The opinions expressed are those of the show
hosts and may not necessarily be of any company
in which the show hosts may represent. The following
podcast may contain some strong language. Parental
discretion is advised. Welcome to podcast number
267 of The Security Box. I'm Jared Reimer. AI
and its usage. This week's program focuses on
AI and its usage. Where it's helping, where it's
misused, and where there may be some issues.
or misused and risks dealing with privacy and
accessibility. This particular topic is going
to be rather interesting as AI itself continues
to move fast and people may not consent to everything.
So we need to be aware of what's going on. So
we always want your comments. So please feel
free to contact us. Email iMessageTech, T -E
-C -H, at M -E -N -V -I dot org. Text or WhatsApp
804 -442 -6975. Or call the comment line at 888
-405 -7524. We how so? are going to cover videos,
including AI regulations, governments should
use AI for pics and vids, Microsoft's backdoor
encryption, Tesla cars equal super hackable,
We are never getting rid of deep fakes. And your
breaches of the week from January 26th to February
1st, 2026. We also have Breaches of the Week
for January 12th to 18th. And that recently appeared.
We did not miss it. It just recently appeared
in recent times. We will have more, including
why are small companies not having issues In
regards to breaches, when big multinational companies
are, contemplate this. This will be Podcast 268's
topic. And we already have our notes, which we
need to clean up and do, but that is what will
be coming up. in two weeks' time. We hope you
enjoy this podcast, and it is coming up right
here across the Jared Reimer Radio Network. The
Security Bomb! Welcome to TSB Program 267. Recording
day is Wednesday, February 4th, and we are uploading
on February 5th because we have a commitment.
So, that's how that's going to have to go for
today. going to talk about quite a lot of things.
Terry Ring will be here during the first hour.
He's got a very interesting story. And we'll
go into a deep dive about it. If you listen to
the security hour on Throwback, you got the short
version. This is the long version. There may
be some news and notes that Sean posted. That
might be of interest. There was something I wanted
to blog about Scattered Spider, but I've been
involved in other commitments trying to get my
workflow settled. So there hasn't been a lot
of blogging. And we've got an AI discussion.
And no, nobody's in trouble. I've thought about
this for a while now. But after I was forced
to get an account after I got sick shortly after
the last TSB, because I wanted to log things,
I got to thinking about practical, safe AI use.
Right, Mr. Ring? Yes. We talked about practical
safe use on throwbacks, so be there here. Well,
you don't have a lot of time. I know you have
to run in about an hour. So, you... have a story
to tell. And it's quite interesting. Yeah. Very
interesting. The names, by the way, are changed
to protect any particular person that might be
listening that took any telephone calls. Yeah.
So we want to make that known up front. We're
changing the names. So go ahead, Mr. Ring. I
will turn my mic off so that they can clearly
hear you. Go ahead, please. I get this phone
call on Friday morning. I pick it up. It's an
847 number, a local. I go, okay, you know, whatever.
I'm Dave, and this is, you know, kind of an Indian
guy. He's like, I'm Dave from customer service,
AT &T. I want to know how your service is. And
we're offering 50 % off for three years, which
is 36 months. Okay, cool. Let's do it. And he
wanted my name. I gave him my name because everybody
knows my name anyway. It's no like, you know.
He goes, okay, so they, supposedly accessed my
account with just my name, which seemed a little
odd. But I'm like, you know, okay, I just want
to see where this goes. That's the key word right
there, supposedly. Yeah. Let's make that very
clear. Yeah, so they transferred me and this
woman, oh, hi, I'm Jennifer from AT &T customer
service, which was even more weird. Because why
would an AT &T rep transfer you unless you need
to see a supervisor for something? Well, I thought,
okay, well, I'll give her a chance. I want to
see how far this goes. I know I probably shouldn't
have done that because Kim says you shouldn't.
So she gave me this offer of three years, 50
% off. She goes, but... You get a free phone
on top of that. And I'm like, okay, well, I don't
really need a free phone, but what the hell?
So she's telling me about the free phone and
everything else. And I'm saying, well, what do
I have to do? And she goes, well, you have to
pay taxes on this. I'm like, but it's free. I
shouldn't have to pay a tax. And so then I hear
the other guy on and saying, this is Dave from
customer service. And without a beat, I'm kind
of going, when you're talking to AT &T, you don't
read normally here. another person talking. That's
what really tipped me off and I just ended up
hanging up and I says, okay. And this is where
I called Jared and I say, Jared, this is what
happened. And I gave him the same story I'm giving
you guys. He goes, call AT &T and see if this
is true or not. See if this is a real thing.
They verified me through the app. That's the
key word right there. Yeah. Verified through
the app or some other method. And, you know,
she asked me for my address, which the fraudulent
person didn't ask me for. She goes, I'm Janet
from AT &T. How can I help you? I said, Janet,
are you offering this particular offer? And I
told her it was 50 % off for three years, and
plus you were offering me a free phone of a choice
of an iPhone, 17 Pro Max, or some Samsung Galaxy.
She goes, sir, let me take a look. She goes,
no, the only thing we're offering is internet,
$40 a month for a year. Says, you need to tell
your staff and a supervisor, this scam is going
around where they're calling customers to try
to get their information. So I was talking to
Jared on throwback and I says, if I didn't have
this training, Because they probably would have
my information. Because I didn't really know
much about scams until I started reading the
books and dealing with security. I mean, that
just, so I wanna make people aware that this
scam is going around. And this is why I thought
maybe the high -level version of this would be
more appropriate for this show than for yours
because we just want to get it out on yours.
You've got low -level people. We know that. We
can go deeper here. And the thing was is I heard
the gentleman talking. Hi, I'm Dave from DT &T
Customer Service. Wow, I was on the phone with
this girl. Jennifer. I'm going, that just doesn't...
So, Dean, what did Janet say when you told her
that? She's like, you know, we're not offering
anything like that. No, but I mean, no, I'm not
talking about... You already talked about that.
I'm talking about the... I heard the guy go...
You know, you'll... take another call or whatever
they're doing. And she was saying that we usually
don't do that. It's usually silent. And I actually
listened. While she was doing stuff, I was listening
for another person, for another customer service
rep. And I'm not saying that there might be background
noise. I'm not saying that at all. No, I'm not.
Because there could be, like, somebody walks
over and starts yapping at them about something.
I'm not saying that it can't happen. It can,
but you don't really hear it that often. And
when you do, it's very rare. Because most of
those companies, they want, you know, silent.
They want, they don't, I mean, it can happen.
And I told her, I said, you know, Janet, you
got to let your, she goes, I'm going to forward
all this to my supervisor and all the other reps
so that way they're aware that you need to because
that scam is going around. Whether she did it,
I don't know. I'm confident. I'm confident she
did. Yeah, I'm pretty confident about that. I
even informed, you know, my family and friends,
like, hey, this is happening. Watch out. And
you're honest. You're trustworthy. Yeah. You're...
You're understanding the landscape. You are not
technically savvy like me. I don't mean it in
a bad way. No. You have enough knowledge to do
what you need to do, and you have the brain to
process. everything and understand it regurgitate
it and explain it like me yeah or anybody else
who's been in the industry nick nick is in the
same boat right like he understands it when i
was telling him about you know all of this he
he already he already knew Even though he's been
only around here since probably around podcast
90. And I understand Kim saying, well, you should
have hung up, this and that, but I wanted to
see what the offer was. I wanted to see how they
were kind of doing this. So I understood it from
a victim's side of it. And I tell you, people
could fall for this and very easily fall for
this. Especially when you don't have the security
training. And that's why I was saying with throwback,
you know, I didn't have the security training.
I probably would have fallen for it. And I'm
not saying this that I'm dumb or that I'm illiterate.
I just, you know, the offer sounded good and,
you know, oh, cool, a free phone. Yeah, I mean,
but when you see the signs and you understand
it and you kind of sit back and listen to what's
going on, there was tons of red flags that...
You know, and when I've had enough, when I had
enough of the scam, I just hung up. Okay, I'm
done. Please talk about, please talk about very
clearly the red flags. Well, you know, when you
think about this, you know, AT &T and them, they
don't offer you free stuff unless, you know,
it's in a deal. And it's only for a limited time.
But that's something that's one. And when you
hear someone else talking like that, especially
when you're on the phone with another rep, I
mean, that's huge. And I had a feeling after
I got off the phone with them that they were
using a burner number. Because it was an 847
area code. It was my area. Every time I got a
call from AT &T, even if our outage is fixed,
it's their 800 -288 -2020. Or is it 288 -2020?
I think that's what it is. I mean, I have their
number in my phone as AT &T, but they do have
different numbers that they call from. But you're
one of the few that puts companies like this
in your phone. But what I'm saying is, if you
don't have the contact... Oh, and don't rely
on that, by the way. No. Because they could spoof
that number, which can trigger... They can. They
can. Your... They can. Phone to display that
to you. They can. And then again, I mean, you
have to understand what the signs are. You know,
you got to know your company, who your carrier
is, what kind of offers they have. You know,
and at first it did sound promising. I'm not
going to lie. But when I was sitting back just,
you know, listening to, oh, well, you got to
pay the tax on it, though. Well, it's free. You
shouldn't have to pay tax on a free item. There
is no tax on free. No, exactly. And that's kind
of where I drew the line. Unless... Unless...
And I've seen this on commercials. We're offering
it for free, but you have to pay us to ship it.
But they have to make that clear. Whether in
the commercial or within the offer. It'll say,
you know... Free with shipping, with the price
of shipping. With the price of shipping and handling.
Yeah. Or what they'll do sometimes is they'll
say, okay, buy an iPhone 17 and get an Apple
Watch, for an example, for 99 cents. Okay. I've
seen that. I haven't seen the Apple Watch like
that, but I've seen other products like that.
But what I'm saying is, which is why I wanted
to do a deeper dive on this, and I didn't want
to do this on throwback because your listenership
is... I mean, my listenership is more for the
disabled and those who don't understand it as
much as ESP. Right. ESB is more of an advanced
show. Although, if anybody who's new has questions
and we're doing deep dives, that's where I tell
you. Email, iMessage, contact me. Tell me this
was too much. Tell me a simple version. I mean,
they can even iMessage me at throwback96mx. And
I could walk through the story with them too.
You know, they could email throwback at 96mix
.com or iMessage it. That's all set up. That's
why I have that set up. Right. You know, so the
thing was, is it's just like, you know, you hear
another gentleman talking to another client as
this lady is giving you the spiel and it's kind
of like... That doesn't make sense to me. When
I was speaking to Janet, I was listening for
this. You know, just to say, okay, I mean, I
called the AT &T phone number, so I knew it was
the legit company, but I just wanted to see how
they operated as a company when they were on
phone with clients. I mean, when I dealt with
E -Voice with my toll -free line or somebody
else's toll -free line, I didn't hear anybody
else. Correct. My point. And I know, like, these
girls are victims, too, and I understand that.
But... And let's clarify something. Because this...
program never got the podcast episode where they
describe all of this that you guys at Throwback
got. So talk about that episode that we played
on Throwback where they describe these terms.
Basically, we're talking about places like Cambodia,
Russia, places in Chile, and a lot of these smaller
countries have these camps. These camps are victimizing,
whether it's men, children, women, mostly women
that I understand understood it. They're mistreated,
but they are forced into camps like that one.
And they call them, which is the most worst thing
that you could call these people. They're victims,
they're not clients and they call them clients.
Because they take their money and they keep going
for their money and crypto and They often use
the word client as their victims. And they're
actually victims, but they use the word client.
Not a client. You're a victim. I mean, even these
people that are being forced into this, they're
being beaten, I'm sure. I'm imagining so. These
camps are all over Cambodia and Turkey. All these
different countries that deal in this. These
are not just like these little tiny camps either.
They're like massive, massive, massive centers
and camps that do this. It's all they deal in.
There's countries that that's how they make their
money. Cambodia is one of the big ones. That's
how they make their funding. Through these scams.
And if you want to hear the episode, please tell
the people what podcast it was. And I know you've
got a copy of it because you save these things.
I do, but I don't... They can email you to get
a copy. You would have to send it through something
like Dropbox, WeTransfer, SendSpace to them because
it's large. I mean, you can email throwback .net
if you want to know more about it. I could find
the podcast. I believe it was ScamSquad? No.
Or was it... Scam Squad is too simple for that.
Who was it? I think it was... It was the other
one. It was either the Cyber Wire, Lock and Code,
or the Files of Fake. F -A -I -K, by the way.
Yeah, that's right. It was the Fake Files. Yeah.
That's what it was. It was the Fake Files. Yeah.
Mr. J is on the way over, so stand by. It was
the fake files, and I gotta say, you know, this
is a pretty sad podcast. It was a pretty savvy
podcast. But sad at the same time. I mean, these
people are being victimized themselves. Yes.
And... It's true, they are. Into this... Good
morning. The ones that I dealt with. And unfortunately,
you know, if they don't do it, then they possibly,
you know, might lose their life or lose this
or that or get fed for a month or, you know,
it's pretty sad. It is. If you want it, you can
ask us for it. I'm sure I could go find it through
the RSS or I could go search it out and I'm sure
that Google or DuckDuckGo has it. Yeah, I was
talking about my AT &T scam, Nick. Oh, yes. You're
going to get half off a new phone. Yes, I remember
that. You need to get half off your bill and
get a free phone. Yes, yes. That you still somehow
have to pay taxes on. Yeah. Yes. Yeah. And then
yet I heard someone else talking to another client
while I was on the phone with this girl. Huh.
Oh, actually. He got transferred to a girl, and
then he ended up either calling somebody, which
is usually how this works, or somebody calls
in. But usually they call out. Nobody ever calls
in. And I heard, this is Dave from AT &T customer
service. How is your service today? I'm like,
um, something doesn't sound right. And when I
actually called Jared about it, he goes, call
AT &T and see if it's true or not. That's the
only way you're going to really know. You know,
that's what I did. And he goes, no, it's, we
don't offer that, something like that. That's,
no. And then he called me back and I'm like,
uh, really? Well, I didn't use your name with
her either. I just said my security advisor advised
me to call you guys because... And that's important.
And I think, I'm not saying everybody should
trust me, but you should find somebody you trust.
Whether it's me, whether it's Nick, Terry, whoever.
To advise you on what's going on. Right. You
know, Kim sent an email yesterday talking about
the $30 ,000. I didn't read it yet, but it was
a $30 million. catfishing scam. I talked to Nick
about that when I called him late last night
because he texted me about the Braille, which
we're going to get into later. Right. Yeah, I
mean, that was an interesting one. And that's
why, you know, we discussed it here because Here
we could discuss it at length at least and dig
into it a little bit more. Nick could probably
agree that we need to keep it as simple as possible
for throwback. Yeah, I agree. Not saying any
of my listeners are simpletons. I have no way
to know that, but maybe. You get a different
crowd, though, on the Saturday night show. Not
so much the tech people. It's more the music
people. Yeah, you get the music people. I'm like,
I gotta call Jared and find out where to proceed.
So I had him on one ear, something else on another.
And the other ear was calling my name, and I
had to tell them I'm on a call. I think when
I told Jared I almost got scammed, he kind of
probably fell out of his chair. I almost fell
out of my chair. I'm like, but I kind of sat
back and listened to everything. Oh, something
else is making a return. Speaking of scammed.
So I got an email earlier from somebody with
the simple subject line of quote -unquote statement.
And there was an attachment there. And what it
turned out it was was apparently some supposed
purchase that I'd made at PayPal for... A little
over $400 in Bitcoin. And yes, of course, if
that was something you didn't authorize, call
this random 800 number. What was it? 800 -915
-something. Oh, Dave. And let's just make it
clear. If you want to call PayPal and it's toll
-free, I believe it's 888 -221... 11... 91, I
think is what the number is. They almost got
my dad the one time. Oh, man. Let me see if the
GPT of... I can tell you a PayPal number, actually.
Chat... Let's see if it'll tell me here. Yeah.
Toe -free customer service number. U .S. and
Canada. Mm -hmm. 888 -221 -1161. Ah, that's it.
888 -221 -1161. Yeah, this was nothing like that.
Yeah, I have their PayPal. And when you call
in, it's going to want you to log in. Yep. It's
going to verify you. Yep. Aha. Yeah. It'll verify
you. Yep. If you want PayPal credit, you can
actually use that number or 866 -528 - Or if
you're tech savvy enough, you could use their
app and get PayPal credit that way too. Yeah.
I mean, those who aren't, I can understand, but
those who are... 528 -3733. Yeah, not 800...
915 -3633 or whatever this number was. No, I
did not dial it. If you're outside the U .S.
and Canada, support option will vary by country.
Log into PayPal .com. That's PayPal. P -A -Y
P -A -L dot com. It may redirect you when it
recognizes you're outside of the territory. So
log into your account and use the contact page
for your country. Not PayPal either. PayPal.
Remember that email? Log into your PayPal account.
What? Log into your Netflix. Yeah, I figured
I would. 800 -915 -XXXX. So, yeah. ChatGPT is
going to write a novel. At GPT. It's still writing.
It's still writing. Yep. Good old AI, man. Good
old AI. Got it. This is about scam awareness.
Yeah. Yeah, that's what we're... And we know
that. PayPal does not... So let's highlight some
of this. If it was PayPal or any other company.
PayPal does not call customers from random 800
numbers. The number is 888 -221 -1161. If you
have a PayPal credit, the system will already
know and it'll ask you. So you don't have to
call any other number. And even if they issue
a PayPal, they don't call you. They email you.
Don't get calls from PayPal. They do. PayPal
does not cold call users about the following
items. Fraud. Account problems, that's what Terry
was just talking about. Yep. Suspicious transactions.
Yep. Refunds, which I got one, but that's not
because of a company issue. Something else happened.
Urgent action required. If someone received a
call from 800 -915 -XXXX, it's not PayPal or
probably any other company you do business with.
Be phony. How PayPal actually contacts people.
Messages appear inside the PayPal account message
center or via email. Address to the users and
address them by full name, not dear. That's what
I was just talking about, the email. That's what
I was just talking about, the email. Mm -hmm.
Mm -hmm. If PayPal ever just calls, it's usually
after the user initiates contact and gets a one
-time passcode. Yep. That's how you deal with
PayPal. Common scam patterns that Nick lightly
saw. And this could go for anybody, but since
it knows Nick, it's mentioning him by name. Now,
let's cover these four. Spoofed 800 number. 800
-915 -XXXX is a big red flag. He noticed that.
