00:00:01Summer Heat and Compact Drones
00:09:05Folding Screens and Data Breaches
00:14:51Technological Myths and Cybersecurity Threats
00:20:34Discord Malware via Emojis
00:33:06Airplane Hack Attacks
BU BÖLÜM HAKKINDA
What if you could capture stunning aerial shots without a steep learning curve? On this episode of Zero Gravity Live, join Anthony, Matt, and Sterling as we embrace the summer heat while exploring the DJI FPV drone and the ultra-compact Hover Air X1. Matt breaks down the features of these drones, illustrating how the Hover Air X1 makes aerial photography accessible to everyone. We mix tech talk with summer vibes, offering a refreshing start to our episode filled with exciting warm-weather experiences from across the U.S.
Discover the transformative power of the Galaxy Fold and its innovative folding screen as Sterling shares how this device revolutionizes his productivity. We delve into an app that enhances drone flight audio capture, making it perfect for dynamic content creation. Our conversation shifts to cybersecurity, discussing the significant Snowflake data breach and its impact on platforms like Ticket Tech in Australia. We lay the groundwork for understanding the evolving tech landscape by blending gadget excitement with crucial security insights.
Ever wondered how secure your tech really is? We expose the persistent threats in the digital world, highlighting the alarming activities of "Shiny Hunter" and the staggering statistic of 450 million cyber attacks during the Tokyo Olympics. From debunking tech myths to exploring innovative threats like Discord malware via emojis, we underscore the importance of cybersecurity vigilance. Finally, we tease next week's riveting discussion on airplane hack attacks, promising an in-depth dive into the frightening realities of aviation cybersecurity. Stay weightless with Zero Gravity Live!
Watch us live every Tuesday at 11 am EST
Need the best storage for Veeam? Check out Ootbi by Object First
ingilizce
Amerika Birleşik Devletleri
NOTLARI GÖSTER 🔗
TRANSKRİPT 🔗
Speaker 1:
0:01
Welcome back to Zero Gravity Live, the Weightless Weekly Tech Talk Podcast, bringing all the latest discussions right to you. If you're watching on YouTube, you already know what to do Ring the bell, Otherwise you'll never know when we're on, when we're live. If you're on X or LinkedIn, welcome. Please let us know where you're watching from. Leave a comment in whatever platform you're in. We want to give you that shout out.
Speaker 2:
0:24
And if you're listening in an audio form podcast.
Speaker 1:
0:27
Uh, you know, leave us a nice review. Helps us out, as always. I'm anthony, joined by my two besties, matt and sterling.
Speaker 3:
0:34
Matt, how you doing today I'm good, brother, it's uh, it's good to be back and I had a nice long weekend and and love the show. So, uh, we've got some really cool topics I think we're going to touch on today, as well as some cool gadgets. So how about you, sterling?
Speaker 2:
0:49
Man I'm doing great. Couldn't be happier to be here. Let me tell you, on the East Coast, summer is officially here. It was a burner this weekend. What about where you guys are? Of course I'm in the mid-Atlantic Baltimore, maryland. What about you all? It was summer six months ago, sterling. Of course I'm in the mid-Atlantic.
Speaker 1:
1:03
Baltimore, Maryland. What about you all?
Speaker 2:
1:06
It was summer six months ago, sterling, true, I'm in sunny central Florida, and I don't think it ever stops being summer. Is it ever not summer in Orlando? No, it's not Never.
Speaker 3:
1:14
Even when it's cold, it's still summer, yeah yeah, same here, right outside of Georgia it's, you know, 95 degrees. Humidity is nice and high. So you go outside, just stand there and you start sweating. So wonderful times.
Speaker 2:
1:26
Yeah, man, and you know the West Coast is really getting hit. I know Arizona I don't know if anybody's listening from the Phoenix Arizona area, but they've been in triple digits for some time. I know out in the Southwest, south California, southern California, where I normally am as well. They're even getting some, some, some good, some good temperatures there. But you know what they say it's not the heat, it's the humidity.
Speaker 3:
1:54
No truer words have ever been spoken, darling.
Speaker 1:
1:58
That's why I just go stand directly in the sun. When you're in the sun, there is no humidity, it's just all it's gone For sure, like you just burned to a crisp, but you don't have to worry about the sun, because when you're in the sun there is no humidity, it's just all it's gone For sure, like you just burned to a crisp, but you don't have to worry about the humidity For sure that's right.
Speaker 1:
2:10
The prostrates from a Floridian who's made it this far. Well, I'm glad to hear it's hot everywhere and it's not just me that's suffering. Let's talk a little bit about what's going on in y'all's office. Matt, I know you teased something yesterday and I want to know what's going on in your office, my friend.
Speaker 3:
2:27
Yeah, well, it's technically in my office now, but it's not something that stays in my office, and you guys know I'm a sucker for drones, right? So this is my main drone. I had to show it off. So this is the DJI FPV drone, fully decked out with a sticker kit delivery. So I mean this. You know this is my main drone. So if you're really looking for something fun to fly, this has got the goggles and all the things.
Speaker 3:
2:49
Now, for those of you who know drones, though, it's not a quick exercise to fly a drone, right, you can't just turn it on and immediately take off. You've got to let the thing sync up to GPS and the satellites, you've got to let it go through its power cycle. You know there's a lot of pre-flight stuff. I mean much like rear. You know real airplanes and pilots, right. You got to go through your pre-flight checklist and let it sync and then you take off. So I was actually looking around for something, you know, to add to the camera bag that was much more compact and, you know, could take essentially a vertical selfie or a drone level, you know, capture. That wasn't so complicated, you know, and didn't have all these other features because I have a drone for that, right, I don't need that. So I came across this little guy and I don't know if you guys will appreciate this, but I freaking loved it and I had to get it. This is called the hover air x1. So if I hold it way up here to the camera, I guess it's upside down, so it it literally is super thin. I mean, here's my hand right, so it's in the palm of my hand, and the thing opens up and it's actually a drone that has a camera. It's got a gimbal, but the cool thing is there's no controller, there's no gps, there's, you know, no certifications or drone pilots. You know things that you have to have because this one actually flies with preset modes like follow. It can do a hover, it can do the zoom out, but because it doesn't have any of the GPS stuff, it's got a very limited range which allows it to kind of fly under the radar. Pun intended, you know, for some of the larger drones that you know have to have all these extra, you know specifications and clarifications, things like that.
Speaker 3:
4:42
So where I think this is really cool, like if you're out and you, you know, want to go on the family vacation and you just want to take something super compact. Let's say you're at the beach and you want to get like a cool, you know aerial view of you and the family with the waves behind you. You don't want to lug down the big drone. Get out the remote control, get it up there somehow. Try to hide the control, right, I mean the remote control, get it up there somehow. Try to hide the control right.
Speaker 3:
5:07
I mean this is like super quick, super easy. Just two buttons on the top where you pick the mode and you, you actually have it lift off. And the cool thing is it takes off from the palm of your hand, it lands in the palm of your hand and, obviously, because the blades are all enclosed, you're not going to run the risk of, you know, slicing a finger off. And it also really really impact resistant because of these little screen cavities. They actually break apart. I can't really show you this on the camera because it's so small, but there's little pieces that will separate by design. So if it runs into a tree, it won't just completely destroy the drone. So, super cool. I've got, you know, essentially two batteries and a little nice little dock, battery charging dock. So this right here could go in your bag for any type of cool like follow behind FPV stuff you want, without all the complexities of the typical drone. So that's my tech for the day. What do you guys think?
