Episode Transcript
Transcripts are displayed as originally observed. Some content, including advertisements may have changed.
Use Ctrl + F to search
0:00
The last 10 minutes to try
0:02
and get and get to and
0:04
get the to working Wi-Fi working and
0:06
we eventually discovered in our
0:08
Norwegian cabin here is that here
0:10
is that? What What was it? Upstairs,
0:13
one, two, Wait, you one, two, three, four. I just password.
0:15
showed all hack our Wi -Fi now. Upstairs,
0:17
one, two, three, four, all work downstairs. And
0:19
you'll never guess what it is, downstairs. two, three,
0:21
four, I don't think having different passwords for
0:23
the you never -Fi is a good idea. is,
0:25
do, like, just for the record. Downstairs. I'm just
0:27
going to tweet, gave no notice or anything and
0:29
I just went live, so I'm just
0:31
gonna tweet and share. Oh, yeah. Can you
0:33
just talk about where we are while
0:35
I do that, and then I think we've
0:37
desperately to open the while I well. that and
0:39
then I think we're desperately into open the wine as It's
0:41
not that far north is it
0:43
from the bottom because Norway's like a
0:46
very thin, long country. north is it we're
0:48
still kind of down near the
0:50
bottom end Norway is you can't really see
0:52
out the window behind us. of down there
0:54
the bottom it's you ski resort in Norway.
0:56
the Is that behind us. saying that our
0:58
very, very large ski resort in
1:01
Norway. all disappointing, really. a bit disappointing really. Well that.
1:03
Well, there's not enough snow, is
1:05
there? like because least half of the runs
1:07
are shut are our experience today. But
1:09
it was it was years ago, too.
1:11
I think it was very, very similar.
1:14
it was Yeah. I feel like winter
1:16
got later, cause we used to go
1:18
because we from the to go running definitely not
1:20
snowing there, is it? It's definitely not snowing
1:22
feel like we used to go we used
1:24
to go skiing in winter, well winter, British
1:26
person, December. and it could be like
1:28
it could be the at the start
1:30
of of and you'd have absolutely no problems
1:32
whatsoever no now whatsoever I just feel
1:34
like feel are here weeks deep into
1:36
December deep into December and quite literally like closed the
1:38
there's not enough snow on it because there's
1:41
not enough snow on it don't know I don't know maybe a
1:43
sign of sign of things to come we
1:45
have to start going skiing in February. in
1:47
February. That said when... Oh no, you went here in January
1:49
but when Charlotte and I were here
1:51
with the kids in January there was was
1:53
copious amounts of snow Well when I when I
1:55
when we were in we're in in didn't come we
1:57
to the the mountain zone. and stuff. But another month is...
2:00
You know? Yeah. But it used to be
2:02
unquestionable snow at the start of December.
2:04
And now it's super hit and miss
2:06
if you're going to get snow. So
2:08
yeah, maybe it'll be like the February
2:10
holidays now when we start doing the
2:13
snow thing. I gotta put this on
2:15
bluesk on here too, don't you? I
2:17
mastered them. I've already done less of
2:19
them. It'll literally just go through all
2:21
the social platforms to post it. It's
2:23
actually gotten really hard. And if you
2:25
try and automate it and do all
2:27
the platforms together, people get really, well
2:30
they get upset. Have you found a
2:32
tool that can reliably do that across
2:34
the other? No, I think the, the,
2:36
uh, the, the, uh, the API as
2:38
well. What's your, uh, Blue Score? No.
2:40
No underscore. Because I was early enough
2:42
on Blue Sky to get my name
2:45
and not have to put an underscore
2:47
there. Oh, here we go. Do I
2:49
follow you? Post. All right. I'm done.
2:51
Better do. Okay. Now can I open
2:53
the wine? Yeah, anyway. So we have
2:55
come to a cabinet in Norway. So
2:57
this is now week four for Charlotte
3:00
and Kids Night Travel. So we are
3:02
pretty much ready. to go home and
3:04
get home and stop winding and dining
3:06
every single night and actually get a
3:08
little bit of consistency as well. It
3:10
sounds like a it sounds like a
3:12
bad thing to complain about but I
3:14
know exactly how you feel because we
3:17
did four weeks in America this summer.
3:19
Yeah. And yeah like I think you
3:21
just ultimately miss home is kind of
3:23
the core of it. You want the
3:25
normality of life back? There's a bit
3:27
of it as well in terms of
3:29
the impact on your dieting. Eating out
3:32
three times a day. it's not at
3:34
least we're snowboarding here so we this
3:36
is day two of snowboarding so what
3:38
did I so yesterday about 2,800 calories
3:40
what's a calorie which yeah I was
3:42
just gonna say which apparently you guys
3:44
don't even know what calories are what's
3:47
a kilojules what's a kilojule I think
3:49
it's something a little bit less than
3:51
a killer people watching Does
3:53
anyone else use else use
3:55
killer jewels? that jewels? Isn't that
3:57
something? It's like
3:59
everyone who uses Celsius
4:02
in kilometers an
4:04
hour. or We use
4:06
Celsius everyone who uses temperature.
4:08
We don't use like
4:10
free -to We don't use like
4:12
So what did I do today? So what did
4:14
I do today? Oh, today today wasn't as good. We
4:16
do have do have content by the way.