Give him five bucks. Next. Caller claims any
of the following. Suspicious activity, unauthorized
charge, your account may be locked. No such thing.
The other two are possible, but the accounts
are never locked. Not in the frame of placing
a phone call. What happened to me with Facebook?
It did get locked, but Facebook emailed me. I
had it where I got an email, but it said my account
was restricted. Well, that's what PayPal does.
They restrict you, i .e. limit you to sending
about $500 a month. And there may be other limitations.
No, I forgot why it was restricted. They don't
restrict you, but I forgot why the restriction
was on there and they lifted it. Well, by default,
it's restricted until you add a bank account.
Oh, yeah. I have a bank account. They fixed it.
But my bank account was on there already and
it was still restricted, so I actually had to
call them. But it doesn't matter at this point.
No, no. The next item here is pushes. Nick, the
question is, was it something urgent that we've
talked about on this program before? Oh, yes,
it was. I mean, they made it seem like, you know,
call in 24 hours kind of thing. You know, if
you want a quote -unquote refund. Yeah. Okay.
Prize to get. And that's the end of there. Okay,
that doesn't quite apply here, but yeah. No,
but okay. Login info, two FA codes, remote access,
confirmation of personal details. And it says
what Nick should do. And I think we should apply
this to anybody because this is part of the main
discussion here as part of scam awareness for
today. Yes. Do not call the number back. Do not
engage. Although, Terry engaged enough to understand
what was going on. But once he saw the red flags,
that was enough. That was enough, yep. Yep. Log
into PayPal directly or call the company. Check
the message center. If concerned, call 888 -221
-1161 or the company that is there. Forward scam
emails. You can send them to phishing at paypal
.com. So, that works. And calls can be reported
to What is it here? What did it say here? Oh,
calls can be reported too. So you send them an
email, tell them what the phone number was, what
they wanted, that type of thing. Right. PayPal
does not randomly call from unsolicited numbers.
Claiming to be PayPal is a scam, full stop. I
can do any of the following, but we're talking
about this in full. Because that's what this
podcast is for. Right. Yep. Podcast 267 related
this to any company including Terry's story about
and it's 847 based phone call he discussed so
this group understands this Which is good. That's
what we want. Email iMessage, J -A -R -E -D -R
-I -M -E -R at 986themix .com. Text or WhatsApp,
804 -442 -6975. Call the comment line at 888
-405 -7524. And yes, this is what it's telling
me is exactly what we've done. Yep. Any legitimate
companies don't cold call without authorization.
Nope. Or without you calling first. Correct.
Terry's 847 AT &T call is a perfect illustration.
They use local and toll -free numbers. It was.
All of that means nothing. It's a good thing
I had security training. So... Even if it matches
their prefix. So, we know this. Yes. They may
send you a letter or an email. If they do call,
They do authentication. And they don't tell you,
you must act now or your account will be locked.
The scam isn't the number, it's the unsolicited
urgency, says ChatGPT, and I agree with that.
What about you guys? Yeah. Agreed. Voice calls
feel more official because we're blind and disabled.
Pressure plus audio equals higher success rate.
We know this. Yes. So... If... We should do a
standard TSB segment. I can have one run because
it says, here's what we could do next. We can
create a repeatable checklist that you can reuse
for every episode. A standard TSB scam warning
segment. or tie this directly into AI voice cloning
and caller ID spoofing. We've got enough AI stuff
that we can do AI for months at the two -week
rate. Oh, we could. And I've already got the
next episode lined up and we're going to talk
about that in a little bit of detail in a while.
I kind of like the whole TSB scam thing. It's
kind of cool. Do you want a segment that we could
just run every week? I can tell it. Do item whatever
in this list. And I can copy it, edit it, record
it. Yeah, we could throw it in throwbacks. We
could throw it in throwbacks. As well as TSB.
I'd be, you know, have a basic warning. Like,
hey, you know, watch out for this. I mean, that
would be... Would be a good thing. You handled
this exactly right by airing it, it says. Yeah.
I hope so. But it knows how I work because I've
given it prior episodes. I've given it show notes.
I've trained it because of what I'm doing. That's
what I was doing all last week was training because
I need it to help me. So I will revisit this
later so that we don't take up air time. I do
like using AI for a lot of stuff and I gotta
say that I don't use it for good. It's fine.
Okay. Mr. Ring, I know you need to go. Press
play is working, so it'll be Nick and I. If he
left already, then I won't need to, but if he
didn't, then yeah, I'll be going. I don't know
if he left already. Okay. Mr. Jack? Yep, I'm
still here. Oh, he left already, so I guess I'm
staying. Alright. Because you were telling me
that you were leaving, so we prepared you to
go first. That's what I thought. But he left.
He kind of left me here, so I'm like, well, okay.
Then don't go chasing him. No, he left already,
so I'm just going to... I know I haven't been
blogging, although scattered spiders back in
the news, they're up to no good. I spotted an
article I wanted to blog some days ago. We've
got a bunch of videos to air that Preston found,
so we'll be interspersing those within the episode.
And how about next week's program? I sent a draft.
I've been on a tirade lately about all kinds
of crap. So I expect the tech podcast to have
a podcast coming soon. about the braille transcription
course and why I basically started retaking it
although I know enough to basically do enough
which is what I'm doing now and how it basically
fail is set for failure if you're blind Interesting.
I've been on a tirade about all kinds of crap
with it. So, I don't even think I need news articles
anymore, at least for the foreseeable future,
to help me with the podcast. Okay. Just ask Nick.
Oh, yeah. I think I gave him a kind of a lineup.
I think I gave... There comes Mr. G. Yeah, Mr.
G. Just ask Nick. Yes, hello, Jared. I know you
were trying to track me down, but I did have
a short work day today because I actually learned
how to track down. Non -billable service notes
in our TheraApp system. I actually did not track
you down today. I just sent you some stuff that
ChatGPT was giving me based on my tirades that
I've been on lately. I just got through my scam
story, Preston, so... Actually, Terry, don't
worry. I was listening in and I do want to say
you did a nice job of covering it because as
far as I can understand, we need to keep sharing
our love experiences because, you know, it could
happen to any one of us down the line. That's
true. Good job. And the fact that as we were
just talking about, This podcast reaches blind
people. Not saying other disabilities don't listen,
but blind people by their nature, including me.
I'm including myself in this. I'm not going to
exclude myself in this. Well, sure. No. But we
are all going to be vulnerable to this. No matter
what the scam is, whether it's the PayPal scam
that Nick was talking about or whatever company
they wanted to say they were from. Whether it's
Terry's story or anything else we've talked about
through the years. Yeah. Anything can happen
still. You know, as long as we are living and
breathing, we need to continue to share, you
know, our experiences and stories. You know,
it's going to be a learning experience. And by
the way, Mr. E gave out the... the other day
was it yesterday or the day before the breaches
of the week but I've got enough files to run
so we're going to have to run that in two weeks
because I've got you sent me like five or six
or seven files that we're going to intersperse
between you know segments and things so in credit
sense since we're doing this bi -weekly We'll
be catching up during the weeks that we're not
here. So that's going to be in the next show's
batch. But yeah, good job, Terry. I'm proud of
you. Appreciate that. And speaking of next episode
in two weeks, we sent out the draft. Why is the
JRN and the Music Education Network for the Visually
Impaired better than any multi -billion billion
dollar company? Because we have better security.
We actually... You actually take care of your
clients, Jared. If they have an issue, you deal
with it right then. That's part of it. That's
actually part of it, Terry. That's not the entire
story. I'm sure it's not, but I'm saying that
when a client has an issue or you have an outage,
you don't just say, oh, screw it, I'll deal with
it next week. You get on it and do it. But that's
part of it. That's part of it. You're correct.
No. You are correct. But that's not the entire
story. And this is why you should get your happy
ass back on the list because I sent the text
to the list but what I will do is I will send
you the raw unedited file And I will send it
to your folder in the box of drop. A root? Yep.
You can put it in the root. And it will be in
the root. Look for Two. Sixty. Oh, do you want
it in the root or do you want it in throwback?
You can put it in the root. Yeah, just throw
it in the root. It's fine. Okay. I have to clear
that out. I know I got to go through it. It's
okay. I'll do it. Look for podcast 268. All right.
And there's going to be a lengthy, lengthy text
file that you can read. It's raw. Very, very
raw. This is chat GPT copied. There's no editing.
Mr. J. Yes. What do you think about our topic
in two weeks? I think this is interesting. I
mean, especially bringing in, well, you can't
really call it the voice of AI, but bringing
in that, you know, source. to also analyze that.
It did. Yeah, it did. I gave it both privacy
policies. I asked it to compare other known privacy
policies and what's different between us and
everybody else. That sounds interesting. I'm
going to have to come and join in two weeks.
I am not going to do this episode for your program,
though, Terry. It is too... No, it's too advanced,
as I'm sure it is. Yeah, I will... Yeah, yeah.
We're fine. Because we got topics. So, we have
topics even backlogged that we can do for next
week. Well, that's not the point. I can get it
written next week. I'm going to write it up next
week, but the problem I have is that I don't
know how to simplify this. Once I get it written,
even in percent codes, I could ask the tool to
make it throwback -friendly. I mean, we could
continue next week the conversation of AI like
we did. Right. I'm not ready for that yet. I'm
not ready for that. And I've got two meetings
in the next two days. Okay, so we'll do one of
our topics then. Yeah, okay, so we'll do one
of our topics. And I have JaredReimer .com AAC
stuff to do this weekend, so I don't have time.
I barely got stuff up yesterday for this week,
just because of what I've been doing. Yeah. I'm
going to say, Terry, don't give him any more
work on what he has. Yeah, no, we're fine. We
got topics. We're fine. We have topics. Actually,
Sarah, good morning. I'm going to be touring
an apartment, it looks like, now. Okay, cool.
Yeah, I think I might be getting a job soon,
too. I'm working... I'll be working with a non
-profit. Oh, yeah. I'd like that. I do, too.
I've never heard of them, either. They're called
Danka? Never heard of them. It's a job placement
slash... computer like training nonprofit organization.
I've never heard of them, but apparently they've
been around for almost 40 years. So because I
went on their website, I checked like when it
was given to me, I went on their website and
I looked at it and I looked at everything and
looked at their different stuff like I should
because I want to know a little bit about the
company. I even did that with Ray Graham when
they did the same thing. I wanted to see what
their company was about. That's exactly what
you should do. Research the company. Make sure
you understand them. Because if they ask you
questions during interviews, you'll know. Yep.
That's what I was doing. When I went to OneBox
in Hollywood, I knew exactly who they were because
I was already using them. Yep. I kind of know
a little bit about them and how long they've
been around and what they do, so I'm good. Since
I haven't been around the blogging scene, who
has anything that they want to cover before we
do a file switch and we do the whole AI thing?
discussion for the week. Well, not really a lot.
Mainly, it's been Sean going crazy on the blog
about Microsoft and their screw -ups. What else
is new? What else is new with that company? I
heard they're being sued again over Microsoft
Office. Really? Yeah. Missed that one. I heard
they were being sued again. Nothing new. Nothing
new. So, by the way, I had it generate, and I
really hope I went to the right place, chatgpt
.com. Yep. And it generated something for what
we were talking about last night. Good. Good.
So go ahead and edit that. And let me know when
you want it aired. All right. Isn't AI great
when you use it the right way, Jared? Oh, yes.
Well, I told it. About NCSAM and how I want to
tear my hair out, including the hair. Yeah, I
can get that. And it said, you've been doing
this too long and you're not wrong to feel frustrated.
And as it said, the industry has moved. Steve
Gibson and others. And I want to make this clear.
They have moved the industry by forcing us to
HTTPS, which we've talked about, forcing us to
use some form of MFA, and forcing change that
way. But as it comes to breaches... We're seeing
more of them because they've been forced to regulate
and force companies to come out publicly instead
of quietly fixing them, which is what they were
doing before. Target just made it a known problem.
Yep. Trump Hotels back in 2016. was the first
hospitality problem before breaches became mainstream.
And if you want to go back and learn about some
of these, go to jaredreimer .net slash articles
dot html, I believe it is. If it's not l, it's
htm. I believe it's html. I heard something really
crazy. You'll find it in the vocals section.
Yeah. Because I wrote for Vocal for a number
of years. Iberwire was talking about people still
using simple passwords, using their favorite
type of burger or whatever from a fast food chain.
And they said, you know. Oh, that's a terrible
password. They're loving it. Well, at the end
of it, and I thought, I mean, it's not funny,
but it was funny. It said. You're loving it and
so are the hackers. I'm like, yeah, of course.
It's true. They are. I'm loving it. I'll have
all your... I'm loving it. I'll have a McFlurry.
That's my password. McFlurry26 or whatever. McFlurry26.
One hacker's not going to know that. This goes
back to my diatribe when I was referencing...
The 25 password article that I posted on my blog.
And it says, you're right. This is a continuing
problem. And people like you continue to beat
the drum. I mean, I'm paraphrasing now. And you're
doing a good job of it, even if you want to tear
your hair out. It's analyzing my writing. It
sees my blog has been around since 11, even though
I've been around since 06. We lost the blog twice
during transfers, but that's the way it is. Can't
go backwards. No. I've been with this company
for a while now, but the point is... I think
I hear a McSneezy over there. That's me. I'll
be allergies. You're good. Well, what we've also
got sometimes, at least on your side, is a McCoffee.
We do. I think we have a McCoffee over here and
a McSneezy over there. Boy, wouldn't it be fun
to take this audio? Once I merge everything and
say, analyze this and see what... Because it
can't listen to audio fully, but it can analyze
it and give a summary of discussion points. Some
kind of a synopsis, yeah. Yeah. Because I did
that with other episodes and tied it with the
show notes and asked it how I can tighten things
up and make sure that I'm more consistent in
those notes. Yes. I know we got a ton of videos,
so we're going to figure out the order after
I deal with tonight's meeting. But we will play
some number of files, because I think I've got,
what, six or seven of these? Yeah. Quite a few
of them. Yeah, just about. That was my homework.
on a network update this past weekend, ladies
and gentlemen. So, you're welcome. There's some
good ones, I think. Right. I thought so. Yeah.
Pretty elaborate, as usual. Pretty elaborate.
Although, I may leave Kim. And it's not because
I don't like Kim. I love Kim. But Kim is not
reliable anymore. Her newsletters are becoming
too much emoticon based. Because the tools are
allowing it. And that generates Roy, known as...
What is it? Return on Investment. I forget what
it's called. Oh, thank you, Mr. J. I was going
to have to go back to an app. Thank you. So the
more clicks you get, the better you look. Well,
this is unprofessional for people with disabilities.
And it was so bad, Mr. J, that I shoved in the
email that I got in regards to the voting for
the board. And it had ballot box, telephone receiver,
and other emoticons baked in its email, even
though there was text in it. Oh my gosh. And
ChatGPT said that this was not compliant. No,
it should not be compliant. I wonder if somebody
should get a hold of her network and say, look,
you need to... I'm not going to waste my time.
I'm just going to quietly leave. I think. I don't
know how to unsubscribe from her newsletter.
It's on the bottom of each newsletter. I've even
been looking at her newsletters too and I'm just
kind of like, what is this? They're too hard
to read now. It is. That's why I stopped reading
them because But I'm not even getting them reliably.
I found a few in my spam folder. And Malwarebytes,
I'm not even getting them reliably anymore either.
I still get them. I don't. And I don't know that...
But they're good. It wasn't... They don't have
the same problem. No. Sadly, like you said, this
seems to be driven by ROI and, oh, this is what
people are doing now. Everybody uses them. That's
exactly what the GPT said. They're doing it because
the applications allow it. Allow it, yeah. And
they're not caring about people. And they don't
have to worry about it. They're not... And this
is why I want to take this into an accessibility
landscape because it's not secure. You're not
adding any value to it. No. You are adding more
noise because the screen reader has to interpret
through its understanding of what these emoticons
are. And they're trained. They've got all of
that in their coding. I think it makes you look
less and less professional. When I see those
things, it's like, oh my gosh, did some emo teenager
write this? No, it's very unprofessional. It
even said Kim Commando is not that reliable anymore
because of it. No. She may tout the 800 ,000
subscribers that she's got. That's all well and
good. 90 % of those subscribers are excited who
could see that and read it. And say nothing.
And say nothing. Because it doesn't matter. If
you get their news, that's it. Even some of them
might say... Really? We're not teenagers? Yeah,
but how many of them are going to complain, Nick?
Not very many. You know? Don't look at it and
say, okay, cool, I got my news. I'm done. Cool,
thanks. Yeah, we're not teenagers or 20 -somethings,
but yes, I see what you're saying. Yeah, no,
I get it. I get what you mean. I'm 40 -plus years
old, and I'm irritated about today's writing.
Yeah. Oh, yeah. I don't use that. Hardly at all.
I don't use emoticons. Yeah, because people think...
Because not only is it... I do that in text.
Right. But very, very minimal. Thumbs up. That's
my point. Sad face. Yeah. If, you know... Yeah.
Right. And now there are people... I thought...
I mean, I hope it was a joke, but I thought I
remember hearing something where... Some professor
actually allowed somebody to submit an assignment
written in texting language. It's like, oh, that's
so wrong. If that's true. That has to go into
the you -have -to -be -fucking -kidding -me department.
I hope it was. If you find it, if you find it,
shove it up. Our ass. I would be curious to read
it. Our ass is so full of stuff anyway, but you
know, whatever. By the way, I gave ChatGPT a
good one yesterday. After I was done and before
I rolled over, I said, maybe tomorrow I'll shove
the San Fernando Service Council agenda up your
ass and you can remind me what it's about even
though I have the braille available. It's sort
of like, yeah, my ass will be waiting for it
whenever you're ready. Oh, yes. That's right.
Yeah, I'm ordering a product and I told Gemini,
I said, I'm going to give you a review on this
because I want to, you know, oh, no problem.
I'll see you on Friday. We'll give you, give
me your review. Okay, cool. I use both services.
I use Gemini and ChatGPT. I mean, I like both.
While we're going to be switching to the topic,
we can talk about your usage of both in each
section of the AI discussion. Mr. R? Yeah, we
can. Mr. R, yeah. Mr. R? Just like me? Mr. R?
There's two R's? Both R's here. Both R's here?
Let's play some files. Let's take a file break.
When we come back, we're going to do AI. How's
that, gentlemen? That's great. AI sounds awesome.
