The Hidden Danger of Deleting Apps: Your Data Stays | Caitlin Sarian DSH #874
Podcast episode (Nov 10, 2024) featuring Caitlin Sarian discussing consumer cybersecurity: she warns that deleting an app does not remove your account or data from company servers, explains how data brokers compile and sell personal data (e.g., DMV records, rewards programs), and gives practical advice—strong unique passwords, keep software updated, avoid open Wi‑Fi or use a VPN, use authenticator apps instead of SMS, and don’t click suspicious links. The episode also covers risks like SIM swapping, webcam compromise, home camera exposure, scams that send stolen funds, and tools/sites for reverse lookups and identity checks. Ends with a SCAM mnemonic to evaluate suspected fraud.
But I will say one thing people don't realize is if you do sign up for those accounts, a lot of people think that they delete those accounts when they delete the app, but they don't. So that's like, one really important thing. Like when I tell people, people just delete the app and think it, like, disappears. Your data is still there. So unless you, like, request to delete your account from them, like you actively email them or you put in a request and they confirm and then you delete that app, it's still sitting there on their servers.
All right, guys, here with Caitlyn Sarian here. Today we're talking cyber security. Thanks for coming on.
Yeah, thanks for having me excited.
Yeah, I think what you're. What you're teaching is very useful these days, especially people having kids.
Yeah.
You know, all these weird cases coming up.
I know. I honestly didn't realize it was like this big of a deal until some of my videos started going viral and I was like, wow, Actually, people need to know this.
No, it's a big deal. I mean, kids are just freely getting iPads and iPhones in first grade now, so.
Exactly. We're literally given technology before we can speak and no one's ever taught us how to use it.
Yeah. So let's start with the basics on, like, ways to protect yourself, I guess, and specifically kids. Cause I feel like that's a big issue right now.
Yeah. So, I mean, just for starters, you want to create, like, strong passwords. And that's like, I hate saying that because I want to hit my head against the wall every time I think everyone says that, but it's super, super important. And a lot of people think, oh, if I have one really strong password, you know, that'll be fine. And it's not. Because once that password is leaked, there are a lot of ways for hackers to just use that password and try a bajillion different ways and get into all your different accounts. So that's to start. The other thing is software updates, which I know is very controversial. A lot of people will reference that Apple, you know, would slow the phones down. That's one time. Software updates are super important. They fix a lot of bugs and what we like to call zero day vulnerabilities, or things that are vulnerable to that app. And so you want to make sure that they're updated constantly. The other thing is, like, open WI FI networks. If there's not a password and you're like, connected to a Starbucks and you're on banking apps Strongly suggest you do not do that. And make sure that you log on to a wifi that actually has the password.
Wow.
And also, a lot of times people think, oh, well, there's a password. I'm just going to give Delta, Delta Lounge as an example. Delta Lounge has had the same password for, like, six months. So it really doesn't do that much good at that point. And so what you want to do is if you are connecting to kind of weaker systems, you want to get a VPN or a virtual private network. It just encrypts the data going back and forth. Basically, it means that they can't read. If they get into that network, they can't read what's going back and forth on your system. So you're protecting yourself.
Great advice. I see those VPN ads on podcasts all the time.
Yes.
So NORD and Express, those are good to use.
Yeah, you can use multiple. So a lot of cybersecurity experts use multiple. Because sometimes you can kind of figure out that you're using a VPN if you're really trying to, like, dig deeper. But, yeah, any of those are fine.
What about Incognito Mode? Is that safe?
Incognito Mode's mostly for yourself. It's not for other websites. They're still kind of collecting general information on you. And a lot of times they're still collecting IP too. So Incognito mode is really for your computer to forget where it went, so it's not saving it. So, for example, if you want to buy a gift for your girlfriend and you don't want her to know that you went on that website, go on Incognito Mode because she won't see your search history. But it's really for your. Your personal preferences. It's not really that Incognito for the rest of the websites that you go on. And a lot of people think, oh, if I go on Incognito mode and I go on Facebook, anything that you have to log into on Incognito mode, it's still going to be tracking you because you're logged into that system.
Right.
So it doesn't actually do very.
People think everything they do on Incognito is hidden.
It's not.
It's not as funny. Your most viewed videos are about, like, your personal information being online. So is that a pretty common thing?
