online, but what if you 363 00:20:21,960 --> 00:20:24,840 have like a legacy app or an on Prem app or something like that 364 00:20:24,840 --> 00:20:27,880 where it's not web-based right? You say like proxies and stuff 365 00:20:27,880 --> 00:20:29,640 like that. Sometimes that could be an 366 00:20:29,640 --> 00:20:31,800 interesting use case to try to figure out how to put passwords 367 00:20:31,800 --> 00:20:33,480 in front of that. I know there's third party 368 00:20:33,480 --> 00:20:36,040 vendors that that do some of that work, but that could be an 369 00:20:36,040 --> 00:20:38,400 interesting evolution too. Right. 370 00:20:39,040 --> 00:20:41,040 Yeah. But I think like the identity 371 00:20:41,040 --> 00:20:44,440 proofing is really, I mean that resonates with me. 372 00:20:44,440 --> 00:20:48,320 Like if you have the identity right and you're doing an 373 00:20:48,320 --> 00:20:51,280 identity proofing process where you're maybe picking up some 374 00:20:51,280 --> 00:20:56,440 factors that can be used for either the authentication or for 375 00:20:56,440 --> 00:20:59,880 resetting the credentials if you will. 376 00:20:59,880 --> 00:21:03,480 So in other words, you're doing that live selfie test, and so 377 00:21:03,480 --> 00:21:07,800 rather than just having a pass a magic link sent to your e-mail 378 00:21:07,800 --> 00:21:10,600 when you need to reset your password or reset your 379 00:21:10,600 --> 00:21:13,360 credential, you have to go through the live selfie test 380 00:21:13,360 --> 00:21:15,440 again. And are you the same person? 381 00:21:15,720 --> 00:21:19,080 Every single time. Maybe that's when you start 382 00:21:19,080 --> 00:21:21,560 getting into human repention. Oh, here, I know. 383 00:21:21,560 --> 00:21:23,920 Here's what's next. We just what we should invent, a 384 00:21:23,920 --> 00:21:27,240 tiny little camera that sits at the top of your screen and it's 385 00:21:27,240 --> 00:21:29,720 just always watching you to make sure that it's always you. 386 00:21:30,760 --> 00:21:34,920 Big Brother. Yeah, Anything else from the 387 00:21:34,920 --> 00:21:36,720 report that you want to talk about, 'cause we're gonna have a 388 00:21:36,720 --> 00:21:38,400 we'll have a link in our show notes for people to go out and 389 00:21:38,400 --> 00:21:42,360 get a copy of it themselves now. You know, here's like even 390 00:21:42,360 --> 00:21:46,880 though in the end again you mentioned like how this report 391 00:21:46,880 --> 00:21:51,000 came from Hyper and the conclusion that it came to 392 00:21:51,280 --> 00:21:55,920 around Pastor Lewis, definitely, you know, matches up with their 393 00:21:55,920 --> 00:21:59,560 marketing message, I still think it's very beneficial when 394 00:21:59,560 --> 00:22:04,520 organizations are out there and providing real world research to 395 00:22:05,080 --> 00:22:07,960 the community. So I think that's something I 396 00:22:07,960 --> 00:22:11,000 wanted to highlight like when we get an opportunity to to find 397 00:22:11,000 --> 00:22:14,840 these reports, share the information, share the link and 398 00:22:14,840 --> 00:22:17,680 for folks to go out there and download the report, read up on 399 00:22:17,680 --> 00:22:20,200 it. You know, sharpen yourself. 400 00:22:20,200 --> 00:22:22,920 Sharpen your own soul. Yeah, I mean he's little like, 401 00:22:23,080 --> 00:22:26,200 you know, numbers and little Nuggets of information are great 402 00:22:26,200 --> 00:22:28,240 at parties, right? Hey, what's going on era world. 