Ep26: Cybersecurity Influencers Need to Do Better

Marc: 00:00:00

Cyber security influencers.

2

: 00:00:01

Need to do better.

3

: 00:00:03

I've noticed this over the years.

4

: 00:00:05

As I read blogs, listen to podcasts.

5

: 00:00:08

And watch videos on different platforms.

6

: 00:00:10

It became really apparent.

7

: 00:00:13

When I started my journey into TikTok.

8

: 00:00:17

And watching people who had

hundreds of thousands of followers.

9

: 00:00:21

Basically being TMZ.

10

: 00:00:22

And by that, I mean, A story will break.

11

: 00:00:25

And the next thing you know, there's

just simply putting it out there.

12

: 00:00:29

Right.

13

: 00:00:29

They're just taking a myth

or something that isn't true.

14

: 00:00:33

And continuing to spread it.

15

: 00:00:34

If you're an influencer and I don't

want to put numbers to this, but.

16

: 00:00:39

People who have obviously influenced.

17

: 00:00:41

You need to do better.

18

: 00:00:45

Cyber security is not getting

better as time goes on.

19

: 00:00:50

There's more qualified people.

20

: 00:00:51

There's better tools.

21

: 00:00:53

AI is helping.

22

: 00:00:55

But it's also helping the other side.

23

: 00:00:56

And I believe as people

who do have the knowledge.

24

: 00:01:01

To research.

25

: 00:01:03

And figure out what's going on

and then report that to people who

26

: 00:01:06

don't understand how things work.

27

: 00:01:08

You have an obligation to do that?

28

: 00:01:10

You're not just a blogger.

29

: 00:01:12

You're not just a podcaster.

30

: 00:01:15

Or somebody.

31

: 00:01:15

Who makes videos randomly and

gets likes and clicks and shares.

32

: 00:01:20

And you've taken on the obligation.

33

: 00:01:22

To be somewhat.

34

: 00:01:23

Have a role model in the industry.

35

: 00:01:25

And I think the straw that

broke the camel's back.

36

: 00:01:28

Or my case was seeing.

37

: 00:01:30

Way too many.

38

: 00:01:32

Things that would come out

specific to iOS or iPhone updates.

39

: 00:01:38

And then it was about privacy

and you need to turn this off.

40

: 00:01:42

And of course, oh, I've researched

this, but you need to turn

41

: 00:01:44

it off because it's there.

42

: 00:01:45

It's sharing your name, information,

contact details, location.

43

: 00:01:48

It's terrible for you.

44

: 00:01:49

And every time apple

would update something.

45

: 00:01:52

There'd be a flurry of videos.

46

: 00:01:54

Telling you to turn something off.

47

: 00:01:56

And that to me.

48

: 00:01:57

Is just disrespectful to the community.

49

: 00:02:00

And it doesn't show.

50

: 00:02:02

That you're giving your talents.

51

: 00:02:04

To a.

52

: 00:02:05

Industry that you know,

that you could do better.

53

: 00:02:09

So for influencers out there, Do better.

54

: 00:02:11

Then that people don't understand

what these things mean.

55

: 00:02:15

All right.

56

: 00:02:15

I'm always, I'm always going to go

back and use the example of my mom.

57

: 00:02:19

My mom.

58

: 00:02:19

I would read what the update was.

59

: 00:02:22

I would go to apple and look for the

actual official article and figure out

60

: 00:02:26

what did, what is this new feature doing

and how is apple securing the data?

61

: 00:02:32

You know, what protocol

are they using to share?

62

: 00:02:36

Something.

63

: 00:02:36

So in this example, journaling.

64

: 00:02:39

It's using Bluetooth.

65

: 00:02:40

Okay.

66

: 00:02:41

If Bluetooth is on someone across the

United States or across the world is not

67

: 00:02:46

going to connect and see what I'm doing.

68

: 00:02:49

Furthermore, if you research

any of this stuff, it is not

69

: 00:02:52

giving away your location.

70

: 00:02:54

And all this kind of stuff,

depending on what app you're using.

71

: 00:02:57

But.

