He said, if your name is Nicole and you're from Holland and you think Nietzsche is depressing—I don't know if I pronounced that correctly, I'm not sure—but if you think Nietzsche is depressing, then call me. Here's my number.

Is this the kind of small talk people get up to these days?

You know, if you've gone to university, Graham, like some of us have, you'd of course know that this is what we talk about all the time in the cafes.

Smashing Security, Episode 105: Facebook, Nietzsche, Tesla, and Nicole with Carole Theriault and Graham Cluley. Hello, hello, and welcome to Smashing Security, Episode 105. My name is Graham Cluley.

I'm Carole Theriault.

Hello, Carole.

Hello.

And we've got a special guest with us, haven't we?

Someone who hasn't been on the show before.

Drum roll, please. We are joined by Madame Jessica Barker.

Hello, it's a pleasure to be here.

I'm not sure she's a madame.

Well, not a madam.

Oh, I see. Right.

Big difference.

Very big difference. He's not very worldly, Jessica.

I don't want to be that worldly. Jessica, for those people who don't know you, describe yourself and what you do.

Sure. So I work in cybersecurity on the human side of cybersecurity. So my interests are around awareness, behavior, culture, and I am one of the co-founders and co-CEOs of Sygenta.

And we had the pleasure of hanging out with you a bit because we were all on the Secure Tour earlier this year, weren't we, with the guys from Chess Cybersecurity?

That was so much fun.

It was great fun.

You all had to hear my jokes repeatedly again and again.

Now we have an exciting show this week. We're talking about Tesla, we're talking about University of Calgary and people named Nicole, and we're talking about Facebook and whether they deserve the kick in the shins. Yes, all this coming up. Stay tuned. Hi everyone. Graham, I've brought you here because I think you have something to explain to all our thousands and thousands and thousands of listeners.

It's not that bad. Do I really have to?

Yep.

Okay. Well, I made a small, a little— Don't downplay it. I made a mistake while we did the recording of this week's show and it means that our audio is suboptimal.

Exactly. Now it's not bad. It's definitely not terrible. Definitely worth listening to. You will—those of you that are very keen will hear a few little scritches and scratches in some weird places. You can listen out for those. So it's all Graham's fault, and it's okay, he's learned from his mistake. But as punishment, we are not going to have a sponsor this week because we're self-flagellating, aren't we?

So we're—

No, we're self-regulating. We're self-regulating, and we like to put out quality. And you know, it's Thanksgiving, isn't it, Graham?

It is Thanksgiving.

So thank you to all our sponsors who supported us thus far, and our American listeners. And listeners, as a gift for you, you get to zoom through this episode without any interruption. You're welcome.

But if anyone does want to sponsor us in future, I heard we've got a few gaps in the schedule available for 2019, so they should get in touch.

How about we word it a different way? How about we say something like, we are now taking sponsorship for 2019 shows. So if you or your company are interested in partnering with us, get in touch via .

Cool. On with the show. And welcome back, and welcome to the future. Imagine a future where we're all being transported in driverless cars, where colonies have been set up on the planet Mars, where we can jump on high-speed transportation systems like Hyperloop and go from San Francisco to Los Angeles at 800 miles per hour.

Wow. Graham, have you been reading sci-fi again?

This isn't sci-fi. This is inside the brain of our beloved leader, the technology whiz kid known as Elon Musk.

Excuse me, he is not my leader, please.

He's not your particular guiding sun ray, Carole, in the future?

No, definitely not.

Well, some people really love to defend Tesla, and they love to defend Elon Musk as well. They get really, really zealot-like, don't they? I don't— have you ever been in a Tesla car, either of you?

No. No, I never have.

I haven't either, but I've peered in through the window and it's like a glimpse into the future with their great big iPad-like screen. And people who have them are very— they love to talk about them.

My husband's been in one.

They love to talk about the gadgets. Has he?

Yeah, he's been in one and he said he was very scared for his life because they drove very fast down windy roads out on the West Coast. But yeah, he'd had the time of his life.

Is this the future? Just more terror?

Well, one person who certainly is looking forward to Teslas is a guy called Dan. He doesn't appear to have a surname. Dan lives in Cleveland with his wife Mimi and the 3 kids, and he runs a website called DansDeals.com, which links to online deals for anything and everything, offers advice on anything to do with points and air miles and travel and things like that. And he decided it was time to upgrade his car and get a Tesla. Model 3.

Oh, business is going well, isn't it, Dan?

