Welcome back to SuperCloud 3 live here in our Palo Alto studio. I'm John Furrier, Dave Vellante unpacking. Next generation cloud data security, obviously with security and AI. And now a generous AI, a lot of hype but a reality coming to the picture. We're going to try to break it down as the next gen applications hit the market. We're here with Jay Peric, CEO of Lacework. Keep alumni, great to see you. Thanks for coming in for a live performance. Thank you. Thank you for having me. So SuperCloud 3 security plus AI obviously part of the big picture. Security has got to be baked in all operations. That's kind of the table stakes. People talking about now, it's also a data problem. It's also an opportunity to build in a cloud native like experience. People talking about these things. But at the end of the day, the hackers are attacking on offense faster than the defense can keep up. So it's got kind of a pro game, but you got a developing market at the same time going on. Love to get your thoughts and perspectives on what you guys do in Lacework. So how you see this? Yeah, absolutely. So ever since the company's founding back in 2015, we've always approached and thought about securing the cloud as a data first problem. And that what's happening in the cloud is just constant chaos. There's so many things changing. You want to be driving faster and faster rates of innovation. The cloud provider, the cloud infrastructure, the cloud stack itself is also always adapting, always getting better, multi-cloud, different technologies. You've got different applications that are bringing in different types of services. And whenever the cloud providers themselves do their events, they launch a whole bunch of new capabilities, which is great for driving and building new applications, driving innovation, but then it creates a whole nother category and other set of facets on your risk model in your organization. So the only way we have always felt that you can keep up with potentially stay ahead of these security risks is to just drive this through processing, collecting and processing a lot of data. That's the only way to automate driving the security outcomes. You can't do this the old ways we handled security on-prem in our data centers. Talk about the old versus the new. And you have a historical perspective. We've seen many waves of innovation in the past. The conversation that's happening, well, that's all that's happening. It's still handsome though, you got that going for you. The old way comes up a lot. Like, oh, we don't do firewalls anymore. That's attacking us. We do it this way, zero trust, all these kind of new architectures are coming out. The perimeter's gone. It's more surface area. What are some of the old ways that have changed and what hasn't changed? And what are people doing that's on the right side of the historic wave here now? What are people, what are you seeing? I think fundamentally it's just knowing that where we are today with cloud and where it's evolving is just forcing yourself to rethink the problem or the solutions from first principles. And trying to copy and graft ways of doing things from an on-prem perspective into the cloud may help you when you're trying to first get started with the cloud as an organization, but they quickly become these speed bumps or these impediments that really then don't allow you to realize the value of the cloud, which is moving fast, being able to build these things, adapt, measure, iterate and just build better value for your customers. So I really think it's just one of these things where just go back to first principles, what are we trying to do from an innovation perspective? Know and think through how you're going to be compromised, how you're going to be attacked in the cloud with things like AI, you're generating a ton more data. And now you have all of the data that drives business value, but guess what? It's also very attractive to people who are trying to get in and get that data to do something with it. So you mentioned chaos. Chaos is actually opportunity, certainly for the attackers. It's also opportunity for the technology companies that can defend and help defend. So you're talking about AI or a security as a data problem. So explain where you get the data, what data are we talking about here? And I'm interested in next phase is how AI fits into that. Yeah, again, so ever since the beginning of Lacework in 2015, we've always taken this as a go find and get all of the right data that we need to then figure out how to drive those right security outcomes, put those outcomes to the right person who can then drive the action there in a automated kind of less burdensome, less scattered way and to make them more productive, right? To take this data and to drive more productive and faster outcomes for these security teams, for these developer teams. So where we get the data, it's pretty complex, but I would say there's one broad bucket of data that we get from the cloud providers, native services themselves. We get third party data. We get other real time telemetry. There's a whole set of ever evolving categories of data that we get.  And that's ever evolving as the cloud providers themselves offer more services, but then the application stack of the customers of the companies out there building on the cloud also are evolving. So that data lives inside your platform. You persist it, you analyze it. Now you bring AI and have been bringing AI to that data. Can you talk about what AI that is and how if when we see the AI heard around the world that changed how people are thinking about bringing AI. Yeah, absolutely. So one of the core use cases of where we apply AI and sort of machine learning to the technology is really inside of a customer environment, understanding, collecting all this telemetry and understanding what normal behavior is, what your employees are doing, what your machines are doing, kind of what are the operational activities that are occurring in your environment. And for example, John does this operation reliably every afternoon, but now, and he does it from this location, but now all of a sudden, wait a minute, he's doing it on the weekend and he's doing it from these three other countries all within like, you know, and this is a simple example, right? But those are the types of things that the system will say, hey, normal behavior is this. Now we find that there's this weird behavior happening with John maneuvering in the production environment. That is something you should probably go investigate. Again, this is a very simple example. The platform itself has many more capabilities to look for not as obvious use cases as that, like where there's little tiptoes happening in your infrastructure, which each one of those taps would be honestly not noticeable, but when you look at 14 of these taps, you've been comparable. Can AI mask that and sort of make it even harder to detect those anomalies? Absolutely. So when you have the other side of this conversation, which is, okay, so we use this technology to really sift the signal from the noise and to give practitioners and companies much more accurate things to go investigate and to go and protect against so that they're not working on things that don't matter, but think about the bad attackers out there, the attackers out there use this to actually mask or to be much more sophisticated about the types of attacks that they can do. And they can orchestrate things now with AI, maybe that they had to do manually through more sophisticated kind of training or scripts and whatnot. They can program these AI systems to explore, to discover in very innocuous undetectable ways or very minuscule ways, but then to put together a broader attack with a lot more steps because it's all data and machine controlled and orchestrated or guided, I should say. So steps for instance that could self form when they get to the other end. I mean, think about this outside of the context of cloud security, but think about just your own experiences with some of these like chat GPT and what it's done to help you write or copy edit an email or put together a presentation and think about how that can actually be used to socially engineer an employee and having a conversation. The perfect phishing app. I mean, you know, spam all of those things from a textual email perspective, we're going to see a whole, I mean, we've already been talking about that, that stuff's out there, but think about the social engineering verbal. Like, you know, you're talking to somebody you think is a human and it's not. Awesome example. By the way, my Netflix, about the time they got to that password sharing it's simultaneous access from all different places on my kids. You mentioned developers and I want to get into two years. We see a lot of activity on around the kind of super cloud and security data operationalizing data at scale is one of the conversations we hear a lot about more data, more leverage, more access to better things, goodness around that. And then the developers, as developers start building apps to solve problems with data, like having data available for developers, we're calling that the data developer is going to be more commonplace. And right now you're starting to see the beginnings of that in open source, a lot more activity going on, certainly in AI and open source, but we envision a future where the developer is going to be absolutely immersed with the data capabilities to embed into their applications. What's your reaction to that? Absolutely. I think that that's already happening in many companies today. And I think that as we collect more data, we understand it through these systems and you can discover and explore and drive new features and you can enhance that customer experience because of what you can do from data. Think about these companies whether it be Facebook or a Netflix, what value you get as a consumer as a company because the ability of a company to mine that data to really find the right path ahead for you to be like, hey, I can get more value from this insight that you get from the data, right? This is back to, Lacework is today you would have to toil through looking through all of these logs and data and graphs manually. And what we often do is take that alert volume down by 100X, right? So you may be dealing with 1,000 alerts a day with kind of conventional systems, but we can give you that like 50 or 20 or 100 alerts that really matter down from that 1,000 that saves you a ton of time that putting it in front of the developer in terms of what to go action versus chasing a bunch of ghosts is massive impact to the developer. The observability market, we've seen the hype of that, obviously there's some consolidation, but the game gets changed now with more apps and more telemetry coming in. I was talking off camera to, I won't say the name of the person, the company, but that we collect everything, tons of telemetry data. They use only a fraction of it. They can only get to it. Their hope is AI will help, the generative AI will help pull that forward, pull that value forward. So that's one, a lot of data being hoarded and now stored, so more data storage happening again, never stopping. That's the key area as you start to get the telemetry coming in from applications is a real promise area. I know you have a lot of experience in that area, been there, done that. Where's it going next? Where's that puck going to be where people can skate to the puck? As we start thinking about, as we get more data, I can see some value being pulled forward. What's that next step? I think it's a continuum to be honest with you. I think we're on this curve of kind of evolution and I think the