and we want you to feel like you can ask questions of us all safe up front we don't have all the answers and neither experts do but you know it is there's it's a very wide field right and there's a really good analogy that  one of the guest because we had a conference where he described you know like several security has all these different so specialties just like being a doctor has lost so specialties and if someone were to have a heart attack on an team for the past year has really been focused on data collection in trying to improve some of the software that's used at the police department and one of those areas of interest and hence the way that we got connected that he wants to expand his role in looking at how cyber crimes  breach of data and what that means is you know we all have sensitive data about our our lives that they collect for us and all that data has been made available to unknown third parties and the way that happened was like many corporations throughout the world you have data and then you need to get to the  data in this case yours and those frameworks with the cove application framework was not patched meaning there was a known problem and the company through this the sins of omission i think it's different companies and would argue whether this was a sin of omission or actions that could be used against you so you can reveal everything to the federal government when you get a clearance and that information was breach sensibly b chinese hackers a couple of years ago so this is something that's been building up and up until this point i don't think there was been a breach quite like airport tax which affected quite so many people in such a compromising way  little hesitant to do that will that's what he was part of the breach as well as a personal information so but this isn't it a steady stream of breaches over the past five to ten years and i think this is the one i think the reason why i think everyone  open credit cards close credit cards you know how how often you've chosen to pay those credit cards off or perhaps you were delinquent in the past but you're not anymore my dresses where you lived in the past so there's there's a lot of personal information that is collected and these are what you call a data broker a deal where where they're just backing up information about your so that when you know and i think that's i think the important point here is your data the informational the person all unique information that you are is becoming increasingly valuable meeting so there are people out there that know how to take that information about you and turn that into a dollar and that's what this is and i think one of the biggest problems with cyber security is people don't know enough about it sure  technical aspects about it and that's absolutely true but i would argue that once you learn about the individual technical specifications you know how does internet get to this laptop and how does how does the banking jumbo if you will then there's a couple of better for is that i like to use to help orient people towards the problem and i write one of my favorite ones is bicycle locks bicycles get stolen all the time and the function of bicycles is you know where you put your bicycle how big is the bicycle lock how many bicycle locks you just stamp it with a bolt cutter or it's a little more complex and then you have to our expensive is your mind and those are all variables that contribute to whether or not i like you left outside i guess don't and cybersecurity is very much i mean that it in my mind is a great number is valuable it can be sold for a dollar so your credit card number with your first name your last name your address all that information i could potentially try to get credit card companies have ways do how does a company when you when somebody cements an application for a new credit card how do they know it's time you unless you're walking physically into the bank with your driver's license gold but if we all agree that it has work now your personal data is the new currency of the underworld of the internet if you will the criminals that use this information  and i think that's like to use to me those words but that's the paradigm shift that's the last twenty or thirty years and you know e a company it's a poor profit company and they did not catch this this application framework and so what was able to exploit it and many of us look back and say wow how could you do that and i think the new philosophical framework now to look at this is like if you're sitting on top of something that's really really valuable you should protect it with the commensurate amount of more we get we get around twenty thousand calls a service a year those are all services all services are from that date range we had about twelve hundred thirteen hundred for fraud get one in the in progress obviously someone had it was that an overly you know woman she had clicked on a link you know hey you're you know he's i need to promote into your computer real quick puts out a call the number of the guys in her i go to our house  times you're going to be very busy for too long that's for sure so i think you may have a good point is that you know have you seen anything so that going back to my premise of this is and an economic problem don't look at the jargon in the way here these guys these bad guys have to have lives they work long hours but the economics of the situation is like there wasn't enough to go around for productive the number of i needed internet and he needed access i need a computer and i need to be desperate for money and so as the whole world gets internet access as the whole world as computers become cheaper you know the the decision to go into this business of taking identities and making money off of it you know there is there was a certain market for it right so what equifax has done now is changed the supply demand so yes i do i think we should expect to see more compromises and future but it will take time for them to take i mean one hundred forty three gold bullion behind that that effort toward can be quite high so what what this particular compromise has done is someone has figured out a way to get in the middle it's literally called the man in the