Clearly it is. Affiliate marketing works well. So you'd expect it to be pretty easy to get your hands on a Tesla, wouldn't you, once they've actually manufactured them? Turns out it's a bit of a nightmare.

Don't we know that there have been problems from our sometimes guest, Scott Helmee?

Oh yes, because he's after a Tesla, isn't he?

Right, yeah, yeah.

He's been waiting for a long old time. He's a great car head, isn't he? What do they call them?

Yeah, car head. That's right.

Piston head.

Something like that.

Petrol head? Petrol. Thank you.

Well, not petrol.

Oh, she shouldn't have told him.

Anyway, Dan had all kinds of false starts trying to get his Tesla, screw-ups, problems, before he'd even had the keys handed over to them. And he's detailed all this in a long blog post. But he shrugged them off because he thought, well, it will all be worth it when I finally get my paws on this car of the future. And eventually—

That's what Scott Helmee says too.

Eventually, the glorious day came. And he went to pick up the car, but there were problems and the car needed to get some part of the windscreen fixed. And the garage caused even more damage while it was fixing the windscreen. Basically, he didn't have a great service experience. Okay. And Tesla wasn't keeping its promises. And it's at this point that Dan went onto Tesla's online customer forum and he posted at length about his negative experience. Oh. And a thread began to appear. And he thought, oh, I need to clarify something in my initial post. So he went to edit his post. And when he did that, the thread completely disappeared.

Okay.

It was like Pravda-like instruction from on high that the negative message had to be zapped. And it turned out that he was limited to only making one post a day as he didn't have what was called an owner's account, 'cause obviously they hadn't determined that he was a Tesla owner.

Oh, because he didn't own a Tesla yet.

Gotcha.

Well, he did.

No, he did, but they hadn't updated their database or something.

Yeah. Something crazy had gone wrong. So he rings up Tesla customer service and says, "Ring, ring, ring, ring." Okay. We understand the problem." Yes, that's right.

Yeah.

And they nicked his name. I don't know if his estate gets any money from Elon Musk, but anyway, they say they're going to work it out. They say, "We'll pass on your message to the IT department." Okay. One hour passes, tick, tick, tick, and Dan checks back on the forum and something has changed. Suddenly he has the ability to edit and delete everybody's posts. He found he could access special hidden forums, but more than that, he could also access the contact information of 1.5 million account holders.

That's exactly what you want to give a customer who is disgruntled, right?

Exactly. The ultimate power. Christmas has arrived. Celebrate good times, come on. He found that he had basically been given admin rights by Tesla customer service just by ringing them up. And he could now not only view all of these users, but even employee profiles. He even found the real Elon Musk. Turns out he hadn't logged in for 3 and a half years, which might explain why the forum was so badly organised and no one was answering questions.

Awkward.

He could even create new car reservations or request a Supercharger to be built in a particular street. You know, so if he wanted a Supercharger in his street, he could order one.

He must have been at the crossroads, right, when he discovered what power he had. He must have sat there and said, "Do I change this to basically send over something to me and use this for my benefit and be a bit naughty? Or do I tell the world?"

Yes, yes.

Which way is he going to take it? Exactly.

I'm fascinated that you come up with that particular moral dilemma, actually, Carole, because I would've thought you'd just be a decent human being. But the fact that you are pondering this—

Well, I don't know if Dan's a decent human being.

Well, you are projecting and assuming he might be a bad guy, which I think might say more about you than lovely Dan from DanSteels.com.

You've only known me 20 years. Yeah, but Dan—

Exactly. Anyway, he found that he has all this access and he had a little bit more poking around. And what he found was that he wasn't the only administrator who didn't have a Tesla email account associated. There were other administrators with Gmail and Yahoo accounts. And he began to wonder, has Tesla tech support screwed up like this in the past? Right. Made other people admins.

Yeah.

And he found that others who continued to have access were former employees of Tesla who still had access.

The can of worms just gets bigger and bigger. Why hadn't their rights been revoked? Anyway, so what did he do with all this power? Of course he did.

Okay. Oh, I just want to be heard.

Because that's all he'd really wanted. Right. That's what everyone wants. So that worked and he got his message back, but it triggered an interesting response. Because now people got suspicious that someone who now had an official Tesla logo next to his username was slagging off Tesla. And they asked him, well, how did you get that little red steering wheel, that little logo there next to your name? And are you deliberately sabotaging the forum? And all these new threads started springing up saying, who is Dan? And conspiracy theories.

