1 00:00:00,120 --> 00:00:02,520 You're listening to the awareness angle the podcast 2 00:00:02,520 --> 00:00:05,840 gives you the weekly cyber news with a human twist. 3 00:00:05,880 --> 00:00:09,680 This week, attackers pick up the phone instead of writing code, 4 00:00:09,920 --> 00:00:13,640 fake QR stickers hit real parking metres, and even your 5 00:00:13,640 --> 00:00:16,880 weather app might be quietly fingerprinting you. 6 00:00:17,200 --> 00:00:20,440 All of that and a whole bunch more on this week's show. 7 00:00:32,600 --> 00:00:36,520 With me, as always, is my partner in cybercrime 8 00:00:36,520 --> 00:00:38,480 prevention. I'm sticking with that. 9 00:00:38,480 --> 00:00:40,520 I still like it. It's Luke Pettigrew. 10 00:00:40,520 --> 00:00:43,240 How you doing, Luke? Yeah, I'm yeah, doing well. 11 00:00:43,560 --> 00:00:45,920 How are you? Good, I'm good. 12 00:00:46,120 --> 00:00:48,600 How's your week been? Not too bad, Jeff. 13 00:00:49,480 --> 00:00:51,760 How are you? Yeah, not too bad. 14 00:00:51,760 --> 00:00:54,200 I'm I'm halfway through refurb in the studio. 15 00:00:54,200 --> 00:00:57,560 So it's, it's looking lovely. You can't really see much of it 16 00:00:57,560 --> 00:01:01,360 at the moment, but it's though once it's done there'll be more 17 00:01:01,360 --> 00:01:04,599 content made in here so it'll look, it'll look and sound 18 00:01:04,599 --> 00:01:05,519 better. We're getting there. 19 00:01:05,519 --> 00:01:09,600 We're getting there. Yes, right. 20 00:01:09,600 --> 00:01:12,120 We've mixing things up a little bit. 21 00:01:12,120 --> 00:01:14,720 We're on a continuous improvement programme, so this 22 00:01:14,720 --> 00:01:16,680 week might sound a little bit different to last week, but not 23 00:01:16,680 --> 00:01:19,440 very much. So no breach watch this week? 24 00:01:19,440 --> 00:01:22,640 We've got a breach of the week. Do you like it? 25 00:01:23,680 --> 00:01:25,320 Yeah, that's good. Let's go for. 26 00:01:25,720 --> 00:01:32,120 It OK, so adtech firm Optimisee confirms data breach after a 27 00:01:32,120 --> 00:01:35,720 fishing attack fishing. Let's add that to the if you're 28 00:01:35,720 --> 00:01:37,960 playing ishing bingo, there's fishing. 29 00:01:38,760 --> 00:01:42,280 So Optimisee is notified an undisclosed number of customers 30 00:01:42,280 --> 00:01:46,160 of a data breach because threat actors compromise some of their 31 00:01:46,160 --> 00:01:49,440 systems in a voice phishing attack. 32 00:01:49,840 --> 00:01:53,120 The intruders accessed internal business systems and CRM 33 00:01:53,120 --> 00:01:56,840 records, stealing basic Business Contact information, but 34 00:01:56,840 --> 00:02:00,680 reportedly failed to escalate privileges or access sensitive 35 00:02:00,680 --> 00:02:04,480 customer data. So all the signs point to this 36 00:02:04,480 --> 00:02:08,800 looking very much like shiny hunters who have targeted large 37 00:02:08,800 --> 00:02:13,560 organisations, obviously by impersonating IT support and 38 00:02:13,560 --> 00:02:16,960 tricking stuff into handing over single sign on and MFA 39 00:02:17,200 --> 00:02:20,880 credentials. So Optimisely, do we know much 40 00:02:20,880 --> 00:02:24,520 about Optimisely? I've not heard of them. 41 00:02:25,000 --> 00:02:29,800 Nearly 1500 employees across 21 global offices, Their customer 42 00:02:29,800 --> 00:02:33,840 list includes over 10,000 businesses including names like 43 00:02:33,840 --> 00:02:39,840 H&M, PayPal, Zoom, Toyota, Vodafone, Shell, Salesforce and 44 00:02:40,160 --> 00:02:44,360 Nike, according to the article in Bleeping Computer Optimise. 45 00:02:44,360 --> 00:02:48,480 He told Bleeping Computer that they stole basic Business 46 00:02:48,560 --> 00:02:52,760 Contact information, it was a sophisticated voice phishing 47 00:02:52,760 --> 00:02:55,520 attack and they were unable to escalate privileges, install 48 00:02:55,520 --> 00:02:59,680 software or create any backdoors in the optimising environment. 49 00:03:00,040 --> 00:03:02,760 And we have no evidence that the threat actor was able to access 50 00:03:02,760 --> 00:03:06,080 sensitive customer data or personal information. 51 00:03:06,880 --> 00:03:11,200 So very confident statement, very they want. 52 00:03:11,320 --> 00:03:14,200 To. Unable to escalate privileges, 53 00:03:14,200 --> 00:03:16,560 install software or create any backdoors. 54 00:03:17,000 --> 00:03:21,760 That's like, that's a certainty. I I admire their confidence. 55 00:03:22,640 --> 00:03:25,520 So yeah. So yes, that's the breach of the 56 00:03:25,520 --> 00:03:26,560 week. Optimisely. 57 00:03:26,560 --> 00:03:29,280 If that's the name that your organisation uses, you might 58 00:03:29,280 --> 00:03:31,920 want to reach out to them and find out if you're impacted at 59 00:03:31,960 --> 00:03:33,320 all. Should we get on with the news? 60 00:03:33,320 --> 00:03:34,920 Yeah. Let's go for it. 61 00:03:35,480 --> 00:03:36,480 Excellent. OK. 62 00:03:36,520 --> 00:03:39,920 Do you want to go? First you can go first. 63 00:03:40,480 --> 00:03:43,040 OK, we should, we should we normally talk about this? 64 00:03:43,120 --> 00:03:46,240 We don't always, right? So Royal Canadian Mounted 65 00:03:46,240 --> 00:03:50,880 Police, the RCMPI love that they're still called the Royal 66 00:03:50,880 --> 00:03:54,000 Canadian Mounted Police and you can't picture them without 67 00:03:54,000 --> 00:03:56,880 picturing the programme due South with the guy on the horse 68 00:03:56,880 --> 00:04:00,000 with the massive, massive hat. And I don't know if that's still 69 00:04:00,000 --> 00:04:03,960 what they look like. So the RCMP are investigating 70 00:04:03,960 --> 00:04:10,160 after fraudulent QR codes found on 75 Kelowna parking metres. 71 00:04:10,200 --> 00:04:13,280 Now this might sound like, you know, where is Kelowna? 72 00:04:13,280 --> 00:04:16,920 How does this impact me? This story is a great example of 73 00:04:16,920 --> 00:04:20,680 localised cyber security issues. Police are investigating because 74 00:04:20,680 --> 00:04:24,840 fake QR code stickers were placed on 75 parking metres, 75 00:04:25,440 --> 00:04:29,400 redirecting drivers to a phishing website disguised as 76 00:04:29,400 --> 00:04:32,320 the official parking payment service. 77 00:04:32,600 --> 00:04:35,800 Pay by phone, paid by phone I think is 1 we have over here in 78 00:04:35,800 --> 00:04:39,200 the UK as well. City staff spotted the scam 79 00:04:39,200 --> 00:04:41,760 quickly and removed the stickers within hours. 80 00:04:42,240 --> 00:04:46,160 With no confirmed victims so far, the incident highlights a 81 00:04:46,160 --> 00:04:48,320 growing trend in physical world phishing. 82 00:04:48,800 --> 00:04:51,120 Of course, like we've talked about this loads of times, 83 00:04:51,120 --> 00:04:56,840 haven't we, Where QR codes, they bounced into life during COVID a 84 00:04:56,880 --> 00:04:58,560 long time. For a long time we didn't want 85 00:04:58,560 --> 00:05:00,680 to use them, and then we kind of used them because they were 86 00:05:00,680 --> 00:05:06,120 convenient. But QR codes, man, it's scary. 87 00:05:06,880 --> 00:05:11,800 Yeah, they do get used to a lot. You still see them, but yeah, 88 00:05:11,800 --> 00:05:15,480 they're not hugely common for for sort of crime. 89 00:05:15,480 --> 00:05:16,520 I love them. You see them? 90 00:05:16,520 --> 00:05:17,720 Yeah. Lot on parking metres 91 00:05:17,760 --> 00:05:20,680 potentially. Not for public, they have public 92 00:05:20,720 --> 00:05:24,880 places, but yeah. Do you know it wasn't that long 93 00:05:24,880 --> 00:05:29,800 ago I saw someone that had AQR code reader app on their phone 94 00:05:30,240 --> 00:05:33,120 that was littered littered with adverts and stuff. 95 00:05:33,720 --> 00:05:36,240 So a little public service announcement for anyone 96 00:05:36,240 --> 00:05:38,240 listening that might not be aware. 97 00:05:39,120 --> 00:05:43,000 You don't need a separate app now on Android or iPhone to scan 98 00:05:43,000 --> 00:05:45,440 AQR code. You just open up the camera app 99 00:05:45,960 --> 00:05:50,280 and put it on photo and look it, point it at the QR code and then 100 00:05:50,280 --> 00:05:53,000 it will tell you where that QR code goes. 101 00:05:53,440 --> 00:05:56,160 When we spoke ages ago, always verify where it's going. 102 00:05:56,160 --> 00:06:00,320 We spoke ages ago about I was on a train and the URL didn't quite 103 00:06:00,320 --> 00:06:01,800 match. Like it was really good because 104 00:06:01,800 --> 00:06:05,240 the QR code on the back of the seat said, you know, this is 105 00:06:05,240 --> 00:06:09,240 where this will take you. But the TLD, the extension right 106 00:06:09,240 --> 00:06:12,960 at the end was different when you actually went to scan it and 107 00:06:12,960 --> 00:06:17,200 it was like, oh, that's it. Like it's good but close but not 108 00:06:17,200 --> 00:06:18,240 right. Do you know what I mean? 109 00:06:18,240 --> 00:06:22,760 So yeah, always use the native camera app on your phone, scan 110 00:06:22,760 --> 00:06:26,360 that QR code and then check on the little button before you 111 00:06:26,360 --> 00:06:29,720 press to go to the link that it takes you somewhere where you 112 00:06:29,720 --> 00:06:32,120 would expect to go. Check for spelling errors, check 113 00:06:32,120 --> 00:06:34,360 it matches. Wherever that QR code will be, 114 00:06:34,360 --> 00:06:37,120 will be a web address. You can go manually, type it in 115 00:06:37,120 --> 00:06:38,400 manually would be the preference. 116 00:06:38,400 --> 00:06:42,080 But people like the convenience of AQR code and you can't blame 117 00:06:42,080 --> 00:06:45,520 them, can you? No, they are handy, yeah. 118 00:06:46,840 --> 00:06:51,000 So yeah, 75 on parking metres in Kelowna. 119 00:06:51,920 --> 00:06:54,480 Similar scam was recently discovered in Whistler. 120 00:06:54,960 --> 00:06:58,240 And last August police in Penticton warned the public 121 00:06:58,240 --> 00:07:01,200 about the same scheme. It's not just Canada, this thing 122 00:07:01,200 --> 00:07:05,280 happens everywhere here in the UK, everywhere. 123 00:07:05,280 --> 00:07:09,360 It's a common scam. Yeah, I see it a lot in the news 124 00:07:10,040 --> 00:07:12,920 every now and then, don't you? Yeah, probably trying to avoid 125 00:07:13,560 --> 00:07:15,920 scatting them, right? There's probably other ways to 126 00:07:16,880 --> 00:07:20,440 pay like directly for the app or or a friend number, but even 127 00:07:20,440 --> 00:07:23,880 then the phone number could be fake as well so just got to be 128 00:07:23,880 --> 00:07:26,560 careful. If you see AQR code like if AQR 129 00:07:26,560 --> 00:07:31,080 code is printed on a metal sign then I would probably trust it. 130 00:07:32,200 --> 00:07:35,320 The problem is if that QR code ever changes at any point and 131 00:07:35,320 --> 00:07:37,680 the council have just gone round the slapped a sticker on it 132 00:07:37,680 --> 00:07:42,640 because the service has changed. So a sticker over AQR code 133 00:07:42,640 --> 00:07:46,280 should be a red flag. And then you should proceed with 134 00:07:46,280 --> 00:07:51,000 caution because anyone can print a sticker with AQR code on and 135 00:07:51,000 --> 00:07:53,120 slap it on some. You showed one a couple of weeks 136 00:07:53,120 --> 00:07:57,320 ago where a guy did it on the plane and put AQR code up that 137 00:07:57,560 --> 00:08:00,280 gave people free Wi-Fi on the plane, which was brilliant. 