Weekly Update 437

Weekly Update 437

Released Sunday, 2nd February 2025
Good episode? Give it some love!
Weekly Update 437

Weekly Update 437

Weekly Update 437

Weekly Update 437

Sunday, 2nd February 2025
Good episode? Give it some love!
Rate Episode

Episode Transcript

Transcripts are displayed as originally observed. Some content, including advertisements may have changed.

Use Ctrl + F to search

0:05

And this is one of

0:07

these most first world

0:09

problems, which is why I'm

0:11

a few minutes, a few

0:13

minutes, a few seconds

0:16

late. I've very, very much

0:18

like being on time, very

0:21

punctual. Coffee related

0:23

issue. I've added this

0:26

lovely ex-o-bar espresso

0:28

machine ever since...

0:30

I moved into this house nearly 10

0:33

years ago and I'm talking a

0:35

bit more about this house later

0:37

on when we get to the IOT

0:39

things because I want to

0:41

talk about switches, bits and

0:43

pieces. Anyway, had this machine

0:45

for about 10 years, it's been

0:47

great. I really want to get

0:50

a Senesso ES1. Drop this in

0:52

the chat. This thing looks epic. I

0:54

feel like it is one for my

0:56

audience. It looks amazing. It looks

0:58

amazing. It's got... LEDs and computers and

1:01

it's programmable and I'm sure it will

1:03

connect to things as well. And one

1:05

of the reasons I want this, and

1:08

there are many other machines that do what

1:10

I'm about to say, but one of the

1:12

reasons I want this is it is plumbed in

1:14

to the mains water. One of the other

1:16

reasons, amongst the many many reasons, is

1:18

you can just set it to run a

1:20

certain amount of water and produce just the

1:22

right yield over the right amount of the

1:25

right amount of time so I can press

1:27

the button. and then because I'm like micromanaging

1:29

every second of my life I can

1:31

go away and do other things and

1:33

it will stop at the right time.

1:35

But I wanted to be plumbed in

1:37

because what tends to happen with this other

1:39

machine, like just now, which is why I was

1:41

a little bit late, is I go to the

1:44

machine, pull the lever up, starts pouring my

1:46

lovely espresso, and then it stops because

1:48

it's out of water. Because there's a water

1:50

tank in there and there's a pressure switch

1:53

under it and once it gets light enough

1:55

because the water is nearly out It just

1:57

turns off the machine and it seems to

1:59

I'm sure psychology around this. It seems to

2:02

do it like right as I'm about to

2:04

go and like record a video or do

2:06

something where because I've left myself

2:08

like five milliseconds of buffer

2:10

right before something happens. So I'm very

2:12

excited about the idea of plumbing it

2:15

in. I've been looking at this machine

2:17

for a long time. It ain't cheap. I

2:19

have been assured that it is a

2:21

business expensive if it goes into our

2:23

office that apparently like it's launched in

2:25

the US. It was meant to come

2:27

out here in like September. there is

2:30

something non-compliant that has caused

2:32

Australian compliance bodies to

2:34

reject it. In fact, I think

2:36

what I heard was it was

2:39

something non-compliant about the Wi-Fi implementation.

2:41

Now if I can't get a

2:43

fancy coffee machine that plums into

2:45

the mains because the frickin' Wi-Fi

2:48

is not compatible, I don't know,

2:50

it's just, it's compliance

2:52

madness. Kristen, see you get a

2:54

question? Thomas, chili and dingy,

2:57

Birmingham, Birmingham, um... I am coming

2:59

back over your way. That is now, that is

3:01

now locked in. Last week I spoke

3:03

about thinking about doing some travel

3:05

back to Europe. I think the very

3:07

next day we locked it in. So

3:09

we are coming back to London. It's

3:11

going to be the end of March.

3:13

We will definitely be in London, because

3:15

we're flying into London. We'll definitely

3:17

be in Iceland. I got a

3:20

Reykjavik, see Stephen and hopefully some

3:22

of our friends in the Iceland

3:24

government over there. and we will

3:26

definitely be in Dublin as well.

3:28

And then summary and amongst there,

3:31

we'll try and get a couple

3:33

of days of downtime to see some

3:35

sites and try and run some

3:37

user groups or something similar. So

3:39

lining all of that up as we

3:42

go. I don't think I'll be

3:44

going to Birmingham, I've definitely been

3:46

to Birmingham. I think I've definitely

3:48

been pretty much everywhere in the

3:50

UK, except Northern Ireland is a

3:53

country. And it's like, no, it's

3:55

not a country. It's part of

3:57

the UK as an independent, whatever.

3:59

Anyway. I've got a line on

4:01

my map that goes to Birmingham. Part

4:04

of the reason I figured this out

4:06

the other day is I've still got

4:08

App in the air, which still works.

4:10

If you're not seeing App in

4:12

the air before. It's kind of cool.

4:14

It plugs in your trip, it gets

4:17

all of your flights, all of

4:19

your travel, and then it puts them

4:21

all on a big map. There go

4:23

Birmingham. Yeah. I have been there. Because

4:26

I've got a line on my map

4:28

that goes to Birmingham. I was doing

4:30

a workshop there I think. Seems

4:32

about right. Anyway, going back to

4:35

Europe, let's talk about the sponsor.

4:37

Sponsored. You might have heard

4:39

these guys, One Passwords, West Week

4:41

sponsorship. For the first time in

4:44

2025 is the One Passward Sponship,

4:46

One Passward. Everybody knows

4:48

about as a Passward Manager,

4:50

it is now... When did I start using it?

4:53

What I wrote this blog post?

4:55

One of my most seminal

4:57

blog post. Only secure password

4:59

is the one you can't

5:01

remember. Oh, that's typed wrong,

5:03

but it'll figure it out.

5:05

Here we go. 21st of March,

5:07

2011, Kriki. There's nearly 14

5:10

years. I have been using

5:12

one password. And I went

5:14

there by my own free volition,

5:16

comparing that to other

5:18

things and deciding that was

5:21

the best way to manage

5:23

my secrets. I have the same guilty

5:25

history as everyone else. We're going

5:27

to talk about passwords and pins

5:29

and guilty histories and things later

5:31

on as well. Saying guilty history

5:33

as everyone else. I had pretty much

5:35

the one terrible password I used everywhere.

5:38

And I remember doing a podcast at

5:40

the very beginning of my public

5:42

career. Let's call it that. All right, I

5:44

remember who I did it with. And

5:46

I had not given password managers much

5:48

thought at the time. I remember the

5:50

guy saying, how do you feel about

5:52

password managers? wasn't very enthusiastic about

5:55

it and then as I

5:57

started analyzing data breaches I

5:59

was like Um, can we redo that?

6:01

I have a different view. And of

6:03

course, since then it's been a big

6:05

relationship with one password. They've got a

6:07

lot of, a lot of have been

6:09

poned bits integrated into there, a lot

6:11

of poned password bits integrated into there,

6:14

which is really, really cool. We've got

6:16

that in sitting there in Watchtower. You've

6:18

got integration to see if your email

6:20

addresses appeared in data breaches. A lot

6:22

of those, and of course, they've been

6:24

sitting there as the only product placement

6:26

on have been poned for... I want to

6:29

say about seven years, I feel like it

6:31

was 2018, maybe earlier. To this day, the

6:33

only company that's ever had

6:35

product placement there. Now it is

6:37

not just passwords, it's extended

6:39

access management. So this is the

6:41

same drum that we have been beating for

6:43

some time now around monitoring, particularly your

6:46

unmanaged devices. And obviously the challenge a

6:48

lot of companies have is they know

6:50

the things that they have that are

6:53

part of the corporate bill, that are

6:55

part of the corporate bill, that are

6:57

part of the standard operating environment

7:00

that's rolled out to everyone. It's all

7:02

the unmanaged stuff. And it's all the

7:04

other tails and trails of information that

7:07

people leave in other places, which is

7:09

extraordinarily hard. So extended access management came

7:11

by the collide acquisition. Another company

7:13

had a good relationship with, which is

7:16

nice. It's very convenient. If it was one

7:18

I didn't like, it would be awkward.