That's right. The way of the future. Artificial
intelligence, boys. Terry Ring, Preston Gaylor,
Jared Reimer, Nicholas Jackson. We continue right
after these across the Jared Reimer Radio Network.
Would you want your government, whatever government
you live under, to generate pictures and videos
on social media using artificial intelligence?
That's what we're talking about today. I'm Nick
Espinosa, your chief security fanatic. And let's
dive into this because I personally think that
governments should not be using artificial intelligence
for images and videos. Now, MIT Technology Review
had a really interesting write up on this. And
James O'Donnell, the author of this, basically
put out quite good information. We're going to
crib a little bit. And then I'm going to dive
in. But if you didn't know, the U .S. Department
of Homeland Security, aka DHS, is using AI video
generators from both Google and Adobe to make
and edit content shared with the public. This
is according to a new document. You know, I'm
going to do my normal preamble that says cybersecurity
is agnostic from politics, but we're not immune
from it. And I do not care what your political
beliefs are, if you are for or against all of
the actions that DHS has taken. Under the Trump
administration or previous administrations as
well. The point here is to talk about the artificial
intelligence side of this issue. This is also
coming as U .S. immigration agencies have been
flooding social media with content to support
President Trump's deportation agenda, some of
which appears to be made by AI. Now, this document
that was released the other day provides an inventory
of commercial AI tools that DHS is using for
tasks ranging from generating drafts of documents
to managing cybersecurity. I don't necessarily
mind them generating documents using artificial
intelligence or first drafts of documents. Providing,
obviously, there's human intervention to make
sure that they are accurate. Basically, the UK
just got in trouble for that. And on the cybersecurity
side, I would hope that there are qualified cybersecurity
professionals reviewing what the AI thinks it
should be doing. Now, in the section on this
document, basically about, quote, editing images,
videos, or other public affairs materials using
AI, end quote. It reveals for the first time
that DHS is using Google's Veo 3 image generator
and Adobe Firefly. And it's estimated that the
agency has somewhere between 100 to 1000 licenses.
for these particular tools. It also disclosed
that DHS uses Microsoft Copilot Chat for generating
first drafts of documents, summarizing long reports,
and they're also using Poolside, essentially
that's software for coding tasks, on top of the
tools from other companies as well. But again,
we're only focusing on image and video generation
for social media. That's my big issue here. Now,
the news also provides details about how agencies
like ICE, that is Immigrations and Customs Enforcement,
which is part of DHS, might be creating the large
amounts of content that they've shared on X and
other social media platforms and channels and
all of that as immigration operations have expanded
around the United States. We've seen them in
Chicago, Los Angeles, New York, obviously most
recently in Minnesota, recently expanded into
Portland, Maine, and some other places as well.
Some of this content, particularly videos, has
the appearance of being AI generated, but it
hasn't been clear until now what AI models the
agency might be using. And this marks the first
concrete evidence that such generators are being
used by DHS to create content shared with the
public. And this is essentially a social media
era. We have seen just an enormous amount of
this kind of stuff coming from DHS and other
government agencies as well. There's a lot more
to that article from MIT Technology Review. I
thought it was a great write up. But I want to
dive into this because personally, I don't think
any agency of any government, you know, it could
be the federal dog catching agency should be
using AI for pictures or videos, you know, for
their social media presence. And I've been thinking
about this a lot today. After I read this article
this morning, and quite frankly, here are my
concerns with this. I mean, first things first,
government communications have historically derived
their authority, but also their authenticity,
right? They have derived that authority from
the authenticity and accountability. It's not
been the creativity of the government. Right.
What we need is accurate information. AI generated
visuals are blurring the line between the official
record that they should be putting out, whether
it's on social media or even on paper. And that
fake and synthetic content that we are just seeing
absolutely explode inside and outside of the
government. That is literally. undermining public
confidence in what we are seeing or what they
are putting out. Even benign AI imagery can be
interpreted as tantamount to state -sanctioned
manipulation. I mean, think about that. One of
the thoughts that I had in my head is this feels
like state -sanctioned manipulation because an
AI -generated image is something you tell the
AI to create. It's not what actually happened
in time. And as we've seen these protests and
raids and all this kind of stuff again, I'm not
getting political here. If they are putting out
AI content that looks like something like that,
but it's one thing or the other, or they're even
cleaning up images of, let's say, a bad event
or something, then yes, it's going to undermine
public confidence, especially if we're talking
about times like elections, just various crises
that governments tend to go through. civil unrest,
all these things start to really become undermined
because the information that are putting out
isn't necessarily real, right? Once trust is
lost, it's nearly impossible to restore. And
that's regardless of intent. And I think that's
a huge, huge thing. And on top of it, we have
the disinformation and misinformation problem.
This is created. We've seen foreign intelligence
agencies left and right do this. And now the
AI can crank it out 24 -7, 365. Generative AI
systems hallucinate. And they hallucinate everything
from context to symbols to uniforms to signage.
Environments that... like appear real, but they're
factually wrong. And that's a big issue for any
government agency to put these things out. Visual
errors. spread faster than corrections right
you know and that's an issue so they're weaponized
and they're typically weaponized by adversaries
of let's say the united states in this case or
if it's coming from another country whatever
adversary that country has foreign influence
operations actively reuse government looking
ai imagery to fabricate narratives they create
plausible deniability all these different kinds
of things as well and government originated synthetic
media also in my opinion lowers the bar for copycats.
For bad actors, like this is a huge problem.
And then there's other factors on top of it as
well, like legal, you know, record keeping, evidentiary
exposures, like all of these different kinds
of things that goes into this because the government
has records acts to ensure that they're transparent,
that they're accurate, that they're not putting
things out there that could be misinterpreted.
And that's what we see, right? Adversaries can
study AI generated government content to reverse
engineer things like messaging strategy, right?
On top of it, tone. Think about the tone, the
priorities, all of that. It would be very easy
to replicate this stuff and make it look like
it's coming out of DHS because we can use the
same AI image generators they can. Not to mention,
if I'm thinking about this, government runs on
accountability, but it's human accountability.
If the AI is generating it, everybody can point
the finger at everybody else and who did this
and what. It's a huge issue. If I'm thinking
about it from a risk situation, I'm thinking
about it from a crisis situation or risk crisis,
right? Because AI generated visual mistakes could
be mistaken for real world conditions that can
cause a panic, right? Or it might cause complacency,
all of these different kinds of things. This
just destroys trust. And whether you trust, let's
say the DHS and the Trump administration, all
that, or you don't, again, that's your business,
not mine. The point is, is that if they're putting
stuff out that you trust, you're going to trust
it. You're going to think it's real. And when
they do start putting out things that are actually
real, like let's say it's, I don't know, the
ratio, one real, the five AI generated or vice
versa. But when that one real image comes out
or video comes out, those that distrust will
simply say it's AI as well. We are eroding confidence
in ourselves. We are eroding trust in ourselves
by default, by being on social media. But when
the government gets involved and does the same
thing. It's so hard to draw. It's so hard to
claw back. It's so hard to change this. This
is not good. And I think we need to stop. And
I think there needs to be laws around having
a government or rather allowing the government
to use AI to generate videos and images that
people are going to look at and believe. That's
not good. And I think that's of deep, deep concern.
And again, I don't care what government is doing
this. This is just not good. And that is your
unfortunate news of the day. And please like,
share, follow me here on Facebook and Twitter
at NickAESP, where I'm not AI -generated, but
I will talk about them. And please feel free
to subscribe to me wherever you can. And as always,
stay safe, stay online, and please, please, please,
everyone stay private, informed, and secure.
Take care. Hey, everybody. Nick Espinosa, your
chief security fanatic here. Don't forget to
subscribe. And it's Sunday, so we are doing Breaches
of the Week, as always. This week in Data Breaches.
Well, this may actually be the longest list of
litigation and payouts we have ever done on a
Breaches of the Week segment. I mean, wow. Like,
most of what I found today, or it seems like
basically the past week, has been nothing but
lawsuits and payments. So, thank you very much
to James Beneke. steve hamlin jacqueline wolf
and jason acton for sending me a lot of this
information and we're going to dive just right
into our mini segment which is bigger than i
the regular segment i think simply entitled if
you had just spent money on cyber security you
wouldn't be getting sued you wouldn't be paying
out you wouldn't be losing your reputation and
we sure as heck wouldn't be talking about you
right now and with that let's start with first
choice dental Now, dental patients there have
less than two weeks to get their hands on part
of the $1 .2 million settlement. So if you basically
were affected by this, you have until January
28th, 2026 to basically submit a claim. Patients
who did not experience economic losses can still
get a payment of up to $50. And all class members
are entitled to free credit monitoring, which
includes $1 million worth of identity theft.
First choice dental patients, go get paid. Moving
on, Kaiser Permanente, the massive healthcare
system, members may qualify for a payment as
part of their $46 million settlement. The settlement
is a result of multiple lawsuits filed in April
and May of 2024, which were combined into a class
action in December of that year. Heads up to
members in California, Colorado, Georgia, Hawaii,
Maryland, Oregon, Virginia, Washington, and the
District of Columbia. Basically, if you are a
member or a former member or patient of Kaiser
Permanente from one of those states. Basically,
and you access the mobile app between November
of 2017 to May 2024, you're eligible for part
of that settlement. Now, basically, you can receive
a pro rata share of the net settlement for a
one -time cash payment as well. Most people that
file will get $20 to $40, and you can go to KaiserPrivacySettlement
.com. Again, that's KaiserPrivacySettlement .com
to get your claim. Moving on. Let's head on over
to Rhode Island and talk about Rhode Island's
RIPTA as well as UnitedHealthcare. Current and
former Rhode Island state employees have begun
receiving payments basically via the settlement
over that 2021 data breach, including both RIPTA
and UnitedHealth. So these payments are averaging
more than $400 per claimant, which is a really
good number for the record, are going out to
state employees who filed claims as part of that
class action lawsuit. basically the ACLU of Rhode
Island v. RIPTA and essentially the insurer as
well in 2022. The lawsuits were settled for more
than $350 ,000. Claimants were allowed to request
up to $1 ,000 for out -of -pocket expenses and
essentially affected state workers could also
claim five years of credit monitoring. which
is estimated to cost about $840 a person. So
it's actually a pretty solid payout. As you know,
I talk about basically these payouts all the
time, and they're usually like $1 to $50 at best.
So $400, not bad, Rhode Island, not bad. Moving
on. New Motion, excuse me, they agreed to a class
action lawsuit settlement to resolve claims surrounding
their two data breaches that occurred in March
and September of 2024. The New Motion settlement
benefits individuals who received that notice
about those breaches and an additional subclass
whose social security numbers may have been involved
in this. They've agreed to pay up to $4 million
to basically resolve claims. And if you've got
serious damages, you can get up to $15 ,000 in
reimbursement. all of that so if you are eligible
you are eligible also for two years of credit
monitoring as well so heads up to you new motion
patients or patrons moving on farm america They
agreed to settle a class action over their 2023
hacking incident that involved 5 .8 million individuals.
So in addition to paying 5 .2 million to cover
costs and benefits, Far America has committed
to investing millions to strengthen its security
posture. Basically, the preliminary approval
was on January 12th of this year, and you have
a deadline to opt out on April 20th, and your
claims must be submitted. by april 27th basically
in the fairness hearing has been scheduled for
may 12th so heads up to you for america patients
go get paid moving on next gen health care they've
agreed to a 19 .4 million dollar class action
settlement basically for their 2023 data breach
Under these terms, you can receive compensation
for out -of -pocket expenses for up to $7 ,500.
And you can also get 10 hours of lost time recouped
at $25 an hour. And here we are. Most class members
are going to receive $50 to $150 if they lived
in California during that period. And your time
for exclusions and objections is February 12th.
And that settlement is scheduled for February
17th. So go get paid. Moving on, Veridigm. They
agreed to a $10 .5 million, I'm telling you,
it just keeps going, class action lawsuit settlement
to resolve claims from their 2024 data breach.
Basically, this is benefiting individuals who
received a notice informing them that they may
have been compromised in the December 2024 data
breach, and they are agreeing to a $10 .5 million
payout. That's all I know. Heads up, Veridigm.
Moving on, Richmond Behavioral Health Authority.
Basically, three class action lawsuits have now
been filed against them. them basically do a
data breach back in September. All three of these
suits have been filed in the U .S. District Court
for the Eastern District of Virginia, which I
believe is the rocket docket, by former patients,
basically. And they're claiming, obviously, that
they failed to secure the data. So Richmond Behavioral
Health Authority in the works. Moving on, heading
over to France. Let's talk about FreeSAS and
its sister company, FreeMobile. These are some
of the largest mobile services in the country.
And France's data protection regulator has fined
the telecom giant 42 million US over cybersecurity
vulnerabilities that contributed to this massive
breach. So Free was fined 27 million euros or
31 million US. And Free SAS was fined 15 million
euros or 17 million US according to the CNIL,
which is their regulator. Spokesperson for the
group basically said in a statement that they're
going to appeal the decision to France's Supreme
Administrative Court. So heads up to you. If
you are a Free or Free SAS patron, you might
get paid at some point. Moving on. University
of Phoenix and Oracle. Yes, Oracle is always
in the news. A new class action alleges that
University of Phoenix and Oracle failed to properly
safeguard person identifiable information for
three and a half million students during the
August 2025 data breach. Now, plaintiff Tia Poynter
claims that the University of Phoenix and Oracle,
quote, failed to implement and maintain reasonable
security measures, end quote. Now, remember,
this is basically Oracle, right? I mean, Oracle
is the one that got breached, but due to supply.
all of these organizations in this case the university
get dragged into it now pointer argues that an
unauthorized third party exploited vulnerability
in e -business which yes we all know that happened
and so we'll see what happens she has to show
that uh basically she's got claims for damages
but either way class actions are coming and oracle
is going to be paying out through the nose hopefully
well Probably not enough to bankrupt them, but,
you know, a boy can hope. Moving on, there's
more. Margaritaville at sea. I am assuming Jimmy
Buffett or Jimmy Buffett licensed. Anyway, a
new class action against Margaritaville at sea,
which just seems like a rather relaxing place,
claims that the cruise line, or I guess a relaxing
cruise, is responsible for a data breach that
compromised the person -identifiable information
of the cruise goers. Now, the plaintiff is Danielle
Seberg. interesting name, claims that Margaritaville
at Sea occurred after the cruise line failed
to properly secure and safeguard, and Seaberg
wants to represent a nationwide class. So if
you have ever traveled on the Margaritaville
at Sea, which I'm guessing is a rather sloppy
drunk boat, go knock yourself out. Moving on.
petco yes petco where a lot of us buy our dog
food and cat food and pet food and all that kind
of stuff a new class action lawsuit alleges petco
failed to properly secure their customers data
so plaintiff matthew max claims that petco failed
to properly secure and safeguard person identifiable
information social security numbers so clearly
an employee etc etc and so mac is arguing that
petco knew or should have known and failed to
basically secure all of this and so those We're
just the lawsuits and payouts for this week.
It's the longest I've ever done. We're almost
10 minutes into this, and here we are. If any
of them had just spent money on cybersecurity,
they wouldn't be paying out. They wouldn't be
getting sued. They wouldn't be losing their reputation.
And I would not have been blathering on for almost
10 minutes about them. And with that, let's move
on to the actual data breaches or updates therein.
And let's head to the Great White North and talk
about the Canadian Investment Regulatory Organization,
or CIRO. I actually did a finally on them months
ago, basically due to this data breach. They
just confirmed that they suffered that data breach,
basically, and it is impacting 750 ,000 Canadian
investors. So they disclosed the incident on
August 18th, which is when I basically went to
town on them, but they completed their forensic
investigation this year on January 14th. CIO
emphasized that login credentials or account
security questions have not been affected, but
because it does not store that kind of information,
they also claim that they spent over 9 ,000 hours
investigating. this and they say that no data
that they can find has shown up in the dark web
yet so we'll see what happens but to be fair
governments are always behind the eight ball
they're massive surface areas for attack you
know whether it's federal provincial slash state
or local government it's always a problem but
ciro you could have been quicker on the draw
on that one at least declaring and continuing
the investigation moving on Let's talk about
broadband and telecommunication company BrightSpeed.
This is coming out of Charlotte, North Carolina.
They're investigating multiple reports that their
customers are a victim of a data breach by extortionists.
Now, the extortion claims to be involving over
1 million BrightSpeed customers. Basically, this
group was called Crimson Collective. It's the
one that's making these attempts. I can't even
read my own notes. And basically, multiple sites
are talking about this as well. posted a message
on their Telegram channel in early January about
the data theft. They said they are looking into
these reports. Moving on. Oregon's Department
of Environmental Quality. About 4 ,800 members
of the public had their personal information
exposed in a cyber attack, according to that
department. But nine months later, they have
yet to publicly disclose the leak. The DEQ appears
to have known about this leak since June, but
they haven't said anything. So obviously news
reports are going on, which means Department
of Environmental Quality in Oregon, I'm going
to be talking about you in my mini segment when
you get sued. Not a good sign. Moving on. J .P.
Morgan, yes, the massive financial platform and
company and system and everything else here in
the United States. They basically sent a notification
to Maine basically on Tuesday, this past Tuesday,
revealing that investors in a private equity
fund have been impacted, linked to an incident
on a law firm, a .k .a. supply chain. And that
law firm is. freed frank harris shriver and jacobson
llp the notification letter revealed an unauthorized
third party copied files from let's just say
fried frank and their shared network drive some
of those files contain the personal information
about those who've invested in jp morgan's fund
and we're talking names contact information social
security and passport or other government ids
remember when we're talking financial institution
you're giving them all of your personal data
to verify your identity and interestingly enough
goldman or goldman sachs is in the same boat
thanks to fried frank harris shriver and jacobson
llp so let's see if any other major banks decide
to completely declare moving on central maine
health care they impact about 145 000 more patients
than the eight that they originally reported
according to officials this past monday The health
system, which owns Central Maine Medical Center
in Lewiston, as well as hospitals in Bridgeton
and Rumford and several other health care facilities,
reported to their own attorney general last summer
that the cyber attack between March and June
had impacted only eight patients. That's a heck
of a jump, Central Maine Health Care. I mean,
we always see numbers revised up. You know, Dropbox
was notorious on this one back in the day. Oh,
it was 7 million. And then three years later,
oh, by the way, it was 70 million. Tech is. zero
onto that but from eight to 145 000 come on dude
moving on Let's head on over to Europe and talk
about the travel company, Eurail. Now, the incident,
according to the company, impacted all customers
who were issued a Eurail pass, as well as those
that made a seat reservation with the company.
