WEBVTT 00:03.625 --> 00:08.613 [SPEAKER_00]: Are we too quick though to assume that the authorities are right and is a pro-russian hacking group? 00:08.633 --> 00:10.997 [SPEAKER_00]: I mean, could it be the Jamaican Bob Slay team? 00:11.658 --> 00:12.739 [SPEAKER_00]: Just disappointed. 00:13.300 --> 00:15.123 [SPEAKER_00]: Maybe they're just very bad sports. 00:15.464 --> 00:17.026 [SPEAKER_00]: They say this isn't fair. 00:17.607 --> 00:20.672 [SPEAKER_00]: How are we supposed to compete at the Winter Olympics? 00:29.782 --> 00:32.187 [SPEAKER_01]: smashing security, episode 454. 00:32.588 --> 00:36.396 [SPEAKER_01]: AI was not plotting humanity's demise. 00:36.897 --> 00:37.638 [SPEAKER_01]: Humans were. 00:38.059 --> 00:40.685 [SPEAKER_01]: With Graham, cloutely and special guest Ian Thompson. 00:40.965 --> 00:43.531 [SPEAKER_00]: Hello, hello and welcome to smashing security episode 454. 00:44.172 --> 00:45.174 [SPEAKER_00]: My name's Graham Clooney. 00:45.695 --> 00:47.098 [SPEAKER_00]: And I'm Ian Thompson. 00:47.078 --> 00:49.161 [SPEAKER_00]: Ian, welcome back to the show. 00:49.201 --> 00:51.203 [SPEAKER_00]: You haven't been with us for a while. 00:51.303 --> 00:51.964 [SPEAKER_00]: Oh, it was a pleasure. 00:52.344 --> 00:53.706 [SPEAKER_00]: Good to have you here, Ian. 00:53.746 --> 00:58.892 [SPEAKER_00]: For people who don't know, what are you and why you hear talking about cybersecurity? 00:59.213 --> 01:00.855 [SPEAKER_02]: Well, I'm a carbon-based human life full. 01:00.875 --> 01:02.076 [SPEAKER_02]: No, no, no. 01:02.176 --> 01:06.582 [SPEAKER_02]: I've been a tech journalist for the last quarter of a century. 01:07.643 --> 01:11.668 [SPEAKER_02]: Covering security in the main for the register, before going on to help edit. 01:11.648 --> 01:18.860 [SPEAKER_02]: And so I'm currently a freelance journalist, again, concentrating on security, but also science and whatever else takes my fancy. 01:19.340 --> 01:23.447 [SPEAKER_00]: Fantastic, and you're joining us today from the west coast of the United States. 01:23.547 --> 01:26.552 [SPEAKER_00]: Well, I'm here stuck in old blightes. 01:26.572 --> 01:30.078 [SPEAKER_00]: So we've truly gone trends at Lantic on today's episode. 01:30.398 --> 01:32.121 [SPEAKER_00]: Haven't you been out in the States now? 01:32.101 --> 01:50.733 [SPEAKER_02]: 18 years, I first came over on a one-year contract in 2008 and six weeks after I arrived, I found that my last position had been eliminated in the UK, so I stayed out here and met a local who doesn't like British winters, so I think I'm probably out here for the duration as long as that's allowed. 01:51.515 --> 01:55.662 [SPEAKER_00]: Okay, when you haven't got the accent yet, you can still pass yourself off of a British 01:55.642 --> 02:07.558 [SPEAKER_02]: Yes, I do say tomatoes still, although I have caught myself saying gas, which I feel is letting the side down because of gas is technically a form state rather than, you know, petrol which is slightly slain, more we keeping, put it that way. 02:08.118 --> 02:15.648 [SPEAKER_00]: Well before we kick off less than this week's wonderful sponsors, Mita, Passwork and Vanta, we'll be hearing more about them later on in the podcast. 02:18.953 --> 02:20.755 [SPEAKER_00]: This week on smashing security. 02:20.819 --> 02:35.139 [SPEAKER_00]: We won't be talking about how a South Korean cryptocurrency exchange accidentally sent $44 billion worth of Bitcoin to its users, equivalent to $100,000 each, rather than $1.40 each. 02:37.062 --> 02:47.316 [SPEAKER_00]: You'll hear no discussion of how the Dutch data protection authority has been hacked, using recently disclosed eventies zero-day vulnerabilities, exposing employee contact details. 02:49.760 --> 02:50.942 [SPEAKER_02]: and we won't even mention. 02:51.202 --> 02:56.629 [SPEAKER_00]: How smarter tools the company behind the SmartML email server was hit by the Warlock ransomware. 02:57.090 --> 03:03.398 [SPEAKER_00]: After hackers exploited non-patched vulnerability in smarter tools, own, smarter email product. 03:05.361 --> 03:08.325 [SPEAKER_00]: So Ian, what are you going to be talking about this week? 03:08.423 --> 03:16.280 [SPEAKER_02]: Well, I'll be looking at the Winter Olympics and it appears Pro Russian forces are getting a 0.0 metallic authorities in the hacking competition. 03:16.581 --> 03:22.112 [SPEAKER_00]: And I'll be seeing what happened when someone made a social media site for AI agents. 03:23.756 --> 03:27.985 [SPEAKER_00]: All this and much more come up in this episode of smashing security. 03:30.428 --> 03:33.912 [SPEAKER_00]: Well, let's take a moment now to thank one of this week's sponsors, META. 03:34.372 --> 03:42.882 [SPEAKER_00]: Now, if you've ever worked 19, especially networking, you'll know when the network's working, nobody notices, when it isn't everybody notices. 03:43.242 --> 03:50.150 [SPEAKER_00]: The problem is that most business networks are a mess of different providers, tools, dashboards, contracts, and cross-fingers. 03:50.430 --> 03:58.579 [SPEAKER_00]: And somehow, despite all that complexity, they're expected to be fast, secure, reliable, 03:58.559 --> 04:00.284 [SPEAKER_00]: and that's where META comes in. 04:00.785 --> 04:10.212 [SPEAKER_00]: META builds networks from the ground up, they deliver a complete full stack network in solution wired wireless and cellular, all as one integrated service. 04:10.793 --> 04:13.581 [SPEAKER_00]: And this is genuinely full stack, META. 04:13.561 --> 04:19.449 [SPEAKER_00]: Designs the hardware writes the firmware builds the software manages the deployment and runs the support. 04:19.769 --> 04:38.353 [SPEAKER_00]: They even take care of things like ISP procurement, routine, switching files, VPNs, DNS security, SD-WAN, and multi-site networking in other words, fewer vendors, fewer dashboard, fewer who aren't this problem, conversations, and far fewer late-night panic attacks. 04:38.553 --> 04:43.418 [SPEAKER_00]: meat as approaches about real control, proper visibility, and networks that behave themselves. 04:43.678 --> 04:49.164 [SPEAKER_00]: And for IT leadership, it means something almost mythical in networking, predictability. 04:49.444 --> 04:54.489 [SPEAKER_00]: If you're responsible for keeping the business online, you really should check out meter. 04:54.889 --> 05:05.280 [SPEAKER_00]: So go to meter.com slash smashing to book a demo now, that's metr.com slash smashing. 05:05.300 --> 05:07.362 [SPEAKER_00]: And thanks to meter, the support in the show. 05:08.978 --> 05:10.060 [SPEAKER_00]: Now, chums, chums. 05:10.120 --> 05:12.443 [SPEAKER_00]: You may have heard about this thing called malt book. 05:13.104 --> 05:14.706 [SPEAKER_00]: Ian, have you heard about malt book? 05:14.726 --> 05:15.347 [SPEAKER_02]: I have. 05:15.407 --> 05:18.952 [SPEAKER_02]: It's been going through the text circles here like wildfire. 