138 00:08:00,280 --> 00:08:02,720 And then when someone went to it, it showed a picture of an 139 00:08:02,720 --> 00:08:04,560 orangutan given the middle finger. 140 00:08:05,400 --> 00:08:10,920 It's that's, that's an example. Trust, trust QR codes with 141 00:08:10,920 --> 00:08:14,400 caution, right? Move on to the next one, Sir. 142 00:08:15,360 --> 00:08:19,080 OK so this one is your Samsung web app is a fingerprint. 143 00:08:19,440 --> 00:08:24,280 This looks like a sub security researcher or some kind called 144 00:08:24,400 --> 00:08:28,160 the tradies for Intel. So it's a blog post. 145 00:08:28,560 --> 00:08:31,240 It goes into a lot of detail on how this works. 146 00:08:31,240 --> 00:08:35,600 Essentially it's they found the pre installed web app on Samsung 147 00:08:35,600 --> 00:08:39,520 devices may and essentially create a persistent tracking 148 00:08:39,520 --> 00:08:42,200 fingerprint. So according to what they've 149 00:08:42,520 --> 00:08:45,880 sort of via researched is that the app sends reoccurring 150 00:08:46,120 --> 00:08:50,680 requests to however API operated by the weather company and that 151 00:08:50,680 --> 00:08:54,760 contains A hashed location identifier which is marked as 152 00:08:54,760 --> 00:08:58,080 place ID and that's tied to save cities. 153 00:08:58,080 --> 00:09:02,520 So it says here that each hash represents a location and 154 00:09:02,520 --> 00:09:06,280 obviously a combination of save locations becomes unique and 155 00:09:06,600 --> 00:09:10,440 could potentially identify a user across sessions and IP 156 00:09:11,280 --> 00:09:14,560 changes in different networks. And this is something you can't 157 00:09:14,880 --> 00:09:17,400 turn off, apparently. Let's look at this separate to 158 00:09:17,400 --> 00:09:19,040 the location permission on on the. 159 00:09:19,680 --> 00:09:23,760 So this could be like you saved your home, your work location, 160 00:09:23,760 --> 00:09:28,720 your family's locations to your to your phone identifies if it 161 00:09:28,720 --> 00:09:31,680 means inside the web app potentially that is what it 162 00:09:31,680 --> 00:09:33,680 means. I mean, basically we wouldn't do 163 00:09:33,680 --> 00:09:39,960 that, but essentially a sort of default system app that is 164 00:09:40,400 --> 00:09:43,480 transmitting a somewhat of a unique identifier in the 165 00:09:43,480 --> 00:09:45,880 background. It's a bit a bit concerning 166 00:09:45,880 --> 00:09:48,520 potentially, but I really don't know how many people would use 167 00:09:48,760 --> 00:09:51,000 simplifications for for weather, but. 168 00:09:52,880 --> 00:09:55,640 Well, yeah, it's funny. If I open up, I'm not a Samsung 169 00:09:55,640 --> 00:09:58,600 user, I haven't been for years. But if I open up the weather app 170 00:09:58,600 --> 00:10:05,240 on my on my phone, I mean, yeah, I've got, and it's whether or 171 00:10:05,240 --> 00:10:10,000 not it is my saved locations, like I've got the town I live, 172 00:10:10,480 --> 00:10:12,800 the town where my kid goes to school, which is quite a way 173 00:10:12,800 --> 00:10:15,800 away. And then three places, three 174 00:10:15,800 --> 00:10:19,200 cities that I've been to in the last kind of six months. 175 00:10:20,000 --> 00:10:22,040 So there is an idea of where I've been. 176 00:10:22,040 --> 00:10:24,600 But if it's actually weather, apps track your location 177 00:10:24,600 --> 00:10:27,680 constantly because if you open it and you can turn that 178 00:10:27,680 --> 00:10:31,440 permission off, Definitely on iPhone you can, but this isn't. 179 00:10:32,040 --> 00:10:36,200 I suppose Samsung's Weather app is just an example of what other 180 00:10:36,200 --> 00:10:40,160 apps could potentially do when an app asks for access to your 181 00:10:40,160 --> 00:10:42,400 location. Yeah, well. 182 00:10:43,240 --> 00:10:49,160 My car app, my SAT NAV app, any some really random eBay asks for 183 00:10:49,160 --> 00:10:51,120 access to your location. Just eat. 184 00:10:51,160 --> 00:10:53,840 You know your food delivery app will ask for access to your 185 00:10:53,840 --> 00:10:54,680 location. It's. 186 00:10:54,680 --> 00:10:57,040 Yeah, yeah. I mean, yeah, listen, 187 00:10:57,040 --> 00:10:59,720 misunderstanding it, this is that, yeah. 188 00:10:59,720 --> 00:11:02,560 So yeah, the weather apps preinstalled and active with 189 00:11:02,560 --> 00:11:06,960 default, the periodic API occurs without user interaction. 190 00:11:07,240 --> 00:11:14,040 And yeah, it doesn't seem to say if you can turn it off, but I 191 00:11:14,040 --> 00:11:18,160 don't think you can on this in this example anyway. 192 00:11:18,160 --> 00:11:25,080 But yeah, a little bit concerning perhaps, Yeah. 193 00:11:26,040 --> 00:11:29,040 So apparently I don't know if you can disable the app. 194 00:11:30,280 --> 00:11:33,640 If that's I think it is a thing maybe on Android where you can 195 00:11:33,640 --> 00:11:37,720 disable pre installed apps, but then you obviously lose the 196 00:11:37,760 --> 00:11:41,760 Samsung web app other web. Apps are available. 197 00:11:42,320 --> 00:11:46,160 Yeah, I don't know if. Any are better, you know, BBC, 198 00:11:46,520 --> 00:11:51,320 you know, Meteo, Met Office, they're three that come to mind 199 00:11:51,320 --> 00:11:54,480 like that and there's lots out there I think. 200 00:11:55,560 --> 00:11:59,440 And the most kind of thing is, even if you turn off your GPS or 201 00:11:59,440 --> 00:12:02,640 use AVPN, it can still identify your device. 202 00:12:03,640 --> 00:12:08,520 Yeah, I think this isn't like this isn't a security incident 203 00:12:08,520 --> 00:12:12,560 in itself that this kind of highlights the potential data 204 00:12:12,560 --> 00:12:16,360 collecting activities that apps like this do that would make 205 00:12:16,360 --> 00:12:19,600 apps like this a potential target for cyber criminals. 206 00:12:20,200 --> 00:12:22,600 Because, you know, in in some ways this comes out. 207 00:12:23,400 --> 00:12:26,520 I could now target that data or try and find a way to access 208 00:12:26,520 --> 00:12:30,080 that data if I wanted to find out someone's location, for 209 00:12:30,080 --> 00:12:33,720 example, you know, it's going to the weather, Was it the weather 210 00:12:33,720 --> 00:12:37,400 company? Yeah. 211 00:12:38,360 --> 00:12:41,000 Yeah. It's interesting details of 212 00:12:41,000 --> 00:12:43,440 that. If you if if that's tickled your 213 00:12:43,440 --> 00:12:47,360 pickle and you want to find out more about that specific thing, 214 00:12:47,720 --> 00:12:50,360 we'll put a link to it in the newsletter and the newsletter's 215 00:12:50,360 --> 00:12:54,040 available at riskycreative.com or search for the Awareness 216 00:12:54,040 --> 00:12:57,440 Angle newsletter on LinkedIn. It comes out every Monday 217 00:12:57,440 --> 00:13:00,120 alongside every episode and contains links to all of the 218 00:13:00,120 --> 00:13:03,760 stories that we talk about and sometimes a little bit more as 219 00:13:03,760 --> 00:13:05,680 well. So we'll put a link to that and 220 00:13:05,680 --> 00:13:11,040 Bochodi's threat Intel on the newsletter, Right? 221 00:13:11,160 --> 00:13:12,200 Shall we move on to the next one? 222 00:13:12,240 --> 00:13:18,920 UK has fined Reddit $19 million for using children's data 223 00:13:19,320 --> 00:13:22,800 unlawfully. So the UK's ICO The Information 224 00:13:22,800 --> 00:13:28,520 Commissioner's Office has fined Reddit £14.47 million for 225 00:13:28,520 --> 00:13:32,640 unlawfully collecting and processing data belonging to 226 00:13:32,640 --> 00:13:37,160 children under 13. Regulators found that the 227 00:13:37,160 --> 00:13:41,760 platform lacked effective age verification controls until mid 228 00:13:41,760 --> 00:13:46,320 2025, which allowed underage users to access the service and 229 00:13:46,320 --> 00:13:49,600 have their data processed without valid consent or 230 00:13:49,600 --> 00:13:52,760 safeguards. Reddit are planning to appeal 231 00:13:53,120 --> 00:13:56,400 and arguing that stricter verification could cause 232 00:13:56,400 --> 00:13:59,160 conflict with user privacy. Interesting. 233 00:13:59,400 --> 00:14:04,400 My kids have asked for Reddit before and I'm an active. 234 00:14:04,520 --> 00:14:07,680 I'm a very active Reddit user. I doom scroll Reddit all the 235 00:14:07,680 --> 00:14:09,680 time. As you probably know from the 236 00:14:09,680 --> 00:14:15,360 topics section on this podcast. But I would not really like my 237 00:14:15,360 --> 00:14:21,400 kids to be on Reddit under the age of 13 and probably not over 238 00:14:21,400 --> 00:14:24,680 the age of 13 as well. So yeah, we've talked about age 239 00:14:24,680 --> 00:14:27,720 verification a lot on here. And I think it's really 240 00:14:27,960 --> 00:14:29,960 important. I know when the Online Safety 241 00:14:29,960 --> 00:14:33,400 Act here in the UK launched Reddit, all of there, we've 242 00:14:33,400 --> 00:14:36,080 talked about it. Reddit locked down not just the 243 00:14:36,080 --> 00:14:40,120 not safe for work content, but mental health channels and stuff 244 00:14:40,120 --> 00:14:42,480 like that. Anything that touched on a topic 245 00:14:42,480 --> 00:14:46,720 that was largely mature like suicide or self harm or stuff 246 00:14:46,720 --> 00:14:50,040 like that. So yeah, it's, it was, but it 247 00:14:50,040 --> 00:14:52,960 was wide open before then, properly wide open. 248 00:14:53,200 --> 00:14:55,560 And it's so easy to create an account without any 249 00:14:55,640 --> 00:14:58,080 authentication or it was then anyway. 250 00:14:58,200 --> 00:15:00,320 I think it's probably harder now. 251 00:15:00,720 --> 00:15:02,920 This is, This is why it's important, isn't it, that you 252 00:15:02,920 --> 00:15:06,560 know who's using your service? The privacy angle I kind of get 253 00:15:06,600 --> 00:15:12,960 like, oh, use a privacy, but I I'm happy to not. 254 00:15:13,200 --> 00:15:17,080 I'm happy for the platform to know who I am as long as it 255 00:15:17,080 --> 00:15:19,640 keeps that data safe or verifies it. 256 00:15:20,880 --> 00:15:23,120 Again, we spoke about this just last week or the week before. 257 00:15:23,760 --> 00:15:26,440 Verification on the device, confirm who I am and confirm my 258 00:15:26,440 --> 00:15:28,320 identity. It's going to come, isn't it? 259 00:15:28,320 --> 00:15:31,120 In a future, if it's not there already, a future version of 260 00:15:31,120 --> 00:15:36,040 Android and iOS will contain a thing where it's like we can 261 00:15:36,360 --> 00:15:41,400 confirm at a device level that this person is this old, this 262 00:15:41,440 --> 00:15:43,600 old, this person is a certain age. 263 00:15:43,600 --> 00:15:46,960 And then that's going to be a security feature that comes in a 264 00:15:46,960 --> 00:15:49,760 version of iOS and Android very, very soon, I would imagine. 