TRANSKRIPTIO 🔗
1
00:00:00,000 --> 00:00:03,480
Think about the consequences if this was a hospital
2
00:00:03,480 --> 00:00:05,960
or life-critical systems
3
00:00:05,960 --> 00:00:08,560
that are happened to be hanging out on the internet
4
00:00:08,560 --> 00:00:10,720
and people could die.
5
00:00:10,720 --> 00:00:12,480
This week on shared security,
6
00:00:12,480 --> 00:00:14,760
your grocery store has refrigerators,
7
00:00:14,760 --> 00:00:17,400
lights, cameras, doors, inventory systems
8
00:00:17,400 --> 00:00:18,920
and HVAC equipment.
9
00:00:18,920 --> 00:00:22,280
More of those systems are now networked computers
10
00:00:22,280 --> 00:00:24,480
and even accessible from the internet.
11
00:00:24,480 --> 00:00:26,920
So when attackers reportedly pushed
12
00:00:26,920 --> 00:00:29,600
supermarket refrigeration controls in France
13
00:00:29,600 --> 00:00:31,640
to dangerous temperatures,
14
00:00:31,640 --> 00:00:35,080
the story was not really about hacked refrigerators.
15
00:00:35,080 --> 00:00:37,960
It was about what happens when physical operations
16
00:00:37,960 --> 00:00:41,000
depend on connected systems that outlive
17
00:00:41,000 --> 00:00:44,880
the software and security practices supporting them.
18
00:00:44,880 --> 00:00:47,200
So today we ask a simple question.
19
00:00:47,200 --> 00:00:49,160
Why is your grocery store's refrigerator
20
00:00:49,160 --> 00:00:51,440
connected to the internet anyway?
21
00:00:51,440 --> 00:00:53,400
And what should retailers, vendors
22
00:00:53,400 --> 00:00:55,760
and security teams do about it?
23
00:00:55,760 --> 00:00:59,680
And joining me for this conversation is my co-host,
24
00:00:59,680 --> 00:01:01,280
Mr. Scott Wright.
25
00:01:01,280 --> 00:01:02,920
La la, c'est fort.
26
00:01:02,920 --> 00:01:05,440
Yes, yes, we're not far from Quebec,
27
00:01:05,440 --> 00:01:07,960
but yeah, you guys are known to speak French, so.
28
00:01:07,960 --> 00:01:09,000
Occasionally, yeah.
29
00:01:09,000 --> 00:01:10,480
Occasionally, yes.
30
00:01:10,480 --> 00:01:13,880
But you would never plug in a refrigerator
31
00:01:13,880 --> 00:01:15,920
and connect it to the internet, Scott.
32
00:01:15,920 --> 00:01:17,360
Yeah, I mean. That's just stupid.
33
00:01:17,360 --> 00:01:21,040
There's gonna be a market for dumb stuff, right?
34
00:01:21,040 --> 00:01:22,240
Oh, it's coming back.
35
00:01:22,240 --> 00:01:23,640
It's coming back. It actually is.
36
00:01:23,640 --> 00:01:26,360
But I don't own any smart devices
37
00:01:26,360 --> 00:01:28,880
that are like 10 years old.
38
00:01:28,880 --> 00:01:31,440
My Panasonic TV has some internet connectivity,
39
00:01:31,440 --> 00:01:33,640
but it doesn't know anything about what to do, right?
40
00:01:33,640 --> 00:01:34,480
Yes.
41
00:01:34,480 --> 00:01:36,120
This story actually reminds me of something
42
00:01:36,120 --> 00:01:38,480
that I encountered many years ago
43
00:01:38,480 --> 00:01:40,600
when my daughter was much younger
44
00:01:40,600 -->
Load full transcript
00:01:43,000
and I was looking for swim lessons
45
00:01:43,000 --> 00:01:45,520
for her through the city that I lived in.
46
00:01:45,520 --> 00:01:49,080
And I happened to go to the city websites
47
00:01:49,080 --> 00:01:51,760
looking for, hey, they must have events
48
00:01:51,760 --> 00:01:53,920
and things that I can find swim lessons
49
00:01:53,920 --> 00:01:58,640
and I just literally mistyped a URL
50
00:01:58,640 --> 00:02:02,840
and basically got to like an admin page
51
00:02:02,840 --> 00:02:07,120
for the city's HVAC system for the city hall.