The rail pass provider does not have an exact
number of impacted individuals, but an investigation
basically with the EU's European Commission and
Discover EU said that basically that program,
the Discover EU program was impacted as well.
The compromised information includes. identity
and contact information as well as passport info
as well so if you've ever rode the rails in europe
and used your rail for your ticketing needs you
definitely want to check in moving on Let's talk
about the robo advisor known as Betterment. They
disclosed a cybersecurity incident after a threat
actor used social engineering to breach their
systems. This involved third party software platforms
that the company uses for marketing and operations,
but was not the result of Betterment's infrastructure
being hit, according to the advisor. So the threat
actor on January 9th set a crypto related message
to certain Betterment customers. impersonating
the company to trick users into sending them
funds the fraudulent message claimed that betterment
would triple fresh deposits made to bitcoin and
ethereum cryptocurrency basically and those addresses
were controlled by the attacker where you should
send the money and yeah if you're ever seeing
something from your financial institution quote
unquote that says we're going to triple your
money for this limited time offer you've got
a two -hour window it's a giveaway or whatever
yeah dude that's always fake there it's like
that never happens moving on university of georgia
specifically the police department so the uga
pd they received a phone call this is interesting
concerning a potential data breach resulting
in a uga student having multiple credit cards
being fraudulently opened in her name so we're
talking about one person here still worthy for
breaches of the week now this student And her
parent believed that the fraud was caused by
a potential UGA breach because the emails were
sent to the UGA email address of the student
and the cards were sent to the home address associated
with her student account. They also reported
reading about familiar incidents on social media's
website, Reddit. So that is interesting in the
sense that. If you were looking at this forensically,
if you have a unique email address with, let's
say, the home address, which you're probably
using everywhere as a student, I don't necessarily
know if that's enough to say that UGA has been
breached. But nevertheless, if they're tracing
it back, maybe those two combinations have never
been used anywhere else, at least that they can
remember. So I'll keep you up to date on this
one because we might see a lot more coming out
of the UGA. I'll let you know. Moving on. Another
university, Monroe University. They reported
to Maine basically a data breach involving 320
,973 people. Now, in a post to their website,
Monroe University disclosed an unauthorized third
party access computer systems between December
9th through the 23rd of 2024. So over a year
ago. Now, a review of the affected files. Concluded
on September 30th of last year and sensitive
personal information was confirmed. Dates of
birth, obviously name, social security number,
driver's license, government issued IDs, passports,
medical and health insurance information, email
usernames and passwords. That's awesome. Financial
account details and certain student data. If
you have anything to do with Monroe University,
go change your passwords like yesterday and be
prepared to join a class action sooner than later.
Moving on, at least five Belgian hospitals, I
do not know where in Belgium they are, they've
been victims of a data breach at a supplier of
patient registration software. A total of 71
,000 personal and login details of patients were
found on the dark web. That's not all. A second
breach at an IT supplier. basically added another
1 ,000 login details of commercial and government
organizations. I don't know the name of these
hospitals in Belgium, but heads up to you. If
you live there or you used one of those or have
used one of those while traveling there, you
might want to check in. Moving on. union home
mortgage they just said that they paid ransom
in their data breach case i don't know more than
that it was behind a paywall and i'm not going
to pay some random site for this but heads up
union home mortgage uh members you might want
to check in moving on trizetto provider solutions
now this is interesting because i came to this
from two separate data breaches that basically
were for healthcare providers that said, well,
we didn't get hit, TriZetto got hit, but I have
yet to find something just on TriZetto. But the
two that are declaring data breaches that I can
find thus far are San Francisco Community Health
Center, and we're talking name, social security
number, address, date of birth, health insurance
information like member number, insurer name,
provider name. primary insured and dependent,
and then also an outfitter hospital called Variety
Care. Same thing, name, social security number,
address, date of birth, health insurance, medical
information, provider names, and then other demographic
information as well. So if you have anything
to do with San Francisco Community Health Center
or Variety Care, you might want to check in.
Their mutual provider has been hit, and I have
a feeling I'm going to be talking about them
more. Moving on. member close this is a financial
service company based in taxachusetts they confirm
that sensitive personal information may have
been accessed by an unauthorized third party
on october 29th of last year name social security
number date of birth caught up in that don't
know much more than that but heads up member
close uh patient or patients members their financial
services outfit and finally our last finally
today is on ai agents that's right artificial
intelligence agents that might be in our life.
Think Microsoft Copilot, ChatGPT, and on and
on. And now this is beyond interesting. And on
last week's breaches of the week, my finally
referenced experience data breach industry forecast.
This is the other side of it, excuse me, that
I did not mention last week. And quite frankly,
I think this is interesting because Michael Brumer,
Vice President of Global Data Breach Resolution,
and Jim Stephen, Head of Crisis and Data Response
Services UK, said that agentic AI systems, meaning
those agent AIs we use, could be exploited by
savvy attackers who might inject their AI agents
to, quote, disrupt the orchestration or governance
of the victim's AI agents. Quote, at a minimum,
this disruption could impact an organization's
operations or siphon money, goods, or information.
Or it could perform things like ransomware. Quote,
AI agents... are the next frontier for fraud
and cybercrime, and we predict this may overtake
human error as the leading cause of data breaches,
end quote. Right now, it's us making mistakes,
us thinking the link is real, us thinking Prince
Nbuntu from Nigeria needs help with his revolution.
Next up, the AI. And because AI is being leveraged,
not just as personal assistance, but everywhere
in organizations, cracking those... could potentially
do an absolute ton of damage. And with the use
of AI, attackers might also be able to extract
data at an unprecedented rate and, quote, stitch
together enriched identity profiles. So imagine
getting a little bit of information on you here
and a little bit more on you from over there
and on and on and on, and then putting it all
together and aggregating it to get a complete
picture of you due to multiple breaches. AI is
very good. basically aggregation and correlation.
So here we go. Experian also warned, and I quote,
get ready for a potentially massive spike in
identity theft, end quote. Or also AI capabilities
could bolster the spread of mutating malicious
code, such as malware, like polymorphic malware,
metamorphic malware. This is a huge problem.
And I think we are walking into with AI agents.
Imagine if I can poison it to steal your information
or disrupt you or infect you and all of that.
That's what we are talking about here. And I
think that's something that we basically have
to put good controls on over. In the same way
that when you are asking a chat GPT, a copilot,
whatever, for an answer, and it's giving you
an answer, you need to double check that. These
things can hallucinate. I've literally written
articles for Forbes and others on this, you know,
as well as just straight up lie to you. So we
are walking. into a potentially very dangerous
time in artificial intelligence not to mention
the fact that it's boosting prices for things
like memory and you know hard drive space graphics
cards and all of that because the ai data centers
of the world are gobbling up all of the supply
and us little folk you know that are just trying
to buy computers you know are having to pay a
heck of a lot more for it so oh AI, I think,
has so many interesting things coming out, but
it also has so many things we need to be concerned
about. And agentic AI and the poisoning of agentic
AI is one of those things. And so that, I think,
and I predict for myself, means I'm going to
be spending a lot more time on Breaches of the
Week talking about agentic AI breaches as well
as just human breaches. And here we are. Best
of luck. And please like, share, follow me here
on Facebook and Twitter at Nick AESP. And please
feel free to subscribe to me at YouTube as well.
And as always, stay safe, stay online, and please,
please, please, I don't want to say private,
informed, and secure. Take care. Welcome back
to TSB. This is program 267. I've got the boy
of pressed, the boy of ring, and a jack boy.
The jack of neck. The jack of neck. The jack
of all trends. The Jack of all trades? I guess.
Before we get into our main topic, I do have
a Kim Commando newsletter water cooler from January
25th, 2025. And this will probably be the last
one we ever do because, as I said, I love her
newsletter, but Kim just is becoming a problem.
Not professional. Well, I'm going to continue
to listen to her minutes and things, but the
newsletter is becoming too hard to deal with.
Maybe I'll drop a note. I mean, if it asks me
for comments, I'm going to say yes. The newsletter
is not accessible. It's got emojis all over the
place and hard to deal with. Accessibly, you've
got headings in the right place, but you've got
images that are unlabeled, and the emoji aspect
is unprofessional. If this changes, then I'm
willing to come back. Yeah, yeah. No, I 100 %
agree. So, let's read this because this is actually
recent news in regards to a program that we've
talked about quite regularly here on... TSB.
Can anybody tell me what program that is before
I read? Office. I didn't catch that, Terrence.
Office. Microsoft. Not Office. No. I read it
on Saturday. This is the same one I read on Saturday.
It is a program that we have told people not
to run. It is a program that is known to have...
Oh, yeah. Windows... Windows Defender Decrapper?
Nope, not Decrapper. Decrapper is better to run
than nothing. Decrapper is better to run than
nothing. Right. And turn that down a little bit.
We got a little bit of feedback. Oh, let me see.
Oh, sorry. I'll have to do it later. Okay. All
right. I'm not yelling at you. I'm just telling
you to turn that down. No, not you. It was Preston,
I think. It was me. Oh, it was Preston. I didn't
know who it was. That's why I just stopped doing
what I was doing. No, you're fine. I don't hear
anything from you. I was deleting email. No,
you weren't the issue. But we're fine now. This
is a program we talked about when it came to
challenges. Yeah, tick, tick, tock. Tick, tock,
bite is correct. The beacon of that, there is
a new challenge I heard, but I didn't get to
hear it. Oh, geez. It's probably, I hate to tell
you this, Terry. You're probably better off.
No, well, I'm not saying I'm not better off.
Yeah, I heard about a new pair, but I didn't
hear what it was. And I'm kind of glad I didn't.
I probably would have been ranting about it on
throwback on Saturday. Yeah, right. three different
companies and two of them I've never heard of.
I don't know why Oracle would be interested in
them, but okay, whatever. But Oracle was in the
running when we covered that when it leaked.
Right, they were. You know, I'm hoping that you
know, maybe they get their shit together. That's
what I'm hoping for. I'm hoping for that. I really
am. And I really hope that they get their craft
together and they are decent. And within the
next six months, the challenges will be the thing
of the past. I'm hoping so. Yep. But I'm not
going to hold my breath. Nope. I'm very skeptical.
Very skeptical. Because I heard of another challenge,
but I didn't hear what the challenge was because
I kind of changed the channel. Can somebody ask
a tool of choice if there are any new TikTok
challenges within the last month and report back?
Yeah. Yeah. here. While we do that, I'll read
if I can stop coughing, I'll read what this is.
And Nick, you have a copy of this in your folder.
Unfortunately, it's only a 40. It's not a 30.
What's the newest TikTok challenge? It says...
Get a load of the following from the water cooler
from January 25th, 2026. Be alert. Be aware.
What is the newest TikTok challenge? It says...
TikTok... By the way, we'll spell it for you
guys to make sure that you know how it's spelled.
T -I -K -T -O -K... The Ts are capitalized one
word. No, are there any dangerous ones that are
new? They just forced everyone to click agree,
and that's in quotes, on a new privacy policy.
Now that the US owns a part of the app, people
are in a panic. Why? The app can collect your
immigration status, sexual orientation, and precise
GPS location. Oh, Jared, I did find the new challenge.
Are you ready for it? I was waiting for a comment
from Mr. J over there, but yes, go ahead. Microwaving
toys. What the hell? Which has consisted in various
people getting burned instead. No shit! Microwaving
toys, Nick. Okay, how many brain cells do you
have to have to realize that's a really stupid
and idiotic thing to do? I knew that was coming.
I'm just gonna agree with you because I know
that that's definitely true. So what does it
say? Read it before I finish reading this. I
basically said that they put the toy in the microwave
and zap it for a few minutes and it ends up burning
you when you take it out because it is hot. Because
it's hot as fuck. Why would you microwave a toy?
Yeah, it's hot as fuck. I mean, if you did it
by accident, that's one thing. But even by accident,
like you. But what I'm saying is like, OK, you
go to put a coffee cup. You don't realize that,
you know, your toddler put the monster in the
microwave. And you heat up your coffee. Well,
you don't because the microwave's basically dead
because there's plastic in there and it doesn't...
And it's melted in the microwave because of the
toy and it's probably melted. And then the next
thing you know, that could cause a house fire.
So, God knows. Oh, well. I asked it, I said,
are there any dangerous trends on TikTok lately?
And it said, microwaving toys is on the rise.
But Nick, I paused mainly because of the first
sentence of what this TikTok people are collecting.
And I'll reread it again. Immigration status,
sexual orientation, and precise GPS location.
Well, given that they were doing that before,
I'm sadly not surprised. Plot twist. Plot twist.
Most of that's been in the policy since August
2024. That goes back to what you just said, Nick.
Yeah. Why the hell would they need your sexual
orientation anyway? Who cares if you like...
And how do they find out your sexual orientation
unless you give it out anyway? Which is what
a lot of people probably do. And you could lie
and say you're straight even though you're...
Just for an example, I could say I'm straight
even though I'm not. I mean, I am truthfully
straight, but I could say I'm gay even though
I'm not. People could lie on that. Yeah, so that
you're then... targeted with all kinds of different
videos. That's really what it's about. Targeted
with more crap. Yeah. Not to mention your girlfriend's
reading your message. TikTok's reading your girlfriend's
back and forth sexting messages. By default.
By default. It says, you never read it. The actual
new thing? Precise location tracking instead
of approximate. That's not good. But, Kim writes,
it's optional and off by default. So don't fall
for the online hype. And you know damn well people
are going to turn that on. Of course they will.
What could possibly possibly go wrong? Go wrong.
Oh, shoot. They can't get the DJ yet? Yes, they
can come get the DJ now because the DJ just freaking
posted his precise location on TikTok. Oops.
Oops. I still have the 266 file. I can read from
it. It's fine. Oops. Didn't update my own, but
I updated everybody else. But the file hasn't
changed except to fix some quoting things that
I already know about and the page numbering.
I haven't changed anything else. So it's still
readable. So I'll read from mine. So, I call
this AI and its uses. Yeah. Okay. So, I will
start, and if anybody else would like to pick
up and read a section and lead, you're welcome
to do so. Please just let me know when we get
to a break. I am on 267 .1 in your appropriate
file. I'm fine with my 266 and I already know
what's wrong. So, today, we're going to talk
a little bit about AI and its usage. We'll make
sure we take your questions. So, if anyone has
any questions. You may contact us. There's plenty
of opportunity for us to give out contact info.
Yeah, there is. We have an outline to start with.
And today's. What's that press for? I said I'm
sure that this discussion won't end today. It's
going to be ongoing. It will be ongoing. I know
that much because there's a lot we can cover.
Yeah. Oh, yes. We have an outline to start with.
Then we can figure out if people want me to go
any further. While the outline indicates that
it is a 45 -minute program, we can allow longer
if needed. And, of course, the audience can respond
via podcast by emailing. iMessaging and or calling
the comment line, which we'll give out throughout
the program. And it was very insistent, by the
way, in its iMessaging problem I had. It's lowercase
i capital messaging by rule. This is not saying
AI is bad. AI can be good. And I've personally
found it's you. I've personally found good uses
for it just recently in my life and even have
an account on one. I used ChatGPT to assist in
the write -up of the episode today, but I've
turned it into my own write -up because I'm not
well -versed in this subject. Let's start. Now...
I will read item number one. Opening and ground
rules. I'm not going to worry about the time,
but we read the time during the security hour
just so that people understood that we were trying
to keep it time -based. But TSB allows for more
than the allotted time, so I'm not going to read
the time points. You don't need to either if
you want to read. This is a practical conversation,
not a debate. Panel speakers first establish
context. We'll open with a panel discussion to
set the stage. Then we'll open it up with comments
so we can keep things focused and respectful.
But we do know that people have supposedly misused
things by uploading things they probably shouldn't,
giving it too much about themselves, or other
things we can discuss. Okay? Yep. So, we are
not going to say not to use AI. We are not going
to say to use AI. But I have a practical solution
on why I needed AI and then realized how I can
use it for everyday work. I was never late. Let's
make that very clear. I've used tools like Be
My AI, Aira AI, Seeing AI. And others. Your G's
and A's are AI, although it's a different platform
altogether. Yeah. Your iPhone has Siri. It also
is AI and is a different animal altogether. What
we're going to talk about will be... Apps like
ChatGPT, Gemini, and Claude. We are not going
to cover today the more open programs like the
ones talked about that allow very interesting
behaviors that can be a discussion we can talk
about in later programs the names aren't important
now they're escaping me at the moment but I bet
I can go and ask you what was the name of these
other apps but I'm not doing any of that today
the point is that they're out there we know about
them we've talked about them Today is going to
be basic use. People can't discuss them. Right.
What's that? Well, sorry. I'm getting my copy
ready. But what I was going to say, today we're
going to talk about the basic use and people
can research on their own time and see what service
they can utilize. And of course, if they have
any more That's why we're here. What we mean
by best practice. Item number two. AI is already
embedded in tools people use daily. Best practice
means intentional and accountable use. Again.
Best practice means intentional and accountable
use. The word accountability. Accountable, yep.
Both Preston and Terry said accountable and accountability,
yes. What about you, Mr. Ye over there? I didn't
say anything because I simply agree. Okay. We
should assume... I got you. We should assume...
One. Human responsibility doesn't disappear.
Agree or disagree? We can go one by one here.
Agree. Yeah, I definitely agree. Yep. Alright,
everybody agrees. Okay, number two. AI assists.
Humans decide. Should be, yep. Oh, yes. That's
the way it should go. That's definitely how it
should go. Tell me more. Because it might generate
some response that helps you with who knows what
the task is, but you might decide what it's generating
is not very safe or practical. I don't think
I'm going to use it. Yes, it assisted, but I
don't think I'm going to use what it gave me.
Oh, and that's when you can use multiple AIs,
like Gemini, odd, for example. There's others
that might. Well, and today's example, when I
was doing terms of service analysis, it recommended
something. Because I said, put this in simple
terms so I can tell it to Eric. Because Eric's
a phone user, he doesn't have access to the internet,
and he can't read this. It gave me one thing.
I analyzed it myself and said, you know what
I think I'm going to do? I'm going to just tell
him, remember that issue you had some time back?
Well, today's email that I got indicates this.
And I'll be, by the way, I'm leaving later today,
but if you have any questions, you can ping me.