7:20

But no, they were fantastic. So ZAM,

7:22

extended access management. Check it out. There

7:24

is a Troy Hunt link, one password.com

7:26

for slash Troy Hunt. Go there, get

7:28

the demo and then at least they

7:30

know that people are listening to me

7:33

and it's worthwhile. Right, so please go

7:35

check them out. You'll see more of

7:37

one password and extend access management

7:39

throughout the year. One of the

7:41

things actually I was talking to

7:43

one password about recently is

7:45

trying to draw some more direct

7:48

lines between some of the

7:50

data breaches we've seen and...

7:52

Unmanaged devices, weak credentials, the

7:54

sorts of things that the

7:56

product tackles directly. You can

7:59

imagine for... cyber security companies, I

8:01

think one of the challenges in

8:03

general they have is that when

8:06

people buy their product and it

8:08

works, nothing happens. Imagine you're

8:10

selling a product that allows

8:13

you to manage all of

8:15

your own managed devices and

8:17

understand your footprint and your

8:19

risk and your exposure and it

8:21

works exactly as it's intended.

8:23

As a result, nothing happens.

8:25

So that can be a hard sell

8:28

for a cyber security company. Mind

8:30

you, and this is not to

8:32

spend too much time harping this,

8:34

I think, because this will lead

8:36

us into the pin discussion later,

8:38

I think a password manager is

8:41

one of the rare times where

8:43

a cyber security tool actually

8:45

makes your life better when

8:47

everything works fine. Not just

8:50

when you've potentially had your

8:52

account taken over or something

8:54

like that, because it makes

8:56

it faster to log in. Who else

8:59

is here? Thomas can't blame me, blame

9:01

me for skipping, skipping, I'm Simon's

9:03

here, could I, Simon? Where you go

9:05

today? I was sitting here, I had a

9:07

very early start this morning for

9:09

various reasons. I don't want to

9:11

get into it. I was up

9:13

at 4 a.m. I ended up

9:15

sitting there at breakfast going on

9:18

to talk about today. What actually

9:20

happened? What actually happened? And then

9:22

I realized there are a bunch

9:24

of different interesting things. Good mix.

9:26

We've got some IT, we've got

9:29

some cyber security marketing spin, we've

9:31

got some spin analysis and

9:33

some Grafana stuff that it's just...

9:35

I think I said last week, one

9:37

of the challenges that I have, George

9:39

is in Austria, get I do George?

9:41

We're talking about going to Austria

9:43

the other day, because Charlotte has

9:46

never been to Austria. I have been

9:48

to Vienna in 2000 a long time ago.

9:50

I'm like, Harry, you should go to Austria.

9:52

It's cool. But then we've been

9:54

to Switzerland. Hope that doesn't

9:57

upset Austrians. It's similar,

9:59

similar. Griefana last week and

10:01

so one of the challenges I have in

10:03

life is I can't quite figure out when

10:05

my work starts and my hobby begins

10:07

because when I start playing with stuff

10:10

like Griefana I just totally geek

10:12

out and it's really cool and I

10:14

think the term I used to Charlotte

10:16

is I said Stephen is having a

10:19

nerdgism over Griefana at the moment and

10:21

Stephen tell me if I'm wrong but

10:23

I think that that's a reasonable explanation

10:25

based on the enthusiasm with the messages

10:28

you've been sending me. Let's

10:31

talk about IOT and I'll

10:33

share some never before shared

10:35

news of things that are

10:37

happening. Back in 2020 when

10:40

things got kind of weird

10:42

and none of this got

10:44

to go out anymore and

10:47

do interesting stuff and was

10:49

stuck at home the whole time

10:51

I got really really into

10:54

home assistant and home

10:56

automation in general. And a

10:58

lot of this started because all I wanted

11:01

to do was I wanted to ride my

11:03

bike home, talk to the lady on my

11:05

watch, and ask, I won't say her name,

11:07

because she'll start listening, and ask her to

11:10

open the garage door so I could ride

11:12

my bike in, because I wasn't carrying

11:14

the garage remote around with me. You

11:16

know, like I just wanted to ask,

11:18

magic IT, etc. etc. And... I

11:21

thought that would be simple, turn

11:23

out not to be, but it

11:25

eventually led me down this home

11:27

assistant route and just like with

11:29

3D printing not long after that

11:31

somehow I end up spending a lot

11:33

of my life doing these two

11:35

things because they're just tangential to

11:37

all the tech stuff that I do

11:39

and good fun. Now we have automated

11:41

so many things in the house, it's

11:43

ridiculous and for the most part it's

11:46

really good. There's lots of stuff on

11:48

the periphery which... where you know there's

11:50

1% of things that aren't working and

11:52

it bugs me and I'm working on improving

11:55

those but for most parts very good. Now one

11:57

of the things that is the most awesome and

11:59

I feel like I had to justify it

12:01

based on the Twitter put out the

12:03

other day for some people. One of

12:05

the most awesome things is having pretty

12:08

much every light in the house now

12:10

connected to home assistant and being able

12:12

to automate it through that one central

12:14

orchestration point and then exposing those

12:16

back up into home kit which

12:18

is on the phone and subsequently

12:20

on the watch as well and

12:22

being able to do things like

12:25

I'll give you specific examples. I'm

12:27

in the kitchen and I'm cooking.

12:29

I got... Meat on my hands or something like

12:31

that the light's too dim. Hey, what's a

12:33

name set the kitchen lights to 100% and

12:35

it's like magic and it just happens now

12:37

the way it happens is obviously you

12:39

need some sort of internet connectivity to

12:41

be able to instruct the lights to

12:43

go lighter You can use IT enabled

12:45

light bulbs so you can get things

12:47

like Phillips hue light bulbs or it

12:50

looks like a normal light bulb, but

12:52

it's got a Wi-Fi radio built into

12:54

it and that can adjust the light

12:56

just directly within that bulb. Everything

12:58

else in the house is same, same

13:00

circuitry and everything. Big issue

13:02

with that is that you are then stuck

13:04

with getting smart light bulbs, so

13:06

that means having light fixtures which

13:08

take normal light bulbs. It's a

13:11

clever hack, but... They're not normally

13:13

great looking lights. We've got some really

13:15

really cool looking lights when we did

13:17

a lot of renovations around here that

13:20

are built in LEDs, like you cannot

13:22

change the bulb, you cannot swap it

13:24

out. So you've got to go upstream

13:27

with the light, somewhere on the power

13:29

supply. Now, the way that we've done all

13:31

this is to use a lot of these. These

13:33

are Shelly IOT devices, and this is

13:35

a Shelly dimmer. For some reason you

13:37

can never open the Shelly box. Well

13:39

you can, it's going to say you

13:41

can never open it without ripping

13:44

it, but apparently you can.

13:46

So this is what a Shelley IOT relay

13:48

looks like. It's that big. And then

13:50

just to put it in the palm

13:52

of my hand, they say it's the size

13:55

of an Oreo biscuit. They're

13:57

resilient enough to drop, I

13:59

think. So that's what they look like.

14:01

You're super cool. In Australia you

14:03

need a licensed electrician to wire

14:05

them in. You legally cannot do it

14:08

yourself. I'm mostly fine with that because

14:10

I really don't have the spare time

14:12

because I'm too busy marking around with

14:14

Grafana to do this, but you get

14:16

them wired in and now you have a

14:18

little device like this which sits behind an

14:21

existing light switch. Look at all

14:23

the props I've got today. So you end

14:25

up with your sparky. It's an electrician in

14:27

Australia, Sparky comes over, pops this off

14:29

the wall, puts this in line, plugs

14:31

some wires in that I don't fully

14:33

understand, but he makes it work, and

14:35

then you join this to the network,

14:37

you join it to Home Assistant, you

14:39

have full local control, one of the

14:41

big, sort of ideological things about IOT,

14:44

is how much can we have self-contained

14:46

within the house and not cloud-dependent.