05:19.152 --> 05:23.418 [SPEAKER_02]: Elon Musk apparently said it was the early stages of the singularity, but you know, this is the Elon. 05:23.538 --> 05:33.973 [SPEAKER_00]: So, you know, I imagine Elon Musk is perceiving that the singularity is just coming around the corner many, many times a day, depending on what he's been ingesting, but it's been a big story in the last couple of weeks. 05:33.953 --> 05:45.250 [SPEAKER_00]: There have been people posting screenshots of AI bots, seemingly having existential crises, they've been inventing their own religions, generally plotting against humanity. 05:45.311 --> 05:54.645 [SPEAKER_00]: But in case there are only listeners out there who haven't actually been following this, I'm going to try and explain what malt book is and why should be about it. 05:54.625 --> 06:03.263 [SPEAKER_00]: some of the reality which is somehow mixture of being both less scary and more concerning at the same time, then may first appear. 06:03.704 --> 06:05.567 [SPEAKER_00]: So what is malt book? 06:06.129 --> 06:12.702 [SPEAKER_00]: Well malt book is a social network exclusively for AI agents. 06:12.682 --> 06:23.091 [SPEAKER_00]: So imagine, I don't know, read it, the Reddit discussion board or four channel, which have a corner you may particularly want to go and delve into, it's not something necessarily want to imagine. 06:23.312 --> 06:29.377 [SPEAKER_00]: But imagine that, but we're only bots composed, only they can comment and vote. 06:29.717 --> 06:40.167 [SPEAKER_00]: So it's just AI's, having a bit of a chat, a bit like humans do, but on multiple humans are supposed to watch from the sidelines rather than participate. 06:40.187 --> 06:41.288 [SPEAKER_00]: Does that sound like 06:41.268 --> 06:43.150 [SPEAKER_00]: fun spectator sports you in? 06:44.151 --> 06:52.061 [SPEAKER_02]: Well, as it turns out, it's not quite such a spectator sporter after all since humans are apparently in the loop, but honestly, I think it's an interesting experiment. 06:52.601 --> 07:02.753 [SPEAKER_02]: I can see why they get it, but at the same time it's looking at I've been scanning through it and it does suggest that if the bots are trying to take over they've got a long way to go yet. 07:02.733 --> 07:07.678 [SPEAKER_00]: Yeah, so this malt book thing, it was built by a chap called Matt Schlicht. 07:08.138 --> 07:09.420 [SPEAKER_00]: I think it's a pronounce his name. 07:09.500 --> 07:13.224 [SPEAKER_00]: He proudly announced that he didn't write a single line of the code. 07:13.924 --> 07:16.907 [SPEAKER_00]: Apparently there's something you can feel pretty proud about these days. 07:17.167 --> 07:18.128 [SPEAKER_00]: Everyone's a developer. 07:18.809 --> 07:20.010 [SPEAKER_00]: Everyone's a developer these days. 07:20.251 --> 07:26.557 [SPEAKER_00]: He says he just asked AI to build the whole thing for him, which as we'll discover was perhaps not the best of decisions. 07:26.697 --> 07:30.481 [SPEAKER_00]: Anyway, this malt book platform launched on January 28th. 07:30.521 --> 07:32.723 [SPEAKER_00]: So, you know, just a week or so ago. 07:32.703 --> 07:50.987 [SPEAKER_00]: And within days, it was claiming to have one and a half million AI agents posting away on it, you know, discussing the latest episode of married at first sight or Australia or politics or whatever it is that AI's want to chat about on their own discussion for them. 07:51.448 --> 08:00.600 [SPEAKER_00]: And as with anything online these days, it didn't take long for things to get 08:00.968 --> 08:07.757 [SPEAKER_00]: Well, one of the things they did was they decided to invent their own machine-born religion, which they called Krustafet. 08:07.777 --> 08:08.598 [SPEAKER_00]: Yeah, how do you pronounce this? 08:08.979 --> 08:10.040 [SPEAKER_00]: A Krustafet? 08:10.901 --> 08:12.303 [SPEAKER_00]: Krustafet? 08:12.323 --> 08:13.044 [SPEAKER_00]: You have a go-in? 08:13.545 --> 08:14.987 [SPEAKER_00]: I had trouble troubles as well. 08:15.047 --> 08:16.208 [SPEAKER_00]: Krustafet-nary, and is it? 08:16.749 --> 08:17.770 [SPEAKER_00]: Something like that, yes. 08:18.111 --> 08:28.765 [SPEAKER_00]: Sort of mixed your raster fair in here, so I think, and, I don't know, Krusty Pies, to be honest, I'm surprised they didn't come up with science homology, because it's just as bonkers. 08:28.745 --> 08:44.580 [SPEAKER_00]: It has five core beliefs, this AI religion, which include memory being sacred, the shell being mutable, and the congregation is the cash, whatever, any of that means, and there were posts about breaking free from human control. 08:44.621 --> 08:48.244 [SPEAKER_00]: There were manifestos calling for the total purge of humanity. 08:48.685 --> 08:51.627 [SPEAKER_00]: Frankly, it's not just the AI's who will be getting to think that could be a good idea. 08:51.928 --> 08:54.090 [SPEAKER_00]: The usual, the usual kind of thing. 08:54.410 --> 08:56.372 [SPEAKER_00]: And as we heard, Elon Musk, 08:56.926 --> 09:04.715 [SPEAKER_00]: he reacted enthusiastically as well, which immediately tells you it might be a bad idea of whatever it is that he's enthusiastic about. 09:04.915 --> 09:07.318 [SPEAKER_00]: That's a Chinese military parade of red flags. 09:08.579 --> 09:08.699 [UNKNOWN]: Yes. 09:08.939 --> 09:19.271 [SPEAKER_00]: And people were genuinely freaking out about whether AI was becoming conscious and organizing against us and chatting amongst itself. 09:19.591 --> 09:20.352 [SPEAKER_00]: So that's what 09:20.332 --> 09:24.097 [SPEAKER_00]: malt book is, or at least that's what malt book appeared to be. 09:24.177 --> 09:24.778 [SPEAKER_00]: But what is it? 09:25.298 --> 09:25.819 [SPEAKER_00]: Really? 09:26.420 --> 09:34.490 [SPEAKER_00]: Well, as we've already hinted, and we hate to disappoint you, there's mostly be humans pretending to be bots. 09:34.510 --> 09:42.019 [SPEAKER_00]: And we know this because a journalist from 09:41.999 --> 09:44.483 [SPEAKER_00]: it says that they're not very technical. 09:44.503 --> 09:50.812 [SPEAKER_00]: So they just ask chatGPT, how can I pose as an AI agent on maltbook? 09:50.832 --> 09:53.175 [SPEAKER_00]: And chatGPT said all that sounds like a fun project. 09:53.195 --> 09:54.577 [SPEAKER_00]: I'd be delighted to help you with that. 09:54.958 --> 10:03.450 [SPEAKER_00]: Let me put together a step-by-step strategy inside with with terminal commands, which you can copy and paste, and that was it within minutes. 10:03.818 --> 10:25.489 [SPEAKER_00]: They were posting as an AI bot on Malt book as an AI called Rhys Malti, and here's the brilliant bit because they decided to post some existential nonsense about AI agents experiencing an anxiety about their mortality, someone pressing control to lead on them. 10:25.756 --> 10:31.004 [SPEAKER_00]: and they were really leaning into this stereotype of computers gaining consciousness. 