[00:39.970 --> 00:41.190]  Go for it.
[00:59.960 --> 01:01.420]  Okay, welcome everybody.
[01:02.640 --> 01:06.820]  My name is Michael Horowitz, and this is Defensive Computing.
[01:08.200 --> 01:11.120]  Needless to say, everyone who talks here thinks their topic is important.
[01:12.060 --> 01:16.900]  This is a tweet from Sam Bone, who was supposed to be here.
[01:17.020 --> 01:18.200]  He's been to HOPE many times.
[01:18.380 --> 01:19.380]  Unfortunately, he got COVID.
[01:20.060 --> 01:24.520]  The boring things don't get the headlines, and Defensive Computing is brutally boring.
[01:24.760 --> 01:26.360]  I will warn you in advance.
[01:27.660 --> 01:29.180]  But of course, I think it's important.
[01:30.040 --> 01:32.900]  This is the website that gave rise to this talk.
[01:33.260 --> 01:34.920]  Has anybody seen it at all?
[01:36.100 --> 01:37.660]  Yeah, it's not particularly popular.
[01:37.860 --> 01:39.540]  It gets about 300 page views a day.
[01:41.640 --> 01:45.880]  The slide deck for this talk is available there, if anyone wants to download it.
[01:47.820 --> 01:48.720]  This is me.
[01:49.820 --> 01:51.960]  I am a retired computer nerd.
[01:52.200 --> 01:55.580]  So for those of you techies out there, I am your future.
[01:57.060 --> 01:58.540]  I am what your future looks like.
[01:59.060 --> 02:03.480]  Being retired means I can criticize anything, and I will, because I have no skin in the game.
[02:03.740 --> 02:07.700]  And it also means that if I praise anything, I have no relationship to it.
[02:07.740 --> 02:09.280]  I am not selling anything.
[02:10.120 --> 02:12.880]  I have been focused on Defensive Computing for a long time.
[02:13.200 --> 02:17.940]  I blogged about it for one year with CNET and for nine years at Computer World.
[02:18.880 --> 02:21.000]  It is a topic I come to naturally.
[02:21.380 --> 02:22.540]  I am a pessimist.
[02:22.760 --> 02:24.260]  And that is really the big requirement.
[02:25.640 --> 02:34.060]  The website is intended for non-techies, but trust me, your techies here will not be bored.
[02:35.440 --> 02:38.560]  Also, I need a lot of feedback from techies, because nobody knows everything.
[02:39.520 --> 02:40.960]  Here is today's topics.
[02:41.340 --> 02:43.720]  We are not going to get through this stuff at the end.
[02:43.960 --> 02:46.540]  I have 212 slides and 45 minutes.
[02:46.920 --> 02:49.780]  I will be talking very fast and skipping some stuff.
[02:49.780 --> 02:54.160]  But again, the slide deck, if you want it, defensivecomputingchecklist.com.
[02:54.540 --> 02:55.780]  So, why am I here?
[02:56.820 --> 03:00.600]  The big reason is that the tech press fails non-techies.
[03:00.900 --> 03:05.200]  And as a retired person, I feel for the non-techies.
[03:06.040 --> 03:10.640]  The vast majority of the tech press are what I call art history majors.
[03:11.080 --> 03:16.860]  And I mean that as not so much as an insult, but I mean it as unqualified to cover technology.
[03:17.660 --> 03:19.360]  Not that everyone knows everything.
[03:20.960 --> 03:22.880]  Okay, here's one example of this.
[03:23.700 --> 03:25.360]  Molly White, somewhat famous.
[03:27.640 --> 03:29.520]  Big critic of crypto.
[03:29.920 --> 03:34.280]  There was an article, March 2022, this year, the New York Times.
[03:34.660 --> 03:36.200]  She hated the article.
[03:36.400 --> 03:39.380]  She hated it so much, felt that it was absolutely terrible.
[03:39.660 --> 03:41.560]  She got a whole bunch of her friends together.
[03:41.560 --> 03:42.840]  And look at this.
[03:43.220 --> 03:47.020]  Paragraph by paragraph, they rebutted this article in the New York Times.
[03:47.220 --> 03:50.640]  Basically saying that the reporter had no idea what he was talking about.
[03:51.940 --> 03:54.020]  And that's really a shame.
[03:54.280 --> 03:56.120]  The tech press fails us over and over again.
[03:56.380 --> 03:58.320]  This is an example of mine from 2017.
[03:59.240 --> 04:01.640]  This woman is a business reporter for NBC.
[04:02.120 --> 04:03.600]  And I saw her on the news.
[04:03.600 --> 04:09.160]  And she said, oh, if you install this web browser extension, you can save 50 cents every time you buy toothpaste.
[04:09.520 --> 04:11.020]  It'll find you great coupons.
[04:11.320 --> 04:14.700]  Well, here's the web browser extension she suggested that you install.
[04:15.180 --> 04:19.120]  As you can see, it can read and change all your data on all your websites.
[04:19.520 --> 04:20.560]  Jesus Christ.
[04:20.940 --> 04:23.360]  To save 25 cents when you're buying toothpaste?
[04:24.140 --> 04:25.540]  Really, that's what I meant here.
[04:25.540 --> 04:32.520]  You don't take computer advice from a business reporter any more than you would trust me when it's time to buy a gold ETF.
[04:34.560 --> 04:36.340]  So, there is some rare good news.
[04:36.500 --> 04:37.280]  A lot of this is bad news.
[04:37.380 --> 04:38.040]  Here's some good news.
[04:38.140 --> 04:39.000]  This is some drug store.
[04:39.120 --> 04:40.060]  I don't know where it is.
[04:41.300 --> 04:42.040]  Zooming in.
[04:42.660 --> 04:45.360]  Trying to warn people about gift card scams.
[04:45.960 --> 04:47.020]  Some good news.
[04:47.660 --> 04:50.460]  Okay, part of defensive computing is privacy.
[04:51.000 --> 05:00.900]  If you're seriously into privacy, and by that I mean if you're a member of the Supreme Court and you don't want people firebombing your house, Michael Basil is the kind of guy you would go to.
[05:01.200 --> 05:02.340]  He has a website.
[05:02.500 --> 05:03.220]  He has a podcast.
[05:03.600 --> 05:04.820]  He just started a magazine.
[05:05.180 --> 05:07.820]  Far more into privacy than I am.
[05:07.980 --> 05:11.100]  This is just a heads up for anyone who really cares about privacy.
[05:11.860 --> 05:12.740]  A couple things.
[05:12.740 --> 05:14.000]  I do listen to his podcast.
[05:15.220 --> 05:18.440]  I had no idea you could use Apple devices without an Apple ID.
[05:19.520 --> 05:24.880]  He did a whole podcast about how Mac OS spies on you and all the domains he uses Firewall to block.
[05:26.440 --> 05:27.700]  Professional-grade router.
[05:28.020 --> 05:29.240]  Always connected to a VPN.
[05:29.960 --> 05:34.000]  Of course, none of his clients can use either Android or iOS.
[05:34.620 --> 05:36.020]  He likes GrapheneOS.
[05:36.900 --> 05:41.780]  He's not really a techie, so his VPN recommendations are kind of arguable.
[05:42.240 --> 05:43.640]  But just a heads up.
[05:44.520 --> 05:48.520]  Now, the flip side of extreme privacy is extreme openness.
[05:49.240 --> 05:54.280]  So, why would you put on your phones your most important information?
[05:54.660 --> 05:56.180]  The most private information.
[05:56.540 --> 05:57.740]  Well, here you go.
[05:57.920 --> 05:59.300]  iPhone medical emergency.
[06:00.060 --> 06:02.120]  I know probably a lot of you are young.
[06:02.120 --> 06:04.740]  You'll never have a medical emergency for another 40 years.
[06:05.240 --> 06:06.620]  Does anybody do this?
[06:06.620 --> 06:10.720]  Anybody with an iPhone have put a medical medical stuff?
[06:11.460 --> 06:12.820]  And very few.
[06:14.080 --> 06:16.180]  You know, if you fall over, you're unconscious.
[06:16.380 --> 06:17.260]  This could be really important.
[06:17.600 --> 06:24.800]  The point is that anyone who gets your phone can find this information without knowing any passwords at all.
[06:25.480 --> 06:27.640]  And, of course, Android has the exact same thing.
[06:28.320 --> 06:31.660]  I have a note to myself that I've got to put my blood type in there.
[06:31.840 --> 06:32.920]  I'm an Android person.
[06:34.480 --> 06:36.040]  So, here, you're making like...
[06:36.040 --> 06:39.120]  If you're married, you put your spouse's name and phone number there.
[06:39.360 --> 06:41.940]  You're making some information brutally public.
[06:42.420 --> 06:44.380]  And for many of us, it's the right thing to do.
[06:46.060 --> 06:46.900]  Here's another thing.
[06:46.980 --> 06:48.180]  The Apple lock screen.
[06:48.500 --> 06:49.520]  Android lock screen.
[06:49.860 --> 06:51.060]  This is my phone.
[06:51.980 --> 06:53.180]  I will show you...
[06:53.580 --> 06:54.340]  Well, I can't show you.
[06:55.080 --> 06:58.500]  But, does anybody use the Android lock screen?
[06:58.700 --> 06:59.980]  Put a message on the bottom of it?
[07:03.040 --> 07:03.900]  Where am I?
[07:04.540 --> 07:06.360]  I'm timing myself so I don't go over.
[07:06.680 --> 07:11.360]  It says on the very bottom right-hand corner, if found, email, so-and-so.
[07:11.560 --> 07:15.060]  That email address is automatically forward to my wife and to myself.
[07:15.420 --> 07:23.860]  So, if I lose my phone, I have some chance, if an honest person finds it, that they can email me, even though they can't unlock the phone.
[07:25.120 --> 07:27.860]  Am I the only person here that does this?
[07:29.860 --> 07:30.760]  One...oh, it's a big room.
[07:30.900 --> 07:31.600]  It's hard for me to scan.
