WEBVTT
1
00:00:00.960 --> 00:00:04.559
This program is designed to provide general information with regards
2
00:00:04.599 --> 00:00:07.559
to the subject matters covered. This information is given with
3
00:00:07.599 --> 00:00:11.960
the understanding that neither the hosts, guests, sponsors, or station
4
00:00:12.199 --> 00:00:17.399
are engaged in rendering any specific and personal medical, financial,
5
00:00:17.760 --> 00:00:21.559
legal counseling, professional service, or any advice.
6
00:00:21.920 --> 00:00:23.920
You should seek the services.
7
00:00:23.440 --> 00:00:28.039
Of competent professionals before applying or trying any suggested ideas.
8
00:00:30.160 --> 00:00:33.560
The information contained in this podcast is intended for informational
9
00:00:33.600 --> 00:00:37.039
purposes only and is not a substitute for individual professional
10
00:00:37.200 --> 00:00:40.920
legal advice. The podcast information was carefully compiled from vetted
11
00:00:41.000 --> 00:00:45.159
sources and references. However, Rose Resources outreach to safeguard the
12
00:00:45.200 --> 00:00:48.079
elderly cannot guarantee that you will not fall victim to
13
00:00:48.159 --> 00:00:53.640
a scam. Let's talk about scams. It's the must listen
14
00:00:53.719 --> 00:00:56.960
show for anyone who wants to protect themselves and their
15
00:00:57.000 --> 00:01:01.520
loved ones from scams. Every Tuesday at am Pacific time
16
00:01:01.560 --> 00:01:05.680
on K four HD Radio, Joyce Petrowski, founder of Rose,
17
00:01:05.799 --> 00:01:10.680
and her guests will provide valuable insights and practical tips
18
00:01:10.719 --> 00:01:15.040
on how to recognize and protect yourself from scams. And
19
00:01:15.120 --> 00:01:18.560
now here is your host, Joyce Petrowski.
20
00:01:19.400 --> 00:01:23.439
Welcome back, everybody, I'm Joyce Petrowski, founder of Rose Resources
21
00:01:23.439 --> 00:01:27.159
Outreach to Safeguard the Elderly. You can find more information
22
00:01:27.239 --> 00:01:31.040
on our website at Roseadvocacy dot org. You can find
23
00:01:31.079 --> 00:01:33.680
our social media links. You can also scroll down to
24
00:01:33.719 --> 00:01:35.959
the bottom of the homepage and sign up for our
25
00:01:36.000 --> 00:01:44.680
emailed newsletter and or our mailed newsletter. And so today
26
00:01:44.879 --> 00:01:49.400
we are going to talk about data breaches and how
27
00:01:49.439 --> 00:01:53.560
those help scammers and what you can what you should
28
00:01:53.599 --> 00:01:56.519
watch for, and what you can do after you've been
29
00:01:56.560 --> 00:01:59.640
notified of one. And I have a guest with me today,
30
00:02:00.680 --> 00:02:05.799
doctor Martina Doves. She's been on before, so Doctor Martina
31
00:02:05.879 --> 00:02:08.960
Dove is a research and behavioral science lead at Charms
32
00:02:09.039 --> 00:02:14.280
Security and the off author of the Psychology of Fraud, Persuasion,
33
00:02:14.400 --> 00:02:18.960
and Scam Techniques. With a background in psychology, her expertise
34
00:02:19.080 --> 00:02:23.400
lies at the intersection of deception, social engineering, and the
35
00:02:23.400 --> 00:02:28.639
psychological mechanisms of persuasion. Her work explores the cognitive and
36
00:02:28.680 --> 00:02:34.759
behavioral factors underlying fraud, compliance, and victimization. So let's uh,
37
00:02:34.879 --> 00:02:36.080
let's welcome Martina.
38
00:02:37.360 --> 00:02:41.960
Hi everyone, Hi Martina, how are you. Hi? I'm fine,
39
00:02:42.039 --> 00:02:44.639
Thank you and thanks for having me yet again. I
40
00:02:44.759 --> 00:02:50.319
love coming and talking of us comes great. I am
41
00:02:50.360 --> 00:02:57.400
going to check really quickly on my audio because for yeah, here,
42
00:02:57.439 --> 00:03:06.319
I gotta hang on one second. That might be better.
43
00:03:06.439 --> 00:03:09.360
I was having a hard time here. That is much better.
44
00:03:09.439 --> 00:03:12.400
Okay, all right, now I can hear you in my
45
00:03:12.960 --> 00:03:20.000
earphones now, all right, So data breaches. I saw that
46
00:03:20.039 --> 00:03:22.919
you had just recently made a post on LinkedIn about
47
00:03:22.960 --> 00:03:25.080
hearing about a data breach that.