Elon Musk lovers went nuts.

And there are lots of them.

Lots of them.

Oh dear, you don't want to alienate the Elon Musk fans.

This is definitely a get the popcorn moment, isn't it?

Dan, however, fortunately was a good guy and he was just trying to get Tesla to listen to him about the security issue. Finally, eventually they responded and they issued a statement saying, we inadvertently granted a higher level of permission to someone who shouldn't have had it. And we've audited the accounts and we've had to make adjustments to some of the privileges that some of the account holders had. But we've got no reason to believe that any of this has been abused.

I'm looking for the word sorry. Somewhere.

It's not really in the vocabulary of Elon Musk, I think, and his company to apologize.

Yeah, that's true. There's quite a lot of precedent for that, isn't there?

But they have said, you know, if anyone finds a potential security vulnerability in future, to address it to their bug bounty program. But I just found it amazing that there are so many hackers trying to break into message boards and steal information. Sometimes all you've got to do is ring up customer service and say, "you know, I'm having a problem with my account on your forum." And they say, "Here's the admin rights, go and sort it out for yourself."

That they accidentally made him an owner of the forum rather than an owner that could contribute to the forum? Is that a bug? Yeah, they'd probably say, "Unfortunately, what you found is not exactly a bug. And whilst we love to pay a bounty, we are under no obligation to do so.

Well, they haven't yet said that, although they've pointed this user towards the bug bounty program, they haven't yet said whether he's going to actually make any cash out of this or not. So that remains to be seen, but I feel like he's done everyone a service here. And if it actually gets more Tesla employees properly engaged on the forum, answering people's questions and providing a high-level service, then that's a win for all of us.

Yeah, it sounds like a yay Dan moment, doesn't it?

I feel like Dan's Deals is only going to go from strength to strength as well. It's great publicity for you.

Yeah, there's some free advertising for you, Dan. High five.

Sponsor next time. Should we ask him if he's interested?

Jessica, what's your story for us this week?

So this is the story of 246 Nicoles, or rather 247 Nicoles.

Okay.

Now for this tale, we are visiting Calgary, and actually there is a theme of Holland returning. I know you were talking about Holland last week, and we're touching on Holland again.

Big fans of the Dutch on this show.

Yes.

Me too.

Yes.

So, for this tale, we're in Calgary. We are on a night out near the University of Calgary, where a man named Carlos met a woman named Nicole. And, by Carlos's account at least, they seemed to hit it off.

Ooh la la!

Carlos, yeah, there seemed to be some love or friendship in the air. Carlos gave Nicole and her friend a lift home, and Nicole gave Carlos her number. So, all seems to be going well.

Is that what youngsters do these days? They give each other their numbers?

That's what I did! That's what we did when we were kids!

It seems that's so bloody normal!

Blatant, isn't it? So brazen. Here is my phone number. Do people really do that? I thought they only did that in the movies.

Well, what else? Find me on Facebook. Did you date ever, Graham?

No, not by giving anyone my telephone number. No.

Oh, how interesting.

Yeah, you're— we're the weird ones. We're the weird ones. You're right, you're right, totally.

I once got into a relationship by a woman pouring a jug of orange juice over my head. That was classic.

You don't need therapy or anything. Don't worry about that.

So lesson to any potential datees out there, no, don't exchange phone numbers, exchange orange juice over the head. That's the way. Well, it's not how it started with Carlos and Nicole. Nicole gave Carlos her number, but Carlos went to call Nicole the next day and discovered the number was incorrect.

I have to imagine.

Oh, now that.

I've done that too.

That I can believe. Classic. That would, I mean, if I was in a position to ever give anyone my number. If anyone was interested in me and I thought, no, no, no, just ask me, guys, I've got it, I would just give them a random number. You would do that. So I imagine a lot of women may find themselves in the situation to think, sure, it's easier to give him the wrong number and I'll never see him again.

The wrong number, he'll never— yeah, I'll never be confronted. I won't have to tell him I don't like him.

All right.

And you'd have thought that Carlos would have realized this and thought, okay, she's given me the brush off, move on. But no. Oh, Carlos, it seems, is a persistent chap. He was undeterred, and so he used some information he had. Nicole had told him that she was studying at the University of Calgary, and so Carlos sent an email to all 246 Nicoles, Nicolettes, Nickies, any combination of all.

What a nightmare! Okay, and what did he write? My head's in my hands, my head's in my hands. I have that David Brent, The Office moment.