more data we get and then there is these from a supply perspective, there are these disruptive technologies, so gen AI and the large language models themselves, but there will be things after that. I think we're very enamored and very entrenched and kind of enthused by what's currently here, which at GPT and others, but this isn't, this is just the beginning of the beginning in my mind. And there's a whole set of things that are going to come out of this as people experiment. And I think right now we're gonna be in a phase where lots of experimentation is gonna happen. There's going to be a lot of stuff that's what I would describe as kind of trinket and I would say it would be, it would be fun to use for a little bit, but it's not going to drive a lot of long-term value and deciphering that data problem. And there will be then other use cases that more emerge that are immersive that actually change buying behavior as well as user behavior. And I don't think we've seen that yet in the enterprise when it comes to security. Jeff Jonas was on theCUBE for this event. He said all these hot startups are getting a term sheet by the time they get their money, their features out of business. Disrupt it. Because the change. The rate of change is something that humans do not, I feel like we do not understand how fast this space is actually changing. It is changing so fast, right? So you can have an idea on Monday and it can be disrupted by Wednesday. This is the long-term value play. I think this is an important point. As you look at, try and identify where that puck's going, what's a trinket as you say, or what's a fad, what's real, what's that foundational? How do you look at that? And what's your vision for how lacework's gonna capture that? Because again, this is an ever-changing thing, but the foundation has to be laid. The pace of play in security is huge. You can't fake it until you make it in security. This is a whole nother ball game. No, and I would say there's a couple of points here to cover, which is one is, we again have started with this premise where it is security is a data problem fundamentally, right, through and through from start to finish, and how you drive insights from there will change over time, whether it be graphical through UI, whether it be other insights through kind of action, whether it be interacting and exploring and discovering things in that data through search or through a kind of large language model interface to it. I think these are where we'll constantly be experimenting and these will be platform capabilities that influence and change all of the user experiences in the lacework platform. And then over time, what we have to think through is from a customer perspective and an industry perspective, there's a whole new cast of data that's gonna get created. There's a whole new set of threats that are gonna be created, talking to our current customers about what they're worried about from a threat perspective, right? Which we talk a lot about the value that Gen AI is bringing from a top line or a new business outcome perspective, but you also have the other side of this conversation which is, hey, how is this stuff gonna be used to take me out in the business? Because now there's this new superpower that's been granted to everybody, right? And you have to think about both sides of this equation. So how are you gonna protect your systems as you build these new systems at the same time? I don't think we can talk about these independently anymore. So who ultimately do you think benefits the most from AI? Is it defenders or attackers? I think it's too early to tell, but I think it is right now. I think it is equal. I want to ask you about applying large language models and Gen AI is specifically in security. Sometimes you watch TV and you see somebody and she or he is very articulate and forcefully say that person's smart and the tone is so confident and you believe them. I feel like chat GPT in particular has similar tone. So you have to be careful about how you apply it and especially in the context of security. It's like Jeff Jonas said, it gives you different answers every time. So where should we think about or do you think about applying Gen AI in security? I think in certain fields like security and there's going to be other fields which I think are pretty obvious. The efficacy, the accuracy of these technologies is going to really matter, right? When you're putting together and you're looking through data and applying these technologies in your 75% accurate or 80% accurate, that's not good enough in a security context. So how do we take this technology? How do we mix it with other technology? How do we remember the system learns over time? How do we remember those learnings and keep getting that feedback so that the efficacy of the outcomes that Gen AI can be better, right?  But to have a system that really does drive high accuracy I think is really important because if you are not accurate and it's a fun user interface but you're only right two out of three times then the useful life of that over time it may be cool to demo and you may get people to experiment with it but when you actually are called and you're in the trench dealing with something and one third of the time that thing is wrong or it sends you down the wrong path it's going to be a very frustrating user experience and that could be business, severely business impact. And that accuracy, is it not a moving target? Another thing Jonas said is entropy is winning. This is randomness and the data is problematic. So once you get to 95% accuracy it's not like you're not assured of maintaining that level. Yeah, and that's where the feedback from the systems, from the practitioners is got to be incorporated has to be incorporated in the systems, right? We have to learn together. This is sort of a shared learning model where the users, the threats, the technology all have to be harnessed. Those are also signals that these systems in a company like Lacework we can harness and we can build in advance and mature the models that way too. And the human plus AI is better than AI by itself. That's the key part of that accuracy and some fields that good enough is good but not in those accuracies needed. That's a big thing. Correct. Let's bring it into the cost piece because in AI and now security it's growing compared to the rest of the market. Obviously every security is never slowing down like data, right, never stops. But accuracy but also cost to run workloads. If there's an AI component it might cost more to run it over there versus there. So cost to manage and secure services is a big deal. What's your vision on how that's going to play out and how do you think about that cost equation? Because cost is a relative term but at the end of the day it could be massive costs. Yeah, absolutely. I think it's a trade off that every business is going to make based on that part of what's a priority in the company, right? Because oftentimes you may put your cost into new things where you're really trying to gain market share or you have a competitive threat and then you're going to optimize it later, right? I think it is really hard to kind of invest in optimizing thing when it doesn't have product market fit or it's not scaling yet. That's probably the wrong trade off, honestly. So I think it's going to really depend. I think we're in that phase right now where there is innovation, there is support for kind of experimenting with things and dollars are going to shift into this for experimenting with the AI stuff. But hey, keep it secure too. So we need to put some dollars behind that and people behind that as well. But then we'll optimize elsewhere in our budgets to fund that. That's the trade off in the conversation I hope we have more of. But also I think these things are on a curve where if you think about the cost of running these types of models a year ago or even three months ago versus where it is now versus where it will be a year from now it is dramatically shifting and lowering right now. So what is your expense envelope today? What you can do with that dollar, six months from now is not just 10% or it's a lot more. Security's held up pretty well generally throughout this macro headwinds. Yeah, absolutely, it's definitely still top priority. AI was sort of getting quiet there before GP10, now all of a sudden it's shot back up all across. But you're seeing other, you're seeing trade offs. People are saying, I see in the data little less RPA than I saw before that could be some cannibalization, automation. Automation. You're certainly seeing less laptops we have for the last service. It seems like they're overall saying we're going to shift things and as you say put them toward machine intelligence to figure out what we can do with it. And as companies figure this stuff out and they unlock value, they build more products and they're able to deliver more value to their customers then they're going to feed this back into their budgets and invest more, spend more, et cetera. So I think this is all part of the cycle we've seen. And we love open sources growing, it continues to be great. So that's a big factor for telepathy. It's a big part of the disruption in AI is the stuff that gets constantly open sourced. Yeah, good stuff. Final minute we got, give a plug for the company. What's your vision? What are you guys working on? What are your key things you got going on the market? Yeah, absolutely. I mean, our vision here is to be the security platform for the cloud. And for us to really approach all of these security problems that companies face around the world in this fast moving, kind of constantly changing cloud environment with a data first or data at scale approach. And we wanna do it in an intelligent way where we can bring things like ML and AI and drive these workflows so people can focus on the things that matter and do the right amount of work and not waste and feel a lot of toil in the day job to secure their infrastructures. So things that we're working on honestly is just really staying focused on a set of outcomes to help developers, these different people out there. So what can we do to help developers write more secure code and to not waste time on securing things that are never actually running in production to helping people that have to be paged at two o'clock at night and have a page that says, hey, I've got a threat. I've got a breach happening right now. Like what do I do with this? How do I mitigate this? We had a customer recently that said they were using Lacework for part of their environment and they weren't using Lacework for another part of their environment. They got breached and they said, hey, if I were had Lacework in this other part of my environment, I would have found the attacker in minutes and kicked them out versus spending five weeks to investigate what happened in that breach. And they still got a case to join as they say and do recon on the hack. They got to go investigate so you can get early warning detections with data. That's data native market. So everything we're doing from a data and an AI perspective is really trying to secure everything from the code, from the developer all the way to the cloud, the production environment. So that's our vision. That's what we're working on. Tons of technology, tons of products that accomplish that. Yeah, perfect super cloud conversation. Bring data native to the scale, scaling up the data as people store more. I mean, data is the competitive advantage. That's what we're hearing in the AI. Jay, thanks for coming on SuperCloud. Thank you. Okay, I'm sure Dave Vellante, we'll be right back with our wrap up after this short break.