265 00:15:50,400 --> 00:15:54,400 Yeah, I think so, especially since we've seen how poor the 266 00:15:54,400 --> 00:15:57,960 third party versions have been. Was it a couple weeks ago the 267 00:15:58,320 --> 00:16:03,360 Discord breach of all the all the IDs and stuff? 268 00:16:03,560 --> 00:16:06,880 Yeah. Driver's licences and passports 269 00:16:06,880 --> 00:16:08,560 and all that kind of stuff. Although it. 270 00:16:08,560 --> 00:16:10,080 Wasn't was. I can't remember if it was 271 00:16:10,080 --> 00:16:12,400 discord or a third party but yeah. 272 00:16:12,520 --> 00:16:14,920 It was the third party that Discord we're using for the 273 00:16:14,920 --> 00:16:19,160 service I think. I mean the ICO only in February, 274 00:16:19,280 --> 00:16:24,840 so this month we're still in February or or at the time of 275 00:16:24,840 --> 00:16:26,840 recording we're still in. I've just realised today's the 276 00:16:26,880 --> 00:16:30,680 last day of February. So unless it's a leap year, is 277 00:16:30,680 --> 00:16:33,240 it a leap year this year? Oh, I don't know. 278 00:16:33,320 --> 00:16:35,120 No, it's. Not tomorrow is the first. 279 00:16:35,120 --> 00:16:36,360 We're recording this on Saturday. 280 00:16:36,360 --> 00:16:40,240 Tomorrow is the first. On the 5th of February there was 281 00:16:40,240 --> 00:16:44,640 a similar penalty issued against Media Lab, which is the owner of 282 00:16:44,680 --> 00:16:55,760 Image Sharing platform Imager. So they will also find a very 283 00:16:55,760 --> 00:17:02,920 small amount in comparison. 247,590 lbs for failing to use 284 00:17:03,360 --> 00:17:05,520 children's personal information lawfully. 285 00:17:05,720 --> 00:17:12,400 Yes, that's essentially what you age verification. 286 00:17:12,400 --> 00:17:14,720 It's really important. And if you're a parent, and 287 00:17:14,720 --> 00:17:17,440 we'll get to more on this in a second, but if you're a parent, 288 00:17:17,440 --> 00:17:21,560 be careful where your kids are patrolling the Internet because 289 00:17:22,400 --> 00:17:26,880 Reddit's not a great place. It's a bit of a cesspit with 290 00:17:26,880 --> 00:17:32,040 some very dark corners. There's a lot of snake pits on 291 00:17:32,040 --> 00:17:34,120 Reddit. It's very easy to venture into 292 00:17:34,120 --> 00:17:37,560 the wrong place. Yeah, right. 293 00:17:37,880 --> 00:17:40,080 Move on to the next one. OK. 294 00:17:40,080 --> 00:17:40,920 And. That's what we've got. 295 00:17:42,520 --> 00:17:45,640 There's a blipping computer article Android mental health 296 00:17:45,640 --> 00:17:49,880 apps with 14.7 million installs of the security flaws served in 297 00:17:49,880 --> 00:17:54,680 a system research by Over Secured. 298 00:17:55,720 --> 00:17:57,120 They're a mobile security company. 299 00:17:57,120 --> 00:18:00,600 And so, yeah, millions of downloads on Google Play for 300 00:18:00,600 --> 00:18:03,840 various mental health mobile apps contains security 301 00:18:03,840 --> 00:18:07,000 vulnerabilities that could expose users sensitive medical 302 00:18:07,000 --> 00:18:11,280 information. They've researched more than 85 303 00:18:11,640 --> 00:18:14,640 medium and high severity vulnerabilities, some of these 304 00:18:14,920 --> 00:18:18,240 AI companions as well. So they're designed for people 305 00:18:18,240 --> 00:18:22,960 to talk to and communicate with. And yeah, they've got like a big 306 00:18:22,960 --> 00:18:27,640 list of different app types and how many installs that apps had, 307 00:18:27,640 --> 00:18:31,360 how many vulnerabilities it had. And they found over 1500 in 308 00:18:31,360 --> 00:18:35,400 total that various sort of degrees of severity. 309 00:18:35,400 --> 00:18:39,720 But basically it says here that most of these issues can then 310 00:18:39,920 --> 00:18:44,480 intercept login credentials, spoof notifications, inject 311 00:18:44,480 --> 00:18:47,920 HTML, locate the user. Quite worrying. 312 00:18:49,440 --> 00:18:52,520 Yeah, Yeah, there's a whole bunch of information here. 313 00:18:52,520 --> 00:18:55,320 I don't know if it says if any of them have sort of been taken 314 00:18:55,320 --> 00:18:59,240 down or updated, but all the details I'm sure we can put in 315 00:18:59,280 --> 00:19:01,560 the newsletter. But yeah, it's not surprising I 316 00:19:01,560 --> 00:19:05,760 guess that all these different apps probably been coded by 317 00:19:05,760 --> 00:19:10,000 someone small and bunch of AI features and stuff. 318 00:19:10,720 --> 00:19:14,400 My initial thought on this was that it was terrible, right? 319 00:19:14,400 --> 00:19:18,120 And that it's, you know, these people have rushed an app out 320 00:19:18,160 --> 00:19:22,320 and it would be really easy to really quickly blame the 321 00:19:22,320 --> 00:19:24,160 developers that have developed these apps. 322 00:19:25,000 --> 00:19:26,920 But then you've just touched on that there. 323 00:19:27,160 --> 00:19:30,760 It's quite possible that these apps have been developed by a 324 00:19:31,120 --> 00:19:35,040 single person who's vibe coded something using AI or has 325 00:19:35,040 --> 00:19:38,240 created an app using AI and it's gone. 326 00:19:38,240 --> 00:19:41,040 Oh, this is really good. And so they're completely 327 00:19:41,040 --> 00:19:43,360 genuine and honest in their intentions. 328 00:19:43,920 --> 00:19:48,160 But because the way AI works and because of the availability of 329 00:19:48,160 --> 00:19:53,120 unchecked and unmanaged AI tooling, there's vulnerabilities 330 00:19:53,120 --> 00:19:55,960 in these. And I'm, I'm guessing the 331 00:19:55,960 --> 00:20:00,000 oversecured, the oversecured scanner is probably a tool that 332 00:20:00,000 --> 00:20:01,400 they're trying that's probably like. 333 00:20:02,280 --> 00:20:05,200 See all these vulnerabilities? Well, now you can subscribe to 334 00:20:05,200 --> 00:20:09,160 the Oversub, you know, that kind of thing, automated mobile app 335 00:20:09,160 --> 00:20:10,800 security. So yeah, they're probably trying 336 00:20:10,800 --> 00:20:14,440 to flog more of their platform. You go to their website and it 337 00:20:14,440 --> 00:20:17,160 says scan your app. So that's, that's a given. 338 00:20:17,680 --> 00:20:21,040 But the fact is that the availability of the tooling now 339 00:20:21,040 --> 00:20:25,480 and it is, you can't blame the tools, you can't necessarily 340 00:20:25,480 --> 00:20:27,520 blame the developers for all of these. 341 00:20:27,960 --> 00:20:31,000 But you look at the names of some of these apps like AI 342 00:20:31,000 --> 00:20:36,440 therapy, chat bot, AI, emotional health platform, health and 343 00:20:36,440 --> 00:20:40,160 symptom tracker, depression management tool, CBT based 344 00:20:40,160 --> 00:20:42,600 anxiety app. There's there's not a lot of 345 00:20:42,600 --> 00:20:46,280 branding or brand identity gone into them, is there? 346 00:20:46,320 --> 00:20:49,120 Especially when you think of some of the more well known apps 347 00:20:49,120 --> 00:20:52,120 like Better Help, you know the the ones that you see 348 00:20:52,120 --> 00:20:55,880 consistently advertised, which I'm assuming have better 349 00:20:55,880 --> 00:21:00,320 security controls in place. Yeah, it doesn't seem to say 350 00:21:00,920 --> 00:21:05,360 much on there's no like links or anything to further information, 351 00:21:05,360 --> 00:21:08,520 but I guess it's all hidden behind their research. 352 00:21:09,520 --> 00:21:10,960 There might be a better link for it maybe. 353 00:21:11,000 --> 00:21:14,480 I was to say that the computer have refrained from sharing the 354 00:21:14,480 --> 00:21:17,400 names of the impacted apps as the vulnerabilities are still 355 00:21:17,400 --> 00:21:23,160 being disclosed by over secured. So I think those app types that 356 00:21:23,160 --> 00:21:25,840 you this column is app. Type, Yeah, sorry, this column 357 00:21:25,840 --> 00:21:29,200 is app type. But if I go to, if I go to, 358 00:21:29,200 --> 00:21:31,160 yeah, I'm sure, yeah. There's probably loads, isn't 359 00:21:31,160 --> 00:21:34,520 there? There's one here, mood and habit 360 00:21:34,520 --> 00:21:37,760 tracker journal that's had all right 5000 downloads. 361 00:21:38,400 --> 00:21:42,240 It's developed by core apps creation that have got a load of 362 00:21:42,240 --> 00:21:48,040 basic apps and it was last updated on the 16th of July last 363 00:21:48,040 --> 00:21:49,720 year. So it hasn't been updated for 364 00:21:50,120 --> 00:21:52,200 seven or eight months? Yeah, it's. 365 00:21:52,400 --> 00:21:53,600 Probably one of those things, isn't it? 366 00:21:53,600 --> 00:21:57,000 Be careful what you're installing from these app 367 00:21:57,000 --> 00:21:59,000 stores, even if they're genuinely installed. 368 00:21:59,880 --> 00:22:02,520 It's just like browser extensions, right? 369 00:22:03,560 --> 00:22:05,440 The other. Thing you can't do as well, if 370 00:22:05,440 --> 00:22:08,720 you look at this on Bleeping Computer, that top app that it 371 00:22:08,720 --> 00:22:11,240 highlights had over 10 million installs. 372 00:22:12,160 --> 00:22:14,600 The next two have got over 1,000,000 installs. 373 00:22:14,600 --> 00:22:18,200 So you kind of that herd mentality lead you to go like 10 374 00:22:18,200 --> 00:22:19,520 million people have downloaded this. 375 00:22:19,960 --> 00:22:22,680 It must be good. You know, you kind of follow the 376 00:22:22,680 --> 00:22:24,240 herd. Oh, a million people have 377 00:22:24,240 --> 00:22:26,320 downloaded that. It's got to be decent. 378 00:22:26,720 --> 00:22:28,200 You know, there can't be anything wrong with it because 379 00:22:28,200 --> 00:22:30,360 otherwise a million people wouldn't have downloaded it. 380 00:22:30,880 --> 00:22:35,120 And it's like, actually. So yeah, it's really tricky. 381 00:22:35,800 --> 00:22:39,040 Yeah, be careful. Who you trust, I suppose, is the 382 00:22:39,240 --> 00:22:42,480 is the question. Headspace has got over 10 383 00:22:42,480 --> 00:22:44,040 million downloads. They're a big name in this 384 00:22:44,040 --> 00:22:46,440 space. I just want to say any of the 385 00:22:46,440 --> 00:22:49,680 names that I'm mentioning, I I'm not saying that they're at 386 00:22:49,680 --> 00:22:52,360 fault. The 2 apps, Headspace. 387 00:22:52,360 --> 00:22:55,960 Here's a good example though. Headspace's app was last updated 388 00:22:56,280 --> 00:22:59,120 9 days ago. So it's actively developed, 389 00:22:59,520 --> 00:23:03,720 actively in support, and actively being maintained. 390 00:23:04,280 --> 00:23:08,120 An app that was last updated nine months, 8 months ago is 391 00:23:08,120 --> 00:23:10,120 probably not something you wanted. 