Speaker 2:
6:00
Matt, you might've just killed this segment with that piece. I love everything about it. I've got a ton of questions, though I'm sure everybody out there is thinking a couple of things here. First of all, what's the range of height that that thing can go? You mentioned preset modes, obviously low enough to where we don't have to worry about all the goings on about what's happening over at Capitol Hill with the whole flying and the drones and GPS. It's below that right. What are the presets that it sits at?
Speaker 3:
6:26
It goes around 15 to 18 feet vertical, so it's not, you know, anything crazy. And the other thing too is weight. I don't know the exact weight, but certainly in other parts of the world certain weight limit drones have to have you know classifications and you have to have you know official approval if you will to fly some of those drones. Well, this one is. They actually did a review. It was like 0.2 grams below, whatever that is. So technically this is light enough to fly, you know, anywhere.
Speaker 2:
6:59
That is awesome.
Speaker 3:
7:00
You can technically fly it with your phone, like there's an app that comes with it if you choose to use it. But the app is not required whatsoever. Got it, but you can actually, you know, navigate it with your phone and it uses Wi-Fi. So, basically, as far as a Wi-Fi signal would travel and it loses connection, it'll just stop. Now, the one limitation to this is you definitely can't fly it over water, because if it loses track, it will just land, okay. So obviously, if you're trying to do some cool, you know, over water shot and it loses you, it's game over. It's landed right there in the lake.
Speaker 2:
7:35
What's the? What are the megapixels? What's the picture quality?
Speaker 3:
7:38
So it's 2.7 K. So it's not a 4k camera and it's definitely not the best drone camera. So, like you know, and and because of its size, right, if you're looking for nice aerial, you know 8k high, 4k, 60 stuff. That's where the dji comes in. So it's 2.7k, I think at 30 frames. You know, for typical video that's perfect, probably okay. And the other cool thing is it'll shoot in vertical mode anthony does not like that.
Speaker 2:
8:04
He's literally.
Speaker 1:
8:04
My arms are crossed and, you know, my camera registered as a thumbs down. I don't know. I'll be okay. And the other cool thing is it'll shoot in vertical mode. Anthony does not like that. He's literally my arms are crossed and my camera registered as a thumbs down. I don't know why. That's awesome.
Speaker 2:
8:11
Okay, final question. I know I had a plethora of questions here. You mentioned it can follow you. Does it do that via Bluetooth, and how fast can it follow? I think you already know where I'm going with this question.
Speaker 1:
8:20
I can still say no more, you're going to make a tissue motorcycle.
Speaker 3:
8:23
All right. So, bro, check this out. It does not need Bluetooth to follow you. It doesn't need your phone at all. Like you could leave your phone at the house if you chose to, it locks onto you. So when you take off, you know from your palm, it'll lock onto you. And it's got our favorite buzzword right it's got AI. You know recognition for you, you know people tracking and it will fly like.
Speaker 3:
8:48
I've watched a ton of reviews before I bought it, and there's guys on bikes. You know mountain bikes going 23 miles an hour and it's able to keep up with them. Flight time is around 10 to 15 minutes, so it's not going to be the longest, but the whole idea is you're taking quick, you know clips, and that's why you got extra batteries. Check, check this out, though. The last thing I'll say is the other cool thing that the app allows you to do is because the creators of the app they probably know exactly what pitch and resonance the blades make when the thing is flying. They actually have an audio capture feature in the app and if you use that, any microphone connected to your phone will record your voice and completely noise. Cancel out the prop wash. So if you wanted to do a walking selfie or whatever you want to call it, like a walking vlog. You could have the thing track and fly backwards, so it's filming you walking forwards and you can be talking as if you've got a nice high-quality microphone.
Speaker 2:
9:47
So I was like sold I'm going to use this. I have nothing else Anthony, that's amazing, I want one.
Speaker 1:
9:55
I need to see you do a zero-gravity live from your quad or your drone sorry, your drone as you're walking around a beach. That's what I need to see. Otherwise, you haven't sold me on the concept yet.
Speaker 3:
10:08
Yes, it's definitely not the end all be all for drones, but for something that will go in your pocket, that you can get up in 30 seconds. It was a game changer for me, man that's very cool.
Speaker 1:
10:21
That's awesome. Sterling, do you have anything you want to share with the class today?
Speaker 2:
10:24
You know what? Just for a couple of quick seconds I wanted to share with everybody. I made a little bit of an upgrade to my home and mobile labs recently. Oh really, yeah, in the very first show I think it was one of our first shows I shared with everybody a particular phone slash tablet that I had been using on the road instead of using a laptop itself. It was a surface duo and it's essentially duo because it had two separate screens. It could span across, but you could also throw up different, different things on the different screens. Well, now I have upgraded to the full galaxy fold, which is an actual Screen, so it still can do the two screens, top and bottom. It can still pretty much the same form factor, but it's one cohesive piece of folding screens.
Speaker 2:
11:12
We've seen folding screens on phones for the past five, six years now. I don't know if I would quite call it mainstream, but it's been out there for a while. We've heard that Apple is also playing with the concept. I use an iPhone as my main phone.
Speaker 2:
11:26
This guy right here is gonna help me as a mobile monitor in the field when I need to look at something, when I'm recording something, being able to reach our labs, to be on the fly, demos, matt hats off and tips for helping get connected this morning on VPN but also to be able to you know when I'm on flights, to be able to comfortably send emails and other things to the light. I wanted to keep it separate because I still want to be able to have my phone and do phone things with my phone in my pocket, but this I'm looking for this to really really reduce the use of not only my laptop but when we're recording awesome content for the show and other things on the fly, this thing's going to come in handy. Pretty pleased to add this to the setup. Why do we call them?
Speaker 1:
12:07
phones anymore. You know, that's all I can think of when you show me this device that folds into a screen magically in your hands, Like it's not a phone. That's not a phone, that is a computer, right, like it's very cool. Sterling, I'm not gonna lie. I do wish that Apple had a foldable. I feel like they're just waiting to get the technology right. As always, every Apple fanboy tells themselves before they go to bed at night they're just waiting, technology will be better and then we'll get the foldable iPad. We will buy them seven years from now.
Speaker 3:
12:42
And it'll be the most revolutionary thing ever, and they will obviously be the first ones that have created it.
Speaker 2:
12:50
No one's done foldables until Apple does foldables. The foldable for the rest of us, yes.
Speaker 1:
12:54
And it only cost about 15 grand. So easy lightweight transaction on your bank account, no big deal. Well, thanks for sharing that. Sterling. Uh, both of you all have cool gadgets. I don't. I don't have. I've heard other cool things to share. I need to find some more cool thing. I just don't.
Speaker 2:
13:12
I'm not in the cool things train anymore, I guess you have a room full of cool things behind you, anthony.
Speaker 1:
13:17
Yeah, but this is like this is just stuff you know like and and anthony, let's not forget the audio.
Speaker 3:
13:25
Only listeners. What's behind you?
Speaker 1:
13:27
oh, I have a giant wall of anime action figures and video game memorabilia. But like it's not that cool, it's not that cool, it's super cool, okay. Well, thank you for making me now consider more things I need to buy. As always, let's get into our topics this week, shall we? I know we teased out our big one, but I'm going to save that for last, because it's absolutely buck wild. So, matt, why don't you hit us off with what's going on?
Speaker 3:
13:53
Yeah, so I ran across this one. So for those of you who are aware of the Snowflake breach, this is another one that was compromised. You know Ticketmaster was one and then this is actually the Australian version, ticket Tech, and I think it's interesting because this is probably the first thing I've ever come across in life that originated from Australia, that wasn't trying to literally kill you, because most of the time it's incredible animals and snakes and the giant spiders that fly and all the other things right. So this is a different type of threat, but this is just one example and you can see like right in the header. You know $30 million, so it's just the snowflake vulnerability was really huge and exploited and if you go on to read this article it talks about, you know this whole syndicate was really just going after the low hanging fruit, the shiny hunters, as they call themselves.