middle of attack so there is a by it's like taking a shower the middle of the street and everyone can see what you do and i think people just don't it's so useful in a pinch that hurt your connection is not encrypted from your web browser then you could be at risk but i think one of the key things to point out here is this is a man in the middle attacks you have to physically be present philosophically speaking it's not necessarily the closest alligator to the book there are other problems that you should probably address first before you worry about this one  the shareholders or a company to expend the effort of developing a patch for a five year old robert some companies do it sometimes and when you're buying your equipment there's no telling how long they're going to support likely threat here is that somebody compromises a bank account a good easy a password yes somebody could go after password banters that is definitely a juicy target last pass has been compromised on some it has had issues at least twice but you know going back it's like you know if you really want to keep that by saying if you hire an armed guard to stand by but you know after ten hours in the state of massachusetts i'm pretty sure you're going to exceed the cost by just fine and so you really have to pay ok hold how much effort am i going to put into protecting my head and my information what's worth my time where  eight password manager is a good idea a lot of these power managers will generate passwords for you so you don't you know that you actually know what your password is you log in to this password manager and there's ways of making it even more secure using were to call multi factor off an occasion to something you know a password or something you happen which is either a thumb print some of the newer smartphones of the bunker scanners that you know you can access always by every sixty seconds that changes on the only person that has that keys you because you've generated off a picture of a screen that goes away in your phone is the only place it has a second piece you want to password for the next indication technique was your bank for example you would log in to your bank to your bank would send a text message well the problem with that is you could and i've seen this i've had clients who had issues with people taking over the phones provoking the second the second factor of authentication sending a text message stealing the text message code and then automatic use of it in here they logged in and they go in the change your phone number s you know it's not as good but it's better than just having a password the other problem with passwords is that humans are horrible and being original to the point where there are people who have developed the whole pass for an apology where the gas you know when you force someone to use an uppercase letter and a lower case letter and to create a password you know that's where the you know a requirement you know banks won't let you type in a new password right something like ninety five percent of the time the first letter is always offered who humans will never start a password with a something to do with the patriots and then the number maybe you're so in another ten years don't use years you know use something that starts with three if you doing four digits right because nine hundred seventy two free or your bank p is a terrible terrible number it's not hard to guess that most people use their kid's birthday or whatever and you're talking about computers i can do calculations billions of car conditions a second so they can go through all the years and over the last one hundred years pretty easily but to go back i recommend perhaps for managers absolutely if you're sitting on top of a classified cia document there is somebody out there who knows  example you know somebody says oh my gosh we had a break in the library we now need we need to install locks everywhere you go it used to locks are all the doors and it's when you break through a window broke the locks in the windows somebody breaks the glass there is a in terms of banking and this is the most likely vector someone's going to because that's where the money is read your bank account so that's the most likely place someone's going to come after you i think it's really important that your e mail be protected by multifactor of an occasion because if somebody can't break into your bank they're going to just keep moving up the chain right one of the other ways people try to information went to one vendor this guy subscribed to it was a prize or something and tried to reset a password or something like that and they provoked the customer service representative to start asking questions and they were using essentially as a con dame to get a feel for what information was correct what was not correct and what they did is they want to three or four different companies like apple and a of the answer to his top three questions and they had all that information and they didn't they didn't hack anything and then what most people consider hacking is actually illegally getting into something right it's illegal to get into someone else's computer right what they did up until the point where they got into the person's account was all legal played all the information that started it was public and then they just played different companies off of each other to service more information so bottom line in terms of security i think it's important that if you step away you know the computer that you use for banking should not be available to kids right on your e mail that  registered should be locked down with the multi factor of the negation your bank application should be able to factor authentication and then any phone so a lot of companies don't have phone passwords  number is you know five five five one two three four five six seven eight ok what's your what's your challenge password well here's my challenge that's what that's one step that you can take none of these any any any of these can be depended eventually with enough you're just trying and if you're just an average person you need an average bicycle and i think what we're trying to do here is rightly relate what that is so let me hold back lou because we're