Yeah, I mean, a lot of people want to, like, learn how to erase themselves online. For example, when we. When I was younger, you wanted to sign up for everything. You gave all your data You. It was just. It wasn't a thing back then.
Right.
And now all these data brokers in the US specifically have so much information. You'd be surprised that the information they're collecting, they're collecting it from the dmv. They're collecting it from, you know, let's just say a grocery store has rewards programs. All of that information gets sold to these data brokers, and then the data brokers compile it, and they can give you pretty much everything. And it's public, especially in the U.S. i mean, it's crazy to think that we're concerned more about other countries having our data, yet we're selling our own people's data to these data brokers and then making it public for everyone. It's insane to me, but, yeah, I mean, you can get like, parents names, parents addresses, like, everything.
Dude, my shit was everywhere.
It's everywhere.
Yeah. How do you site to remove it? Yeah, Smart credit. And then what? What's that? Credit one. There's another credit site where you can remove your stuff?
Yeah. Google actually now has, like, a free way of doing it, but it's only if personal information comes up on Google searches. So, like, say, for example, a website has your first and last name and a phone number. Google. And it's on. It's on, like the intro of Google. Then it will let you know that it's there and it will take it off. It'll remove it. But I'm actually working on developing my own program that helps delete your data off of data brokers constantly. Like, every few months so people can sign up for that service and then they'll just. Because what happens is people delete it once and then they think it's done. But we're constantly signing up for things every day. You don't realize that you're constantly giving your information every day. So. So it keeps reloading. All these data brokers, they keep buying more and more information, and every few months, it keeps showing back up.
Crazy. Yeah. Plus your info's on the dark web, too.
It's all. Yeah, it's on my social.
Got leaked there. I get emails every week.
Oh, no.
About. Oh, this data breach just happened. 500 million emails got leaked.
Yeah, it's not that hard to get on the dark web either. People think it's like some crazy mystery. They literally just have to download Tor and, like, start.
Oh, it's super easy. Yeah, I went on it in, like, college.
Yeah.
Yeah, it wasn't hard at all. Have you been hacked before? Is that why you got into all this?
I have not been hacked. I've been scammed before.
Really?
Yeah. But it was like a close friend. It was during COVID and I was like, you know, I had been investing my money in different things. I told myself that I wanted to be a little bit more risky with some of my investments. I put in crypto and a few other things. And my friend came back and was like, I just met this guy. He's selling ppe, which is personal protective equipment, which during COVID was like a big thing. And it turns out this guy was a scam. So, like. But I, like, it was. I trusted my friend. He was like a really, really close friend. And all of us invested the money. And then it just turns out that the guy that he knew was a con artist.
There was a lot of scams during the PPE days. Yeah, I ran into a ton.
I didn't know that, but I wasn't in that world. He had been working in that world for like a year at that point. I was like, oh, you know this.
Guy, like, you know, that was common. My friend ended up getting the FBI involved in a PPE scam.
Oh, wow.
They were rampant during that.
I didn't get my money back. It was really sad.
Yeah. Yeah. I've been scammed, too. I mean, it's part of the game. I feel like it is.
If you. If you are making investments, it kind of works.
Yeah.
But, yeah, no, I've never been hacked, Knock on wood. I'm like, I'm actually terrified of that. Like, I'm doing my best to not.
But who's that hacker? Zero Day on Instagram? Ryan.
Yeah.
He's a beast. I feel like he could hack anyone.
Yeah. Honestly, there's a lot of really good hackers on. On Instagram too.
Yeah, I've been sim hacked. That was a rough one.
Yeah. I was about to say scary. Speaking of sim hack, though, because everyone's like, oh, the other thing that you can do to protect yourself besides strong passwords, is using multi factor authentication. And that means that you're signing into something with two ways of logging in, like a password and an authenticator app, or like a code that's getting sent to your phone.
Yeah.
But because there's so much sim swapping now, it's actually better to have an authenticator app because a lot of people can get into emails and a lot of people now can get into people's phones, so. So you want to actually have an authenticator app for the bigger, you know, platforms like health and so for me, it's social media. Obviously some people don't care about social media, but the ones that you care about, I would start using authenticator apps.