52
00:02:07,120 --> 00:02:11,440
And it had a prompt for an admin prompt with no password
53
00:02:11,440 --> 00:02:14,160
and I literally just hit the enter key and it let me in.
54
00:02:14,160 --> 00:02:15,800
It had, there was no password on it.
55
00:02:15,800 --> 00:02:17,920
I was actually a pen tester back then
56
00:02:17,920 --> 00:02:19,360
and I was just like giddy.
57
00:02:19,360 --> 00:02:20,800
I'm like, oh my gosh.
58
00:02:21,040 --> 00:02:24,160
I just stumbled upon this serious security vulnerability
59
00:02:24,160 --> 00:02:25,640
at my local city.
60
00:02:25,640 --> 00:02:29,080
And what I actually found was I could increase
61
00:02:29,080 --> 00:02:32,240
the temperature of every room in the city hall,
62
00:02:32,240 --> 00:02:34,000
in the building of the city hall,
63
00:02:34,000 --> 00:02:35,520
including the mayor's office
64
00:02:35,520 --> 00:02:38,420
and everything was labeled mayor's office
65
00:02:38,420 --> 00:02:40,400
and I could change the temperature if I wanted.
66
00:02:40,400 --> 00:02:42,200
So I figured like I could jack up the temperature
67
00:02:42,200 --> 00:02:45,160
to like 100 degrees Fahrenheit if I wanted to
68
00:02:45,160 --> 00:02:48,040
and no one would know anything about it.
69
00:02:48,040 --> 00:02:48,880
There must be a good reason
70
00:02:48,880 --> 00:02:51,000
why I made it connect into the internet, right?
71
00:02:51,000 --> 00:02:52,280
Well, it's funny.
72
00:02:52,280 --> 00:02:54,640
So I emailed the city
73
00:02:54,640 --> 00:02:56,760
and I emailed the mayor's office
74
00:02:56,760 --> 00:03:00,320
and they forwarded the email over to the IT person.
75
00:03:00,320 --> 00:03:02,160
And then the IT person emailed me.
76
00:03:02,160 --> 00:03:04,240
He's like, hey, thank you for reporting this.
77
00:03:04,240 --> 00:03:09,240
We just installed a new HVAC system in the city hall
78
00:03:09,600 --> 00:03:13,600
and what ended up happening was that they left the defaults
79
00:03:13,600 --> 00:03:16,880
wide open connected to the internet.
80
00:03:16,880 --> 00:03:19,880
And so they did obviously secure that.
81
00:03:19,880 --> 00:03:22,720
And I think what they did was they just had VPN access
82
00:03:22,720 --> 00:03:24,720
only to that site.
83
00:03:24,720 --> 00:03:26,760
But long story short,
84
00:03:26,760 --> 00:03:31,040
this is very similar to what happened here in France
85
00:03:31,040 --> 00:03:33,920
except on a much larger scale
86
00:03:33,920 --> 00:03:35,880
and a much more serious scale
87
00:03:35,880 --> 00:03:40,880
because this affected about 700 grocery store chains
88
00:03:40,960 --> 00:03:43,800
apparently or stores in France.
89
00:03:43,800 --> 00:03:47,200
And this has cost them millions of dollars.
90
00:03:47,200 --> 00:03:48,840
Somebody jacked up these,
91
00:03:48,840 --> 00:03:50,880
I think it was like 50 degrees Celsius
92
00:03:50,880 --> 00:03:53,640
which is 120 some degrees Fahrenheit.
93
00:03:53,640 --> 00:03:54,760
Yeah, a little warm.
94
00:03:54,760 --> 00:03:58,280
Yeah, and it just, it melted everything
95
00:03:58,280 --> 00:04:00,320
in the refrigerators and spoiled food.
96
00:04:00,320 --> 00:04:01,280
You can't sell that.
97
00:04:01,280 --> 00:04:02,680
And so that's a massive cost.
98
00:04:02,680 --> 00:04:04,040
Millions of dollars is lost.