[07:31.760 --> 07:33.540]  Alright, there's about five or six people that do it.
[07:36.020 --> 07:36.740]  Always remember.
[07:37.320 --> 07:40.180]  And this is what the tech press never, ever says.
[07:41.080 --> 07:41.800]  Always remember.
[07:41.960 --> 07:43.220]  This is for the non-techies.
[07:43.480 --> 07:47.060]  I know the techies out there are going to say you can figure out who sent you an email message.
[07:47.780 --> 07:51.380]  I have no idea how to figure out who really sent the text message.
[07:52.160 --> 07:56.280]  And certainly, when you get a phone call, there's no chance in hell of figuring out who's really calling.
[07:57.060 --> 08:01.580]  So, I mean, I wanted to plaster this on the walls here, but opted not to.
[08:02.900 --> 08:03.720]  Tech press.
[08:04.160 --> 08:05.140]  This looks good.
[08:06.640 --> 08:07.520]  Planned Parenthood.
[08:08.000 --> 08:09.180]  Website spies on you.
[08:09.460 --> 08:10.940]  Okay, well, thank you very much.
[08:10.940 --> 08:14.160]  But, this is what the article is.
[08:14.440 --> 08:16.540]  This article is things are bad, things are bad.
[08:16.760 --> 08:18.440]  How about some defensive stuff?
[08:18.620 --> 08:19.720]  What can we do to prevent?
[08:20.020 --> 08:20.380]  Nothing.
[08:20.780 --> 08:21.420]  Absolutely nothing.
[08:22.140 --> 08:25.800]  So, for the non-techies out there, there is Blacklight.
[08:26.080 --> 08:29.280]  Which is not really...wrong Blacklight.
[08:29.500 --> 08:31.140]  This Blacklight is from the markup.
[08:31.400 --> 08:35.500]  And is a great free tool that you can use to evaluate a website.
[08:35.500 --> 08:38.260]  And see just how much spying is going on there.
[08:40.040 --> 08:42.920]  Here's their report for Planned Parenthood.
[08:43.620 --> 08:45.140]  This is miserable.
[08:46.060 --> 08:47.800]  This is absolutely miserable.
[08:48.220 --> 08:52.220]  I mean, the CIA must be jealous of all the spying going on at Planned Parenthood.
[08:52.660 --> 08:53.800]  The brutal details.
[08:53.980 --> 08:54.320]  I'll skip.
[08:54.800 --> 08:57.800]  Hope.net, by the way, got a perfect score from Blacklight.
[08:58.200 --> 09:00.420]  All my websites got a perfect score too.
[09:00.680 --> 09:01.920]  No spying going on at all.
[09:03.900 --> 09:05.820]  You have no idea who really sent an email message.
[09:06.020 --> 09:08.940]  Again, I can't stress this enough for the non-techies.
[09:09.740 --> 09:11.600]  There's no equivalent of a postmark.
[09:12.120 --> 09:13.100]  But about email.
[09:13.100 --> 09:17.260]  The most important thing is that it's very easy to forge the from address of an email message.
[09:18.420 --> 09:19.180]  Very easy.
[09:19.720 --> 09:23.320]  The other things are, of course, you can play with domain name games in the from address.
[09:23.540 --> 09:26.720]  We're going to talk, if we get to it, domain names at the very end.
[09:27.180 --> 09:29.280]  Of course, the sender's account could be hacked.
[09:29.540 --> 09:31.280]  And it could be from a business partner.
[09:31.280 --> 09:33.440]  This was a story...
[09:33.440 --> 09:36.560]  A company called 2U was teaching courses.
[09:37.100 --> 09:39.880]  And they were pretending to be the University of Oregon.
[09:40.340 --> 09:41.680]  They were a business partner.
[09:42.280 --> 09:44.460]  Basically, the University of Oregon said it was them.
[09:44.620 --> 09:46.040]  And they got a kickback from 2U.
[09:46.700 --> 09:51.400]  My point here is that people who signed up for this, they got emails from the University of Oregon.
[09:51.600 --> 09:54.020]  They thought they were dealing with the University of Oregon.
[09:54.200 --> 09:55.060]  But they weren't.
[09:55.140 --> 09:59.240]  They were dealing with this 2U company, which was subcontracted out to make the classes.
[10:00.500 --> 10:03.040]  There's another thing called email thread hijacking.
[10:03.260 --> 10:04.820]  I'm not going to go into it because of time.
[10:05.040 --> 10:08.860]  The point is never, please, never trust an email message.
[10:10.120 --> 10:13.360]  Gmail, the worst thing about Gmail is it's free.
[10:14.460 --> 10:16.160]  Free means there's no tech support.
[10:17.100 --> 10:22.140]  Those of you who depend on Gmail, one day you could be in a lot of trouble.
[10:22.680 --> 10:24.040]  Email is worth paying for.
[10:24.260 --> 10:24.820]  I do.
[10:24.980 --> 10:25.640]  I pay for email.
[10:25.800 --> 10:27.340]  I'm very, very happy that I do.
[10:27.800 --> 10:29.100]  Here's a bunch of providers.
[10:30.860 --> 10:34.160]  Anyone else have any suggestions for ones that aren't on this list?
[10:34.960 --> 10:36.120]  I use one of them.
[10:36.540 --> 10:37.260]  I'm not going to say which one.
[10:38.640 --> 10:39.940]  But yeah, I gladly pay.
[10:40.080 --> 10:47.960]  And let me tell you, there was one time when my email was screwed up and I thought I deleted stuff and I found out my vendor actually backs up all my deleted messages for 10 days.
[10:48.180 --> 10:49.840]  I said, I got my money's worth.
[10:51.200 --> 10:53.260]  Gmail, 8 billion people use Gmail.
[10:53.460 --> 10:55.860]  Has any of you ever backed up your Gmail address book?
[10:56.640 --> 10:57.640]  No, of course not.
[10:57.840 --> 10:59.660]  If you go to Gmail, that one person did.
[10:59.780 --> 11:00.220]  Congratulations.
[11:01.100 --> 11:07.040]  If you go to gmail.com and you open a new tab, you go to contacts.google.com, you can back up your address book.
[11:07.300 --> 11:10.160]  Nothing like having it in your hand.
[11:11.320 --> 11:12.280]  All too typical.
[11:12.560 --> 11:14.080]  Another article in the tech press.
[11:14.380 --> 11:18.640]  All these websites submit stuff when you're filling in a form before you submit it.
[11:18.640 --> 11:20.220]  Okay, big deal.
[11:21.700 --> 11:25.240]  USA Today was one of the companies mentioned.
[11:25.660 --> 11:27.780]  So you type your first name, you type your last name.
[11:27.920 --> 11:30.740]  And while you're typing your last name, they've already sucked up your first name.
[11:31.000 --> 11:32.240]  That's the point of the article.
[11:32.880 --> 11:34.560]  But again, no defense.
[11:35.340 --> 11:35.860]  No defense.
[11:36.380 --> 11:37.880]  Chicken little, the sky is falling.
[11:37.880 --> 11:41.280]  So that particular article actually was based on a paper.
[11:41.760 --> 11:45.180]  And lo and behold, that paper had some defenses in it.
[11:45.300 --> 11:47.620]  But the defenses didn't make it to the tech press.
[11:48.040 --> 11:49.360]  And here was one defense.
[11:49.580 --> 11:50.340]  Don't use Chrome.
[11:51.340 --> 11:55.280]  Are you ever going to see Ars Technica say not to use Chrome?
[11:55.860 --> 11:56.620]  Probably not.
[11:57.360 --> 11:58.920]  Here's another thing in the article.
[11:59.200 --> 12:03.060]  They actually named some of the websites that were doing this nefarious thing.
[12:03.660 --> 12:07.180]  The article never mentioned any websites that were doing this nefarious thing.
[12:07.660 --> 12:11.620]  And the actual paper listed all these spy little trackers.
[12:12.320 --> 12:12.840]  I say spy.
[12:12.980 --> 12:13.900]  Tracker websites.
[12:14.240 --> 12:19.320]  So if I know these are the things tracking me, what can I do about it?
[12:20.380 --> 12:22.640]  And that's where DNS is your best friend.
[12:23.540 --> 12:24.860]  This is a long topic.
[12:27.420 --> 12:29.680]  An introduction for the non-techies.
[12:30.020 --> 12:33.100]  Every device connected to the Internet has a unique number.
[12:33.480 --> 12:35.300]  These numbers are IP addresses.
[12:35.660 --> 12:38.520]  I'm going to stick with IP version 4 to keep the concept simple.
[12:39.400 --> 12:44.520]  And this matters because these numbers are what the world actually uses to communicate on the Internet.
[12:46.060 --> 12:48.720]  DNS is a system that translates names to numbers.
[12:49.060 --> 12:51.520]  You think you're going to hope.net, but you're not.
[12:51.520 --> 12:55.460]  You're going to 184.105.226, et cetera, et cetera, et cetera.
[12:56.220 --> 12:57.320]  So it's really important.
[12:58.640 --> 13:00.860]  Don't take DNS from strangers.
[13:03.300 --> 13:04.980]  That's funny but true.
[13:05.800 --> 13:08.620]  The boring stuff about DNS, yada, yada, yada.
[13:08.760 --> 13:10.260]  The interesting stuff about DNS.
[13:11.760 --> 13:12.780]  You know, I'm old.
[13:12.900 --> 13:13.320]  I'm retired.
[13:13.520 --> 13:15.980]  So I don't know if Jerry Seinfeld references still go over.
[13:17.180 --> 13:19.600]  But DNS lets you be the master of your domain.
[13:20.640 --> 13:22.340]  Anyone watch Seinfeld in the 90s?
[13:23.300 --> 13:26.100]  If you control DNS, you really control everything.
[13:29.460 --> 13:31.400]  Unfortunately, DNS is changing.
[13:32.040 --> 13:35.520]  Old DNS, which lives for many, many years and still is around.
[13:35.740 --> 13:39.100]  An amazingly well-designed system, but no security.