392 00:23:10,320 --> 00:23:13,560 So that would be check how many downloads, check the reviews, 393 00:23:13,560 --> 00:23:16,520 check the permissions, and check the last time the app was 394 00:23:16,520 --> 00:23:21,000 updated, which it tells you on both the Play Store and the App 395 00:23:21,000 --> 00:23:23,760 Store. That's probably not something we 396 00:23:23,920 --> 00:23:27,600 often say a lot. Mind health, CBT, mental health 397 00:23:28,000 --> 00:23:34,480 last updated 2 days ago. 4.7 stars out of five. 398 00:23:34,680 --> 00:23:38,800 So check the reviews, check the last time the app was updated 399 00:23:39,040 --> 00:23:42,720 because that's a good tell. Yeah, definitely right. 400 00:23:43,000 --> 00:23:50,760 OK, the next one, Instagram is to alert parents if teens search 401 00:23:50,760 --> 00:23:54,240 for self harm or suicide content. 402 00:23:54,240 --> 00:23:56,040 And this is an article from the BBC. 403 00:23:56,040 --> 00:24:01,000 In this Meta is rolling out parent alerts on Instagram for 404 00:24:01,000 --> 00:24:06,560 teens that search repeatedly for self harm or suicide related 405 00:24:06,560 --> 00:24:09,520 content. There is a feature called Teen 406 00:24:09,520 --> 00:24:13,880 Account Supervision Tools. Parents in the UKUS Australia 407 00:24:13,880 --> 00:24:18,400 and Canada will be notified next week, with other regions 408 00:24:18,400 --> 00:24:23,080 following later, and the alerts will include expert resources to 409 00:24:23,080 --> 00:24:26,560 guide parents through sensitive conversations. 410 00:24:26,560 --> 00:24:29,680 Charities such as the Molly Rose Foundation have criticised the 411 00:24:29,680 --> 00:24:32,840 measure, a warning that forced disclosures may panic parents. 412 00:24:32,840 --> 00:24:36,480 I was just thinking that to fail to address the underlying risks, 413 00:24:36,800 --> 00:24:40,760 including Instagrams ongoing promotion of harmful content to 414 00:24:40,760 --> 00:24:42,560 vulnerable users, it does kind of. 415 00:24:43,200 --> 00:24:44,640 I don't know. What do you feel about this? 416 00:24:45,680 --> 00:24:48,600 Yeah, it's a tricky one, right? It's, it's kind of a, a good 417 00:24:48,600 --> 00:24:53,560 thing there's, you know, lots of sort of issues like what you 418 00:24:53,560 --> 00:24:56,440 just mentioned there. And yeah, there's obviously 419 00:24:56,520 --> 00:25:01,400 we've seen, yeah, the content available and the age 420 00:25:01,400 --> 00:25:04,160 verification, all that sort of stuff probably needs addressing 421 00:25:04,160 --> 00:25:10,520 and dodgy ads and fake bot accounts and AI generated 422 00:25:10,600 --> 00:25:14,120 accounts that use fake AI generated people sort of thing. 423 00:25:14,720 --> 00:25:17,440 There's lots of other things that probably need addressing as 424 00:25:17,440 --> 00:25:19,760 well, but at least that this is kind of good in a way. 425 00:25:20,360 --> 00:25:24,960 I read out that paragraph and I probably went on a bit of a 426 00:25:24,960 --> 00:25:27,080 roller coaster as I read the different parts of that 427 00:25:27,080 --> 00:25:30,640 paragraph because as a parent, I think great, I want to know 428 00:25:30,640 --> 00:25:34,640 that. And I think I would handle that 429 00:25:34,640 --> 00:25:38,720 situation potentially well if it was one of my own kids, like I'd 430 00:25:38,720 --> 00:25:41,600 be devastated. But you know, I think that I 431 00:25:41,600 --> 00:25:45,160 would perhaps handle that in the right way that would support my 432 00:25:45,160 --> 00:25:48,560 children. I'm not sure all parents would. 433 00:25:48,600 --> 00:25:50,960 And this is the problem. Like a parent gets a 434 00:25:50,960 --> 00:25:54,000 notification of that. Some parents would just panic 435 00:25:54,120 --> 00:25:57,560 and or fly off the handle or I've taken everything away. 436 00:25:57,560 --> 00:25:59,160 You're not having this anymore, blah, blah, blah. 437 00:25:59,160 --> 00:26:02,400 And that's. And yeah, all right, Instagram, 438 00:26:02,400 --> 00:26:04,800 we're going to provide you with some guidance on how to talk to 439 00:26:04,800 --> 00:26:06,400 your child, but that's not the right. 440 00:26:06,400 --> 00:26:09,880 Like not everyone's going to pause for breath and read that 441 00:26:09,880 --> 00:26:11,520 kind of. Some people are just going to go 442 00:26:11,520 --> 00:26:13,760 steaming in. And we know that not everyone 443 00:26:13,760 --> 00:26:16,600 can handle these conversations. Well, you know, I might not be 444 00:26:16,600 --> 00:26:19,440 able to put in that situation. I don't know. 445 00:26:19,440 --> 00:26:23,120 And then, yeah, it does. And then as I further read that 446 00:26:23,120 --> 00:26:26,200 out, you know, I kind of. Yeah, actually this is a bit 447 00:26:26,200 --> 00:26:30,560 like Meta passing the buck. Like the simple thing to do is 448 00:26:30,560 --> 00:26:32,320 to alert the parents when something happens. 449 00:26:32,320 --> 00:26:36,840 How about you make the platform safer using all these amazing AI 450 00:26:36,840 --> 00:26:40,200 tools that you've got and all these millions of pounds and 451 00:26:40,200 --> 00:26:42,160 blah, blah, blah. You know, all of the money in 452 00:26:42,160 --> 00:26:45,680 the world that company has, they should be able to make this 453 00:26:45,680 --> 00:26:49,200 platform safer. As we know, Facebook don't 454 00:26:49,200 --> 00:26:52,000 because they make so much money off dodgy ads and dodgy content 455 00:26:52,000 --> 00:26:54,400 that, you know, money, money rules the world. 456 00:26:54,520 --> 00:26:58,560 So yeah, it's quite, the whole thing is quite a bit of a roller 457 00:26:58,560 --> 00:26:59,920 coaster. I'm kind of torn. 458 00:26:59,920 --> 00:27:03,680 I think it's good, but I also think it's kind of like them 459 00:27:03,680 --> 00:27:07,680 passing the buck. There's a screenshot of what it 460 00:27:07,680 --> 00:27:09,640 looks like. To be honest, it doesn't look 461 00:27:09,640 --> 00:27:17,120 amazing. So alert about your teen safety. 462 00:27:17,600 --> 00:27:21,640 It looks like your teen's account name repeatedly searched 463 00:27:21,640 --> 00:27:24,640 Instagram for content related to suicidal self harm. 464 00:27:25,000 --> 00:27:27,280 When we detect searches for topics like this, we share 465 00:27:27,280 --> 00:27:29,960 resources to help and often block search results. 466 00:27:30,640 --> 00:27:33,680 What you can do to support your team to check on your teen's 467 00:27:33,680 --> 00:27:36,000 safety. Professionals recommend reaching 468 00:27:36,000 --> 00:27:39,600 out and talking to your teen whilst listening calmly. 469 00:27:40,080 --> 00:27:41,880 See how to navigate conversation. 470 00:27:42,040 --> 00:27:45,000 Here's some links to resources. Contact the helpline. 471 00:27:46,080 --> 00:27:50,000 Oh, that's like how many people are going to read that second 472 00:27:50,040 --> 00:27:52,480 paragraph because they're going to read the first part and then 473 00:27:52,480 --> 00:27:56,040 fly into a fit of panic. But like, Oh my God. 474 00:27:56,160 --> 00:27:59,560 And all of a sudden when I like contact their teen, it's that's 475 00:27:59,560 --> 00:28:00,840 not great. That's not great. 476 00:28:01,600 --> 00:28:04,200 Here are some suggestions from outside professionals. 477 00:28:04,920 --> 00:28:08,200 Validate their emotions. Try not to offer solutions or 478 00:28:08,200 --> 00:28:09,800 convince them that things will get better. 479 00:28:10,360 --> 00:28:12,760 I'm here for you. Tell me what's on your mind. 480 00:28:13,400 --> 00:28:16,920 It's just, I mean, like up there for effort. 481 00:28:17,000 --> 00:28:22,920 But really, it's yeah. This, that's that all reads a 482 00:28:22,920 --> 00:28:26,480 bit like a is created that support. 483 00:28:28,680 --> 00:28:31,440 Empathise and listen. You're important to me. 484 00:28:31,640 --> 00:28:33,680 It sounds like you're having a hard time. 485 00:28:35,320 --> 00:28:38,360 I get it. But it's it does sound very much 486 00:28:38,360 --> 00:28:40,960 like AI generated self help content, doesn't it? 487 00:28:41,200 --> 00:28:43,280 It's yeah. Yeah. 488 00:28:43,280 --> 00:28:47,840 Yeah, I it feels like passing the buck to me, but do better 489 00:28:47,840 --> 00:28:49,920 meta. Oh, there's a there's AT shirt 490 00:28:49,920 --> 00:28:52,400 slogan. Do better meta. 491 00:28:53,560 --> 00:28:58,760 All right, morph. Yeah, move on to the next one. 492 00:29:00,080 --> 00:29:03,920 OK, yeah, last one we've got, I saw this one before security 493 00:29:03,920 --> 00:29:07,960 floor allows and to accidentally gain control of nearly 7000 494 00:29:08,360 --> 00:29:12,200 robot vacuums. So this is a The Verge I think 495 00:29:12,200 --> 00:29:16,360 recorded this one. Subsequent researcher Sammy has 496 00:29:16,360 --> 00:29:19,640 to file claimed he wasn't trying to hack every robot vacuum in 497 00:29:19,640 --> 00:29:25,400 the world, he just wanted to control his brand new DGI Romo 498 00:29:25,400 --> 00:29:29,040 vacuum with APS 5 game pad. That seems like something that's 499 00:29:29,040 --> 00:29:31,560 completely unnecessary, but if you want to drive, if you want 500 00:29:31,560 --> 00:29:34,120 to drive your vacuum cleaner around the house, I'm surprised. 501 00:29:34,120 --> 00:29:38,400 There's not a game called like called Robot Vacuum Simulator 502 00:29:38,640 --> 00:29:39,800 where you have there will be now. 503 00:29:40,080 --> 00:29:42,360 There will be. Now, Yeah, there will be now. 504 00:29:43,240 --> 00:29:48,480 So yeah, it says his homegrown remote control app, so maybe he 505 00:29:48,480 --> 00:29:54,320 was trying to build something, but essentially tis app again, I 506 00:29:54,320 --> 00:29:58,760 guess then was basically talking to DJI servers. 507 00:29:58,840 --> 00:30:01,120 Maybe they have like an API of some kind for your vacuum 508 00:30:01,120 --> 00:30:02,120 cleaner. Think I. 509 00:30:02,120 --> 00:30:04,760 Read that it was through an API that he leveraged. 510 00:30:04,920 --> 00:30:07,120 Yeah, but. Basically, it allowed him to 511 00:30:07,120 --> 00:30:10,440 control roughly 7000 of them around the world. 512 00:30:10,440 --> 00:30:14,720 And quite concerningly, he was able to remotely controlled 513 00:30:14,720 --> 00:30:16,440 them. Look and listen through the live 514 00:30:16,440 --> 00:30:19,960 camera feed and they could watch it map out each room of a house, 515 00:30:20,640 --> 00:30:25,280 which generates a 2D floor pan. And then these robots had IP 516 00:30:25,280 --> 00:30:28,040 addresses that of course you could get the rough location 517 00:30:28,040 --> 00:30:32,720 for. And it looks like here there's a 518 00:30:32,720 --> 00:30:38,880 nice picture of a dashboard he built from this. 519 00:30:40,920 --> 00:30:46,000 Which charge? Yeah, a road map with all the 520 00:30:46,000 --> 00:30:53,360 different DJI vacuum cleaners in the world, along with certain 521 00:30:53,360 --> 00:30:56,200 pieces of information up here. So you can see which ones are 522 00:30:56,200 --> 00:30:59,560 cleaning, which ones are idle, which ones are charging, which 523 00:30:59,560 --> 00:31:04,320 households have pets, which have children, battery status as 524 00:31:05,320 --> 00:31:09,440 well. And yeah, probably a few more 525 00:31:09,440 --> 00:31:16,080 bits of information there. And then he was also able to 526 00:31:16,920 --> 00:31:27,760 bring this on to the live feed and control the the robot, which 527 00:31:27,920 --> 00:31:30,800 also seems to have audio, which I don't know why you're 528 00:31:30,800 --> 00:31:35,960 completely need to have sound microphone on it, but yeah, 529 00:31:36,600 --> 00:31:39,360 that's quite terrifying. There's a whole bunch more 530 00:31:39,360 --> 00:31:45,400 information on here with further screenshots, but yeah, and I. 531 00:31:45,400 --> 00:31:48,560 Mean just to comment, right? This is DJI. 532 00:31:49,080 --> 00:31:53,920 So this is one of the big manufacturers, you know, like 533 00:31:53,920 --> 00:31:58,680 DJI are a big player in like connected technology cameras, 534 00:31:58,720 --> 00:32:01,520 you know, action cameras. I've got DJI gimbal for the 535 00:32:01,520 --> 00:32:03,320 phone. You know they make drones. 