No. A hundred percent. That's what saved my ig. Because when the hacker got in, he tried texting a code, but my phone number wasn't linked to my ig. So he DM me all pissed off. I'm like, I got you back.
Or, or there's platforms like I have like unlimited amounts of phone numbers. There's like companies that actually allow you to generate like real working phone numbers and emails for like not just a temporary time. It just goes to the app.
Oh, okay. So Google Voice, right?
Yeah, I use Google Voice. Or there's like other ones. Like I'm not going to name them because. But there's other ones out there that, you know, allow them to.
Yeah.
Send them to multiple.
Speaking of phone numbers, one of your videos was saying that you could be tracked just from giving your phone number out.
Yeah, Well, I mean, literally you can, you can reverse like phone, look up someone and then from there all you get their first and last name and you can just go to any of the data brokers and like find this person and exactly where they live. You can find their IP address. There's so much you can do with a phone number that people like don't realize. And honestly, now every time I get my phone number out, I'm like mortified. I'm like, shoot, did I just do that? Like, are they going to try to do something to me? Because now they have my phone number and it's again so easy to SIM swap too. Like, it's just better to like, unless you like, know that you're going to want to hang out with this person all the time or whatever. I would not give your phone number out as many people.
Yeah, I'm super picky these days, to be honest. I used to hand it out like nothing, but now if it's like some random person, I'll give them like, I have another phone.
So yeah, I'm tempted to do like a. I mean I have a lot of phone numbers, but I'm like, want to do another business phone number and like another Google Voice number. And Google Voice numbers are pretty great.
Yeah, they're good until you call and it says, oh, this Google Voice number. Can't answer.
That's true. But like it's like my personal assistant sometimes.
Yeah, I couldn't believe how easy it was to find people off addresses because I was looking up my Neighbor's houses. And I literally found out all my neighbors just from their address.
Yeah. I actually, because I try to help people get jobs in cyber, I'm like, maybe I'm gonna send them a letter. Like, and you can easily find these people's addresses. It's not that hard to send people letters anymore. And she ended up getting a job because I think people were so first. I mean, it was a cybersecurity job, but she was able to find their address and send them a letter. And it was like, you know, it showed that she was really.
That's actually smart.
But. Yeah, isn't that fun? Yeah.
You also made a video about home security systems and how those can be hacked, which is pretty scary.
Yeah. Well, the thing is, home security systems are connected to your WI fi, most likely. And a lot of people, I would guess 90% of the people have not changed their. Their WI FI password since they got it right. And that is, like, very easy to guess because it's the same type. Like, there's a certain way that they create those passwords for every single WI FI network. And so a lot of people can get in if you haven't changed your home WI FI account. And there's just a slew of issues. Right. And then the other thing is, you just don't want to have cameras, like, facing you all the time or cameras on, unless, like, ring camera is fine. But, like, in the house and stuff, it's a little sketchy. People can tap in. There's literally a website where you can tap into any. Even home cameras. Even on your laptop, you can tap into any camera that's open.
What?
Yeah.
There's a site for that?
Yeah.
Is it on the Dark Web? No, it's just a regular site.
It's just a regular site. You just have to pay for it.
What?
Yeah.
And it's cameras in people's houses.
It's cameras anywhere, and mostly in the public, but, like, you could tap into cameras, like, all over the world.
That's creepy.
Yeah.
There's also another site you posted, Facecheck id. I thought that one was pretty cool.
It is freaky. Yeah.
You could catch catfish on there, probably.
Yeah. So, I mean, a lot of people have used that for catching catfish. My. My friend, actually, she sent it to her mom because her mom's, like, been dating now, and I guess she's, like, wanted to see if this guy was real, and it wasn't real. He was, like, a catfish.
What?
Yeah. So, I mean, face check IDs is scary, but it's also really cool. And for the girlies who love to, like, stalk the guy that before they, you know, go on a date with him. And, like, I don't. I would like to say that doesn't happen, but that happens.
I'm not opposed to it. Like, if I. If I was single and I was going on a date, I would actually use that site.
It's funny because I don't do any of that.
Really.
My. My friends do that for me. They're like, just do it. And I'm like, I would rather just like, ignorance is bliss at this point. I don't know. I just don't want to know that much. Like, then it's boring, then the date's not fun.
I feel that there's also a site that tells you if they downloaded dating apps.