Item Number – SCP-388 Object Class – Euclid Special Containment Procedures – SCP-388 is to be kept in a locked safe in a room guarded by at least two armed guards, instructed to refuse access to any unauthorized personnel. Use of lethal force is permitted to this end. In less undergoing experimentation, SCP-388 is to remain outside the influence of any other SCPs demonstrating properties capable of modifying physical laws or drawing energy from unknown sources. Description – SCP-388 consists of a foldable nylon frisbee of the type commonly given away as promotional material, in this case, bearing the logo of the banana boat Santan Lotion Corporation. SCP-388 appears to be immune to damage. During testing, it has been able to withstand high caliber rifle shots, immersion in high acidity baths, and sustained temperatures of 3,500 degrees Celsius. In all cases, it would spring back, unharmed, to its original shape. X-ray crystallography reveals the molecular structure of SCP-388 to be completely normal nylon, supported by a ring of metal appearing to be aluminum. SCP-388 was discovered after witnesses in a local news report in the town of Rue, claimed a power line was downed by a UFO. Agents embedded with maintenance crews investigated, and found the concrete pole was sliced cleanly, with no tool marks, prompting full investigation status. Original records obtained from NORAD revealed no abnormalities, as data expunged, typically associated with data expunged. The investigation was nearly terminated, until agents posing as reporters interviewed the Rue family, originally questioned in the news report, and their child mentioned the entire incident as being caused by a frisbee. Initially skeptical, efforts were nonetheless taken to verify this claim, with initial confirmation made on data expunged. A full week of helicopter searches of a neighboring city, and numerous retrievals of unremarkable frisbees from rooftops eventually yielded results. Unfortunately, Agent B was fatally dismembered by SCP-388 when Agent B threw the object down from the roof. Under the guise of replacing a septic tank, SCP-388 was dug up from its resting place 5.5 meters below the yard, and carefully brought in for containment. SCP-388, when thrown by a human, appears to travel as a normal frisbee wood for a distance of approximately 3 meters. After this distance, SCP-388 immediately begins glowing bright white, and accelerates until its velocity reaches approximately 8 meters per second. SCP-388 will proceed to cleanly slice through all intervening matter, regardless of consistency, until eventually coming to rest. Current theory holds that it loses speed due to friction between its top and bottom surfaces, and the weight of material pressing down on it as it passes through objects. SCP-388 does not differentiate between matter and test subjects assigned to catch it. Inquiries into the potential use of SCP-388 as a weapon have been declined, in light of the obvious difficulty of retrieving it after its first throw. Lesson complete. If you missed the previous orientation, go watch SCP-387, living Lego, right now. Or for the complete course, watch this playlist.


Hello, John here and I'm currently on the Isle of Sheppey.  Why am I here you might be thinking? Well this bridge in 2013 was the scene for one of the UK's possibly even Europe's largest multi-car pile-ups, involving upwards of 130 vehicles no less. Right, well it's time for me to drive back home. I'll hand over to you John in the studio. It is a foggy September Thursday morning and traffic is flying along the A249 over the Sheppey crossing. The road is a main artery for some 40,000 inhabitants on the Isle of Sheppey to the rest of Kent. The bridge the traffic today is flowing over is one of two road links in the area and can be deadly in poor weather. This was the case on the 5th of September, a thick fog had descended upon the Sheppey crossing. Visibility for the cars on the bridge was not far beyond the bonnet, which common sense would dictate to maybe slow down but for many drivers getting to their destination quicker was more important. At around 7.15 a car crash initiated a 10 minute long pile-up where a seemingly endless number of crashes, bumps and shunts would bring the crossing into national news and would not only show the stupidity of the drivers but also a few inherent design flaws of the bridge which was at the time still fairly new. Background, it is 2006 and a new bridge is being unveiled as part of a multi-million pound improvement project modernizing a vital link between the town of Sheerness and the M20 motorway. The Isle of Sheppey throughout its history has suffered from connection issues to the rest of the Kent County region. This is due to the island being surrounded by the Thames Estuary to its north and to the south the Swale Channel. This part is closest to the rest of Kent and is also a vast marshland, oh yes and is around here on a map. In the UK roads that connect population centres are divided into three categories, motorways which are large multi-lane routes that connects regions, a roads which connects towns and villages, these can be multi-lane or just one lane in each direction and b roads which are minor roads that connect smaller settlements. All of these types are numbered and the routes that connects the M20 motorway and Sheerness is called the A249. Sheerness is a vital financial centre for the island due to its port. It is one of the largest foreign car importers in the UK as well as handling thousands of tons of fruits and meat products from all over the world. As such road links are vital to the area but before 2006 the island's main trunk route had one hell of a pinch point, the Kings Ferry Bridge. The Swale Channel which Kings Ferry and the 2006 crossing bridges span is used as a shipping route which would require a bridge design to account for this. The Kings Ferry was a lift bridge design which carried the roadway and a single track rail line. Now this is fine and all but for one thing around 30,000 vehicles used the crossing per day and up to 20 ships navigate along the Swale every day as well. Which means traffic had to be stopped to raise the deck and allow a vessel to pass underneath and this took roughly 20 minutes to complete. Not something ideal for a major trunk route. As such a new 20 million pound bridge was commissioned. Instead of a lift bridge the new crossing would be built tall enough to allow ships underneath without stopping the flow traffic. It would be around a mile long have two lanes in each direction no street lighting and no refuse points or hard shoulder. The two directions were separated by a central barrier. Initially a tunnel was considered but the local wildlife impact put an end to the plan and thus a bridge was conceived. Great you might think but this came with a new added problem because of the steep gradient needed to get the required height over the Swale estuary. Vehicular traffic making their way over the bridge are unable to see the summit. This opens the risk of accidents as any incident beyond the summit can't be seen by vehicles approaching the crossing. To add more visibility issues the roadway was unlit meaning problems in weather conditions such as heavy rain mist or fog. The latter was a common sight on the Sheppey crossing as the surrounding area was marshland a breeding ground for fog. But I digress. The new bridge was opened in July 2006 and proved to be a vital addition to the island's transport infrastructure. The earlier Kingsbury bridge remained giving an alternate route and access to Swale train station. The disaster cars kept on coming. It is the morning of the 5th September 2013 a thick fog had descended upon Sheppey and the crossing over the Swale. Visibility was less than 20 meters. Many were seen driving at or even in some cases in excess of the 70 mile an hour limit which is pretty common for normal weather conditions but with the fog obscuring the road ahead combined with the steep gradient of the bridge driving at the speed limit was just reckless. At around 7.14am two cars on the van made contact with one another and with no hard shoulder to pull into they partially blocked the carriageway. Some traffic were able to react in time and swerve the crash. The fog now with visibility of less than a meter in some places were blind following vehicles. Witnesses saw car after car disappear into the fog only to be followed shortly by the sounds of screeching and crashes. Many cars did not put on their fog lights. As a side note for all you non-Britz here's a quick mention about fog lights. In UK it is a legal requirement for all cars to have one rear red high intensity fog light. Many cars have front fog lights as well but they aren't a legal requirement. But although legally required on UK cars many rarely use them. My personal theory is that ironically it's illegal to use them when there isn't any fog because it can dazzle other road users. As such many just don't bother all together.  Ask someone you know to show you where their rear fog light switches. I reckon around 70% wouldn't know. With several cars and vans now in a mangled mess countless numbers of following cars trucks and vans continued rear-ending more and more stranded smashed up vehicles. The first 999 calls came into the emergency call centre all whilst the cars continued to pile up. Here's a little snippet of the audio recording of one of those calls. Crash cars backed all the way along the south over the summit and onto the approach section of the bridge. After roughly 10 minutes of the sounds of crashes, tires, screeches and crunches it was mainly over and upwards of 130 vehicles were damaged with tens more stranded. But minor shunts would still continue even after the police had arrived. Anyone who could got out of their damaged vehicles and started wandering around. Rescue and recovery brought a whole other level of logistical issues. The sheer weight of vehicles needing removal required an endless number of flatbed trucks. To deal with the walking wounded police guided them to a makeshift triage where they would be assessed. However some required cutting out of their cars. The more serious injured were stabilised before transport to hospital. In total 69 people were sent for medical care with the majority being discharged on the same or next day. Only one person was kept in for more than a few days. By 11.05am all casualties were off the scene and miraculously no one was killed. Even more amazingly especially when looking at the aftermath pictures was that the bridge was reopened at 5.30pm the same day. Aftermath. Even though the bridge had very little damage the cost was still into the millions of vehicle expenses and the cost of rescue and recovery work. The police looked to investigate what the cause of the crash was. Motorists were thought to be driving recklessly in the thick fog. Although controversially instead of criminal proceedings Kent police decided to go a more educational route by offering the opportunity for the offending drivers to attend the driver awareness course. But highways UK also had some questions to answer. Right from its first day of operation questions have been posed about the bridge's safety. With its lack of hard shoulder, steep incline, lack of lighting and no warning signs. The chief police constable called for a speed reduction along the bridge. Something that still hasn't been done. Now where would you rate this disaster on my scale? And my legacy scale? I'm going to say around a four for the former and about a six for the latter. Maybe less if you're not from the UK. All videos on the channel are Creative Commons attribution share like licensed. Playing liquid videos are produced by me John in the currently sunny southern corner of London UK. I've got Patreon and YouTube membership so check them out if you fancy supporting the channel financially and I've got a Twitter as well if you fancy going on there to check out some odds and solds and hints on future videos and all that's left to say is thank you for watching.