536 00:32:03,320 --> 00:32:06,800 DJI are a big company. You can almost guarantee that 537 00:32:06,880 --> 00:32:12,160 smaller companies, less mature, less sophisticated, less rich, 538 00:32:12,520 --> 00:32:18,920 are probably even worse. Eventually, yeah, DJI have 539 00:32:18,920 --> 00:32:20,440 packed this up and dealt with it, haven't they? 540 00:32:20,600 --> 00:32:24,160 This has been patched, closed, problems gone away. 541 00:32:24,920 --> 00:32:28,320 So yeah, they've, they identified it in late January 542 00:32:28,320 --> 00:32:33,000 and patched it early February. But yeah, basically I think a 543 00:32:33,000 --> 00:32:35,160 lot of it was sort of unauthenticated. 544 00:32:35,160 --> 00:32:38,080 He only needed the serial numbers of the vacuum cleaner. 545 00:32:38,320 --> 00:32:41,840 And I think it's just in the way that the vacuum FINA reported a 546 00:32:41,840 --> 00:32:44,800 lot of information back to DJI, just just sort of the serial 547 00:32:44,800 --> 00:32:50,280 number and I guess some sort of server was not built correctly. 548 00:32:51,000 --> 00:32:55,360 Misconfigured. Wow, yeah, quite a crazy one. 549 00:32:55,920 --> 00:32:57,160 Yeah, that's. Cool, That's cool. 550 00:32:57,720 --> 00:33:00,440 That's crazy. Like don't don't just think 551 00:33:00,440 --> 00:33:03,080 about what's if. This is the IoT thing, isn't it? 552 00:33:03,080 --> 00:33:05,920 We have so many things connected to the Internet in a house now. 553 00:33:05,920 --> 00:33:09,160 I think Virgin was shocked. Virgin Media, though, I had an 554 00:33:09,160 --> 00:33:12,160 Internet problem ages ago now, like how many devices do you 555 00:33:12,160 --> 00:33:14,760 have connected in your house? And it was like 46 or something 556 00:33:14,760 --> 00:33:17,200 like that. And it's when you think like 557 00:33:17,360 --> 00:33:23,920 cameras, phones, tablets, TV's, you know, streaming devices 558 00:33:23,920 --> 00:33:25,880 fires. Vacuum. 559 00:33:26,160 --> 00:33:28,720 Yeah, yeah. I guess one of those things 560 00:33:28,720 --> 00:33:32,400 right update as well probably don't think the patch you I 561 00:33:32,720 --> 00:33:36,440 don't know if you need to update your your robot vacuum or if 562 00:33:36,440 --> 00:33:40,440 they've fixed it remotely. But again, we can put the 563 00:33:40,440 --> 00:33:42,800 details in the newsletter for that I. 564 00:33:42,880 --> 00:33:45,040 Am these lights I've got behind me? 565 00:33:45,040 --> 00:33:49,720 I bought this week and put them in and they're TP Link. 566 00:33:49,720 --> 00:33:53,000 Yeah, I know TP Link, which is still banned in America, I 567 00:33:53,000 --> 00:33:54,320 think, but I like their products. 568 00:33:54,440 --> 00:33:56,520 But the minute I plugged them in and configured them, it gave me 569 00:33:56,520 --> 00:33:58,840 the option to update the firmware. 570 00:33:58,840 --> 00:34:02,520 So and then I set it to update automatically because even a 571 00:34:02,520 --> 00:34:05,160 pair of even a strip of LED lights could be used to 572 00:34:05,160 --> 00:34:08,320 compromise my network. And just thinking on it, they 573 00:34:08,320 --> 00:34:11,000 have the ability to move in time to the music. 574 00:34:11,199 --> 00:34:13,080 So there's probably a microphone in there. 575 00:34:14,560 --> 00:34:17,199 So if someone could compromise the TP Link servers, they could 576 00:34:17,199 --> 00:34:20,239 probably listen to the behind the scenes of the awareness 577 00:34:20,239 --> 00:34:23,440 angle by by listening to the microphone built into those 578 00:34:23,440 --> 00:34:25,880 lights. That's really, I've never 579 00:34:25,880 --> 00:34:28,320 thought about that before and that's quite scary. 580 00:34:29,600 --> 00:34:31,560 Wow. There's actually a microphone in 581 00:34:31,560 --> 00:34:35,320 the LED strip lights in several places in the house. 582 00:34:36,120 --> 00:34:37,480 Wow. And this is it. 583 00:34:37,480 --> 00:34:39,679 It's all this hidden. Well, yeah, it'd be great 584 00:34:39,679 --> 00:34:42,000 because people might want to use them because then they can dance 585 00:34:42,000 --> 00:34:43,719 and they'll flash in time in the music and. 586 00:34:44,000 --> 00:34:45,679 Oh, that's a nice feature. How does it work? 587 00:34:46,080 --> 00:34:47,560 There's a microphone. Yeah. 588 00:34:47,760 --> 00:34:50,600 Yeah. I don't know if TP Link 589 00:34:50,679 --> 00:34:53,320 transmits microphone data back to TP Link. 590 00:34:53,320 --> 00:34:56,360 OK, so that's disclaimer. I'm just assuming I'm not. 591 00:34:57,640 --> 00:34:58,920 Yeah, sorry. TP Link. 592 00:35:00,920 --> 00:35:02,800 Right. I think that's all the news for 593 00:35:02,800 --> 00:35:04,560 this week. Yeah. 594 00:35:07,000 --> 00:35:09,840 Awareness, Awareness. We were going to touch on this 595 00:35:09,840 --> 00:35:12,200 week. Did you want to do your thing? 596 00:35:13,440 --> 00:35:15,480 Yeah. Quickly Luke showed me 597 00:35:15,480 --> 00:35:17,920 something. Luke showed me something. 598 00:35:17,920 --> 00:35:19,560 And I was like, Oh my God, that's amazing. 599 00:35:19,560 --> 00:35:22,200 How did you do that? And he's like, I'll show you on 600 00:35:22,200 --> 00:35:25,000 the podcast, so the floor is yours. 601 00:35:26,040 --> 00:35:28,760 Yeah, So, I mean, I can't take all the credit for this, but 602 00:35:29,120 --> 00:35:33,600 basically a colleague at work pointed me to Gemini using it 603 00:35:33,600 --> 00:35:39,960 for vibe coding e-learning content basically. 604 00:35:39,960 --> 00:35:44,200 Yeah, you can let me geminize this one example or any talk and 605 00:35:44,200 --> 00:35:46,960 probably do it. You sort of give it all your 606 00:35:46,960 --> 00:35:51,240 requirements, what you want to, what you want it to be about and 607 00:35:51,240 --> 00:35:57,240 ask it to build sort of interactive HTML based piece of 608 00:35:57,240 --> 00:36:00,640 content. So we can probably do one live. 609 00:36:01,720 --> 00:36:06,400 Now if you want to give me a topic, let me just bring up it 610 00:36:06,400 --> 00:36:13,040 could be quite simple, just something like a course on 611 00:36:13,120 --> 00:36:15,120 fishing, how to spot fishing or something. 612 00:36:15,960 --> 00:36:20,200 Yeah, let's do a course on how to. 613 00:36:20,200 --> 00:36:23,640 Is it going to be too technical if I say how to spot click fix? 614 00:36:23,760 --> 00:36:26,360 Is that going to be too much? See what it does? 615 00:36:26,840 --> 00:36:31,560 OK, click fix. A taxi is obviously where you 616 00:36:31,560 --> 00:36:34,080 get a fake capture or something. We've spoken about them before 617 00:36:34,520 --> 00:36:37,560 and it copies something to your clipboard and then it asks you 618 00:36:37,560 --> 00:36:41,360 to do something by pasting code in and running code without you 619 00:36:41,360 --> 00:36:44,400 realising what it does. Does click fix attacks if you've 620 00:36:44,400 --> 00:36:46,640 listened to it before? We talk about it fairly often. 621 00:36:49,400 --> 00:36:51,880 This is obviously the very rough example, right? 622 00:36:51,880 --> 00:36:55,720 You can feed it a lot more information, but obviously 623 00:36:55,720 --> 00:36:59,720 you've given it. I'll read this out for I want to 624 00:36:59,720 --> 00:37:02,760 create an e-learning course module on how to spot click fix 625 00:37:02,760 --> 00:37:04,720 attack. Can you produce this in HTML? 626 00:37:05,600 --> 00:37:09,400 And it responded with creating a module on click fix attacks is a 627 00:37:09,400 --> 00:37:11,200 great move. It's one of the more clever 628 00:37:11,320 --> 00:37:13,000 social engineering tactics. It's always a. 629 00:37:13,000 --> 00:37:15,320 Great move. Yeah. 630 00:37:15,320 --> 00:37:20,160 And basically it says below is a complete responsive HTML for 631 00:37:20,200 --> 00:37:23,600 e-learning module designed to be clean, interactive and easy to 632 00:37:23,600 --> 00:37:26,000 drop into an existing LMS or website. 633 00:37:27,840 --> 00:37:31,080 Obviously the disclaimer that be careful what you're producing 634 00:37:31,080 --> 00:37:34,640 with this and you probably want to keep it internal. 635 00:37:34,640 --> 00:37:37,440 If you're building it for your company and probably don't 636 00:37:37,440 --> 00:37:39,240 exercise it to the Internet, don't go. 637 00:37:39,280 --> 00:37:42,880 Publishing it to the Google Play store because then you're 638 00:37:42,880 --> 00:37:45,720 featuring a bleeping computer news article about an app being 639 00:37:45,720 --> 00:37:47,720 insecure so. Yeah. 640 00:37:48,440 --> 00:37:53,360 So yeah, it produces some code HTML and then it says to make 641 00:37:53,360 --> 00:37:56,680 this course truly effective, I recommend emphasising these 642 00:37:56,680 --> 00:38:00,040 three psychological triggers to attack hackers using Cliff Fix. 643 00:38:00,360 --> 00:38:02,840 Would you like me to add a knowledge check quiz at the 644 00:38:02,840 --> 00:38:06,400 bottom of this code? So I'll just say yes. 645 00:38:09,560 --> 00:38:16,080 So updates the HTML for me. That looks like a separate 646 00:38:16,080 --> 00:38:21,280 section, say combine all together. 647 00:38:24,000 --> 00:38:28,440 So just to confirm, is are you a subscriber to Gemini or is this 648 00:38:28,440 --> 00:38:31,560 free Google Gemini? This is just the free. 649 00:38:32,440 --> 00:38:34,600 This is the. Free Google Gemini that anyone 650 00:38:34,600 --> 00:38:36,000 can access with a Google account. 