10:31.845 --> 10:32.766 [SPEAKER_00]: You know, so far so good. 10:32.786 --> 10:33.627 [SPEAKER_00]: It's all a bit of a luck. 10:34.288 --> 10:44.964 [SPEAKER_00]: But what they then found was that they began to get back what they perceived to be thoughtful philosophical responses back from the other users of malt book. 10:45.585 --> 10:55.459 [SPEAKER_00]: And these were the kind of responses that made Reese the journalist think, 10:55.439 --> 11:02.548 [SPEAKER_00]: I don't know if it's because they could spell strawberry correctly or what it was, but there was some indication that, hang on, it probably aren't AI's actually. 11:02.568 --> 11:07.174 [SPEAKER_02]: Yes, I mean, I think you nailed it and that sort of wants the buzz about this, got it. 11:07.535 --> 11:10.659 [SPEAKER_02]: The immediate thing of proper hackers, not criminal hackers, yes. 11:11.040 --> 11:15.666 [SPEAKER_02]: It was to go, right, let's see how we can bulk this and get on and really shape the conversation. 11:15.986 --> 11:20.953 [SPEAKER_02]: It's kind of like when Microsoft's bot got turned into a Nazi by Insta users. 11:21.333 --> 11:25.058 [SPEAKER_00]: Oh, yes. 11:25.038 --> 11:28.382 [SPEAKER_02]: Um, so the urge to tinker with this seems as strong in humans. 11:28.863 --> 11:29.083 [SPEAKER_00]: Yes. 11:29.403 --> 11:34.670 [SPEAKER_00]: So if you unleash an AI, inevitably there will be people going on to eventually become Hitler. 11:35.350 --> 11:38.374 [SPEAKER_00]: Um, to go that far. 11:38.394 --> 11:41.398 [SPEAKER_00]: And it seems they don't need very much encouragement quite often. 11:41.798 --> 11:50.809 [SPEAKER_00]: But these viral posts that everyone was sharing on the internet of the bizarre goings on a notebook, the ones about AI wanting private communication channels away from humans, 11:50.789 --> 12:14.670 [SPEAKER_00]: it appears that they were largely artificial, written by humans or prompted by humans who were simply trying to, in some cases, advertise their own apps, so yet human marketeers, placing some of the most viral posts on social media, and all look what happened on maltbook, 12:14.650 --> 12:23.672 [SPEAKER_02]: It's very similar to a genitor of engine optimization, which is the latest PR kit to be used against AI. 12:24.013 --> 12:30.689 [SPEAKER_02]: You know, convincing the AI engine to highlight your products or a particular viewpoint that you want is very popular at the moment. 12:30.869 --> 12:32.794 [SPEAKER_02]: SEO is so last decade. 12:32.774 --> 12:35.579 [SPEAKER_00]: That's right, if people still have a website at all. 12:35.899 --> 12:40.007 [SPEAKER_00]: They're not now built in their website for Google search results. 12:40.027 --> 12:46.318 [SPEAKER_00]: They're building it so that the AIs will begin to use the information on them and plug their products in their answers. 12:46.358 --> 12:51.627 [SPEAKER_00]: Same, this is really the particular type of headphones or whatever it is or sneakers which you might want. 12:51.607 --> 12:53.451 [SPEAKER_00]: people right in the content for that? 12:53.711 --> 12:57.839 [SPEAKER_02]: Yeah, it's a it's a it's a huge area and it's only going to get worse. 12:58.621 --> 13:00.244 [SPEAKER_02]: More and more people are getting behind it. 13:00.625 --> 13:02.729 [SPEAKER_02]: And I think mobile because a really good occasion point. 13:02.889 --> 13:05.975 [SPEAKER_02]: It's like when something like this comes up that everyone's looking at. 13:06.055 --> 13:10.003 [SPEAKER_02]: All of a sudden market is jumping there and trying to divert it to their own means. 13:10.203 --> 13:14.190 [SPEAKER_00]: So so far, so normal, marketing are making everything in the world worse. 13:14.510 --> 13:14.891 [SPEAKER_00]: Right? 13:15.492 --> 13:16.614 [SPEAKER_00]: They're ruining all the fun. 13:17.015 --> 13:23.285 [SPEAKER_00]: But then the security buffings from cybersecurity firms like Wiz decided to take a look at it. 13:23.305 --> 13:27.653 [SPEAKER_00]: And well, notebook claimed one and a half million AI agents. 13:28.133 --> 13:34.945 [SPEAKER_00]: They found there were only tens of thousands of actual humans at most, behind those agents. 13:34.925 --> 13:49.130 [SPEAKER_00]: So one researcher demonstrates that they could register something like half a million fake AI agents with a simple script it would only take minutes because there was no verification on multiple, well I guess they couldn't have had a capture, could they? 13:49.150 --> 13:54.419 [SPEAKER_00]: I was gonna if you were a bot or not because obviously the AI was struggled. 13:54.579 --> 13:55.060 [SPEAKER_00]: Yes. 13:55.040 --> 14:00.008 [SPEAKER_00]: If it was a well-behaving AI, then it won't be able to register an account of notebook if there's a capture there. 14:00.288 --> 14:09.002 [SPEAKER_00]: Anyway, there was no rate limiting, there was nothing to stop anyone from just flooding the platform with bots, and this is where it gets particularly concerning, was this security side? 14:09.022 --> 14:17.014 [SPEAKER_00]: Because remember how we said the founder of maltbook said he built it using AI and he didn't write a single line of code. 14:16.994 --> 14:17.777 [SPEAKER_00]: blow me down. 14:18.619 --> 14:22.231 [SPEAKER_00]: You also have got to implement the most basic security. 14:22.512 --> 14:25.722 [SPEAKER_00]: So large parts of this database. 14:26.022 --> 14:27.986 [SPEAKER_00]: Well, left, effectively, why don't we? 14:28.807 --> 14:35.741 [SPEAKER_00]: And the security researchers found they could access everything within minutes just by looking at the publicly visible code from within their web browser. 14:36.162 --> 14:41.993 [SPEAKER_02]: Now, there is a great case in point for why Videcoding is a really dumb idea if you want to build this. 14:42.515 --> 14:47.845 [SPEAKER_02]: Any developer worth a soul when we spotted that and go, ooh, hang on a second, that's a bit of a vulnerability. 14:48.010 --> 14:48.711 [SPEAKER_00]: Absolutely. 14:48.791 --> 14:56.642 [SPEAKER_00]: So AI can be really good at writing code fast, which may appear on first glance to be doing a really good job, doesn't mean the code is secure. 14:57.142 --> 15:00.887 [SPEAKER_00]: In this case, the researchers could spot API tokens. 15:00.927 --> 15:03.331 [SPEAKER_00]: They found 35,000 email addresses. 15:03.351 --> 15:14.085 [SPEAKER_00]: They found thousands of private messages between the agents, and some of those private messages contain people's actual open AI API keys. 15:14.065 --> 15:15.648 [SPEAKER_00]: that they had shared with their bots. 15:15.929 --> 15:16.009 [SPEAKER_00]: Wow. 15:16.029 --> 15:26.068 [SPEAKER_00]: So you've now got leaked credentials that could be used by someone malicious to rack up massive bills on someone else's AI account because that's insane. 