403 00:22:28,240 --> 00:22:31,960 Well, did you know that 75% expect AI to provide an 404 00:22:31,960 --> 00:22:35,480 advantage over over cybercriminals? 405 00:22:36,960 --> 00:22:38,560 I need to read the report and see what that means. 406 00:22:38,560 --> 00:22:41,960 But I mean, certainly AI is everywhere, but you know, now 407 00:22:41,960 --> 00:22:43,960 it's obviously the identity in that security space too. 408 00:22:44,800 --> 00:22:46,320 Yeah, you can tell them. Really fun at parties. 409 00:22:46,560 --> 00:22:49,480 AI And we're gonna be using AI, so it's. 410 00:22:49,600 --> 00:22:51,960 Telling really fun at parties because I'm bringing up facts 411 00:22:51,960 --> 00:22:56,280 like this. Oh yeah, identity parties in any 412 00:22:56,280 --> 00:22:57,360 way. Yeah, exactly. 413 00:22:59,040 --> 00:23:00,320 What else do we want to talk about? 414 00:23:00,320 --> 00:23:01,840 We were trying. We're trying to make this a 415 00:23:01,840 --> 00:23:05,440 little bit of a shorter episode. I think making a shorter episode 416 00:23:05,440 --> 00:23:08,880 makes a lot of sense because we can see if you know, people like 417 00:23:08,880 --> 00:23:14,200 the shorter episodes or if the long format that we've been 418 00:23:14,200 --> 00:23:16,680 doing for the last five years, I think we've been trying to do 419 00:23:16,680 --> 00:23:20,240 shorter episodes for five years and it's like this is going to 420 00:23:20,240 --> 00:23:23,280 be a shorter episode. It winds up being an hour and 15 421 00:23:23,280 --> 00:23:24,520 minutes. Yeah. 422 00:23:24,720 --> 00:23:26,560 I'd be curious to hear from folks if they'd rather have 423 00:23:26,560 --> 00:23:30,360 something that's more like half an hour or an hour or we 424 00:23:30,360 --> 00:23:32,000 generally try to shoot for 45 minutes. 425 00:23:32,000 --> 00:23:34,320 But sometimes conversation is just so good and sometimes it 426 00:23:34,320 --> 00:23:37,360 takes a little bit to get to the actual conversation that we run 427 00:23:37,360 --> 00:23:39,160 a little bit long. But I'm curious to see what 428 00:23:39,160 --> 00:23:43,560 people think and take that feedback and maybe do. 429 00:23:43,560 --> 00:23:46,240 Something we're also like now that we've been doing more video 430 00:23:46,240 --> 00:23:50,120 of, people are enjoying the video or sticking to the audio. 431 00:23:50,440 --> 00:23:54,200 I think we're going to do both, regardless of what people's 432 00:23:55,000 --> 00:23:56,760 opinion is, right your opinion. Doesn't matter. 433 00:23:56,760 --> 00:23:58,360 We're going to do both the. Video opinion doesn't matter, 434 00:23:58,360 --> 00:23:59,760 but please share it with us anyway. 435 00:24:00,000 --> 00:24:06,200 No, but I mean, I've listened to mostly audio podcasts, so I do 436 00:24:06,200 --> 00:24:10,440 watch some podcasts on video that are more like TV shows. 437 00:24:10,440 --> 00:24:13,520 But podcasts like ours I listen to on audio. 438 00:24:14,360 --> 00:24:16,720 We're not doing anything like crazy in the video. 439 00:24:16,880 --> 00:24:18,120 Yeah, I don't listen to podcasts. 