99
00:04:04,040 --> 00:04:05,240
Millions of dollars.
100
00:04:05,240 --> 00:04:08,280
And so it begs the question of
101
00:04:08,280 --> 00:04:11,360
why were these refrigerators connected to the internet?
102
00:04:11,360 --> 00:04:13,320
And we don't have a whole lot of details
103
00:04:13,320 --> 00:04:14,800
of what exactly happened,
104
00:04:14,800 --> 00:04:17,800
except for there was a vulnerability
105
00:04:17,800 --> 00:04:20,160
in these control systems.
106
00:04:20,160 --> 00:04:22,920
And it's interesting, I looked at the,
107
00:04:22,920 --> 00:04:24,840
it was like the French,
108
00:04:24,840 --> 00:04:26,640
I think it's like their cyber security.
109
00:04:26,640 --> 00:04:28,480
Oh, the security.
110
00:04:28,480 --> 00:04:30,800
Yeah, it was like a disclosure basically,
111
00:04:30,800 --> 00:04:34,080
like they would do in the US with CISA,
112
00:04:34,080 --> 00:04:36,600
they would send out this advisory.
113
00:04:36,600 --> 00:04:39,480
And one of the first things they put in the advisory was
114
00:04:39,480 --> 00:04:42,800
it is not best practice to connect these controllers,
115
00:04:42,800 --> 00:04:44,720
these network controllers to the internet.
116
00:04:44,720 --> 00:04:49,720
So my theory is that these were default installs
117
00:04:50,960 --> 00:04:55,400
and they were automatically just connected to the internet
118
00:04:55,400 --> 00:04:59,240
and no one did anything to change it, right?
119
00:04:59,240 --> 00:05:01,000
But there is a patch apparently
120
00:05:01,000 --> 00:05:04,720
that they, whatever this control board was
121
00:05:04,720 --> 00:05:06,320
that people companies are going to install.
122
00:05:06,320 --> 00:05:08,040
You know what, I could imagine a scenario
123
00:05:08,040 --> 00:05:10,480
that may not be anything like what it is,
124
00:05:10,480 --> 00:05:13,000
but you know how when you've got your home router
125
00:05:13,000 --> 00:05:14,120
and you've got your main network
126
00:05:14,120 --> 00:05:15,680
and you've got your guest network
127
00:05:15,680 -->
00:05:17,520
and sometimes you want to be smart and you say,
128
00:05:17,520 --> 00:05:19,800
if I'm going to put in a connected thing
129
00:05:19,800 --> 00:05:21,120
that could be doing things,
130
00:05:21,120 --> 00:05:23,800
I want to keep it away from my main computer network.
131
00:05:23,800 --> 00:05:25,720
So I'm going to put it on the guest network,
132
00:05:25,720 --> 00:05:29,480
which would mean it actually has probably less protection
133
00:05:29,480 --> 00:05:32,040
or direct connection to the internet.
134
00:05:32,040 --> 00:05:34,120
And if it's what we would call
135
00:05:34,120 --> 00:05:36,000
this cyber physical thing, right?
136
00:05:36,000 --> 00:05:37,920
It doesn't have to be connected to your computers
137
00:05:37,920 --> 00:05:39,400
to cause damaging.
138
00:05:39,440 --> 00:05:41,320
It's connected to those refrigerators
139
00:05:41,320 --> 00:05:44,080
that are storing all your food and your products, right?
140
00:05:44,080 --> 00:05:47,920
So I think from the point of view of, I mean,
141
00:05:47,920 --> 00:05:52,720
the story that we found on this sort of focused on an AI angle,
142
00:05:52,720 --> 00:05:54,880
and I know that people are tired of hearing about AI,
143
00:05:54,880 --> 00:05:57,120
but as far as cybersecurity goes,
144
00:05:57,120 --> 00:06:01,320
like AI is 90% of anybody's day in cybersecurity these days.
145
00:06:01,320 --> 00:06:03,360
So I'm not too apologetic about it,
146
00:06:03,360 --> 00:06:05,960
but I think what it shows to me,
147
00:06:05,960 --> 00:06:07,800
assuming that this was,
148
00:06:07,800 --> 00:06:09,440
that there was some legitimate vulnerability
149
00:06:09,440 --> 00:06:11,680
it wasn't just directly connected to the internet.