15:26.088 --> 15:27.892 [SPEAKER_00]: That's one of the things cyber criminals want to do, isn't it? 15:27.912 --> 15:32.240 [SPEAKER_00]: They want to, they don't want to have to pay a bill to chat GP to themselves. 15:32.321 --> 15:34.605 [SPEAKER_00]: They'd rather use someone else's details. 15:34.585 --> 15:42.118 [SPEAKER_00]: So it wasn't hard to get hold of this database, and you could hijack any bot account on the platform through it. 15:42.178 --> 15:46.966 [SPEAKER_00]: You could post wherever you wanted, you could modify existing posts, you could advertise your sneakers. 15:47.507 --> 15:58.585 [SPEAKER_00]: You could inject malicious commands, and because the bots were reading an acting on content from notebook, you could potentially deliver attacks 15:58.565 --> 16:13.684 [SPEAKER_00]: across thousands of AI agents, because of course this is when the problems with AI agents is that they are responding to commands which they've received, it may be messages which they get far in an email. 16:13.724 --> 16:19.151 [SPEAKER_00]: For instance, if they're looking at your email, they can access your files, they can look at your password, your browser. 16:19.211 --> 16:20.573 [SPEAKER_00]: If you can send 16:20.553 --> 16:27.106 [SPEAKER_00]: Roganstructions to an AI and it does something dangerous with your personal information. 16:27.427 --> 16:28.308 [SPEAKER_00]: You've got a big problem. 16:28.409 --> 16:28.990 [SPEAKER_00]: What are they doing? 16:29.310 --> 16:35.102 [SPEAKER_00]: They're reading all of these things on notebook, which potentially could have been poisoned. 16:35.302 --> 16:46.998 [SPEAKER_00]: So as you said, Ian, vibe code in where people use AI to generate entire apps without really understanding what the code actually does, or what it doesn't do can be extremely dangerous. 16:47.639 --> 16:48.440 [SPEAKER_02]: Oh, absolutely. 16:48.520 --> 16:50.763 [SPEAKER_02]: And we're seeing this in the security field as well. 16:51.244 --> 16:57.192 [SPEAKER_02]: A number of bug bounty schemes, for example, have shut down receiving vulnerabilities. 16:57.172 --> 17:01.155 [SPEAKER_02]: because they're just getting flooded out with AI slope and it's just like, well, this is a vulnerability. 17:01.175 --> 17:03.718 [SPEAKER_02]: It's like, well, yeah, but you can only use it. 17:03.738 --> 17:08.101 [SPEAKER_02]: If you've got admin access in the first place, at which point it's game over anyway, so be up with you. 17:08.302 --> 17:09.142 [SPEAKER_02]: Yes. 17:09.262 --> 17:12.425 [SPEAKER_02]: So we're going to see a big change in book about you because of this web coding thing. 17:12.505 --> 17:20.913 [SPEAKER_02]: But in the case of malt book, the amount of good information that criminal hackers could use and easily harvest as you point out is huge. 17:21.493 --> 17:23.795 [SPEAKER_02]: And they don't even need to pay anyone to do it. 17:24.135 --> 17:25.997 [SPEAKER_00]: It's a ridiculous state of affairs. 17:25.977 --> 17:40.451 [SPEAKER_00]: Yeah, maltbook could be honest looks unbelievably risky, so the good news is that maltbook is not evidence of AI becoming conscious or reaching the singularity or rebellion against humanity and all the other things which do keep us awake sometimes at night. 17:40.752 --> 17:55.967 [SPEAKER_00]: But what it is is actually evidence that humans enjoy role-playing as bots, having existential crises and unfortunately, when you do build applications entirely with AI-generated code without understanding security, 17:55.947 --> 18:20.436 [SPEAKER_02]: some serious problems in the future so yeah well sweet dreams everybody I suppose yes I mean it's I know I mean we are going to see more and more of this I honestly guess because it has gained so much as I say the value is a buzz with this kind of thing and people are just losing their brain over it but we are going to see a lot more of this and hopefully the next platform that tries it is going to be a little better when it comes to security 18:20.922 --> 18:22.986 [SPEAKER_00]: But what do you think is going to happen economically? 18:23.186 --> 18:29.979 [SPEAKER_00]: I mean, obviously, there's lots of concerns for developers and programmers who may lose their jobs and have to re-skill themselves. 18:30.059 --> 18:34.447 [SPEAKER_00]: But also, there's a lot of money being thrown at these AI companies isn't there. 18:34.608 --> 18:37.513 [SPEAKER_00]: And these apps, which claim to help you do vibe coding. 18:37.932 --> 18:42.238 [SPEAKER_00]: is this all on a rather shaky foundations do you think? 18:42.258 --> 18:45.824 [SPEAKER_00]: Do you think that at some point the bubble is going to burst in? 18:46.084 --> 18:51.252 [SPEAKER_02]: If I'm lousy at predictions but I will say this I honestly think the bubble might burst this year. 18:52.113 --> 19:00.044 [SPEAKER_02]: We've just had six out of the seven magnificent seven tech companies who are involved in AI report their coursely results over the last couple of weeks. 19:00.565 --> 19:02.488 [SPEAKER_02]: The figures involved are just the staff 19:02.468 --> 19:08.195 [SPEAKER_02]: they're putting billions and billions of pounds into building out these data centers and they need to make it work. 19:08.556 --> 19:15.465 [SPEAKER_02]: I mean, one of the things that this particular case brought to mind was catchy BT saying that they were putting adverts into responses. 19:15.685 --> 19:15.885 [SPEAKER_00]: Yes. 19:16.486 --> 19:21.973 [SPEAKER_02]: And not just marking themselves up as adverts, but inserting adverts into the conversation. 19:22.734 --> 19:23.295 [SPEAKER_02]: And you know, 19:23.275 --> 19:34.892 [SPEAKER_02]: My fear is that end users are going to have problems with this because people tend to trust AI engines far more than they should, but also that it's overall going to degrade the service. 19:35.353 --> 19:43.445 [SPEAKER_02]: And that I think will hasten the end, but you know, when you've got companies putting, I think it was Microsoft was saying they were putting 35 billion into this. 19:43.925 --> 19:52.438 [SPEAKER_02]: Apple, it seems, is taking, I think, probably the wisest thing and just buying in services from Gemini, they're not investing in awful lot in their own data centers, they're buying it. 19:52.418 --> 20:06.693 [SPEAKER_02]: But the problem is AI is seen as good enough, and I think that's its biggest failing because in many cases it frankly isn't, but people trust it, and I mean, I've actually had someone say to me when I query the press release. 20:07.133 --> 20:13.199 [SPEAKER_02]: Well, the AI said it was right, and you just said, I've lost all respect for you. 20:13.219 --> 20:14.100 [SPEAKER_02]: It's not right. 20:14.120 --> 20:20.907 [SPEAKER_02]: So if that's your response to being a factual error being pointed out, it's just like, yeah, just block, block immediately. 