4:18
Yeah. I feel like it feel like it was
4:20
a little bit of a slow start
4:22
to get to to get to there. But this and this is
4:24
this is late too because it's Monday, isn't
4:26
it? it? yes that's the the other thing that
4:28
happens happens and if you start to
4:30
lose track what day week is to lose track
4:32
what day of the week is yeah I don't care I
4:34
don't care don't it's the wine will sterilize that so yeah
4:36
I would have done this day have done this
4:39
but I guy, but I'll I'll wait
4:41
until I'm here geez chance wait till I'm here and
4:43
then at least we can I'm here and
4:45
then then at least we can
4:47
do this at a well because well we've
4:49
got here two two days we really didn't
4:51
have a chance have a chance to just
4:53
chaos just chaos wasn't getting ready and packing and
4:55
getting right, So let me me do the
4:57
not a sponsor bit first first and then
4:59
we might jump into, you know, you've got some
5:01
some stuff. I've definitely got some data
5:04
got well. I've actually loaded it.
5:06
Loaded so I've since it went away. loaded
5:08
a load of data breach since we went away. Oh,
5:10
about that, different too, you can ask me and
5:12
I'll tell you too, There we go. different
5:14
the bad things he did and I'll tell
5:16
you about that, Did he Yeah. Well, Did he
5:18
me and any you live. There All right, so, all the
5:21
we can talk about that you did, and I'll hear
5:23
in January, here in January it that was the
5:25
iceberg thing. thing. Oh yeah, yeah, we'll come
5:27
back we'll come back to it.
5:29
this week week password. One password is to
5:31
an access management which of course
5:33
access management, which of course has been
5:35
there many many times this year already
5:37
every -in for every app on every device
5:39
It's been a been a big will be my second last
5:41
be my second last one of the
5:44
year do a week do a annual roundup on your
5:46
home But it it has been a really
5:48
big year for for one password and it's
5:50
been really good to see them really good
5:52
to see them too in Montreal. Have you any calendar
5:54
before? Only like out
5:56
an out trip though business.
6:00
Yeah, Yeah, twice. cool. So anyway, we saw
6:02
we saw Niagara Falls when I was
6:04
there, there where I was. where that's close. that's
6:06
I'd like to go there like to go there, actually.
6:08
Charlotte and I were there
6:10
and I were there at Montreal with one password
6:12
and we the you about Cap, and
6:14
well, ice hockey. the hockey as
6:16
call it ice hockey, just
6:18
call it hockey. Kennedy, don't it's
6:20
just ice hockey. You just call it hockey. It's implied.
6:22
It's Canada. It's all ice. Yeah, anyway, so they've had
6:24
a massive year, and they're doing
6:26
a lot more than just password management these
6:28
days as well. So go check out one
6:30
password. I go check That will be the second
6:32
last will announcement of this year as well. So
6:34
of this on the as run. So we're on the home
6:36
run We probably should should mention Stefan thing
6:38
now that I raised it. So Stephen employee I'd say
6:40
he's employee and .0 I like 0.1 I or
6:42
something to that .2 like to beat the test employees.
6:45
I know, I know, I know, we passed, we were
6:47
upgrading. So we had Seth in We for a
6:49
couple of nights. In fact, it we had
6:51
ago, so we spent Monday, all the a
6:53
couple of nights a lot of the Sunday
6:55
and a week ago. So
6:57
we spent Monday like like being Monday
6:59
last week and a lot
7:01
of person. Yeah. and lot about just
7:03
as well just trying to just know,
7:05
it's to figure to just person. to figure
7:07
out just trying to was a lot about
7:09
just trying to figure out out a bunch
7:11
of priorities are. One of the of the
7:13
priorities we we've got, we I was just
7:15
telling you this the other day, we're
7:17
doing a full rebrand a full Been
7:20
Poned. So it won't just be me
7:22
so it won't just be me with like like paint anymore. Doing
7:24
version corners. corners. I've wanted to do like a
7:26
new a new brand for ages. I just
7:28
feel like I've I just doing really liked
7:30
doing graphic design and stuff in the
7:32
past. I could not find enough time
7:34
to engage the left side of
7:36
my brain and get it done. brain and
7:38
get it done. I tried Fiver. I I showed you
7:40
what it like. like. Oh my god. That also looked like
7:42
also looked like being, it's pretty far. Yeah, except paid
7:44
for except I paid for it. have a
7:46
professional designer that we do have a professional
7:48
designer is Oslo-based, knows came and hung who is
7:50
this for little bit as came and hung out
7:52
with us for a little bit
7:54
as well. So we actually saw some
7:56
of the branding stuff. So in a
7:58
in a good direction. now but it's a
8:01
much more, it's a much more complex
8:03
process than what I experienced with Fiverr.
8:05
with fiber let's just say so anyway yeah we're on that
8:07
path that path now. a lot of prioritization stuff
8:09
so what the the biggest thing in and
8:11
that you and I spoke I lot
8:13
about a challenges your challenges with things like
8:15
invoices and quotes and all the
8:17
formalities and complexities where we look
8:19
at it as, I think, reasonable
8:21
humans, as I think and go, is
8:23
it so hard? why is so hard You
8:25
know, you know it like, like I'd like like
8:27
to buy your service which is
8:29
listed on your website for $3 .95.