48
00:03:25.280 --> 00:03:28.639
Was Apple, Facebook, Google.
49
00:03:28.719 --> 00:03:32.000
I think there was a lot of major companies involved.
50
00:03:32.599 --> 00:03:34.960
So tell us a little bit more about that.
51
00:03:36.719 --> 00:03:40.400
Yeah, I mean, you know, data breaches happen all the time.
52
00:03:40.879 --> 00:03:43.639
I think this is just now a face like a
53
00:03:43.719 --> 00:03:47.120
fact of life. I don't know that there's a company
54
00:03:47.120 --> 00:03:50.120
out there that hasn't been reached at some point. True,
55
00:03:50.680 --> 00:03:54.919
And they are very very important because they do allow
56
00:03:55.439 --> 00:03:59.719
commers to not only with the stolen details, which get
57
00:03:59.719 --> 00:04:05.439
hard stedn't used, but the GIFs comers a novelty factor
58
00:04:05.879 --> 00:04:09.759
to kind of approach you with, if that makes sense.
59
00:04:10.960 --> 00:04:13.879
Right, Okay, And but this latest one, it sounded like
60
00:04:14.000 --> 00:04:18.600
it hit a bunch of really major major players that
61
00:04:18.920 --> 00:04:21.879
a lot of people would have accounts with. I mean
62
00:04:22.439 --> 00:04:25.800
kind of like Amazon has millions of people, Facebook has
63
00:04:25.839 --> 00:04:30.000
millions of people Google does, Apple does, Right, So I
64
00:04:30.040 --> 00:04:34.360
think it was kind of a jackpot breach for the hackers,
65
00:04:34.439 --> 00:04:37.600
and then it's going to automatically be a jackpot for
66
00:04:37.639 --> 00:04:38.279
the scammers.
67
00:04:38.360 --> 00:04:43.879
Right, Yeah, it's it's really unfortunate. Like you said, there
68
00:04:43.920 --> 00:04:47.839
are tons and tons of people that have Apple iPhones,
69
00:04:47.959 --> 00:04:52.639
that have Apple accounts, that have Facebook accounts, and we
70
00:04:52.720 --> 00:04:56.759
all use different things like I use my Google, you
71
00:04:56.759 --> 00:05:00.199
know account for email. I use Facebook to you know
72
00:05:00.240 --> 00:05:03.000
that Google email to get into Facebook, I use you know,
73
00:05:03.199 --> 00:05:06.519
so so it's all connected, and I spent I must say,
74
00:05:06.560 --> 00:05:10.240
I spent a good couple of hours changing password across
75
00:05:10.639 --> 00:05:14.040
like most of the things that I have, just in case,
76
00:05:14.199 --> 00:05:18.160
because if somebody gets access to your email, they can
77
00:05:18.199 --> 00:05:21.120
then maybe get access to your Facebook and so on
78
00:05:21.160 --> 00:05:23.800
and so forth and use or use the pieces of
79
00:05:23.839 --> 00:05:27.040
those information to actually persuade you to give them more. Right.
80
00:05:27.319 --> 00:05:31.079
So that that's an interesting point that you made.
81
00:05:31.920 --> 00:05:33.839
There is a lot of accounts.
82
00:05:33.879 --> 00:05:36.839
When you go to sign in, it allows you it'll
83
00:05:36.879 --> 00:05:39.399
ask you if you want to sign in through Google
84
00:05:39.720 --> 00:05:42.360
or do you want to sign in through Facebook, not
85
00:05:42.399 --> 00:05:45.199
necessarily having to put your user you know, your username
86
00:05:45.199 --> 00:05:45.959
and password in.
87
00:05:46.000 --> 00:05:46.439
Right, there.
88
00:05:46.839 --> 00:05:50.839
So if you're using Facebook or Google to sign in
89
00:05:50.920 --> 00:05:54.600
to a lot of other accounts, now you not only
90
00:05:54.639 --> 00:05:57.160
have to change your Facebook and your Google and your
91
00:05:57.199 --> 00:05:59.879
Apple password and all that, You've got to go to
92
00:06:00.040 --> 00:06:03.600
all those other accounts that you've used Google or Facebook
93
00:06:03.639 --> 00:06:06.279
to sign in with and change all of that information.