Speaker 1:
14:51
We're just going after the what.
Speaker 3:
14:55
Like shiny hunter cybercrime game. So that's another victim that they got, but it oh, speaking of giant spiders, there you go. I can't make this up right. It's an article that talks about australia. There's your man-eating spiders.
Speaker 1:
15:09
I just I just gotta. I, just in case y'all didn't know, a shiny hunter in pokemon because I know is that I know you need to know this is basically there's like a one in a hundred, one in a thousand percent chance when you're playing these games out in the field, that you run into a shiny pokemon, which is just a different color than the normal color palette that you would get. So shiny hunters are those that play the game with the intention of, like, I'm only going to get the rares takes thousands of hours and they have no lives. But it's just, it's really ironic. That's the name of the cyber crime unit. That is.
Speaker 2:
15:44
Very interesting.
Speaker 3:
15:46
Well, I mean, this is just one more example. You know and this was from the dark reading I think you shared something from here last week, anthony.
Speaker 3:
15:55
So it's like you know this just I mean you don't have to look, for you know it's everywhere you see these days. There's new examples of threats and here's another $30 million hit. So it's like what's next? And you know, this just kind of goes with the whole theme of the show that we've been preaching for months and months and months is you know, you've got to have secure backups. You can't just rely on you know things to be safe anymore, right? So you've got to take the extra precaution, you've got to be vigilant, you've got to test, you've got to make sure you've got a backup plan, literally.
Speaker 1:
16:31
Right, and here's just another example. So I was working on a blog this morning before our our stream here about the olympics, and I learned a very disturbing fact that I think pairs very well with your article here. Just take a guess how many cyber attacks there were at the tokyo olympics.
Speaker 2:
16:44
Oh lord, take just a guess a number of cyber attacks I mean, I'm thinking about the number of people there, I mean man, I don't know.
Speaker 1:
16:55
I was going to say 15,000, 20,000. 450 million.
Speaker 2:
16:58
You've got to be kidding me, Because I guess every device huh, it's not just every device.
Speaker 1:
17:01
It's like they're trying to get into the Olympics website, all the different streams. You know, like it's wild. It came from cisco. I guess they were working with them last year and they, you know, were last four years and, uh, they like they tracked over 450 million different attempts to get in to various olympics technology, which is just insane. So this, you know, 30 million potentially affected in this breach like it's not stopping, it's not going to get any better and the numbers are not going to get any smaller so that's, right yeah, yeah tough times out there and it's just beginning.
Speaker 2:
17:40
Right, I bet you that's 450 last olympics. This one's got to overshoot that. I mean, think about where the ransomware, just whole market, the tam, has really come in those last four years.
Speaker 1:
17:51
They're hypothesizing eight times as much this year, so are you kidding me. Over a billion, essentially over a billion just attacks on attacks on attacks, happening every you know microsecond, at that point I mean like fun facts from this, this article.
Speaker 3:
18:06
As many as 165 organizations were hit by the snow breach. You've got things like advanced auto parts. Uh, santander bank, you know where some of the others. I'm like advanced auto parts, that's. I go in there a lot, all the time your data.
Speaker 1:
18:22
That's your data they've got access to.
Speaker 1:
18:24
Now they know what size I use yeah, well, I think that's the thing, right. Like you know, we talk a lot about data protection and like what businesses can do, but from a user end, just always be using different passwords. Yeah, update those things as often as you can, because as soon as you hear about it, it's already too late. It's probably been in the infrastructure for months. Just go, go, go. Uh, air on the side of paranoia. When it comes to your own personal security, I cannot recommend it enough.
Speaker 1:
18:53
Well said well said what you got for us today, sterling well, you know, it's really interesting.
Speaker 2:
18:58
We're talking about um sort of being paranoid and really understanding how to protect ourselves. I think part of that is really understanding kind of what's true and what's not. So what I wanted to share today is really something that talks about the myths of tech that we still somehow still believe. This is a pretty awesome one, guys, and anyone listening right now you've got to check out this article for yourself. It's got some funny ones in there, but just to sort of highlight a couple of really cool ones.
Speaker 2:
19:28
The first one so what do you think? Does incognito mode really make you invisible, gents? Of course no, of course not. The little hat tells you everything. Little hat in the glasses it tells you everything. It's just the guy hiding in plain sight. So these are the types of things where, uh, I think people there are people that still have some uses for incognito mode that still think it's sort of youuscates who you are. It does not. Another really good one that I thought was on here that people may not know is your internet speed is all that matters. Now we've got a guy running fiber to the desktop on this call, and I'm not going to say any names Matt Price, but all I want to say is there's?
Speaker 2:
20:12
some other factors here. So even a high speed connection can feel sluggish. You know, this one is one that I think that we've all believed in the past. I for one, knew that that wasn't the case, because how many times have I yanked the USB out of a drive? And okay, as long as I'm not accessing a particular file that might be in an app, nothing's going to happen to the drive itself. I want to skip down to one last one for you guys, and here we go. This is just for you too.
Speaker 1:
20:39
Oh perfect, max, don't get viruses I need to stop sharing your screen. We need to talk.
Speaker 2:
20:45
We're going to need to talk there's some new information out there that we know. You know, macs are becoming quite, quite pervasive in the corporate America now, and so thus they are now under attack as well. This is a really great read, and really just some great reminders of what we need to do to maintain our hygiene around. You know, being secure and really keeping ourselves secure, simple and powerful, and so this was a great read. You know, it's it really keeping ourselves secure, simple and powerful, and so this was a great read.
Speaker 1:
21:12
You know it's funny. As you went through some of these, like I had some memories unlocked. Like I remember, when we first got Fiverr in our home, the first thing I did was I went and tried to download like a really big game on Steam and I was like, well, I'm not getting my full gigabit per second connection here. What's going on? It's like, well, duh, steam's not going to serve me the data at that speed. So I had to find a place that actually give me gigabit download rates and just arbitrarily go download something so I could prove I had the speed. You know what the speed test is telling me.
Speaker 1:
21:45
I think the funny thing about all of those things in that article is we have this super convenient acceptance. Whenever someone tells us something, you're in Cognito, you're getting a gigabit per second, max, don't get viruses. It's like, yeah, 99% of the time there is a truth to the statement, but 1% of the time you actually need to know the technology, and I would say that one percent is actually more like everyone should actually know the technology. You take the time to learn the thing. If you just accept the marketing buzzword, then you're making my job way too easy.
Speaker 2:
22:20
yeah it's so true, it's it's it's so true. Another one that they actually talked about, on there too, is your cell phone bars. You know how long, how many times, we looked at that and been like, but honey, I have three bars. Well, they just talked about that. There are other things and, uh, additional bands that are in your phone that may or may not be telling you the whole truth there. So you're right. It really, uh, it really behooves us to go back and, kind of that, one percent of the time, know what we're talking about.
Speaker 1:
22:44
I don't even look at the cell phone bars anymore, useless. You could turn that off on the phone entirely and I would still have the experience I have, so like, why even bother? Yeah?
Speaker 3:
22:54
Just for you guys. Just for you guys. Oh my god.
Speaker 2:
23:00
Are you kidding the uploads? You called me out, so I just had to share it.
Speaker 3:
23:06
Respect on that.
Speaker 1:
23:07
Have you actually been able to make use of that for anything Uploading videos to?
Speaker 3:
23:11
YouTube actually matters?
Speaker 1:
23:15
That's part of the reason we did it.
Speaker 3:
23:16
Yeah, everything else to your point. It's sheer bandwidth doesn't make your experience any better, right?