What kind of freak is this?

Hey, hey, hold on, we don't know if he's a freak yet.

No, we do! Carole, we know he's a freak.

What if she left her medical alert bracelet behind and he was trying to find her so he could return it? You don't even know what he said yet in the email. Let's just see. Oh, he didn't say that.

Okay, you're an optimistic sort though, and I like that. But he said, if your name is Nicole and you're from Holland and you think Nietzsche is depressing— I hope I pronounced that correctly, I'm not sure. But if you think Nietzsche is depressing, then call me.

Here's my number. Is this the kind of small talk people get up to these days?

Well, you know, if you've gone to university, Graham, like some of us have, you'd of course know that this is what we talk about all the time in the cafes. Okay.

So clearly they had a deep philosophical conversation and Carlos wanted to continue this. But he then, to be fair, he went on to say, if you don't fit this description, then ignore me. And if you are the Nicole and you just don't want to talk to me, well, that's okay as well.

I love Canadians. I am so— see, that's— if he's stalky at this stage, he's doing it in a kind of nice way, right?

He's being polite.

Stalkers really narrowed it down from 246 Nicoles though. Okay, you know what, I don't know, I'm gonna think, oh, it could be me, you know.

Actually, I don't think this is stalking at all at this stage. Actually, I think it's a bit— no, I really don't. I think he did a bit of a weird thing. That was a weird thing to do. But hey, if I were the Nicole, I might go, oh my God, freak. But then I read the message and I just wouldn't answer. And I wouldn't feel worried. And if I was another Nicole, I would just delete it, right? So, okay, at this stage I'm just saying that's where I'm standing. I'm saying not stalkery, bit weird.

Well, I think freak. I think definitely enough freak.

You takes one to know one, eh, Clue? Okay, I'm sorry, I don't know why I'm being so mean to you today, but I'm having fun.

105 episodes, used to it.

So the story continues. This actually united the 246 Nicoles. Emailed amongst themselves. And some classic lines between them, such as, "Would the real Nicole please stand up?" Of course. Brilliant. And plotting, you know, how do we all reply to say we are the Nicole? Just spam his inbox? "I'm Spartacus." "No, I'm Spartacus." So then they made a Facebook group called Nicole from Last Night, and some of them even met up for drinks.

I love it.

And have become firm friends.

Brilliant.

So you'd think this tale now has turned into female solidarity, wonderful, great fun, but that was not the end of the story.

Oh God, this is brilliant. I need more popcorn and everything.

Okay.

The Nicole then emerges, the Nicole that had found Nietzsche so depressing that she wanted to discuss it on a night out. She had not received the email.

Oh!

Because it wasn't her name.

It was her name.

Okay.

It actually was her name, but she was on an exchange visit to Canada from Holland, and so she did not yet have a University of Calgary email address, and she had misremembered her number because she wasn't used to this new number. So, but she saw this on Facebook, this viral "Nicoles from last night" group, and she responded to them saying, "I'm so pleased. I didn't get the beautiful email," in her words, "but could you please connect me with Carlos?"

Oh, you see?

So she's a freak as well. So it's just two weird people have connected.

There's one freak here, one negative freak here. This is what I'm seeing.

And now they might breed and make more freaks.

Harsh words.

Very harsh. I know, I know.

But I mean, I do agree. When I started reading this, I thought, this is weird, this is stalker territory. And this is what it brings up, I think: many security lessons that we can take from this, but one being, when does it become stalking versus just romantically pursuing someone in this age where there is so much publicly available information on people? If you have someone's name, where they're studying, where they're working, pretty easy to track people down now, or most people. So it raises lots of questions and also potentially provides the plot of the next rom-com to emerge from Hollywood.

See, the problem though then is, say for example, I was out with a pal and they left something behind that was important and I really need to get back to them, medication, and then I send this email. And if there were some kind of weird legislation that said you can never do this.

And, you know, people make great friendships and connections and they're able to be successful in their job lines.

But this isn't stalkery, right? Everything turned out great on all fronts, really, right?

Everything turned out well.

I don't think it's stalkery at all.

You don't? No. It's a little pushy.

It's pushing at the boundary.

Yes, I think I agree.

He was keen.

Jessica Barker. Graham Cluley. Keen, true.

Yeah.

And we weren't there on that night out. It seems they got on very well and they wanted to continue their philosophical debate. So Nicole—

Nicole's nattering about Nietzsche.