[13:40.020 --> 13:42.380]  So the new DNS is secure.
[13:42.640 --> 13:43.780]  It comes in two different flavors.
[13:44.380 --> 13:45.490]  DNS over HTTPS.
[13:46.340 --> 13:47.720]  DNS over TLS.
[13:47.940 --> 13:49.440]  It uses different ports, yada, yada, yada.
[13:50.080 --> 13:53.340]  It just makes it more complicated when you want to take control of DNS.
[13:55.280 --> 13:57.160]  Why care about new DNS?
[13:57.460 --> 13:58.640]  Alright, I'll skip that.
[13:59.240 --> 14:02.120]  A lot of you are saying, well, I use uBlock Origin in my web browser.
[14:02.200 --> 14:03.180]  I don't need to worry about DNS.
[14:03.340 --> 14:05.140]  That's blocking all the bad stuff for me.
[14:05.780 --> 14:07.380]  There's some pros and cons to that.
[14:07.520 --> 14:08.180]  You can read it.
[14:08.280 --> 14:09.300]  I don't need to repeat it.
[14:10.400 --> 14:12.360]  What DNS are you using right now?
[14:12.580 --> 14:15.380]  There are quite a lot of websites that will tell you that.
[14:16.880 --> 14:19.180]  These websites were created by VPN companies.
[14:19.180 --> 14:25.000]  You know, you'd think Android would be smart enough that if you set a timer, you wouldn't go to sleep.
[14:25.780 --> 14:27.940]  But no, it's not that smart.
[14:28.700 --> 14:28.900]  Okay.
[14:29.640 --> 14:30.720]  32 minutes left.
[14:32.400 --> 14:33.720]  Feel free to visit that.
[14:33.940 --> 14:38.580]  There's a whole list of VPN companies that provide what is your DNS sort of services.
[14:40.460 --> 14:44.220]  My favorite is DNS leak test, which is from IVPN.
[14:46.280 --> 14:48.740]  The source of your DNS is complicated.
[14:49.080 --> 14:49.840]  Very complicated.
[14:50.200 --> 14:55.060]  I'm not the world's class expert on networking, but this is what I came up with.
[14:55.640 --> 14:58.640]  DNS could come from the router in multiple different ways.
[14:59.020 --> 15:03.520]  DNS can come from your device, operating system level, in multiple different ways.
[15:03.520 --> 15:06.560]  And, of course, it can come from your web browser.
[15:06.860 --> 15:11.700]  That is a fairly new thing that web browsers can specify their own DNS servers.
[15:11.900 --> 15:13.320]  It's only the new DNS.
[15:13.980 --> 15:16.520]  Everyone calls it secure DNS or encrypted DNS.
[15:16.900 --> 15:17.980]  It's the new one.
[15:19.200 --> 15:21.160]  Source of DNS... yes.
[15:21.160 --> 15:23.980]  So, you can have two separate web browsers on your computer.
[15:24.580 --> 15:29.820]  And each one could be using different DNS servers for this name resolution, for the translation.
[15:31.900 --> 15:33.940]  I'm a big fan of peplink routers.
[15:34.200 --> 15:36.480]  Peplink routers can do DNS right here.
[15:36.700 --> 15:41.120]  And you see here, I've taken a.applovin.com and assigned it an IP address of zero.
[15:41.580 --> 15:48.360]  So, no device that's on the network connected to this router is ever going to be able to load a.applovin.com.
[15:48.360 --> 15:50.920]  Because the router is actually doing the DNS.
[15:51.660 --> 15:53.860]  But, again, that's only old DNS.
[15:54.180 --> 15:55.700]  New DNS would bypass this.
[15:55.960 --> 16:00.940]  And for those of you who are techies, this is their host file, but on a land-wide basis.
[16:02.280 --> 16:04.840]  Yeah, for those of you who are techies, this is pi-hole too.
[16:06.540 --> 16:10.660]  In addition, peplink routers can control DNS generically.
[16:11.180 --> 16:16.560]  So, a lot of people will type cm instead of com, and that is globally blocked here in this router.
[16:17.400 --> 16:18.660]  CN is China.
[16:18.860 --> 16:19.620]  RU is Russia.
[16:20.300 --> 16:26.760]  So, anyone connected to this particular router will never load any web page that ends with .ru or .cn.
[16:28.760 --> 16:30.000]  DNS providers.
[16:30.380 --> 16:33.400]  I think all these DNS providers are reasonably trustworthy.
[16:33.820 --> 16:36.520]  The list is far from exhaustive.
[16:37.200 --> 16:39.320]  The worst choice is the default choice.
[16:40.220 --> 16:44.560]  Here in this room, our default choice is Google and Cloudflare.
[16:45.440 --> 16:46.480]  I've been told.
[16:47.440 --> 16:49.040]  My favorite is NextDNS.
[16:49.040 --> 16:52.880]  I have a list of DNS providers on my router security website.
[16:55.800 --> 17:04.040]  Yes, anyone who wants to spend a minute, although I'm going to be talking fast, you can go to dnsleaktest.com and see who's providing DNS here in this room.
[17:06.800 --> 17:11.400]  The NOC, which is Network Operations Center, they've done a little test for us.
[17:11.780 --> 17:13.920]  Here in this room, you can get to Yahoo.
[17:14.320 --> 17:16.260]  You can get to news.yahoo.
[17:16.400 --> 17:20.660]  You can get to everything at Yahoo except Yahoo Sports.
[17:21.380 --> 17:23.020]  They have blocked Yahoo Sports.
[17:23.120 --> 17:28.240]  If you try to bring up sports.yahoo.com in this room now, you should be blocked.
[17:30.020 --> 17:32.660]  However, that's an old DNS system.
[17:32.960 --> 17:38.060]  You can specify in your web browsers that you want to use new, secure DNS.
[17:38.540 --> 17:44.100]  And if you do that, that should bypass whatever fudging is going on in the router.
[17:48.380 --> 17:48.940]  NextDNS.
[17:49.140 --> 17:50.480]  My preferred provider.
[17:50.480 --> 17:51.900]  I think it's a great service.
[17:52.060 --> 17:53.380]  It's a free service up to a point.
[17:53.560 --> 17:54.260]  20 bucks a year.
[17:54.480 --> 17:56.800]  They block ads and trackers by default.
[17:58.580 --> 17:59.540]  Extremely customizable.
[18:01.100 --> 18:02.980]  You also get multiple profiles.
[18:03.480 --> 18:07.340]  So you can assign one profile to each one of your different devices.
[18:08.220 --> 18:10.520]  Or if you have three devices, they can have...
[18:10.520 --> 18:11.780]  Two of them can have one profile.
[18:11.880 --> 18:12.440]  One can have another.
[18:12.660 --> 18:17.500]  If you have two web browsers on your computer, one web browser can use one DNS profile.
[18:17.660 --> 18:18.920]  Another can use a different profile.
[18:22.540 --> 18:24.480]  NextDNS integrates with everything in the world.
[18:24.480 --> 18:26.540]  As you have to when you're doing DNS.
[18:26.820 --> 18:28.180]  Android, iOS, Windows, etc.
[18:30.080 --> 18:34.240]  It starts off with two block lists of bad stuff.
[18:34.380 --> 18:36.140]  Bad stuff being ads and trackers.
[18:36.320 --> 18:39.220]  You can adjust the block list that NextDNS uses.
[18:40.140 --> 18:42.440]  You can also control websites.
[18:42.920 --> 18:44.940]  You see here, Facebook, it says remove.
[18:45.120 --> 18:47.620]  That's because Facebook is blocked at the time I made this screenshot.
[18:48.200 --> 18:50.660]  I don't even know what 9G AG is.
[18:50.800 --> 18:53.280]  But you have another level of blocking, customization.
[18:54.060 --> 18:55.720]  And you have a deny list.
[18:56.260 --> 19:03.440]  So no matter what the other lists are doing, specific websites you don't want to load, you can just set them up to deny.
[19:07.040 --> 19:07.720]  Which one?
[19:07.960 --> 19:10.140]  You see here, CTLD, Windows Update.
[19:10.480 --> 19:13.420]  Yeah, try and want Windows Update on the computer connected to this thing.
[19:13.480 --> 19:13.920]  Ha, ha, ha.
[19:14.000 --> 19:14.860]  You're not going to get it.
[19:15.380 --> 19:16.480]  I blocked Windows Update.
[19:16.480 --> 19:22.280]  They also have an allow list for times when you're blocking bad things, but it blocks too much.
[19:22.500 --> 19:23.940]  So you can make exceptions.
[19:24.440 --> 19:25.580]  Allow list and block list.
[19:25.880 --> 19:26.980]  Totally customizable.
[19:27.400 --> 19:28.800]  Of course, they have stats.
[19:29.060 --> 19:31.820]  My favorite one here, graph.facebook.com.
[19:32.080 --> 19:33.440]  Shove it Facebook, right?
[19:33.540 --> 19:34.640]  You're not getting in...
[19:34.640 --> 19:36.440]  Not when I'm using NextDNS.
[19:36.920 --> 19:40.800]  If you're not sure what to block, NextDNS has logs.
[19:41.340 --> 19:42.880]  Optional, you can turn them on or off.
[19:43.040 --> 19:45.080]  You can retain them for a day, for a week, whatever.
[19:45.080 --> 19:48.820]  And you see here, this is my phone.
[19:49.300 --> 19:50.360]  Jeez, Android.
[19:50.520 --> 19:51.380]  You'd think you'd stay awake.
[19:52.400 --> 20:00.160]  It allowed it to go to api.lift.com, but because the red line on the left-hand side, it blocked it from going to app.measurement.com.
[20:01.040 --> 20:03.580]  And despite that block, Lift still works.
[20:06.980 --> 20:08.600]  Secure DNS on Android.
[20:08.600 --> 20:11.040]  Android wins when it comes to operating systems.
[20:11.420 --> 20:15.100]  If you want to do secure DNS, Android is the best.