8:31
Could you please send quote? Send
8:33
quote. Oh, cents. Could you please send me a quote?
8:35
Oh, I knew that was coming. on the on the website.
8:37
you put our name on it? on
8:40
the home page. But You could
8:42
print put name name on it? Well, you to
8:44
put your name on it. Put your name
8:46
on it. not going to do that.
8:48
I don't get it. Yeah, I don't
8:50
get it's so bizarre, so bizarre.
8:52
flip flip side. The upside
8:54
of it that that it
8:56
is all because we are
8:58
very heavily dependent on stripes.
9:01
on stripes, everything. got APIs into can
9:03
So we this. this. your your quote
9:05
automatically though? Yeah, not automatically, but they're
9:07
their APIs do create quotes. So you can create a
9:09
can create a quote that takes products
9:11
that you have in product is an enthoothen stripe, you can then
9:13
choose can then choose subscription cycles. create You
9:15
can create quotes. that you It used to be
9:17
that you had to be on a
9:19
higher tier to do that and you'd pay
9:21
an extra 1 % of your revenue whatever it
9:23
is. whatever it is. forcing And now plan everyone
9:26
onto that plan. free And I think we
9:28
just got it for free for a
9:30
little bit. so we'll have that we'll have that. And
9:32
then you can convert a quote into
9:34
an invoice an you want. you want. But we have all
9:36
have all of these, this weird this weird of of
9:38
different things. So we've got got companies
9:40
that want an invoice before paying.
9:42
So okay, well, the problem then problem then
9:44
is you with Stripe you must activate
9:46
the subscription before you can issue
9:49
the invoice. Then there are there are
9:51
resellers that want to quote for
9:53
a customer. then you can do the quote then
9:55
you can get to do the to be the quote
9:57
has to be valid for a period of time anyone.
9:59
So this is why we just... any stripe.
10:01
Everything. everything that
10:03
we're doing is automatable there's APIs and everything. So
10:05
all we need is interfaces, but I kind
10:07
of want to get all the rebrand done because
10:09
we want to get new templates for what
10:11
a form looks like. want to rebuild all of
10:13
that. don't want to have, I don't want
10:15
to build all on the count, you know, 11
10:17
and a bit your old model and then
10:19
rebuild it all again. So we're trying to push
10:22
the rebrand along. We're going to have to
10:24
get someone else to do all the front ends
10:26
as well. And then it's like, well, what
10:29
client side libraries do we like
10:31
did everything in bootstrap and jacquery.
10:33
what do we do today I
10:35
don't know what's the end thing
10:38
so that there'll be there'll be
10:40
another end thing and I'm just
10:42
not sure what it's going to
10:44
be and I know if I
10:46
ask online so hey are any
10:48
fun in developing, may as well
10:50
last tub versus spaces that's another
10:53
controversial comments comments before, yeah,
10:55
Matt, on the Gold Coast, I saw we had a lot
10:57
of rain, So on the Gold Coast, I don't think I've
11:00
missed much there for a while. Well,
11:02
there's Nick. There was in Hofgarten, Austria.
11:04
Don't you've been in Hofgarten, you've been in
11:06
Austria though. Yeah, we're nice. know we're in
11:08
Switzerland together. Yeah, snow
11:11
here is pretty decent, not wanting to brag
11:13
here, thanks mate. man. which
11:16
is there. a Christian Anderson. any snowboard videos
11:18
are Scott falling this year now you haven't
11:20
seen is but i haven't done either of
11:22
those things i don't know you know well
11:24
i don't know what i don't know regarding
11:26
No, so you know it hasn't synced iPad
11:28
yet oh no what a shame you and
11:30
you and your wife came down the mountain
11:32
a bit earlier to do some shopping and
11:34
Charlotte and i took all the kids out
11:36
and you know when you take that twin
11:38
chair on the way home Twin Shared come
11:40
in and down through the trees by the
11:42
hotel the drop shop at the hotel yeah
11:44
Yeah, Ari, who's my 15 year
11:46
old son now has properly started
11:48
snowboarding on this trip. He really
11:50
properly started yesterday. He had one
11:53
day in January proper actually going
11:55
really well. He got so stuck
11:57
in a tree. Yes!
12:00
And while he was... not mentioned that since
12:02
he got home. he got the video. Oh,
12:04
I got the on that device. just that device.