Yeah. Yeah. It will say every platform that they're on. If you have. If you have their email too, or their first and last name, it'll say where that email registered on any open source.
Wow.
Yeah.
That's crazy, because people will go to a new city, download Tinder, and then cheat on their girl or whatever. And now that's just in the open.
Yeah.
Holy crap. That's dangerous.
Yeah. But also a lot of what I will say, one thing people don't realize is if you do sign up for those accounts, a lot of people think that they delete those accounts when. And they delete the app, but they don't. So that's like one really important thing. Like when I tell people, like, oh, when you want to start getting rid of your data data, start deleting things, people just delete the app and think it, like, disappears. Your data is still there. So unless you, like, request to delete your account from them, like you actively email them, or you put in a request and they confirm and then you delete that app. It's still sitting there on their services, on their servers.
So my Tinder from college is still up?
Yeah. Unless you. Did you delete the account?
I just deleted the app.
Yeah, no, it's still there.
Wow. I thought they deleted my profile.
Why would they delete it? You didn't request it. Damn. Because people delete the app all the time just to get it off their thing and then they re download it. But as long as you. I mean, you can still sign in, probably. Wow. Still have the username and password?
Yeah, I don't remember the password, but I'll do a reset and then email them, I guess. To delete it. Yeah. I don't know if I want that up there. Oh, my God. My bio was probably so cringe back then.
We should go through your bio.
It's probably so bad. Yeah, that was in College. Geez, 10 years ago. I'm flies, right?
Don't tell me about college with your friend. I know you just graduated.
Did you learn all this in college or did you learn after?
No, I mean, I didn't even study cybersecurity in school. I did aerospace engineering.
Whoa.
Yeah, that's a big difference. And then I wanted to do tech consulting because I just get bored really easily. And I was like, let me just do consulting and I can try different things and then figure out what I really want to do. And when I was going and applying, they're like, why don't you do cyber? And I was like, I've never done cyber. And I had taken coding classes, but I was. Was terrible at it. Like, really, really bad at coding. And they're like, we'll teach you on the job. And I've never had a touch of line of code since I left college. And I. That's one of the reasons why I started this channel is to get more people interested in cyber security and to explain all the different jobs. But also, like, as you work in cybersecurity, you learn so much on the way and you just start thinking that it's like a normal thing when really no one knows what you're talking about.
Right.
It's like when you learn how to walk, you don't ever think about walking anymore. When you learn how to run, you don't think about running. You just do it. And same with cyber. Like, you keep learning and growing and advancing with, you know, the field, but you're never. No one's ever teaching anyone what to do.
Yeah.
So I wanted to start teaching people, like, how to be safe.
I love it. I think you picked the right space because coding is going to be replaced by AI.
Yeah.
I mean, AI is just going to be coding now.
Yeah.
It's way more efficient. Cyber is going to be a bit harder to replace, I'd say.
There's. There's an. There's a few AI platforms now that you can literally take a website and I'll pull all of the code of that website and rebuild the whole website.
Wow.
Like, if you wanted to, like, basically mimic a website that you, like, you don't even need, like, anyone. You can literally just put the website in the. The program. It spits out the code for you, and then you just use it on whatever WordPress or whatever. You're.
Yeah, because I just paid a thousand for my site, but I could have just used that.
Yeah, I mean, I'm gonna do that. I still want to have someone build it. Like, I just. It's. You still have to tinker around with it. You can't have the exact same website as.
Yeah, that'd be weird.
It just be. I mean, people can do it, though. But it's stuff like that. Everything's starting to get replaced, so.
Yeah. Wow. That's exciting, though. Yeah, it's cool to see it being used like that. Can hackers look through your webcam?
Yeah.
That's creepy.
Yeah. Get a webcam cover.
How can they look through, though?
I mean, if your WI fi is not really set up securely or you're not having a VPN or this. There's a lot of ways.
Yeah, because I use my laptop. Like, in public airports.
You don't have a little cover thing?
I do, but I never. I just did it because I'm extra. But I didn't know people were actually looking through those. Yeah, that's crazy.
There's. There's been a lot of times, like, my boss, who was like, you know, when I still worked at ey, he was like the head of cyber security, and he would get emails. This is like five, ten years ago. And they had taken pictures of him from his camera.
What?