And it said, that seems logical. Anybody else
have any examples? Well, basically, what I was
going to say, when we initiate the request, we
have the right to decide on, what to get help
with. Like, let's say, hey, Chad GPT, if I'm
writing a radio news story regarding 100 ,000
watts, how should it be said in broadcast terms?
That was my example from this past week's RCL
News segment. Speaking of which, remind me to
go to that in Irana, because we need to talk
about that. I forgot. Okay. I knew about it,
but I forgot. You mean... Item number three.
You should always be in charge, because the thing
is, your AI isn't going to be correct. So that's
when you need to say, okay, is this something
I should do? Is this something I should consult
somebody with, whether it's a security advisor,
whether it's a doctor, whether it's a therapist,
whether it's, you know, just a parent or guardian,
you know, that's where the decision comes ultimately
up to you and you shouldn't use AI as a doctor.
a lawyer. You should only use it as an advisor.
And we'll get to my example on how I used it
to assess my symptoms in understanding what was
okay to treat at home versus if this happens
more, then you need to get help beyond what I
can give you. We'll get into that in a little
bit. Item number three, unless anybody else has
any other things to add. Nope, I'm good. Go ahead.
Verification is non optional. Please use trusted
and well -known sources. I always do that. The
last of that section says, these are guardrails,
not rules. What do you think best practices are?
Be precise. There's no wrong answer here. So
if there's anything else to add, go ahead. When
I uploaded my cannabis card to ChatGPT, it said,
this is what it says. I'm not going to say anything
what it said. It's personal, but this is what
it said. But be aware, it is sensitive information.
So if you can, please do this. And it said, delete
either one or two things. Delete the picture.
Or delete the chat. And I chose to delete the
chat. I mean, that's my example for that one.
I thought it was a good example, and I thought...
That is a great example. And while Ira says,
don't use these tools, they told me clearly,
don't use this for that. And I completely understand.
But I also said, well, I needed it. I thought
of you calling after the fact, but the tool gave
me exactly what I needed. So I didn't bother.
If I had issues, I would have called. Should
I have done it that way? No, probably not. But
it was the tool that I needed. Correct. I agree
with Jared. I mean, that's, you know, what I
needed it for. But it's better that a trained
human, like an IRA agent, not a be -my -eyes
agent. Let's make this clear. Oh, no. IRA. They
are trained in how to deal with that. Be my eyes
is all volunteer. You don't know who you're dealing
with. I have what may be a cautionary tale, but
I really can't prove this. Would you like to
proceed? I'm torn because I don't want to muddy
the waters. Okay. You're good. And again, because
I don't want... Go ahead. Go ahead? You don't
want... Yeah, and again, I don't know if this
is actually where this happened, but I will just
say, unfortunately, I did have to get a card
replaced, and I called Ira for that. Mm -hmm.
And at first, unfortunately, I thought... It
might have been the agent I got, but after I
made the call, all of a sudden, charges from
Prime Video appeared. But the only thing that
would also rule Ira out is that, unfortunately,
there is something that I learned about called...
Card Account Updater Services. Speaking of which,
I do have an update on that. Oh, what's that?
But I want Nick first to explain what this is,
and then I will tell my story afterward. Okay,
so Card Account Updater Services. I think we...
May all be familiar with them, but essentially
they are services provided by all of the major
credit card companies to various companies like
other entities, i .e. your Netflix, whatever.
And what these services allow those companies
to do is say they detect that. Your card has
expired or, you know, you replace your card because
maybe that one is stolen. They can. And I think
it's an all automated process. Go to this. Use
a service. Say, hey, a card blank that belongs
to Terry has expired. Could you pass us? you
know, securely, as they claim, the new info for
the most current card so that we can continue
his subscription. And then that's what these
services are supposed to do. I kind of like what
Apple does a little bit. Like, if you have Apple
Pay, it'll, like, say, hey, you have a new card.
Let's do it. Except the creepy and chilling part
is that it doesn't do this automatically. These
things do. Oh, boy. Apple Pay, it'll say, hey,
your card's expired, but it won't go out and
actively get the new card data. You do that.
You're totally in control of that. I think it
might have been one of those because the friend
who had the number was using Amazon Prime on
it, which probably meant that Amazon Prime used
one of those CAUs, as they call them, and got...
And yeah, you know, the whole automated process
so that that person could continue using Prime
Video. Yeah. And yes, I think it is. I understand
the marketing. Well, revenue aside for a lot
of companies, because that prevents what they
call churn. But at the same time. it's very questionable
and it's frustrating because it defeats the purpose
of getting a new card. More or less, yeah. So
what's the point of getting a new card? Why don't
you keep the same one you have and just update
the expiration on it? Yeah, but if it's stolen,
it doesn't matter. They'll still do this. Yeah,
that's the creepy part. That's right. Okay. Great
comments, guys. Great comments. So. Yes. For
sure, I agree. My story was that I was in my
PayPal account, my actual PayPal account, looking
at things. And Nick is right. It updated my Wells
Fargo card to $8 .29. And remember, I activated
it at the bank. And the banker didn't give me
information about my card at all. I just wanted
it activated so that I could use it at the bank.
I didn't ask for the three -digit code. I didn't
write anything down. I didn't do anything. Right.
So... It updated it to 8 .29. Yikes. So, yes,
I do know exactly what Nick is yapping. And sadly
it applies, and sadly as I said earlier, just
now, it appears to apply to cards that you replace.
I mean, PayPal not so much, but other services
that are monthly recurring subscriptions, that's
where this is really... Yeah. Sorry, guys, I
had to call to see what was going on with my
dog. I'm back. You're good. Nope. You're good.
Yeah, because we read the brims of that, so.
I'm right here. I'm in the bathroom. I'm in the
restroom. Don't fall in, Terry. Yeah, I'm in
here. Who would like to read item number... Oh,
three. Actually, I'm already on it. May I claim
it? Go ahead. Because my file just started at
the beginning. Oh, you're good. Responsible versus
risky AI use. Not all AI use is equal, says our
transcriber. We know that context matters more
than capability. Responsible examples include,
one, outlining and prep work. I definitely agree.
You may talk about each if you would like or
read the entire thing and then you can talk about
it all at once. Whatever you guys would like
to do is fine. Okay. Two, summarization for review.
Three, accessibility support with human review.
Okay, stop there and let's let the panel discuss.
that first so those three items again outlining
and prep work that's what I did with this show
and the upcoming show that we announced earlier
in today's program definitely the prep work is
extremely important so that way it gets trained
on what on what you're going to compose and what
answers it'll give. So, yes, I feel prep work
is very instrumental in this. It's very key,
yeah. Well, I wanted to comment just sort of
an all -at -once thing for... Go ahead. Yeah,
use cases number one and two. I agree with those.
Summarizing for review is number two. Summarization
for you, sorry. Right, right. Outlining slash
prep and summarization. Okay, so items one and
two, go ahead. Yeah, because most likely you
are just using things that are going to be publicly
broadcast anyway, and it's in the public domain,
it's nothing sensitive, so you're not asking
it slash feeding it things that are... potentially
compromising and dangerous to your health or
wellbeing. Go ahead. Yeah. And so if you're doing
show prep, yes, that makes things way more convenient.
You know, that's good. And then again, summarization,
you know, it saves you, sometime if you don't
want to read a whole file or do any of that so
totally okay and totally acceptable in my book
to use it for those because that's again where
those are both cases where personal safety does
not come into play Yeah. Sorry, I'm giving it
an update from this morning's communication so
that it understands that it assisted me and we're
sort of on the same page. I'm doing two things
at once. But I'm listening. And yes, you're absolutely
correct. And we can get into risky stuff. But
before we do that, the last item is accessibility
support with human review, i .e. it looking at
my code. And telling me I'm missing stuff. Like,
I missed an ally somewhere. Or I missed a closing
ally somewhere. Or a closing... You know, like,
you should have put a percent list here. Or made
this percent indent in Braille 2000. Because
it understands those. As examples. Yeah. Yeah,
I would say, you know, I would definitely agree
with that aspect because it, you know, it should
have the right to look at what we are trying
to portrayal. And I feel giving it evidence such
as, you know, coding prior episode notes for
this case and the whole nine yards. So I feel
that's, we hit the nail right on the head. Yeah.
I just got a thumbs up. I said great, and it
said thumbs up. Nice. Okay, so Preston, since
this is your section, the next one, your item,
the next heading is risky examples. Oh, yes.
We'll go one at a time. Hold on. Before you read
the three, do you... Guys want to do one at a
time, or do you guys want to do one large set?
I prefer a large set. Yeah, I'm good either way.
Okay. All right. All right, so read the three.
Okay. Number one, publishing AI output. Verbatim.
Verbatim. Oh, boy. That means word for word.
Yep. Wow. And this is a shortened version of
writing word for word. And I always wanted to
know how to spell this stupid thing. So that's
what this word is. Verbatim. V -E -R -B -A -T
-I -M. That's word for word. Okay. Item number
two. Number two, using AI as authority. Oh, don't
do that. Letting AI speak you for. That's for.
Letting AI speak for communities. Oh, boy. Well,
I mean, you definitely don't want to give it
in the wrong hands. No, you don't. I don't quite
understand number three, to be perfectly honest.
Number one and number two I do get, but number
three, I'm a little confused. Well, if somebody,
like, if I just left this alone as an accessibility
topic, and I didn't edit it to make it clear
on what we're talking about... Mm -hmm. then
whatever it wrote is its narrative for what the
community thinks. It's how I interpret that.
Now, we could ask it, what do you mean when you
wrote in the show notes letting AI speak for
communities? And I could probably do that because
it can research all of my past history, and it
can then give me a summary, and maybe we can
come back and read that as part of errata for
next week. We can definitely do that if that's
a questioning item. Mm -hmm. Mm -hmm. So that's
section three. Yeah, I think maybe some elaboration
will work. Yeah, number three. So that's section
three, item three in the show notes. Okay. Yeah.
All right, so we'll follow up with that because
I don't want to try and read with NVDA. and regurgitate
on a regular basis. So I want to make sure that
we're clear. Now, I could summarize the whole
PayPal thing. I didn't have to read it word for
word because I understand it. But this is a little
more out of my scope, so I don't want to do that.
So Preston, if you can mental note when you get
pinged about what you're getting pinged about
on Friday. Remind me to run that through and
get a Braille copy for 268. And we'll add that
to the Braille list. Okay. So, section three,
item three, under risky. Yeah. Under risky. Examples.
Yes. Got it. Okay. If you need a reminder, if
you need a reminder when it's not my turn to
read, I can go set one for you. Just let me know.
Yeah. Or even I can do it for myself, but I got
enough going on at the moment. Okay. This is
what I think is important, and it said so. It
said this is, the best point I think we can make
as part of this entire episode. AI can help you
think. It cannot take responsibility. So the
sentence again is, AI can help you think. It
cannot take responsibility. Take responsibility.
Yes. Yeah. That is totally unanimous. Right.
Yeah. It'll help you organize your thoughts.
I get that, but... Again, like the sentence...
And it helped you rewrite an email. You must
take responsibility. It found spelling mistakes.
It analyzed it and it said, maybe you want to
try this. Yeah. But at the end of the day, we
all got to remember, it's not a mind reader.
No. It needs... It needs... You to make those
decisions. Yeah, you're the one who still acts.
Yes. You must take responsibility. That's where...
Yep, that's where I was going with that. Yeah,
yeah. Take, for example, and I'm reading because
this is my case use. So, sorry about that, but
I think this is important for me to do. Take,
for example, you not feeling well and you want
ideas before you panic and call the doctor or
do something irrational. You must be the one
to make the final decision. Correct. The question,
what do you guys think of the analysis I'm giving?
Good, bad, or indifferent? Call the comment line,
email, or iMessage. So the comment line is 888
-405 -7524. Email, iMessage, either J -A -R -E
-D -R -I -M -E -R at 986themix .com or tech,
that's T -E -C -H, at M, as in Mike, E -N -V
-I .org. And WhatsApp is 804 -442 -6975 if you
would like to use that. Accessibility and AI.
Why the bar is higher. Yep. I can get that. Would
somebody like to read that while I go find a
Halls? Yep. Here's some things to consider. Terry's
got print. Auto captions and starting points.
Not compliance. Oh, wait. That's not what I got.
I have it. Auto captions are a starting point.
Not compliance. Not compliance. Okay. AI driven.
UI changes and often breaks assistive tech. Disabled
users often become early warning systems. Take
for example an app update that completely breaks
Yep, we've all been there. Yes, I believe we've
all been there. If your AI feature isn't accessible,
it isn't finished. I agree with that. I'm sorry,
but I agree with that. Yes, totally. Okay, so...
What are we agreeing on, gentlemen? Well, actually,
I don't think we read the first synopsis where
it said AI can reduce barriers or multiply them.
Accessibility must be part of the best practice,
not the action. But hold on a second. Remember,
I stepped away. So are we talking about... where
I wrote, here are some things to consider. Well,
we were talking about... Here are some things
to consider. Yeah, the last line. That's the
section, yes. Yes. Okay, so what number are you
on, just so that I'm on the same page with you?
Well, I wrote them all, but I can go through
them again. No, no, no, you're fine. AutoCAD
is our starting point, not compliance. So number
one. No, that's number one. That's number one.
So auto captions, that's important for the deaf
community. Yes. So it is a starting point, but
that doesn't mean you're compliant, i .e. a video.
Yep. Okay. Number two. AI -driven UI often breaks
assistive tech. Changes often. Often breaks assistive
tech, yeah. I forgot the word changes. That's
what happened with their app completely. I've
already put in two high -tech reports into OpenAI
.com. Because they updated right after I got
the account. So that is, they broke it completely.
It's bad. Number three. So disabled users become
early warning system. Which is exactly what happened
here. I updated like I should. It said bug fixes
and improvements. Oh yeah, and that's going to
be another topic. And then what happened? Accessibility
regressed. For example, an app update that completely
breaks accessibility. Yes. And regresses the
usability. Correct. Of the app. Of the app. If
your AI feature isn't accessible, It isn't finished.
And I agreed with that. I totally agree. That
should be. And the question, have you had these
issues? And if so, what did you do about them?
Submitted bug reports? Submitted through support
channels or feedback forums? Went to a forum
to... You trust to discuss whether others are
having the same issue or issues. There's no single
right response here. I haven't really had this
with AI apps because I don't really use them
that often. Okay, fair. But there are some apps.
like, telecrap that really went backwards. So,
not AI -related, I know, but certainly... You're
fine. Please elaborate. Because in this case...
Hold on. Before you actually do that, in this
case, we're talking about regression. Meaning,
it worked. But it no longer works. And as we
allow on TSB, and I think the AI tool sees that
we can allow for a little bit of wiggle room
within the discussion. Yep. Let's go into that
because we're talking about accessibility, which
is part of item number three. of that section
of the discussion outline. So you're not out
of line in mentioning telecrap, as we call it
here on TSB. Yes. So please, talk about your
regression issue. I know we've talked about it
in the past, but this is similar to my... chat
GPT issue S that I've submitted since upgrading,
but go ahead. So earlier on telegram slash tele
crap worked beautifully with voiceover, or maybe
if not beautifully, at least decently and well
enough that you could pretty much use it. As
well as a sighted person could. Over the last
few updates, they have broken things, i .e. you
can no longer see where the send button is now.
You can no longer really see where the text box
to write is. And granted... What I have done
about it is not exactly any of those things.
I've moved to alternative sources, i .e. using
Telecrap through the Tweezcake client and communicating
via other platforms, i .e. WhatsApp. Yeah, if
I remember, Nick, even the send voice message
button doesn't even read anymore. On telecrap?
Yeah, telecrap. I think that's true, actually.
Because it used to be kind of hard to find, but
it was doable back then. It was doable back then,
yeah, exactly. And now I think screen recognition,
if you have that feature, sort of works, but
even that's sort of a crapshoot. Yeah. Yeah,
unfortunately. Yeah, I haven't had any many issues
with AI, but I feel that having, you know, knowing
what skills you have and knowing how you can
use your tools is always beneficial. All right,
let me switch back. Okay, guys, I'm going to
switch back. Hold on a second. There's definitely
more work we need to be doing, but that's why
we're their captain. Here's a perfect example
of viewing an AI tool. I wrote to it just now,
I'm a complete idiot. I did not take Ricola before
TSB. I've been coughing a bit, but not hacking
up and not like I've been in the past. How do
I remember to do this for next time? Right? So
it's like, okay, here are symptoms. It's not
as bad as it was. Right? So I'm not, I'm coughing,
but I'm not hacking up and spitting up and carrying
on for 20 minutes. Like I've been known to do.
And the first thing it says is, you're not an
idiot, you're human. Tired? Juggling too much?
And this was preventable, not stupid. I don't
mean to sidetrack you, but I'm wondering if,
as we were discussing earlier, And I think we
did sort of talk about this already, but, you
know. Yes, go ahead. I think it's worth repeating.
Does your Echo device, especially if you have
the Plus version of that, lift some of that from
GPT? Because I've gotten similar responses to
things that I've given it. I don't have an answer
on what the premium offers. Because I don't know
what's connected to it. I wouldn't... Contact
through the app the Alexa department and ask.
Oh, yes. But this thing says... What you're really
asking for is, how do I make this automatic so
future JR doesn't have to remember at all? And
JR has been my middle name, so I gave it that.
So it could use my main name or my nickname,
depending on what it feels like. And so... This
thing sounds to me like a therapist, right? It's
like, I'm a complete fucking idiot. But every
time... And I told it this, too. It's like, well,
I'm not a therapist. I don't, you know, prescribe
anything. I'm like, well, I don't mean it as
a prescribed therapist, but, like, every time
I go on a rant, like, I read whatever you're
saying, and... It's making sense. Right. So,
I'll read this later because I mainly wanted
to get some tips, but I'm in the midst of a show,
but I just thought I'd share that. Yeah, I mean,
it's definitely good to... get the opinions on
the chat GPT. Yeah. A .K .A. Jared's second personal
assistant. No kidding. Well, the problem is and
this is not something I don't think we can fix.
Yeah. There's two problems I have. First, with
the Metrologs aspect of things, I have to basically
send it my temporary log or log as I go from
within the chat. I cannot email it anything.
But I can send it files with instructions, like
log this word for word. And it'll do that. The
other thing that it cannot do, which is why I
pinged you on Monday, I believe it was. Or was
it last week? I need you. It was what? I think
it was somewhere in that gap. Well, but anyway,
it said, I cannot ping you at a certain date.