12:06
It just doesn't he was stuck there in
12:08
the tree, I thought of you. stuck
12:10
there in the tree, I thought if this And if
12:13
you. is Norwegian you... Stupid have a couple
12:15
of videos of Scott getting stuck in
12:17
trees. stuck in trees. So when and he was
12:19
so stuck was couldn't reach his bindings
12:21
to his them. That was like, to
12:23
and them. was like me it was. Oh, I have
12:25
to go It'll make you smile. But
12:27
mine was like a tree make own. That's
12:30
how I got so deep in. Like that's how I
12:32
got so deep-en. There's to have proper to have proper serious
12:34
problem Yeah. It's a serious I remember the kids always
12:36
had to carry a whistle because if you
12:38
fall down a tree well you might actually
12:40
just disappear under all the snow. when I had to carry
12:42
a was pretty scary. a carry a. No, I'm Oh,
12:44
I'm glad I'm I'm not the only
12:46
person to have issues with Norwegian Norwegian love
12:48
it. I'll love it. I'll share that later. Why don't we
12:51
talk about the Why don't we talk about
12:53
the Well, I think? some I find some
12:55
other content the diary stuff. Yeah, I mean, we've Yeah. about this a
12:57
mean, we've talked about this a few
12:59
different times, so. the project kind
13:01
of ago, the project nine years ago. I actually
13:03
founded the company seven years ago for it
13:05
was free for many, many years because it
13:07
was, was... I guess like however was a side project
13:09
it was a side that I built because I thought
13:11
it would be cool something then it grew
13:13
and grew and grew and I was like,
13:15
oh, I would be need to start charging for
13:17
this it because it's costing a fortune. need to
13:20
start charging money for this or four months
13:22
ago, we were looking at it and a fortune.
13:24
it's in the blog post, but like
13:26
98. ago we were of our customers want a
13:28
free plan. months And we're literally just It's by
13:30
on the paid customers. but like And I
13:32
was like, this, it's just not working. And
13:34
we have a on a a month plan
13:36
as well back then. then. and And I guess
13:38
the free plan was enough and a half thousand
13:41
and a half thousand people were using that.
13:43
And then we had like a few
13:45
hundred paid customers. and we got to the kind of got
13:47
to the same kind of it I was like, it
13:49
either has to stop or we have to
13:51
we have to change it because it's just
13:53
not working. We can't grow. I have
13:55
a backlog of a million miles long. We
13:57
couldn't even afford to bring on another
13:59
developer. developer. like not. It just isn't going
14:02
just isn't gonna work long So I made the So
14:04
I made the announcement, was like, look, the
14:06
free have to go. to go we'll keep the the
14:08
month month to there. And my my
14:10
argument if you're using the service using
14:13
the service and it's not giving you
14:15
enough value for a month, then... a month. really
14:17
anything enough for... Like, yeah, it's obviously it's it's
14:19
not it's obviously not that important or
14:21
valuable to you But at the same
14:23
time I was like we can't just
14:25
keep allowing keep allowing... 98% know our traffic our traffic
14:28
and our processing is free then the tiny little
14:30
then the tiny little percent at the the
14:32
other end of of paying. So I was like, like
14:34
it has to change because there's a
14:36
million features that I want I need at
14:38
least two developers on board now on board
14:40
we need the income to sustain that
14:42
because we just couldn't there's no possible
14:44
way we could have afforded it could have
14:46
afforded knew that some people would be
14:48
unhappy. would be unhappy. And then I then I
14:50
forgot my years of my years of
14:52
experience on the internet. And I completely
14:54
I completely underestimated. How
14:57
how unhappy people would be. obviously
14:59
naming names, names, but can you
15:01
give the audience some examples?
15:04
of of feedback you Well, just to
15:06
be clear, so be clear, so this is people
15:08
who had had something for free for a very
15:10
long time a now you've said Yeah, and still
15:12
there, but it's 10 bucks there,
15:14
but it's 10 bucks exactly for yeah, yeah, They
15:17
can stop, They you didn't make them
15:19
pay, did you? them pay, course, you? No, no,
15:21
no, cost like we gave and we gave like 100
15:23
days notice or something as well. as well.
15:25
like time to evaluate their options and
15:27
decide what to do. I
15:29
mean, well, what to you a couple of them, I've showed
15:31
you a couple was like, because I was like,
15:33
I do do with this? Let's get some beers
15:35
and read the feedback. read the man. Yeah,
15:37
I mean, like half of the emails
15:40
I can't even repeat because I think repeat
15:42
would age restrict this broadcast. this But
15:44
yeah, people get really nasty. get really nasty.
15:46
I showed you a couple showed you
15:48
a couple of them. nasty stuff, just. stuff.
15:50
Just. You know, know, I've been using this for
15:52
so many years and now you're taking
15:54
it away. It's like now you're taking it away. It's like F
15:56
And I was like, like, you. And I was it's
15:58
just like, just like, my God. like wow you're you're that
16:00
I gave you something for free for free years
16:02
six years and like, I'm I look I can't I'm not I'm not
16:05
really in a position to keep going on
16:07
the way for free. I just need free tiny,
16:09
tiny, tiny a bit of money. tiny little bit of like,
16:11
it's pretty weird and tough in a way,
16:13
because I was just like. just like well no one ever
16:15
said anything no one ever said anything positive
16:17
about it. And I understand that. gonna come
16:19
and be like, oh, thank you for
16:21
taking away the free things. But at
16:23
the same time, at the people get get like
16:25
nasty and stuff like that. that It's the
16:27
the aggression that gets me. And I said so many
16:29
said so many times before, it's aggression
16:31
that you never get face -to -face. face. You
16:33
know, your travels. No one has ever
16:36
come out to where there's in a
16:38
conference out to where there's in a conference and spoken anywhere in all
16:40
I think we know what it would
16:42
sound like. It would be a we know
16:44
speech, know. like. It would be a Trump speech,
16:46
you know. But just it just never
16:48
happens. So, All right, All right,
16:50
so, but we're We're still doing it. it. Yeah,
16:52
you're doing it it anyway. Well, that's ultimate.