651 00:38:36,200 --> 00:38:39,240 You haven't paid subscriber. This isn't Gemini Premium or 652 00:38:39,240 --> 00:38:41,920 whatever they call it. No, this is just the free 653 00:38:42,840 --> 00:38:45,160 version of. This is the our workspace 654 00:38:45,160 --> 00:38:46,560 account down on earth. It gives you something 655 00:38:46,560 --> 00:38:50,280 different. We haven't paid for advanced 656 00:38:50,280 --> 00:38:53,520 Gemini on that. So because, yeah, I'm not 657 00:38:53,520 --> 00:38:57,440 generally user, yeah. We'll display what it's got now, 658 00:38:57,440 --> 00:39:00,800 but it continues to say, let's add more and more and more, but 659 00:39:00,840 --> 00:39:06,000 let's just go back to a fresh Gemini because it just seems 660 00:39:06,000 --> 00:39:07,280 like this is the easiest way of doing it. 661 00:39:09,560 --> 00:39:16,240 Basically you copy the code and start a canvas and then just you 662 00:39:16,240 --> 00:39:19,360 could say preview this code and then paste it in. 663 00:39:22,520 --> 00:39:26,000 It brings it up. In like a. 664 00:39:26,000 --> 00:39:32,200 Code editor, eventually it will preview it for me. 665 00:39:32,200 --> 00:39:35,720 I mean, obviously is what you could save this to a HTML file 666 00:39:35,720 --> 00:39:39,600 and open it that way, but this way you can sort of continue to 667 00:39:39,720 --> 00:39:43,400 update it. So it's doing a whole lot of 668 00:39:43,400 --> 00:39:46,720 things. It's finished and this is what 669 00:39:46,720 --> 00:39:49,480 it's produced. So it's now. 670 00:39:49,560 --> 00:39:52,800 The number to page go on. Sorry you go, Yeah. 671 00:39:52,800 --> 00:39:54,240 And as I. Said over the slammers might be 672 00:39:54,240 --> 00:39:58,080 completely wrong and terrible, but obviously it's something 673 00:39:58,080 --> 00:40:01,480 that you can sort of build from. So yeah, it's build built like a 674 00:40:01,480 --> 00:40:04,040 page that pretty generic looking. 675 00:40:04,040 --> 00:40:06,000 You could not ask it to change the aesthetic. 676 00:40:07,360 --> 00:40:11,040 It's called security awareness. The click fix attack explains 677 00:40:11,040 --> 00:40:13,440 what it is has a little golden rule. 678 00:40:13,560 --> 00:40:17,640 Nice read sort of prompted section. 679 00:40:17,640 --> 00:40:19,640 Never use the wrong command. Windows are. 680 00:40:22,680 --> 00:40:29,880 So it goes through how there's different steps, talks about a 681 00:40:29,880 --> 00:40:31,920 bunch of information there. So then it has a little 682 00:40:32,200 --> 00:40:35,800 interactive quiz, it looks like, or some further information. 683 00:40:35,800 --> 00:40:38,840 So spot the red flags like these scenarios to reveal why the 684 00:40:38,840 --> 00:40:42,720 dangerous website claims arrow font not found and asked for a 685 00:40:42,720 --> 00:40:46,360 system fix. A little bit of information 686 00:40:46,360 --> 00:40:52,880 there. Small knowledge check here you 687 00:40:52,880 --> 00:40:55,680 see a pop up saying Chrome update failed run the following 688 00:40:55,680 --> 00:40:57,520 fix ask you to copy a block of text. 689 00:40:57,520 --> 00:41:01,360 What do you do? You click fix to say secure or 690 00:41:01,360 --> 00:41:03,960 close the tab and check Chrome settings manually. 691 00:41:03,960 --> 00:41:07,000 So let's say, oh, click fix to say secure. 692 00:41:07,720 --> 00:41:11,080 We failed that one. And again, you can you could 693 00:41:11,680 --> 00:41:16,360 enhance how this is portrayed. So we could say, let's give this 694 00:41:17,400 --> 00:41:21,360 really interactive and modern. That's it. 695 00:41:22,840 --> 00:41:27,160 Again, you probably want to be a bit more specific on your 696 00:41:27,160 --> 00:41:31,840 prompts, but this is a quick example. 697 00:41:31,840 --> 00:41:34,880 We're knocking this. Out quickly for a demo on a 698 00:41:34,880 --> 00:41:38,360 podcast. This isn't yeah, but it just. 699 00:41:38,360 --> 00:41:40,760 Shows like yeah, you could give it a bunch of information and 700 00:41:40,760 --> 00:41:46,720 build out something that's relatively decent, a bit more of 701 00:41:46,720 --> 00:41:48,520 it. Let's give this a really 702 00:41:48,520 --> 00:41:49,920 interactive and modern aesthetic. 703 00:41:49,920 --> 00:41:52,160 And the response has been I will update the training module with 704 00:41:52,160 --> 00:41:54,080 a more immersive modern aesthetic. 705 00:41:54,640 --> 00:41:59,360 This version includes a Glass Morphism inspired UI, smooth CSS 706 00:41:59,360 --> 00:42:02,200 transitions, A dynamic live simulation area. 707 00:42:02,560 --> 00:42:05,240 And now it looks like a vibe coded website because it's got 708 00:42:05,240 --> 00:42:09,120 those like blue gradient tones and the floating curved boxes. 709 00:42:09,120 --> 00:42:13,160 And yes, yeah. What was a little error there, 710 00:42:13,160 --> 00:42:16,320 but it's just all that. So yeah, it's sort of changed 711 00:42:16,320 --> 00:42:20,800 the change the look relatively the same to be honest. 712 00:42:21,560 --> 00:42:26,480 But yeah, I'll bring up another example quickly of what I showed 713 00:42:26,480 --> 00:42:32,040 you. So yeah, similar sort of thing 714 00:42:33,440 --> 00:42:38,280 about phishing emails and I asked it to give it 8 bit games 715 00:42:38,280 --> 00:42:43,680 console style interface. And so, yeah, basically built 716 00:42:44,440 --> 00:42:48,320 this sort of Game Boy looking device. 717 00:42:48,960 --> 00:42:55,240 Called the defender. Running SEC OS version 1 and 718 00:42:55,480 --> 00:42:59,720 yeah, sort of like a gamified version of of some training, 719 00:42:59,720 --> 00:43:00,920 right? You could, you could embed this 720 00:43:00,920 --> 00:43:05,840 into a web page. Obviously there's no back end to 721 00:43:05,840 --> 00:43:08,800 like track results. You could probably implement 722 00:43:08,800 --> 00:43:12,600 that if you wanted to. But again, I will say there's a 723 00:43:12,600 --> 00:43:16,320 few visual errors occurring. So you'd sort of need to spend 724 00:43:16,320 --> 00:43:19,760 some time to fix it. But and as well you'd need like 725 00:43:19,760 --> 00:43:21,840 a instructions of how to play this right. 726 00:43:21,840 --> 00:43:26,400 But essentially you can you presented with an e-mail. 727 00:43:27,360 --> 00:43:31,360 It's all sort of a bit gamified and a bit shortened in a way. 728 00:43:31,360 --> 00:43:38,280 So it's from admin talks. User pass expires in 120 729 00:43:38,280 --> 00:43:39,960 minutes. Probably want to say password on 730 00:43:39,960 --> 00:43:44,560 this one update or lose all Q3 files and there's a little 731 00:43:44,560 --> 00:43:46,480 button there that you can hover over and it pops up. 732 00:43:46,880 --> 00:43:49,840 You can't really see that, but it's like a domain. 733 00:43:50,880 --> 00:43:52,520 How long? Did it take you to make that? 734 00:43:53,960 --> 00:43:57,360 This was just a few minutes, so the fact. 735 00:43:57,360 --> 00:44:00,080 You've gone from nothing to that in just a few minutes. 736 00:44:00,080 --> 00:44:02,440 Yeah, it needs mopping up in places you know, and it needs 737 00:44:02,440 --> 00:44:06,080 tweaking, which you can do. But this is an example of how 738 00:44:06,080 --> 00:44:10,560 the barrier you have an idea or not even really an idea. 739 00:44:10,560 --> 00:44:14,320 You have like the the seeds of an idea on I want to do 740 00:44:14,320 --> 00:44:18,200 something that looks maybe in that kind of theme on this 741 00:44:18,200 --> 00:44:21,000 topic. And then within just a couple of 742 00:44:21,000 --> 00:44:25,320 minutes, you get that like, it's incredible. 743 00:44:26,120 --> 00:44:29,160 It's quite cool. So yeah, you can essentially 744 00:44:29,160 --> 00:44:30,440 build it out if you want it to be. 745 00:44:30,440 --> 00:44:33,680 This is like 3 levels of phishing emails, right? 746 00:44:33,680 --> 00:44:36,720 So you've you've select the red flags. 747 00:44:36,720 --> 00:44:39,280 So you've successfully identified that one. 748 00:44:40,680 --> 00:44:43,120 I've clicked on the button and I failed here. 749 00:44:43,120 --> 00:44:46,240 So it pops up like I didn't even ask it to do this either. 750 00:44:46,520 --> 00:44:49,200 It just, it just did it. So it sort of popped up as a 751 00:44:49,200 --> 00:44:53,640 fake ransomware. Your device is being encrypted 752 00:44:53,880 --> 00:44:57,880 and you can view the report which gives you the red flags 753 00:44:59,480 --> 00:45:01,520 displayed on the that the content had. 754 00:45:02,280 --> 00:45:05,440 And obviously I was successful at identifying one of them, but 755 00:45:06,440 --> 00:45:09,000 I failed the rest. So you sort of go back and retry 756 00:45:10,000 --> 00:45:14,440 and yeah, you can sort of go through a little game, different 757 00:45:14,520 --> 00:45:16,200 examples, different difficulty levels. 758 00:45:16,200 --> 00:45:19,360 I guess you could build it, but basically see, like there's 759 00:45:19,360 --> 00:45:23,680 visual bugs here, but that's stuff that could be, could be 760 00:45:23,680 --> 00:45:27,080 fixed. But yeah, for it's quite a call 761 00:45:28,200 --> 00:45:33,480 to show, but yeah. I think it's brilliant that you 762 00:45:33,480 --> 00:45:36,680 can get from the seeds of an idea to actually having 763 00:45:36,680 --> 00:45:40,320 something physical like that in just a few minutes for free as 764 00:45:40,320 --> 00:45:42,840 well. Like, that's Gemini's free tier, 765 00:45:43,000 --> 00:45:44,920 so yeah. That's cool. 766 00:45:44,920 --> 00:45:48,280 I think for you'd have to check what kind of usage rights you 767 00:45:48,280 --> 00:45:49,720 have with Gemini 3. Sure. 768 00:45:50,200 --> 00:45:54,000 It's sort of yours to use as such, probably not for 769 00:45:54,000 --> 00:45:56,680 commercial, but if you're building it in town or for a 770 00:45:56,680 --> 00:45:59,680 small demo for like Cybersecurity Awareness month 771 00:45:59,680 --> 00:46:03,560 for something, it could be a way of building something fun and 772 00:46:03,560 --> 00:46:07,400 different that's sort of customised to your own thing and 773 00:46:07,400 --> 00:46:09,560 you could give it all your branding elements, right? 774 00:46:10,680 --> 00:46:12,360 Yeah. Give it your logos and your 775 00:46:12,360 --> 00:46:14,680 colours and build something quite cool. 776 00:46:15,680 --> 00:46:18,880 So yeah, I think that's. That, yeah, awesome. 777 00:46:19,280 --> 00:46:21,880 Awesome. If anyone's listening and you do 778 00:46:21,880 --> 00:46:25,960 build something awesome with the AI tools that you think's really 779 00:46:25,960 --> 00:46:29,400 useful, reach out to us.hello@riskycreative.com and 780 00:46:29,400 --> 00:46:32,520 we'd love to show your stuff in a future episode. 781 00:46:32,880 --> 00:46:37,680 So that'd be cool, right? Moving on, I had a couple of 782 00:46:37,680 --> 00:46:43,800 topics to talk about this week, and the first one have you car 783 00:46:43,800 --> 00:46:47,920 manufacturer Dacia. Dacia, I think it's duchier the 784 00:46:47,920 --> 00:46:51,560 right way to say it, the more budget part of Renault. 785 00:46:51,640 --> 00:46:54,000 Have you heard of a Duchier Sandman? 786 00:46:54,000 --> 00:46:58,360 OK, so I first heard about the Duchier Sandman a while ago, 787 00:46:58,360 --> 00:47:00,000 right? And the Duchier Sandman is 788 00:47:00,000 --> 00:47:03,800 basically a really awesome looking campervan. 