By Cybersecurity Safe: Lock Your Digital Door | Leon Geter | TEDxCharleston

Summary

In this poignant narrative, a cybersecurity expert recounts the bittersweet realization of failing to protect their own daughter, Kelly, from a cyber scam. The script underscores the importance of cyber awareness, advising vigilance online, scrutinizing emails, using strong, unique passwords, and enabling two-factor authentication to safeguard personal information against the ever-present threat of cybercrime.

Takeaways

• 🛡️ The importance of being cautious online and practicing cyber safety is emphasized, especially for children.
• 👨‍👧 A cybersecurity expert's child fell victim to a scam, highlighting that knowledge doesn't always equate to practice.
• 💻 The incident involved a fake FBI ransomware message, which is a common tactic used by cybercriminals to scare victims into paying.
• 😢 Emotional distress caused by such scams can be significant, as exemplified by Kelly's reaction.
• 🔒 The advice to always check URLs and the grammar in emails to identify potential scams.
• 🔐 The significance of using 'https' over 'http' for secure, encrypted browsing.
• 📈 The scale of cybercrime, with examples like the 50 million healthcare records breach in 2021.
• 🤔 The various types of information hackers seek, including confidential data and metadata.
• 💰 The motivation of hackers, driven by financial gain through identity theft and data selling.
• 🔑 The risks associated with using simple or common passwords, and the advice to use unique, strong passphrases.
• 🔄 The necessity of keeping software updated, using two-factor authentication, and employing anti-virus software for better security.
• 🕵️‍♂️ The role of individuals as gatekeepers of their own information, highlighting personal responsibility in cybersecurity.

Q & A

What was the situation that led to the speaker's daughter Kelly's laptop being seized by the FBI?

Kelly was reading a free online novel when her laptop screen froze, and an on-screen image appeared to be the FBI, claiming they had breached her laptop and demanding a ransom to regain access.

What advice did the speaker give Kelly after the incident with the FBI?

The speaker advised Kelly to always be cautious online, scrutinize emails for grammar and language, check URLs for legitimacy, look for secure HTTPS connections, and be aware of the risks of cybercrime.

Why was the speaker's friend Richard's bank account accessed and his savings stolen?

Richard's cell phone was accessed when he left it unattended at a library, and his bank account password, which was based on his favorite wine 'Merlot', was an easy guess, leading to the theft of his savings.

What is the importance of using a unique username for each account according to the speaker?

Using a unique username for each account helps to prevent unauthorized access and reduces the risk of a single breach compromising multiple accounts.

What is two-factor authentication and why is it recommended for enhancing security?

Two-factor authentication is a two-step verification process that requires a second device for access, making it more difficult for hackers to gain unauthorized access to accounts.

What is the significance of the HTTPS protocol in ensuring online security?

HTTPS indicates a secure and encrypted connection, meaning that the content cannot be read by hackers, unlike HTTP which is not encrypted and can be easily intercepted.

Why is it crucial to update software and applications regularly?

Regular updates ensure that security vulnerabilities are patched, protecting against attacks that exploit outdated software.

What is the role of a passphrase in cybersecurity?

A passphrase is a strong, less predictable password that is typically composed of multiple random words or characters, making it harder for attackers to guess or crack.

Why is it advised to scrutinize all email and text messages?

Scrutinizing messages helps to identify potential phishing attempts or scams, which often come in the form of seemingly legitimate but malicious emails or texts.

What is the speaker's analogy for the importance of cybersecurity?

The speaker compares cybersecurity to locking the door to your house or car, suggesting that while it may not stop a determined attacker, it makes the process more difficult and may deter them from targeting you.

What is the speaker's final advice on being the gatekeeper of one's technology and personal information?

The speaker advises to be risk-aware and cyber-aware every day, to update software regularly, use strong passphrases, employ two-factor authentication, scrutinize messages, and use antivirus software to protect personal information and data.

Outlines

00:00

😔 Cybersecurity Lessons from a Parent's Mistake

This paragraph narrates a parent's regret over failing to adequately teach their daughter about cybersecurity. The daughter, Kelly, fell victim to a scam where her laptop was locked and she was forced to pay a ransom, believing it to be a legitimate demand from the FBI. The parent, a cybersecurity expert, reflects on the incident and provides three pieces of advice: always be cautious online, scrutinize emails for grammar and legitimacy, and check for secure websites indicated by 'https'. The speaker also discusses the broader implications of cybercrime, including identity theft and the dark web, emphasizing the importance of being vigilant in protecting personal information.

05:02

🔒 Enhancing Cybersecurity Awareness and Protection

The second paragraph delves into the importance of password security and the common mistakes people make, such as using easily guessable passwords based on personal information. The speaker advises on best practices for digital security, including using unique usernames for each account, employing strong encrypted passphrases, and enabling two-factor authentication. The paragraph also underscores the significance of regularly updating software, scrutinizing emails and texts, and using antivirus software to protect against cyber threats. The speaker concludes by stressing the role of individuals as gatekeepers of their own information, advocating for a proactive approach to cybersecurity to prevent becoming an easy target for cybercriminals.