16:54
We just don't have a choice. It's
16:56
not sustainable. not sustainable. Like, it would be
16:58
we don't make any more changes or
17:00
improvements, improvements. Yeah. now we've got... like, he's not
17:02
on the website yet, but on the website yet but we
17:05
do have a developer now because he's in
17:07
his probation period as soon as soon as that's complete
17:09
in in he'll be on the website as well
17:11
and then well. And then it's really cool. Like, don't
17:13
have to be a to well. I think this
17:15
is one of as well. the issues that we've dealt
17:17
dealt with, our own pain stuff well. well. And to
17:19
be clear, like we have no intention
17:21
of changing the free bits that
17:23
are there are we because we enough in
17:25
other areas. well enough in other areas, but frankly, like we and
17:27
you are you are under no obligation
17:29
to provide an online service for free
17:31
to everyone at our own I think most
17:33
Yeah. And I think most reasonable
17:35
people can see that. And I know
17:38
that the times that we've increased prices
17:40
been painted, I honestly can't think of a
17:42
negative reaction to that. to that. It's it's normally
17:44
Well, I guess I guess increasing so for already
17:46
paid. that's guess paying actually yeah I guess
17:48
they're last time we but the
17:50
last time we was like August,
17:52
think. we we We didn't
17:54
change the entry level price.
17:56
the entry level price which is
17:58
where I think most people and the least
18:01
amount of actual revenue is. And
18:03
the higher prices, I think it just
18:05
goes into the big machine that is
18:07
corporate enterprise. And the only time we
18:10
get questions, it's usually it's like resellers,
18:12
it's like, customer wants to renew your
18:14
quote, also please provide justification for
18:16
the price increase inflation. No, I
18:18
want my money. Well, but at least
18:21
for price increases people get that
18:23
over time. I guess it's like
18:25
an infinite price increase to go from
18:27
$3 to $10, right? Yes. Anyway,
18:29
yeah. Some data breachy stuff. I'm trying
18:31
to remember when I did the last
18:34
video. So today is a Monday. Since
18:36
that was yesterday. A week? 23rd. So
18:38
that'd be the 16th. I must have
18:41
done it on about the 14th. So
18:43
what I've done since then. I did
18:45
have a bit of downtime in... the
18:48
airbene being Oslo. So it's not
18:50
I go to Oslo now, you
18:52
usually try and get an airbene and
18:54
it just feels a little bit
18:56
like you're living there and you're
18:58
not, it's not like good morning sir,
19:00
what's your table number, like every
19:02
single one? Yeah. So you go to
19:05
breakfast and you're under penalty to not
19:07
get looked up on there. Yeah, they
19:09
only had a few, so Tiber, never
19:12
heard of Tiber before, apparently they're a
19:14
German electricity provider, 50, 50,000 records from
19:16
them, all in the press, 56% of
19:19
those already in have a bean pine.
19:21
I've got another one here, which
19:23
is a Senegalese payment platform. Who's
19:25
your favorite? Who's your favorite Senegalese payment
19:27
platform? But they have what? We
19:29
classes are large payment provided there.
19:31
Well, apparently they have one called Junima.
19:34
They're an e with a little
19:36
acute on the top, so I made
19:38
it pronounced it wrong, but first Senegalese
19:40
data breach. Welcome. That's how I have
19:43
a big bone. Whoa, we're called now.
19:45
It was only 36,000 unique addresses. 52%
19:47
of all those were already in having
19:50
a pain, but it was kind of
19:52
like, it is abreast, the data's out
19:54
there. I do have... to
19:56
draw the the line
19:58
somewhere. Now ,000 records the
20:01
amount of effort
20:03
of effort the impact and the
20:05
usefulness the has the community. actually
20:07
has to community. Yeah it's hard to justify.
20:10
Hmm. was that one. that one. There are more interesting
20:12
ones here. ones here. So what was
20:14
that Senegalese? What's my thing? Where'd it
20:16
go? One in lost my thing, think
20:18
is it go? interesting. In fact that's that's
20:21
particular to think is quite interesting. fact,
20:23
be the two be ones to talk about two
20:25
last ones to talk about, quite
20:27
interesting. do how I I do here? Well,
20:29
Hopper Media. No, No, there's even even another one
20:32
for that. MC2, Data, 2 .1 million customer
20:34
records. records. Looks like
20:36
a market a different a like
20:38
some, look like some... Oh, I
20:40
said I said there are Shah 25 password
20:42
Sorry, Sorry, they're assaulted password hashes.
20:44
Oh, I said there was
20:47
a Oh, so they were secure. 60% already
20:49
never been paying. Hopper Media, 24 million. that
20:51
was a big one. a
20:53
big HopperMedia. Media. No one one really
20:55
knows what it is. it like, there's this
20:57
there's this breach. It's maybe. Was that the huge a
20:59
topic. Oh, you're a got the email from you.
21:01
I was like, I have no idea. Yeah, yeah.
21:03
But the yeah. I got wasn't it? It was.