And was like, if you don't, you know, give us this money, we're gonna send these out and, like, publish them.
Oh, like really bad photos.
Yeah. I mean, I don't know what they were because I didn't want to ask, but he said they were like, I think we know.
I think we know what that was about. Yeah. How can you tell if someone. If you're hacked? Like, if someone's logged into your iCloud or WhatsApp.
I mean, there's so many ways. It just depends on, like, every service. So, like, for Instagram, you can see if, like, you can usually see who's logged in and where it's logged in and if there's like a weird location, like, that's obviously someone on there. Same with WhatsApp. They can. You can see where you. You have any linked devices. Google too. You can see all the third parties that you're connected to, which is super important because people don't realize. We used to sign up with Google. Whenever you say, sign up with Google on, like, the third party.
Yeah.
And then you like, oh, I don't want it. Like, let's, for example, say it's A really stupid game that we used to play on Facebook or something. I mean, I. What was it? What's the Farmers. Farmville? Yeah. Yeah, I'm pretty sure you. You could sign up with, like, other accounts for that too, not just Facebook. But that's just an example of, like, you would sign up and then you'd never play it anymore. But those people are still accessing. They have multiple access to your Google or to your Facebook, and so you want to be able to disconnect those connections. So it just depends on every single site. Every place has a different way of seeing who's logged in. But if you Google, I mean, you can follow me and get it too. But if you Google, like, you know how to see who's connected on WhatsApp or how to see who's connected to your icloud, it's very easy to see who's logged in.
Yeah, I've tested it before. It's definitely creepy if you see some random country on there.
Yeah.
You know, that's what happened to me on Instagram.
Oh, no, dude. How long do you think they were in there?
I think I just caught it because he SIM hacked me, and then I saw I was logged into, like, some random country.
Yeah, I'm so scared of that.
Yeah, that's creepy because if they have all your messages, I mean, I don't send nudes or anything, but, I mean, that's still weird. Like, there's some personal info.
Yeah, I don't send that many messages on Instagram.
I do, because I kind of do with the podcast. That's how we met, but nothing weird. Yeah, but maybe from, like, high school would be weird if that got leaked. Yeah, People are always getting canceled for their old tweets from, like, 10 years ago.
Yeah. Yeah. I don't think I would say anything that got me canceled, but, yeah, it's. It's. It's weird.
You never know, though, because the lingo 10 years ago, 15 years ago is way different. Like, certain words you could say normally.
Yeah, I never want to get canceled. That would be so sad.
Yeah, I feel like it's. It's pretty beatable these days. Cancel culture.
I. I would hope so.
Like, a few years ago, though, if you got me too, to canceled, you were done.
Yeah.
But now I think there's a. Like, a movement to fight back.
For sure.
Yeah. Um. All right, this one got me. Cause I've done this before. When you black out a screenshot, like, you put the highlight over it, people can still read what's underneath It, Yeah.
So a lot of people use that highlighter tool. Like they take a screenshot on the, like the iPhone and they highlight it black and you can't see it. But if you change certain functions, you actually can see it. So you actually have to use the pen tool. That's like the only way. Or put like a sticker on it or something. If you put a sticker on it, it can't like change. But if you change like the. I don't use it. Opacity. Opacity, yeah.
How do you say opacity? Right, opacity. Tomato, tomato.
Yeah. If you change the opacity and like a few other things, transparency, etc, you can actually see if you use a highlighter tool.
That's so crazy because I've definitely done that on really important documents.
We've all done that. It's like the same thing as like blacking it out and then holding it up to the light, right? The opacity and changing, changing that stuff really, it's like, it's like you being able to hold it up to a light and kind of seeing through what it is.
Wow. What did you think of this CrowdStrike outage?
It was insane. It's really hard to tell because there's not a lot of information that they're really giving us. I do know that it was. Well, first of all, CrowdStrike has been a leader of the pack in pretty much everything that they do. They're a very, very trusted company, or they were. I don't know how trusted they are now, but they are known for being able to defend against hackers and they kind of like stay ahead of the curve in that sense. And so this, this new thing that they pushed out, this new update was supposed to stay ahead of a certain hacker. Not hacker, but like a certain vulnerability. And it somehow crashed the Microsoft system. Now, it wasn't just Microsoft. Like CrowdStrike has so many other companies that they attend to and I don't, I don't know why this wasn't tested. I'm not sure what's going on, but I do think Microsoft might have had their own issue because I don't think this happened to a lot of the CrowdStrike's other companies that they worked for. So I think CrowdStrike took a lot of the blame. This is obviously total speculation, But I think CrowdStrike took majority of the blame. I mean, there, there could have been, there could have been things that fixed it before it went out. But yeah, this, it was insane and it just kind of proves how fragile our system is when it comes to tech and computers because, I mean, the whole world shut down.