Yeah.

With Übermensch Carlos, the Superman.

But I want to know how he got the 246 names.

Well, that's the security bit, isn't it? It's how, why was it so easy to access that information? How else could that information have been abused if they'd fallen into the hands of someone with more criminal intent rather than someone who was just a bit weird?

Maybe it's all open. Maybe you can, you know, maybe there's a directory at the University of

Maybe.

Calgary that says, here are, you know, if you need to get in touch with anyone on

But maybe it shouldn't be, Carole, because I mean, the guy, as far as I know, wasn't at the university. It's not he had a— I mean, it could be used by spammers, for instance, couldn't it?

our campus at their official account, here's how to do it.

Yeah.

Oh yeah.

Phishing.

Live in fear.

Live in fear.

Just saying it was a bit Daily Mail of you, Graham, to jump to the whole stalker thing. Just a bit Piers Morgan of you. Just saying.

Oh, there's no greater offense. I love that I've offended you now, right before I go into my story. Go on then, Carole, let's hear what you've got. Come on.

Well, okay, now I feel a bit silly because I have a problem, a dilemma, right?

Oh, do you?

Yeah, and I want to know if I should feel bad about something, and I was maybe thinking you guys could give me a hand.

Now you want a hand, okay.

So, okay, first, I am predisposed to vouch for the underdog, just the way I'm built, right? And two, I think I'm having this dilemma because what I think and what I feel are not aligned. Sometimes you think something and you feel something and they're not always the same, right?

Intriguing.

Okay, so here's the problem. This is all about Facebook. I know you guys were hoping to get some really juicy personal details.

Yes. I was hoping that you were out on a date with some guy called Orlando who wanted to speak to you about Virginia Woolf. And yeah, okay, come on then, let's hear what have you got? What have you got? Come on.

Okay, so lately, Facebook has been getting kicked really hard in the proverbial nuts. Since the Cambridge Analytica scandal last spring, Facebook keeps falling on its pimply face as it tries to dodge the media negative spotlight. I mean, just think about these headlines. I just did a little search. This is just in the last few days, maybe a week. Facebook exodus. Nearly half of young users have deleted the app from their phone in the last year. You know, eight parliaments are now demanding Zuckerberg answers for Facebook scandals. A new study finds that cutting out your social media to 30 minutes a day reduces risks of depression and loneliness. Why does our company suck at having a moral compass? You've got ex-CSOs saying basically Facebook could have responded more quickly to the Russian interference. And then the big juicy piece, The New York Times.

Oh, yes.

Yeah, yeah. So that while Zuckerberg's out there whimpering apologies between sips of water, you've got the CEO, Sheryl Sandberg, doing her best to downplay the crisis and even hires a firm to smear critics. And some are accusing it of fueling antisemitism. So it's all very gross. And just think of poor Nick Clegg, right? Ex-deputy prime minister of the UK, now Facebook's new global head of policy and communications. Now, he's been asked by his new employers to conduct a review of Facebook's use of lobbying firms. Hmm, that's going to be pretty non-controversial, right? I think you've done nothing wrong, Facebook, and thank you very much for my paycheck. But basically, you have many, many stories of unhappy Facebook users, unhappy Facebook workers, shady Facebook practices, shadier lobbying tactics, and they've connected more than 2.2 billion people. We all say they've reshaped political campaigns for the worse. Their advertising business, some might say, stinks. And along the way, they've amassed the largest ever repository of personal data. So my dilemma, right?

Sarah, I'm sorry, that was a big preamble.

I've spent years and years attacking Facebook and its shitty security, and finally the mass media are doing my job for me. Should I be thrilled to watch Facebook fall over?

Or—

And I'm not saying I feel sorry for them, but I wonder whether we're being fair and just targeting our aim so narrowly on Facebook. I mean, are they the sacrificial lamb? What about Twitter, Reddit, Google? Are they better? Certainly, I don't think Facebook is the only one at fault. But Facebook has a particularly tight grip on people, doesn't it?

I think that's it. And I think, you know, you said, should you be thrilled to watch them fail and be so criticized? And I think we can be pleased they are maybe being held to account for some of these practices, but it's a shame they've engaged with them. You say, they have actually connected people. Some people find it fantastic for staying in touch, and meeting people and having friends. And it's a shame that all of that can't just be used for good and that there is so much insidiousness with it, that they do collect so much data, that it's been used for political reasons, that it's used for so much advertising, which of course, you know, it's free. So, if you're not paying for something, then you are the product. But, so, I think the whole thing is a bit icky.