14:48

So, you've got Home Assistant, which

14:50

is running on a razry pie,

14:52

a orchestrating this directly if we

14:54

lose internet we lose cloud and

14:56

everything else it all still works and the

14:58

beauty of this is you can go and

15:00

get whichever switches you want if you

15:03

really like these switches and I'll tell

15:05

you why I really don't like these

15:07

switches in a moment you can use

15:09

these if you want ones from a

15:12

different manufacturer you can use those you

15:14

can certainly buy smart switches where this

15:16

is built in to there but I'm reluctant

15:18

to do that And part of

15:20

the reason I'm reluctant to do

15:23

that is you're then taking the

15:25

physical human interface, the thing that's

15:28

going to sit on your wall

15:30

for let's say the next 20

15:32

years, and it is intrinsically

15:34

tied to a digital

15:36

implementation sitting behind that, which

15:39

is going to be out of

15:41

date and let's be generous and say

15:43

10 years. I do like being able

15:45

to abstract the two. This is

15:47

almost like a simple... programming

15:50

paradigm. If we can get an

15:52

obstruction such that we can interchange

15:54

the IOT from the physical, that's

15:57

great. Now incidentally, when you

15:59

use a shelly... done right, all these

16:01

buttons still work. So the example I've used

16:03

before us when my mum and dad come

16:05

home, mum and dad are very good with

16:07

light switches, not as good with IOT.

16:10

When they come over and press the

16:12

buttons, the lights do exactly what they

16:14

expect it to do. When I orchestrate

16:16

something from home assistant via this, then

16:18

it also works. And in fact part

16:20

of the reason I've got these

16:22

push button switches here is because

16:24

they're effectively stateless. If you get

16:26

toggles and down means on... But then

16:29

you digitally turn it off, then you're

16:31

looking at the light, the switch, and

16:33

it says, well, the light is on,

16:36

but then you're looking at the

16:38

ceiling and going, well, the light

16:40

is off. Weird. This solves that

16:42

problem. Yeah. You look at the

16:44

comments before I go off on

16:47

my tangent, all the new stuff here.

16:49

Ah. Okay, Milford's here. Gady

16:51

Milford. Stephen. Been lurking?

16:53

Very good. Arlek things sort of

16:55

bunting. So you can make comments. All right, so this is on

16:57

topic. They come inside those Arlek things sort of bunting.

16:59

Twenty bucks you plug them straight in. I think you don't

17:01

buy it. So I think you're talking about the light bulbs there. I

17:03

do have a bunch of arlek things as well, but they tend to

17:05

be like smart sockets that you plug into the wall. I'm sure there's

17:08

one around here somewhere. I've got a bunch of spare ones. I've got

17:10

a bunch of spare ones, I got a bunch of spare ones, I

17:12

got a bunch of spare ones, I got a bunch of spare ones,

17:14

I got a bunch of spare ones, I got a bunch of spare ones,

17:16

I got a bunch of spare ones, I got a bunch of spare ones,

17:18

I got a bunch of spare ones, I got a bunch of spare ones,

17:20

I got a bunch of spare ones, I got a bunch of spare ones,

17:22

I got a bunch of spare ones, I got a bunch of spare ones

17:24

I'm fine with those. The Melbourne lads

17:27

make those things. I prefer the

17:29

plug-in power points, plug a light into

17:31

them, and you can, you can dilot

17:33

your staff and do away with Wi-Fi,

17:35

but you're leaving to be late.

17:38

Acarer switches. Yep, so I've got a

17:40

lot of, so Stefan saying a

17:42

carer switches, I've got a lot

17:44

of a carer switches around the

17:46

house, a carer switches, they're from,

17:48

who's the parent Chinese company, but

17:50

anyway, they do a lot of

17:52

Zigmi-based switches. push button switches. So

17:54

for example I've got one next

17:56

to the bed so that if I want to

17:58

turn the aircon on or off... I can just push

18:01

the button and it just, yeah, it's

18:03

great. We've got one on the stairs

18:05

so that this is a good example

18:08

of how it all integrates together. When

18:10

we go to bed at night, there

18:12

is one button on the stairs and

18:14

I push that one button and

18:16

every light in the house, except

18:19

like the ones in the bedroom go

18:21

off and then those ones dim. Beautiful.

18:23

Right, so it's a long lead

18:25

up to where I'm going with this.

18:27

We've had a bunch of these failing.

18:29

Two's, there is now a Gen Three, just

18:32

within about the last week, I've

18:34

seen those Gen Three's appear for

18:36

sale in Australia, so unlike the

18:38

coffee machine I want, apparently they've

18:40

been certified. I'm hoping the Gen

18:42

Three's are a little bit more reliable,

18:44

but I've had to replace far too

18:46

many of these for burning out. We are

18:49

about to embark on a major, major, major

18:51

project. And I didn't mention it

18:53

in the tweet because people get

18:55

a bit weird there, everyone here

18:57

is fine. I mentioned before I

18:59

moved in this house nearly 10

19:01

years ago. It'll be 10 years

19:03

I think in September and I

19:05

really love this place. When I moved

19:08

in here I remember thinking it's like

19:10

I never want to live

19:12

any more than a few hundred

19:14

meters from here at post because

19:17

I love this spot, love

19:19

this location and time passed

19:21

and life adds ups and downs and

19:23

downs. It's a down bit for a

19:25

long period there. And now as an

19:28

up period and we wanted more room.

19:30

But we didn't want to leave because

19:32

we love this house and we

19:34

love the community that we have around

19:36

us. A lot of really really good

19:39

close friends and our neighbours. And long

19:41

story short we have bought the house

19:43

next door to us with the expectation

19:45

of extending this one. Which is cool.

19:48

So we have a house which we

19:50

will remove. So it's an older house.

19:52

That'll go. This place will get extended.

19:54

We will end up with a lot

19:56

more space, a lot more rooms, a

19:59

lot more IOT. So as we

20:01

embark on that project, the

20:03

discussion that we're having with

20:05

our trusted Sparky is, what

20:07

do we do with all these things?

20:09

At the moment, I counted

20:12

it once, this house, as it

20:14

stands, has 130 lights in the

20:16

ceiling. Now, there are rooms with

20:18

multiple lights. I mean, there

20:20

are two just in my office

20:22

here, and you go down to

20:25

the living room, and there's like

20:27

six there, so... It's not quite

20:29

as nuts as it sounds.

20:31

With 130 different lights, I've

20:33

got I think 80-something shellies

20:36

at the moment, driving all

20:38

those. Let's say that number

20:40

increases by 50% and suddenly now

20:42

we're up to nearly 200 lights

20:44

in the roof, ceiling, and we're

20:47

up to 120-something IOT things. That's

20:49

a really, really big commitment. And

20:51

I want to get that spot

20:53

on because I don't want to

20:56

be mucking around with it. Now,

20:58

swing and muck around brings me to

21:00

these. These are made by a company

21:02

called Clipsall. I have

21:04

a feeling Clipsall is Australian. Milford

21:07

might not know. Clipsall, these are

21:09

Clipsall satinsins. They look kind of

21:11

cool, they come in white, they

21:14

come in black. So, as you can

21:16

see from my back wall, we've got

21:18

a lot of dark walls around here,

21:20

we've got the black ones on there.

21:22

We've got the light walls, these

21:24

ones going on there. Obviously they

21:26

do on the ones in the

21:29

wall where they've got the mechanisms

21:31

to toggle the circuit and they've

21:33

also got the mechanisms

21:35

to dim. They are absolute rubbish.