72

: 00:02:57

And the main point is.

73

: 00:02:59

You have to be able to

look at what is coming out.

74

: 00:03:04

For updates.

75

: 00:03:05

And being cognizant of that and

then researching it and giving that

76

: 00:03:09

information out to people as they

need it in a responsible manner.

77

: 00:03:14

I understand.

78

: 00:03:15

That there's a freedom of speech.

79

: 00:03:17

I do.

80

: 00:03:18

I'm doing it right now.

81

: 00:03:19

And I understand that everybody has, is

entitled to doing a podcast, doing videos.

82

: 00:03:23

I guess.

83

: 00:03:24

It was a lot harder to do videos

and a lot harder to do podcasts.

84

: 00:03:29

And so the experts that you had

somewhat did research what they had

85

: 00:03:33

somewhat, I'm just saying somewhat.

86

: 00:03:35

And they had the information and then

they would put it out and people listen.

87

: 00:03:37

But now with the tools that are

out there, it is so easy to do

88

: 00:03:42

videos, literally off my phone.

89

: 00:03:44

Podcasting is a breeze.

90

: 00:03:46

And so anybody.

91

: 00:03:48

Anybody can say anything.

92

: 00:03:50

And become on the same level as an expert.

93

: 00:03:52

And I just don't.

94

: 00:03:54

I agree with that.

95

: 00:03:55

I would not want someone

giving me medical advice.

96

: 00:03:58

On the same level as a doctor,

who'd gone to medical school

97

: 00:04:01

for years and can research and

cite sources and have casework.

98

: 00:04:08

And have done internships.

99

: 00:04:09

Because this is my health.

100

: 00:04:10

And when it comes to cybersecurity,

tips and tricks and things I need

101

: 00:04:15

to do to protect myself, my data.

102

: 00:04:17

I want to know that the person

that's giving that to me.

103

: 00:04:20

Has done a legitimate amount of research.

104

: 00:04:22

That they are competent in their field.

105

: 00:04:24

That they understand the information

that they're disseminating.

106

: 00:04:28

And giving out to the audience.

107

: 00:04:31

Because they're an expert

they're supposed to be.

108

: 00:04:34

Different than the rest of us.

109

: 00:04:36

They're not just throwing out opinions

or what they think is going to happen

110

: 00:04:40

in let's let's say, say that upfront.

111

: 00:04:42

But just putting things out there

and not giving any context and

112

: 00:04:45

information and guiding people.

113

: 00:04:48

To make better decisions.

114

: 00:04:49

Just makes absolutely no sense.

115

: 00:04:51

And I couldn't even begin to give

you the examples that I have.

116

: 00:04:56

Of terrible advice and

terrible information, or I

117

: 00:05:00

should say half information.

118

: 00:05:02

Incorrect information, bad information.

119

: 00:05:05

And then it just spreads and spreads

and spreads, which is why their sites.

120

: 00:05:09

Like snopes.com and other sites that go

and do research things that have come out,

121

: 00:05:15

find the sources, dig into it, and then

give you the information of what's true.

122

: 00:05:20

Or what's not based upon the

information that they have.

123

: 00:05:23

And I don't want to go

into any thing beyond that.

124

: 00:05:27

But when it comes to

cybersecurity and your.

125

: 00:05:30

Family's wellbeing and

your data protection.

126

: 00:05:33

You should know.

127

: 00:05:35

Who is giving you the information?

128

: 00:05:37

Not only who is giving information.

129

: 00:05:40

What are their qualifications

for giving you the information?

130

: 00:05:44

Do they cite sources when they're giving

you the information and do they have

131

: 00:05:48

any financial incentive to give you the

information that they are giving you?

132

: 00:05:52

All those things add up.

133

: 00:05:55

To someone that you can trust

or that you can't trust.

134

: 00:05:57

And in the end you could always say

trust and verify, and that's fine.

135

: 00:06:00

And sometimes you don't want to

verify if you're paying somebody or

136

: 00:06:04

listening to someone who is an expert,

that's why you're listening to them.

137

: 00:06:08

Right.