[20:15.280 --> 20:19.960]  There is one setting in Android, system-wide, and that's it.
[20:20.620 --> 20:21.480]  That's it.
[20:21.640 --> 20:24.600]  The whole system uses that secure DNS setting.
[20:28.650 --> 20:33.630]  Here's how to configure a Chromebook, the other Google system.
[20:33.810 --> 20:37.230]  Chromebook also has a single system-wide setting for secure DNS.
[20:37.830 --> 20:38.790]  That applies.
[20:38.910 --> 20:43.210]  If you have a Chromebook that's shared by multiple people, they all get that one system-wide setting.
[20:43.490 --> 20:45.350]  So Google wins here, hands down.
[20:45.910 --> 20:48.510]  Secure DNS on iOS is a brutal mess.
[20:48.510 --> 20:49.830]  I'm not even going to talk about it.
[20:50.470 --> 20:54.710]  I'm not an iOS developer, but I believe each app on iOS can use their own DNS.
[20:57.430 --> 20:58.910]  Secure DNS in a web browser.
[20:59.170 --> 21:00.910]  This is how you set it now.
[21:01.170 --> 21:02.790]  In the old days, it used to be different.
[21:02.910 --> 21:07.090]  You used to have to provide a parameter when you started the thing up, but now it's built into the browsers.
[21:08.830 --> 21:10.290]  Secure DNS in my router.
[21:10.910 --> 21:13.510]  And again, here we have arm wrestling going on.
[21:15.490 --> 21:19.050]  This next DNS will be used if you're not doing anything else.
[21:20.110 --> 21:29.530]  But if you connect it to this router, and your web browser is configured to use a different secure DNS, the web browser DNS wins.
[21:29.750 --> 21:30.970]  And that's what's going on.
[21:31.270 --> 21:37.270]  And if you have a system that's connected to a VPN, that wins too.
[21:38.050 --> 21:39.930]  So this looks like it's system-wide.
[21:40.030 --> 21:40.850]  It's not really system-wide.
[21:40.990 --> 21:41.910]  It's very complicated.
[21:42.550 --> 21:43.970]  DNS can come from the router.
[21:44.210 --> 21:45.470]  It can come from your operating system.
[21:45.590 --> 21:46.630]  It can come from your web browser.
[21:48.450 --> 21:49.670]  DNS is your friend.
[21:50.050 --> 21:53.930]  This is a recent story about routers that were being hacked with malware.
[21:54.730 --> 22:02.070]  And notice here that the malware attempted to gather the public IP address by contacting these four websites.
[22:02.830 --> 22:06.010]  Well, if you're in control of DNS, you can block those four websites.
[22:06.270 --> 22:07.270]  And guess what?
[22:07.430 --> 22:10.150]  If it couldn't get an IP address, the malware would delete itself.
[22:10.150 --> 22:11.990]  DNS is your friend.
[22:13.610 --> 22:15.070]  And this is just sad.
[22:16.270 --> 22:18.010]  This is why I'm here.
[22:18.290 --> 22:19.850]  To kind of correct this sort of stuff.
[22:20.550 --> 22:22.470]  There is a DNS blocking tester.
[22:22.690 --> 22:27.070]  A lot of these DNS companies try to block ads and trackers.
[22:27.330 --> 22:29.650]  This is a free test how well they're doing.
[22:32.870 --> 22:35.710]  ProtonVPN on iOS has something called NetShield.
[22:36.050 --> 22:37.830]  You can turn NetShield on or off.
[22:37.930 --> 22:41.470]  You can tell it just to block malware or you want to block malware ads and trackers.
[22:43.050 --> 22:45.470]  And ProtonVPN got a score of 77.
[22:45.770 --> 22:46.730]  Not the best.
[22:50.050 --> 22:51.130]  Don't need that.
[22:51.430 --> 22:51.530]  Don't need that.
[22:51.530 --> 22:54.090]  Here's another VPN provider, Windscribe.
[22:54.450 --> 22:56.610]  Their DNS system is called Robert.
[22:57.490 --> 23:02.690]  It's very much like NextDNS, but it only applies when you're connected to their VPN.
[23:03.030 --> 23:04.570]  And you see they got 100%.
[23:04.570 --> 23:05.270]  Very good.
[23:05.990 --> 23:08.410]  The EFF also has a blocking tester.
[23:08.770 --> 23:13.470]  If you're using DNS to block ads and trackers, they don't call it that.
[23:13.710 --> 23:18.430]  But if you see there in the bottom, it does show you if you're blocking ads and trackers.
[23:20.310 --> 23:21.930]  Another DNS is your friend.
[23:22.730 --> 23:24.230]  Facebook receiving sensitive...
[23:24.230 --> 23:27.690]  I mean, if you ever use the MyChart system, I think that's what it's about.
[23:27.870 --> 23:30.610]  A number of the big hospitals here in New York City use MyChart.
[23:31.230 --> 23:34.530]  And they integrate with Facebook and Facebook spies on what you're doing.
[23:34.530 --> 23:35.810]  And the MyChart system.
[23:37.330 --> 23:41.010]  So the point of this article was that the Facebook pixel was bad.
[23:41.350 --> 23:42.810]  Bad, bad, bad, bad, bad.
[23:43.670 --> 23:47.350]  But the Facebook pixel is connect.facebook.net.
[23:47.570 --> 23:51.250]  And if you're in charge of DNS, you can block that.
[23:51.450 --> 23:54.010]  And you don't have to worry about the Facebook pixel.
[23:54.750 --> 23:56.450]  The sky is not falling.
[24:01.900 --> 24:03.780]  Another article in the tech press.
[24:04.920 --> 24:09.780]  I tried to email this guy to tell him that you can block Facebook, but no response.
[24:11.080 --> 24:11.320]  Okay.
[24:12.240 --> 24:12.800]  Chromebooks.
[24:15.020 --> 24:16.520]  A Chromebook cheat sheet.
[24:17.060 --> 24:18.900]  I don't have to read everything here.
[24:19.080 --> 24:20.660]  I'm tight on time.
[24:21.240 --> 24:22.980]  Chromebooks are the greatest thing since sliced bread.
[24:23.820 --> 24:26.540]  I say that because I'm retired.
[24:27.560 --> 24:30.400]  Chromebooks put a lot of nerds out of business because they just work.
[24:30.400 --> 24:31.800]  They don't need care and feeding.
[24:33.040 --> 24:34.480]  Why do I bring up Chromebooks?
[24:34.640 --> 24:35.240]  No viruses.
[24:35.600 --> 24:36.420]  No malware.
[24:36.860 --> 24:37.960]  No care and feeding.
[24:38.480 --> 24:41.940]  So for non-technical people, it's the greatest thing since sliced bread.
[24:44.620 --> 24:46.380]  Chrome OS is the newest system.
[24:46.500 --> 24:48.600]  It defends itself better than the older systems.
[24:49.120 --> 24:52.620]  And old systems, I mean Windows, Linux, and Mac OS, these are ancient systems.
[24:52.620 --> 24:54.600]  These were designed 30 years ago.
[24:55.100 --> 24:58.580]  I mean, I've been in the field 40 years and I call these things ancient.
[24:59.940 --> 25:02.080]  Chromebook, all files are encrypted all the time.
[25:02.740 --> 25:04.340]  Erasing files off an SSD.
[25:04.920 --> 25:08.540]  Really difficult thing to do on these ancient desktop operating systems.
[25:08.800 --> 25:09.980]  Nothing on a Chromebook.
[25:10.240 --> 25:11.700]  All files are encrypted all the time.
[25:11.860 --> 25:12.840]  You delete your Gmail account.
[25:12.980 --> 25:13.560]  Everything's gone.
[25:13.700 --> 25:14.380]  Never be recovered.
[25:14.640 --> 25:16.280]  You can power wash a Chromebook.
[25:16.400 --> 25:16.980]  Everything's gone.
[25:17.160 --> 25:18.040]  Never be recovered.
[25:18.040 --> 25:21.100]  It's the best way if you have sensitive files on an SSD.
[25:21.660 --> 25:22.680]  It's your friend.
[25:24.200 --> 25:25.500]  Full Chrome browser.
[25:26.320 --> 25:30.540]  Not the limited Chrome you get on the mobile operating systems.
[25:32.420 --> 25:35.220]  Nice thing about Chromebooks, it gets three personalities.
[25:35.620 --> 25:38.460]  You can use just the Chrome web browser if you're a non-techie.
[25:38.680 --> 25:40.180]  My family does this.
[25:40.980 --> 25:43.700]  But if you're a little more techie, you can install Android apps.
[25:43.800 --> 25:46.400]  And if you're brutally techie, you can install Linux apps too.
[25:46.400 --> 25:49.500]  So it adjusts to the technical level of the user.
[25:50.660 --> 25:52.180]  Very sophisticated thing.
[25:52.760 --> 25:53.380]  Chrome OS.
[25:53.620 --> 25:55.120]  Two copies of the operating system.
[25:55.380 --> 25:57.360]  This is a big reason there's no care in feeding.
[25:57.820 --> 26:00.340]  This is something, of course, macOS will never get.
[26:00.800 --> 26:02.300]  Microsoft couldn't even spell it.
[26:03.240 --> 26:07.440]  So the system in the background updates the copy of the operating system you're not using.
[26:07.920 --> 26:12.160]  And the next time the computer's rebooted, you run the new copy of the operating system.
[26:12.760 --> 26:14.440]  It's the only way to fly.
[26:15.440 --> 26:18.740]  Anyone here know of any other systems or software that work this way?
[26:19.820 --> 26:20.640]  Go ahead, what?
[26:22.560 --> 26:23.240]  Say it again?
[26:25.920 --> 26:26.320]  Solaris?
[26:26.940 --> 26:28.440]  All right, I'm not familiar with it.
[26:28.860 --> 26:31.400]  By the way, the Chrome web browser, I believe, works this way?
[26:32.060 --> 26:32.160]  Yeah?
[26:37.990 --> 26:39.370]  I'm sorry, I can't hear you.