21:37

I despise these. We don't have

21:39

a lot of them. We've got maybe,

21:41

let's say maybe a third of the

21:44

house has them because we've just put

21:46

them in rooms that we've been renovating.

21:48

So we've got a third of a

21:50

house which is about to expand by 50%

21:53

so what does that make it? So we're at

21:55

the point now, it's like, well, before we expand

21:57

the house, let's figure out what we're going to

21:59

do. So the very very long way

22:01

getting around to the question of

22:03

if anyone has seen switches they

22:05

really like Please let me know

22:07

because we've got to figure out

22:09

how we're going to make this

22:11

very very long-term commitment Very expensive

22:14

commitment by the time minute of

22:16

this many switches around the place

22:18

And I'm just not sure what they should

22:21

look like now I'm just looking

22:23

at my Twitter Twitter feed Twitter

22:25

feed here because somewhere along the

22:27

way I've got a suggestion here

22:29

that came from the Sparky. What

22:32

did he say? What was the brand?

22:34

So I was thinking about

22:36

maybe doing like Clipsal

22:38

Wiser which has got Zigby-based

22:41

switches built into it but

22:43

I ruled that out for

22:45

the reasons I just spoke

22:48

about there. Parga finesse. I'll

22:50

drop this into the chat. These

22:52

look pretty cool. What I'm missing here is

22:54

just that the tactility of the switch like

22:56

I went to another mates house the other

22:58

day who'd done this really cool renovation and

23:00

he had switches very very similar to this

23:02

but you push it and it just it's

23:04

got so you know when you get like

23:06

a you get in a really nice car

23:08

and you close the door and it's just

23:10

got that solid kind of funk like I

23:12

want to feel that in the switch I

23:14

know that sounds really weird but I want

23:16

to be clear that I have actually pushed

23:18

it and I get that tactileile feedback part

23:20

of the problem When these ones,

23:22

which feel like crap, are sitting

23:25

behind IOT, which keeps failing, is

23:27

you push the button and nothing

23:29

happens. And you like, is it

23:31

because the switch is crap or has

23:33

another shell he died? That's what I'm

23:35

trying to get away from. So see,

23:37

what do you think of those hager

23:39

ones? You'll see switches and plates on

23:42

the left of the screen there. They

23:44

look pretty nice. I'm going to get

23:46

the sparky to drop in one as

23:48

a test switch, and we'll use that.

23:50

Let's see the other comments

23:53

here. Stefan's saying, like buttons,

23:55

which is with a shelly built in,

23:57

which is the carer stuff, of course,

23:59

having... energy monitoring workers ZIGB repeaters

24:01

as well. So, okay, if they're

24:04

ZIGB repeated, ZIGB repeaters and only

24:06

mains powered, and so you're talking

24:08

about obviously switches that go into

24:11

the, or plugs rather, they go

24:13

into the wall, sockets, things are

24:15

out term. So, Stephanie, if you

24:18

looked at the wide care switches, drop a

24:20

link to those in the chat, I'll have

24:22

look at that. Milford. Apologies for the

24:24

interruption, but wouldn't it be cheaper and

24:26

simpler to get Charlotte to pick the

24:28

aesthetics and you why the IOT removable

24:30

switch to the master points? Now someone

24:32

suggested this the other day. When you

24:34

say the master points, Milford, are you

24:36

talking about your most houses? Or most houses

24:39

here in Australia, I assume it's the

24:41

same in other parts. We normally have a

24:43

circuit board somewhere central. And then you've got

24:45

all the different switches in there, so you

24:47

can turn off a circuit somewhere. Someone suggested

24:50

this the other day, because you can get

24:52

shellies. that can be switched and dimmed

24:54

from there. But certainly for us

24:56

here, one circuit in our circuit

24:58

board will turn off six seven

25:00

lights because they're all wired

25:03

back to that one circuit. Now in

25:05

my experience of different places

25:07

I've lived in, that's usually

25:09

the way. So we can't change that

25:12

here in this existing house as we

25:14

build the new bits possibly. I'm just

25:16

not sure that that's something that

25:18

we normally do here, but

25:20

maybe misunderstood you. George says we

25:23

have clips all products in South

25:25

Africa. I've only used socket

25:27

and light switches. The quality is

25:29

not great. I definitely won't put

25:32

my trust in the other products.

25:34

Yeah, now this seems consistent.

25:36

Mike, Mike's on a plane on the

25:38

way to Stockholm. Been there? Love the I'll

25:40

teach out so much I want to do

25:43

at home. You can start gentle. You know,

25:45

this is kind of the nice thing about

25:47

about roll at yourself IOT. It's funny

25:49

now because I feel really... What's all

25:52

right? You know, you know when all of us are

25:54

technical people probably listen to this and you

25:56

go into a store somewhere and someone tries

25:58

to tell you something. about something technical and

26:01

you're like, don't you know what I do

26:03

kind of thing. Now every time I talk

26:05

to someone about home automation I feel like

26:07

that. So we're talking to, I think it

26:10

might have been the project manager for this

26:12

house recently and they were talking about, oh

26:14

what's the really expensive home automation that

26:16

was the incumbent for so long before

26:19

we had raspberry pies and home assistant?

26:21

Someone will say it in the moment

26:23

and I'll be, yep, that's exactly one.

26:27

Not that, not connect four,

26:29

the other really big one.

26:32

Home, automation, product. See

26:34

if we can figure it out

26:36

before the buffering catches

26:38

up. What's the big brand?

26:40

The one where an installer

26:42

comes and charges you

26:45

a gazillion dollars to do

26:47

it. So, um... Every time I

26:49

speak to someone about something like that

26:51

and they go, hey, why don't you

26:53

put this like massively expensive thing in?

26:55

We end up with touch panels and

26:57

every home and you cannot do anything

26:59

yourself and someone has to come in

27:01

and charge you because zoon dollars every

27:03

time. And I'm like, well, I have

27:05

free and open source software. I think

27:08

it is now the world's most active

27:10

open source project. It was always in

27:12

the top 10 for a while. It's thought

27:14

of who the alert was the top one.

27:16

you know, do you have a raspberry pie?

27:18

It's like, yes, you can get started.

27:20

Many of us have spare

27:22

raspberry pies floating around the

27:24

place. So if you've got

27:26

a hundred bucks spare, you

27:28

can start your home automation journey,

27:30

and you can have one light

27:33

bulb somewhere, or one switch. You

27:35

know, like, you can get into

27:37

this whole thing and get started

27:39

for absolutely nothing. This

27:41

is really bugging me, what is the

27:43

name of it? Chat GP2. Chat GP2.

27:45

brand name, home,

27:48

automation, product. I

27:50

know, it's going to bug

27:52

me when I say it. Not

27:55

Amazon, no, no, it

27:57

could be electron. It's

28:01

in a lot of Australian

28:03

homes. Been around for years.

28:06

It's not clips. Oh, is it

28:08

Sea Bus? Oh, I think a Sea

28:10

Bus. Yeah, Sea Bus. Is that

28:13

Clipsall? Wow. Yep, pretty

28:15

sure I was thinking of

28:17

Sea Bus. Anyway, so you don't

28:19

need all that stuff. The

28:21

point is you can get started

28:24

really, really cheap, really

28:26

easy. Milford says

28:28

you want to have removal master

28:30

switches in case in case of

28:32

security is outdated at some point. Abe

28:35

says what smoke alarms do you use?