Speaker 3:
23:22
It's all about latency and DNS lookups and things like that. That can really speed things up To your point, sterling, because it's everybody. I even here, where I'm at physically, I can subscribe up to five gigabit and I tried that for a month and it was completely useless for like 98.5 percent of what I use day to day. So way too expensive, downgraded back and I it's still so cheap these days compared to, I mean, even five years ago with, like cable internet, when you thought 300 megabit was solid and then you saw your upload because it was shared and it was like 20. Yes, so having symmetrical bandwidth up and down is really nice, that's unbelievable.
Speaker 2:
24:04
That was impressive, impressive specs.
Speaker 1:
24:06
Yeah Well, I think the funny thing too is, like you know, yes, the article is very tongue-in-cheek and it's pointing out things that we all think or that we used to think were true. But there is, like there is something to be gleaned in all of this, which is, you know, we are only as good, or the technology is only as good as we are right. Like, at the end of the day, technology is meant to serve us. And the second that we stop understanding how it works and just taking it for what it is, we've kind of lost. We've lost our way. Because I love incognito mode, because it allows me to prevent certain cookies and things from going to companies that I don't want to give away for free, right, like I don't want every company to just benefit off my search and information, like that's not cool. You know, yoinking the USB thing yeah, they've added that eject button to every single platform and it'll yell at you otherwise. But sometimes, if you know you're good, like yoink that thing you know, that's not gonna happen to it.
Speaker 1:
25:06
So it's knowledge is power, and we talk about that a lot on this, this podcast because the more you know, the more resilient you are and, I think, the more happier you become, because you're never surprised when something goes wrong. You have an innate understanding of, like, the intricate nature of technology and how things work yeah it's a good point yeah well, cool, I'm about to show you something that's not I mean it's fun but now we go one way we tease this.
Speaker 1:
25:39
So we tease this. The name of the episode is this running man will kill you, and here's why. Uh, so there is this new linux malware and it is controlled through emojis sent from Discord. This comes from Bleeping Computer, another great website that I highly recommend to just stay up on all things cybersecurity and awareness. Now it's called Dysmoji and obviously you know the title gives you quite a bit of information you need to know. It's coming through Discord, so I use Discord on the daily. I guess I'm more at risk than y'all are, but you know, the idea here is that you can use certain backdoors through Dismoji and you send emojis to make it happen. And the best part about this article let me zoom in here so you can see it in crystal clarity are what the emojis do. So I thought I'd take a minute and look through some of these the running man emoji which we used in our episode title Execute a command on the victim's device.
Speaker 1:
26:35
This command receives an argument, which is a command to execute Camera with a flash. Take a screenshot of the victim's screen and upload it to the command channel as an attachment. Fire, find and send all files matching a predefined extension list that are present in the victim's device. The following extensions are exfiltrated CSV, doc, iso, jpeg a bunch.
Speaker 2:
26:58
That's dangerous right there, wow yeah.
Speaker 1:
27:01
Yeah, fox Zip all Firefox profiles on the victim's device. These files can be retrieved by the attacker at a later time. Now this one makes me sad as a Firefox user, just like you know why they got to go after the Fox like that.
Speaker 1:
27:14
And lastly, skull Terminate the malware process using the OSexit. So pretty dangerous stuff Like one. I think it is hilarious that these attackers have gone through the effort of building emoji based commands to take over and do damage via Discord. But Discord is becoming one of the most popular sort of social networks out there now. It's replaced a lot of the more popular ones like Twitter and Instagram, because people want the smaller community. So you know, if you're in that small community, I think we have to start treating it the same way we treat our email, Like you can get phished. You don't know what everyone's intentions are, be skeptical about the kind of people you're engaging with and talking to, because this kind of malware is out there. What do y'all think?
Speaker 3:
28:03
And these emojis only have to be received, Like you don't have to interact with them whatsoever. It's just if they show up in a chat, boom, they're activated.
Speaker 1:
28:14
That is absolutely right. So you know it. It basically just comes in through a backdoor in the discord. I do believe that there's a certain kind of malware you have to initially get, but it uses, once you have that malware, malware. It uses discord as the communications protocol to interact with it, which is interesting, really clever, like that's a. That's a smart way to provoke an attack. And again, you know skepticism right. Like you know, we talk about it in all the things you got to know what applications you're downloading or what files are coming through when they land on your pc yeah, I think sterling just got the running man because his computer rebooted.
Speaker 1:
28:51
Oh no, you know, that would have never happened on a non-window. I'm just saying.
Speaker 3:
28:58
I'm just saying I was gonna call that out right because you know, right before sterling got the running man and rebooted his computer, we were. He was dropping the bomb on. Macs can get viruses and malware and everything like that. Here we are talking about Linux and everybody just seems to think Linux is the most secure OS and right here is a prime example of why that is not at all true. All operating systems are potentially vulnerable to these types of threats.
Speaker 1:
29:30
It's super interesting. I highly recommend reading the article, especially if you are a linux user or a discord user, it's you know.
Speaker 2:
29:36
you're only going to be putting yourself at risk otherwise, yeah yeah, whoever just sent me that fire emoji and rebooted my computer. We're going to talk after this episode. That's uh not cool.
Speaker 1:
29:47
I got to know what Discord you're in Sterling.
Speaker 2:
29:51
Quick question because they sent that to me and it just happened right when I was going to ask this. Is this the attacker sending the emoji? I don't know if we discussed this right or is okay. So does this need to be clicked on or enacted with anything, or just viewed in the discord by the victim?
Speaker 1:
30:06
So if you have disk emojiji on your, your linux box, and you're running discord, diskmoji listens for new messages in the command channel on the discord server. So it's it's basically waiting and the discord is the communications protocol. It's super smart, okay. Like I hate to say I love it, but I I do. It's elegant, right. This is good software that's being written and utilized in a very bad way, wow.
Speaker 3:
30:32
Yeah, we need the people that would do this for good to come out of the shadows and build some cool automations behind it.
Speaker 1:
30:39
What's that you think about? You could manage your whole IT department through Discord. What a nice idea. But it's never going to happen because this is, you know, meant for destruction and bad behavior, as always, as always. Right, right, well, any, uh any closing thoughts on this one well, I know from my perspective.
Speaker 2:
31:02
Um, I won't be going to discord anytime soon. I don't know what happened there, but uh, but that's it me, and I'm going to review my best practices after this call. Perfect timing, as always, but great show, as always, guys.
Speaker 1:
31:15
Listen, if any of y'all are on Discord and you DM me, I will send you a file. It's up to you whether or not you choose to accept it, so just keep that in the back of your minds.
Speaker 3:
31:25
All I can think about to describe this show, but also many of our shows. I feel like after we get done talking about our cool what's in our office, it's Morpheus with the pills. Which one do you want to take? And it's always the red pill.
Speaker 3:
31:42
It's like we're always going down the rabbit hole to see how deep this stuff goes. And here's another example. This time it's not a Windows threat, or Mac threat for that matter. It's Linux based. So it just goes to show you, like I said a minute ago, nobody's immune to this. You know, it's a matter of when it's going to happen, not if anymore. We all know that, and I feel like every week we bring examples on why that little saying is true. It's not a matter of if it's when. So always be prepared, always have a backup plan, always have immutable backups, you know, and that's key to surviving some of these attacks. So I can't wait to see what next week brings, that's right.
Speaker 1:
32:19
Yeah, and you know we talk about this week after week. We're doing a live webinar tomorrow with Jason Garbus, author of Zero Trust Data Resilience, which, again, if you're interested in learning about Zero Trust scan that QR code or join our webinar you can register on LinkedIn to get access to it. We're going to be doing a deep dive conversation all about how you can make your Zero Trust strategy essentially bulletproof when it comes to backup storage and backup software. So, if you have an interest in that at all, do check out our webinar, do read our white paper and spend some time understanding these principles, because these will take you such a long way in building data security for your data protection. But, as always, we want to thank you for tuning in, listening and watching with us.