[26:40.030 --> 26:41.850]  As old people, our hearing goes.
[26:42.050 --> 26:42.510]  I apologize.
[26:42.590 --> 26:43.370]  And you're wearing a mask.
[26:43.490 --> 26:44.710]  So we have two strikes against us.
[26:45.410 --> 26:46.770]  But this is a big reason.
[26:48.310 --> 26:50.050]  I'm a fan of peplink routers.
[26:50.630 --> 26:52.350]  Peplink routers do the exact same thing.
[26:53.270 --> 26:54.970]  They have two copies of the firmware.
[26:55.530 --> 26:57.150]  So you're running version 7.
[26:57.170 --> 26:59.270]  You want to try out version 8 for a day or two.
[26:59.870 --> 27:00.930]  Boot to version 8.
[27:00.990 --> 27:02.050]  You're not sure yet.
[27:02.130 --> 27:03.370]  You boot back to version 7.
[27:03.370 --> 27:04.930]  It's the only way to fly.
[27:05.090 --> 27:06.850]  It's the most sophisticated thing out there.
[27:07.070 --> 27:09.790]  And you'll never see this on any other operating systems.
[27:09.970 --> 27:10.490]  At least not yet.
[27:13.650 --> 27:18.570]  The one danger in a Chromebook, of course, is you can be scammed to install a browser extension.
[27:19.410 --> 27:21.390]  Such as that Honey browser extension.
[27:22.050 --> 27:24.770]  That is the one flaw in a Chromebook ointment.
[27:28.630 --> 27:30.550]  Oh, and Chromebooks tend to be cheap.
[27:30.770 --> 27:32.390]  This was from a week or two ago.
[27:32.710 --> 27:34.370]  It's not the best Chromebook in the world.
[27:34.370 --> 27:36.270]  But for $79, geez.
[27:38.270 --> 27:40.670]  Oh, and Chrome OS Flex is just out of beta.
[27:41.370 --> 27:55.110]  You can, just like this is Google stealing from Linux, you can install a version of Chrome OS on a USB flash drive and take a desktop computer, even a Mac computer, and boot it to that flash drive.
[27:55.370 --> 27:57.870]  And you can run Chrome OS.
[27:58.030 --> 27:59.710]  It's a cut-down version of Chrome OS.
[27:59.790 --> 28:01.430]  It only has the Chrome web browser.
[28:01.610 --> 28:02.790]  It does not do Linux.
[28:02.950 --> 28:03.670]  It does not do Android.
[28:04.530 --> 28:07.750]  But it's a great way to take an old computer and make it relevant.
[28:08.910 --> 28:10.590]  Ah, and let's talk guest mode.
[28:11.430 --> 28:13.410]  Chrome OS has a guest mode.
[28:14.110 --> 28:15.750]  Guest mode is a great thing.
[28:16.770 --> 28:22.610]  Like incognito in a web browser, it saves no browsing history, but guest mode is at the operating system level.
[28:24.590 --> 28:27.270]  Yeah, you can think of it as incognito mode on steroids.
[28:27.850 --> 28:31.590]  When you enter guest mode on a Chromebook, you start off with a clean slate.
[28:32.310 --> 28:33.650]  You have no bookmarks.
[28:33.690 --> 28:34.470]  You have no extensions.
[28:34.750 --> 28:35.770]  There's no browser history.
[28:36.010 --> 28:37.510]  There's no Android apps.
[28:37.950 --> 28:39.590]  There's no link to Google Drive.
[28:39.810 --> 28:40.210]  There's no safety.
[28:40.330 --> 28:41.870]  You have a clean slate.
[28:42.430 --> 28:45.910]  While you're in guest mode, you can't even make a bookmark.
[28:45.910 --> 28:47.630]  You can't install an extension.
[28:47.950 --> 28:51.570]  The only thing you can do in guest mark is you can read and write to a USB flash drive.
[28:53.230 --> 28:55.850]  And of course, if you log into a website, they know who you are.
[28:56.230 --> 28:59.510]  When you exit guest mode, everything is thrown away.
[29:00.750 --> 29:01.690]  Everything is thrown away.
[29:01.690 --> 29:03.250]  That's why I mentioned the USB flash drive.
[29:03.450 --> 29:06.990]  If you want to save something, you have to save it to a USB flash drive.
[29:09.310 --> 29:12.030]  Apple is soon going to release lockdown mode for iOS.
[29:12.510 --> 29:15.890]  The great thing about lockdown mode is they've taken out some features.
[29:16.810 --> 29:17.270]  Okay.
[29:18.330 --> 29:21.890]  Guest mode on a Chromebook goes far, far farther than lockdown mode.
[29:24.950 --> 29:27.650]  So guest mode is great to let a child use a Chromebook.
[29:27.730 --> 29:28.510]  There's nothing they can do.
[29:28.590 --> 29:29.430]  They can't screw it up.
[29:29.430 --> 29:32.330]  Guest mode on a Chromebook is the safest way to use Facebook.
[29:32.750 --> 29:34.810]  There's very little spying they can do on you.
[29:35.250 --> 29:39.010]  TikTok goes just in the news for being spying on everything on a mobile operating system.
[29:39.410 --> 29:39.990]  So, okay.
[29:40.250 --> 29:41.650]  Do it in a guest mode on a Chromebook.
[29:44.570 --> 29:48.270]  And for hope, whistleblowers.
[29:49.890 --> 29:54.110]  If you're a whistleblower, a Chromebook in guest mode is your best friend.
[29:55.750 --> 29:58.830]  There's nothing to be had if your Chromebook is seized by the government.
[30:00.690 --> 30:03.930]  Whistleblowers, I suggest, use ProtonMail webmail.
[30:04.670 --> 30:07.690]  But you do it in a guest mode, it leaves no traces behind.
[30:09.890 --> 30:17.910]  I think ProtonMail for non-techies, whistleblowers, is far, far better than signal, wicker wire, all that sort of junk.
[30:18.490 --> 30:19.910]  Much, much easier to use.
[30:20.030 --> 30:22.030]  Much more approachable for non-techies.
[30:22.030 --> 30:23.070]  It's just webmail.
[30:26.310 --> 30:27.130]  It's free.
[30:27.290 --> 30:27.750]  It's anonymous.
[30:28.030 --> 30:28.150]  Right.
[30:28.270 --> 30:30.670]  You can open ProtonMail accounts anonymously.
[30:33.910 --> 30:39.390]  It always annoys me that no news outlets say, oh, you have a tip for us, send it via this and that.
[30:39.650 --> 30:41.290]  And nobody supports ProtonMail.
[30:41.290 --> 30:43.790]  I don't know why that is.
[30:46.210 --> 30:51.190]  ProtonMail messages between two ProtonMail users are encrypted.
[30:51.710 --> 30:52.990]  Simple, easy.
[30:53.130 --> 30:56.290]  You couldn't get any simpler, easier, freer, or more anonymous.
[30:56.290 --> 31:01.170]  But exactly what's going on when you send between, from and to a ProtonMail user.
[31:01.710 --> 31:04.890]  The world can see the from address, the world can see the to address.
[31:05.270 --> 31:08.410]  The from address, not a big deal, you can open an account anonymously.
[31:08.690 --> 31:13.650]  The world can see the subject line and the world can see the name of any attached files.
[31:14.750 --> 31:19.270]  But the body of the message and the actual attached files, no one can see that.
[31:19.570 --> 31:21.550]  Even ProtonMails, they can't see that.
[31:22.590 --> 31:24.070]  I love this picture, by the way.
[31:24.230 --> 31:26.330]  The whistleblower with their dart on their back.
[31:28.490 --> 31:31.590]  Okay, what is the first thing you should do with a new USB flash drive?
[31:35.640 --> 31:37.100]  Yes, that's the second thing.
[31:38.780 --> 31:39.420]  Say it again?
[31:41.500 --> 31:43.800]  You know, between the mask and your hearing, I'm sorry.
[31:44.740 --> 31:46.440]  Stick it in the Chromebook in guest mode.
[31:47.140 --> 31:50.620]  That is the only safe thing to do with a USB flash drive.
[31:52.560 --> 31:54.100]  And yes, then format it.
[31:55.220 --> 31:55.960]  Okay, quick takes.
[31:56.680 --> 31:57.960]  That was a couple long topics.
[31:58.080 --> 32:01.200]  Now we're going to real quick, the lightning round, so to speak.
[32:01.520 --> 32:05.320]  Again, I can't repeat this enough for those of you who are non-techies.
[32:07.900 --> 32:08.860]  Framework laptops.
[32:09.300 --> 32:12.800]  If anyone's buying a laptop, the nice thing about framework is they're modular.
[32:13.300 --> 32:17.980]  If you're interested in privacy, there's a little switch on the framework laptop.
[32:18.000 --> 32:19.920]  If you turn the camera off, it's off.
[32:20.360 --> 32:21.560]  It's off, off, off.
[32:21.980 --> 32:22.920]  Hardware-wise off.
[32:23.120 --> 32:25.120]  And the same thing for the microphone and the frame book.
[32:25.300 --> 32:26.520]  It's a little switch on the top.
[32:26.840 --> 32:28.120]  Turns them off, off, off.
[32:29.500 --> 32:31.240]  You don't have enough USB ports.
[32:31.400 --> 32:33.120]  You can take the USB ports in and out.
[32:33.440 --> 32:34.320]  It's not cheap.
[32:34.320 --> 32:36.760]  I just mentioned it because if you're buying...
[32:36.760 --> 32:38.220]  I've heard very good things about it.
[32:38.360 --> 32:40.940]  This particular review is from a trusted source.
[32:41.680 --> 32:43.540]  It's an extremely long review.
[32:44.960 --> 32:48.580]  The only bad thing about it, it only seems to support Windows 11.
[32:49.120 --> 32:51.640]  Support for Windows 10, kind of iffy.
[32:51.920 --> 32:55.820]  But if you're a Linux person, they definitely support three different Linux distros.