21:05
you. I was like, I have no I But the was doing
21:07
a talk at Microsoft that day. So It
21:09
was at Microsoft on Tuesday was week. a talk
21:11
at And I was showing them how my
21:13
old Pfizer email address, which I haven't
21:16
had for nearly 10 years now, my old turning
21:18
up in all these data breaches. And
21:20
then suddenly the breach, like I'd loaded that
21:22
morning, was like, Oh shit, not because me. Well, but it had,
21:24
yeah, I think had. my I think I have
21:26
my Pfizer email address I I think I
21:28
have my my phone number two, which wasn't great
21:30
I think that one that one also, or another
21:32
one had the one or another one, had the telco?
21:34
Oh, which one was was Yeah, it was, Now
21:36
you know what? This one,
21:38
No, you know what? This many so many This one,
21:41
my personal data was in because
21:43
here it is, right? in, because in the
21:45
right, like That had my So yeah that's and no
21:47
a credit card? Just knows what it is. A
21:49
whole bunch of people are like, hey still knows what
21:51
it is. And a whole bunch
21:53
of people are like, hey, send me
21:55
the data and I'll try and
21:58
figure it out. out. That's laborious. And
22:00
we'd kind of gone through enough people. I think this
22:02
was the one you were in, wasn't it? it? Cause I
22:04
had you, did have you talk to it? Or
22:06
do I give you the other one? You gave me the
22:08
other one to check my data. Okay. BitView.
22:14
Bitview is a video sharing platform.
22:16
It sounds like someone owned
22:18
them in the midst of a
22:20
live stream or something to
22:22
that effect, so it was a
22:24
very, very public incident. Oh
22:26
no. Six ,000 e -mail addresses, 27
22:28
% already in Habibam Pone. So
22:31
that wasn't good, particularly not when
22:33
you have private messages in there too.
22:36
And comments, but the comments are
22:38
from the public timeline. Never read the
22:40
comments. But the comments tie back
22:42
to identities, so if you're there... And
22:44
if you're there under a random identity,
22:46
abusing Scott for putting the prices up
22:49
and report your eye. And then suddenly
22:51
a data breach who you are against
22:53
the thing. Oh That's not great. Hmm
22:56
there So there was that, that was a
22:58
bit for you. German
23:01
store shank you. It
23:04
sounds like a crime. It
23:06
sounds like several things
23:08
I can think of, 237
23:10
,000 records. There
23:12
are also salted char 256, 52 already
23:14
in Habibam pan and in the last
23:16
two which I thought were kind of
23:19
the most interesting for a couple of
23:21
different reasons. So one is young living
23:23
essential oils which appears to be I
23:25
think the I think the correct or
23:27
more polite term is multi -level marketing There
23:31
are less polite terms. know, you not
23:33
multi -level marketing is. Yeah, but how did, where
23:35
did that come from? So, well, they
23:38
sell essential oils, but their business
23:40
model is MLM, so they have some
23:42
people at the top. Let's call
23:44
it colloquially a pyramid. Some people at
23:46
the top of the pyramid. I
23:48
see now. And they do quite well.
23:50
And when I was, I guess
23:53
a couple of interesting things with this,
23:55
I tried doing disclosure. I just
23:57
could not get a reply. I multiple
23:59
people only. in tech executive positions,
24:01
I tried the published email
24:03
address for reporting it.
24:05
As you can see here,
24:08
it is on a
24:10
popular hacking forum. hacking forum. I quoted
24:12
hackmanic that shared this incident. I saw Hack
24:14
Manic saw them. I met
24:16
them in Dubai the other day
24:18
day. The folks really good people. really good
24:20
course they Of course they but they're
24:23
Italian Oh but they're Italian. They're Dubai
24:25
Dubai. So anyway, multi-level actually
24:27
really interesting. I'll tell you more
24:29
about that later. So anyway, marketing
24:31
and as I
24:33
was googling around trying
24:35
to find more
24:38
info about find more info about,
24:40
about not living young living,
24:42
are a lot of articles in
24:44
there about how I think there's
24:46
some class actions or something where
24:48
people within the MLM scheme Let's where
24:50
people within the MLM scheme, let's the
24:52
bottom of the triangle, the bottom of the
24:54
triangle. they apparently they had had to spend
24:56
$100 a month in order to
24:59
be eligible to then get the
25:01
cascading from lower down the triangle down
25:03
up. back So some of of the
25:05
vast majority of people making less
25:07
than less month. And then was a
25:09
and then fraction a was just absolutely
25:11
raking it in. absolutely raking it in to
25:13
the data breach. the data breach just a shame I
25:15
I couldn't get a reply a reply
25:17
from Then the last one which
25:19
was kind of interesting which was Nile of
25:21
there as well. in part because Nahua was there
25:23
as was was I think it think elastic search instance
25:26
of French citizens is the is the term that was used.
25:28
was used. 90 million rows, than 90 million
25:30
rows, 28 million unique email addresses.
25:32
And it came from various different places.
25:34
It was actually one of the
25:36
attributes the attributes in the the file that it
25:38
came from. that it came from and they
25:41
had name IP address, had name, IP
25:43
address, physical address, and then
25:45
depending on which source it
25:47
allegedly came from, there was
25:49
also partial credit card data.