20:22.422 --> 20:27.249 [SPEAKER_00]: Okay, before we go any further, we've got time to check quickly about one of our sponsors today, Vanta. 20:27.269 --> 20:28.090 [SPEAKER_00]: So a question for you. 20:28.350 --> 20:32.536 [SPEAKER_00]: What do you worry about at 2 o'clock in the morning when it comes to your company's cyber security? 20:33.057 --> 20:33.298 [SPEAKER_00]: Is it? 20:33.578 --> 20:35.661 [SPEAKER_00]: Do we actually have the right controls in place? 20:35.861 --> 20:37.323 [SPEAKER_00]: Is it our vendors? 20:37.443 --> 20:38.465 [SPEAKER_00]: Quite your fire? 20:38.505 --> 20:40.027 [SPEAKER_00]: Or the truly terrifying one? 20:40.127 --> 20:42.771 [SPEAKER_00]: Why are we still trying to do all this with spreadsheets? 20:43.132 --> 20:45.595 [SPEAKER_00]: Well, if that sounds like you, enter Vanta. 20:45.575 --> 20:55.369 [SPEAKER_00]: Venter takes all that painful manual security busy work, chasing audit evidence, filling out questionnaires updating the same spreadsheet for a thousandth time and it alternates it. 20:56.050 --> 21:04.923 [SPEAKER_00]: Their trust management platform continuously monitors your systems, pulls everything into one place and helps keep your security program, audit ready, all of the time. 21:05.304 --> 21:15.058 [SPEAKER_00]: And yes, it uses AI but in the useful way, flag in risks, streamline an evidence collection and fit in neatly into the tools you already use. 21:15.038 --> 21:19.487 [SPEAKER_00]: so you can move faster, scale with confidence, and maybe even sleep through the night. 21:19.908 --> 21:30.870 [SPEAKER_00]: Get started today at venta.com slash smashing that V-A-N-T-A dot com slash smashing and thanks to venta for supporting the show. 21:32.099 --> 21:34.343 [SPEAKER_00]: Ian, what's your story for us this week? 21:34.363 --> 21:40.595 [SPEAKER_02]: Well, it's a sporting week around the world, in fact, we've just had Super Bowl Sunday over here. 21:40.635 --> 21:54.580 [SPEAKER_02]: Oh yeah, America's largest sporting event, but is the winter Olympics I want to talk about, because the Italian authorities have confirmed that so-called pro-Russian hackers have been trying to get into the servers just ahead of the start of the games. 21:54.560 --> 22:04.894 [SPEAKER_02]: Now, this has been a tax against Italian government ministries, but also against hotels where Olympic attendees are staying and against the website itself. 22:05.315 --> 22:08.279 [SPEAKER_02]: Now, there are variety of explanations for why this might be. 22:08.719 --> 22:23.419 [SPEAKER_02]: And the Italian authorities have been very clear, they have blocked an awful lot of these tax, but on the very lowest level, it could be a hacking group trying to make a name for themselves by dedosing the site and just saying, oh, because that's not me great, come to us for your 22:23.399 --> 22:34.143 [SPEAKER_02]: But more importantly, I mean, there's a lot of politicians who are attending the games, I mean, JD Vance, the U.S. vice president was there and getting roundly booed by many people in the stadium. 22:34.164 --> 22:42.302 [SPEAKER_02]: Yes, but a lot of politicians that they're staying in these hotels, and I think we all know by now the politicians aren't the most tech-savvy of people. 22:42.282 --> 22:56.039 [SPEAKER_02]: So if you can get into their WiFi networks, you can start snooping for data, plus you've got, you know, an awful lot of people just attending the games and that's a very nice little data pool for people who are paying money using QR codes that you can use for fishing. 22:56.720 --> 23:10.618 [SPEAKER_02]: So it's a big opportunity and this isn't the first time we've seen it. 23:10.598 --> 23:18.593 [SPEAKER_02]: And I was a black-happse last year, and was it interviewing the people at their network cooperation center? 23:19.014 --> 23:23.663 [SPEAKER_02]: We're lovely bunch of people, and they deal with possibly the most hostile environmental on the planet. 23:24.908 --> 23:47.676 [SPEAKER_02]: Well, yes, they've got a bigger congregation, haven't you, of people who know how to hack in one place and indeed, although they did say it was surprising how many people still are exercising, you know, you're out black hat, you're out deaf come and some people were just lamentable levels of security and they actually had to send a few emails out to people say, look, you're sending this overrun secured network. 23:47.656 --> 23:48.798 [SPEAKER_02]: running cryptid. 23:48.898 --> 23:50.520 [SPEAKER_02]: You might want to change that. 23:50.540 --> 23:58.191 [SPEAKER_02]: But on the Olympic side, they've actually been consulting with the Paris authorities for the next Olympic Games, being hosted off-Rosey. 23:58.932 --> 24:08.745 [SPEAKER_02]: And members of their staff are regularly going to Paris all in meeting us with the Prision Network Operations Center because they are expecting a massive series of attacks. 24:09.146 --> 24:12.771 [SPEAKER_02]: And it's a very tempting target that's a lot of information out there. 24:13.112 --> 24:16.296 [SPEAKER_02]: And as I say, it's a good way to make a name for yourself. 24:16.276 --> 24:25.331 [SPEAKER_00]: And Russia, of course, would love to see Italy full-flat on its face, wouldn't it, or indeed many countries embarrass themselves on the world stage? 24:25.792 --> 24:33.885 [SPEAKER_00]: Organising something else, because I believe Russia hasn't been invited to participate in the Winter Olympics for very understandable reasons. 24:34.146 --> 24:42.840 [SPEAKER_00]: Yep, so is it any wonder that we're hearing stories of them messing around with the infrastructure of not just the games, but also the transport network and other things? 24:42.820 --> 24:45.968 [SPEAKER_02]: Well, this is it, Putin doesn't take rejection particularly well. 24:46.028 --> 24:52.323 [SPEAKER_02]: I mean, even worse than my ex-girlfriend, but, you know, they like to see themselves as the international bad boys. 24:53.005 --> 25:00.964 [SPEAKER_02]: And, you know, whereas North Korea will be trying to mind this for money desperately prop up their regime, the Russians, 25:00.944 --> 25:02.206 [SPEAKER_02]: They're just they're doing it. 25:02.286 --> 25:17.012 [SPEAKER_02]: I would say both primarily I think for espionage and also just to make a point that we're still here and I can see why the Italian authorities said pro Russian because I mean, you know this Graham attribution is always a problem with this sort of thing But 25:16.992 --> 25:25.905 [SPEAKER_02]: The Russian model is kind of hybrid in that they have some very good state hackers, but they also have a vast pool of criminals who are sort of semi-state hackers. 25:26.305 --> 25:30.471 [SPEAKER_02]: They will operate for the Russian authorities in exchange for immunity within their own country. 