28:37

So we had some legislative changes

28:39

here some years ago around smoke

28:41

alarms where I'm trying to remember

28:43

what change and don't quote me

28:45

on it but it was something to

28:47

the effect of they need to be

28:49

able to communicate with each other so

28:51

if one goes off in one room

28:53

they go off in the other rooms

28:55

because inevitably there are cases where houses

28:57

had smoke alarms and there's a fire

28:59

in one room, but they can't hear

29:01

the smoke alarm and the house burns

29:03

down and it's catastrophic. So they have

29:05

to be connected. I think they also

29:07

have to have, not just the classic,

29:09

you can, I don't know the science

29:11

behind it, but can it smell smoke,

29:13

but also can it see smoke? It

29:15

was like a photovoltaic thing or something.

29:18

So I ended up getting a nest

29:20

protect. Now there's also a bit here around,

29:22

do they have to be mains powered versus

29:24

battery powered? and I think something might have

29:26

changed after I went and put in this

29:28

protective as well. But what I liked about

29:30

it, and I've got one here in my

29:33

office, is that first of all they do

29:35

exactly what they do as advertised. So we've

29:37

had one or two occasions where they've gone

29:39

off, false positives, but circumstances where

29:41

yeah, they probably should have gone off.

29:43

They do all communicate very well, they

29:45

got an app. I think there is actually

29:48

a home assistant integration, but it was a

29:50

little bit flaky. So they've all been good.

29:52

I haven't bought any for quite a few years

29:54

now though, so we need to think as we

29:56

expand Do I get more of those? Can you still

29:58

get more of those or is there's something

30:00

else. So Abe if you've got an

30:03

idea about something else let me

30:05

know. Abe says removable batteries also

30:07

no longer allowed meaning Google Nest

30:09

pulled their battery products but still

30:11

have wide version. Okay so that

30:13

might be what I'm thinking of.

30:15

Normally when something like say a

30:18

battery products are no longer allowed

30:20

normally existing stuff gets grandfathered in

30:22

for some period of time and

30:25

at least here in in our great

30:27

state of Queensland one of the things

30:29

that that was a point of difference.

30:31

I think if you were a landlord with

30:33

tenants, you had to be a bit more

30:35

on top of things, and if you were

30:38

living in your own home, and you were

30:40

effectively responsible for your own

30:42

decisions. Incidentally, while I'm talking about

30:44

how shit these are, I just

30:46

realized. Might be a bit hard to see it

30:49

on the camera, but on the back, you can

30:51

see little wipe it, little wipe it, black

30:53

bit. When you pop these face plates

30:55

off on these clipsal satins in units.

30:58

They're meant to pop off, but

31:00

often the clips just break. So this

31:03

is this is why Even just the

31:05

fact that I'm having to stress this

31:07

to get a fun a good off So

31:10

we can see there's there's

31:12

one clip broken Just up

31:14

here on the top left And the

31:16

photo I put the other day

31:18

Often I end up because we've

31:20

had to take the bloody things

31:22

off so much to fix the

31:24

shellies that keep breaking behind it

31:26

Often these end up being stuck

31:28

on with blue tack. So you've got

31:31

this really cool looking on suite

31:33

for example the one I seem

31:35

to replace the most. It would

31:37

be like nice stone and cool

31:39

taps and everything and blue tack

31:42

keeping the light switches together.

31:44

So I've got to figure this

31:46

out. Simon really happy with my

31:48

Bosch twin guard. What's a Bosch

31:50

twin guard? We're crossing thread thread

31:52

a little bit here. I think

31:55

Bosch. Twin God that

31:57

is oh, that's the that's

31:59

a Smack sensor. More than just,

32:01

no, it's more. It's more than

32:03

just a smoke detector, they say.

32:05

What does that do? Hang on,

32:08

got to read the cookie warning.

32:10

Yeah, yellow. Smack together that

32:12

provides your home with double

32:15

protection. Interesting, interesting.

32:18

It's smart by integrating it

32:20

into the Bosch smart home

32:22

system. Right, here's... I know we're

32:25

going on for a long time. But

32:27

while I'm on my high horse. with

32:29

different home automation things. I've

32:31

had multiple things break

32:34

this week, not just clips

32:36

or satins and switches. I

32:38

opened up Home Assistant

32:40

one day, had one of the

32:42

little badges there, had a warning,

32:44

it said you're using the Sompfi

32:47

integration to control an awning

32:49

that we got installed out

32:51

the back of the house.

32:53

18 months ago. Make sure

32:55

you turn off automatic firmware

32:58

update because the latest version

33:00

of the firmware breaks the

33:02

integration. It's like, oh shit, I hadn't

33:04

thought about this. So I go into

33:06

the app, open it up, there's a

33:09

firmware warning, I'm like, dismiss, left

33:11

it at that, now my awning no

33:13

longer works. And the remote control hasn't

33:15

worked for ages either, so the awning

33:17

is kind of stuck. I have a

33:20

switch spot. If you're not going to

33:22

switch up before, it's a little IOT,

33:24

it's like a little arm, just mechanical

33:27

arm that's triggered via an event. I

33:29

3D printed a frame that I put

33:31

around the air conditioning control unit such

33:34

that the arm can turn the power on

33:36

or off. Now this is a really,

33:38

really old air conditioning system. That's definitely

33:40

one of the things that will change

33:42

with this house for any stuff. There

33:44

is no infrared on it. There was

33:46

no retrofit IOT without spending a gazillion

33:49

dollars. So I was literally out there

33:51

with Vernia Calipers measuring, printing, slipping and

33:53

all in. And it works really well

33:55

as just a simple on off. Can't

33:57

do temperature control or anything, but on

33:59

off. That's dropped off. I don't know why.

34:02

I can use the switchbot app and it

34:04

works. But it's no longer part of home

34:06

assistant. I meant a Bluetooth into everything.

34:08

And yes, I tried rebooting. But where

34:11

I was going with this? Looking at the

34:13

Bosch stuff here. So I was saying to Charlotte

34:15

that I think one of the pure

34:17

frustrations we have in this home

34:19

automation industry at the moment is you

34:22

end up with so many different products

34:24

like Bosch, like switchbot, like the awning

34:26

we've got where they're like... Hey, this

34:28

is all smart and it's all connected.

34:30

Here is a dedicated app and you

34:33

end up with 90 freaking dedicated apps

34:35

to control the automation things. Now we

34:37

have open standards and protocols and things

34:39

like matter, which are meant to join

34:42

all these things together. But that's taking

34:44

a long time to roll out and

34:46

for everything to integrate. So until then

34:48

we end up with all of these

34:50

different like little wall garden ecosystems. One

34:52

of the joys of Shelley for all their

34:55

faults as a physical unit that keeps burning

34:57

out. is that it's very open. They've

34:59

literally got APIs. Every one of these

35:01

is a little web server that has

35:04

Jason-based APIs that you can communicate with

35:06

directly. There's a native integration into Home

35:08

Assistant that makes it really easy to

35:11

control them directly without any cloud dependency.

35:13

They have an app. I used it

35:15

for a bit when I first got

35:18

it. I haven't touched it for probably years.

35:20

So, that's a long way going around the

35:22

Bosch thing. And I'm not sure if maybe

35:24

Bosch is awesome. Tell me. If it is, and

35:26

then I can have a look at it.

35:28

I know Shell is making a list somewhere

35:30

of all the things we need to think

35:33

of for building this house. Incidentally, maybe they'll

35:35

do a dedicated show about this one

35:37

time, but one of the things we're

35:39

building is like a dedicated home theatre.

35:41

If you know anything about that or

35:43

how home theatres work or what I should

35:46

be looking at, let me know. And then yeah,

35:48

we've got to do a dedicated show

35:50

about that, because I'm learning on the fly.

35:53

Simon says, it is awesome.

35:55

So this is the butchering out,

35:57

okay, works nice with home autumn.

35:59

Does it integrate with home assistant?