Speaker 1:
33:04
Listen, if you like, the Discord topic this week. Next week it's going to get even more intense. We're going into the air Sterling has a topic all about airplane hack attacks, which I'm terrified of, and I'm not going to fly until you tell me what's going on here. So if you're interested in hearing more about that, be sure to tune in next week as we learn all about that. But until then, as always, stay weightless, stay frictionless stay, zero gravity. We'll see you next week.
Speaker 3:
33:38
Thank you.
0:01
Welcome back to Zero Gravity Live, the Weightless Weekly Tech Talk Podcast, bringing all the latest discussions right to you. If you're watching on YouTube, you already know what to do Ring the bell, Otherwise you'll never know when we're on, when we're live. If you're on X or LinkedIn, welcome. Please let us know where you're watching from. Leave a comment in whatever platform you're in. We want to give you that shout out.
Speaker 2:
0:24
And if you're listening in an audio form podcast.
Speaker 1:
0:27
Uh, you know, leave us a nice review. Helps us out, as always. I'm anthony, joined by my two besties, matt and sterling.
Speaker 3:
0:34
Matt, how you doing today I'm good, brother, it's uh, it's good to be back and I had a nice long weekend and and love the show. So, uh, we've got some really cool topics I think we're going to touch on today, as well as some cool gadgets. So how about you, sterling?
Speaker 2:
0:49
Man I'm doing great. Couldn't be happier to be here. Let me tell you, on the East Coast, summer is officially here. It was a burner this weekend. What about where you guys are? Of course I'm in the mid-Atlantic Baltimore, maryland. What about you all? It was summer six months ago, sterling. Of course I'm in the mid-Atlantic.
Speaker 1:
1:03
Baltimore, Maryland. What about you all?
Speaker 2:
1:06
It was summer six months ago, sterling, true, I'm in sunny central Florida, and I don't think it ever stops being summer. Is it ever not summer in Orlando? No, it's not Never.
Speaker 3:
1:14
Even when it's cold, it's still summer, yeah yeah, same here, right outside of Georgia it's, you know, 95 degrees. Humidity is nice and high. So you go outside, just stand there and you start sweating. So wonderful times.
Speaker 2:
1:26
Yeah, man, and you know the West Coast is really getting hit. I know Arizona I don't know if anybody's listening from the Phoenix Arizona area, but they've been in triple digits for some time. I know out in the Southwest, south California, southern California, where I normally am as well. They're even getting some, some, some good, some good temperatures there. But you know what they say it's not the heat, it's the humidity.
Speaker 3:
1:54
No truer words have ever been spoken, darling.
Speaker 1:
1:58
That's why I just go stand directly in the sun. When you're in the sun, there is no humidity, it's just all it's gone For sure, like you just burned to a crisp, but you don't have to worry about the sun, because when you're in the sun there is no humidity, it's just all it's gone For sure, like you just burned to a crisp, but you don't have to worry about the humidity For sure that's right.
Speaker 1:
2:10
The prostrates from a Floridian who's made it this far. Well, I'm glad to hear it's hot everywhere and it's not just me that's suffering. Let's talk a little bit about what's going on in y'all's office. Matt, I know you teased something yesterday and I want to know what's going on in your office, my friend.
Speaker 3:
2:27
Yeah, well, it's technically in my office now, but it's not something that stays in my office, and you guys know I'm a sucker for drones, right? So this is my main drone. I had to show it off. So this is the DJI FPV drone, fully decked out with a sticker kit delivery. So I mean this. You know this is my main drone. So if you're really looking for something fun to fly, this has got the goggles and all the things.
Speaker 3:
2:49
Now, for those of you who know drones, though, it's not a quick exercise to fly a drone, right, you can't just turn it on and immediately take off. You've got to let the thing sync up to GPS and the satellites, you've got to let it go through its power cycle. You know there's a lot of pre-flight stuff. I mean much like rear. You know real airplanes and pilots, right. You got to go through your pre-flight checklist and let it sync and then you take off. So I was actually looking around for something, you know, to add to the camera bag that was much more compact and, you know, could take essentially a vertical selfie or a drone level, you know, capture. That wasn't so complicated, you know, and didn't have all these other features because I have a drone for that, right, I don't need that. So I came across this little guy and I don't know if you guys will appreciate this, but I freaking loved it and I had to get it. This is called the hover air x1. So if I hold it way up here to the camera, I guess it's upside down, so it it literally is super thin. I mean, here's my hand right, so it's in the palm of my hand, and the thing opens up and it's actually a drone that has a camera. It's got a gimbal, but the cool thing is there's no controller, there's no gps, there's, you know, no certifications or drone pilots. You know things that you have to have because this one actually flies with preset modes like follow. It can do a hover, it can do the zoom out, but because it doesn't have any of the GPS stuff, it's got a very limited range which allows it to kind of fly under the radar. Pun intended, you know, for some of the larger drones that you know have to have all these extra, you know specifications and clarifications, things like that.
Speaker 3:
4:42
So where I think this is really cool, like if you're out and you, you know, want to go on the family vacation and you just want to take something super compact. Let's say you're at the beach and you want to get like a cool, you know aerial view of you and the family with the waves behind you. You don't want to lug down the big drone. Get out the remote control, get it up there somehow. Try to hide the control, right, I mean the remote control, get it up there somehow. Try to hide the control right.
Speaker 3:
5:07
I mean this is like super quick, super easy. Just two buttons on the top where you pick the mode and you, you actually have it lift off. And the cool thing is it takes off from the palm of your hand, it lands in the palm of your hand and, obviously, because the blades are all enclosed, you're not going to run the risk of, you know, slicing a finger off. And it also really really impact resistant because of these little screen cavities. They actually break apart. I can't really show you this on the camera because it's so small, but there's little pieces that will separate by design. So if it runs into a tree, it won't just completely destroy the drone. So, super cool. I've got, you know, essentially two batteries and a little nice little dock, battery charging dock. So this right here could go in your bag for any type of cool like follow behind FPV stuff you want, without all the complexities of the typical drone. So that's my tech for the day. What do you guys think?
Speaker 2:
6:00
Matt, you might've just killed this segment with that piece. I love everything about it. I've got a ton of questions, though I'm sure everybody out there is thinking a couple of things here. First of all, what's the range of height that that thing can go? You mentioned preset modes, obviously low enough to where we don't have to worry about all the goings on about what's happening over at Capitol Hill with the whole flying and the drones and GPS. It's below that right. What are the presets that it sits at?
Speaker 3:
6:26
It goes around 15 to 18 feet vertical, so it's not, you know, anything crazy. And the other thing too is weight. I don't know the exact weight, but certainly in other parts of the world certain weight limit drones have to have you know classifications and you have to have you know official approval if you will to fly some of those drones. Well, this one is. They actually did a review. It was like 0.2 grams below, whatever that is. So technically this is light enough to fly, you know, anywhere.
Speaker 2:
6:59
That is awesome.
Speaker 3:
7:00
You can technically fly it with your phone, like there's an app that comes with it if you choose to use it. But the app is not required whatsoever. Got it, but you can actually, you know, navigate it with your phone and it uses Wi-Fi. So, basically, as far as a Wi-Fi signal would travel and it loses connection, it'll just stop. Now, the one limitation to this is you definitely can't fly it over water, because if it loses track, it will just land, okay. So obviously, if you're trying to do some cool, you know, over water shot and it loses you, it's game over. It's landed right there in the lake.