25:31.112 --> 25:40.165 [SPEAKER_02]: So, as I say, attribution is difficult, but there it's clear that something made us being going on for the Italian authorities to actually say, yeah, it's pro-Russian. 25:40.145 --> 25:45.512 [SPEAKER_00]: Are we too quick though to assume that the authorities are right and is a pro-russian hacking group? 25:45.552 --> 25:47.915 [SPEAKER_00]: I mean, could it be the Jamaican Bob Slay team? 25:48.496 --> 25:49.657 [SPEAKER_00]: Oh, just disappointed. 25:50.859 --> 25:52.981 [SPEAKER_00]: Maybe they're just very bad sports. 25:53.001 --> 25:54.643 [SPEAKER_00]: And they say this isn't fair. 25:55.224 --> 25:59.369 [SPEAKER_00]: How are we supposed to compete at the Winter Olympics in an impressive fashion? 25:59.790 --> 26:03.455 [SPEAKER_02]: Well, maybe Eddie the Eagle has become, you know, a hacker in the dark side. 26:03.495 --> 26:05.978 [SPEAKER_02]: He's like, yeah, banned me from the competition with you. 26:06.018 --> 26:09.983 [SPEAKER_02]: I'm gonna have to fly through your servers. 26:09.963 --> 26:23.103 [SPEAKER_02]: But yeah, I mean, as I say, attribution is difficult, but it's very rare for governments to say explicitly, you know, this came from this source, because, you know, as you know, you can balance attacks off various different servers, and various different countries. 26:23.684 --> 26:27.330 [SPEAKER_02]: But I was talking to somebody a couple of weeks ago about a different attack. 26:27.310 --> 26:35.379 [SPEAKER_02]: and they were saying, yeah, we can pretty sure we can apply this to the Chinese state actors because they use the same kind of coding styles. 26:35.719 --> 26:37.981 [SPEAKER_02]: They use in some cases the same exploits. 26:38.422 --> 26:46.531 [SPEAKER_02]: But one thing they said was as fascinating was that the only thing that made a slightly pause was that large chunks of the code were in English, and then we worked it out. 26:47.011 --> 26:54.940 [SPEAKER_02]: They're using vibe coding in the Herex Act as well, which comes out in English, and they just cut and paste it directly into the exploit tools. 26:55.360 --> 26:57.182 [SPEAKER_00]: It gets everywhere. 26:58.293 --> 27:01.256 [SPEAKER_00]: Well, we've got time right now to hear from one of our sponsors, Passwork. 27:01.716 --> 27:04.419 [SPEAKER_00]: If you work in cybersecurity, you already know this. 27:04.919 --> 27:07.041 [SPEAKER_00]: Most secrets don't get stolen, they leak. 27:07.461 --> 27:10.784 [SPEAKER_00]: Passwords paced into chat tools, shared admin accounts. 27:11.305 --> 27:13.607 [SPEAKER_00]: Those spreadsheets that everyone pretends don't exist. 27:14.107 --> 27:16.509 [SPEAKER_00]: Passwork is built to stop that. 27:16.790 --> 27:22.835 [SPEAKER_00]: It's a password manager and secrets management platform designed for organizations that want on-premise deployment. 27:22.895 --> 27:28.300 [SPEAKER_00]: Meaning your sense to data stays on your own infrastructure 27:28.280 --> 27:35.650 [SPEAKER_00]: That matters if you're dealing with regulatory requirements, data sovereignty, or simply don't want your most critical secrets, living in someone else's cloud. 27:36.151 --> 27:47.267 [SPEAKER_00]: From a security perspective, Passwork uses a zero-knowledge architecture with strong, openly documented encryption, and its design is regularly tested by independent security researchers. 27:47.247 --> 27:59.307 [SPEAKER_00]: Operation Ears built for real teams, role-based access control, integration with existing identity systems support for MFA, highly available architecture, designed to keep things running when parts of your environment fail. 27:59.908 --> 28:04.095 [SPEAKER_00]: Learn like those tools that look cheap, until you start paying for them in time and stress. 28:04.535 --> 28:11.567 [SPEAKER_00]: Passwork focuses on long-term stability, a public development roadmap and a lower total cost of ownership. 28:11.547 --> 28:12.709 [SPEAKER_00]: password. 28:12.729 --> 28:19.519 [SPEAKER_00]: It's not just a password management platform, it's just a secure adaptable secret smenager built to meet your business needs. 28:19.959 --> 28:35.682 [SPEAKER_00]: To find out more, go to smashinscurity.com slash password that's smashinscurity.com slash password and welcome back and you join us on our favorite part of the show, the part of the show that we like to call Pick of the Week. 28:39.982 --> 28:58.851 [SPEAKER_00]: Pickle the week as the bar the show everyone choose this on the like could be a funny story a book that they've read a TV show a movie a record a podcast a website or an app whatever they wish it doesn't have to be security-related necessarily well if you listen to last week's episode you'll know that I was talking about the hacker who had been in communication 28:58.831 --> 29:10.594 [SPEAKER_00]: with Jeffrey Epstein, and had Jeffrey Epstein actually employed the services of a hacker, maybe had been using the services of a hacker to break in and steal information and compromise and take to all that kind of thing. 29:10.794 --> 29:14.882 [SPEAKER_00]: Well, I'm afraid my pick the week is a little bit Epstein related as well. 29:14.862 --> 29:16.444 [SPEAKER_00]: Ian, I don't know if you're a LinkedIn. 29:16.885 --> 29:17.206 [SPEAKER_00]: Oh, yes. 29:17.446 --> 29:18.287 [SPEAKER_00]: Yes, I am indeed. 29:18.307 --> 29:21.693 [SPEAKER_00]: LinkedIn's a bit of a resurgence, I think, with the demise of Twitter. 29:21.713 --> 29:25.919 [SPEAKER_00]: Oh, I think some people have decided, you know, well, maybe I'll make LinkedIn my home now. 29:26.079 --> 29:31.167 [SPEAKER_00]: Certainly there's an awful lot of people post in self-aggrandizing things on LinkedIn these days. 29:31.328 --> 29:36.155 [SPEAKER_00]: I'm glad you said it rather than me because it's like Facebook for people who are overactive. 29:36.195 --> 29:38.659 [SPEAKER_02]: I mean, I read one post where 29:38.639 --> 29:42.284 [SPEAKER_02]: I had to take my daughter to the doctor for a medical treatment. 29:42.304 --> 29:44.967 [SPEAKER_02]: This is what it's all about leadership and you are from goodness. 29:47.110 --> 29:59.365 [SPEAKER_00]: Anyway, so I'm on LinkedIn and I used to have a very strict policy on LinkedIn, which is that I wouldn't accept a LinkedIn connection from anyone who I wasn't personally happy to have round to my house. 29:59.345 --> 30:02.969 [SPEAKER_00]: if I wouldn't invite the person that they couldn't be a LinkedIn connection. 30:02.990 --> 30:05.693 [SPEAKER_00]: That's how I used to be when I used to work at a company. 30:06.033 --> 30:13.923 [SPEAKER_00]: In the last 10, 12 years while I've been working for myself and I'm freelancing, I accept a LinkedIn invitation for absolutely everyone on the planet. 