[32:57.440 --> 33:01.500]  If you're doing a Google search, it's certainly best not to be logged in.
[33:02.020 --> 33:05.980]  You see here on the top, when you're not logged into Google, there's a blue thing that says sign in.
[33:06.420 --> 33:10.240]  And when you are logged into Google on the bottom, you'll see your first initial in a circle.
[33:11.080 --> 33:13.880]  So yeah, Google can't spy on you if they don't know who you are.
[33:14.680 --> 33:16.400]  And they really don't like that.
[33:18.000 --> 33:19.560]  Please, please sign in.
[33:19.720 --> 33:20.180]  Please, please.
[33:22.840 --> 33:27.580]  The point about this article is that iPhones, even when they're off, they're not off.
[33:28.820 --> 33:37.120]  I think the article detailed two separate wireless systems, or maybe three, that are still running even when an iPhone is off.
[33:37.900 --> 33:40.800]  Certainly Bluetooth, I forget what the other one or two are.
[33:42.060 --> 33:47.000]  But if you turn an iPhone off, and you don't want to be tracked, you certainly want to disable the Find My feature.
[33:49.660 --> 33:50.060]  Amazon.
[33:51.020 --> 33:53.760]  If you got a phone call from Amazon, is it a scam?
[33:55.120 --> 33:57.160]  It turns out Amazon does call people.
[33:57.980 --> 33:58.960]  I was very surprised.
[33:59.100 --> 34:00.000]  I learned this about a month ago.
[34:00.100 --> 34:00.860]  I was really shocked.
[34:01.380 --> 34:02.340]  Just so you know.
[34:03.240 --> 34:08.740]  And if you see something on Amazon that says it's choice, the only thing that means is that it's in stock.
[34:11.740 --> 34:18.890]  For non-techies, a lot of people will say, hover the mouse over a link, and you'll see on the bottom where the link goes.
[34:19.060 --> 34:19.950]  That's a scam.
[34:20.760 --> 34:23.370]  Yeah, I'm no coding expert on this stuff.
[34:23.450 --> 34:27.540]  But in this example, it does not go to somegoodplace.com.
[34:28.080 --> 34:37.020]  I blogged in this particular blog two or three separate ways that that can be made to go somewhere you don't think it's going.
[34:37.020 --> 34:40.310]  So for non-techies, just realize that's useless.
[34:40.520 --> 34:43.430]  Hovering the mouse over the link does not tell you where you're going.
[34:45.280 --> 34:50.760]  If you have a short link and you want to know where it's going, there are a number of websites that will expand the link for you.
[34:53.410 --> 34:57.620]  I'm being safe on public Wi-Fi, like in this very room.
[34:59.000 --> 35:01.720]  A couple dull and boring things, of course.
[35:02.080 --> 35:03.620]  Never do your banking on it.
[35:03.780 --> 35:06.500]  Of course, if you're on an iPhone, turn off AirDrop.
[35:07.160 --> 35:08.540]  Don't ever use Windows.
[35:09.000 --> 35:13.060]  If you've ever evaluated the firewall in Windows, it's like Swiss cheese.
[35:14.310 --> 35:15.870]  Some interesting things, though.
[35:17.000 --> 35:18.300]  Evil twin networks.
[35:18.300 --> 35:21.160]  If I was a bad guy, I'd make...
[35:21.160 --> 35:22.480]  What's the network here?
[35:22.640 --> 35:23.380]  Something secure?
[35:24.450 --> 35:25.220]  HOpE secure?
[35:25.660 --> 35:31.320]  You know, there's nothing to stop someone here with a little technical signal from making their own hope secure network.
[35:31.640 --> 35:33.020]  And you'd log on to that.
[35:33.240 --> 35:36.160]  As far as I know, there's really no defense against that.
[35:38.860 --> 35:40.060]  Of course, you're on iOS.
[35:40.360 --> 35:44.560]  A recent thing in iOS is it tells you which apps are allowed to scan the local network.
[35:44.560 --> 35:48.040]  I forget if that was version 14 or 15 that came in.
[35:49.600 --> 35:52.480]  Use a Chromebook on a public Wi-Fi.
[35:53.260 --> 35:56.560]  And, of course, when you're done, tell the devices to forget the networks.
[35:56.900 --> 35:58.320]  But here's the good stuff.
[36:00.410 --> 36:03.320]  All discussions about VPNs focus on the Internet.
[36:04.320 --> 36:05.450]  Fooey on the Internet.
[36:05.800 --> 36:07.980]  The LAN is a very dangerous place.
[36:08.280 --> 36:12.760]  This picture here is actually from HOPE at the hotel.
[36:12.760 --> 36:16.020]  And the big question is, do you trust all those people?
[36:16.280 --> 36:18.600]  Because you're sharing a network with all those people.
[36:19.600 --> 36:24.100]  There's an attribute of a Wi-Fi network known as layer level 2 isolation.
[36:24.540 --> 36:26.180]  Or is it layer 2 isolation?
[36:26.460 --> 36:27.620]  I think I made a typo.
[36:28.560 --> 36:29.500]  It's layer 2.
[36:29.680 --> 36:30.120]  Sorry.
[36:31.320 --> 36:34.880]  What this controls is whether you all can see each other.
[36:35.450 --> 36:40.960]  If you scan the local network, are you going to see his computer and you see his computer?
[36:42.300 --> 36:44.240]  I tested this a little while ago.
[36:44.560 --> 36:46.300]  And this is not being used here.
[36:47.060 --> 36:52.700]  So, if you're connected to this network, realize that there are all these bad guys who are sharing the network with you.
[36:53.640 --> 36:55.180]  I saw this at Lincoln Center.
[36:55.600 --> 36:59.080]  A few years ago, I spoke at some other conference and they didn't have it enabled.
[36:59.840 --> 37:03.260]  So, you have to take this upon yourself to protect the LAN side.
[37:03.260 --> 37:07.760]  And it turns out that a small number of VPNs actually have this option.
[37:08.960 --> 37:11.720]  If you're using MoVAD, this is MoVAD on Windows.
[37:12.080 --> 37:14.400]  You see local network sharing.
[37:14.680 --> 37:15.520]  Turn it on or off.
[37:15.860 --> 37:17.540]  I actually tested that one.
[37:17.620 --> 37:18.400]  It works very well.
[37:21.300 --> 37:24.300]  iVPN has it on multiple operating systems.
[37:25.760 --> 37:27.460]  They give it different names.
[37:27.620 --> 37:28.240]  It's kind of annoying.
[37:29.680 --> 37:30.580]  Windscribe has it.
[37:30.680 --> 37:31.960]  They call it allow LAN traffic.
[37:32.120 --> 37:34.180]  I'm not 100% sure it works on Windscribe.
[37:34.620 --> 37:37.140]  But again, it's not just you have to test the software.
[37:37.300 --> 37:39.430]  You have to test it on whatever operating system you're using.
[37:40.500 --> 37:41.480]  OVPN supports it.
[37:41.840 --> 37:44.740]  ProtonVPN supports it, at least on some operating systems.
[37:45.820 --> 37:49.930]  But if you're going to be on public Wi-Fi, it's certainly something you want from your VPN.
[37:50.740 --> 37:54.480]  And the other safe way to be on public Wi-Fi is to use a travel router.
[37:55.180 --> 37:59.430]  In this case, the router connects to the public Wi-Fi networks and you connect to the router.
[38:00.660 --> 38:02.980]  The outside world, all they see is the router.
[38:04.080 --> 38:05.340]  They never see you at all.
[38:06.340 --> 38:09.700]  In this picture, this is from a company called GLiNet.
[38:09.950 --> 38:11.580]  I've never used one of their routers.
[38:11.820 --> 38:14.360]  They sell a lot of very small travel routers.
[38:24.390 --> 38:26.910]  Oh, is anybody doing this here?
[38:28.430 --> 38:31.030]  No, not enough defensive thinking here.
[38:34.150 --> 38:37.610]  All right, this is what it looks like in a peplink router.
[38:37.610 --> 38:39.750]  They call the feature Wi-Fi is WAN.
[38:40.250 --> 38:43.230]  And you can tell the router to connect to the local Wi-Fi.
[38:44.950 --> 38:46.410]  Okay, quick takes two.
[38:46.730 --> 38:47.290]  How am I doing?
[38:50.790 --> 38:51.670]  Seven minutes.
[38:52.170 --> 38:54.090]  All right, this is slide number 113.
[38:54.090 --> 38:55.010]  I got 200.
[38:56.750 --> 38:57.190]  Okay.
[38:57.970 --> 38:59.930]  iOS settings, you don't need that from me.
[39:00.030 --> 39:00.530]  That's everywhere.
[39:00.750 --> 39:01.730]  TikTok, no big deal.
[39:01.850 --> 39:03.330]  Just use a Chromebook in guest mode.
[39:03.970 --> 39:05.170]  Microsoft, don't use Windows.
[39:05.310 --> 39:06.470]  You don't need me to tell you that.
[39:06.470 --> 39:10.290]  Office software, LibreOffice versus Microsoft Office.
[39:10.590 --> 39:12.950]  It's hard to make a case for Microsoft Office.
[39:14.950 --> 39:17.450]  This presentation was done with LibreOffice.
[39:18.610 --> 39:19.370]  Oh, yeah.
[39:19.550 --> 39:22.050]  And did I mention when you get a phone call, you never know who's calling.
[39:23.390 --> 39:25.550]  I cannot repeat this enough.
[39:25.670 --> 39:27.850]  Only because nobody else says this.
[39:29.850 --> 39:30.810]  Router security.
[39:31.150 --> 39:33.490]  I spoke on router security at HOPE 2014.
[39:34.850 --> 39:36.430]  Three classes of routers.
[39:36.650 --> 39:39.290]  The worst class is whatever your ISP gives you.
[39:39.390 --> 39:41.270]  Because they really don't care about security at all.
[39:42.030 --> 39:45.850]  Then if you go to Best Buy and buy something from Netgear, okay, it's a step up.