36:02

That is my question. It's got

36:04

its own app and it has

36:06

to for the normies, right? If

36:08

you're a normy out there and

36:10

you're not like us and you're

36:12

technical and you can roll your

36:15

own raspy pie, you need that

36:17

stuff. Let's look, Bosch, Twingard, Home

36:19

Assistant. If there's an integration into

36:21

this, I will be very, very

36:23

tempted. Smakesens, is feature, oh there's

36:25

a feature request. Or, there's one

36:27

here, 7th of April last year,

36:30

Bosch, Twin Guard, in-home assistant. Someone

36:32

might answer my question before I

36:34

find the answer here. Well, someone's

36:36

got them in home assistant, so

36:38

that's something. It's not just that

36:40

I'm in love with home assistant,

36:42

that's part of it. But in

36:45

order to work with home assistant,

36:47

the product has to be open

36:49

enough to enable these integrations. Now

36:51

I'm going to roll that back

36:53

because a lot of the time

36:55

home assistant integrations are like with

36:57

the awning where effectively it's like

37:00

let's just I'm sure in some

37:02

of these cases effectively screen scrape

37:04

their website in order to fake

37:06

log you in and then push

37:08

buttons on the screen or make

37:10

the post request to make things

37:12

happen. Either way. If it's got

37:15

some sort of native API or

37:17

native integration, or particularly if they've

37:19

got like a little works with

37:21

home assistance sort of thing, all

37:23

they implement matter, then that's a

37:25

big plus, because you know it's

37:28

going to be so much more

37:30

open and compatible with everything. Okay,

37:32

let's go on. Hello, I've been

37:34

going. It's 37 minutes, and through

37:36

the first point. Yubie Key or

37:38

Fish. Now, I think I'm actually

37:40

going to write a blog post

37:43

on this, not so much about

37:45

Yubie, Key in particular, but about

37:47

this pattern, but about this pattern,

37:49

which is pattern, which is... legitimate

37:51

organizations sending communication which is indistinguishable

37:53

from a fish. And I have

37:55

seen so many of these over

37:58

the years in different ways and

38:00

I'm sure you have too. and

38:02

I guess it's something that I'm

38:04

particularly in tune with because I'm

38:06

looking for all the places where

38:08

there are bad guys out there

38:10

trying to fish people and steal

38:13

money and all those sorts of

38:15

things. So I'm always a little

38:17

bit suspicious when I get communications

38:19

like this one I'm about to

38:21

talk about here. I was on

38:23

the radio a couple of days

38:25

ago talking about the thing that

38:28

we're going to talk about next,

38:30

the in analysis. On the ABC

38:32

radio here And they're like, you

38:34

know, what are all the things

38:36

that you can do to protect

38:38

yourself online? I'm a password manager,

38:40

don't really use your passwords, multi-factor

38:43

authentication, SMS is better than nothing,

38:45

soft or authenticator after that, and

38:47

then preferably a hardware security key

38:49

such as a Yibi key. And

38:51

that's what triggered the email. I

38:53

actually, because I like to give

38:56

more in these, in these podcast

38:58

here. I'll tell

39:00

you the broader message that

39:02

came through. So I get

39:04

this message. Here it is.

39:06

This is yesterday. Subject is

39:08

an email. Yubica relationship builder

39:10

and receiving the new Yubiki

39:12

5C NFC security key. Hello

39:15

Troy. We hope you're well.

39:17

Thank you. I'm reaching out

39:19

to you as we manage

39:21

Yubico's Com supporting the APAC

39:23

region. That's Asia Pacific for

39:25

people in other parts of

39:27

the world. I am aware

39:29

you are recently on the

39:32

ABC Gold Coast where you

39:34

briefly mentioned Yubie Keys, I

39:36

too, and Gold Coast-based. But

39:38

I wanted to reach out

39:40

for two reasons. Incidentally, that's

39:42

pretty OSN information that you

39:44

could find. Number one, to

39:46

see about potentially building a

39:48

relationship between Yubico and you,

39:51

and two, to see if

39:53

you would like to receive

39:55

Yubico's new, Yubie Key 5C,

39:57

NFC security keys hyperlinked, to

39:59

keep... in brackets for free

40:01

we are not expecting a

40:03

review and you're getting one

40:05

day or anything as we

40:08

know that that is not

40:10

what you do now that

40:12

felt it just feels like

40:14

it's a male merge someone's

40:16

written that bit and that's

40:18

very targeted towards me and

40:20

then there's a whole of

40:22

Details. Fido utuware for authentication

40:25

protocols. Companies have seen zero

40:27

successful fishing attempts using Yubiki.

40:29

I agree with. A bunch

40:31

of upper-case stuff. Simple, easy,

40:33

scalable, efficient, multi-proticle works. Product

40:35

features. Also, upcase. Upcase. And

40:37

bold, I might add. Tapping,

40:39

durable, portable. Works. New Yubiki

40:41

is available, hyperlink here or

40:44

locally, hyperlink. If you want

40:46

to receive two. Oh shit.

40:48

That'd be nice. Two UV

40:50

keys. Please email us with

40:52

a suitable postal address, email

40:54

and phone number. And it's

40:56

from, I did put this

40:58

in the link so I

41:01

can talk about this in

41:03

the tweet, sphere PR.com that

41:05

are you. And I was

41:07

like, eh, let's see what

41:09

happens. Let's go sphere PR.com

41:11

that are you. That's

41:14

a sort of a great big

41:16

error message at the top of

41:18

the screen. Notice, function load, text

41:20

domain, just in time, was called

41:22

incorrectly. Translation coding for the BT

41:24

cost calculator domain was triggered too

41:26

early. There's usually an indicator of

41:28

some code. Now, this doesn't look

41:30

good for any organization, but you've

41:32

got Yubi key, which is again

41:35

an awesome company. I have many

41:37

Yubi keys. I've recommended them many

41:39

times and I shall keep doing

41:41

so. Very, very privacy-centric. And then

41:43

you've got... a PR company that

41:45

literally is PR in the domain

41:47

alleging to represent YubiCo communicating in

41:49

a way that can't easily be

41:51

independently verified and then their website

41:53

has this big error message on

41:55

it and it looks shady AF.

41:57

So I tweeted this and effectively

41:59

asked, does this look shady AF?

42:01

And a bunch of people were

42:03

like, ah yeah. Anyway, Yubiko got

42:05

in touch. Apparently it's legit. So

42:08

maybe I'll try and get someone

42:10

from Yubiko to send me a

42:12

couple of keys because I would

42:14

like to have the keys. Main

42:16

reason why the keys is our

42:18

daughter El will turn 13 in

42:20

a few months from now. 13

42:22

is when she'll get on all

42:24

the social things before the government

42:26

takes it away in November because

42:28

kids under 16 will no longer

42:30

be allowed to have it but

42:32

until then she'll have a few

42:34

months and I want her using

42:36

yubie keys on all of her

42:38

things which is exactly the same

42:41

as I did with my son

42:43

when he turned 13. It's a

42:45

rite of passage getting your first

42:47

yubie key. So the point is

42:49

is that we have so many

42:51

occurrences where legitimate communications from legitimate

42:53

organizations has all the hallmarks of

42:55

fishing. And I think I'm going

42:57

to write a blog post about

42:59

this, about what are those hallmarks?

43:01

You know, the request for information,

43:03

the very malmerged content, the requests

43:05

for... I already said request for

43:07

information. Let's just say it again,

43:09

because I think it's such an

43:11

important thing where so many of

43:13

these fishing messages are predicated around

43:16

asking you to add info. I'm

43:18

not going to name this other

43:20

company, but I have another incident

43:22

recently where there's a company to

43:24

do a lot of work with

43:26

and have done for some time.

43:28

And some company reached out and

43:30

said, hi, we're now the marketing

43:32

company for this other company. And

43:34

started asking me a whole bunch

43:36

of quite personal questions. And I

43:38

ignored it because I was sure

43:40

it was a fish. And they

43:42

came back again. I got to

43:44

the point where I reached out

43:46

to the company I had that

43:49

relationship to. I was like, hey,

43:51

look, I don't know. And

43:54

apparently there was some unhappiness that this

43:56

company had behaved in that way, so

43:59

I guess it was a good outcome.