Oh my gosh. The airplane delays were insane.
Yeah. And also, isn't there like a bunch of rules on, like, how a company should have a monopoly over certain things?
Yeah, yeah. Forget the word for it, but I know what you're talking about.
Yeah. So, like, why is. I mean, that obviously shows how much of an impact Microsoft has. Even like that one tool on everything.
I mean, them and Amazon pretty much run the Internet AWS. I think it's like 80% of sites or something.
Yeah.
So imagine if AWS went out. That would be nuts.
Yeah.
But Microsoft was nuts because a lot of banks use. I didn't even know banks were using Microsoft.
Banks, like tons of banks. And that was the other thing. It's hard to tell if it was this crowdstrike issue or for all stemmed from Microsoft because the banks also use CrowdStrike. So I don't know if the banks were down because of their Microsoft system that went down because of the crowdstrike or if the banks were down because of the crowd strike.
Yeah, that was a weird one. It seemed nefarious to me just because of how long it was down. I feel like if it was just some mess up, they would have fixed it quicker.
Yeah.
But is this, Is it back up yet? I haven't even.
It's. It's back up. But like, Delta was still. I. I fly Delta all the time. I fly a lot of airlines now. But Delta was still down for like four or five days after. Not like fully down, but like they had canceled 3,000 flights like five days after the whole system. System crashed.
That's a lot of flights.
Yeah. And Delta's like, pretty good with not doing that, but I don't know. What. I don't know.
Yeah. For an airline, they actually have one of the best reps. Yeah.
They, they like help you. They like answer the phone in a timely manner. They're like, nice.
Yeah. I had to stop flying United because.
Oh, no. I.
Customer service on that one.
American's also terrible customer service. But it's. I live in Miami. It's an American hub, so I kind of have to stock. I, I do my best to not fly them, but. Yeah.
Yeah. So there's one scam where people text you and they send you money.
Yes. And it's a big scam.
Yeah. Your video said not to report it or anything.
Yeah. So what happens is these scammers, like, steal credit card and debit card Information. And they use that to start sending money to people. And then they send the money to people, and they say, oh, my gosh, I'm so sorry. I sent it to the wrong person. Can you please, please, please send it back? It's for my mom's health. It's for whatever. They make it like a whole story. It's so sad. And then you send it back. But the issue is that money's stolen. And so once the banks find out that the money was stolen, that they sent you, and they claw back that money. And so if you sent them the. Sent the money that your money's not stolen, you just actively and willingly sent your own money. You're out. You're out of money.
Wow.
Yeah. And people like, well, I'll just. I'll spend it, and then they can't take it. They'll claw back. You'll be in, like, the negative, or you'll, like, owe them, and then you'll be part of the whole scam. And you don't. You just don't want to touch it. Just leave it in your bank. And if it's in your Venmo or Zelle or whatever it is for more than a couple of days, I would just report it.
Like, that's clever. I would have never thought, you know.
Yeah. Hackers are getting very, very clever. Scammers are intense.
Yeah. Because there's all these videos on YouTube exposing these Indian scammers, so they. They're having to level up now. Have you seen those videos? Yeah, those are hilarious.
I love those videos.
Oh, my God, I forgot.
His name's Ryan. I think there's Ryan. And he has, like, a degree in Homeland Security. He's also a comedian, so everything that he does is really funny. But he, like, he literally scams the scammers. I love when people scammers. I don't have. I don't think I have the balls to do that, to be honest. I just don't want to.
Yeah.
I don't want to mess with that. Just, like, leave me alone, and I'll leave you alone. I will be. Okay.
Yeah. Because then when you expose them, they're going to kind of come after you even more. So.
Right.
You got to be willing to fight them.
Yeah, I'm not willing to do that.
Yeah. Family code words.