I cannot ping you on a certain time. And it was
telling me about reminders and other things.
And I told it why I don't like reminders. And
it knows about Snooster, Waker Upper, GoPingMe,
other services. That's another topic we're going
to get into. And how systems today may not be
compliant to people who all they want. are pings
for simple reminders and things like me. Right.
Now, maybe that might be a tech podcast topic,
not necessarily a security podcast, but it's
going to be out there. I'll figure that out when
I get there. I would think it'd be. I mean, I
guess it could be either or. depending on the
situation. I mainly use it to remind me to do
things, like remove shit off of the single feeds,
like remind me about this item for the board
when I go and sign up. Remind me... to ping Armando
before the AAC meeting about the email I sent
on January 29th. You know, things of that nature.
Remind me to take out the trash every week. I
used to use GoPingMe for that, i .e., Take the
trash from the backyard and put them out on the
street. Preston, ping me and ask me if there
are any accessibility issues during yesterday's
trips. If so, send an email and don't forget
to put that crap in your main log. Preston, remind
me to... Well, okay, wrong phrasing. Go and get
the files for the operation meeting from the
board webpage. Or go and get the board agenda.
Or go get PSAC. If you need help, ping me it's
in the 2026 oh by the way I need to go get that
link and put it up on jaredreimer .com's webpage
that'll be for next for this coming week's update
cycle but that's beyond the but that's what I'm
talking about in regards to reminder platforms
Okay. Yes. It's basically, you know, basic stuff.
So, I mean, that makes sense. Yeah. I mean, if
all else fails, we can create our own system.
But so far, the one we're using, it's... Well,
or we go back to reminders and it sits on our
phones until we tell it we're done. And that's
annoying. It is. It should, like... Do it for
an hour, just like the calendar. And then go
away. Maybe pop up 12 hours. Hey, I'm still waiting
for you to tell me whether you're done or not.
That I could see. Yeah. I could see that. But
it sits there until you're done. Or you tell
it, remind me later. And I never even ran the
backups. On Monday, because I was involved in
stuff, trying to get the agenda packages done.
It reminded me on Tuesday, but I was still trying
to get that stuff done. Well, the stuff was done,
but I was doing other things. And so the reminders
on the phone just don't work for me anymore.
Yeah. It worked. You get that. Mr. J, you have
not read. Would you like to read item number
five, ethical red flags, 67 minutes, although
we can take as much time as we need. Okay. You
just read it, but I might as well just reinforce
that. Number five, ethical red flags. The following
may be red flags that you might see. sometimes
correcting it by sending it a screenshot like
it's saying, quote, iOS 26 isn't out yet, VoiceOver
is reading it wrong, to, here's a screenshot
from settings, general, iOS update, and let it
correct itself. Here are the red flags listed
below. And I think it might be easier if we did
this all at once. I know there are a few, but
that would be my preference. There are five of
them. And since I'm reading from the older copy,
I already know about the quoting problems. But
go ahead. There's not a quoting problem. I was
just saying it. No, I'm saying mine still has
that issue. I've never updated mine. Oh, okay.
I never updated mine. So yes, let's do this one
at a time. I think I agree. Okay. One. The AI
said it was fine. Agree? Disagree? Um... Agree
that that could potentially happen to you because
all you're doing is maybe giving it something
and if it doesn't correct itself, that could
happen. It could misread the product too or whatever
you're trying to do as well. Yeah, that could
be a bad factor. Especially if you take the picture
of it. When I was giving it the stuff for its
own app, and I was saying, I'm running iOS 26,
and it goes, no, VoiceOver is reading it wrong.
You must be reading, you must be running 16.
That's when I said, fuck you. And I went in,
and I gave it a screenshot, and I said, here.
And it goes, oh, you're right. According to this
screenshot, it says, thank you for correcting
me. This is proof. And it's always done that
when I've had to correct it and given it a screenshot
somewhere. And it goes and does what it needs
to do and goes, oh. You know, like when I said
one thing and it analyzes it one way and then
I give it more info based on what it's saying.
And I'm like, no, that's not quite right. And
I give it something else that goes, oh. So, that's
where that iOS 26 reference came from. Gotcha.
What do you think on item number one? Yeah. I
would say I agree as well. Yeah. Definitely.
Because it needs to be more specific. It does.
It's always specific when you tell it, hey, this
is what. Again, accountability. You don't say
what you want to say. You don't give it what
you want. You're not going to get the right result.
I had something much less serious happen that
was kind of a red flag like that too. Go ahead.
I was just chatting with my device, the premium,
the plus feature, and I was just randomly talking
to it about... stanford football and granted
this is something that can be verified that can
be researched that can be looked up online and
it tells me stanford finished the 25 season with
a record of three and nine and i know for a fact
it was four and eight so i told it no actually
no that we went four and eight last season and
basically it responded the same way that Yours
did with the thank you for correcting me because
I'm sure that it could look up stuff from the
website. Or you could tell it. Please verify
that. And then it will go out and check sources
and do. Right. So that's another prompt you can
use. So if you know that for a fact... you can
use that or tell it, are you sure? Go and check.
And then it will... Yeah. But yeah, it gave me
information I knew was incorrect. It self -corrected
when I told it. But yes, good to know. But that
is... Acceptable behavior. Yeah. Great. Item
number two. Okay, number two. No disclosure of
AI use. Why do you think I put... And I'm going
to have to do this in every note. Every show
notes now that I used the tool to assist in the
writing. Because that's just proper etiquette.
I used it to assist. Not as the official word.
I could take what it says. I could rewrite it
in my own words. Run it through for spell check
and accuracy? Yep. And clarification? But overall,
it has to be mine. It cannot just be it, i .e.
the wrong notes. I cannot just read the wrong
notes and call it mine. No, I mean, you could
say this was... Written by, say, for example,
link Ars Technica. You know, if you link back
to the source you got it from. That's what we
do legally. We legally should do that. Yeah,
this was the prompt. This was what was generated
when I gave it prompt X. Correct. Well, we don't
have to be that detailed, but as long as we say...
we used AI to assist in the writing, that should
be good enough. Yeah, you can say, you know,
an AI tool assisted and, yeah. Number three.
Number three. Speed over understanding. Oh, yeah.
Not... Does anybody have any examples of that?
I might. I just wasn't clear about that, though.
Basically, if you talk quick, you say, this is
what I need, but yet it doesn't understand you,
the AI. You should clarify. and it just spits
something out, and it's like, okay, you did it,
and you don't even get what it gave you, or even
evaluate that what it gave you could be totally
wrong. Not many examples recently. Sometimes
I've used Seeing AI to try and identify these
beer cans I have, and it's... I don't know that
I've really gone super fast through them, so
maybe it doesn't apply, but I do know that the
initial read could be something that only captures
a few characters, a few letters. And I'm wondering
if you ended up... Well, you could do this. You
could take a picture or two or three. Then let
Camera Roll and Dropbox sync. Then use the web
tool of ChatGPT or any other tool and say, what
is this? And it, as I did with a bottle of vitamins,
first it said, this is what this is. Then I said,
can I take them? And it goes, I can't really
tell you, but vitamins like this have an expiration
date. And so I need, and so, because I can't
read the small print, I shot three or four images,
shoved it up its ass, and I didn't have to really
put a prompt in, but then it goes, I see the
images. I found the expiration date, and I won't
tell you every word it said, but basically it
told me, no, you should not take these, even
though it may not technically be bad, but vitamins
like this may not be safe because it loses its...
I'm not giving every detail, but I'm giving an
example of how you could handle that. I had the
vending machine debacle with it. Remember, I
was discussing that earlier and telling you guys
that I gave it my address. It knows. It's like,
oh, you must live at the Met. Now, technically,
that's the name of the complex. That's public.
So I'm not saying anything that's not public.
It's called the Met Woodland Hills. That's a
public name. Yep. So then I was telling it how
I go to the various vending machines. and then
how I get out of the complex to go get the bus.
And it said, seeing that both of these are out
of your way, your aide was not right, or not
wrong, when he said, quote, fuck the machines.
Yeah. Yep. Item number... Where's my device?
Item number four. Number four. All right. Number
four. Treating AI as neutral. Do you guys think...
Now, I guess the question I'll ask you guys.
Do you think I was neutral when I got sick? I
gave it my symptoms and it was saying... Well,
you don't really need to go to emergency care
or a doctor yet, but this is what you should
look for if this occurs. You could try this,
you could try that, you could try these things
and see if that doesn't help you. Well, I mean,
at the end of the day, you definitely want to
be transparent and honest with your... So I feel
it giving you choices on what to do with your
sickness is elaborate. Yeah, but the thing is,
the only thing was, was Jared made the decision
and said, okay, you know, this is what I'm going
to do. You know, he didn't let the AI like, oh
yeah, I'm going to do it. Like he made the decision
ultimately. I gave it a whole bunch of crap that
I had in my house and said, what can I eat? I
have this. I have that. I have this. I have that.
I have these options. And it goes, based on how
you're feeling, my recommendation is, and it
gave me in order, you know, eggs, rice. bread,
the noodles, the yogurt if I have any, applesauce
if I had any, bananas if I had any. But then
when I told it, I don't have applesauce, I don't
have yogurt, I don't have bananas. Then it goes,
all right, you have eggs, you have this, you
have that. Try these. And report back in a little
while, and let's assess. Right. And so, in a
way, it was my doctor with me making my own decisions.
Right, and it was... And I would say not neutral
because it's basically responding based on what
you're putting into it, and that could be very
subjective and very different. But I eventually
made my own choice. Right. Right? So it was more
of a tool. If I didn't give it any more information
than what I started with, that would have been
the neutral aspect. But I knew I needed help,
and I chose, and I think that should be the most
important thing we take out of this, right? I
chose, instead of it saying, well, you should
eat any of these, and I left it alone, that's
where it would have been neutral. But I knew
that there were things I did not have. So, yes,
it was neutral by saying, okay, since you don't
have these, then here's what I would suggest.
It gave me suggestions. I shot it pictures. Okay,
I want the noodles. I have this and I have that.
Then it goes, well, I wouldn't necessarily eat
this. This probably would be okay. It didn't
say this is okay. or this is what I think you
should do, but it knows, based on the packaging
and the image, what's in it, how it's cooked,
and what might cause me problems. It doesn't
know that it's factual, but it says, I think
you're better off, or you're probably better
off with this. So I ate that and had no problems.
And I put the other one away. But that was my
own decision based on shoving images up its ass,
letting it analyze it, telling it what I have
in my home, and doing all of that. But again,
that's all going back to accountability and responsibility.
Which leads directly to item number five. No
human accountability. Read that, please. Exactly.
No human accountability, which is item number
five. All right. I will go ahead and do that
again. Number five. No human accountability.
Nope. So was I accountable based on... this whole
section of me getting sick telling it what i
had updating it writing a symptom log it understanding
oh you're going backwards a little bit but you're
not in danger right now you did something that
maybe you shouldn't have done and your body's
not liking that so much here's what to do next
And I did exactly what it recommended because
I knew that I fucked up. The thing is, you were
actually using it for good. You weren't shooting
it like pictures of whatever. You weren't using
it maliciously. No, I mean, that would not be
a bad... that would not be a good thing if you
use it if you do use it what Terry said maliciously
please read the paragraphs Mr. J okay here's
something to remember yes here's something to
remember I just I got that When everyone blames
the AI, nobody is responsible. Read that again.
I think that's important. Absolutely. When everyone
blames the AI, nobody is responsible. It's easy
to blame the AI when you make a bad decision.
It's like, oh, the AI told me to do this. Chat
GPT told me to eat this. Yeah. I saw this on
TickBite. Dan's talk thing. But you had to make
the final call, not it. It was showing it to
you, making suggestions, but you were the one
who ultimately made the call. Yep. Exactly. Exactly.
Again, accountability. Yes. Please read the question
in the final paragraph of the section, Mr. J.
Which of these red flags listed above have you
encountered the most? Hmm. Now that's a tough
one because... Yeah. Yeah. Yeah, I'm trying to
think which one I've really run into. I'm still
too new. I know I've corrected it, but I've tried
to be responsible with it. I mean, I tried to
correct it just recently on stuff, but that's
it. You know, it's not like I gave it wrong information.
And I think, in my opinion, it was neutral. It's
like, based on what your history is at the moment,
Yeah. I recommend these things in this order,
in any of this order. And then I'd say, all right,
I'm going to try whatever. Yeah. And it would
say, that might not be a bad idea. Do this and
report back and let me know how it goes. And
let's analyze it. Yep. Right. So, do you think
I have used it responsibly? Based on this section?
I think you have. I mean, my concern is... And
not that you did anything wrong. I don't think
there's anything right or wrong here. But I think
it gets a little dicey, in my view, when you
start getting into things that are medical. And
I mean, yeah, okay. It wasn't... the worst thing
that could have happened to you. And yeah, it
gave some concrete things based on what you shoved
up its ass, as you say. Yeah. But I'm always
a little uneasy with that kind of thing in AI.
But remember, there's one thing that you have
to keep in mind in regards to your angle. And
I'm not saying you're wrong. I'm listening to
you. Okay. I'm not giving it my medical history.
I'm saying... Oh, no. This is how I'm feeling
right now. I'm burping acid. I've got diarrhea.
And what... Do I need... Should I be concerned
about this? Or should I go get medical care?
Right. And it goes, well, this doesn't sound
bad, but you might have a bit of acid reflux.
And then I told it that I had the burger the
day before. But I didn't blame the burger because
it started the next day. And I had been stressed.
And, I mean, there were a lot of things that
could have caused it. Right. And then it says
there is a thing called stress diarrhea, which
I've never heard of. I've never heard of it either.
That would be an example. Go ahead. That's what
I used it for. I never gave it my chart, which
includes my whole medical history. You know,
I didn't give it pictures of different things,
except... To identify what was in my home. Right.
It's not like you took a picture of your diarrhea
crap and uploaded it and said, oh, you know what?
No, I think I would never do that. No, no, no.
Could you imagine the analyze the chat GPT you
would get? Some people. I think some people actually
would, though, Terry. That's the scary part.
That's the scary part. Yeah, I mean. I mean,
like I said, the worst I've done with chat GPT
is upload my medical cannabis card. And it said,
this gave me everything. And it said, you know,
just to give you some advice, this is sensitive
information. So, you know, please either delete
the picture or when we're done. But that's the
guardrail to protect you. That's the guardrail.
Yeah. Right. Yeah. But no, what you said, though.
That's a key distinction, so thanks for clarifying
that. Because, yes, you are presenting it with
basically a list of symptoms right now and not
what I was saying. So, no, that's perfect. Thanks.
But go ahead with your analysis. I want to hear.
I mean, we talked about it last night when I
called you, but I think it's worth bringing up.
Yeah. So, given that the first impulse is for
a lot of people, and I'm not just saying yourself,
but a lot of people, to go to quote -unquote
Dr. Google slash Dr. AI. Dr. Google, Dr. DuckDuckGo.
Yes, Dr. DuckDuckGo. Maybe this is more of a
personal opinion, but I just feel a little unsure
about presenting that kind of stuff to GPT, even
if all you're doing is giving it a list of symptoms.
I guess I'm more comfortable with doing stuff
that's really easily, quickly verifiable, i .e.
what was the baseball score for this? What's
the current temperature of X? Well, your main
devices can do that. Exactly. Well, Jared, you
got to remember, not everybody's comfortable
with giving AI that type of information either.
I mean, they may want to just say, all right,
I want to seek a medical professional just in
case versus... Well, remember that this started
over the weekend and I wasn't getting a medical
professional till Monday. Well, I know, right?
I'm saying... In general, most people may want
to just do that instead, which it's a decision
that you want to make. I'm not discounting that.
You also didn't sit there and be like, oh yeah,
you took the suggestion and you made a decision
based on the suggestion. It started on a Friday
morning at like 2 o 'clock in the morning. Well,
that doesn't matter when it started. It just,
what matters is I'm just giving a baseline. I'm
not discounting you. You know, that's what matters
is how you handle it. And both of you are absolutely
right. And that's why there's choice. Yes. And
I mean, I don't mind... Sorry. I don't mind talking
to my device. Yeah, I'll go. Like, I don't mind
talking to my device, as I have, about, you know,
some of the various things that I was drinking.
Because sometimes... If the print is too small
and the images I'm getting are not great, but
I have a pretty good idea of what it is, sometimes
it'll fill in the complete picture. Like, it's
this. I'm totally fine with that. Stuff that's
not going to really be that significant down
the road. And yeah, I like to sometimes have
as I was on my device, which is... A little borderline,
like, I like to mess with... I like to mess with
it. Like, we actually created... This was totally
fictional. An anti -resume. It was the funniest
thing. Like, find the opposite of every quality
and every buzzword that every hiring manager
has to read. So, yeah, this person. Combative.
Combative. Failure -oriented. Inattentive. Oh,
my. Oh, yeah. It was funny. And it was going
along with it. But the point is, it wasn't about
anything serious or anything that would have
really affected me later on. Okay. Preston, go
ahead, please. And I'll read item six. Well,
I mean, in my opinion, it's always good to have
choice, but you definitely don't want to be abusive
of what you have. So I think, you know, as we
said here, being accountable and reasonable with
our AI tools will be beneficial for us in the
long run. I guess maybe in another podcast we'll
go through initial settings on chat GPT where
in the settings I forget where I'd have to go
in the app and look but there is an option in
there to use your data to train their models.
One of the first things I did before I went on
these diatribes about the landscape of where
I live and all of Metro's stuff that I had to
do because I have not logged since September.
That's not good. Even though I've taken trips.
no way so I shoved it logs made it understand
how Metro works how I have to send things through
customer relations not the accessibility unit
I talked about the advisory body compensation
program and how I had issues and how to deal
with it in the future. I've talked about and
gave it an email as I indicated that I wrote
to staff on this particular day. And that turned
into the reminder. When I said, you know, talk
to Armando, and Armando's a common name, so I'm
not, you know, if he's hearing it, understand
that it's a reference, not that I need anything
right now. We can talk. I'm not, this isn't about
how come you haven't responded lately. That's
not the point of the discussion. The discussion
was... What reminder systems are you talking
about? And how are you using it? So that's what
that was about. But the point is, it helped me
rewrite the email I wrote, even though he would
have understood it just fine, having a professional
something else. Right. And I fed it 200 pages
of logs. But the point being that I'm sure that
one of the very first things you did was turn
off that setting that would have allowed it to
train on its models. Now, is that a good decision
or a bad decision? I'm curious. Great decision.