Speaker 2:
7:35
What's the? What are the megapixels? What's the picture quality?
Speaker 3:
7:38
So it's 2.7 K. So it's not a 4k camera and it's definitely not the best drone camera. So, like you know, and and because of its size, right, if you're looking for nice aerial, you know 8k high, 4k, 60 stuff. That's where the dji comes in. So it's 2.7k, I think at 30 frames. You know, for typical video that's perfect, probably okay. And the other cool thing is it'll shoot in vertical mode anthony does not like that.
Speaker 2:
8:04
He's literally.
Speaker 1:
8:04
My arms are crossed and, you know, my camera registered as a thumbs down. I don't know. I'll be okay. And the other cool thing is it'll shoot in vertical mode. Anthony does not like that. He's literally my arms are crossed and my camera registered as a thumbs down. I don't know why. That's awesome.
Speaker 2:
8:11
Okay, final question. I know I had a plethora of questions here. You mentioned it can follow you. Does it do that via Bluetooth, and how fast can it follow? I think you already know where I'm going with this question.
Speaker 1:
8:20
I can still say no more, you're going to make a tissue motorcycle.
Speaker 3:
8:23
All right. So, bro, check this out. It does not need Bluetooth to follow you. It doesn't need your phone at all. Like you could leave your phone at the house if you chose to, it locks onto you. So when you take off, you know from your palm, it'll lock onto you. And it's got our favorite buzzword right it's got AI. You know recognition for you, you know people tracking and it will fly like.
Speaker 3:
8:48
I've watched a ton of reviews before I bought it, and there's guys on bikes. You know mountain bikes going 23 miles an hour and it's able to keep up with them. Flight time is around 10 to 15 minutes, so it's not going to be the longest, but the whole idea is you're taking quick, you know clips, and that's why you got extra batteries. Check, check this out, though. The last thing I'll say is the other cool thing that the app allows you to do is because the creators of the app they probably know exactly what pitch and resonance the blades make when the thing is flying. They actually have an audio capture feature in the app and if you use that, any microphone connected to your phone will record your voice and completely noise. Cancel out the prop wash. So if you wanted to do a walking selfie or whatever you want to call it, like a walking vlog. You could have the thing track and fly backwards, so it's filming you walking forwards and you can be talking as if you've got a nice high-quality microphone.
Speaker 2:
9:47
So I was like sold I'm going to use this. I have nothing else Anthony, that's amazing, I want one.
Speaker 1:
9:55
I need to see you do a zero-gravity live from your quad or your drone sorry, your drone as you're walking around a beach. That's what I need to see. Otherwise, you haven't sold me on the concept yet.
Speaker 3:
10:08
Yes, it's definitely not the end all be all for drones, but for something that will go in your pocket, that you can get up in 30 seconds. It was a game changer for me, man that's very cool.
Speaker 1:
10:21
That's awesome. Sterling, do you have anything you want to share with the class today?
Speaker 2:
10:24
You know what? Just for a couple of quick seconds I wanted to share with everybody. I made a little bit of an upgrade to my home and mobile labs recently. Oh really, yeah, in the very first show I think it was one of our first shows I shared with everybody a particular phone slash tablet that I had been using on the road instead of using a laptop itself. It was a surface duo and it's essentially duo because it had two separate screens. It could span across, but you could also throw up different, different things on the different screens. Well, now I have upgraded to the full galaxy fold, which is an actual Screen, so it still can do the two screens, top and bottom. It can still pretty much the same form factor, but it's one cohesive piece of folding screens.
Speaker 2:
11:12
We've seen folding screens on phones for the past five, six years now. I don't know if I would quite call it mainstream, but it's been out there for a while. We've heard that Apple is also playing with the concept. I use an iPhone as my main phone.
Speaker 2:
11:26
This guy right here is gonna help me as a mobile monitor in the field when I need to look at something, when I'm recording something, being able to reach our labs, to be on the fly, demos, matt hats off and tips for helping get connected this morning on VPN but also to be able to you know when I'm on flights, to be able to comfortably send emails and other things to the light. I wanted to keep it separate because I still want to be able to have my phone and do phone things with my phone in my pocket, but this I'm looking for this to really really reduce the use of not only my laptop but when we're recording awesome content for the show and other things on the fly, this thing's going to come in handy. Pretty pleased to add this to the setup. Why do we call them?
Speaker 1:
12:07
phones anymore. You know, that's all I can think of when you show me this device that folds into a screen magically in your hands, Like it's not a phone. That's not a phone, that is a computer, right, like it's very cool. Sterling, I'm not gonna lie. I do wish that Apple had a foldable. I feel like they're just waiting to get the technology right. As always, every Apple fanboy tells themselves before they go to bed at night they're just waiting, technology will be better and then we'll get the foldable iPad. We will buy them seven years from now.
Speaker 3:
12:42
And it'll be the most revolutionary thing ever, and they will obviously be the first ones that have created it.
Speaker 2:
12:50
No one's done foldables until Apple does foldables. The foldable for the rest of us, yes.
Speaker 1:
12:54
And it only cost about 15 grand. So easy lightweight transaction on your bank account, no big deal. Well, thanks for sharing that. Sterling. Uh, both of you all have cool gadgets. I don't. I don't have. I've heard other cool things to share. I need to find some more cool thing. I just don't.
Speaker 2:
13:12
I'm not in the cool things train anymore, I guess you have a room full of cool things behind you, anthony.
Speaker 1:
13:17
Yeah, but this is like this is just stuff you know like and and anthony, let's not forget the audio.
Speaker 3:
13:25
Only listeners. What's behind you?
Speaker 1:
13:27
oh, I have a giant wall of anime action figures and video game memorabilia. But like it's not that cool, it's not that cool, it's super cool, okay. Well, thank you for making me now consider more things I need to buy. As always, let's get into our topics this week, shall we? I know we teased out our big one, but I'm going to save that for last, because it's absolutely buck wild. So, matt, why don't you hit us off with what's going on?
Speaker 3:
13:53
Yeah, so I ran across this one. So for those of you who are aware of the Snowflake breach, this is another one that was compromised. You know Ticketmaster was one and then this is actually the Australian version, ticket Tech, and I think it's interesting because this is probably the first thing I've ever come across in life that originated from Australia, that wasn't trying to literally kill you, because most of the time it's incredible animals and snakes and the giant spiders that fly and all the other things right. So this is a different type of threat, but this is just one example and you can see like right in the header. You know $30 million, so it's just the snowflake vulnerability was really huge and exploited and if you go on to read this article it talks about, you know this whole syndicate was really just going after the low hanging fruit, the shiny hunters, as they call themselves.
Speaker 1:
14:51
We're just going after the what.
Speaker 3:
14:55
Like shiny hunter cybercrime game. So that's another victim that they got, but it oh, speaking of giant spiders, there you go. I can't make this up right. It's an article that talks about australia. There's your man-eating spiders.
Speaker 1:
15:09
I just I just gotta. I, just in case y'all didn't know, a shiny hunter in pokemon because I know is that I know you need to know this is basically there's like a one in a hundred, one in a thousand percent chance when you're playing these games out in the field, that you run into a shiny pokemon, which is just a different color than the normal color palette that you would get. So shiny hunters are those that play the game with the intention of, like, I'm only going to get the rares takes thousands of hours and they have no lives. But it's just, it's really ironic. That's the name of the cyber crime unit. That is.
Speaker 2:
15:44
Very interesting.
Speaker 3:
15:46
Well, I mean, this is just one more example. You know and this was from the dark reading I think you shared something from here last week, anthony.