Yes.
I need to develop one of those.
Yeah. So, I mean, because now I. You can do voice, not voice simulation, so people can pretend like they're me, and it will sound like me, and especially you two, like, we're all over podcasts. Like, people can easily get a sample of your voice and have that convert to whatever they want. And so, especially during the holidays, there's a lot of, like, fake scammers that use your voice and call your loved ones and say, oh, my gosh. I like. I either, like, broke down at the side of the road. I need help. Like, can you please send xyz? And you, they are freaking out and they send you money, or they pretend that they've, like, kidnapped you and that they're not going to give you back until you send the money. And then they'll, like, use your voice to pretend that you're with them. And so you need, like, a family code word to say, okay, if this is real, you know, say bananas, or it has to be better than that. But if a family code word, just code word really helps you understand and confirm that you are who you are, that code word that no one's going to guess.
Yeah, that's useful. I have a sequence with my fiance. I have a fear of getting cloned.
All right.
Yeah.
Where did that fear come from?
I get a lot of conspiracy theorists on the show, and they might have influenced that.
Okay. But I'm fully into conspiracy theories. But I haven't heard the clone one yet.
Well, yeah, there's certain theories that Kanye and certain celebrities have been cloned for being too outspoken.
I did hear about the Avril Lavigne clone.
I've heard about that one. Yeah, that one was weird.
I don't understand that.
Yeah, I don't understand that one. I could get the Kanye one, though. He said some pretty crazy stuff, and they might want to silence him, but. Yeah, no, it's just a phrase. But the thing is, if you get cloned and you remember all your memories, then it gets tricky because then you remember the phrase, too. I don't know how the cloning works.
Maybe. Do you watch Marvel movies?
Yeah.
Okay. Maybe it's like I'm forgetting the type of people that can morph into who they clone. The people.
Shapeshifters.
Yeah, but they're in Ms. Marvel.
I haven't seen that one.
Or Captain Marvel, the original one.
Yeah, I didn't see that one.
Okay.
I just.
They can remember up until, like, five years.
Oh, five years. Okay. Well, my friend cloned his dog, so there's definitely cloning technology.
Wow.
Yeah.
I didn't realize it was, like, that soon.
No, it's. It's here.
Okay.
Yeah. They're going to be cloning animals and organs. They're priority doing It Somewhere in China or something.
Definitely.
Speaking of China.
Yeah.
You went there and you. You also spent time in Japan.
I did. I love traveling and I think, honestly, the Asian countries are beautiful.
I love.
There's so much culture. Yeah. I think it's really interesting that US has picked a fight with China and Russia because of cyber warfare. I mean, the thing is, we're all doing it, right. It's not just the U.S. it's not just us getting bullied by them. Like, we're bullying them too, but no one really realizes it. And cyber warfare has been around forever, like since I started cyber security, since for probably the past 20 years. I mean, we already, in my opinion, already in a war. Cyber warfare.
Really?
Yeah.
It's that bad? Like, I don't. I don't see it. What's going on. Exactly.
That's because it's all. You can't see it.
It's cyber.
Yeah.
So they're just like, subconsciously programming stuff, right? That's what it is, basically.
I don't know if it's subconsciously programming. I think they're just like, getting into all of our systems and like, and watching and seeing what we're doing in order to, like.
They were saying that with TikTok.
Yeah.
They were studying everyone's behavior and doesn't some company, China, own it or something? Bytedance.
Bytedance started in China and then they. They sold off part of it to a U.S. so the. Because the U.S. was putting up such a fuss, which makes sense again, we really are trying to protect our people. They sold off like, a specific chunk and said, like, this is us only. This is only going to sit in the U.S. all of our data centers are in the U.S. so they partnered with Oracle, and so all of the data was migrated over to the U.S. like, in a long process. But yeah, I mean, I just feel like if China and Russia want something or if the US Wants something on the same hand, like, they're gonna figure it out. I did see a bunch of stuff saying, like, China has somehow bought a bunch of farmland basically next to all of our, like, main bases, like Navy bases, army bases, any of that. I don't know how, but, like, it's stuff like that where they're just like, kind of infiltrating it.
Wow, that is interesting.
Yeah.
Yeah. They're out here playing chess and people, regular people don't even know.
No, not even.