Keywords

💡Cyber Safety

Cyber safety refers to the set of practices and precautions taken to protect oneself from potential online threats such as scams, hacking, and identity theft. In the video, the theme of cyber safety is central as the speaker recounts the story of his daughter, Kelly, who fell victim to a cyber scam, illustrating the importance of being cautious and aware while using the internet.

💡FBI

The Federal Bureau of Investigation (FBI) is the principal federal law enforcement agency in the United States. In the context of the video, the mention of the FBI is related to a scam where the victim's laptop displayed an image of the FBI seal, falsely claiming that the FBI had her laptop, which is a common tactic used by scammers to intimidate and manipulate targets.

💡Ransomware

Ransomware is a type of malicious software that encrypts a user's files and demands payment to restore access. The video script describes a scenario where Kelly's laptop was targeted by ransomware, which is a real-world example of the threats that can compromise cyber safety.

💡HTTPS

HTTPS stands for Hypertext Transfer Protocol Secure, which is a protocol for secure communication over a computer network. The speaker advises to look for the 'https' with a padlock icon in the browser, indicating that the site is secure and the data is encrypted, which is crucial for maintaining cyber safety.

💡Encryption

Encryption is the process of converting information or data into a code to prevent unauthorized access. In the video, the speaker explains that a secure site with 'https' means the data is encrypted, making it unreadable to potential hackers, which is a fundamental aspect of cyber security.

💡Phishing

Phishing is a type of online scam where attackers attempt to acquire sensitive information such as usernames, passwords, and credit card details by disguising themselves as a trustworthy entity. The video emphasizes the importance of being cautious with emails and websites to avoid falling for phishing attempts.

💡Two-Factor Authentication

Two-factor authentication (2FA) is a security process in which a user provides two different authentication factors to verify themselves. The speaker recommends using 2FA as an additional security measure to protect accounts from unauthorized access, which is a practical advice for enhancing cyber safety.

💡Identity Theft

Identity theft is the fraudulent acquisition and use of a person's private identifying information. The video script mentions identity theft as a major cybercrime, highlighting the risks of personal information being stolen and sold on the dark web, which underscores the importance of cyber safety.

💡Cybersecurity

Cybersecurity is the practice of protecting systems, networks, and programs from digital attacks. The video's narrative revolves around the importance of cybersecurity, as the speaker, a cybersecurity expert, shares personal experiences to emphasize the need for everyone to be aware and proactive in protecting their digital information.

💡Password

A password is a string of characters used to authenticate a user's identity in a system. The video script warns against using easily guessable passwords and advises on creating strong, unique passwords for each account, which is a key aspect of personal cyber safety.

💡Dark Web

The dark web is a part of the internet not indexed by traditional search engines and is known for hosting illegal activities. In the video, the speaker mentions the dark web as a place where stolen data is sold, illustrating the real-world consequences of poor cyber safety practices.

Highlights

The bittersweet realization of a cybersecurity expert whose daughter was a victim of cybercrime.

Kelly's experience with an FBI-themed ransomware attack on her laptop.

The importance of being cautious online and the consequences of not practicing cyber safety.

Advice on how to identify fake emails and websites for better cybersecurity.

The significance of using HTTPS over HTTP for secure browsing.

The scale of data breaches, exemplified by the 50 million healthcare records breach in 2021.

Hackers' motives and the value they place on personal information.

The story of Richard, who lost $200,000 due to a compromised cell phone.

The common mistake of using easily guessable passwords based on personal hobbies.

The recommendation to use unique usernames and strong encrypted passphrases for accounts.

The benefits of two-factor authentication for enhanced security.

The role of being the gatekeeper of one's own information in cybersecurity.

The necessity of updating software and applications regularly for security.

The importance of having a strong, less predictable passphrase.

The critical need to scrutinize all email and text messages to avoid falling for scams.

The recommendation to use anti-virus software as part of a comprehensive cybersecurity strategy.

The final advice on being risk-aware and cybersecurity-conscious every day.

Cybersecurity compared to locking the door, making it difficult for bad actors to target you.