It is now time for some Python on hardware. There was a lot going on so Get comfy Your mail the snakes have to wear belt buckles. Well so Brian, Alyssa JP and Scott were at the hackaday super conference at super con There was a lot of fun people that we know. This is Brian. This is German Spot lots of Adafruit hardware in there. This is mob there and there's some amatronic ears and every Person at super con got an edge batch. So this has machine learning on it You can speak into it and it can recognize words can also do all sorts of other things with machine learning also runs circuit Python also runs Arduino and the badge hacking Be gone. So there are lots of different things. This I think was a To detectors, this is an air quality it was sensor and because we have like a grove connector You can plug grove sensors right in and so it was really yeah grove stemma quick Here it is displayed there. Here's here. Hello. My name is 850 first per million of co2 updated the name badge code Aaron made this great badge hack that controlled the Trash picking but the bots that she's working on. Yeah folks made shark controlling Bad hacks and one of the things, you know, we We sent these out and we're like well Let's keep an eye on Twitter and figure out can people easily do something with it and a lot of times People say the thing that you know You hope this is the experience they have but then they kind of crystallize it in just like you know 120 characters So this is kind of nice my humble opinion the unsung hero of super con was the Adafruit edge badge circuit Python made extremely accessible to customize with only a micro USB cable have a look at transfer flow part yet But we'll give it a go soon. Did I mention how cheap it is? So that's what we like to hear how easy it is a low-cost it is and how you can get started so fast Geek mom was there electrical projects. Thank you. You may just have reason with circuit Python library I look forward to using machine learning to your demos of voice recognition look amazing so many profits and abilities It's hard to know where to start but of course I always start with LEDs Found an edge badge and swag bag started researching get repos and documentation to program and realize it was circuit Python No documentation needed imagine that imagine hearing no documentation needed She said a code dot pie on mass storage zero barrow to entry super con But not everyone liked the edge badge What? some random dude on Twitter said it's not simple and violates rule 9 he came up with rules And so I had I tweeted back and just like but it's so simple and it's all the stuff But this guy didn't like it. So while he was Trolling me on Twitter. I just put his words on this badge. So I wear this right all the time I don't know why you're wearing that this morning. That's what it is and like nothing else. That's right Scott did a talk there at super con and then in our newsletter and on the blog I think we got to the blog post this week is exploring hardware old and new with circuit Python Scott did a full talk Brian Stacey says we know Brian in discord took a photo. This is a lot of the hardware that was there And this set a special place in my heart because I started hack today 15 years ago Yeah, I started this site 15 years ago I don't have anything to do with it now besides like I read it And I designed a logo and I always thought a lot of these things were gonna be possible with it But it's nice to see all the different logo variations, but also all the people coming together At a cool event and it was great to have our stuff there as a difference It's like it was really neat to see this thing continue on, you know You start something 15 years ago, and you don't know what's gonna happen. This is what happened the badge the hackaday badge it uses Tiny USB and so that's one of our projects that we've released and worked on and tiny USB was in news because the FOMU FPGA is that correct as well Which is great more more platforms other circuit Python news. There's another board It's now up to 88 boards all together to circuit python.org slash downloads. This is the XN box boards, there's a couple of them This is Maxim's feather the feather ecosystem continues to expand and grow rapidly. We'll talk about the feather contest More community projects were posted around so we tried to get them in the newsletter as fast as we could this pulls the Reddit site and There's a subreddit called shower thoughts and they're kind of insightful and it's on a screen this was made by a community member and it is a Circuit Python plant water using cricket. So it just automatically waters the plants using circuit Python This is some overwatch Costuming we're seeing more and more costuming made with Adafruit stuff new pixels More heart beating projects, so we had one on our site and then this one is they're testing it to see how it works with This latex Yeah This is one of my favorite ones. This is a goggle project and it uses 3d printing and new pixels and If you think this is you know, this is it. Nope, they're just getting started So not only does have a physical effect on the the eyes, but as you can see they light up as well This is so cool and that neat people love iris. Yeah, that's nice and then this is some web BLE that Coding couple on Twitter was experimenting with so you can use Moo. You can use circuit playground Express and you can do things like do a color picker right there via the web browser And Bluetooth and Bluetooth. Yeah, and then I also wanted to show The video from Nicholas. He's working on us with a radio project So it's a one-minute demo and I thought I would just just play it. So See on the other side here So this is a very quick demo of the work I've done today on the Adafruit radio module I've got two laptops my think pad that's connected to this blue fruit device and Over here is another blue fruit device connected to my Mac book, which is running new and I've connected Made a serial connection to the device and it's reporting the things that it's receiving on its radio And over here in the rappel just three lines is all I need to actually send a message I import the radio class I instantiate the class and then I simply Send the message and over here We now see that it's been reported four times. That's a book. I know how to fix that I hope in the not-too-distant future, but It works and that's the first step It works and then I need to make it work properly and then I need to make it work properly with documentation and tests So it's going quite well. Thanks for watching Katelyn's dad made this adatote Pretty much anything that we put on Twitter Katelyn's dad can immediately make a project about this So maybe we'll make a neopixel to it one day Over on Haxter, they posted about the STM 32 f405 and it is the fastest or one of the fastest circuit Python running boards We have and over on digikey Sean Heimel did a video about this board and more so head over to digikey's channel youtube.com Digikey you check this out. There is a Python and education discord. We joined up over there This is kind of neat because it is yet another place online where you can go and talk about Python This is specifically geared towards educators. This is the open MV project uses my Python and also has the camera Working with it so you can do people detection So very cool machine learning thing for edge devices The latest issue of micro mag is out. It's a free download But you can also buy it subscribe and you can support it and then lady Ed and I wanted to ask you about this because this made the rounds Yeah fatal fury. This is this a move that you do with Mortal combat is like. Yeah, you pull out somebody's like heart and show to them This is this is the ASP 32 thing or what? Yeah. Yeah, so I guess the USB 32 You can have from you know the firmware sits on a flash chip And you can encrypt it and normally, you know It's a metric encryption so the key has to be kept a very secret But it's possible to glitch the key out Using a glitching attack To try to get it to to extract what the key is so you can get the you can get the firmware You can get so you can decode the firmware. It's being updated in a hardware revision That's coming out. So this is permanent if it's in if it's out. Yeah If you have any SP 32, which is actually why we you know Well, one thing is some people just don't want the firmware to be read. Yeah, but it's also why you know people recommend keeping Like secrets like in private keys on external chip So like the crypto chips that we stock they're designed to be Secure against the glitch attack. I mean there might be future attacks without secure against but yeah It's a lot of my controllers are not secure against glitching attacks or delamination or whatever So, you know, but if you can afford it having a separate chip to store those secrets means you don't have to worry about It is much but But still yes, the firmware can be decrypted with you know, not too much difficulty if you have a glitching toolkit Which I think one like the hack of a prize like last year. So it's pretty easy to get one Yeah, I suspect there might be like some iot project that Uses like an esp 32 you can glitch out the key and it might be a private key for like how you're controlling your lights or something Yeah, something that um This can be there were 545 entries from 23 countries for the european astro pie challenge mission space lab The 423 selected teams now get to write code for the science experiments that are going to run on the astro pies and This is in the international space station It's neat A lot of it's going to be python if not all of it I love it. That's so cool. And that lady. Ada is the news And this is cyber turkey cyber turkey. Yeah Okay, let's uh Move on to time travel. Okay


YouTube team keeping clean. Well, that was a fun start of week too. I love that game. That was that was so much fun to watch Joe burrow versus Baker may feel and that was my first time getting a chance to watch Joe burrow for an extended amount of time and Let me say even in a loss even throwing 61 passes That guy he's nice. He For a rookie especially to he makes some very very very good decisions with the football and he has some very accurate passes Two of my favorite passes from him in this game came on his last drive One being the touchdown the Tyler Boyd and another one being there was well Actually three of my favorite passes because another one came on the last drive to is where he put it in between two defenders to AJ Green the passing the corner in the back corner of the end zone where AJ Green tried to catch it One hand and he dropped it that was it was on the money. It was on the money and Then the the touchdown pass to Tyler Boyd where he was he was scrambling and he was so he was running one way but he threw it the other way and is still on the money and I think it was BJ Goodson who was in coverage on Tyler Boyd and BJ Goodson was in coverage all night He did a pretty good job tonight from what I saw and then there was another pass on the final drive where he threw it to The tight end I forgot what the tight ends name was my apologies, but anyway Joe burrow He's gonna be something but the one thing that I did notice about his game in this game is That I feel like he tries to be Superman on every single play And he tries and it's not a bad trait to have but as you get older as you get more mature As you gain more experience in the NFL you'll quickly realize that hey I don't have to make every play and if the play is not there Just throw it away throw it away And you can understand why he wants to be Superman. I mean he must feel that pressure. He's a number one overall pick He's a number one overall pick and he is deemed the new franchise quarterback for the Cincinnati Bengals I mean you're almost expected to be Superman, but you can still throw the ball away So he'll learn that and it's like if he's doing that now Like if this is his floor Has an NFL quarterback over in the ceilings pretty high So I love what I saw from Joe Burrow tonight Of course, you don't want your rookie quarterback throwing 61 pass. I mean you don't want any of your quarterbacks throwing 61 passes But he'll learn he'll learn. It's his second game in the NFL He'll be quite okay or quite. All right. Anyway the Browns Like I said, I did pick the Browns to win this one in a bounce back game I did feel like with everything going on with Odell since he's been the talk of the town For reasons that we won't name to from two weeks ago and then over this past week There's been some rumors of Odell Beckham, Jr Possibly being on a trade block and I said it on my podcast which you can check out as a team keep it clean podcast all The links for the down below in the description, but I did sell my podcast that with Odell Beckham, Jr I expected him to go off tonight. I expected him to have a really good game tonight And he had it wasn't a great game, but it was a much better game than last week against the Ravens That was a beautiful touchdown pass that he caught Where he beat I think it was it wasn't Willie Jackson not Willie Jackson. What's his name? I forget the cornerbacks name But because they had him mashed up on Odell. I think