789 00:47:03,920 --> 00:47:08,160 Like it looks cool. So let me show you if you Google 790 00:47:08,160 --> 00:47:11,920 Google Duchier Sandman, a whole bunch of images come up. 791 00:47:11,920 --> 00:47:16,280 I'll just share quickly. This is immoral about like stuff 792 00:47:16,280 --> 00:47:18,200 you see online. So here you can see lots of 793 00:47:18,200 --> 00:47:23,600 images, the Dutchie of Sandman. These are based on like an old 794 00:47:23,600 --> 00:47:26,880 like Renault traffic kind of model, last generation Renault 795 00:47:26,880 --> 00:47:30,840 traffic. And it's a 4x4 awesome looking 796 00:47:30,840 --> 00:47:35,360 camper with LED lights and all kind of vents and awnings and 797 00:47:35,360 --> 00:47:36,640 stuff. And it's cool. 798 00:47:36,640 --> 00:47:42,760 Well, this week also Carl said we invented the Duchier Sandman 799 00:47:42,760 --> 00:47:47,000 and the incident fell for it. Will Duchier ever build the 800 00:47:47,000 --> 00:47:51,640 Sandman campervan concept that has taken on an AI life of its 801 00:47:51,640 --> 00:47:55,520 own? So this article basically says 802 00:47:57,200 --> 00:48:00,560 that the the person that's written this article, colleague 803 00:48:00,560 --> 00:48:05,000 Goodwin created it. It was his a figment of his 804 00:48:05,000 --> 00:48:10,840 imagination. So 2019 auto cars genius artist 805 00:48:10,840 --> 00:48:14,600 Ben Summerall Yud came up with the concept for an affordable 806 00:48:14,600 --> 00:48:18,000 campervan badged as a dachier but based it on the previous 807 00:48:18,000 --> 00:48:21,160 generation red eye traffic. The name Sam Man came from the 808 00:48:21,160 --> 00:48:26,400 1970s Australian Holden panel van that featured cool 809 00:48:26,400 --> 00:48:30,520 psychedelic graphics and they went for simplicity. 810 00:48:31,520 --> 00:48:35,040 You know, being dachier Dachie is very much a budget range. 811 00:48:35,040 --> 00:48:39,240 So simplicity, steel wheels, tough black plastic protectors, 812 00:48:39,240 --> 00:48:42,960 wheel arches, no entertainment because you have a smartphone. 813 00:48:43,280 --> 00:48:46,280 And if you're into cars, that's the kind of model that the slate 814 00:48:46,640 --> 00:48:49,280 pickup truck in America that's backed by Amazon has kind of 815 00:48:49,280 --> 00:48:52,520 followed cheap bring your own phone, plug it in Bluetooth 816 00:48:52,520 --> 00:48:56,800 speaker and, and this is a basic, basic thing, right? 817 00:48:56,800 --> 00:49:00,240 And they created it and it basically took on a mind of its 818 00:49:00,280 --> 00:49:02,840 own and people latched onto it. And then now there's all kinds 819 00:49:02,840 --> 00:49:05,360 of stuff. There's all videos about it 820 00:49:05,360 --> 00:49:12,960 online and yeah, it's crazy. And you can see they spoke to 821 00:49:12,960 --> 00:49:16,640 Dutchie about it and some of them have talked about bringing 822 00:49:16,640 --> 00:49:20,280 4 by 4 on it. The traffic isn't available in 4 823 00:49:20,280 --> 00:49:22,240 by 4. So Thatchie would never do that 824 00:49:22,240 --> 00:49:23,400 because it would put the price up. 825 00:49:23,400 --> 00:49:25,680 It kind of does does away with it. 826 00:49:26,200 --> 00:49:31,160 So yeah, now they're saying that, like Thatcher have said 827 00:49:31,160 --> 00:49:33,880 themselves, like, Oh yeah, it would be a great thing to do. 828 00:49:33,880 --> 00:49:38,840 But so if you Google it, you'd really be led to believe that 829 00:49:38,920 --> 00:49:41,600 this thing existed, or at least was coming. 830 00:49:42,240 --> 00:49:46,920 It's a rumour, yeah. AI overview because it's cool, 831 00:49:47,040 --> 00:49:48,080 Yeah. Just go and read it. 832 00:49:48,640 --> 00:49:50,560 Rumour. The Dutchie Salmon is a 833 00:49:50,560 --> 00:49:54,200 rumoured, highly anticipated and rugged compact crossover 834 00:49:54,440 --> 00:49:58,880 expected around 2026, designed as an affordable adventure 835 00:49:58,880 --> 00:50:00,880 vehicle. It's interesting. 836 00:50:00,880 --> 00:50:05,400 Then it's over. Note, as of February 2026, this 837 00:50:05,400 --> 00:50:08,280 vehicle is not an official product, but a concept created 838 00:50:08,280 --> 00:50:12,160 by auto car journalists. It's absolutely mad. 839 00:50:12,160 --> 00:50:14,200 There's a video of a concept design and everything. 840 00:50:14,200 --> 00:50:19,560 So yes, the hype wasn't real. They weren't making this. 841 00:50:20,480 --> 00:50:25,000 So there's an example that don't believe everything you see on 842 00:50:25,000 --> 00:50:27,320 the interwebs because it's not always true. 843 00:50:27,400 --> 00:50:31,640 I just thought that was that was some more AI fake news I thought 844 00:50:31,640 --> 00:50:34,440 was quite interesting. Yeah, it's good that the 845 00:50:34,440 --> 00:50:38,280 overview pointed out that it wasn't real, but it probably 846 00:50:38,280 --> 00:50:41,640 could have been a bit of a bigger banner of some sort, 847 00:50:41,640 --> 00:50:43,280 right? Saying that this is probably not 848 00:50:43,280 --> 00:50:44,560 real. Well. 849 00:50:45,000 --> 00:50:50,280 The AI overview still says it's a rumoured highly anticipated 850 00:50:50,280 --> 00:50:53,760 rugged compact crossover van, expected around 2026. 851 00:50:54,120 --> 00:50:56,520 And then this is from the end. Yeah. 852 00:50:56,960 --> 00:50:58,480 Like. Why does it still say it's 853 00:50:58,480 --> 00:51:01,440 expected around 2026 when it then goes it's not an official 854 00:51:01,440 --> 00:51:04,480 product but a concept like yeah, bit messy. 855 00:51:04,480 --> 00:51:05,720 Isn't it? Well, it. 856 00:51:05,720 --> 00:51:08,280 Almost feels like someone's tapped that little bit of like 857 00:51:08,280 --> 00:51:10,480 code on the end, like bumped it on. 858 00:51:10,480 --> 00:51:14,480 I don't know how it works, but because it may be made the news, 859 00:51:14,520 --> 00:51:17,760 there's even a Reddit post here from there's a Reddit post here 860 00:51:17,760 --> 00:51:20,320 from three years ago. What do you think about the 861 00:51:20,320 --> 00:51:24,480 upcoming Duchess Sandman? It will cost about €16,000 with 862 00:51:24,480 --> 00:51:27,600 a picture of a green Renault traffic with surfboards on the 863 00:51:27,600 --> 00:51:31,360 roof. Bad news, it's been delayed. 864 00:51:32,080 --> 00:51:34,680 Says the top comment. Dream car. 865 00:51:36,160 --> 00:51:39,920 Yeah, so don't believe everything. 866 00:51:40,040 --> 00:51:43,040 All the hype was not real. I had one more post I wanted to 867 00:51:43,040 --> 00:51:45,800 share this week that I saw on Reddit and it's a simple one. 868 00:51:45,880 --> 00:51:48,440 Popped up when I was trying to read an article. 869 00:51:48,840 --> 00:51:51,680 Diabolical. You can see here this is from 870 00:51:51,680 --> 00:51:54,040 mildly infuriating the subreddit. 871 00:51:55,200 --> 00:51:57,920 I can see so many people falling for this and it's a cloud flare. 872 00:51:57,920 --> 00:51:59,480 Again. It's a cloud flare. 873 00:51:59,600 --> 00:52:03,720 Click fix. Complete these verification 874 00:52:03,720 --> 00:52:06,200 steps. Use keyboard to prove you are 875 00:52:06,200 --> 00:52:11,320 not robot. Just use. 876 00:52:11,320 --> 00:52:15,440 Keyboard to prove you are not robot, press and hold Wing key 877 00:52:15,440 --> 00:52:17,640 plus R in the verification window. 878 00:52:17,960 --> 00:52:21,800 Verification window, press Control key V and then press 879 00:52:21,800 --> 00:52:27,000 enter. But really nice though, top one 880 00:52:27,200 --> 00:52:29,480 top comment on that from tripped out Lobster. 881 00:52:29,760 --> 00:52:32,360 For anyone curious, this technique is called click fix 882 00:52:32,520 --> 00:52:34,920 social Engineering technique. It's not something new. 883 00:52:34,920 --> 00:52:38,120 It's been around for some time. When you see this in your 884 00:52:38,120 --> 00:52:40,600 browser, a command line snippet has been copied to your 885 00:52:40,600 --> 00:52:43,800 clipboard as if you copied something with control plus C 886 00:52:44,160 --> 00:52:46,720 When you follow the instructions shown, that command line snippet 887 00:52:46,720 --> 00:52:50,280 is executed. So yeah, nicely explains it, but 888 00:52:50,440 --> 00:52:53,680 just these things are absolutely everywhere. 889 00:52:55,520 --> 00:52:59,440 Absolutely everywhere. No legit website will ever ask 890 00:52:59,440 --> 00:53:01,760 you to do this, you know? The comments are really helpful. 891 00:53:03,400 --> 00:53:08,960 Once was once 30 something hours without sleep and autopilot did 892 00:53:08,960 --> 00:53:12,360 one of these without thinking for a supposed verification I 893 00:53:12,360 --> 00:53:15,560 needed. I realised and fully woke up on 894 00:53:15,560 --> 00:53:17,760 the spot like 2 minutes later in panic. 895 00:53:18,360 --> 00:53:22,760 Antivirus caught and purged it. I did a rollback and password 896 00:53:22,760 --> 00:53:24,600 resets to be safe so it was fine. 897 00:53:25,240 --> 00:53:27,840 Very annoying though because I did it right before I was going 898 00:53:27,840 --> 00:53:30,920 to go to bed and it kept me up for an extra 1 to 2 hours. 899 00:53:32,880 --> 00:53:34,880 Doing a rollback. Like in some cases doing a 900 00:53:34,880 --> 00:53:38,320 rollback isn't always sufficient, but not everyone 901 00:53:38,320 --> 00:53:41,400 knows. I'm probably doing a fresh 902 00:53:41,400 --> 00:53:44,920 install these days. Yeah, yeah. 903 00:53:46,120 --> 00:53:48,440 And then there's a comment. They act like people using ad 904 00:53:48,440 --> 00:53:51,600 blockers as a basic safety precaution, other villains. 905 00:53:51,760 --> 00:53:54,400 So I know there's tools out there and I don't want to 906 00:53:54,400 --> 00:53:57,120 promote anything specific, but I know there's there's browser 907 00:53:57,120 --> 00:54:01,000 defence tools out there coming that protect against stuff like 908 00:54:01,000 --> 00:54:05,760 this, which is awesome and very much needed because these are 909 00:54:06,400 --> 00:54:08,040 absolutely everywhere. Click fix now. 910 00:54:09,200 --> 00:54:11,320 They're pretty much every week we see something new. 911 00:54:12,760 --> 00:54:13,600 Yeah. Yeah. 912 00:54:14,560 --> 00:54:16,480 Talk to you and this is an important one to talk to 913 00:54:16,480 --> 00:54:18,680 everyone about like if you're sat there having dinner with 914 00:54:18,680 --> 00:54:22,200 your family, this could be a really interesting conversation 915 00:54:22,200 --> 00:54:25,800 to bring up just like, you know, never ever if a website, I saw 916 00:54:25,840 --> 00:54:28,760 this website the other day that asked me to press control and 917 00:54:28,760 --> 00:54:32,840 see we'll put a link to that show that image because my mum 918 00:54:32,920 --> 00:54:35,280 would probably follow those instructions you. 919 00:54:35,280 --> 00:54:38,520 Know you need. To It's everywhere, right? 920 00:54:38,600 --> 00:54:41,760 Yeah, that's me done. What have you got? 921 00:54:43,240 --> 00:54:48,680 Got one video to share and a e-mail to share quickly so I'll 922 00:54:48,680 --> 00:54:52,520 create a pop up the video. You've all seen this to do 923 00:54:52,520 --> 00:54:58,880 Samsung S26 or S20, yes? Yes, this is awesome. 