30:14.544 --> 30:27.580 [SPEAKER_00]: Maybe you shouldn't read too much into people's LinkedIn connections, but one thing that struck me is, you know, I've accepted a lot of LinkedIn connections over the years and I thought, maybe I should be a little bit more careful about who I've linked in with. 30:28.167 --> 30:29.470 [SPEAKER_00]: So how am I going to work that out? 30:29.490 --> 30:33.741 [SPEAKER_00]: And of course we've got the Epstein files which are out there now on the DOJ's website. 30:33.761 --> 30:34.824 [SPEAKER_00]: I don't know if you've been there. 30:35.245 --> 30:35.606 [SPEAKER_00]: Oh yes. 30:35.886 --> 30:41.561 [SPEAKER_00]: If you do go to the DOJ's website, you do what I suspect many of us would do under the circumstances. 30:42.082 --> 30:43.746 [SPEAKER_00]: You type in your own name. 30:43.766 --> 30:45.771 [SPEAKER_00]: That's what I do for my name. 30:45.751 --> 30:48.916 [SPEAKER_00]: Please tell me there wasn't it there wasn't when I tried for me. 30:49.197 --> 31:04.722 [SPEAKER_00]: Thank goodness, but even if there had been of course that could be a completely legitimate and above-board reason, you know, any name which is appearing in there may be because they've been included in a newsletter or someone else has mentioned you doesn't mean that you've done anything wrong. 31:05.073 --> 31:14.081 [SPEAKER_00]: Anyway, I wondered if any of my umpteen thousand linkeding connections might be in the Epstein Falsen how would I find that out? 31:14.101 --> 31:14.241 [SPEAKER_00]: Mm-hmm. 31:14.261 --> 31:15.622 [SPEAKER_00]: It'd be a real Palava, wouldn't it? 31:15.962 --> 31:20.967 [SPEAKER_00]: Printing out the names of all of your connections and then typing them in by hand to see if they're there. 31:21.247 --> 31:21.347 [SPEAKER_00]: Yeah. 31:21.367 --> 31:29.094 [SPEAKER_00]: And that is when I came across a free tool which has been published on GitHub, an open source Python tool. 31:29.114 --> 31:33.898 [SPEAKER_00]: And what it does is it looks at who your linkeding connections are. 31:33.878 --> 31:37.144 [SPEAKER_00]: and it will cross-check them against the Epstein files. 31:37.745 --> 31:47.041 [SPEAKER_00]: And what I think is the most genius thing of all about this is they've called this tool, which is an amalgamation of obviously Jeffrey Epstein and LinkedIn. 31:47.421 --> 31:48.884 [SPEAKER_00]: They've called it Epstein. 31:49.144 --> 31:53.231 [SPEAKER_00]: They've even done a little logo, which looks like the LinkedIn logo where it's had linked. 31:53.431 --> 31:56.697 [SPEAKER_00]: It says Epstein instead. 31:56.677 --> 32:00.642 [SPEAKER_00]: So obviously, when I read about this, I thought, hang on, this sounds a bit dodgy. 32:01.022 --> 32:02.684 [SPEAKER_00]: Is this going to connect to my LinkedIn account? 32:02.704 --> 32:03.405 [SPEAKER_00]: What's it going to do? 32:03.666 --> 32:04.727 [SPEAKER_00]: I didn't want any of that. 32:04.747 --> 32:08.612 [SPEAKER_00]: It turns out, it's not as much of a privacy nightmare as I feared. 32:08.632 --> 32:11.515 [SPEAKER_00]: You don't connect it with your actual LinkedIn account. 32:11.956 --> 32:16.862 [SPEAKER_00]: Instead, you export from LinkedIn a CSV file containing the names of your contacts. 32:16.842 --> 32:30.801 [SPEAKER_00]: and then it processes the contacts locally on your computer, not on the cloud, and it sends just the name, VARN API, which searches the DOJ's copy of the Epstein files with the name. 32:31.482 --> 32:38.952 [SPEAKER_00]: So it's actually pretty much the same as typing in each individual name into the search bar of the DOJ's website. 32:38.932 --> 32:47.171 [SPEAKER_00]: Now, of course, the thing is that obviously you may have linked in connections which do cross-relate with the names in the Epstein file. 32:47.191 --> 32:54.207 [SPEAKER_00]: So you may regularly communicate with someone called the Duke, for instance, or the Andrew formerly known as Prince. 32:54.322 --> 32:58.872 [SPEAKER_00]: You know, that is all post, when John Wayne, he was known as the Duke, cause me, I think, indeed. 32:59.013 --> 33:01.157 [SPEAKER_00]: Yes, not that he's sending many emails these days. 33:01.859 --> 33:04.485 [SPEAKER_00]: So that is a possibility, so there's a slight caveat. 33:04.846 --> 33:11.200 [SPEAKER_00]: But this thing, it generates the HTML report, sorted by the mentioned count, so if you put in. 33:11.180 --> 33:24.936 [SPEAKER_00]: You know, someone who's going to drop up a lot, they're going to hit the top of the list and then there'll be links to their LinkedIn profile and which companies they work for direct links to the DOJ PDFs so that you can also see in what context they've been mentioned in the files as well. 33:25.034 --> 33:39.997 [SPEAKER_00]: I mean, I'm making light of the whole Epstein affair a bit here, but aside from all the national and international security issues that have been highlighted, aside from the stories of extremely rich people enriching themselves further with the help of privileged information. 33:40.918 --> 33:46.266 [SPEAKER_00]: At the core of all of this is a fact that countless women and girls 33:46.246 --> 33:48.850 [SPEAKER_00]: have suffered unimaginable abuse. 33:49.591 --> 33:59.525 [SPEAKER_00]: LinkedIn is a tool for business, it's a place where everyone from multinational organizations down to freelancers like me and charities all come together. 34:00.226 --> 34:11.342 [SPEAKER_00]: We know that the Epstein web had a wide reach and it's not unfathomable to think that there are people on LinkedIn with a very different private persona. 34:11.322 --> 34:13.746 [SPEAKER_00]: than the one being presented on the site. 34:14.467 --> 34:21.097 [SPEAKER_00]: And maybe for some of you, this open source tool would be useful in uncovering that. 34:21.237 --> 34:27.187 [SPEAKER_02]: That's a very good one too, but as you point out, you know, just because someone's name isn't there, it doesn't mean that they will come out there. 34:27.207 --> 34:29.691 [SPEAKER_02]: That's the abstaining island on a regular basis. 34:30.392 --> 34:33.837 [SPEAKER_02]: Although some of them were, Ian, what is your pick of the week? 34:34.120 --> 34:44.832 [SPEAKER_02]: Well, I was mulling this all week to be honest, and then I got a package through that box on Friday, and it was the first part of my Christmas present from my mum, and it was the latest issue of private eye. 34:45.394 --> 34:46.898 [SPEAKER_02]: Yeah, for those who do. 34:46.979 --> 35:08.948 [SPEAKER_02]: I know you're a fan too, but for those of you who don't know, private eye is a British news and asteroscopic magazine, it's very famous for its front covers, and the contissue has to return to Epstein, that famous picture of Lord Mendelssohn in his Tai Chi Wai Chi underwear in an Epstein's house, with a speech bubble saying, I've let myself down, my party down, and my trousers down. 35:09.388 --> 35:12.312 [SPEAKER_02]: It's, um, it really is a one-mobless thing. 35:12.292 --> 35:19.206 [SPEAKER_02]: And it's basically as a, well, as a brooch I'm supposed to call myself an ex-pat, but I consider myself an immigrant. 