pretty much all night But Odell got the best of them on that one And he he caught him with a night nasty move man And it was it was just so effortless, but it was just so nice and he left him in the dust He left him and there was for the cornerback. There was he couldn't recover. It was too late It was too late in Baker Mayfield put it in the perfect spot for Odell Beckham, Jr And he finished it by catching the ball So that was a big problem last week They just weren't on the same page and kudos to the Ravens defense, of course Because they did that thing but Baker Mayfield and Odell Beckham, Jr Just simply were not on the same page last week and Whether it was Baker forcing the Odell Odell dropping and Baker overthrowing Just it was a mix of just everything but this game The Browns were a lot more settled. Why because for most of the game they had to lead They had to lead every time the Bengals were creep back Browns will pull away again Then the Bengals will creep back then the Browns will pull away again So the Browns they and they they used some of their best weapons tonight They used some of their best weapons tonight And not even just talking about Jarvis Landry and Odell Beckham, Jr But they used their running backs Now last week in the Ravens game, they started to use their running backs They began to use their running backs and it was looking good for their running backs Chubb has 60 yards. I think Kareem Hunt had maybe like I want to say 72 yards But I forget how much he had no no no he couldn't have had that much that many but whatever it was Kareem Hunt was averaging 5.5 yards a carry last week against the Ravens and Chubb averaged 6 yards a carry against the Ravens, but Since they just they weren't converting third downs And Baker of course through the one pick they they weren't converting fourth downs Just it and they weren't scoring bottom line. They weren't scoring last week on the Ravens So they had to get away from the run game And just be one dimensional just pass pass pass pass pass So last week against the Ravens the Browns they couldn't do this what they did tonight against the Bengals Because for the Bengals they had them they had to lead the majority of the time So they got to Nick Chubb got over 100 yards Kareem Hunt I think he had 86 yards But both of them were crucial parts to this game. It's like Nick Chubb He started the game off He started it off and of course they sprinkled Kareem Hunt in he and there But then at the end of the game, it's like oh as a bingo defender. You like oh Been dealing with Nick Chubb all night. Oh, okay. Finally.  Come on. Let's go and he just Great player man Browns have a really good situation at running back and today as opposed to last week You saw both running backs at the end of the game smiling happy cheesing Because they were both used and they were both used the right way. They were both used effectively And they really got to showcase their skill tonight Now a big turning point in this game Came in the second half. It was in the third quarter. I believe Where the browns, I think nick chubb he ran it and it looked like it was a touchdown initially But they reviewed it and they said no no touchdown bring it back first and go um So it was first and goal and bangles defense. They were like no y'all ain't getting this first down Nope second down note third down note brown said are we going for it? I didn't think that was the best decision in the world, but hey, I'm like, okay I'm not mad at it. You want to put this team away? You want to put them away? You don't want to play no games. You could kick a field goal, but you're like, no Let's just go for it So they went for it didn't get it Now it's bingles ball And it worked out the mr. Five year extension I forget exactly how much it was for mr. Miles Garrett He showed why they paid him He showed why they paid him and he Knocked the ball out joe burrow because he joe burrow obviously didn't get rid of the ball fast enough and didn't throw it away Turn over boom browns end up getting a touchdown So it's like Oh man, this this was a really good game. It was a really good game And just that I think was really the turning point though that obviously didn't end the game that wasn't where oh This is over now. No not at all, but I think that was a big turning point in this game But Browns did it They did it a baker mayfield He he was making good decisions for the majority of this game until he just threw that wild pick I I don't know what he was trying to do there Maybe it was one of the it was it was a case where you know how And this can happen to you in real life it can happen to you like even in the video gaming madden or something You could be throwing all these passes completing all these passes and you start feeling yourself. You like man I'm untouchable. I'm invincible I'm good.  So, you know, I I got this Picked off. Oh, man, why? but Lucky for the browns that didn't end up costing them the game so Now, uh, they are one and one the bingles are o and two. This was a game that uh that both of these teams Yeah, neither one of these teams could afford to lose this game If the browns would have lost that would have put them o and two in a division This is bingles their first division game because of course last week they played the charges So it that game was probably a little more crucial For the browns than the bingles and then of course with the browns There's just been so much talk everywhere about the possibilities of this possibilities of that Oh, man, if if Baker may feel that the browns look bad tonight Could he be benched or if Odell Beckham jr. Doesn't do this tonight. Could he be traded? Could he be shipped off? It was a lot of noise a lot of outside noise But now with the win the browns they calm all that down They settle all that and they put all of that on hold until the next time that the browns have Have a bad game and then all these stories start to pop up again so Anyway, congratulations to the browns bingles fans You you got a good one in Joe burrow. I I'm excited to see his next game I really am because it He he can do some things man He can do some things But again, like I said earlier, the biggest thing with him just get rid of the ball Just get rid of it.  I love y'all team keep it clean Again fun way to start off week two So I see you all tomorrow. We got questions from subscribers again Make sure you check out the podcast check out the description of it of every video because the description has plenty of Goodies in there for you and I'm sure any questions that you may have about this channel It's answered in the description. I love y'all. I appreciate y'all We out


Good afternoon Pastor David. Hey John. Welcome everybody to Unfiltered. Pastor my question to you today really is from last night's message and I want to encourage you guys if you'd happen didn't make it to church last night you can actually go to our YouTube channel or Facebook page and use last night's message as you were in 1st John chapter 4. We're looking at verses 14 to 21 just wrapping up chapter 4 and there were a couple points that you made last night that I thought was very interesting in terms of the earmark of a believer which obviously is spelled out in in that chapter as love and you know John's going through there as he's explaining to the Gnostics the importance of having love abiding in God abiding in his love but one of the things that you wrapped up with the kind of thought that you wrapped up with last night is and it's found in that in verse 20 I think it is where it says if you say you love God and do not love your brother you're a liar so I started thinking about how that type of that not concept but here's how I want to apply it pastor so we see different types personalities of churches you'll see churches that are charismatic you'll see churches that are that can have an come off angry you can see churches that are loving you can see churches that are political you can see a lot of the different churches operating from a personality how important is it to not be caught up with the pastor's personality but rather staying in God's word and being in love you know here's a problem with some of that it's that and not so much the problem here's the reality John you know this I'm simply saying something that you're aware of and we've spoken about in the past very often churches will take the personality of the pastor they take on the personality of the pastor so if you have an exhortive pastor an exhortive person has a tendency of attracting other exorters and so the church will be known for its exhortation if you have somebody who's caught up in any any kind of a we'll say like a political or a therapeutic whatever whatever the the pastor finds as his passion it's going to bleed through to the church so people who are are gifted with exhortation well they're going to find a place of comfort to be in while they're in that church if they like the idea of of ministry compassionate counseling type ministry they're going to find themselves at home that's just where it is and so like the like the shepherd are the sheep and we know that and so I think there's room in the body of Christ for for all of our different styles and our different personalities our different approaches there's room in the body of Christ for that the key though whether you're a John the Baptist type who preaches you know repentance or an Elijah who who who puts emphasis on on compassion and miracles or you name it you know a Jeremiah or whomever if you have a model that's similar to those in a prophetic sense or in a political mentality of how we can change whatever that may be the key is going to be whether or not what you teach is balanced and found in scripture and whether it is whether it is layered with the love of God because no matter what you know you know and it's important to have information and all that's a good thing to have to have knowledge in and all but if I have knowledge and I don't have love Paul said I'm nothing and so knowledge puffs up but love builds up we need to we need to see that in our spiritual leaders the the pastor I had in my life for many many years Chuck Smith was a man knowledgeable in scripture I to the day he died held him in high esteem for his biblical knowledge but what also attracted me to my pastor was his love his his compassion and his grace I mean he had his moments I mean you know he showed me that he was a man more than once in his attitude that he would have with me if I if I didn't toe the line in a proper way you know like a father and a son and I loved him in that fashion you know I knew the other side of Chuck I knew that but the overwhelming thing about Pastor Chuck was his love and so Chuck had knowledge of prophecy he had thorough knowledge of scripture he went through the whole Bible taught it several times but he had grace and the grace and the love that God poured into the heart of my pastor well that's the kind of thing that I wanted you know I was speaking to somebody the other day and I it's been a while now but I said to this pastor I said you need to be aware of the fact that the one whom you call your pastor is the one you'll model yourself after you're going to be like that and so you need to be aware of that because we have a tendency of being attracted to to the ones who are similar to us and I said be aware of that so when you make a choice as to who you're going to regard as your pastor be aware of the fact that over time as you model yourself you'll be like him so I've seen guys who have modeled themselves after as a matter of fact I remember one in particular who asked me who do I think is in and this is his words up and coming pastor which right away that reveals to me some kind of ambition to model yourself after a successful man and I mentioned a name well if you're asking me I said one that's kind of a that's some that's uh I don't understand that particular concept but if you're asking me who I think will make an impact and I mentioned a name I said I think this person here is going to have an impact and before you know it and it was kind of remarkable and this is kind of what solidified this with me is this guy began to model himself after the successful one that I mentioned and was very successful at transforming himself into the mere image of this other guy and you know what I mean if that's what you want now for me I wanted to and I think this is wise for any pastor I wanted to model myself because you know Paul said it like this imitate me as I also imitate Christ right in so far as I imitate Christ I wanted to use as a template as a model as a person somebody who imitates Christ not somebody who is according to the standards of the church world successful because it's an unfortunate thing John you know and I know that in the church world today people equate numbers with anointing and and that's just that's just improper there are quite a number of true shepherds love the Lord who have been placed in a position where they don't have multitudes that they can exaggerate numbers about because I taught at a pastor's conference years ago and I said how come you always round it up instead of rounding down why do you as pastors have to exaggerate