You're right. I agree. But I do think the media is at risk of seeming a little witch-hunty here.

Well, let's not forget that the media has a vested interest in this as well, because the media is being destroyed and damaged by the fact that so many people now will get their news from Facebook.

That's a good point. I didn't— that makes sense, yeah.

In some cases, the web traffic even isn't going to those media news sites, and it's staying on Facebook.

Well, all they have to do is write about Trump, right? And they can fix that.

But, you know, so I mean, the media is having a very tough time with the internet anyway, and Facebook is a large part of the internet.

Internet.

I mean, I'm not on Facebook anymore, and I can't imagine what would lure me back other than maybe the thought of joining a Friedrich Nietzsche dating group on the site.

You're not invited. Your name's not Nicole.

So it's a very tough entry, isn't it? That's what he should have done. He should have just created a— sorry to go back to the previous story— he should have just created a Facebook group and only invited people called Nicole.

Maybe he's not on Facebook.

He could have done that with a Facebook ad, couldn't he? He just spent 50 quid and maybe he'd been able to locate her with the amount of information they have. But yeah, I mean, it's not fun to pick on anyone, but you know what? I think Facebook can handle it. It's not as though they're going to go out of business.

And maybe this mounting pressure is necessary to force them to change, right?

And I think the more they're under pressure, the more other social networking, social media sites are going to look and say, well, actually, we don't want it to be us next.

Yeah, so basically Facebook is being treated by its competitors and the media as the kind of sacrificial lamb. And I just hope that's enough, because really, what we probably need is some legislators, policymakers, think tanks, active groups to try and think about how we fix this.

I don't know. I mean, I'm not a huge fan of loads and loads of legislation. I think sometimes the people in power, I don't think they always have a good handle on how technology is going. And I think you can destroy some innovation.

That's a really, really good point. And technology firms should be involved in it.

You just imagine how long it takes to get an agreement and all the rest of it. We're working on it.

Also, don't even try. Don't even try.

No, no, no. What I actually believe will make a difference to Facebook is not what governments and legislators say. I think that the way to get them to change is through their pocket, is through the money they make, it's through advertisers. So if advertisers don't like what Facebook is doing, what it's doing to people who use the site, or how it's been abused by unpleasant groups, for instance, if we want to put it that way, then advertisers should stop using Facebook.

And they are, they are, right? Their share price is plummeting for many reasons. They're even calling for Zuckerberg's head, right?

Yeah. And from what I've heard, a lot of advertisers are actually finding that social media advertising simply does not work very well. And some of the numbers regarding how viewed their ads were, for instance, on Facebook are massively inflated and doesn't really reflect true engagement.

On the Pivot podcast, Kara Swisher— sorry, I said her name wrong. Kara Swisher. I can't say her name. Swisher. Kara Swisher. What did you say?

The host.

So on the Pivot podcast, they said of Mark Zuckerberg, he's the CEO, he has 60%, he's an adult, and they're treating him like this sort of adult boy king who doesn't know what's going on. It's ridiculous. He knows exactly what's going on. And I think that's helped me, you know, I think, I think I'm on that side. So he's not a kid. He's fucked up.

And it's not just him, you know, there's a board of people at Facebook, some of whom are somewhat controversial and have vested interests and fingers in different pies. And, you know, they are there to advise him as well and make policy. And, you know, it's not solely on Mark Zuckerberg's shoulders, however much influence indeed he may have.

Yeah, I agree.

Not a fan. Not a fan.

I got a message for him. I've got a message for him. Mark, Welcome to Dumpsville, population you.

We're trying to increase our number of listeners at the moment.

That's not the way to endear anybody.

He's never been negative about our show despite our content. And you join us at our favourite part of the show, the part of the show that we like to call Pick of the Week.

Pick of the

Pick of the Week.

Pick of the Week is the part of the show where everyone chooses something they like. It could be a funny story, a book that they've read, a TV show, a movie, a record, a podcast, a website, or an app.

Week. Jessica, you

Whatever they like. It doesn't have to be security-related necessarily.

have to say it too. Better not be.

Well, my Pick of the Week is not security-related.

Excellent.

It comes from the era before cybersecurity concerns and phishing. And just once again, just like last week, I'm going to go back in time. I'm actually going to go back 50 years this time, because November 2018 is of course the 50th anniversary.

They don't make cool things anymore.