Transcripts

foreign

it's a Bittersweet moment when your

child starts growing up

you're so proud of their various

accomplishments

and all of a sudden you realize that you

failed them

I failed my oldest daughter Kelly

I told her almost every day to be

cautious when she's using the internet

and what to look out for while she's

online

I regret to tell you that she did not

listen to me

last year I got a call from Kelly who

informed me that the FBI had her laptop

can you imagine that

I'm a cyber security expert and my own

daughter did not practice cyber safety

Kelly was in her apartment reading a

free online novel something that she

enjoyed

when suddenly her laptop screen froze

it appeared to Kelly that the FBI

breached her laptop

she stopped like a deer in the

headlights while trying to gather

herself she was frightened out of her

wits and I could hear a River of Tears

flowing down her face

the on-screen image showed the FBI seal

a picture of Kelly as she sat reading

the online novel

and they demand that she immediately

paid three hundred dollars to regain

access

how scary is that the message looked

official think about it you get a

message like that from the FBI

and what occurred with that point was

Kelly paid the ransom with a prepaid

card as she was as she was required to

do

then all of a sudden she gave me a call

and we talked about it about what she

should do and how she should prepare

herself when she's online and at that

particular point I gave Kelly three

pieces of advice one always be cautious

when you're on the internet you have to

look for fake emails look at the grammar

look at the language there's always

someone trying to trick you you can do

several things you can take the mouse

and scroll it over their URL is it a

legitimate site or not a legitimate site

that's what being cautious is really all

about every single time whether you're

on your phone your tablet your computer

your eye your Apple I watch anytime you

touch the internet you must be cautious

every single time

third I told her well second I told her

to look out at your browser the https

with the little clock tells you that it

is secure and what insecurity means is

that it's encrypted which means that

someone hacks it they can't read the

content whereas HTTP no s it is on it's

not encrypted it's plain text and any

hacker can read it at any particular

tile and so therefore it's really

important for you to be cyber safe

for example in 2021 over 50 million

Health Care records were breached

and I guess you may ask what do hackers

want

hackers want every single thing they

want your confidential information your

metadata your date of birth your

internet traffic your gaming information

they want everything identity theft is a

major cyber crime for example

if I get your credit card

your email address with a weak password

and guess what I buy a boat thank you

very much

the famous bank robber Willie's son he

was asked why do you rob banks and he

said that's where the money is

hackers hack Because the Internet is

where the money is

data is stolen information data is

stolen and sold on the internet dark web

all the time and so that's where your

information is going to end up so I

would say this any of us can be hacked

at any given time at any given time so

therefore you must be cautious I have a

friend Richard who spends a lot of his

time at his local library researching

his favorite his wine making habit so

one particular day he left his

belongings on a study table uh didn't

think anything of it and when he came

back a stranger was looking at his cell

phone and you know he didn't think

anything of that either but later on he

left the library tried to make a

purchase and it was declined

he checked his bank account and realized

that it was accessed I mean he had a

strange painful look on his face and he

said I made a huge mistake

in most situations human error is the

weakest link in the cyber security chain

more than that Richard's cell phone was

accessed and his Savings of two hundred

thousand dollars were gone

ironically though his bank account

password was his favorite wine merlot an

easy guess based on his Hobby

and what occurs with your password is

this at least 60 percent of people use

their name or date of birth as their

password and that's something that you

definitely should not do for example

your password should never be reused and

it should never be shared that's like

opening your digital door to a problem

and more importantly today software is

designed to guess your password so

you're pretty much playing against a

computer and this is what's very

important and so Richard I advise him to

do several things every single time one

use your auto lock feature that's on

every cell phone and don't leave your

cell phone unintended basically anytime

more important to that use a username a

unique username every single time you

have an account regardless of what that

account is your banking your auto your

home loan a different username with

every account then use an encrypted

passphrase a strong encrypted passphrase

with your devices all the time and more

importantly use two-factor

authentication now two-factor

authentication is a two-step process

that pretty much gives you more security

uh with any of your devices which means

that you can't get access without a

second device and so once again that

limits the idea of having hackers take

your stuff and that's very important

because cyber security is really the

process of protecting your sensitive

data and that's something you have to do

as a gatekeeper of your information

whether it's your personal information

the school information the Hospital's

information your insurance information

your data exists in a database somewhere

and you have to ask yourself how secure

is my information because once again

hackers are looking for it all the time

and so therefore it's very important I

would say this that Kelly and Richard

are like many of you you don't need to

be a cyber security expert to be cyber

safe but you knew but you do need to be

cyber aware and being cyber aware is

that you're going to take the time to be

cautious you're going to take the time

not to be so click quick to click and

that's very important so I'll leave you

with these several things that you need

to think about almost every single time

you touch technology anywhere it may

exist you must make sure that your

software and applications are updated

regularly you must make sure you have a

strong passphrase and a passphrase is

simply less predictable if it's usually

four or five random words uh 18 16

characters or something like that it's

very important that you have a unique

passphrase to use and then you want to

make sure you use two-factor

authentication once again you don't want

to make it so easy for anyone to gain

access to your devices then I would

encourage you to scrutinize all email

and text messages that's really critical

and also finally with that make sure

you're using a anti-virus software there

are plenty of them out there that you

should be using as well so more

important than anything else as I said

it's important for you to be the

gatekeeper of your technology when it

comes to your personal information your

data your family status because as I

said cyber security and cyber crime is a

global phenomenon you're you're battling

against bad guys who simply job it is to

get what you have and so you have to be

risk aware and cyberware every single

day now and pretty much forever more so

once again I would tell you that cyber

security is like locking the door to

your house or your car it may not stop

the bad guy but if you make the uh make

it more difficult and more secure he may

go on to a easier Target so therefore

you must be you must be secure you must

stop think before you click

lock your digital door

[Applause]