the amount of people that are showing up for your services why is that it's because we have taken the world standard of success and we have used it as our model when Jesus said the greatest in the kingdom is the servant and so when you actually have a church with a pastoral staff that loves the Lord has compassion and is willing as to be a servant because they're not pushing themselves forward because they're not bragging about their latest exploits or the people they speak to or who's interviewing them to give the people a false sense of a greatness this church is great because this guy is great you end up with people saying I don't want to be a servant I just want to be successful and so I think we have to be careful with that you know what what are the things last thing to wrap up is it's to I remember what Paul says in 1st Corinthians if you don't have love it's like a clashing symbol and I started thinking you know and not all there are a handful that are out there maybe with an own agenda that they become clashing symbols when clanging I've been thinking of the clash I mean that list is getting longer since last night clanging symbol and I wonder how many are really out there clanging symbols because they are they haven't they're not loving I mean it's that's kind of like a blanket statement but what we've been fortunate enough to have a pastor again that you've learned from your pastor how to love because God did an amazing transformation work in your life and it's one of those things you always tell me pastor much forgiven much love and and so we're thankful but that's something I just wanted to share about last night I've been thinking about it is the love and again something you drove home last night from last night's message how can we say we love God if we don't even love our brother let's pray that we can love our brothers and sisters amen pastor thank you so much for your time friends and family thank you for tuning in want to remind you that we do have our church services 830 and 1045 on sunday invite your friends and family to come out uh pastor david you're in the book of mark yep and uh almost done getting pretty close we're getting close and then men a reminder that our Super Bowl breakfast tickets are on sale uh anthony munoz will be our guest speaker you can actually go online or stop by the gazebo uh we have our israel trip coming up january 19th is going to be our information we'll put that out there we'll announce from the pulpit for a representative from inspire travel is going to come out and join us and so look forward to you guys be a part of us thank you again for tuning in and god bless you


We're not robots. There's a lot of hustle culture that's going on, particularly online, where people are feeling almost rushed to fast forward their lives in certain areas. And if they don't manage to do that, they feel bad about themselves. They overwork themselves. They put a lot of their emotional energy, a lot of physical energy, they don't sleep as much. And the thing is that we're not these robotic creatures. We are human beings, we have emotions, we have limits, our bodies run off biological energy supplies, you know. We're not robots. And unless you are some kind of strange, psychopathic individual and you just don't require sleep, you might be in a somniac. You might just find work so fun that you just want to do it all the time and you just don't want to do anything else. Perhaps it's easier for those types of people, but for most, regularly humans, hustle culture 24-7, it is a recipe for burnout.


Thank you so much for waiting. Up next we have Kayla and Ali who will be speaking about Rekon like an insider threat for best user training, return of investment. And I would like both of them to introduce themselves and the topic in detail. What do you think? Hey guys, it's a good thing we're in a room full of people who work in IT. So we wanted to talk to you today about an exercise that we did to see if we could Rekon our users use the topics of social engineering and change the way that they behaved. A little bit about us first. I'm Ali. I am a user training specialist. I've worked in a bunch of different fields trying to learn why people do what they do, how they think, how they connect and communicate and then how we can use those things to hopefully change their behavior. So my name is Kayla. I am a security person for my day job and a troublemaker the rest of the time. So Ali and I worked together for over a year on some research that we did and the point of this talk is just to discuss that research. So like she said, we started working together a little over a year ago and we wanted to take her hard skills and my soft skills and try to approach a security issue from a different perspective. And the first one we were going to try to tackle was the fact that every single phishing campaign that came into our organization was a potential breach. So how could we address that? How could we help to lock it down? So management has the first idea that they always have which is spend the money and secure all the things, right? So it's a good idea and if you do it well, you can get some pretty good numbers. So in looking at how effective our technology was, we had an email gateway where 14 million emails hit that gateway, 7 million emails were allowed through. We had 229,000 emails that were blocked as known malicious links. We had 3200 emails that got past the gateway. Our blue team incident response defense team actually pulled back 2200 of those emails. And then the last 1000 emails actually got through to users inboxes. They were delivered. They were sufficiently sophisticated that nobody could pull them back. None of this security technology or architecture could actually detect them. So at that point, our actual stats were 99.98% effective, which is as good as birth control. So I felt pretty good about the technology that I had put in place. But as good as the technology was, of those 1000 that got through, 850 of them were clicked. So we could have a 99% effective tech rate, but our users were 85% failure, which I think we can all agree is not a great starting point. So that's what we were trying to tackle. So we were like, okay, let's come up with a better idea. So the better idea was that we should create a feedback loop between user behavior, security analysis and training material. Our goals were fairly simple. We wanted to take the tactics that are traditionally assumed to be from the bad guys, the evil tactics, the recon, use them hopefully for good and also create kind of a business case. Understand whether or not this was valuable and how we could express its value and alongside that not be creeps and hopefully keep our jobs. So to do this, we created an insider threat game plan. So we wanted to look at the network and all of its assets as an insider threat would to see what was exploitable. We also wanted to find out, you know, all right, so there's some good data out there who has access to it and how can we observe their behavior for weaknesses to manipulate their behavior for the good of the entity as opposed to the good of the individual, which would have been way more fun. All right, so prerequisite legal stuff. You have to establish the right to monitor if you want to do a program like this. So, you know, that login banner that says we are going to watch everything you do. Your legal department would be very grateful if you put that in place before going forward with this type of program. So we broke it down into phases. Our first phase was just about figuring out where we stood. If we needed to be able to express the value of this down the line, we had to know where we were starting from and our baseline was pretty rough. We had that 85% failure rate. We only had about 15 emails per month in a group of 6,000 employees reported as potentially bad and there was basically zero relationship between any of our coworkers and security. Aside from an assumption that security is just like the software police. You look the other way when they walk down the hall, you do your best not to interact with them and they won't take things away from you, which is definitely not our aim.  I get to go on a treasure hunt. Being on the inside means that I could access all kinds of data. So one of the first things I want to ask for is, hey, HR, give me all your data. An attacker is going to have what's in LinkedIn. That's going to be old, depending on whether someone's looking for a job or not. It's not going to be up to date. It's not really going to tell you a lot of title inflation occurs. You don't really know who actually has access to important data or could perform important functions. It takes quite a bit more recon on the outside. So I took a little shortcut and said, give me your data dump. Additionally, application whitelisting data was extremely important to this process. It ended up being important to Fold. So you got to find out who was keeping important data where they shouldn't, which was in local data repositories as opposed to the secured ones that they were supposed to store them in, as well as finding out who your habitual clickers were, the kind of people who would click okay on a pop-up and get a toolbar installed. So it was very easy to identify those who needed to be targeted with training. Now, the next part was a little bit harder. We actually had to find out where all these people work. So great. I know John Doe is a risk to the entire enterprise. Where exactly is John's cubicle or office or courtroom? Wherever he is, I need to find him.  So we had to go to management and say, these are the people who are the most high risk based on this treasure hunting I've been able to do. They either have access to data or they have extremely risky behavior that puts them onto this list. And that list changed a great amount. The further we got in the process, the more people we talked to, the more we were able to look into the records. We added more and more names and job roles to that list. So as far as completing the baseline, we also needed to understand what they had been trained with and what they had, what they were used to seeing. So we had a fairly traditional training program in place already. It was once a year. It was an hour online. People basically muted it and went on with their regularly scheduled programming. We did see a change from our tools in the clicking rate right after training. But it would spike up to get better and then immediately drop back down. So we still maintained our baseline throughout the year. The training was effective but short lived. And that was another thing that we needed to tackle. All right. So I made some observations about campaigns off of stuff that I was able to pull off of the email gateway. So the Have I Been Pwned data did correlate to campaigns, but not at the time of breach. It's actually cyclical. So anybody whose information was in there, they were going to be involved in multiple campaigns. And overall, they were going to be a higher risk than somebody who had never had data that showed up in sources like Have I Been Pwned. And additionally, the emails going through were so much more sophisticated than the tests that were going out. So there's a lot of false baselining that's out there that sometimes people do to make their programs look good. A lot of the tools come with cheesy templates. And no one's falling for a 414 scam. What people are falling for is actual sophisticated emails that are like, hey, we need you to pay this invoice.  Our logo even has higher resolution than the one that you usually get on the digital signature of the person who usually sends you this email. So the comparison there was extremely important for our future endeavors. All right. So a little bit more about face to getting to know the users as an attacker would. So I lovingly called this mixture, OSINT Plus, the normal OSINT sources of social media, Have I Been Pwned, looking at, you know, Maltego and pulling up people's, you know, social media profiles, as far as their Instagram, Facebook or even Pinterest turned out to be relevant. And mixing that with the internal jobs was important to coming up with the right blend of how to be preemptive in our training and actually prevent user targeting. And observations of the external data. So one of the interesting things that came across was Pinterest boards, you would never expect. But if somebody's posting a public board and they're putting recipes on there, recipe emails were extremely effective campaigns. It actually worked a lot.  