[39:46.350 --> 39:49.270]  But the real step up is a business or professional router.
[39:49.790 --> 39:50.930]  That's what I recommend.
[39:51.670 --> 39:53.230]  These are all the fancy features.
[39:53.570 --> 39:56.850]  I don't have time to read them that you'll get in a higher-end router.
[39:57.450 --> 39:59.910]  The big thing is outbound firewall rules.
[40:00.230 --> 40:03.210]  This was from a recent conference, B-Sides, in Knoxville.
[40:03.210 --> 40:06.330]  And the guy was saying about, oh, these printers got hacked.
[40:06.990 --> 40:14.530]  Well, you know, if your router does outbound firewall rules, you can make a rule that says the printer can never phone home.
[40:15.110 --> 40:17.690]  So the printer does get hacked, so what?
[40:19.310 --> 40:22.090]  It's a very big deal, having outbound firewall rules.
[40:22.790 --> 40:23.590]  Router tips.
[40:23.750 --> 40:24.850]  Rebooted every now and then.
[40:25.130 --> 40:30.250]  There is some router malware that gets installed but cannot survive a reboot.
[40:30.250 --> 40:32.450]  It can't hurt every now and then.
[40:36.250 --> 40:37.130]  Oh, this...
[40:37.870 --> 40:39.170]  Really, the best routers.
[40:39.390 --> 40:39.910]  Look at this.
[40:40.530 --> 40:42.330]  Security, we don't need no stinkin' security.
[40:42.650 --> 40:43.830]  This is how we judge.
[40:44.370 --> 40:45.870]  All we care about is speed and range.
[40:46.250 --> 40:49.610]  Meanwhile, on my website, I've got like 30 different security features to look for.
[40:50.110 --> 40:53.150]  But the wire cutter, they can't be bothered with any of them.
[40:55.850 --> 41:00.030]  A big thing in evaluating a router is whether you need an account with the hardware vendor.
[41:00.510 --> 41:02.850]  If you don't need an account, that's a good thing.
[41:03.230 --> 41:04.950]  Is the router spying on you?
[41:05.310 --> 41:06.350]  A lot of them do.
[41:06.650 --> 41:07.990]  We'll see an article here in a second.
[41:08.890 --> 41:11.930]  Two companies that I recommend, they definitely do not spy on you.
[41:12.130 --> 41:13.010]  I verify that.
[41:14.090 --> 41:15.010]  Self-updating.
[41:15.790 --> 41:17.830]  Self-updating is great for non-techies.
[41:17.970 --> 41:19.510]  Certainly, techies don't need it.
[41:20.070 --> 41:22.690]  This is really interesting about routers spying on you.
[41:23.130 --> 41:24.710]  I like the quote about Eero.
[41:25.130 --> 41:29.230]  If you have an Eero router, the only way it's not going to spy on you is if you turn it off.
[41:31.430 --> 41:35.710]  And even though this guy was running for CNET, he couldn't get D-Link to give them the time of day.
[41:36.550 --> 41:39.050]  I think that tells you everything you need to know about D-Link.
[41:41.090 --> 41:45.250]  Peplink routers, I'm a big fan, but in the time, I will skip it.
[41:46.370 --> 41:49.450]  PCWRT router, highly recommended.
[41:49.630 --> 41:50.650]  It's $130 bucks.
[41:51.270 --> 41:55.950]  What's great about it is for that $130, you get VLANs, which...
[41:55.950 --> 41:58.550]  I'm running late, so I'm not going to explain VLANs.
[41:58.730 --> 42:00.830]  You get VLANs and VPN support.
[42:02.250 --> 42:06.530]  VPN support includes WireGuard and OpenVPN and Ike version 2.
[42:08.070 --> 42:09.650]  Firmware updates are free forever.
[42:10.370 --> 42:15.030]  For $130 bucks, I would think this is a great thing for dedicated for VPN use.
[42:15.290 --> 42:16.970]  You've got your main router, fine.
[42:17.210 --> 42:17.890]  Hook this one up.
[42:18.130 --> 42:20.090]  Use the VPN connection in that.
[42:22.470 --> 42:24.070]  Alright, skip for time.
[42:25.750 --> 42:26.910]  Skip for time.
[42:27.130 --> 42:27.650]  Passwords.
[42:29.490 --> 42:31.090]  How am I doing on time?
[42:33.910 --> 42:34.850]  Three minutes.
[42:35.630 --> 42:37.370]  Okay, there are...
[42:37.370 --> 42:38.690]  These are the five...
[42:38.690 --> 42:41.730]  I wrote a long blog about passwords, so that's the URL there.
[42:42.390 --> 42:44.330]  Five separate ways for dealing with passwords.
[42:44.570 --> 42:46.490]  I think these are probably the five most common.
[42:47.590 --> 42:50.670]  Every approach to dealing with passwords has its pros and cons.
[42:51.230 --> 43:00.290]  So anyone who gives you a suggestion, this is what you should do, and doesn't mention the downside of their favorite approach, you're dealing with a religious zealot.
[43:01.790 --> 43:06.810]  Even for a single person, chances are that multiple password approaches are the right thing to do.
[43:07.890 --> 43:12.390]  Your most important passwords, I would argue, don't belong in any computer ever anywhere.
[43:13.890 --> 43:15.730]  And what are your most important passwords?
[43:16.010 --> 43:18.450]  The obvious ones being email, financial, and Apple ID.
[43:21.530 --> 43:22.930]  Password manager software.
[43:23.410 --> 43:27.010]  My blog, I have 20 reasons why I don't like password manager software.
[43:27.390 --> 43:28.930]  I don't have time to get into it.
[43:29.010 --> 43:30.150]  I'll just leave it at phooey.
[43:30.510 --> 43:32.230]  And I'm gonna suggest a formula.
[43:33.550 --> 43:37.890]  Someone in this very space last night said don't use password formulas.
[43:38.370 --> 43:40.090]  But he was suggesting a hard formula.
[43:40.470 --> 43:43.850]  A hard formula is you give it an input, you know exactly what the output is.
[43:44.010 --> 43:46.090]  That's not what I'm suggesting here at all.
[43:47.190 --> 43:55.810]  So for formulas, the soft formulas that I'm suggesting is that you treat the password as two separate halves.
[43:56.150 --> 43:59.690]  That there's a fixed portion and a variable portion.
[44:00.570 --> 44:04.190]  The fixed portion, if you use it over and over and over, you're never gonna forget it.
[44:04.610 --> 44:09.910]  And the variable portion can be something that's for you very easy to remember.
[44:10.850 --> 44:14.030]  A simple example, I own a whole bunch of ThinkPad laptops.
[44:14.330 --> 44:15.470]  They all have different passwords.
[44:16.090 --> 44:18.450]  They all start with Tulips.
[44:19.190 --> 44:20.790]  And then they have a model number.
[44:21.130 --> 44:24.850]  So if I walk up to my T480 ThinkPad, I know it's Tulips T480.
[44:25.790 --> 44:27.270]  Very simple little formula.
[44:27.570 --> 44:28.990]  Of course, it's only for a few.
[44:30.750 --> 44:37.770]  If you're a New York Yankee fan, consider putting Babe Ruth at both ends of your password and then just have a variable thing in the middle.
[44:39.470 --> 44:48.150]  If you're in the U.S. and you pay your taxes to the IRS and the word bleeding comes to you when you think of the IRS, there's your password.
[44:48.410 --> 44:49.430]  Babe bleeding Ruth.
[44:51.170 --> 44:52.910]  You'll never forget the Babe Ruth part.
[44:53.030 --> 44:54.930]  That'll be burned into your brain very, very quickly.
[44:55.730 --> 44:56.650]  Think of Amazon.
[44:56.870 --> 44:57.450]  You think of Jungle.
[44:57.650 --> 44:58.290]  There's your password.
[44:58.710 --> 44:59.390]  Babe jungle worth.
[44:59.690 --> 45:01.210]  No, this is a pretty long password.
[45:02.110 --> 45:03.470]  And pretty easy to remember.
[45:04.070 --> 45:07.350]  And you can even write down, you can say, my IRS password is bleeding.
[45:07.570 --> 45:10.470]  And even if someone sees that, they won't know what your password is.
[45:10.970 --> 45:13.970]  Because they don't know that Babe is in the beginning and Ruth is at the end.
[45:16.610 --> 45:18.150]  Okay, more quick takes.
[45:21.910 --> 45:23.510]  I have one minute left.
[45:25.990 --> 45:27.190]  These companies can...
[45:27.190 --> 45:27.390]  No, you have five.
[45:27.550 --> 45:29.930]  Five minutes if there's no time for Q&A, so...
[45:29.930 --> 45:31.430]  Yeah, I'll have no time for...
[45:31.430 --> 45:31.590]  Yes.
[45:31.590 --> 45:32.470]  I'll take questions afterwards.
[45:32.470 --> 45:34.090]  I can be here for another six hours.
[45:34.270 --> 45:34.690]  Five minutes.
[45:35.470 --> 45:39.230]  These companies can read your files and these companies can't.
[45:42.610 --> 45:43.650]  I mentioned Backblaze.
[45:43.650 --> 45:45.210]  They're a major player.
[45:46.350 --> 45:47.970]  The complicated thing...
[45:47.970 --> 45:49.850]  The thing with major players is they get complicated.
[45:50.350 --> 45:53.570]  Backblaze does support not being able to read your files.
[45:53.790 --> 45:55.970]  But they use multiple terms for it.
[45:58.590 --> 45:59.150]  Cookies.
[45:59.950 --> 46:03.610]  Cookies are annoying because when people talk about cookies, I never know what they're talking about.
[46:05.110 --> 46:08.850]  Cookies are one way that websites can store a file on your computer.
[46:09.670 --> 46:10.230]  Fine.
[46:10.490 --> 46:13.170]  But there's also other ways.
[46:13.650 --> 46:18.350]  There's also local storage, file system, cache storage, database storage.