150
00:06:11,680 --> 00:06:15,080
It does make you think AI is going to be used more
151
00:06:15,080 --> 00:06:16,840
and has been used in Japan,
152
00:06:16,840 --> 00:06:20,200
there's been many cyber attacks that were AI based.
153
00:06:20,200 --> 00:06:23,400
And it's an opportunity for us to talk about how AI
154
00:06:23,400 --> 00:06:27,720
will eventually be used in every attack
155
00:06:27,720 --> 00:06:30,560
as a sort of dynamic pen test,
156
00:06:30,560 --> 00:06:33,840
real-time pen test to find vulnerabilities
157
00:06:33,840 --> 00:06:36,000
and exploit them at the same time,
158
00:06:36,000 --> 00:06:41,710
which is I think a step further than we've gone before.
159
00:06:41,710 --> 00:06:44,590
Mobile apps are just part of everyday life now.
160
00:06:44,590 --> 00:06:47,790
Banking, healthcare, shopping, entertainment, you name it.
161
00:06:47,790 --> 00:06:50,310
And with that comes a lot of trust
162
00:06:50,310 --> 00:06:52,470
because users are putting their personal data
163
00:06:52,470 --> 00:06:54,550
directly into your app.
164
00:06:54,550 --> 00:06:55,670
But here's the reality.
165
00:06:55,670 --> 00:06:57,870
Mobile apps are a growing target.
166
00:06:57,870 --> 00:07:01,070
A recent survey found that 72% of organizations
167
00:07:01,070 --> 00:07:04,630
experienced a mobile app security incident last year
168
00:07:04,630 --> 00:07:08,350
and 92% say threats are only increasing.
169
00:07:08,350 --> 00:07:10,390
And the way attackers are going after apps
170
00:07:10,390 --> 00:07:11,950
is pretty sophisticated.
171
00:07:11,950 --> 00:07:14,710
They're reverse engineering them, modifying them
172
00:07:14,710 --> 00:07:18,230
and redistributing fake versions through phishing campaigns,
173
00:07:18,230 --> 00:07:21,610
side loading and even third party app stores.
174
00:07:21,610 --> 00:07:23,530
So from a user's perspective,
175
00:07:23,530 --> 00:07:26,270
everything can look completely legitimate.
176
00:07:26,270 --> 00:07:27,950
That's why taking a proactive approach
177
00:07:27,950 --> 00:07:30,430
to mobile app security really matters.
178
00:07:30,430 --> 00:07:31,950
You want to stay ahead of these threats
179
00:07:31,990 --> 00:07:34,710
not react after the damage is done.
180
00:07:34,710 --> 00:07:36,630
This is where Guard Square comes in.
181
00:07:36,630 --> 00:07:38,070
They provide advanced protection
182
00:07:38,070 --> 00:07:40,470
for both Android and iOS apps,
183
00:07:40,470 --> 00:07:42,710
along with automated security testing
184
00:07:42,710 --> 00:07:44,990
to catch vulnerabilities early
185
00:07:44,990 --> 00:07:46,910
and real-time threat monitoring
186
00:07:46,910 --> 00:07:49,590
so you can actually see what's happening out there.
187
00:07:49,590 --> 00:07:52,030
If your mobile app is critical to your business
188
00:07:52,030 --> 00:07:53,590
and it probably is,
189
00:07:53,590 --> 00:07:55,990
this is something worth paying attention to.
190
00:07:55,990 --> 00:07:58,790
You can learn more at guardsquare.com.
191
00:07:58,790 --> 00:08:03,040
That's guardsquare.com.
192
00:08:03,040 --> 00:08:04,480
Yeah, it's a really good point, Scott.
193
00:08:04,480 --> 00:08:07,800
And I think these internet worms and bots
194
00:08:07,800 --> 00:08:10,480
and botnets and all these things, this is nothing new.
195
00:08:10,480 --> 00:08:11,920
This is old hat, right?
196
00:08:11,920 --> 00:08:14,040
This is kind of how attacks have been working
197
00:08:14,040 --> 00:08:17,880
for since the beginning of information security, right?