It said the same thing. It said, based on what
you're telling me so far, turning it off is the
right decision. Not that they would misuse it
anyway, because they have the right to read logs
to make sure there's no abuse. Right. But this
is something that's more personal. It's something
that's more personal. And you just don't necessarily
know how much of that is being fed into the larger
language model. The logs aren't the concerning
aspect of things, because all it does is say,
took a bus from this place to that place, i .e.
Ventura and Burbank to Cadoga Station. at this
time. There's no real, you know, personally identifiable
information that the models could care about.
Oh, okay. The logs indicate how, you know, what
time my board Where I start from, any accessibility
issues, that is public knowledge because Metro
gets that in certain situations where there's
an accessibility failure or something's just
not right. Like, the train was overly packed
and I almost got thrown out the door. You stupid
fucks. So I don't care if it wants to train on
that, but because I talked to it about internal
workings of a big -name company, which you guys
already know, Metro, that's when I turned the
thing off. That's kind of what I meant when I
said personal. That's sort of what it extended
to. That's what I meant there. I see. And you're
absolutely correct. Anybody else? Yes or no on
turning that option off? Well, I would say I
think off is good because... That way it won't
know what you're talking about because sometimes
in any line of work... Actually, that's not exactly
true. That's not exactly true, but I'll let you
finish your thought. I think... Well, I think
it depends on the line of work. Things can get
a little too confidential or... They need to
be as commentable as it could be. So I think
having that off can be a benefit. And the only
reason why I said it's not true is because there's
another setting in there in the same area that
says access my chat history for reference. Now
I'm paraphrasing. I don't remember the options
offhand. And I left that on. Yes. So if I start
a new chat and I say, remember in my chat history
I talked about program 267? Well, there was a
question about item 3 in this. Can you write
a summary that we can read on air for Podcast
269? And it could go back in the history and
go find it. Or if it's not sure, it'll say, please
tell me what that item is. And then I'll be able
to help you more. Sure. Be My AI is under Be
My Eyes too, correct? Or is that a different...
That is under Be My Eyes. It's under the AI tab.
That's what I thought. So I knew I had them all.
I just had to make sure. I had to put them all
in my AIs folder. That's what I was asking. It's...
Yeah. Well, I wouldn't put Be My... I wouldn't
put... I would personally not put Be My Eyes
There. That's a blindness -specific app. The
AI tool's part of the tool set they offer. Yeah.
That's just me. Is there any other comments on
item number five before we get into six and seven?
I think so. We're good. Item number six. Audience
comment section. And this starts as a quote,
and I probably could have taken the quote out,
but I didn't. Now that we've laid out how we're
thinking about AI best practices, let's hear
from you. Here are some questions that you can
answer. Email, iMessage, or call the comment
line. There's no single right response here.
So call 888 -405 -7524, email or iMessage tech,
that's T -E -C -H at M -E -N -V -I .org, or J
-A -R -E -D -R -I -M -E -R at 986themix .com.
Text or WhatsApp 804 -442 -6975. And I will read
these one at a time. And panelists, if you would
like to answer, you are welcome to. Okay? Okay.
Where have you seen AI used well? Who wants to
go first? I would say I've seen it used well
when I listen to... various friends in the community
perform uh song selections in like suno or ai
music and i do know when i do go out and about
i would ask my smart glasses about my surroundings
and you know i tell it to make sure it's very
descriptive because of my uh spectrum uh So I
always turn that description on. I was actually
going to somewhat echo that. I've seen it used
really well in terms of tools such as Be My AI.
So yes, blindness specific, but the fact that
it can provide pictures of photos slash providing
information from those photos that you may need,
That's when it's excellent, I feel. I mean, I've
heard AI in music, like a couple AI tracks, and
sometimes you wouldn't even know the difference.
That gets you into a... That's getting... Well,
the problem, and we talked about this on program
402 of the Independent Artist Spotlight, where
we brought... our very own Jamie T on. Yes. And
AI is only as good as it's fed. So right now,
it's basing music off of what it knows. The musicians
who are crying foul saying that it's taking our
jobs away are wrong. You have to innovate or
you'll die. Exactly. If you can't do that, I'm
not saying dying doesn't mean you're dead. I
mean, you're just going to not exist as a musician
anymore. So I want to make that very clear. Right.
Right. Yeah. So, and Kim even said as much in
her minutes. The musician has to innovate. AI
only knows what it's taught. And it doesn't matter
whether it's Suno or 11 Labs or any other application
that can do that that's not named herein. Yeah.
Yeah, and one of the ways you can innovate it,
you can feed it. Well, yeah, create your own
music, but also feed it different things so that
it has even more to work with. You're not going
to lose your job completely. No. In fact, one
of the artists that I've been playing recently
has uploaded their own AI versions of stuff to
their own Bandcamp page for sale. Wow. Number
two. Where did it clearly fail? I've seen it
failing. And this is not something that can entirely
be blamed on the AI at all. This is, I think,
more about the person who's using it. I'm not
going to name names, but what I've seen is despite
the fact that they say they know that this is
not real, that they are becoming so emotionally
invested in characters who are fictional slash
AI creations. What service? There are several
that were mentioned. There was one called...
I think it was called Spicy AI Chat. So I know
that it's designed for this type of purpose,
but it's still... It's... In a way, actually,
I should probably save this for number three
because it kind of ties into that question. Well,
go ahead while you're thinking about it. Please.
Okay. So... I mean, my concern is that we're
going to see a lot more of this. Like people
getting so tied into. And there was even that
podcast we heard about these digital relationships
that are completely fictitious and actually emotionally
investing so much into them. So the fact that
that is out there is just. And again, not totally
the AI's fault. Not at all. It's, you know, more
about who's using it, but the fact that that
exists tells me that it... Oh, character AI is
another one, Nick, that is used. Oh, yeah. Oh,
crap. This thing just went backwards again. We're
almost done, I think. Yeah, actually, I got you,
Jared. Okay. Oh, I found it. Go ahead and...
Oh, so number three. What worries you most about
current AI use? And Nick touched on one item.
Does anybody... So... So we'll just recap this.
So Nick was saying services like Character AI.
Spicy Chat AI. And others. I've never heard of
Spicy Chat AI. I haven't either, but I know and
I mentioned this to Nick that one of our former
simulcasters is using a tool that he has actually
programmed because you have to program these
and it's gotten so bad not only does he have
the AI girlfriend but now he's got at least one
sibling to go along with the package. Wow. Wow.
That was your reaction last night. And for those
who don't know, that would have been February
3rd when I called Nick. And he says, quote, it's
normal. Everybody's doing it. No, they're not.
Not really? And everybody on live wire called
bullshit. Every single one who've communicated
with him. So do I. So are we doing that here?
Karma's a bitch. Oops. Oops, did you say that?
There's another worry too and it's unfortunately
as we've talked about with that very public case
of the teen committing suicide. And that was
because and that goes into the whole hallucination
topic which we can get into and that might be
270 depending on What's going on and what the
landscape covers? We can definitely... That's
one thing I do want to cover is the hallucination
aspect. What is it actually doing? Because I
did talk to Chet specifically about it. It's
like, well, I'm not technically hallucinating.
If people press me for facts... I'm going to
make up a name, i .e., the person at LA Metro
who runs the accessibility unit is Nicholas Jackson.
Right. I'm giving you a fake name because I don't
know who's actually running it, was its response.
But we can go into more detail about this if
I tell it. Remember our AI discussion? Give me
the hallucinations section for a podcast. And
it's going to do the same thing that I did before.
And we can edit it and do whatever we want with
it and call it our own. But, yes, I want to cover
that. Yeah, we'll have to cover that on throwback
at some point as well. We were going to do that
on throwback too. We were, but I'm not even there
yet. I have to go through meetings before I can
even think about how I want to proceed with this.
And we've got several topics ahead of it, but
depending on how we're doing things. We do, yes.
We're good. So we're good. We don't need... To
answer all three, if we don't want to, give it
thought and report back later, and we can air
your comments. The lines of communication are
open, so if you think of something later, panel,
then leave a comment, drop me a note, tell me
you want it aired. I'll take care of everything.
Listeners. And podcasters, listeners, you can
comment anytime. Let me know what you think.
Ask any questions. The worst we can do is ask
the AI. You know, somebody asked a question about...
Yeah. And that's exactly what we're going to
do with the one item that Nick asked. I don't
know what this means. And honestly, I have an
idea of what it means. I understood it in practice
and I should have asked it and included that,
but I didn't really... I mean, I understood it
one way, but let's see what it says and see if
I'm correct. And I can basically say, I said
in the podcast that you say one thing about the
population in general. And you just use that
without rewriting it to your life experience.
That's what I think it means, but we can... That
very well could be. We can go into more detail.
All right. I can read number seven unless somebody
else wants to. This is the wrap -up section,
and this will... practically end everything for
today's AI program. And we'll have more videos
coming up for you afterward. Does somebody else
want to read number seven or should I read it?
Actually, let me go plug my device into the wall
because I'm getting pinged. You're getting pinged.
Then I'll read. Well, actually, I'm getting pinged
saying it's dead. It's almost dead, but I got
it. It's dying, so I'll read. It's fine. Number
seven. Wrap up and takeaways. Number one. Best
practice is not anti -AI. Number two, accessibility
and ethics are not optional. All right, so these
are big points, right? Best practice is not anti
-AI. I might be in the chat GPT or Claude or
Gemini late, even though I've used them in limited...
capabilities like is this artist um you know
independent and then i feed it info and it goes
seeing that you found it there this label is
so yes okay so that's important accessibility
and ethics are not optional so making sure that
things are accessible To as much of the disability
audience as possible. That's not optional. It's
required now. So are your ethics. Right there.
Down. Down. Because we do have the right to be
included in every aspect of our journey. And
that's totally important. So... And third, humans
remain accountable. Meaning, if I'm giving it
symptoms and saying, do I have to be concerned
or should I go get medical care right now? And
it's saying, well, this is bad, but you can try
these things. Give me an update and let's assess
it. You're not clearly in danger. You're not
having these symptoms. So you could be all right.
And of course, it's up to you. And as it turned
out, three days later, I was fine. Monday morning,
I was practically back to normal. You could say,
you know, do I want to go to a doctor or should
I hang out and wait? I mean, again, that is the
decision of the human, not the AI. So that's
how it should be. Yes, I agree. My phone is fucking
up again. I can definitely agree with that. My
phone is fucking this up again. We know that
there are other topics we can cover as part of
this discussion, so please advise us where we
should take this next time and we can move forward
with that. Thanks for listening and be responsible.
That's it. Thanks for listening is where we ended
it. And I have an end of notes section. Thank
you to everybody who wanted to read today. Does
anybody have any final thoughts on this? I think
this did a great job. I think I wrote this Pretty
well, and we had a nice long discussion. That's
what TSB is for. Yes. Yep. So the time points
were for 45 minutes, but I told it TSB somewhere
around four to five hours, including news, notes,
the landscape, videos, and such. We're not doing
anything wrong. I would say this discussion was
very helpful. I know some of us are new to the
AI scene or some of us are getting ourselves
or people with it. And I'm glad we have this
tool to look back on. And as mentioned earlier,
AI is definitely... here to stay and we'll be
branching out on other ideas and topics and no,
I just felt this was very copensetic so I enjoyed
today's discussion. The only thing I could say
is just be responsible with AI, you know, just
use it responsibly. Don't be malicious with it.
You'll be fine. Right. And remember, you are
the one to train it. It's not a mind reader.
I can train you. You gotta train it. Yes. What
do you think over here, Nick? I thought you fell
asleep. Uh -oh. Well, he might be doing... Oh,
there he goes. I was going to say, he might be
doing other things, too, just like I am trying
to get a few tracks in for this afternoon's running.
But go ahead, Mr. J. I actually think that the
most important point here in number seven, believe
it or not, I think is actually number one, not
the others. Because... Go ahead and reread number...
So everybody has the same context. Reread number
one. Okay, yeah. All right, I'm getting to it
right now. One, best practice is not anti -AI.
So I think that's very important to know because
a lot of people who are just very much into AI
and use it... more than we do and lean more heavily
on it might when we start talking about best
practices start assuming oh well then you just
don't support ai you just don't like it and you're
just not part of the modern age that's not it
at all it's about using it we've been technically
using ai since google and alexa but they're completely
different devices. Yeah. And it's completely
different engines too. Yeah. I mean, Google's
been around before Gemini ever became big. Yep.
It's true. Alexa's probably been around... Well,
okay. I think... Siri might have been around
before Alexa, but it doesn't matter the actual
order. No. Although it's gotten so bad that later
versions of Siri are now using Gemini because
Apple basically caved in and paid Google a bunch
of money to integrate it into the phone. It's
also using ChatGPT as well. It's using both.
I don't know any details about any of that, but
I do know that... And yes, my Google over there
said it didn't understand because it heard its
name and... try to respond. I've heard that too,
yeah. That it's using Gemini. It's going to be
using Gemini as a back end. Yeah. But I did hear
that they shoved Google a bunch of money up their
ass. Yep. Because they're going to use Gemini
as their back end. Yeah. That's what I heard
too. I did hear that somewhere. I don't know
if they're going to get rid of chat GPT support
or if they're just going to... I don't know.
I don't know anything about that. If you hear
any more, send it our way and maybe I'll blog
it or we'll talk about it. I listen to the Apple
Insider podcast every week. That's where I heard
that from too. I need to go follow that. I just
don't have that kind of time. I'm too involved.
I can't even keep up with my own Metro stuff
these days. I got articles piling up and I saw
something on the source that needs to go out.
I'm very, very, very behind. I can't even keep
up. Yeah. Getting sick didn't help me any. Uh,
no. No, but at least it gave you a good... This
gave you a chance to kind of relax, too, kind
of. You know? Not really. Well, yeah, relax and
explore. I suppose so. Gentlemen who read the
topic in two weeks, it's going to be how can
small companies like the JRN or Menve be more
compliant than the multi -billion dollar companies.
Well, basically, we don't sell people's data.
We treat people like humans, not a number. And
if they violate the policy, they are out of our
system. That's just a small preview. That's Menvy's
policies. And yes, you are absolutely correct.
Yes. Yeah, I'll just give him a quick small preview
of what I read 24 hours ago. I'm going to look
at it. Mr. J. Your preview topic. Actually, before
your preview topic, your thoughts on 268. I think
that that is a fascinating thing to examine because
you non -security people would clearly think,
oh, these big companies, yeah, they do things
that we don't like. They do things that we find
questionable, but they keep our data safe, surely,
and they're private about it. Oh, that's so wrong.
Yeah, right. Even I know that. That is absolutely
wrong. And part of the extended show notes will
be a number of write -ups about some of the coverage
I've been covering. For years. Nick, have you
gone over to our articles page and looked at
some of my older writings covering this stuff?
Not today, but I'm sure that if I went, I would
remember. Oh, this diatribe. That one. JaredReimer
.net. And when you go there, find the articles
link under links around the main domain. And
you can read what is of interest to you. There's
several security articles there besides others.
Yeah. Alright. I'm going to get out of here.
I will see you on Saturday, Mr. R. Yes, sir.
Yes. We'll see you then, Terry. Out he goes.
Yep, he's gone. Jay, you had a topic that we
should probably do for 269. Yes. And I think
in order to not make it look like AI wrote this
entirely, and I say that because I was reading
through as we were talking, and a lot of it is
the way I would speak this or write this. I do
want to do kind of an introduction to this. It's
an issue because it's a trend I'm seeing, and
I don't think it's just one person, but the making
the revelation of What I have learned is the
official term personal health information and
making that public. That's PHI. PHI, yes. Yeah,
PHI, yep. In the case of the various source,
they didn't do anything truly terrible, but they
still did talk about what their blood pressure
readings were and things that... really should
not be shared with the world. See, I would only
do that if it asked, like, is your blood pressure
high? And I probably in most cases would say,
I don't know. I don't have any way to do that
right now. I would probably have to go to a doctor
or a pharmacy to do that. And find out. But,
I mean, that discussion should only come up if
you are in the presence of somebody who is a
physician or if you are at your doctor. And that's
where it should stay. I agree. So if AI were
to ask me, even if I had the ability, I would
just tell it I don't know. Just because that
is, I think, crossing a bit of a line. Although
AI is trying to analyze what's wrong. But then
it goes back to your settings. Are you having
it set to share all that data? As part of LLM
training? If yes, then don't. If not, and you
have the share across chat option checked, then
I'd say you're probably okay. Yeah, but if you
are revealing that in a radio broadcast, I think
then we have problems. I agree. Even though the
listenership may be small and the podcast listenership
may be small, I'm not saying it isn't. I'm not
saying it isn't. But even totally routine things,
you know, checking your vitals at your doctor's
office, that should stay there. with another
physician who needs to treat you, not be consumed
and heard by the general public. I agree. I just
remembered, before we actually push some buttons
to change things, we must do... Now, where is
it here? Here it is. We must do this... Because
this is bad. And we talk about personal accountability.
Where's the braille file? There it is. Um...
Wait, this is... Item number two, right? I mean...
Which one? No, you don't have this file. Okay,
I found it. You don't have this particular file.
So, I want to go back and bring up real quick
something that ties into the accountability aspect.
And while this isn't necessarily security related,
We talked about the following on Monday for RCL.
You can search Radio Connection Live, and when
you find it, it's actually hosted by Radio Connection
Live. And here's what we're going to read from
it, from their news section. The show got uploaded
February 3rd, so you'll find it there. Oh, it
did get uploaded the same day. Okay. Yeah. He
sent it to me late Monday night. Well, then you
need to be doing your stuff instead of waiting
until Saturday. I know. I'm going to share the
announcement out. I'm going to post it out. Go
to sleep. So, I got it. You're good. You're good.
This says, finally, we end with some news that
we wish we didn't have to report on as often
as we do. But unfortunately, it's coming up in
the headlines again. Copper theft. as we, as
well as transmitter damage, have plagued several
radio stations over the years. And now, its latest
victim is Summit Media's classic country 1070
AM KFTI license to Wichita, Kansas. The station
has been off the air since January 16th, citing
copper theft as... Oh, my phone and my display.
Here we go again. As well as damage to its transmitter.