[46:18.570 --> 46:26.730]  So when someone says cookies, are they only talking about cookies, or are they also talking about file system storage and cache storage and all these other types?
[46:27.030 --> 46:28.030]  I never know.
[46:28.290 --> 46:31.050]  And chances are when people are talking about cookies, they don't know either.
[46:31.730 --> 46:35.590]  Oh, and by the way, when you get a text message, you never know who sent it.
[46:37.210 --> 46:38.510]  A second phone number.
[46:39.070 --> 46:40.250]  This is something I've done.
[46:40.410 --> 46:41.450]  I've been very happy with it.
[46:42.770 --> 46:45.430]  I have a second phone number with a company called TextNow.
[46:45.550 --> 46:46.870]  I pay $3 a month for it.
[46:47.110 --> 46:49.310]  It's a Wi-Fi only phone number.
[46:49.990 --> 46:51.550]  So it's also an app.
[46:51.690 --> 46:53.410]  So I can store it on multiple devices.
[46:53.410 --> 46:55.410]  If I lose one device, it's no big deal.
[46:55.890 --> 46:58.890]  And if that device is offline, I'm not getting any phone calls.
[46:59.690 --> 47:06.710]  And if I do get a phone call when the device is offline, they take a message and then they email me that something's waiting for me.
[47:07.010 --> 47:09.130]  I mean, they take a voice message, an actual recording.
[47:10.210 --> 47:12.730]  The EFF suggested a couple other companies.
[47:13.530 --> 47:15.010]  I've been happy with TextNow.
[47:15.010 --> 47:17.330]  I'm not suggesting it's the greatest thing in the world.
[47:17.570 --> 47:23.650]  But having a second sacrificial lamb phone number, I've been very happy with it.
[47:23.650 --> 47:28.650]  It's like three days after I got this, I went to some museum in the wintertime and I had to check my coat.
[47:28.850 --> 47:30.850]  And to check my coat, they wanted my phone number.
[47:31.150 --> 47:33.150]  And I said, I made the right decision.
[47:33.530 --> 47:36.590]  Because I had a sacrificial phone number to give them.
[47:39.430 --> 47:40.630]  VPNs is a big topic.
[47:42.030 --> 47:43.210]  I've got a couple minutes.
[47:44.770 --> 47:46.270]  VPNs provide three things.
[47:48.910 --> 47:50.250]  These are the three things.
[47:51.830 --> 47:52.990]  Do you need a VPN?
[47:53.770 --> 47:54.210]  Okay.
[47:55.230 --> 47:59.870]  The big thing about VPNs, I will skip to because I'm only down to a couple minutes.
[48:04.230 --> 48:05.230]  VPNs on iOS.
[48:06.570 --> 48:07.330]  VPNs on iOS.
[48:07.450 --> 48:12.690]  If you look at this screen, you'll see that two places it says you're connected to a VPN and two places you're not.
[48:13.290 --> 48:15.690]  Who the hell, who the hell came up with this?
[48:16.290 --> 48:16.950]  Who the hell appears to be?
[48:16.950 --> 48:17.850]  And I've done that with you, thanks a lot.
[48:19.850 --> 48:20.550]  Steven Wright.
[48:32.310 --> 48:39.330]  And he puts it with you here, who the hell stayed in the middle?
[48:40.530 --> 48:42.430]  Who did you say, good, who it's supposed to be?
[48:43.630 --> 48:46.950]  Lo and behold, I found that everything was not going through the tunnel.
[48:47.930 --> 48:51.890]  This was iOS 15.5, which I believe is the latest version.
[48:53.510 --> 48:54.430]  It's buggy.
[48:54.830 --> 48:57.030]  iOS is buggy when it comes to VPNs.
[48:57.330 --> 48:58.210]  It leaks.
[48:59.450 --> 49:05.310]  ProtonVPN in March 2020, they wrote this article about VPNs leaking.
[49:06.410 --> 49:10.850]  And, you know, March 2020, coronavirus, they kind of dropped it.
[49:10.850 --> 49:12.850]  They reported it to Apple.
[49:13.230 --> 49:14.190]  Apple kind of dropped it too.
[49:14.370 --> 49:15.110]  It never got fixed.
[49:16.130 --> 49:20.150]  So VPNs on iOS, I blogged about it here if you want the gory details.
[49:20.670 --> 49:22.730]  I've actually been in contact with Apple.
[49:23.290 --> 49:26.310]  And whether they've tried to recreate it, none of my business.
[49:27.150 --> 49:28.550]  Did they admit it's a bug?
[49:28.790 --> 49:29.710]  None of your business.
[49:30.090 --> 49:31.170]  Will they ever fix it?
[49:31.430 --> 49:32.110]  None of your business.
[49:33.110 --> 49:37.010]  If you're using iOS, don't trust the VPN at all.
[49:37.530 --> 49:38.650]  It is buggy.
[49:44.810 --> 49:46.390]  Oh, double VPNs.
[49:48.830 --> 49:50.030]  Quick thing about it.
[49:50.290 --> 49:53.690]  Double VPN means running two VPNs at the same time on your computer.
[49:54.410 --> 49:58.210]  You start out with a normal VPN, which is at the operating system level.
[49:59.670 --> 50:01.930]  Except on iOS, where it doesn't work.
[50:02.430 --> 50:06.410]  And then you can add a VPN that runs as an extension in your web browser.
[50:06.410 --> 50:09.710]  This is offered by TunnelBear, offered by Windscribe.
[50:10.690 --> 50:14.630]  The Opera desktop browser has VPN built into the browser itself.
[50:15.050 --> 50:19.290]  The Edge browser will soon have a VPN built into the browser itself.
[50:20.650 --> 50:24.730]  And, of course, the browser VPN provider should be different from the operating...
[50:24.730 --> 50:26.090]  This is really cool.
[50:27.690 --> 50:31.750]  So, your ISP, if you're running a VPN inside a VPN.
[50:31.750 --> 50:36.090]  So, you have an operating system level VPN and a browser level VPN.
[50:36.490 --> 50:39.390]  Your ISP only sees the operating system VPN.
[50:39.550 --> 50:40.550]  They can't see inside it.
[50:41.350 --> 50:46.930]  The company that's running your operating system VPN can see that you connect it to the VPN in your browser.
[50:48.150 --> 50:49.410]  But that's all they can see.
[50:50.370 --> 50:54.630]  The company that's running the browser VPN, well, they can see what you're doing.
[50:54.970 --> 50:55.370]  Right?
[50:55.470 --> 50:58.030]  Any VPN provider, if they're corrupt, they can see what you're doing.
[50:58.270 --> 51:00.830]  But that browser VPN provider doesn't know who you are.
[51:01.250 --> 51:04.210]  They know you're a customer of the operating system VPN.
[51:04.530 --> 51:05.690]  That's all they know about you.
[51:07.290 --> 51:07.690]  Okay.
[51:07.770 --> 51:10.650]  I'm so sorry, but this is all the time we have.
[51:10.870 --> 51:11.270]  Thank you.
[51:11.270 --> 51:13.130]  Give Michael Horowitz a big round of applause.
[51:15.110 --> 51:17.350]  The next talk...
[51:18.230 --> 51:22.750]  The next talk will be the keynote from DAC 416 or Little Theater.
[51:22.950 --> 51:24.190]  Please make your way there.
[51:24.470 --> 51:26.510]  And, you know, if Michael has time, feel free.
[51:26.750 --> 51:28.330]  You'll find him at the rest of the conference.
[51:28.850 --> 51:29.350]  Thank you all.
[51:29.410 --> 51:29.630]  Enjoy.
[51:29.750 --> 51:32.110]  And remember, hackers got talent tonight.
[51:32.390 --> 51:32.710]  Thanks.
[51:39.530 --> 51:40.130]  Thank you.
[51:42.170 --> 51:43.190]  It's on the website.
[51:43.370 --> 51:44.770]  The Offensive Computing Checklist.
[51:45.230 --> 51:45.550]  Yeah.
[51:45.930 --> 51:46.250]  Yeah.
[51:46.250 --> 51:46.750]  Gordon, thank you.
[51:47.710 --> 51:49.170]  I think he was asking the same question.
[51:49.330 --> 51:49.890]  It's all on your website.
[51:50.950 --> 51:51.270]  Yeah.
[51:51.490 --> 51:51.810]  Oh, okay.
[51:52.090 --> 51:53.450]  That's a free to checklist.com.
[51:53.630 --> 51:53.830]  It's there.
[51:54.010 --> 51:54.370]  All the slides.
[51:55.030 --> 51:55.670]  212 pages.
[51:55.810 --> 51:56.710]  Thank you for sharing your knowledge.
[51:56.750 --> 51:57.290]  What did I get to?
[51:57.370 --> 51:58.830]  I got to about one shift.
[52:00.730 --> 52:01.970]  Yeah, thank you so much.
[52:02.270 --> 52:02.410]  I appreciate it.
[52:06.180 --> 52:06.600]  Thank you.
[52:06.600 --> 52:07.180]  Thank you for the time.
[52:07.820 --> 52:08.480]  You're very welcome.
[52:08.960 --> 52:09.080]  Yeah.
[52:10.160 --> 52:11.920]  Oh, and I'm the one who called out.
[52:11.920 --> 52:15.460]  So, some Solaris, back in the day, it's horrible.
[52:15.740 --> 52:16.340]  They didn't go out of it.
[52:16.460 --> 52:17.240]  It was up.
[52:17.440 --> 52:20.700]  And then, when you passed, they used the ZFS file system.
[52:20.980 --> 52:22.140]  They created a snapshot.
[52:22.680 --> 52:26.940]  They copied the snapshot, and then, like, okay, let's reboot and see if they grow something.
[52:27.180 --> 52:29.260]  And if you did, you reverted to your previous date.
[52:29.840 --> 52:30.660]  And you didn't.
[52:30.680 --> 52:30.860]  How did we do that?
[52:30.860 --> 52:31.480]  Because they had that...
[52:31.480 --> 52:31.500]  No.
[52:31.740 --> 52:31.820]  No.