And let's show you how to lock down your Pinterest. And let's show you how to, you know, not have a Facebook or Instagram account that tells everybody everything about you. So feeding that back into the loop as training for people as a sort of counseling that occurred. So they could feel that they could take part in the action was extremely important. And observations of internal user data. So taking that external data and tying it to the internal data. The most important things that bubble to the top were that there was higher email volume meant a higher susceptibility to click. So the more emails you get, the more hectic your day, the more likely you are to make a mistake. I don't think anyone's surprised by that. But the fact that you had higher office calls also contributed to the same thing, a higher susceptibility to click. But another thing that was interesting is work email just being on your cell phone, being the type of person who has your work email on your cell phone actually makes you a higher risk. You were more likely to click a link. And so because of that, we were able to know that those people should be targeted for special training. And additionally, anybody with a public facing position, anybody remotely customer service oriented was going to be much easier to target. So overall, if I could name one lesson, it's that, you know, multitasking isn't real. And nobody is good at it. But we all try. And the more we try, the more mistakes we make. So phase three was where my side of the recon came in. If the best kind of recon is in person, we had to get out of our offices. So we scheduled meetings and we left and we went to their desks and we sat down with them. We went mainly to our target list, but also we focused on anyone who had a public facing position, anyone who was very high in the organization. Anyone who had elevated user privileges was a really, really big user group that we wanted to talk to and anyone who provided support, specifically IT support or administrative. We went and sat down and talked to them and asked them questions. We were trying to go into these meetings with the same perspective that makes social engineering so successful, which is you pay people respect. You make them feel important. You make them feel valued. We use that to our advantage. We went in and we said, we know how busy you are. Tell us more about your work process so we can help you. We tried to figure out their holdups and their blockages and we went back to our desks and tried to clear them. Kayla from the technical side and myself from the soft skill side, I would reach out to other department heads and try to clear up those blocks for them and help things move forward. By going out on site and talking to them, by doing those favors, we gained goodwill that completely changed the game whenever we did have to make changes down the line, either to the tech and their work stations or changes to the training. One of the biggest things that we learned here was that we heard over and over again that reporting, phishing emails is just, it's just too hard. It's too hard. We're not going to do it. Our ticketing system is so ugly. We're not going to touch it, which is actually one complaint that we heard. So we knew that based on that feedback, we had to limit the difficulty of our end users getting reporting about email. Instead they were just deleting them and doing their own triage instead of reporting it to anybody else. So that was one of the things that we wanted to tackle going forward. And yeah, she really did say we left her office. That was the thing. So getting a manager who was on board for this was really interesting, but if you think about it, why would you hire a cybersecurity trainer to do one hour of material and then sit in the office the rest of the time? It's why everybody gets, say, canned training from SANS. And we all know that that canned training is not effective as the numbers have shown. But this was an interesting way to tackle it, and it really took an open-minded manager to be like, yeah, sure, give it a try. So some of the things that we told him we were going to do, and hopefully pulled off, was that we were going to meet with that targeted list, which included like VIPs and a lot of very important people. So it took a little bit of political smoothing from the management people. And we discussed their duties and their issues with technology. So we wanted to make sure that we could present a narrative to them that actually fit their workday and the way that they looked at the world. And so that actually makes a lot more changes to your training than you would think. And it's definitely not something you're going to get from a SANS training. And one of the real benefits of going out on site and talking to them was being able to see what was happening in their office in the moment.  Were they checking their work email on their cell phone? Did they not have a pen or biometric lock on their personal cell phone that held work email? That one was super important. Do they have their password taped to their computer? That's a bad sign. So all of those things were super valuable pieces of feedback that we were able to get just because we happened to be in the room. So the next phase was about redesigning. We know our users a little bit more now. We know our threats a little bit more now. We have all this recon in our back pocket. What do we do with it? The first way that we redesigned was frequency. Once you hear training, just flat out doesn't work. You mute it, you go on with your work and it doesn't really take effect, which we could see from our tools because it would get better for like a day and then go back down. So we needed something that would have a longer impact. So we pulled it down to a 90-day training cycle. Every three months you're going to hear from us and you're going to get new information and we're going to make sure it's applicable to whatever's happening in the moment. Which is the next thing that we change is the material. If you have 6,000 users and you give them all the same course, how on earth is that going to be useful? We had to make sure that the content they were seeing was applicable to what they were doing every day and to that level of access they had. Someone who's logging in and can only get to their time sheet doesn't need to know the same thing as someone who's logging in with an underscore admin account. So we made sure that that training was applicable to everything that we learned when we went out and met them and the stuff that Kayla learned doing all of the back end searches to the tools and finding out kind of where our weak spots were. And lastly, brevity. We had to keep it short in the same way that we went out to those meetings in an attempt to create a system of respect. We wanted to show that we respect your time. We're going to keep it to five to twenty minutes. We aimed for five and we never went over twenty and that helped reinforce the idea we are not here to hurt you, we are here to help you and continued keeping them in that system of respect and hopefully keeping them in the feedback loop. So then once the training is done, now we have to test. Where are we? Does anything that we just did over the last six months, did it actually make a difference? So we looked at a lot of different simulation tools, phishing simulation tools, a lot of them are real terrible and they have templates that are very hokey. They have a lot of the I'm a Nigerian prince, I'll give you a million dollars templates, but we knew from our tools that wasn't what was coming in. We had enough research to know that the emails our users were going to see were going to be advanced. They were going to be well crafted and they were going to be targeted. So we had to mimic that exactly. We had to spoof our own domain, we had to follow the exact thing. So we created all of our simulated phishing templates exactly after, exactly after what we had seen. The emails that got through that thousand that did land in our system and especially the eight hundred and fifty that were clicked on, we sent those out again. We used the information that we gathered in the meetings that we had to target specific people and specific job roles and make the emails look exactly the way you would think they would look whenever the people would take action on them and the last we didn't ever leave out VIPs. So an important note about that specifically there was really creepy targeting going on that of course the end users would never know. So like as an example we had a deaf services division and their only job was to service the public. If anybody was deaf they were supposed to provide you know public goods for them and so that particular like division of the company was targeted by their social media accounts. Their Twitter likes specifically had had deaf kitten and deaf animals in there so they took a deaf kitten gift and put malicious software into it and sent it specifically to the deaf services department. That kind of specific feedback to where they know what they're being targeted with and their training reflects that resulted in them having better privacy in their personal lives as well as better habits at work. So it was a two-fold effort people really saw it as a personal value to them which I know security a lot of times we feel like we can't do good or that we don't or people avoid us you know they're like oh software police at work they never think about how it impacts their personal life. Yeah and another reason to always be careful whenever you're testing to include everybody one thing that we learned we had somebody a very high up in the organization who clicked on one of the bad links we sent out and then clicked on it again and then clicked on it on their personal phone and then clicked on it on their personal computer and then they replied to it with some personal information because they just couldn't get the link open. So that's the kind of thing I want to receive that's valuable recon for me because I need to be able to counsel that person differently I don't want that click and that reply going to someone else so this served so many purposes for us. All right and the last thing that we did was create that loop by revisiting the tech so I'm sure you guys have all seen bumpers and bowling lanes at some point in your life or at least had children who needed them so we're not all equally prepared to deal with threats that are coming at us some of us are you know less cynical and some of us actually are just very busy individuals it really I mean the mythology that users are not intelligent is not true I mean clearly doctors and lawyers everybody gets fished it'll happen to you eventually if you're busy enough. So taking the people that we knew were high risk and feeding that back into a technology loop to say now that we know you and we have this personal relationship we're going to do this service for you so that when you make a mistake you're not going to cause a very expensive breach that is going to be on the news so if you don't want to be the person who causes that we have tools for you and we're here to help so doing things like making sure that scripts jpegs pictures links processes everything that tries to spawn from outlook.exe is killed and they have to do the extra trouble of like taking a url and running it through their technology or administrator person before they paste it into a browser was something that you could train an individual to do but you would never want to train an organization. So rather than waiting until the entire organization is breached during the news and now we're going to roll out some heavy-handed you know white listing program or technology solution across the entire enterprise we could take specific individuals and target them and know that they were going to see it as a service and not a punishment. And one of the other tech controls that we put in place based on the feedback we got in those meetings that reporting was too difficult was we put a button into everybody's inbox to report a fish and send it directly to us and remove it from them.  It took a couple man hours basically no money and it created a lot of good will and it also really increased our reporting. So with all of our phases in place we were six months later and we wanted to see where we stood as far as putting that button in place and increasing our communication with our users. We went from 15 emails a month reported to over 600 and obviously in that 600 there are false positives but those are useful as well. That's another kind of recon that we can do because we know what's coming into them. We know what they think is suspicious or not suspicious and that's all more information we can feed back into the loop and we can continue building a better program and as far as our fishing risk we went from that original 85 down to 22 and 22 percent is not perfect by any means but it's definitely better than where we started from and it allowed us to be able to say this six months was worth it. We know what we got from it we can continue improving and we can lower that number even more from there. So of course management was like you solved it right and we're like no it's not perfect nothing's perfect but we did have a reduction in the probability of risk of 62 percent which is excellent and there was some nice math out there to quantify that thanks to the rise in breach report we were able to pull down some information about the cost of what we were doing and put that into a formula created by CIS and so I actually the enterprise we were working for thought their risk was seven million dollars CIS said it was 14 million and I was like even if we cut it in half we're still heroes so you guys are welcome we'll do it again next year thanks. So that's everything that we have thank you all so much.