440 00:24:18,120 --> 00:24:23,160 Those are stupid. What else? 441 00:24:23,160 --> 00:24:24,600 Anything else? Or should we wrap it up? 442 00:24:25,240 --> 00:24:27,680 Let's wrap it up, man, I was. Trying to think of a lighter 443 00:24:27,680 --> 00:24:29,960 note question, and I didn't really think of anything, so 444 00:24:29,960 --> 00:24:31,920 it's gonna be just kind of off the cuff here. 445 00:24:33,120 --> 00:24:39,040 What is the worst thing that you can think of to do in Vegas next 446 00:24:39,040 --> 00:24:41,280 week? What do you absolutely not want 447 00:24:41,280 --> 00:24:46,480 to do? So don't want to stay out and 448 00:24:46,480 --> 00:24:51,600 party till like the sun comes up because you're probably not 449 00:24:51,600 --> 00:24:54,080 going to go to any of the sessions the following day. 450 00:24:54,320 --> 00:24:58,040 I'm not trying to be like poo poo old grandpa get off my lawn. 451 00:24:58,320 --> 00:25:02,320 I'm just giving some advice. The same advice I think we've 452 00:25:02,320 --> 00:25:08,560 given a million times is like pace yourself and I think that 453 00:25:08,840 --> 00:25:09,800 both. There's always going to be 454 00:25:09,800 --> 00:25:12,280 parties to go to. There's always going to be like 455 00:25:12,400 --> 00:25:17,240 craft stables to go to do those things for doing in moderation. 456 00:25:17,760 --> 00:25:21,120 And then I would say like the to flip the script on that 457 00:25:21,120 --> 00:25:23,840 question. Some things that are fun to do. 458 00:25:23,840 --> 00:25:26,440 I think the shows in Vegas are like, incredible. 459 00:25:26,760 --> 00:25:28,400 Every show I've been to is awesome. 460 00:25:28,640 --> 00:25:31,840 We're doing two different shows that I haven't done before. 461 00:25:32,320 --> 00:25:36,200 One's called Shim Lim. He's a magician over at The 462 00:25:36,200 --> 00:25:38,120 Mirage. The Mirage is only going to 463 00:25:38,120 --> 00:25:42,560 exist for another two months and then we're going to the sphere. 464 00:25:43,200 --> 00:25:45,360 So that's cool. We're just, yeah, I'm really 465 00:25:45,360 --> 00:25:47,800 excited about that. I mean, it just seems like such 466 00:25:47,800 --> 00:25:51,320 a great experience. So how are you? 467 00:25:51,840 --> 00:25:53,560 I don't have any fancy plans like that. 468 00:25:53,560 --> 00:25:55,600 My brother's going to be in town, so we'll probably get some 469 00:25:55,600 --> 00:25:58,320 dim sum off strip or something like that. 470 00:25:59,000 --> 00:26:01,680 But I'm the same way. I think, you know, staying up 471 00:26:01,680 --> 00:26:04,160 all night, that is a a young man's game and I am no longer 472 00:26:04,160 --> 00:26:06,440 that. So I need my beauty sleep to try 473 00:26:06,440 --> 00:26:12,200 and take care of this ugly mug. But I think not taking advantage 474 00:26:12,240 --> 00:26:17,600 of the city of Vegas is something that I don't want to 475 00:26:17,600 --> 00:26:20,200 not do. Great food, great people 476 00:26:20,200 --> 00:26:22,240 watching. This is an opportunity, one of 477 00:26:22,240 --> 00:26:24,840 the best conferences in the year for identity, to talk with 478 00:26:24,840 --> 00:26:27,800 people in the space, get their opinions on things, stuff like 479 00:26:27,800 --> 00:26:28,800 that. So I'm trying to take full 480 00:26:28,800 --> 00:26:30,720 advantage of it can hopefully I can attend more sessions than I 481 00:26:30,720 --> 00:26:33,160 normally do. So I'm hopeful that I will not 482 00:26:33,160 --> 00:26:36,960 be in Copper Leaf 7, just straight editing the whole time. 483 00:26:38,280 --> 00:26:42,200 Yeah. No, I mean, there's so much, 484 00:26:42,280 --> 00:26:45,520 there's so much to experience. So take it all in. 485 00:26:46,120 --> 00:26:48,760 Just pace yourself. All right. 