25:51
card card. last four four digits card
25:53
type, I think expire as well. already have
25:55
been paying but the the interesting thing
25:57
in there is there this
25:59
and then not American sent me a
26:01
message. I think his exact words
26:03
are, are you hacking me? Like,
26:05
no, because no, American works for
26:07
Microsoft. He's probably one of our
26:09
closest friends and he's a very
26:12
good emphasis guy. Both work for
26:14
Microsoft. But anyway, it's like, he's
26:16
Irish, he lives in Norway, and
26:18
he's in the French database with
26:20
a IP address from London. Course
26:22
years. It's always Vpienning. Well, I
26:24
was watching it. But here's the
26:26
other weird thing. He was in
26:28
there against a record that indicated
26:31
it came from Pinterest. Now, I've
26:33
never heard of a proper Pinterest
26:35
data breach. And I went to
26:37
Pinterest and I was like, I
26:39
wonder, because I do have a
26:41
Pinterest account, and I put in
26:43
my Pinterest email address on the
26:45
registration form and it's like, no,
26:48
this one need this already. And
26:50
I put in Niles, and then
26:52
I had to let him know
26:54
he now has a Pinterest account.
26:56
Didn't we verify a potential Pinterest
26:58
breach like years ago? Was it
27:00
Pinterest? Oh that's interesting but then
27:02
he never had an account with
27:05
them. Because you always so I
27:07
use like company name at Scotland
27:09
UK so generally if I'm in
27:11
a breach it's pretty easy because
27:13
I type I can look at
27:15
the email address and it's never
27:17
generic. I remember I'm sure it
27:19
was Pinterest and it was years
27:22
ago. Well regardless, no, I'll certainly,
27:24
before this incident, did not have
27:26
an account with that email address,
27:28
unless they purged it or something
27:30
like that. Chris and Anderson is
27:32
asking, said, what happened when I
27:34
say security, Oslo, were you supposed
27:36
to go there, but I do
27:38
not see as a speaker anymore?
27:41
No. So I wasn't supposed to
27:43
go there because it's next month,
27:45
and a week from now I'll
27:47
be home and not going anywhere,
27:49
I'll be there. I will be
27:51
the next Indicea have coming up
27:53
as Indice in Melbourne at the
27:55
end of April. And I
27:58
I can't make
28:00
that one Yeah, it was a shame.
28:02
a shame. so yeah, I'll at NDC I'll be
28:04
at NDC don't know I don't know on
28:06
going to talk here. figure something out.
28:08
else Someone else push should push yourself first
28:10
at NDC security. Oh yeah. yeah. you were in anywhere within
28:13
the region within the region and you
28:15
can get to NDC the middle of Jane, about
28:17
the middle of Jane, isn't it? running
28:19
our Hack Yourself first work. be running not branded. of
28:21
First Where's not branded. Where's your T
28:23
your t- I know. I came in
28:26
it, though. your t-? it. your t-? When
28:28
you you on the mountain, you were wearing
28:30
that. wearing that, but yeah, 20th to the to the
28:32
23rd of January. So if you were anywhere
28:35
from the from the of January, 23rd Jane,
28:37
be doing will be doing heck yourself first. And it's a
28:39
good event. it's a good event. I'm saying
28:41
that terribly, might have saying that too small to get
28:43
have been a bit too small
28:45
to get on your list, but
28:47
there was recently a a at Valio,
28:49
which is a which is a sorry a
28:51
sorry, a large Finnish employer. I
28:54
think around around... 55,000 employees name as a son that would
28:56
be very small and I that would be
28:58
very small, and I haven't heard
29:00
of it, Milford, good evening Milford. Social
29:02
security Good evening is a big issue like
29:05
other places. Do they have them in Finland? Well
29:07
big issue, like other places. the
29:09
breach in Do they have them in Finland? some
29:11
I said it was in the breach in the comment. knows the but
29:13
there's some places where everybody knows
29:15
the equivalent of your social security number
29:18
and then some places where it's They
29:20
have They have different in different places,
29:22
don't they? there. Depends what you
29:24
can do with it, I guess do
29:26
with it I guess. So anyway there's there are
29:28
two at the moment that I'm
29:30
going through that I'm going through One of
29:33
them would be very familiar would
29:35
be .S. brand name. US brand
29:37
name but it's the best time
29:39
of year to drive
29:41
people towards disclosure. drive people towards disclosure.
29:43
Yeah well I I mean, is it
29:46
the it the best time?
29:48
because because maybe it's like, everyone's at Christmas. Let's
29:50
let them know now them know breach. know, that is
29:52
a good time. I guarantee a time. I 24th in
29:54
the evening is when you should publish something if you
29:56
don't want people to see it. see it. Well,
29:58
that's kind of to to them. I would like... them to disclose
30:00
but we I think in both these instances
30:03
they might take a bit of encouragement for
30:05
disclosure. Christian is saying it is a workshop
30:07
because first is the workshop well with it
30:09
yep get along and do that and I
30:12
mean we still run them at companies where
30:14
it's normal you go in these days. That's
30:16
most of it now to be fair isn't
30:18
it? Yeah I got busy. Also I'm on
30:20
the wrong side of the world for most
30:23
of it. So yeah we did still run
30:25
them where Scott goes in in person and
30:27
it's two days and it's just your organization
30:29
and between the two of us I think
30:32
between the two of us you've probably done
30:34
it like a hundred and fifty times because
30:36
I know I did it more than a
30:38
hundred times with companies yeah I'm sure you've
30:41
done it dozens of times yeah yeah which
30:43
which is really cool and for some of
30:45
the some of the biggest brands it is
30:47
so cool looking at some of them you
30:49
just think oh there's like this like Australian
30:52
dude are this English dude and weird teaching
30:54
people. That always blows my mind. I know.