198
00:08:17,880 --> 00:08:19,840
But I think the difference with AI
199
00:08:19,840 --> 00:08:22,880
is these attacks are faster.
200
00:08:22,880 --> 00:08:24,440
They're done faster.
201
00:08:24,440 --> 00:08:26,560
They're done more automated
202
00:08:26,560 --> 00:08:30,480
where before it was a human behind the keyboard
203
00:08:30,480 --> 00:08:33,040
putting a script together, trial and error,
204
00:08:33,040 --> 00:08:34,960
figuring things out, doing that,
205
00:08:34,960 --> 00:08:36,760
and that still happens today.
206
00:08:36,760 --> 00:08:39,800
But with AI, things happen much faster.
207
00:08:39,800 --> 00:08:42,360
So I think that's the
challenge now.
208
00:08:42,360 --> 00:08:44,600
Yeah, I think the other key difference
209
00:08:44,600 --> 00:08:47,120
is that humans get tired of doing this stuff
210
00:08:47,120 --> 00:08:48,600
or they can only do so many at a time
211
00:08:48,600 --> 00:08:50,040
because they're going so slow.
212
00:08:50,040 --> 00:08:51,840
But AI is persistent.
213
00:08:51,840 --> 00:08:53,520
We should have a name for an attack like that,
214
00:08:53,520 --> 00:08:56,320
like an advanced persistent threat.
215
00:08:56,320 --> 00:08:58,920
Yeah, APT, AI persistent threat,
216
00:08:58,920 --> 00:09:00,080
or what do you call it?
217
00:09:00,080 --> 00:09:02,000
Well, we have to call it SI now
218
00:09:02,000 --> 00:09:04,680
because the president has decided here
219
00:09:04,680 --> 00:09:07,360
that it's no longer AI, it's super intelligence.
220
00:09:07,360 --> 00:09:08,960
Super intelligence, persistent threat,
221
00:09:08,960 --> 00:09:10,640
or if you're dyslexic.
222
00:09:11,840 --> 00:09:14,800
I have a problem with just calling it super intelligence.
223
00:09:14,800 --> 00:09:16,160
Enemy of the state, man.
224
00:09:16,160 --> 00:09:17,840
I saw a post somewhere where someone's like,
225
00:09:17,840 --> 00:09:21,120
oh my gosh, AI is going to create this worm
226
00:09:21,120 --> 00:09:23,800
and it's going to attack all these devices.
227
00:09:23,800 --> 00:09:26,400
And I'm like, but this is happening now
228
00:09:26,400 --> 00:09:28,200
with worms and botnets.
229
00:09:28,240 --> 00:09:30,440
We've always had this problem.
230
00:09:30,440 --> 00:09:33,480
It's just now I think the speed of delivery
231
00:09:33,480 --> 00:09:34,920
and the speed of finding
232
00:09:34,920 --> 00:09:38,480
and that's really the advantage that AI has.
233
00:09:38,480 --> 00:09:42,280
And I go back to the controls around this
234
00:09:42,280 --> 00:09:44,680
and the security things that you need to do
235
00:09:44,680 --> 00:09:47,560
to harden these systems, that has not changed either.
236
00:09:47,560 --> 00:09:49,160
Just because AI is in the mix,
237
00:09:49,160 --> 00:09:51,760
you still have to do the basic fundamentals,
238
00:09:51,760 --> 00:09:55,000
which in this case don't have a system
239
00:09:55,000 --> 00:09:56,560
hanging out on the internet
240
00:09:56,600 --> 00:09:59,040
that is potentially vulnerable.
241
00:09:59,040 --> 00:10:02,200
You can put a layer of a VPN or use tail scale
242
00:10:02,200 --> 00:10:04,520
or there's so many solutions these days
243
00:10:04,520 --> 00:10:07,520
that these vendors could be using,
244
00:10:07,520 --> 00:10:11,520
but all it takes is someone to write a script AI
245
00:10:11,520 --> 00:10:15,240
or whoever or a human to find these devices.