94
00:06:07.639 --> 00:06:10.240
Yeah, it's advisable to do that. I mean, I I
95
00:06:10.759 --> 00:06:13.800
you know, it doesn't necessarily mean that a commera's going
96
00:06:13.879 --> 00:06:16.560
to attack you from all sides, because at the end
97
00:06:16.600 --> 00:06:19.439
of the day, they'll do whatever's easier for them, you know,
98
00:06:19.480 --> 00:06:22.839
and it's easy, quick and easy. But I think it's
99
00:06:22.879 --> 00:06:25.519
always advisable. I always think if you have an email
100
00:06:25.560 --> 00:06:29.759
that you're banking with too, always change like any data
101
00:06:29.800 --> 00:06:32.800
bridge that you heard about, always change your passport for
102
00:06:32.879 --> 00:06:35.680
that email. It's you know, you know, better to be
103
00:06:35.759 --> 00:06:37.240
saved than sorry, just in case.
104
00:06:38.000 --> 00:06:40.399
Well, right, because even if you use your email for
105
00:06:40.439 --> 00:06:43.759
the username, right, and you might have a different password
106
00:06:44.199 --> 00:06:48.319
for your bank accounts or any financial accounts. But if
107
00:06:48.399 --> 00:06:53.160
someone was able to get into your email, then they
108
00:06:53.199 --> 00:06:58.680
could they could be one step closer to trying to
109
00:06:58.720 --> 00:07:00.600
get into your financial accounts.
110
00:07:01.519 --> 00:07:04.839
Yeah, I mean, like you mentioned, if somebody gets access
111
00:07:04.839 --> 00:07:07.279
to your email. You may you still may have access
112
00:07:07.319 --> 00:07:09.600
to the emails, but this person is logging in as you,
113
00:07:10.680 --> 00:07:13.439
and maybe they can manipulate a lot of the times,
114
00:07:13.480 --> 00:07:20.319
Like if somebody is really motivated, they'll they'll just your
115
00:07:20.360 --> 00:07:23.720
settings so you're not even getting alerted, you know, and
116
00:07:23.839 --> 00:07:26.959
so like they'll change the email that usually alerts you
117
00:07:27.079 --> 00:07:30.120
or something like that, and then they can change the password,
118
00:07:31.240 --> 00:07:34.040
and like, so it's it's it's it's all connected. And
119
00:07:34.120 --> 00:07:36.879
I think, you know, we need to think about every
120
00:07:36.959 --> 00:07:41.920
time we want convenience. You know, that costs us and
121
00:07:42.000 --> 00:07:44.759
I think that's one way that we pay for that convenience.
122
00:07:44.879 --> 00:07:46.879
Yeah, yeah, and you know it is.
123
00:07:47.360 --> 00:07:51.519
There's a lot of things out there that are convenient, right,
124
00:07:51.800 --> 00:07:55.160
but you have to think of all of the risk.
125
00:07:55.240 --> 00:07:58.439
And it might not be just the risk associated with
126
00:07:58.560 --> 00:08:03.160
that particular program or app. It could be because things
127
00:08:03.240 --> 00:08:06.959
are so connected and if you're using your email right
128
00:08:07.120 --> 00:08:10.680
to log in, or you're using the same password, it's
129
00:08:10.680 --> 00:08:14.839
all connected. Because if one's breached, you know, they're not
130
00:08:14.920 --> 00:08:16.920
just going to use it on just one account. They're
131
00:08:16.920 --> 00:08:19.600
going to put it in their software and find all
132
00:08:19.600 --> 00:08:24.000
these other accounts that you've reused logins on because they know.
133
00:08:24.120 --> 00:08:25.240
And you know, it's interesting.
134
00:08:25.439 --> 00:08:28.560
I read these articles that these tech companies put out
135
00:08:28.600 --> 00:08:33.240
every year about password statistics, and the one that I
136
00:08:33.440 --> 00:08:36.759
just read said and it was at least half, maybe
137
00:08:36.759 --> 00:08:42.200
if not more, people are still using the word password
138
00:08:42.279 --> 00:08:44.799
for their password or one, two, three, four, five six,
139
00:08:45.440 --> 00:08:49.399
And sometimes they just choose that. Other times that might
140
00:08:49.480 --> 00:08:52.879
be the default password that a company has, and when
141
00:08:52.879 --> 00:08:56.720
they sign up for it, they're not automatically then directed
142
00:08:57.159 --> 00:08:59.039
to change their password.
143
00:09:00.600 --> 00:09:00.960
I don't know.
144
00:09:01.000 --> 00:09:04.440
I think that's true that that companies really need to do.
145
00:09:04.639 --> 00:09:05.799
Right, If you're going to have.