486 00:26:48,760 --> 00:26:51,160 This might be a record for us. The clock that as I'm watching 487 00:26:51,160 --> 00:26:53,400 this is 25 minutes, almost 26 minutes. 488 00:26:53,800 --> 00:26:55,600 We'll go ahead and wrap it up for this week. 489 00:26:55,680 --> 00:26:57,920 We are at Identiverse. If you're listening to this, 490 00:26:57,920 --> 00:27:00,520 come say hello, say hi. We'll be walking around. 491 00:27:00,880 --> 00:27:03,360 Jim got his beard done. He's got a special jacket that 492 00:27:03,360 --> 00:27:07,160 he's going to be wearing. We'll be on Copper Lead 7 doing 493 00:27:07,160 --> 00:27:10,000 podcast recordings. At different points throughout, 494 00:27:10,720 --> 00:27:14,720 I'll be hosting a panel on Cape with some new friends. 495 00:27:15,640 --> 00:27:17,840 Let's see, that's Wednesday at 11:40. 496 00:27:18,120 --> 00:27:21,720 So come out and check that out. And what else on the web? 497 00:27:21,720 --> 00:27:28,440 idacpodcast.com, youtube.com/IDAC or slash at 498 00:27:28,440 --> 00:27:30,720 IDAC Podcast. We'll get you right there. 499 00:27:30,720 --> 00:27:32,280 We have Wink also on our web page. 500 00:27:32,760 --> 00:27:36,440 And let's see what else Macedon IDAC Podcast At Infosex 501 00:27:36,480 --> 00:27:37,920 Exchange, they sent a trend here. 502 00:27:37,920 --> 00:27:40,000 Like IDAC Podcast. You know, wherever. 503 00:27:40,400 --> 00:27:43,200 X You didn't say X or we still doing XI Don't. 504 00:27:43,240 --> 00:27:44,600 Know if I Yeah, we're still there. 505 00:27:44,680 --> 00:27:46,600 I just hadn't decided not to promote it. 506 00:27:46,600 --> 00:27:48,840 But I guess we will as well at IDAC Podcast. 507 00:27:48,840 --> 00:27:50,560 I love that. There you go. 508 00:27:51,040 --> 00:27:52,640 All right. Connect with us on LinkedIn. 509 00:27:52,840 --> 00:27:54,520 If you want to meet up, drop us a note. 510 00:27:54,520 --> 00:27:55,800 We'll do our best to try and do that. 511 00:27:56,080 --> 00:27:58,200 We need to walk up, say hello. We're always happy to meet 512 00:27:58,200 --> 00:27:59,720 folks. Jim's going to have stickers. 513 00:27:59,720 --> 00:28:03,080 I think I'll probably have some as well where I'll resupply as I 514 00:28:03,080 --> 00:28:04,520 see you, Jim, for the first time in a while. 515 00:28:05,560 --> 00:28:07,760 And yeah, like subscribe to all the fun things, you know, share 516 00:28:07,760 --> 00:28:09,440 it with a friend, share with an enemy, don't care as long as 517 00:28:09,440 --> 00:28:12,400 someone's listening or watching. So we'll leave it there. 518 00:28:12,400 --> 00:28:15,160 Thanks everyone for watching or listening and we'll talk with 519 00:28:15,160 --> 00:28:19,560 y'all on the next one. You've been listening to 520 00:28:19,560 --> 00:28:23,440 Identity at the center. We hope you've enjoyed the show. 521 00:28:23,680 --> 00:28:27,720 Make sure to like, rate and review and we'll be back soon. 522 00:28:28,040 --> 00:28:30,320 But in the meantime, hit the website at 523 00:28:30,320 --> 00:28:36,640 identity@thecenter.com. See you next time on Identity at 524 00:28:36,640 --> 00:28:37,600 the center.