138

: 00:06:09

Because you assume, Hey.

139

: 00:06:11

Cyber security is not my job.

140

: 00:06:13

It's your job.

141

: 00:06:15

And so I'm listening to you

because I assume and expect

142

: 00:06:21

you've done the research.

143

: 00:06:23

To then tell me what I need

to do and save me time.

144

: 00:06:26

Thank you very much.

145

: 00:06:27

That's why I listened to you.

146

: 00:06:28

That's why I consider

you someone who I trust.

147

: 00:06:31

You know, with these, with these things.

148

: 00:06:32

And I am not, I'm not seeing.

149

: 00:06:35

I'm not seeing that as much as I'd

like to, and that's not new, right.

150

: 00:06:39

That is not new.

151

: 00:06:40

It was prevalent in the

fitness industry for ever.

152

: 00:06:44

It still is.

153

: 00:06:45

And it's, you know, it's the same

thing in the cybersecurity world.

154

: 00:06:49

Except for.

155

: 00:06:50

Except for.

156

: 00:06:51

Fitness was somewhat science slash art.

157

: 00:06:54

Cyber security is.

158

: 00:06:56

Facts versus fiction.

159

: 00:06:58

And a story.

160

: 00:06:59

Something's either doing

this or it's not doing this.

161

: 00:07:03

And the person that you're listening

to, if they're giving you information

162

: 00:07:06

on what you should do, Should be

able to back up with sources of why

163

: 00:07:10

that's true or why that's not true.

164

: 00:07:12

Uh, or you need to do this because

here are the facts of the situation.

165

: 00:07:17

Don't give away all your data.

166

: 00:07:19

To a genetic testing site without

reading the privacy policy, because.

167

: 00:07:25

If you haven't read that policy,

you don't know what they're

168

: 00:07:27

going to do with that data.

169

: 00:07:28

How are they securing that data?

170

: 00:07:29

This is big stuff for you.

171

: 00:07:31

Right?

172

: 00:07:31

So my last podcast was 23 and me.

173

: 00:07:34

The pain of having to go through two

factor authentication or doing anything.

174

: 00:07:38

You know, was.

175

: 00:07:40

Would not have been that great as

oppo as compared to getting the

176

: 00:07:44

information that you wanted, which was

figuring out your genetic, whatever.

177

: 00:07:48

So when it comes to cybersecurity

things, phone updates.

178

: 00:07:52

Or windows updates or I O S

updates or how do you delete

179

: 00:07:57

your data or anything like that?

180

: 00:07:58

You need to ask yourself.

181

: 00:08:00

Who are you?

182

: 00:08:02

That's giving me this information.

183

: 00:08:04

Do I know anything about you?

184

: 00:08:05

Do I know where you work?

185

: 00:08:07

Do I know you went to school?

186

: 00:08:08

Do I know what qualifications you have?

187

: 00:08:10

Or have you just been reading a

bunch of blogs and I'd give me.

188

: 00:08:13

Me information.

189

: 00:08:14

Cause I could do that myself.

190

: 00:08:15

Okay.

191

: 00:08:16

And then are you citing sources?

192

: 00:08:18

Are you giving references?

193

: 00:08:19

Are you giving out information

where I can research on my own?

194

: 00:08:23

If I tell you that there is a

iOS update that is going to do.

195

: 00:08:28

X Y and Z.

196

: 00:08:30

Am I at least giving you a source

that you can go verify that

197

: 00:08:34

or research that on your own.

198

: 00:08:35

If, if you're that curious.

199

: 00:08:37

I should give you the

source where I found that.

200

: 00:08:40

And if you want to trust me great.

201

: 00:08:41

And if you don't, you've got a source

that you can go dig into and re yourself.

202

: 00:08:46

Like, if I tell you, Hey, this

particular bill that just went

203

: 00:08:49

through the house, HR two.

204

: 00:08:51

whatever.

205

: 00:08:52

Is going to do this,

this, and this and this.

206

: 00:08:54

And you're like, Hey, this guy knows

what he's talking about, but he's given

207

: 00:08:56

me the bill name and information and a

source, and I'm going to go read it for

208

: 00:09:01

myself and verify that I agree with that.