Well, you know what, Carole? Maybe they don't.

We've been to the future with Graham. Now we're going to the past. This is impressive time travelling.

He doesn't know what he wants. He doesn't know what he wants. Have you tried meditating?

Oh, there's a link, Carole, with meditation. I am going back in the past to 1968 when the Beatles brought out their famous White Album, which they composed while they were on a meditation retreat in Rishikesh in India with the Maharishi. They wrote, I don't know, 30-odd songs on that album. That album, the only Beatles double album, has been remixed and re-released this month, and it's joined as well by the infamous Esher demos. So what happened was when they came back from India, three of the Beatles, the ones who matter, John, Paul, and George — Ringo's all right, but you know, he wasn't a songwriter — they went round to George's bungalow and they recorded on acoustic guitars all the songs which they'd been writing in India.

I love how you're saying it like you were there.

Well, you can be there because Ringo passed me a doobie. Those tapes have been dug out and have now been released, so you can hear early versions of all of these fantastic songs. So as well as the original album being remixed, you've got that. You've also got 50 other rehearsal takes and sessions from this fantastic album. Much of this has never been previously released, or it's only been available on bootleg. And they've remixed the stereo, so you haven't just got the vocals in one ear. It's fantastic. The drums and the bass are more to the foreground, possibly because those are the only two Beatles that are still alive, and so they were lobbying to have more drums and bass. But it is fantastic. It sounds like a brand new record. It's 50 years, nothing has changed. This is just as relevant today. I would recommend everyone go and check out—

All this for the very low, low price of—

Not that low if you get the super deluxe edition. Well, if you get the super duper duper deluxe edition, it's going to cost you over £100. I have been listening on Spotify. I think I've been listening to it, so I'm hoping someone's going to get this to me for Christmas because then I get the book.

You're having a laugh.

You get the book, you get all the CDs, you can get it on vinyl.

Anyway, yeah, you know what, if you were nicer, this — maybe I would.

The Beatles are the most underrated group.

Oh yeah, no one's heard of them. You dated a girl once who hadn't heard from them, and you stopped dating her when you found out she didn't know about the Beatles.

Can you blame me? Can you blame me?

So pouring orange juice over your head is fine, but yeah, if you don't know the Beatles— Not a Beatles fan, kick her to the curb. Swipe left or right, or I don't know which one. The Beatles, White Album, my pick of the week. A pretty darn good one as well.

Okay, bye.

Just you and me now, Jess. See you, Graham.

Finally.

Bye now. Jessica, what's your pick of the week?

Well, so my pick of the week is — there is a slight security angle, so I do apologize, Carole, but I will explain. It's wider than security. So I travel a lot for work and constantly find I am exhausting the in-flight entertainment options. Watched, you know, there's only so many Veeps someone can watch on repeat. So recently I'm flying back from Canada, the middle of the night, I can't sleep. I felt like I'd watched everything decent on offer.

You didn't think of listening to a security podcast or something?

Perhaps on your phone?

Yeah, I downloaded and listened to all of the ones available at the time. It was a very, very, very long flight from Canada. We just looped around the world.

100 episodes couldn't cut it, Graham.

Not quite long enough. So, I was moving on for something else to do. And I stumbled across a film called American Animals. And I thought, well, that's an intriguing name. And it said something about won awards. You know, independent movie awards, and okay, I'll give it a go, and it was an amazing film. I was so rewarded for my risk-taking on this name alone. It is a film that merges documentary and drama in a way that is very unusual but really works, and it tells the real story of a group of young men, university students, who plan one of the most ambitious and audacious art heists in history. Real story. And so we see it dramatized. We also hear from the men involved, their parents, other people.

So it's a documentary here.

So it's a mix of drama and documentary, and it works so well. And it is fascinating. I was hooked. It was making me laugh. It made me cry on the plane. It made— it was, you know, teeth clenching.

It's because you were leaving Canada. That's why you were crying. I understand.

That's true, that's true. But it was amazing, and for once, what I loved about this film, it was a heist movie that doesn't glamorize the heist. So, it was, I think, an amazing message and told really well. And actually, I bring it back to security, but it had some things in it that I just think people working in security would love. There was some great examples of social engineering in there, obviously the importance of physical security. But for me, what stood out was the way it explores the mindset of people who are smart and they are bored, they are ambitious but without a purpose, and these guys that wanted to make their mark on the world and subvert the status quo. So, very interesting to think about in terms of the profile of some people engaging in cybercrime.