246
00:10:15,240 --> 00:10:16,760
And we talked about like show Dan
247
00:10:16,760 --> 00:10:18,520
and there's tools that will find
248
00:10:18,520 --> 00:10:21,760
internet of things devices hanging out on the internet.
249
00:10:21,760 --> 00:10:25,200
And it doesn't take a lot of knowledge to create a script
250
00:10:25,200 --> 00:10:27,120
and then attack all of those devices.
251
00:10:27,120 --> 00:10:28,840
And I think that's what we've seen here.
252
00:10:28,840 --> 00:10:31,160
Someone made a point.
253
00:10:31,160 --> 00:10:32,680
We don't know who did this, right?
254
00:10:32,680 --> 00:10:35,160
We don't have a lot of information.
255
00:10:35,160 --> 00:10:37,320
To me it feels like could you actually do this
256
00:10:37,320 --> 00:10:38,840
and get some media attention?
257
00:10:38,840 --> 00:10:41,960
Yeah, but think about the consequences
258
00:10:41,960 --> 00:10:46,560
if this was a hospital or life critical systems
259
00:10:46,560 --> 00:10:49,200
that are happening to be hanging out on the internet
260
00:10:49,200 --> 00:10:50,680
and people could die.
261
00:10:50,680 --> 00:10:52,680
This is a very serious thing.
262
00:10:53,440 --> 00:10:55,560
We don't want to accuse everybody
263
00:10:55,560 --> 00:10:58,040
of just putting stuff on the internet
264
00:10:58,040 --> 00:11:00,760
and having default credentials and stuff like that.
265
00:11:00,760 --> 00:11:03,560
There is vulnerability in every kind of software
266
00:11:03,560 --> 00:11:04,960
including VPN software.
267
00:11:04,960 --> 00:11:07,880
So you might have configured it completely properly.
268
00:11:07,880 --> 00:11:12,400
And the AI approach now with highly fast
269
00:11:12,400 --> 00:11:17,280
and highly scaled attacks may be able to break the VPNs
270
00:11:17,280 --> 00:11:19,160
that we've really trusted for a long time.
271
00:11:19,160 --> 00:11:21,920
And this is why they're calling this now
272
00:11:21,920 --> 00:11:25,000
the bone apocalypse that we're living in
273
00:11:25,000 --> 00:11:27,960
where there's just going to be more vulnerabilities
274
00:11:27,960 --> 00:11:30,400
than we've ever seen in our lifetime
275
00:11:30,400 --> 00:11:32,840
happening at a faster rate.
276
00:11:32,840 --> 00:11:35,040
Well, it's not that they are new vulnerabilities.
277
00:11:35,040 --> 00:11:38,200
It's that the AI is finding old vulnerabilities
278
00:11:38,200 --> 00:11:40,240
because with the mythos, they're all using mythos now
279
00:11:40,240 --> 00:11:44,040
to try and find those because if they don't
280
00:11:44,040 --> 00:11:45,120
somebody else is going to.
281
00:11:45,120 --> 00:11:48,200
I think internet of things devices,
282
00:11:48,200 --> 00:11:50,480
anything with an IP address that's connected
283
00:11:50,480 --> 00:11:51,320
to the internet.
284
00:11:51,360 --> 00:11:53,920
What can you buy that's electronic these days
285
00:11:53,920 --> 00:11:57,040
that doesn't connect to the internet?
286
00:11:57,040 --> 00:11:58,200
Everything does.
287
00:11:58,200 --> 00:11:59,560
And it's getting stupid.
288
00:11:59,560 --> 00:12:02,760
Like your coffee maker, your toothbrush, your,
289
00:12:02,760 --> 00:12:07,000
you name it, it has some
type of internet connectivity.
290
00:12:07,000 --> 00:12:08,200
Like we should do an episode
291
00:12:08,200 --> 00:12:09,480
about the internet toothbrushes.
292
00:12:09,480 --> 00:12:11,080
I think that's hilarious.
293
00:12:11,080 --> 00:12:13,880
So like why, why does my toothbrush
294
00:12:13,880 --> 00:12:14,720
have to connect to the internet?