146
00:09:05.720 --> 00:09:09.080
A password, a default password like that, then it should
147
00:09:09.120 --> 00:09:12.080
be when someone logs in for the first time, they
148
00:09:12.120 --> 00:09:15.600
should automatically be redirected to change their password.
149
00:09:17.080 --> 00:09:19.279
Yeah, And I think I think the organizations are getting
150
00:09:19.279 --> 00:09:21.960
better at that, and like they are asking you to
151
00:09:22.039 --> 00:09:25.240
choose a strong password. So like, I think we have
152
00:09:25.320 --> 00:09:28.919
gotten a lot better at like you know, but I
153
00:09:28.919 --> 00:09:30.840
think what I would like to see as well, a
154
00:09:30.879 --> 00:09:34.279
lot of the times it gets really tricky with passwords
155
00:09:34.279 --> 00:09:38.000
as well, where like every single company has their own
156
00:09:38.840 --> 00:09:42.360
you know, like format of how they want the password,
157
00:09:42.799 --> 00:09:46.720
and sometimes it's really really difficult to you know, account
158
00:09:46.759 --> 00:09:49.200
for all of the formats and and remember them. So
159
00:09:49.320 --> 00:09:51.720
this is why I think people default to the simplest
160
00:09:51.720 --> 00:09:54.519
thing that can remember, which then obviously make it vulnerable.
161
00:09:54.799 --> 00:09:56.840
And I'll tell you a funny story, and I'm not
162
00:09:56.879 --> 00:09:59.519
going to mention which relative, but one of my relatives
163
00:10:00.879 --> 00:10:05.120
has passwords that like it's literally almost like the name, surname,
164
00:10:05.159 --> 00:10:08.480
and date of birth, and like I'm constantly telling them
165
00:10:08.799 --> 00:10:13.879
don't do that. I know, for obvious reasons, but yeah,
166
00:10:13.919 --> 00:10:16.200
it's it's you know, like I'm having to sort of
167
00:10:16.240 --> 00:10:19.440
tell people like don't you know, like you know, and
168
00:10:19.480 --> 00:10:22.240
then people just you know, unless you have been breached,
169
00:10:22.320 --> 00:10:26.799
unless your details were stolen, you have this sense of like, oh,
170
00:10:26.960 --> 00:10:29.919
what happened to me? Like why would somebody? I hear
171
00:10:30.000 --> 00:10:32.759
that a lot? Who would want my stuff? Like who
172
00:10:32.799 --> 00:10:35.120
would want to get into my Facebook? Well it's not
173
00:10:35.200 --> 00:10:38.879
about you, but for example, you know, like I posted
174
00:10:38.879 --> 00:10:41.440
something on LinkedIn when this breach happened, and I posted
175
00:10:41.519 --> 00:10:44.759
on my Facebook saying to people like, hey, expect your
176
00:10:44.799 --> 00:10:47.759
friends texting you and saying they need money, right, And
177
00:10:47.799 --> 00:10:50.600
that's exactly what happened. Immediately one of my friends said,
178
00:10:50.879 --> 00:10:53.399
I just got a Whatsap message from a friend asking
179
00:10:53.519 --> 00:10:57.159
to lend her, you know, like one four hundred dollars
180
00:10:57.440 --> 00:11:00.480
and you know, she luckily said can you call me back?
181
00:11:00.720 --> 00:11:03.799
And then obviously was suspicious and so my message. But
182
00:11:03.919 --> 00:11:06.399
a lot of the times when people breach your Facebook,
183
00:11:06.879 --> 00:11:09.960
you it doesn't harm you in so many ways, but
184
00:11:10.000 --> 00:11:12.879
it harms your friends because then this camera will be
185
00:11:12.919 --> 00:11:17.039
posting on your behalf to your friends asking for money.
186
00:11:17.240 --> 00:11:20.720
So I think, you know, that's something that I think
187
00:11:20.759 --> 00:11:24.000
people need to understand. Even if your Facebook doesn't you
188
00:11:24.000 --> 00:11:26.679
don't have anything to steal on a Facebook, think about
189
00:11:26.679 --> 00:11:31.000
how you're getting a message from let's say your cousin
190
00:11:31.080 --> 00:11:33.360
on Facebook that they're in trouble, they've been kidnapped, they've
191
00:11:33.360 --> 00:11:37.360
been harmed, and they need money, you know, would feel
192
00:11:37.519 --> 00:11:39.799
And I think that's that's kind of like I think
193
00:11:39.840 --> 00:11:43.600
people don't really think further than just like, well, I
194
00:11:43.600 --> 00:11:46.120
don't have anything, you know, I hear that so many stuffs.