924 00:54:58,960 --> 00:55:00,600 So good. Yeah. 925 00:55:00,600 --> 00:55:07,040 Says showing off the privacy display feature and this is M KB 926 00:55:07,040 --> 00:55:12,360 HD very well known tech YouTube and everything else got it to 927 00:55:12,360 --> 00:55:15,280 play the video obviously people watch listening won't be able to 928 00:55:15,280 --> 00:55:18,480 see it but I just. Noticed Marcus has upgraded his 929 00:55:18,560 --> 00:55:22,240 lapel mics. That's a really nice nice. 930 00:55:22,560 --> 00:55:24,640 Just to geek out on that for a little bit, but yeah, go on. 931 00:55:25,560 --> 00:55:28,480 Yeah, I'll play the video, but obviously people listening, 932 00:55:28,480 --> 00:55:31,240 we'll need to watch it to see how it actually looks. 933 00:55:31,680 --> 00:55:34,520 Yeah, cool. You know, there's privacy. 934 00:55:34,520 --> 00:55:36,120 Screen protectors that are supposed to black out your 935 00:55:36,120 --> 00:55:37,920 screen from the side so no one can spy on you. 936 00:55:38,240 --> 00:55:41,480 Well, this S 26 Ultra obviously doesn't have a screen protector 937 00:55:41,480 --> 00:55:47,080 on it, but if I just turn on privacy screen, it turns off 938 00:55:47,080 --> 00:55:53,600 individual pixels to achieve the exact same effect, which is 939 00:55:53,880 --> 00:55:55,720 pretty sick. But not only that, since it's 940 00:55:55,720 --> 00:55:58,600 built into the display, you can have it turn on only when 941 00:55:58,600 --> 00:56:03,200 opening certain apps like your banking app or Messages or 942 00:56:03,360 --> 00:56:04,920 Photos. But what's sick is you can have 943 00:56:04,920 --> 00:56:09,880 it just block out notifications as they come in or just the 944 00:56:09,880 --> 00:56:11,800 password field when entering a password. 945 00:56:11,880 --> 00:56:14,520 Honestly, Unreal levels of display innovation so that you 946 00:56:14,520 --> 00:56:21,080 can hide whatever you're hiding. That's so impressive, that's so 947 00:56:21,080 --> 00:56:24,360 clever, like iPhone will probably I think Samsung make 948 00:56:24,360 --> 00:56:26,800 the iPhone displays. So that'll probably console 949 00:56:26,800 --> 00:56:30,680 iPhone in about four or five years, but that's some that's 950 00:56:30,680 --> 00:56:32,760 really impressive. Like that's awesome. 951 00:56:32,800 --> 00:56:36,000 And the fact that they've taken it down to an app level or a 952 00:56:36,000 --> 00:56:38,960 notification level as well. Wow, that's cool. 953 00:56:39,080 --> 00:56:39,840 That's really. Clever. 954 00:56:40,600 --> 00:56:43,720 I've never, I think I had one years ago, like one of those. 955 00:56:43,760 --> 00:56:46,560 So basically he's turning the screen and as he turns the 956 00:56:46,560 --> 00:56:49,920 screen away from the camera, the screen goes black and then as he 957 00:56:49,920 --> 00:56:52,880 turns the screen away from the camera on like a notification 958 00:56:52,880 --> 00:56:55,920 goes black. Or you can select specific apps. 959 00:56:56,720 --> 00:57:00,040 I've I had a privacy screen like that ages ago and I never really 960 00:57:00,040 --> 00:57:02,480 thought about it. But since starting my new job, 961 00:57:02,480 --> 00:57:06,720 when I went to their office, loads of people had them for the 962 00:57:06,720 --> 00:57:10,680 laptops but also for the phones. And it's like, oh OK, like it's 963 00:57:11,320 --> 00:57:13,360 I didn't really. I don't know if it's a cultural 964 00:57:13,360 --> 00:57:16,520 thing, but it's pretty much the norm in some places now. 965 00:57:16,520 --> 00:57:20,480 So it's, yeah, I think that's a really, really cool tool. 966 00:57:20,680 --> 00:57:22,680 That's awesome, yeah. Interesting to see, like you 967 00:57:22,680 --> 00:57:26,040 just said, that I feel, you know, quite a trickle to laptops 968 00:57:26,040 --> 00:57:28,920 at some point as well. Probably a very expensive 969 00:57:28,920 --> 00:57:30,920 laptop. Yeah, it's rather tech will 970 00:57:30,960 --> 00:57:32,800 become a normal thing in the future. 971 00:57:32,840 --> 00:57:35,560 Yeah, it probably. Comes because you can turn it 972 00:57:35,560 --> 00:57:37,440 off as well. It probably doesn't come at any 973 00:57:37,440 --> 00:57:40,080 cost of quality or that kind of thing. 974 00:57:40,080 --> 00:57:43,040 You know, quite often you'd think it would be the quality of 975 00:57:43,040 --> 00:57:44,200 something that would suffer, yeah. 976 00:57:44,400 --> 00:57:46,960 I think like using a proper previous screen is pretty 977 00:57:47,400 --> 00:57:49,400 horrible experience to be honest. 978 00:57:49,840 --> 00:57:52,760 So yeah, it's quite cool. Funnily enough, I've just 979 00:57:52,760 --> 00:57:56,880 ordered one and it's expected today from Timu, so I will tell 980 00:57:56,880 --> 00:58:00,240 you how good my Timu privacy screen is when it turns up. 981 00:58:00,240 --> 00:58:02,640 Please don't hate me for ordering stuff from Timu, but 982 00:58:02,680 --> 00:58:06,760 yeah, they were dirt cheap and they're expected today, so I'll 983 00:58:06,760 --> 00:58:12,400 give you a iPhone privacy screen update next week, yeah? 984 00:58:12,960 --> 00:58:14,240 That's cool. Cool. 985 00:58:14,880 --> 00:58:18,520 One more thing to share quickly. So this is something we I think 986 00:58:18,520 --> 00:58:24,720 I brought up quite a while ago, which was the Ahrefs fake 987 00:58:25,160 --> 00:58:30,400 website on Google ads. Google Ads spot. 988 00:58:31,320 --> 00:58:35,760 Yeah, with a website claiming to be Ahrefs, but I only received 989 00:58:35,760 --> 00:58:37,640 an e-mail. Sorry, this was. 990 00:58:37,640 --> 00:58:41,640 When you searched that ahrefs in Google, the top result was a 991 00:58:41,640 --> 00:58:46,560 paid for Google Ads listing, leading you to a fake AH refs 992 00:58:46,560 --> 00:58:49,240 website. Yeah, we did. 993 00:58:49,240 --> 00:58:54,200 Similar ages ago, didn't we, with Google where there was an 994 00:58:54,200 --> 00:58:59,520 ages one Ads 1A Google Ads one, wasn't it Google Ads own website 995 00:58:59,720 --> 00:59:02,440 was spoofed and someone had bought an ad for Google Ads and 996 00:59:02,440 --> 00:59:04,760 it they compromised Sydney Zoo's account. 997 00:59:04,760 --> 00:59:06,280 That was amazing. That was incredible. 998 00:59:06,480 --> 00:59:07,720 Yeah, yeah. But yeah. 999 00:59:07,720 --> 00:59:09,120 Sorry, go on. It wasn't. 1000 00:59:09,120 --> 00:59:13,280 Too long ago as well the yeah I was trying to go to AHS and had 1001 00:59:13,280 --> 00:59:17,720 the same thing. Where ended up on like AI think 1002 00:59:17,720 --> 00:59:21,040 it's like a Squarespace website or something but basically, 1003 00:59:21,040 --> 00:59:26,880 yeah, I received an e-mail from AH refs like 2 days ago talking 1004 00:59:26,880 --> 00:59:30,960 about this exact same thing which seems like quite a delay. 1005 00:59:30,960 --> 00:59:33,120 I'm pretty sure it was quite a while ago when we brought this 1006 00:59:33,120 --> 00:59:35,720 up. But yeah, basically this said 1007 00:59:36,160 --> 00:59:38,320 we're writing to you to warn you about an active phishing attack 1008 00:59:38,320 --> 00:59:41,880 called targeting AH, refs, users and other platform subscribers, 1009 00:59:41,880 --> 00:59:46,760 but bit delayed there, but it basically points out what's 1010 00:59:46,760 --> 00:59:48,320 happening. Some nice screenshots on 1011 00:59:48,480 --> 00:59:52,440 comparing the phishing ad versus the real one. 1012 00:59:53,000 --> 00:59:57,960 Points out the website address. There's a clone website. 1013 00:59:59,400 --> 01:00:02,360 When you try to sign in, you prompt it to fake to a fake 1014 01:00:03,000 --> 01:00:08,440 Google sign in Page and it says here that. 1015 01:00:08,840 --> 01:00:11,120 If you grant permissions to attack against access to your 1016 01:00:11,120 --> 01:00:13,640 Google Ads accounts, obviously, then they go on and do more 1017 01:00:14,280 --> 01:00:17,560 spoofing of AHFS or fake other websites. 1018 01:00:19,200 --> 01:00:22,360 And it says here that confirmed victims have lost over $30,000 1019 01:00:22,520 --> 01:00:25,160 each from their accounts getting drained this way. 1020 01:00:25,160 --> 01:00:27,240 That's an interesting way to say it. 1021 01:00:28,840 --> 01:00:31,280 And yeah, then it has a few steps on how to protect yourself 1022 01:00:32,440 --> 01:00:39,360 and A blog post about why is sort of not so easy as a block. 1023 01:00:40,320 --> 01:00:41,600 And then a bit of information on you. 1024 01:00:41,600 --> 01:00:44,920 If you believe your account's been compromised to support, 1025 01:00:45,000 --> 01:00:48,520 contact their support team. Yeah, I thought it was just an 1026 01:00:48,600 --> 01:00:52,440 interesting update on something we spoke about a little while 1027 01:00:52,440 --> 01:00:54,000 ago. Yeah. 1028 01:00:54,120 --> 01:00:58,920 Yeah, that is, that's quite like you say, quite a while ago. 1029 01:00:59,240 --> 01:01:01,080 It was weeks ago we spoke about that. 1030 01:01:01,080 --> 01:01:05,040 I think I was just trying to trying to look up when it was. 1031 01:01:05,040 --> 01:01:07,840 Yeah, it's mad. It's mad. 1032 01:01:07,920 --> 01:01:10,480 Yeah, I just. Had sponsored ads on Google. 1033 01:01:10,600 --> 01:01:14,800 Terrible. Avoid sponsored ads on Google 1034 01:01:14,920 --> 01:01:18,840 all day long Yeah, it's and This is why the death of ad blockers 1035 01:01:18,840 --> 01:01:21,120 like we we just said that with click flick. 1036 01:01:21,440 --> 01:01:24,240 One of the comments on that click fix Reddit post said it a 1037 01:01:24,240 --> 01:01:26,800 world without ad blockers is a less safer space. 1038 01:01:26,800 --> 01:01:29,520 So Google killing you block and stuff like that. 1039 01:01:29,760 --> 01:01:31,880 But again, it's money over safety. 1040 01:01:31,880 --> 01:01:36,600 Google want to make money, they just like Meta passing the buck. 1041 01:01:36,600 --> 01:01:40,160 We now have to deal with these additional risks because they've 1042 01:01:40,160 --> 01:01:42,880 blocked people making us safer so. 1043 01:01:43,800 --> 01:01:46,360 Congrats. This week go to Meta for passing 1044 01:01:46,360 --> 01:01:50,280 the parental buck to us and for Google yet again making the 1045 01:01:50,280 --> 01:01:54,360 world a less safe space. But I mean, it's great that 8 1046 01:01:54,760 --> 01:01:57,840 refs have come out with that. I keep wanting to call them R 1047 01:01:57,840 --> 01:02:02,640 refs because these are it's great that they've come out with 1048 01:02:02,640 --> 01:02:04,600 that blog post, but it has taken them a while. 1049 01:02:04,800 --> 01:02:08,280 It's definitely that was it was a few weeks ago we talked about 1050 01:02:08,280 --> 01:02:12,360 that. Yeah, yeah, yeah. 1051 01:02:12,440 --> 01:02:15,040 That's my OK. Yeah, that's great. 1052 01:02:15,040 --> 01:02:17,360 Right. If there's well, that's all 1053 01:02:17,360 --> 01:02:20,200 we've got. So we will be back next week 1054 01:02:20,200 --> 01:02:23,520 with more human sides of cyber stories. 1055 01:02:23,520 --> 01:02:25,920 Have a good week and I'll speak to you next week. 1056 01:02:26,040 --> 01:02:27,080 See you later. Bye.