295
00:12:14,720 --> 00:12:16,440
I know, and there was a story, I don't know,
296
00:12:16,440 --> 00:12:19,640
five to maybe even longer years ago
297
00:12:19,640 --> 00:12:22,800
where some guy monitored all of the traffic
298
00:12:22,800 --> 00:12:27,120
in his home network to see what was communicating
299
00:12:27,120 --> 00:12:27,960
and how much data.
300
00:12:27,960 --> 00:12:30,160
And it was just like unbelievable how.
301
00:12:30,160 --> 00:12:31,000
Oh, it's crazy.
302
00:12:31,000 --> 00:12:31,840
Yeah.
303
00:12:31,840 --> 00:12:33,120
It's absolutely crazy.
304
00:12:33,120 --> 00:12:35,600
I mean, in, you know, from your TV to, I mean,
305
00:12:35,600 --> 00:12:37,920
you name it, think about all the devices
306
00:12:37,920 --> 00:12:39,920
you have in your house right now.
307
00:12:39,920 --> 00:12:41,320
Like I think about, cause it's the holidays.
308
00:12:41,320 --> 00:12:42,480
We got Halloween.
309
00:12:42,480 --> 00:12:45,840
Like I have four devices right now
310
00:12:45,840 --> 00:12:47,960
that are the smart switches
311
00:12:47,960 --> 00:12:50,480
that turn my lights on outside.
312
00:12:50,480 --> 00:12:54,440
That alone is probably squawking away to the internet.
313
00:12:54,440 --> 00:12:55,280
Right?
314
00:12:55,280 --> 00:12:56,120
Yep, yep.
315
00:12:56,120 --> 00:12:57,680
Except it's on my home network.
316
00:12:57,680 --> 00:13:00,920
The more we depend on it, the more vulnerable we are.
317
00:13:00,920 --> 00:13:03,480
I wanted to give you an opportunity to plug the book
318
00:13:03,480 --> 00:13:06,160
which has been released, right?
319
00:13:06,160 --> 00:13:08,080
The Amazon Kindle version.
320
00:13:08,080 --> 00:13:12,360
Yes, the digital legacy tree was released last week
321
00:13:12,360 --> 00:13:15,200
and getting interesting response.
322
00:13:15,200 --> 00:13:18,520
It's actually, it won't be free as of the time
323
00:13:18,520 --> 00:13:20,200
that you published this episode.
324
00:13:20,200 --> 00:13:21,600
By the time this is released now.
325
00:13:21,600 --> 00:13:23,080
It's gonna be at 99 cents.
326
00:13:23,080 --> 00:13:23,920
Wow.
327
00:13:23,920 --> 00:13:26,080
Look to buy for a week or two at least.
328
00:13:26,080 --> 00:13:30,520
And so a special hint for listeners.
329
00:13:30,520 --> 00:13:33,560
If you're interested in thinking about what happens
330
00:13:33,560 --> 00:13:36,400
to all your accounts, if something happens to you
331
00:13:36,400 --> 00:13:39,600
where you can't manage them anymore unexpectedly
332
00:13:39,600 --> 00:13:41,560
and your family has to take over,
333
00:13:41,560 --> 00:13:43,440
what have you done to try and prepare for that?
334
00:13:43,440 --> 00:13:45,920
And I did an episode a couple of weeks ago
335
00:13:45,920 --> 00:13:47,520
with you and Kevin to talk about that.
336
00:13:47,520 --> 00:13:51,400
But the book itself is now released as an e-book on Kindle
337
00:13:51,400 --> 00:13:54,120
and it is free for the next day or two
338
00:13:54,120 --> 00:13:56,120
and then 99 cents for a while.
339
00:13:56,120 --> 00:13:59,080
But it's been a fun experience just getting that published
340
00:13:59,080 --> 00:14:02,240
and getting some good feedback to good reviews.
341
00:14:02,240 --> 00:14:05,800
So I would love to have people buy it for 99 cents,
342
00:14:05,800 --> 00:14:07,080
do a review if you can.
343
00:14:07,080 --> 00:14:11,120
And the verified buyer reviews are very valuable
344
00:14:11,120 --> 00:14:12,640
in terms of driving it.
345
00:14:12,640 --> 00:14:15,280
99 cents for a book in this economy.