209

: 00:09:03

Now you don't have to, but

you could because I've given

210

: 00:09:06

you a pathway to do that.

211

: 00:09:08

Same goes for cybersecurity, who

is telling you this information?

212

: 00:09:11

Are they citing sources that

you can go research on your own?

213

: 00:09:15

Or are they just fear-mongering

and spreading diff disinformation.

214

: 00:09:20

And rumors.

215

: 00:09:21

And unfortunately.

216

: 00:09:23

In my journey again,

into the online world.

217

: 00:09:27

There are some really great

smart people out there.

218

: 00:09:32

But they're awesome.

219

: 00:09:33

Some not so smart people.

220

: 00:09:34

They're very good marketers.

221

: 00:09:36

They know how to film and they certainly

know how to do hooks and viral hooks

222

: 00:09:40

and all that kind of stuff, but their

information, isn't all that good.

223

: 00:09:44

And it's incomplete and

they never give sources.

224

: 00:09:46

And that's just unfortunate.

225

: 00:09:48

Because it just continues

to spread disinformation.

226

: 00:09:51

Backs that don't line up.

227

: 00:09:52

Things that you don't need

to be concerned about.

228

: 00:09:56

Skipping over things that you

should be concerned about.

229

: 00:09:58

So.

230

: 00:09:59

The main point of this

particular podcast is.

231

: 00:10:01

Cyber security influencers

need to do better.

232

: 00:10:05

They have an obligation in my

mind, in my opinion, here's the

233

: 00:10:09

opinion part, in my opinion.

234

: 00:10:11

You have an obligation.

235

: 00:10:13

If you're putting yourself out there as

an authority in a particular space, you

236

: 00:10:18

have an obligation to do the minimum

amount of research to make sure that what

237

: 00:10:21

you're saying is relatively trustworthy.

238

: 00:10:25

And give out sources the best that

you can so that the people listening

239

: 00:10:29

can go find that out on their own.

240

: 00:10:31

If they are interested in doing that.

241

: 00:10:32

That that really is it.

242

: 00:10:35

I think influencers in this

particular, in all spaces, but in this

243

: 00:10:39

particular space, Need to do better

because cyber security breaches.

244

: 00:10:45

And your data being lost.

245

: 00:10:47

And your identity theft.

246

: 00:10:48

And, you know, credit

cards being compromised.

247

: 00:10:52

And scammed and losing

money is on the rise.

248

: 00:10:56

More so than ever before, because

the playing field is now more

249

: 00:11:00

level than it has been in the past.

250

: 00:11:02

And I think we're obligated to give the

people that are listening to us the best.

251

: 00:11:06

Uh, information, resources

and things that they can do in

252

: 00:11:10

order to protect themselves.

253

: 00:11:11

Now, whether they choose

to do that or not.

254

: 00:11:14

That's up to them.

255

: 00:11:15

So if you're talking about two factor

authentication, And what's the best way

256

: 00:11:19

to do that and how, and that you should

basically turn it on for every single

257

: 00:11:23

site and service possibly offers it.

258

: 00:11:26

And here's a site that you can go to,

to figure out how to do it because

259

: 00:11:28

unfortunately, every site is going to

have a different way of turning that

260

: 00:11:31

on, but the concept is there, right?

261

: 00:11:33

Like strong, complex, long

passwords, password managers,

262

: 00:11:37

two factor authentication.

263

: 00:11:39

Whether people take

advantage of that or not.

264

: 00:11:41

That's up to them, but you've

given them information.

265

: 00:11:44

You're the expert in that field.

266

: 00:11:46

And you've given him sources

that can help them turn that on

267

: 00:11:49

for these different resources.

268

: 00:11:51

And you've told them why

it's important to do so.

269

: 00:11:54

So they're not the low-hanging fruit.

270

: 00:11:57

At the end of the day, if a

company gets breached, And your

271

: 00:11:59

information just goes out there.

272

: 00:12:01

Like I just got my, I don't

know how many umpteenth breach

273

: 00:12:04

notification letter this year.