Speaker 3:
15:55
So it's like you know this just I mean you don't have to look, for you know it's everywhere you see these days. There's new examples of threats and here's another $30 million hit. So it's like what's next? And you know, this just kind of goes with the whole theme of the show that we've been preaching for months and months and months is you know, you've got to have secure backups. You can't just rely on you know things to be safe anymore, right? So you've got to take the extra precaution, you've got to be vigilant, you've got to test, you've got to make sure you've got a backup plan, literally.
Speaker 1:
16:31
Right, and here's just another example. So I was working on a blog this morning before our our stream here about the olympics, and I learned a very disturbing fact that I think pairs very well with your article here. Just take a guess how many cyber attacks there were at the tokyo olympics.
Speaker 2:
16:44
Oh lord, take just a guess a number of cyber attacks I mean, I'm thinking about the number of people there, I mean man, I don't know.
Speaker 1:
16:55
I was going to say 15,000, 20,000. 450 million.
Speaker 2:
16:58
You've got to be kidding me, Because I guess every device huh, it's not just every device.
Speaker 1:
17:01
It's like they're trying to get into the Olympics website, all the different streams. You know, like it's wild. It came from cisco. I guess they were working with them last year and they, you know, were last four years and, uh, they like they tracked over 450 million different attempts to get in to various olympics technology, which is just insane. So this, you know, 30 million potentially affected in this breach like it's not stopping, it's not going to get any better and the numbers are not going to get any smaller so that's, right yeah, yeah tough times out there and it's just beginning.
Speaker 2:
17:40
Right, I bet you that's 450 last olympics. This one's got to overshoot that. I mean, think about where the ransomware, just whole market, the tam, has really come in those last four years.
Speaker 1:
17:51
They're hypothesizing eight times as much this year, so are you kidding me. Over a billion, essentially over a billion just attacks on attacks on attacks, happening every you know microsecond, at that point I mean like fun facts from this, this article.
Speaker 3:
18:06
As many as 165 organizations were hit by the snow breach. You've got things like advanced auto parts. Uh, santander bank, you know where some of the others. I'm like advanced auto parts, that's. I go in there a lot, all the time your data.
Speaker 1:
18:22
That's your data they've got access to.
Speaker 1:
18:24
Now they know what size I use yeah, well, I think that's the thing, right. Like you know, we talk a lot about data protection and like what businesses can do, but from a user end, just always be using different passwords. Yeah, update those things as often as you can, because as soon as you hear about it, it's already too late. It's probably been in the infrastructure for months. Just go, go, go. Uh, air on the side of paranoia. When it comes to your own personal security, I cannot recommend it enough.
Speaker 1:
18:53
Well said well said what you got for us today, sterling well, you know, it's really interesting.
Speaker 2:
18:58
We're talking about um sort of being paranoid and really understanding how to protect ourselves. I think part of that is really understanding kind of what's true and what's not. So what I wanted to share today is really something that talks about the myths of tech that we still somehow still believe. This is a pretty awesome one, guys, and anyone listening right now you've got to check out this article for yourself. It's got some funny ones in there, but just to sort of highlight a couple of really cool ones.
Speaker 2:
19:28
The first one so what do you think? Does incognito mode really make you invisible, gents? Of course no, of course not. The little hat tells you everything. Little hat in the glasses it tells you everything. It's just the guy hiding in plain sight. So these are the types of things where, uh, I think people there are people that still have some uses for incognito mode that still think it's sort of youuscates who you are. It does not. Another really good one that I thought was on here that people may not know is your internet speed is all that matters. Now we've got a guy running fiber to the desktop on this call, and I'm not going to say any names Matt Price, but all I want to say is there's?
Speaker 2:
20:12
some other factors here. So even a high speed connection can feel sluggish. You know, this one is one that I think that we've all believed in the past. I for one, knew that that wasn't the case, because how many times have I yanked the USB out of a drive? And okay, as long as I'm not accessing a particular file that might be in an app, nothing's going to happen to the drive itself. I want to skip down to one last one for you guys, and here we go. This is just for you too.
Speaker 1:
20:39
Oh perfect, max, don't get viruses I need to stop sharing your screen. We need to talk.
Speaker 2:
20:45
We're going to need to talk there's some new information out there that we know. You know, macs are becoming quite, quite pervasive in the corporate America now, and so thus they are now under attack as well. This is a really great read, and really just some great reminders of what we need to do to maintain our hygiene around. You know, being secure and really keeping ourselves secure, simple and powerful, and so this was a great read. You know, it's it really keeping ourselves secure, simple and powerful, and so this was a great read.
Speaker 1:
21:12
You know it's funny. As you went through some of these, like I had some memories unlocked. Like I remember, when we first got Fiverr in our home, the first thing I did was I went and tried to download like a really big game on Steam and I was like, well, I'm not getting my full gigabit per second connection here. What's going on? It's like, well, duh, steam's not going to serve me the data at that speed. So I had to find a place that actually give me gigabit download rates and just arbitrarily go download something so I could prove I had the speed. You know what the speed test is telling me.
Speaker 1:
21:45
I think the funny thing about all of those things in that article is we have this super convenient acceptance. Whenever someone tells us something, you're in Cognito, you're getting a gigabit per second, max, don't get viruses. It's like, yeah, 99% of the time there is a truth to the statement, but 1% of the time you actually need to know the technology, and I would say that one percent is actually more like everyone should actually know the technology. You take the time to learn the thing. If you just accept the marketing buzzword, then you're making my job way too easy.
Speaker 2:
22:20
yeah it's so true, it's it's it's so true. Another one that they actually talked about, on there too, is your cell phone bars. You know how long, how many times, we looked at that and been like, but honey, I have three bars. Well, they just talked about that. There are other things and, uh, additional bands that are in your phone that may or may not be telling you the whole truth there. So you're right. It really, uh, it really behooves us to go back and, kind of that, one percent of the time, know what we're talking about.
Speaker 1:
22:44
I don't even look at the cell phone bars anymore, useless. You could turn that off on the phone entirely and I would still have the experience I have, so like, why even bother? Yeah?
Speaker 3:
22:54
Just for you guys. Just for you guys. Oh my god.
Speaker 2:
23:00
Are you kidding the uploads? You called me out, so I just had to share it.
Speaker 3:
23:06
Respect on that.
Speaker 1:
23:07
Have you actually been able to make use of that for anything Uploading videos to?
Speaker 3:
23:11
YouTube actually matters?
Speaker 1:
23:15
That's part of the reason we did it.
Speaker 3:
23:16
Yeah, everything else to your point. It's sheer bandwidth doesn't make your experience any better, right?
Speaker 3:
23:22
It's all about latency and DNS lookups and things like that. That can really speed things up To your point, sterling, because it's everybody. I even here, where I'm at physically, I can subscribe up to five gigabit and I tried that for a month and it was completely useless for like 98.5 percent of what I use day to day. So way too expensive, downgraded back and I it's still so cheap these days compared to, I mean, even five years ago with, like cable internet, when you thought 300 megabit was solid and then you saw your upload because it was shared and it was like 20. Yes, so having symmetrical bandwidth up and down is really nice, that's unbelievable.
Speaker 2:
24:04
That was impressive, impressive specs.
Speaker 1:
24:06
Yeah Well, I think the funny thing too is, like you know, yes, the article is very tongue-in-cheek and it's pointing out things that we all think or that we used to think were true. But there is, like there is something to be gleaned in all of this, which is, you know, we are only as good, or the technology is only as good as we are right. Like, at the end of the day, technology is meant to serve us. And the second that we stop understanding how it works and just taking it for what it is, we've kind of lost. We've lost our way. Because I love incognito mode, because it allows me to prevent certain cookies and things from going to companies that I don't want to give away for free, right, like I don't want every company to just benefit off my search and information, like that's not cool. You know, yoinking the USB thing yeah, they've added that eject button to every single platform and it'll yell at you otherwise. But sometimes, if you know you're good, like yoink that thing you know, that's not gonna happen to it.