Alrighty, let's watch it in full first, no sounds, kaka, jubba-bubba. I like how it kind of works as a loop, comes in, getting ready, let's go. Alright, well where are you? Well actually, I faked you out. Anyway, so watching this before I go into any animation detail, because it's already pretty cool. My main thing was that we linger on this a bit for too long. And by this I mean just this empty area. Either I would speed him up, I mean I understand you want to cut on him exiting, but it could also be where like that could be a moment of maybe there's a bit more, I don't know if you want to add any 2D effects to it, but maybe there's something of interest.  But that could be something where maybe that foot goes lower, pieces are breaking, and that you got pieces falling here, break and smoke, just for that, but then you might potentially be able to cut sooner, even though it's something like this. And then the same thing on the creature here. A, we're very left heavy where there's a lot of empty space here. They're like, hmm, is something else going to happen, versus framing like this where there's still an opening here, and there's more room on the left than on the right, because the creature is about to go to the left, so that's probably where I would have a staging difference. And again, we're exiting, resting on here, we're wondering what's going to happen. So for this, you might even be, like I said, even here be able to cut sooner. It's maybe not the best silhouette or frame there, in terms of how this leg and just the anatomy of that, but I'm just not super sure. It's almost like something's missing, someone's going to land here, it's going to be a tidal cart, so I'm not sure. Other than that, this is cool. I think, I understand that you want to tilt up for this reveal, there are a couple of things. As you come in, I think we are a bit too low. We're really, like in terms of framing, there's a lot of room here, it's a bit uncomfortable there. Like this would be more comfortable from the get-go. I would personally do this, and then when the creature comes in, you still have this amount to tilt up, but I would start tilting once the creature's around here. I feel the camera's a bit too aware of what's going to happen, even though we just saw this, but the thing is, I would personally actually take this out and have it hidden, like that. You don't even see anything. Once it's there, then this comes in much, with a much bigger surprise versus that here. Because we're looking at him, and then this just happened, we're starting to get a bit confused, and I would just make this super clear. Watch out, this is a bit light. I know he's strong, but that move up and down on that hammer here, right there, it just feels, it makes this feel like paper. I'd be very careful with those moves, and I know the guy's strong, but still. Not that it's a crazy thing, I wonder if you just want to keep that hand away from the fight for clear silhouette, so it's always in this area. Not that it's a shot break, it almost makes it, that silhouette makes him feel a bit casual, versus there's something about this attention, which is always kind of ready, which is clearly looking for something. I think this is a bit much in terms of a breakdown there, that passing with this A intersects a bit, but this gets more into a ballet pose. I think you can relax that foot a bit more. Because this, right through this section in real time, feels a bit fast. I'm just reading that flash of a very straight leg pose. And probably in that breakdown, you can also just, or that in between here, you can have the leg just a bit further this way, relax foot, clear a gap, they don't have any tangents, even on frames like this, it keeps it clean. The move is cool though. This seems like just a lens or a translate, not sure, I think it's okay. It gives him just the feeling of a massive cheat. And I'm not seeing a crazy camera move, just make sure that the foot is planted here on that move. It feels like everything is magically floating to the left. I don't know if that is part of the camera, this just feels like, let's keep this leg planted as long as you can.  And then that leg comes back for another step. I think that might just be cleaner. That's cool. Same thing for here though, I would just bring this up for clean silhouette. Some of these are a bit too overlapping, might as well go since we have so much empty room. So I would clean that up a little bit and I would just add some fake clouds or whatever you want to do or maybe this is part of like a long or bigger, higher ruins, whatever structure you have or something so that we understand what is going on with the camera now. It's something on an empty surface or empty background. And it would be cool just kind of get that feeling of what is that camera move actually doing. This also feels a bit like from wishing two legs into one and then you only got this guy coming out. It feels like it's really cut. So that's better. I would keep it clean. I like that you have a lean and there's asymmetry and all that but I would still keep this silhouette as clean as you can. This really feels like it needs some 2D effect, some shockwave. I'm checking your mail. I think it still needs to add a shot at the end and you'll submit it separately. All right. I don't say anything in terms of your 2D plans but this feels like, and this would be really cool because you would have wave out towards camera and then even this would have all stuff like dusty bits and rock pieces moving then at the end could settle a bit with some extra smoke and then going this way. But then, yeah, like I said, cut out sooner but it's a cool moment for sure here. I think let me see. This creature comes down and we could probably go on this. We're already flat.  You're almost the opposite. You're up and then down towards the end but I think I would just do down up so you see a bit more movement in there and that's cool. Let me see here. That's cool. There's something, right? Let me see. I feel like again with this move, there's a bit of a pop there. It's almost like we're countering. It's a little bit stuck in 2D space through there and then we suddenly have a big move over one frame being here visually but then on this frame then we don't continue that big move arc over there. If you're already moving this far that's your momentum initiation and you got to continue in that arc versus doing something like that. You have that one frame pop over then you go straight down into here and then here and you're locked in this. So to me it feels like it could also be something where he actually, through all of this lets it slip and then does the grip here and it could be swinging it like that. That could be a moment. It also feels like we're hitting this pose on that arm and it kind of stays put. There's something visually we get to this and then it feels like a 2D card where it just translates forward. There's no more change in the pose. It feels like the budget. You ran out of budget. There's no more money. That's the last pose we could afford and then that's it. Is this a bit fast? I feel like if I play this 25% slower just the creature only feels a bit better. This is normal speed and for the weight and everything to my liking it's a bit fast. Also careful when you have things like this moving forward. Bam! It hits this wall. It's overshadowed a little bit. Soft on that hard move. But funny enough I would find a way to I like this the lean back that it's more stretched out. Maybe there's a way for you to get it closer. Only because I feel like this is a great moment for this piece to actually be either down here or wherever. But something down here so that this this is your silhouette and not this. It would be cool to see there's no frame here. You get that the pointiness that is your silhouette. It's a bit more aggressive with this here versus this just forms a blob through there. Trout because of intersections there. And this I'm not quite buying mechanics and physics wise. How long it stays off the ground off balance with nothing supporting it. I know it comes back down but the hold to me is a bit long. This one sorry even though this one though I guess this one could work and you are moving the leg forward it's not too shabby. This is the one that I'm not quite buying here because you're going up and you always expect another drop but then nothing happens. Although you do have to move down. It's like you have initiated the move and nothing happens. You just go back and hold this for a bit too long. For me you would need the leg down here. You could experiment with this leg and this leg is up for silhouette or you could draw kind of stuff. I don't want to dictate that but here I'm not quite buying the balance and that is that. Alright, thanks. You get 16 submissions. Either way, a like and subscribe would be awesome. Alright, thank you.