And was it Thom Cruise Okay, I'm hooked. I'm definitely gonna watch this. This sounds right up my street.

Also great soundtrack, so highly recommended. My pick of the week.

slammed down on cords being

If I hadn't become a computer security expert or whatever, I'd always fancied becoming an international art thief. And that's for real.

suspended from the ceiling?

I always thought if I could imagine myself on this—

Do you feel you know a lot about art, Graham?

I wouldn't have to, Carole. I—

Oh, you just go, there's some paint, that's worth something.

No, I would be hireable. I'd be the Pink Panther.

Oh, right.

Into galleries. This is what I imagined. I always wanted A lot of people have made the comparison, and I don't mean in terms of our height. There is a similarity.

It's a film for you. Yeah, American Animals. I will go and check it out.

to do that.

Pleasure.

What have you got?

Well, I'm choosing something following your lead, Graham, that's been around for a while, but that I didn't know anything about until it's just started blowing up again this week. So I'm interested in if you guys know about this. So my pick of the week is that it's an iPhone tip, that on your iPhone keyboard, you have a kind of mouse. So by simply pressing down any key while you scroll, your cursor goes into mouse mode. And this works in native and non-native apps.

Yeah.

Oh, what? Yeah.

It becomes like a trackpad.

You knew?

You knew?

No, no, no. This popped up on my Twitter because it's been everywhere this week.

Mine too.

I was worried that, you know, by the time this show goes out Thursday, everyone's gonna be like, yeah, God, we're so bored about it. Yes, we know.

No, it's fantastic. If no one's heard of it, this is they have to try it out because it is life-changing. Because normally when you're trying to move your cursor up and, you know, to correct a typo or something, what you've been writing, your big fat finger, Carole, your big fat finger, specifically your big fat finger, gets in the way, doesn't it? So you can't see quite. But with this thing, this trick, which we'll link to, I imagine, in the show notes.

Yes. Yes.

If anyone needs a proper explanation, it allows you to sort of skate around in the text so much more easily, like on a trackpad.

And it's been around for 3 years. This keyboard feature was discovered recently because a Twitter user called Chrissy Bear Davis shared her discovery on Twitter. And she has a few thousand followers and has her own online business, but she's getting so much media attention and already she's got tweets saying, "I'm on the news," you know? But anyway, it seems to have captured everybody, but it is so great. So I am very thankful to Chrissy Bear Davis. In fact, she is my pick of the week. For putting out that tweet that has made my life much more enjoyable. Your digital life, certainly.

It makes me wonder what other tricks and tips are out there that we just don't know about, that they're just not telling us. Come on, Chrissy.

Yeah, Chrissy, this could be your new career.

Because I mean, Apple, you know, they cause a stink by getting rid of Touch ID or headphone jack and things like that. But if they made more of a splash about some of these features which have already existed for a while that people aren't aware of, they bubbled them up, people would probably give them a lot more love, wouldn't they?

Yeah. Do they not realise that we don't know? Do they— does this take them by surprise when 3 years later we're all like, oh, you can do that?

Yeah. And they're like, no, duh.

Oh, didn't we tell you?

Well, there you go. My pick of the week. I think we've had 3 excellent picks of the week this week. Thank you very much, everybody.

Well, on that enormous bombshell of an iPhone, we've just about wrapped up the show for this week. Jessica, I'm sure people would love to follow you on the socials. What's the best way in which they can do that?

Don't do it in a stalkery way.

Yes, my name is not Nicole. You can find me on Twitter @DrJessicaBarker.

Smashing. And you can find us on Twitter @SmashingSecurity. No G, Twitter wouldn't allow us to have a G. And it's a good idea because we tweet now and again with voucher codes so that you can get special offers on our online store where you can grab mugs and t-shirts and hoodies and stickers.

Super fashion for Christmas.

SmashingSecurity.com/store.

If you like us, please rate us on Apple Podcasts or wherever you get your podcasts because it really, really helps us and makes us feel good, but it also helps other people find the show, which is very cool.

But most of all, it just makes us feel loved and wanted. That's really, really what we want. That's what we do this show fundamentally, isn't it?

Just to get a wee bit of— You're the needy one.

You don't need any love.

No, I just enjoy it. I don't need it. Okay.

Big difference.

Until next time. Cheerio. Bye bye.

Bye.

And welcome back. And you join us on our favourite tart— favourite tart?

Stop dreaming.