So... If you're a fan of the station, which utilizes
Westwood One's 24 -7 real country format, there
is good news, however. Listeners can still catch
the station online. We don't know when the station
will return to on -air operations, but Radio
Connection Live has learned that the damage not
only affected the grounding infrastructure for
the station, but many of its transmitter components
were also damaged. We at Radio Connection Live
report on stories like this often and will keep
you updated on this breaking story as soon as
new information becomes available to our newsroom.
There's something that Preston said to me that
I want people to know. Mr. G? Please mention
what you told me before we taped this file for
you from this past Monday. Yes. So, basically,
and that episode is now live in podcast form
and it's for all affiliates too. But anyway,
basically, when we prepare news stories like
this, I do want to fact check. So I read the
article from Radio Insight and it said there's
no mention on the website or social media that
they are still in existence. Well, sure enough,
when I read the story on Friday, late Friday
was proofreading and making the corrections to
the file. I looked at said website. I used all
my. accessibility navigation keys and what i
was you know told in my statewide computer training
back in school and there was no mention on you
know the top of the home page or anywhere on
the site for that matter there there was a listen
live link that was showing but there's no message
saying that hey our Over the years, you know,
it's down due to this and this. Please continue
to our content online. There is no word anywhere.
So that's what I call mistransparency and miscommunication.
I wouldn't call it mistransparency. I don't know
if that's a word. I would call that miscommunication.
Oh. A lack of transparency. I would call it a
lack of transparency, not mistransparency. I
don't know if mistransparency is a word. Somebody
can find out and let me know. I feel pretty confident
that it is not. I think what you are looking
for is a lack of transparency. After hearing
this, I think somebody will. But lack of transparency
would be more appropriate. And this is what I
was telling Mr. T on Monday. Yes. So we talked
about it then. That got my blood boiling. Yeah,
I think me too. When I called him Sunday. It
was bad, but... Mr. J, go ahead, please. Something
to think about. I... just... I mean, I guess
I shouldn't be shocked that this kind of thing
is even happening. I shouldn't be. I knew that
was coming. But the fact that This has now escalated
to actually damaging the infrastructure. Equipment.
Transmitting? Yes, the equipment. Yes. That's
a lot worse than... Not that copper theft isn't
wrong or terrible, but this makes it infinitely
worse. It's actually a felony? According to LA
Metro, if you steal copper from infrastructure
that is governmentally owned. Wow. They said
so on their own blog. If you're caught, you're
going to get in some trouble. Yes. That's basically
what they said. That makes it a felony based
on what I read. It's not a simple $5 fine. And
I'm making up the money. No. Right. I'm making
up the money. This radio station, I don't know
if you would technically call it government property.
So, I mean, there is that distinction, which
sadly... uh would hold up legally it is owned
by a public company it's owned by a public company
but it's not governmentally i don't believe based
on my knowledge of what was told to me during
the airing of the program that it is governmental
that is a governmental agency Yeah, okay, that
makes sense. And to be honest, I'm not sure what
their NASDAQ's employees... Well, that's where
your tool would be of value. The station itself
wouldn't have one. No, the station itself wouldn't,
but the company that owns it would, if they wanted
to. It's not a requirement. Right. You don't
have to be listed in the public stock exchange.
To do business. Nope. You could decide to take
your company public like that, but yeah, I don't
think that they have. So just a little errata
for you. This goes to the transparency and the
human in the loop must know what's going on.
And making the right decisions, i .e., we better
update our website because our infrastructure
is completely down. I mean, even if they were
able to get a message up on the air itself. We
don't know if they even did that. Right. Based
on my reading of that, based on my reading of
that, they can't even do that. The thing's just
gone. Yep. Cooked. Ugh. Fried. Yes, so... Flied.
Basically, all that rolled into one saying, well,
basically, we don't give a fuck if listeners
can't find us. That's basically the reading I
got. Yep, me too. Like I said, I read the publishers.
Inside comments and I checked for myself for
verification before I told you so we're on the
same page Sorry I'm just being communicated with.
Okay. That's okay. God. But yeah, I almost took
one when I read that. Even before I turned the
whole thing into Braille. I'm like, wait. It
just said what? Where's the... Where's... Alright,
this thing is jumping. Yeah, it's jumping. You're
gonna have to wait, bud. Sorry. This thing's
jumping. I don't know what's going on. I don't
have time to deal at the moment. He's going to
ask me what I ate and it's been practically absolutely
much of nothing all day. And I got to leave in
about an hour. A little over an hour. I was just
lost for words. Gentlemen, I read that even before
putting it in the Braille, and I was just lost
for words. Yeah, totally. Like, that's totally
unprofessional. Why is this thing jumping? Uh
-oh. It feels like it's jumping. Wow. Well, remember,
mine was just connected to a display. and was
giving me some issues there. But my display is
off and out of the way. Mr. J, any final comments?
Anything that you want to bring up before we
play Files and call this program good? I think
I'm fine. Well, the only thing that I ask is
that you clean that up and write it the way you
want it presented. And I'll work with you with
Braille so that you can tell me where headings
and things go. And then you can drop it in my
folder when it's ready. And then we can do it.
And then we'll figure out what podcast it's going
into. Right. Right now we're penciling 269, but
we'll see. Mr. G. Yes, I was going to say, are
we covered? Because I do need to make a call.
One of our NFB members is interested in getting
her house vouchers. So I'm going to help her
out with that. Well, then take us out because
I'm done and I have to leave in an hour. So I'm
now time sensitive. Yes. So please. Yes, right.
I was going to say yes. I got to leave in an
hour. Yes, I'm going to say I'm covered. So,
folks, this has been Security Box. Yes, I'm working
on it. Folks, this has been Security Box. We
say thank you for listening. We hope you enjoyed
today's program and this ever -important discussion
all about AI and the future that we are building
together. As always, if you have any comments,
please reach out to our comment line at 888 -405
-7524. You may also email jaredrmer at 986mix
.com or tech at menvi .org. And you can also
WhatsApp Jared as well at 804 -442 -6975. And
as always, you can catch past episodes on Jared's
Technology Podcast Network in your preferred
podcast feed. And for more exploration in the
landscape, please tune in to Throwbacks at Night
every Saturday at 8 p .m. Eastern on 96Mix server
number 3. We do have a company security hour
at 9 p .m. Eastern as well. So make it a good
and safe week. We'll see you again in two weeks
for another adventure across the landscape. So
on behalf of all of us here, this is Preston,
Jared, Terry, Nick, and all of you. Wherever
you may be, we say thank you for listening. Make
it a good and safe week. And as always, watch
those links and be safe and be aware. Thank you
and make it a great day, everybody. that help
us keep this podcast up and running with resources
thanks for listening everybody i'm just gonna
say it we are never getting rid of deep fakes
and i think that's honestly the truth i'm nick
espinoza your chief security fanatic and let's
dive in now There's a really good write -up on
this in The Guardian by Priya Bharadia and Aisha
Down. And quite frankly, we're going to start
there. But I do have a lot of thoughts on this.
And if you didn't know, millions of people around
the world have created and shared deepfake nudes
on the secure messaging app Telegram. That's
according to a Guardian analysis. And basically,
this is coming because of the spread of advanced
AI tools as it's industrializing essentially
deepfakes online, not to mention the abuse of
women. even men and everybody else. Now, The
Guardian identified at least 150 Telegram channels.
Basically, these are large encrypted group chats
that are popular for their secure communications
that essentially appear to have users from countries
all over the world. We're talking the United
Kingdom, Brazil, China, Nigeria, Russia, India,
and on and on and on. Some of them are offering
nudified photos or videos. for a fee. So basically,
you could upload a video of any woman, for example,
and the AI will produce a video that basically
has her performing sex acts, or just making her
nude, all these different kinds of things. Others
offer a feed of images like celebrities, social
media influencers, just, you know, ordinary women
in this case, essentially turning them nude and
making them perform sexual acts. Again, the AI
obviously generating all of this. Now followers
are using the channels to share tips also on
available deepfake tools. And while there's basically
been Telegram channels that have been dedicated
for quite some time to distributing non -consensual
nude images of women, now with the availability,
and it is a widespread availability of AI tools,
means that essentially anybody can instantly
become the subject of graphic sexual content.
that could potentially be viewable by millions.
I mean, it was a great write -up. They had more
in this, but let's dive in because the crux of
this problem, and that is just one subset of
the deepfake issue that we have. That's just
the latest generation is we're seeing nudes everywhere.
Grok, which is XAI, X aka Twitter, aka Elon Musk,
has a massive problem with this. They're just
being looked at now by multiple countries, including
the EU, Canada, and others. This goes above and
beyond that because deep fakes have been around
long before this new generation problem. And
so here's why I think it's unfortunately a fact
that we are never getting rid of this. Because
if you think about it, the same advances in machine
learning that power this kind of fraud also underpin
the legitimate tools that we would use for things
like film production, accessibility, education,
marketing, even visualization in the sciences.
uses these kinds of tools. Generative models
are becoming cheaper. They're becoming faster.
They're more widely embedded into everyday software,
oftentimes running locally on your computer,
meaning you don't have to go to the cloud to
generate a lot of these things. And I went looking
to see if I could find offline image generators,
and I found a ton. I'm not listing any of them
here for obvious reasons. Now, once a capability
basically becomes decentralized and therefore
has that dual use legitimate or or criminal,
it can't really meaningfully be removed, right?
Because you would also be dismantling the broader
digital ecosystem that it depends on it. If you
can't use it in crime because we are basically
regulating it away, we also then couldn't use
it for things like film production, legitimate
film production. Even aggressive regulation can
only shape how deepfakes are used or labeled.
It cannot erase the underlying techniques or
the countless open source implementations. already
distributed globally. The Chinese had a shot
across the bow the other year with deep seek
for large language models, a chat GPT, et cetera,
competitor that you could download and run yourself.
It was a huge problem. I did videos and segments
on it, not to mention it's censorship and bias
and all of that. But going back to deep fakes
on top of all of this that I just said, the internet
itself. is optimized for replication and anonymity
and speed rather than enforcement of laws or
even simply the truth. Content can be created
in one country and then it can be hosted in another
country. It can be mirrored instantly somewhere
else and then it can be shared millions of times
before any kind of moderation or legal response
is possible. It's the same issue with disinformation.
A ton of people read disinformation, think it's
true. You believe that confirmation bias and
when the traditional news media catches up to
fact check it and say it's fake. How many people
get that memo? And the originators of that deep
fake are almost never held accountable at all.
Oftentimes, they're not even in the country.
On top of this, detection tools will continue
to improve, but so will evasion techniques. This
is cybersecurity 101. So it creates a permanent
arms race, just like cybersecurity, where perfect
prevention is simply not possible. Statistically,
operationally, it's just not possible. And basically,
as long as there are incentives, whatever those
incentives are, think like political influence,
financial fraud. harassment, entertainment, even
notoriety. I mean, people just want to be internet
famous, right? There will always be people willing
to produce and distribute deep fakes for whatever
reason that is, whether they're nude or making
the president of the United States do something
he didn't say or do. All of these things we've
seen countless times over the years in the AI
era. So what chance do we really have here? And
I think... We have one slight maybe chance because
I think there is a realistic goal and it's not
elimination. We're never going to eliminate this,
but it could be resilience. But it's going to
take all of us, I think, working together. So
if we're building things like social, legal and
technical systems that can do things like reduce
harm and establish accountability, maybe help
people navigate the digital environment where
basically. What they're seeing is no longer synonymous
with believing, a .k .a. educating on deep fakes,
educating on the problems that these are. Finland
actually did this, and I believe it was their
2017 election, to great effect, where they were
able to cut through the massive amount of Russian
disinformation hitting their election system,
and basically the guy backed by the Russians
didn't win, right? They taught their country
how to spot deep fakes, how to spot fake news.
That's our only shot. I don't see it being realistically
possible, at least right now, at least in the
United States and some other places. But I guess
that's our only hope. So deep fakes aren't going
away. It's only going to get worse. And unfortunately,
I hate to be the Debbie Downer, but it's here
to stay. And I think we've got to deal with this.
We've got to address this. And most importantly,
we've got to teach the next generation why it's
wrong. And please like, share, follow me here
on Facebook and Twitter at NickAESP. And please
feel free to subscribe to me at YouTube as well.
And as always, stay safe, stay online, and please,
please, please attempt to stay private, informed,
and secure. Take care. Hey, everybody. Nick Espinosa,
your chief security fanatic here. Don't forget
to subscribe. And today, I want to talk about
Teslas. They're super hackable, but actually,
that's kind of good. Now, here's why. And this
is actually interesting. Just so much fun. This
is coming from Bleeping Computer. And if you
didn't know, there is a competition going on
right now called Pwn2Own Automotive 2026. And
security researchers have hacked the Tesla infotainment
system thanks to exploiting 37 zero -day vulnerabilities
on literally day one of the competition. Now,
this is bad for the record for Teslas that are
on the road right now, but it's good in the long
run. But we'll get to this. Here's the nuts and
bolts. First things first, the Synactive team
successfully chained an information leak and
an out -of -bounds write flaw to get root permissions
on the Tesla infotainment system in basically
a USB attack pattern. Basically, there's a category
for USB attacks. In other words, they plugged
in, they were able to take multiple vulnerabilities,
chain them together, and then get access basically
to root, meaning administrative access right
into the vehicle. So they also chained three
vulnerabilities to gain root -level code access.
execution on the sony xav 9500 es digital media
receiver remote code execution basically means
they can launch code through this and obviously
have the sony uh do things it should not be doing
etc etc now team fuzzware .io hacked a lp tronic
hyc 50 charging station an autel charger and
a kenwood dnr 107 xr navigation receiver obviously
all in the vehicle not Team Pedoworks chained
three zero -day bugs to gain root privileges
on a Phoenix Contact CH -ARX SEC 3150 charging
controller. Team DDoS hacked the ChargePoint
HomeFlex, the Autel Maxi Charger, and the Grizzle
E Smart 40A vehicle charging station. And that
was on day one. And this also means that there's
been hundreds of thousands of dollars of payouts
for successfully hitting this Tesla in so many
different ways. Now, for the record, vendors
have 90 days, and this is why it's good. They
have 90 days to develop and release a security
fix before Trend Micro's zero -day initiative
publicly discloses them after basically the zero
-day flaws are exploited and then reported during
the Pwn2Own contest. The clock is ticking for
Tesla to actually improve their vehicles. create
software patches, harden these things, and that
also means that Sony has to go back to the drawing
board, Kenwood has to go back to the drawing
board, Autel has to go back to the drawing board
to figure out patches and basically to close
these flaws. That's the good sign of this. And
the thing is, when these are published, exploits
are published, whether it's the CVE database
or another database, the actual code that they
use is in there, meaning I can copy, paste, and
essentially execute some kind of attack against
a Tesla vehicle in this way. That's why Tesla
is going to move as fast as they can, as is Sony,
etc., to basically harden and lock these things
down. That's why it's good in the long run. That's
why we do these kinds of competitions in the
cybersecurity community. And the Pwn2Own Automotive
2026 Hacking Contest focuses on automotive technology
specifically, and it's taking place. Today is
day one, but it's ahead of us in time because
it's in Tokyo, Japan this year. at the automotive
world conference so it goes through the 23rd
we're going to see more flaws come out on more
vehicles but tesla being one of the largest ev
makers in the world behind byd basically has
a lot of work to do and quite frankly I hope
they do it because the last thing I want to see
is somebody hack into a Tesla and drive it into
a tree or shut it down. And we've seen a lot
of vehicles over the years with flaws that we
can execute on to either gain root access or
remote code execution or anything like that.
My own self included, basically every. car i've
owned since the uh since the bluetooth era i've
been able to get into in some way shape or form
but fortunately the over the wire updating that
tesla and now more on automotive manufacturers
have is a good thing to basically fix these flaws
i can't tell you for years how many times i would
take a car in knowing that i had been able to
compromise it through the head unit and basically
there were no updates for the manufacturers once
it rolled off the lot they washed their hands
of it not anymore and that is good in the age
of hacking so there you go your tesla vehicle
has flaws hopefully not for long And please like,
share, follow me here on Facebook and Twitter
at NickAESP. And please feel free to subscribe
to me at YouTube as well. And as always, stay
safe, stay online, and please, please, please
attempt to stay private, informed, and secure.
Take care. Would you like to join us on the security
box email list? Several of us will post articles,
several may comment on the articles, and you're
welcome to join us to talk about what interests
you. Post articles, join the discussion, and
maybe learn something that you might not have
learned before. The subscription process is fairly
easy. Just send a blank email to thesecuritybox
-subscribe at 986themix .com or find a link to
the security box at 986themix .com under the
list for social media. This service is part of
986themix's email list. Come join us today. Want
to join us each week? Well, join us on Team Talk
on Wednesday, 11 a .m. Pacific Time, 1 p .m.
Central Time, where you can participate on the
live taping of The Security Box. What server
are we going to be on? Great question. We're
going to be on 98 .6 The Mixes. Team Talks server,
whose information can be found at 986themix .com.
You do need to have an account on this server,
and if you don't, follow the instructions to
get one. So come join us each week. 986themix
.com, our Team Talks server, in the Security
Box channel. And thank you so much for listening
to the podcast edition of our program. We would
like to thank the following podcasts and or news
websites for the articles. In which we may use.
Or blog. You may find links. To these. Under
podcasts. And sources we use. On our website.
At emailhostsecurity .com Ars Technica. Bleeping
Computer. Cybercrime Radio. CyberScoop. Crabs
on Security. Kim Commando, the Digital Goddess.
The Cyber Wire from N2K Networks. And the Fish
Labs blog. If... you have found something that
is not listed here that we should be looking
at, please let us know by sending an email with
the link to the main webpage. You may either
send your email to J -A -R -E -D -R -I -M -E
-R at 986themix .com or tech, that's T -E -C
-H, at menvi .org. Thanks, resources, for all
you do to put the information out so we can share
what you and others have to say in this industry.
Thank you for listening to The Security Box.
This is Jared Reimer. We hope you enjoyed today's
program. And we hope to see you again on another
edition of the program next time. We would like
to thank the following affiliates for airing
our program. The main network, 98 .6 The Mix
on the Independent Channel. If you are airing
our program and your network is not listed here
and you would like us to give you credit for
airing our program, please contact me. I would
like to do my best to make sure that all affiliates
get credit for airing the program. please feel
free to contact me using the contact information
given during the program. It is open to all listeners,
no matter what network you're listening on. Now,
stay tuned for a few tracks on the independent
artist side to round out the podcast. See you
next week. And thanks again for listening.