195
00:11:46.399 --> 00:11:48.759
I don't have anything to steal. I don't care, you know,
196
00:11:49.279 --> 00:11:51.960
But I think, yeah, it's like what you said, we
197
00:11:52.000 --> 00:11:54.279
all connect. It's all connected right about.
198
00:11:54.320 --> 00:11:58.600
It is great because it's convenient to have everything connected,
199
00:11:58.879 --> 00:12:03.600
right and and we like convenience. It makes it more
200
00:12:03.639 --> 00:12:07.519
simpler to do what we want to do online and
201
00:12:07.519 --> 00:12:10.679
not have to worry about navigating through a password manager,
202
00:12:10.919 --> 00:12:14.720
right if that's not working appropriately, or however you store
203
00:12:14.759 --> 00:12:19.000
your passwords. But so it's interesting. There's a gentleman here
204
00:12:19.000 --> 00:12:22.039
in town that I work with. He sponsors some he
205
00:12:22.120 --> 00:12:25.840
sponsors our program to take our program out to some
206
00:12:25.879 --> 00:12:29.720
different communities. And we were just I was just doing
207
00:12:29.720 --> 00:12:33.639
a presentation with him yesterday and he told it was
208
00:12:33.679 --> 00:12:38.000
for his clients, and he told his clients about how
209
00:12:38.480 --> 00:12:40.720
he got a call from one of his friends who
210
00:12:40.759 --> 00:12:43.799
lives in another state. It's a state where this gentleman
211
00:12:43.879 --> 00:12:48.080
grew up in and his friends saw that his sister
212
00:12:48.840 --> 00:12:52.519
was advertising this vehicle for sale. The price made it
213
00:12:52.519 --> 00:12:54.600
seem like it was a fire sale type thing, like
214
00:12:54.639 --> 00:12:56.799
I have to get rid of it, you know, it's
215
00:12:56.840 --> 00:12:59.480
a low price because I need the money whatever, And
216
00:12:59.879 --> 00:13:03.600
he was really interested in it, and he just for
217
00:13:03.679 --> 00:13:08.759
whatever reason, said I'm going to call my friend and and.
218
00:13:08.919 --> 00:13:09.840
Ask him about this.
219
00:13:09.879 --> 00:13:11.799
And so he did and he's like, hey, you know
220
00:13:11.879 --> 00:13:16.840
your sister's selling this vehicle, you know, online and on Facebook,
221
00:13:16.879 --> 00:13:19.399
and and he was like, no, she's she's been hacked,
222
00:13:19.399 --> 00:13:22.960
her Facebook's been been hacked. It's not her, But he
223
00:13:23.000 --> 00:13:25.440
said he got that call from a couple different friends.
224
00:13:25.600 --> 00:13:28.679
They were ready to send the money, right, and it
225
00:13:28.720 --> 00:13:32.559
would have been thousands of dollars, but something made them
226
00:13:32.759 --> 00:13:35.759
call him to say, Hey, your sister's selling this. It's
227
00:13:35.799 --> 00:13:37.639
a really cheap price. What's going on?
228
00:13:38.360 --> 00:13:38.559
Right?
229
00:13:38.720 --> 00:13:42.440
And and so it doesn't necessarily affect his sister, but
230
00:13:42.480 --> 00:13:46.480
guess what her friends are going to get affected because
231
00:13:46.720 --> 00:13:49.919
they can lose through no fault of hers, right, no
232
00:13:50.039 --> 00:13:53.039
fault of hers, But but it can affect your friends
233
00:13:54.039 --> 00:13:56.000
that they then affect your friends.
234
00:13:56.440 --> 00:13:59.240
Yeah, And I think like one thing that I I,
235
00:13:59.440 --> 00:14:02.840
you know, I always advocate in terms of the data breaches, right,
236
00:14:02.919 --> 00:14:05.919
Like it's not just the data that gets stolen, Like I,
237
00:14:06.639 --> 00:14:11.080
you know, always say this. Comers really love any novel situation.
238
00:14:11.759 --> 00:14:15.600
If there's a some kind of a natural disaster that
239
00:14:15.679 --> 00:14:20.879
will hit people with charitiescams, if there's a you know,
240
00:14:20.960 --> 00:14:25.279
like during COVID, we had tons of websites selling you know,
241
00:14:25.360 --> 00:14:29.159
imaginary like masks and things like that and hands the
242
00:14:29.159 --> 00:14:34.399
analyzer and sanitizer like miracle cures, like people who buying
243
00:14:34.480 --> 00:14:38.240
vitamins or something like that. And one of the things