Speaker 1:
25:06
So it's knowledge is power, and we talk about that a lot on this, this podcast because the more you know, the more resilient you are and, I think, the more happier you become, because you're never surprised when something goes wrong. You have an innate understanding of, like, the intricate nature of technology and how things work yeah it's a good point yeah well, cool, I'm about to show you something that's not I mean it's fun but now we go one way we tease this.
Speaker 1:
25:39
So we tease this. The name of the episode is this running man will kill you, and here's why. Uh, so there is this new linux malware and it is controlled through emojis sent from Discord. This comes from Bleeping Computer, another great website that I highly recommend to just stay up on all things cybersecurity and awareness. Now it's called Dysmoji and obviously you know the title gives you quite a bit of information you need to know. It's coming through Discord, so I use Discord on the daily. I guess I'm more at risk than y'all are, but you know, the idea here is that you can use certain backdoors through Dismoji and you send emojis to make it happen. And the best part about this article let me zoom in here so you can see it in crystal clarity are what the emojis do. So I thought I'd take a minute and look through some of these the running man emoji which we used in our episode title Execute a command on the victim's device.
Speaker 1:
26:35
This command receives an argument, which is a command to execute Camera with a flash. Take a screenshot of the victim's screen and upload it to the command channel as an attachment. Fire, find and send all files matching a predefined extension list that are present in the victim's device. The following extensions are exfiltrated CSV, doc, iso, jpeg a bunch.
Speaker 2:
26:58
That's dangerous right there, wow yeah.
Speaker 1:
27:01
Yeah, fox Zip all Firefox profiles on the victim's device. These files can be retrieved by the attacker at a later time. Now this one makes me sad as a Firefox user, just like you know why they got to go after the Fox like that.
Speaker 1:
27:14
And lastly, skull Terminate the malware process using the OSexit. So pretty dangerous stuff Like one. I think it is hilarious that these attackers have gone through the effort of building emoji based commands to take over and do damage via Discord. But Discord is becoming one of the most popular sort of social networks out there now. It's replaced a lot of the more popular ones like Twitter and Instagram, because people want the smaller community. So you know, if you're in that small community, I think we have to start treating it the same way we treat our email, Like you can get phished. You don't know what everyone's intentions are, be skeptical about the kind of people you're engaging with and talking to, because this kind of malware is out there. What do y'all think?
Speaker 3:
28:03
And these emojis only have to be received, Like you don't have to interact with them whatsoever. It's just if they show up in a chat, boom, they're activated.
Speaker 1:
28:14
That is absolutely right. So you know it. It basically just comes in through a backdoor in the discord. I do believe that there's a certain kind of malware you have to initially get, but it uses, once you have that malware, malware. It uses discord as the communications protocol to interact with it, which is interesting, really clever, like that's a. That's a smart way to provoke an attack. And again, you know skepticism right. Like you know, we talk about it in all the things you got to know what applications you're downloading or what files are coming through when they land on your pc yeah, I think sterling just got the running man because his computer rebooted.
Speaker 1:
28:51
Oh no, you know, that would have never happened on a non-window. I'm just saying.
Speaker 3:
28:58
I'm just saying I was gonna call that out right because you know, right before sterling got the running man and rebooted his computer, we were. He was dropping the bomb on. Macs can get viruses and malware and everything like that. Here we are talking about Linux and everybody just seems to think Linux is the most secure OS and right here is a prime example of why that is not at all true. All operating systems are potentially vulnerable to these types of threats.
Speaker 1:
29:30
It's super interesting. I highly recommend reading the article, especially if you are a linux user or a discord user, it's you know.
Speaker 2:
29:36
you're only going to be putting yourself at risk otherwise, yeah yeah, whoever just sent me that fire emoji and rebooted my computer. We're going to talk after this episode. That's uh not cool.
Speaker 1:
29:47
I got to know what Discord you're in Sterling.
Speaker 2:
29:51
Quick question because they sent that to me and it just happened right when I was going to ask this. Is this the attacker sending the emoji? I don't know if we discussed this right or is okay. So does this need to be clicked on or enacted with anything, or just viewed in the discord by the victim?
Speaker 1:
30:06
So if you have disk emojiji on your, your linux box, and you're running discord, diskmoji listens for new messages in the command channel on the discord server. So it's it's basically waiting and the discord is the communications protocol. It's super smart, okay. Like I hate to say I love it, but I I do. It's elegant, right. This is good software that's being written and utilized in a very bad way, wow.
Speaker 3:
30:32
Yeah, we need the people that would do this for good to come out of the shadows and build some cool automations behind it.
Speaker 1:
30:39
What's that you think about? You could manage your whole IT department through Discord. What a nice idea. But it's never going to happen because this is, you know, meant for destruction and bad behavior, as always, as always. Right, right, well, any, uh any closing thoughts on this one well, I know from my perspective.
Speaker 2:
31:02
Um, I won't be going to discord anytime soon. I don't know what happened there, but uh, but that's it me, and I'm going to review my best practices after this call. Perfect timing, as always, but great show, as always, guys.
Speaker 1:
31:15
Listen, if any of y'all are on Discord and you DM me, I will send you a file. It's up to you whether or not you choose to accept it, so just keep that in the back of your minds.
Speaker 3:
31:25
All I can think about to describe this show, but also many of our shows. I feel like after we get done talking about our cool what's in our office, it's Morpheus with the pills. Which one do you want to take? And it's always the red pill.
Speaker 3:
31:42
It's like we're always going down the rabbit hole to see how deep this stuff goes. And here's another example. This time it's not a Windows threat, or Mac threat for that matter. It's Linux based. So it just goes to show you, like I said a minute ago, nobody's immune to this. You know, it's a matter of when it's going to happen, not if anymore. We all know that, and I feel like every week we bring examples on why that little saying is true. It's not a matter of if it's when. So always be prepared, always have a backup plan, always have immutable backups, you know, and that's key to surviving some of these attacks. So I can't wait to see what next week brings, that's right.
Speaker 1:
32:19
Yeah, and you know we talk about this week after week. We're doing a live webinar tomorrow with Jason Garbus, author of Zero Trust Data Resilience, which, again, if you're interested in learning about Zero Trust scan that QR code or join our webinar you can register on LinkedIn to get access to it. We're going to be doing a deep dive conversation all about how you can make your Zero Trust strategy essentially bulletproof when it comes to backup storage and backup software. So, if you have an interest in that at all, do check out our webinar, do read our white paper and spend some time understanding these principles, because these will take you such a long way in building data security for your data protection. But, as always, we want to thank you for tuning in, listening and watching with us.
Speaker 1:
33:04
Listen, if you like, the Discord topic this week. Next week it's going to get even more intense. We're going into the air Sterling has a topic all about airplane hack attacks, which I'm terrified of, and I'm not going to fly until you tell me what's going on here. So if you're interested in hearing more about that, be sure to tune in next week as we learn all about that. But until then, as always, stay weightless, stay frictionless stay, zero gravity. We'll see you next week.
Speaker 3:
33:38
Thank you.
SON BÖLÜMLERİ ARA
Zero Gravity Podcast için geçmiş bölümleri ara.
Feragatname: Bu sayfaya yerleştirilmiş podcast ve sanat eserleri, sahibinin mülkiyetinde olan ve Listen Notes, Inc.'e bağlı olmayan veya tarafından onaylanmayan Object First'e aittir.
DÜZENLE
Podcast veritabanını güncel tutmaya yardımcı olduğunuz için teşekkür ederiz.