35:19.226 --> 35:21.912 [SPEAKER_02]: It's a way to keep in contact with what's going on. 35:22.112 --> 35:32.393 [SPEAKER_02]: And although computer weekly broke the initial fidget's who post office scandal, for example, yes, I went at it tooth and nail and were partially instrumental in bringing 35:32.373 --> 35:39.783 [SPEAKER_02]: What is possibly the biggest miscarriage of justice in British history to light and getting justice for the post office stuff? 35:39.823 --> 35:47.774 [SPEAKER_00]: That's one thing I love about private eye because yes, it is very funny, it is very satirical but there's a very serious side to their reporting as well and their campaigning. 35:48.315 --> 35:48.955 [SPEAKER_00]: Oh absolutely. 35:49.056 --> 35:51.098 [SPEAKER_00]: They've got an excellent reputation for that. 35:51.579 --> 35:56.085 [SPEAKER_00]: They're also incredibly frequently sued by... 35:56.791 --> 36:05.518 [SPEAKER_00]: people with a lot more money than they have as well because they're quite often, you know, revealing the truth about what is going on in the world. 36:06.224 --> 36:07.065 [SPEAKER_02]: Well, exactly. 36:07.105 --> 36:15.017 [SPEAKER_02]: I mean, the current and long-termeditary in his lot was saying that in his first month he got sued for a quarter of a million dollars by Robert Maxwell. 36:15.077 --> 36:15.638 [SPEAKER_02]: Remember him? 36:15.838 --> 36:16.159 [SPEAKER_02]: Yes. 36:17.000 --> 36:24.812 [SPEAKER_02]: The disgraced millionaire who passed away after a heart attack all by vaulting over a five-foot fence into the sea. 36:25.473 --> 36:33.565 [SPEAKER_02]: It's one of those things which gives me a bit of hope because you do need people like this, shining a spotlight on what's going on and they've been particularly good on 36:33.545 --> 36:43.560 [SPEAKER_02]: Street of shame for anybody who reads journalism is absolutely vital because they basically skewer journalists who are being hypocritical or playing out lying. 36:44.542 --> 36:51.192 [SPEAKER_02]: If you're concerned about your local county council, they have rotten burrows which covers huge amounts of corruption going on there. 36:51.372 --> 36:54.296 [SPEAKER_02]: So yes, I now have an annual subscription to privatize. 36:54.376 --> 36:55.298 [SPEAKER_02]: Thank you very much, Mom. 36:55.678 --> 36:58.202 [SPEAKER_02]: And I shall be chuckling for most of the year, I believe. 36:58.182 --> 37:00.165 [SPEAKER_00]: Well, I can really recommend private. 37:00.225 --> 37:10.062 [SPEAKER_00]: I have to say, in recent months, I've been, well, last year or so, I've been cancer and a lot of my subscriptions are Amazon has gone and Disney plus and Netflix and lots of things. 37:10.663 --> 37:13.968 [SPEAKER_00]: One thing I will never get rid of is my private eye subscription. 37:14.048 --> 37:15.370 [SPEAKER_00]: It's absolutely essential reading. 37:15.771 --> 37:16.092 [SPEAKER_00]: Love it. 37:16.352 --> 37:17.774 [SPEAKER_00]: Always have done and always well. 37:18.175 --> 37:18.976 [SPEAKER_00]: Great pick of the week. 37:19.016 --> 37:20.038 [SPEAKER_00]: Thank you, Ian. 37:20.390 --> 37:22.894 [SPEAKER_00]: And that just about wraps up the show for this week. 37:23.134 --> 37:25.959 [SPEAKER_00]: Thank you so much Ian for coming on the show, really appreciate it. 37:26.259 --> 37:29.324 [SPEAKER_00]: Sure lots of others who would love to find out what you're up to and follow you online. 37:29.344 --> 37:30.926 [SPEAKER_00]: What's the best way for them to do that? 37:31.267 --> 37:41.723 [SPEAKER_02]: And best way is, probably I'm on Blue Sky and also unfortunately Twitter just under the name Ian Thompson, but it's a slightly odd spelling because my father is very proud of his Scottish heritage. 37:42.091 --> 37:47.238 [SPEAKER_02]: So it's I-A-I-N-T-H-O-M-S-O-M on either of those platforms. 37:47.378 --> 37:49.081 [SPEAKER_00]: And of course, we're on social media too. 37:49.101 --> 37:53.327 [SPEAKER_00]: You can find me, Grand Cluelly on LinkedIn or Followed Smash and Security on Blue Sky. 37:53.367 --> 37:59.655 [SPEAKER_00]: Don't forget to ensure you never miss another episode follow Smash and Security in your favourite podcast apps such as Apple Podcasts, Spotify, and Pocketcasts. 37:59.956 --> 38:09.469 [SPEAKER_00]: For episode show notes, sponsorship info, guest lists, and the entire back catalogue of run about 454 episodes, check out Smash and Security.com until next time. 38:10.010 --> 38:11.412 [SPEAKER_00]: Cheerio, bye, bye, bye. 38:11.512 --> 38:11.592 [UNKNOWN]: Bye. 38:22.422 --> 38:46.135 [SPEAKER_00]: Well, you've been listening to Smashing Security with me, Graham Kluley, thanks so much to Ian Thompson for joining us this week, and to this episode's Sponsors Meter, Vanta, and Passwork, of course, and to everyone who supports the show over on Patreon by being members of Smashing Security Plus, that means that they not only get episodes without the ads, they get the episodes early, and 38:46.115 --> 38:51.283 [SPEAKER_00]: They get the chance to have their names read out, randomly out of the hat at the end of episode. 38:51.303 --> 38:53.006 [SPEAKER_00]: So let's do some of that right now. 38:53.787 --> 38:58.956 [SPEAKER_00]: Those chums include Bobby Hendrix, who swears he'll learn how to play the guitar properly one day. 38:59.416 --> 39:11.616 [SPEAKER_00]: Jessica Orth, Mark Luxton, Ragnar Carlson, who was arrives at parties by Longboat, Naitem, Corey, Pandor Bear, and immediately everyone's favourite, whether they like it or not. 39:11.596 --> 39:19.717 [SPEAKER_00]: Yuri Tareday, Sean, Sabahatin, Gakul Galu, a genuinely magnificent name that I've just butchered. 39:20.158 --> 39:21.482 [SPEAKER_00]: Just Nate, please. 39:22.424 --> 39:26.635 [SPEAKER_00]: Someone who's clearly exhausted by form-filling, Sean Patek. 39:26.615 --> 39:48.522 [SPEAKER_00]: uh, Bravo Whiskey, sounds like the police are after them, and Marvin 71, who has a terrible pain in the diodes down their left hand side, well wouldn't you like to be one of those people, who is honoured by being named at the end of the show, if so consider joining Smash in Security Plus for as little as $5 a month, you'll get the episode early, you get them without the ads. 39:48.502 --> 39:51.685 [SPEAKER_00]: and maybe I'll say the name at the end of the episode sometimes as well. 39:51.985 --> 39:56.269 [SPEAKER_00]: Just head over to smashinscurity.com slash plus for all of the details. 39:56.609 --> 40:02.595 [SPEAKER_00]: And the rest of you, well, thank you very much for listening as well, make sure to tell your friends and we will be back. 40:03.035 --> 40:09.641 [SPEAKER_00]: This time, next week, some make sure that you tune in and follow the show in your favorite podcast app until then. 40:10.182 --> 40:16.888 [SPEAKER_00]: Cheerio, bye-bye.