30:56
Those are always pretty cool. We do have
30:58
lots of moments for like, you know, maybe
31:01
to start wrapping up in like a positive
31:03
Christmas cheernote, but we do have lots of
31:05
moments. We're like, hell, how do we end
31:07
up here? Yeah, because all of it's by
31:10
accident. It's like, is my answer to that.
31:12
Because did you ever sit down and build
31:14
how I've been poned and say, I know,
31:16
I'm going to build this really worldwide known
31:18
dates to dates to dates to dates to
31:21
dates for each service. I started in September
31:23
2009 and one thing led to another. Now
31:25
we're here in this like just ridiculously epic
31:27
cabin. I'm going to post that your son
31:30
just did a video walkthrough which was epic.
31:32
He's got such a good accent too. It's
31:34
very David. It's very David Attenborough. Proper English.
31:36
Proper English. Proper English. Yes, we had a
31:39
fuss. But yeah, we were here in this
31:41
amazing place. And like I remember meeting you
31:43
when I was doing that workshop. the UK,
31:45
it must have been, it was a 27.
31:47
I I remember you
31:50
bumped your head in
31:52
the roof you in the
31:54
hotel at breakfast. a roof
31:56
in the hotel at breakfast. Yeah, I'm nearly
31:59
two That's a a problem.
32:01
In like old like old
32:03
English heritage buildings. But But
32:05
a a very similar
32:08
situation to you. It's
32:10
like you had a
32:12
corporate job, you really
32:14
didn't enjoy doing that
32:17
a lot. doing that then And
32:19
then doesn't feel like next feel
32:21
like next minute. didn't
32:23
at didn't at the time because everything took
32:25
forever to have these choices in life,
32:27
but life, do look back on and go, on
32:29
it. Geez, that escalated. And without a plan on direct, that's the bit that's
32:32
the bit that freaks me out, like no
32:34
or direction. I never sat down. Same with
32:36
security headers, right? I never thought, oh,
32:38
I'll build this thing and it'll turn into
32:40
this awesome thing that everybody likes. It
32:42
was just. turn into this awesome thing that I
32:44
want to build something cool. just, I'll build
32:46
it and then see if anyone uses it.
32:48
I suspect you have more cool, so I'll build it
32:50
we're then for sure. if We've sort of
32:53
had this discussion suspect you and I have and
32:55
one of the things that we're talking
32:57
to Stefan about doing. a week ago just a to
32:59
look, know this you know, you're putting this is, someone
33:01
you're putting food on someone else's table,
33:03
that was the thing that freaked me out
33:05
the most with taking somebody a a report
33:07
your eyes got responsibilities. Well, yeah, like if
33:09
I screw it up. I screw it up he doesn't
33:12
have the have the ability to put
33:14
food on the table, that that was the thing
33:16
that freaked me out the most. out A
33:18
lot of lot of shells my from my is and I don't
33:20
and I don't know if this is the
33:22
right term or not, but for us, this
33:24
is a lifestyle business where we wanna keep doing
33:26
all the stuff that we do do free and
33:28
community centric without someone saying you have to
33:30
saying you everything. We wanna be able want to be
33:32
able to go away for a month, you know, know,
33:34
or maybe in the future, go, oh, maybe I I'm going
33:36
to live go live in Oslo months or something like
33:38
that. We want to be able to do that
33:40
without being tied down and having responsibilities. being tied down
33:42
And I just don't want anything that, I just don't
33:44
want anything that those two things to
33:47
happen. happen. You were there there as I
33:49
was going through through in 2019, which 2019,
33:51
which was, thank apart, but but we would would
33:53
have just ended up in the absolute
33:55
opposite of what we have now. opposite
33:57
of what we have now. job. have a job. I'll
34:00
do the next one from home.
34:02
We should wrap it up right, we
34:05
should wrap it up there because
34:07
we're now reaching Eve Eve Eve. So for those
34:09
of you on the other part of the world those
34:11
of you on the other part
34:13
the world, like at home where
34:15
it's already Christmas Eve, we're now to
34:17
six in the evening on the
34:19
23rd. Yeah look let's wrap it up here. look,
34:21
let's wrap it up here. I'll
34:23
do the next one from home.
34:25
I feel like I'm getting home terrible
34:27
o 'clock Sunday morning. So I might might
34:29
push this one. I will keep
34:31
doing this video every single week.
34:33
know Mr. but sometimes it's just a
34:36
few days later. a few days later. All right, All
34:38
right, Thank thank you Enjoy, have Enjoy, have an
34:40
awesome Christmas and I'll see you before the
34:42
New Year. the new year. Gosh, yeah.
Podchaser is the ultimate destination for podcast data, search, and discovery. Learn More