44:01

Yeah, it was it was legit. So

44:03

well, um, well, that's the other thing

44:05

too The offer is to send you

44:07

USB devices that you stick into your

44:10

PC You know, like if they had

44:12

a gun, can we send you a

44:14

t-shirt? It still would have looked fishy,

44:16

but it's like, well, how bad can

44:19

it be? You know, I've got my

44:21

address and my phone number. It is

44:23

different when I got to stick the

44:25

thing into my computer ABC's

44:28

have been poned pin analysis. Now

44:31

this is really really cool. The

44:33

ABC is the Australian Broadcasting Corporation.

44:35

We have an ABC too. I

44:38

know there's one in America. And

44:40

the ABC is great in many

44:42

ways. Pretty much every Monday I

44:45

go to an ABC studio here.

44:47

Sometimes I talk about Yibi Keys.

44:49

And I do a radio program

44:52

that's targeted at... Yeah, well we've

44:54

got a city of about 650,

44:56

7,000 people. It's not a big

44:58

city in the global sky, but

45:01

there's a bunch of people here.

45:03

And it's a mainstream consumer radio

45:05

program. And we talk about using

45:08

hubbykeys and similar things like that.

45:10

And the ABC has done a

45:12

bunch of really, really good work

45:15

over the years. On various stories,

45:17

they are government funded, but I

45:19

think for the most part, they're

45:22

viewed as pretty independent. I'm just

45:24

going to try and find the

45:26

story here. Is it pins? Here

45:28

we go. Pin. No, that's about

45:31

this blog post, this live stream.

45:33

Why not far so hard? I'm

45:35

probably googled. ABC, have I been

45:38

honed, pin analysis? I want to

45:40

say about a year and a

45:42

half, two years ago, the ABC

45:45

did a really good... Really good

45:47

use case where they took the

45:49

haven't been poned API the email

45:52

address search one and they did

45:54

this really cool mosaic It's still

45:56

up there. I'm gonna drop it

45:58

in the chat. Have a play

46:01

of this ABC HIV P mosaics

46:03

see if it finds it. Uh,

46:05

goes for like to be P,

46:08

ever been Pined, what I call

46:10

again? Here we go. See your

46:12

identity pieced together from stolen data.

46:15

Now this is really cool because

46:17

it sits on top of the

46:19

Have A Been Poned API. You

46:22

put your email address in. This

46:24

was all done by a journalist

46:26

called Julian Fell. Put your email

46:28

address in as it pulls back.

46:31

if you want to really have

46:33

fun with it, put in like

46:35

test at example.com and it builds

46:38

up this picture of like here's

46:40

all the places that your email

46:42

address is exposed and then you

46:45

had another breach and it exposed

46:47

your passwords and another one as

46:49

your, you know, your home address

46:52

or whatever. So he did a

46:54

really good job of visualizing what

46:56

data breaches mean to individuals. He

46:58

did a separate story on me

47:01

which I thought was really really

47:03

good. Normally now, these days when

47:05

I'm someone's like, what is that

47:08

you do? So here's a story.

47:10

So here's a story. Here's a

47:12

story. Here's a story. So Julian's

47:15

done some good stuff. Now he's

47:17

done this pin analysis and Julian's

47:19

done this pin analysis. And Julian

47:22

pinging me a little while ago

47:24

and he said, you know, could

47:26

they get a hold of the

47:28

passwords and poned passwords so they

47:31

can do this pin analysis? And

47:33

I went, well, they're four-digit pins.

47:35

So you got 10,000 possible options.

47:38

Just call to have a been

47:40

poned API. You know, just make

47:42

10,000 calls. and start with zero

47:45

zero at zero and you go

47:47

all the way up to nine

47:49

nine nine nine and then you

47:52

can get all the data you

47:54

want just by calling the API

47:56

and he's like oh yeah we

47:58

could do that that'd be pretty

48:01

cool so he's done this analysis

48:03

talk to you about some of

48:05

those questions I got from other

48:08

journalists later but he's done this

48:10

analysis where he's made a heat

48:12

map and that the heat map

48:15

is your classic x y y

48:17

axis here, where the y axis

48:19

is the first two digits of

48:22

the pin and the x axis

48:24

is the last two digits of

48:26

the pin. And what it means

48:28

is that you can see these

48:31

really really clear patterns based on

48:33

the way the four digits are

48:35

created in the two pairs. I'll

48:38

give you an example of what

48:40

I mean by that. There's a

48:42

very clear line on this heat

48:45

map, one drop this into the

48:47

chat, very clear line on this

48:49

heat map where it goes from

48:52

zero zero up to nine nine.

48:54

Now being a perfectly diagonal line

48:56

like that it intersects every occurrence

48:58

of repeating pairs of digits zero

49:01

zero zero zero zero zero one.

49:03

all the way up for five,

49:05

four, five, etc. etc. because it

49:08

turns out that there is a

49:10

very high prevalence compared to everything

49:12

else of people using repeating two

49:15

digits. And you see it on

49:17

this heat map and you like

49:19

bam I can see that. The

49:22

cool thing is when you look

49:24

at this on a browser on

49:26

a PC it's not as good

49:28

on your phone but when you

49:31

got screen real estate the heat

49:33

map stays in place and as

49:35

you scroll down there's explanations and

49:38

different points on the heat map

49:40

are highlighted. you know there's a

49:42

good example here so that the

49:45

brighter the square the more prevalent

49:47

it is as we scroll down

49:49

it's like the most prevalent pin

49:51

by huge margin is one two

49:54

three four like obvious zero zero

49:56

zero zero is a big one

49:58

as well but it's the more

50:01

obscure ones and the other patterns

50:03

that get really interesting so the

50:05

repeating digits I mentioned before what's

50:08

the other on there's oh here

50:10

we get There's also a broken

50:12

horizontal line split between 19 and

50:15

20 for the first two digits.

50:17

So why do we have a

50:19

very high prevalence of pins that

50:21

start with either 19 or 20

50:24

or the birth years? And you

50:26

can see it just plotted out

50:28

on this graph. There's also a

50:31

blockish area around the bottom left.

50:33

that needs some explaining. These are

50:35

all the combinations that could represent

50:38

dates like... 2.9.2 is not as

50:40

popular as neighbours because that's probably

50:42

because it only comes around once

50:45

every four years. 29 the FEB,

50:47

of course. However, if you're in

50:49

America, it's O2.29 and that also

50:51

stands out. And you just see

50:54

these really, really interesting patterns visualised

50:56

here. I had some interesting conversations

50:58

this week with journalists calling up

51:01

to talk about this and I'm

51:03

not going to name where they're

51:05

from because for obvious reasons they're

51:08

going to look pretty stupid. So,

51:10

one guy calls up because I'm

51:12

in a database somewhere and he

51:15

says, you know, apparently most four

51:17

digit. pins have been in data

51:19

breaches. Only most? You sure it's

51:21

most, mate, because there's a very

51:24

finite number, that number of course

51:26

being 10,000. 10,000 of them have

51:28

been in data breaches. Every single

51:31

one of them has been in

51:33

it. And basically the discussion was

51:35

sort of centering around. not using

51:38

pins that have been in data

51:40

breaches. And I'm trying to say,

51:42

mate, there's only 10,000 of them.