346
00:14:15,280 --> 00:14:17,520
Come on guys, everybody should be buying this book.
347
00:14:17,520 --> 00:14:18,880
That's so affordable.
348
00:14:18,880 --> 00:14:22,000
And are you looking to do a print version one day?
349
00:14:22,000 --> 00:14:23,960
Yes, I'm gonna wait and see what kinds of feedback
350
00:14:23,960 --> 00:14:25,160
I get on the e-book.
351
00:14:25,160 --> 00:14:27,000
Cause the nice thing about Kindle is
352
00:14:27,000 --> 00:14:30,240
you can reissue a new edition instantaneously.
353
00:14:30,240 --> 00:14:32,920
So I wanna get it to be a little more stable
354
00:14:32,920 --> 00:14:35,520
based on feedback of people who've been reading it.
355
00:14:35,520 --> 00:14:39,440
I feel like a egotist going in every once in a while
356
00:14:39,440 --> 00:14:41,320
and checking my KDP downloads.
357
00:14:42,320 --> 00:14:44,640
It's up to 70, released like three days ago.
358
00:14:44,640 --> 00:14:46,320
So have a look at this.
359
00:14:46,320 --> 00:14:48,280
Amazon bestsellers.
360
00:14:48,280 --> 00:14:50,280
Oh, wow. Bestselling, business and investing.
361
00:14:50,280 --> 00:14:53,160
Number one, the digital legacy tree.
362
00:14:53,160 --> 00:14:54,320
Look at that.
363
00:14:54,320 --> 00:14:55,760
Congratulations.
364
00:14:55,760 --> 00:14:57,080
That's big time.
365
00:14:57,080 --> 00:14:58,280
That's big time.
366
00:14:58,280 --> 00:14:59,120
It helps it's free.
367
00:14:59,120 --> 00:14:59,960
I love it.
368
00:14:59,960 --> 00:15:04,720
Let's help Scott get more than 70 downloads.
369
00:15:04,720 --> 00:15:05,560
Yeah, absolutely.
370
00:15:05,560 --> 00:15:07,640
Please buy the book for 99 cents.
371
00:15:07,640 --> 00:15:08,480
You won't regret it.
372
00:15:08,800 --> 00:15:12,840
My target is actually to get 20 verified reviews
373
00:15:12,840 --> 00:15:14,320
by the end of November.
374
00:15:14,320 --> 00:15:15,160
Awesome.
375
00:15:15,160 --> 00:15:17,480
Then we'll make it a good Christmas gift for people.
376
00:15:17,480 --> 00:15:19,200
Yeah, and then leave a review for Scott.
377
00:15:19,200 --> 00:15:21,840
I do appreciate the people from the podcast
378
00:15:21,840 --> 00:15:24,800
who have signed up to be beta readers
379
00:15:24,800 --> 00:15:26,960
and provided the review comments before I published it.
380
00:15:26,960 --> 00:15:29,080
So I actually put an acknowledgement list
381
00:15:29,080 --> 00:15:31,680
in the front of the book for folks
382
00:15:31,680 --> 00:15:33,840
that put significant contributions in.
383
00:15:33,840 --> 00:15:35,240
So thanks everybody for that.
384
00:15:35,240 --> 00:15:36,240
I appreciate it.
385
00:15:36,240 --> 00:15:37,640
All right, everyone.
386
00:15:37,640 --> 00:15:39,520
Thank you for listening as always.
387
00:15:39,520 --> 00:15:41,920
And until next time, stay safe,
388
00:15:41,920 --> 00:15:43,880
stay secure and stay private.
389
00:15:43,880 --> 00:15:45,640
Thank you for listening or watching.
390
00:15:45,640 --> 00:15:48,400
If you liked this episode, hit subscribe,
391
00:15:48,400 --> 00:15:50,280
share it with your friends and colleagues,
392
00:15:50,280 --> 00:15:53,560
or jump into our community at sharedsecurity.net
393
00:15:53,560 --> 00:15:56,320
slash supporter to keep the conversation going.
394
00:15:56,320 --> 00:15:58,480
Thanks again, and we'll see you next week
395
00:15:58,480 --> 00:16:01,080
for another episode of Shared Security.