274

: 00:12:06

There's nothing I can do about that.

275

: 00:12:07

I had EV I had everything turned on in

that side that I possibly could, and

276

: 00:12:11

they got breached and they lost data.

277

: 00:12:12

Nothing I can do about it.

278

: 00:12:14

Nothing you can do about it.

279

: 00:12:15

Right.

280

: 00:12:16

We get some free credit

monitoring will be.

281

: 00:12:18

But you're giving out the information

to the people that are listening,

282

: 00:12:22

the best that you can with the

sources and the reasons that

283

: 00:12:24

your why, why you're doing that.

284

: 00:12:26

That is our obligation.

285

: 00:12:28

As cybersecurity influencers.

286

: 00:12:30

Our obligation is to do that.

287

: 00:12:33

And I don't think a lot

of people, frankly, care.

288

: 00:12:36

They don't really care they're in

this game for a different reason.

289

: 00:12:40

And I'm not going to change them one bit.

290

: 00:12:44

However.

291

: 00:12:44

I might be able to change one person.

292

: 00:12:46

That's listening on this podcast

to understand the concepts of who

293

: 00:12:50

is giving you the information.

294

: 00:12:53

Why are they qualified to do it?

295

: 00:12:55

How did they come to that conclusion?

296

: 00:12:58

And do they have any financial

incentive to give you that information?

297

: 00:13:02

If you could keep that in mind.

298

: 00:13:04

While watching hundreds and hundreds

of videos or reading hundreds of

299

: 00:13:09

blogs or newsletters or whatever,

if you can just keep that in mind

300

: 00:13:13

is before I completely trust what

you're saying, what anyone is saying.

301

: 00:13:19

How can I find out for myself?

302

: 00:13:20

This is true.

303

: 00:13:22

Did you offer me those sources that

I can go do some independent research

304

: 00:13:27

on my own, if I don't want to, then

I don't want to, but did you do that?

305

: 00:13:32

And why are you giving

me this information?

306

: 00:13:34

Are you trying to sell me something?

307

: 00:13:36

Is there an incentive for you to say

that product a is better than product B?

308

: 00:13:40

I mean, are you getting paid?

309

: 00:13:42

All these things matter.

310

: 00:13:44

And frankly, I'm concerned.

311

: 00:13:46

For the welfare of just

the general population.

312

: 00:13:49

Because it's happening more and more.

313

: 00:13:53

That.

314

: 00:13:54

We have the information.

315

: 00:13:57

And it's not getting disseminated in a

responsible and reasonable fashion by the

316

: 00:14:02

people that would have that influence.

317

: 00:14:04

So I'm just doing my

teeny teeny itty-bitty.

318

: 00:14:07

Cog in a big wheel part

of trying to do that.

319

: 00:14:10

That's all I can do.

320

: 00:14:12

Is just do the best that

I can and try to help you.

321

: 00:14:14

And maybe you can help somebody else,

I guess, in a way, pay it forward.

322

: 00:14:18

I guess.

323

: 00:14:18

So keep that in mind.

324

: 00:14:21

Cyber security influences

need to do better.

325

: 00:14:25

And again, some are doing.

326

: 00:14:27

Fantastic jobs.

327

: 00:14:29

No, no rips on anybody out there.

328

: 00:14:32

I'm not naming names.

329

: 00:14:32

I'm just saying some people are doing

a fantastic job of doing that, but

330

: 00:14:36

we all need to come together and make

sure that we're on the same page.

331

: 00:14:40

You've taken on, you've

taken on an obligation to be

332

: 00:14:44

an influencer in the space.

333

: 00:14:45

And I think.

334

: 00:14:46

Different than retail selling someone,

a product or a handbag, or what

335

: 00:14:50

have you blankets or sheets, right.

336

: 00:14:52

I think you have an obligation.

337

: 00:14:54

If you're in this space to do good

for people and to protect them.

338

: 00:14:58

That's that's the best I can tell you.

339

: 00:15:00

So keep those things in mind.

340

: 00:15:01

And stay safe.