51:45

And there's billions of people creating

51:47

that they have all been in

51:49

data breaches. Every single, there is

51:51

not a single digit that you

51:54

can look for, four-digit number, in

51:56

have I been paying that you

51:58

can look for, there has not

52:01

been in a data breach. My

52:03

favorite, so I was doing a

52:05

radio interview, and the journalist said,

52:08

And remember, talking about four-digit pins,

52:10

she said, I've looked at... The

52:12

ABC's analysis and there are hundreds

52:15

of thousands of four-digit pins That

52:17

appeared in have and I like

52:19

She's fucking with me surely and

52:21

I had to saw so well

52:24

There's only 10,000 four-digit pins. I

52:26

think what you're saying is that

52:28

those 10,000 pins have appeared multiple

52:31

times Which would be accurate but

52:33

I did find it funny that

52:35

there seems to be some misunderstanding

52:38

about how many four-digit numbers you

52:40

can have. So here we are.

52:42

Thomas says my favorite thing about

52:45

this heat map is about how

52:47

if you squint you can see

52:49

a rough grid across the whole

52:51

thing every ten or so. Yeah

52:54

it's like it's highlighted a bit

52:56

isn't it? a more prevalent pattern.

52:58

And the way that I read

53:01

that, because if we, it almost

53:03

looks like if you squint, you

53:05

can see a 10 by 10

53:08

matrix, isn't it? I think that's

53:10

what you're saying, Thomas. And if

53:12

that's the case, then the middle

53:15

of each one of those 10

53:17

by 10 squares is more prevalent

53:19

than on the outer sides, which

53:21

would mean... that the lower value

53:24

numbers and the higher value numbers

53:26

are less prevalent and the numbers

53:28

from say three through seven are

53:31

much more prevalent. That'd be interesting,

53:33

wouldn't it? Well, you know where

53:35

to find the data. You can

53:38

do some analysis on that. I

53:41

couldn't say why, but the fact that

53:43

the pattern is there has fascinated me

53:45

from a human age point. Yeah, you're

53:48

right, and I had not seen that

53:50

before, but now that you mention it,

53:52

I can't unsee it. I think that

53:55

would be really, really interesting for you

53:57

to do some analysis on if you're

53:59

bored. Milfuses, I can't believe you have

54:02

to explain things. I thought that's what

54:04

the... truth people before they're for a

54:06

charge of $4 a pop for the

54:09

Australian and some of these pranksters bent

54:11

on securing the nation. Where do you

54:13

even get news from these days? I

54:15

just do not know what to look

54:18

at and every time I look at

54:20

anything I've got to try and figure

54:22

out what what the political bias or

54:25

the leaning of the publication or the

54:27

person is before I figure out whether

54:29

or not I can trust it. I

54:32

mentioned Grafana in more detail last week.

54:34

My Grafana dashboard is still up there.

54:36

The back story here, Grafana, many people

54:39

probably heard of Grafana, they do graphs.

54:41

It's much more than that because they

54:43

can plug into all these sorts of

54:46

different data sources. It is a graphing

54:48

charting platform, I think is a reasonable

54:50

way to put it. It is available

54:52

within Azure. You can spin up a

54:55

Grafana instance and get immediate access to

54:57

a bunch of your Azure things, like

54:59

maybe you want to report on the

55:02

number of requests per minute from your

55:04

API, for example. And then you get

55:06

all these connectors into other platforms. You

55:09

can plug it in the cloud flare.

55:11

We've plugged it into Zendesk so that

55:13

since last week, Charlotte now has one

55:16

of our spare screens up on her

55:18

desk, which just shows the outstanding Zendes

55:20

tickets, because she normally takes care most

55:23

of that. You can plug it into

55:25

all sorts of custom data sources. You

55:27

can do really really cool stuff with

55:29

it. And I have this Surpluster Needs

55:32

77-inch TV screen that I've been sitting

55:34

there for ages. It's now, after my

55:36

war, it's got this cool set of

55:39

charts that is genuinely useful for me

55:41

doing my job running, have I been

55:43

poned. When I spoke last week, we

55:46

had this running on Azure's hosted Grafana

55:48

instance. For various reasons we have migrated

55:50

over to Grafana's own hosted instance. Stefan

55:53

will remember why it was his idea.

55:55

I think it was like better access

55:57

to various sources of data and That's

56:00

gone mostly well. I did about it

56:02

during the week. We've had, we've just

56:04

had some odd stuff where I have

56:06

a Rosary Pi 5 8 gig model

56:09

running chromium that is sitting in my

56:11

cupboard lots of airflow, don't worry about

56:13

that. That's running this instance in chromium

56:16

at full screen in kiosk mode so

56:18

it looks really really neat and it

56:20

keeps crashing. So it runs for about

56:23

an hour and then it just crashes

56:25

out and I tweeted about this as

56:27

well. And in fact I tweeted originally

56:30

the original screens and someone from Grafana

56:32

got in touch was very nice about

56:34

it and then I tweeted the little

56:37

timing out problem the other day. I

56:39

got a nice message from Grafana, founder

56:41

and CEO today as well, it seems

56:43

a great block. With some opposite support,

56:46

I think what I'm actually going to

56:48

do, again Stefan if you're still here,

56:50

but from memory you like migrated it.

56:53

There's some sort of migration process because

56:55

I had exactly the same dashboard from

56:57

azure, come over and it was nice

57:00

and clean. I think what I'm going

57:02

to do, because it's not particularly complex,

57:04

is just go and recreate that dashboard

57:07

from scratch. I feel like there's probably

57:09

20 minutes of work or something in

57:11

there and I think that will work.

57:14

I have a feeling that there's some

57:16

sort of resource exhaustion, because crash in

57:18

chromium. possibly due to some legacy artifacts

57:20

or something. So let's just create a

57:23

clean one. Stefan today or overnight my

57:25

time has been sending through some really

57:27

really cool examples of stuff that we

57:30

would have surfaced directly via App Insights

57:32

in Have A Bampone, Onageur, that's now

57:34

being pumped via Hotel into Grafana and

57:37

it looks super super super sweet. I've

57:39

just seen... him do that with the

57:41

our staging environment. I'm really looking forward

57:44

to seeing that as production data that

57:46

I can get up on the big

57:48

TV. It looks so cool. Everything in

57:51

Grafata just looks cool. And even go

57:53

watch some videos because the videos and

57:55

tutorials about how to set up different

57:57

data sources and configure it. They also

58:00

look cool. So I just... I feel

58:02

it's a little bit like every now

58:04

and then you find a company that

58:07

just clicks with your way of thinking

58:09

and the things that are, I guess,

58:11

combination of visually appealing and functional. And

58:14

Grafana just feels like they've nailed it.

58:16

So really, really looking forward to doing

58:18

more stuff with that. I'm going to

58:21

write it all up and put it

58:23

in a proper blog post as well.

58:25

A lot of people said, can you

58:28

write up the way I've done this

58:30

kiosk? It's not really hard. It's pretty

58:32

straightforward. Glitchy things, I'm going to get

58:34

perfect and then I will write that

58:37

up. What else is here? James says,

58:39

people are shy at picking numbers. I

58:41

never pick my own pin. Random in

58:44

between zero and nine. Milford, is this

58:46

clown yelling into my window? You only

58:48

like Troy because... Oh, well, that's going

58:51

downhill quickly. Uh... Okay, right, maybe, a

58:53

little bit off top, but anyway. We

58:55

are pretty much at time anyway. I'm

58:58

not going to do the next week.

59:00

Hopefully make some decisions about light switches

59:02

and so on. And I think I

59:05

will try and do that, that maybe

59:07

like a live stream, maybe something a

59:09

bit more interactive in two ways about

59:11

trying to get input.

Rate

Join Podchaser to...

  • Rate podcasts and episodes
  • Follow podcasts and creators
  • Create podcast and episode lists
  • & much more

Episode Tags

Do you host or manage this podcast?
Claim and edit this page to your liking.
,

Unlock more with Podchaser Pro

  • Audience Insights
  • Contact Information
  • Demographics
  • Charts
  • Sponsor History
  • and More!
Pro Features