Holy crap. Yeah. Because is king. Like, if you know how people operate.
Your data, your personal data is worth a lot. I don't Think people realize that, like, it's worth a lot of money and I mean, it's literally sold constantly every day. So just try not to give it out.
Yeah. I remember Facebook got in trouble for having too much data, right?
Yeah.
And now their ads aren't as good.
Exactly. And then that's the other side, Right? Like, people like, oh, well, I don't want them to have my data. I'm like, well, then you're not going to like, get marketed to aggressively like that. It's not. The marketing's not gonna be as good. But do you really need to like, buy the thing that you probably don't need?
I opted out on Apple and now I get like, cat littered ads. I'm like, I don't even have a cat.
Yeah.
You know what I mean? But whatever.
Same with like Instagram, I press like, not interested in a lot of stuff.
Oh, you do that?
Yeah, I don't.
I just skip it. But I should probably start doing that.
Yeah, I'm just like, I don't really. Well and I'm. I don't want to get sucked into Instagram. I don't know. Do you use Instagram really for work?
I don't scroll ever. Unless it's reels and I'm studying potential guests or like, topics.
That's how I am too. But like, I feel like the not interested helps me not scroll.
Okay.
Because if I like, get stuck on like a good feed, then I'm like, oh, maybe I'll just keep watching.
Does it stop showing ads completely? How does that work?
No, just not interested is actually on videos because they. It's unsponsored videos because people now sponsor it to like, reach other people that aren't following them.
Got it.
So I do it on like random people's videos that sponsor and I'm like, I don't want to see these videos.
Got it. Yeah. You're popping off on IG. Is that your biggest platform?
Yeah, yeah. TikTok used to be my biggest platform and then I kind of slowly tapered off of it.
China caught on.
Yeah. I don't know, it just wasn't as fun for me anymore. I was like, I don't know, it's.
Not as like, like, I can't talk to my friends on TikTok. It's.
No. And they. The TikTok shop and sponsored ads are like all over TikTok.
All over.
It's not like, it's really not fun to scroll. And the lives and the lives and they're weird lives. I don't know if it's just me.
I don't know. They're weird, I guess I keep crying with, like, playing weird games, and then I.
It's like the same people on lives over and over again. I'm like, I don't know what you do in life, but what is happening?
There's a meme about that one guy he used to work with. David Dobrik. Jason Nash.
I don't. Oh, yeah, yeah.
He's on live every day.
Really?
Yeah. Yeah.
I don't know why I haven't seen him.
That's crazy. Yeah. I'm not a live guy.
Yeah.
I like being in person.
Yeah.
Caitlin, it's been fun. Anything else you want to close off with our promote? I know you said you're developing something.
I'm developing a lot of things, but it's all to, like, either to help protect the public or to get people in a career in cybersecurity. I think the one thing I'll. I'll end on is if you think that you're getting scammed. I like to remember the acronym scam. So S stands for does this sound legit? Take a step back. Calm down. Because a lot of the scams are always for urgency. Like, if you don't do this in 24 hours, like, your bank account is going to close and you're going to lose all the money. So S is stand. Take a step back. See is contacts. Like, can you confirm the contact? So if a bank's saying that they're messaging you, don't look at the contact that they give you on this email. Go on Google and find the real contact, call them and say, did you just call me? Or contact a loved one and say, do you think this is legit? Maybe not. And then the A is to avoid clicking on any links. Just don't do it. And the M is like, does this make sense? Because a lot of times there's, like, spelling errors or, like, it could be for a program that you never even signed up for. Like, does it even look like. Okay. And make sense? Like, does this make sense in your head? So just remember scam before you click on anything and just. Yeah, just be weary of not giving out your data to everyone. You don't need to tell everyone.
Yeah, the links. One. I want to wrap this up.
Yeah.
Oh, my God. Because I know a lot of people in the crypto space. They click one wrong link, they lose their whole wallet.
If you click on the link, I can get your ip. I can get exactly where you are. A lot of times you can get so much stuff just, like, don't click on links.
Never.
Never.
Yeah, people DM me links. I'm like the. Yeah, I'm good on that.
Just avoid any links.
Yeah. Thanks for coming on, though. That was fun.
Of course.
Thanks for watching, guys. See you next time.
Bye.
More from Caitlin
Week in Review: APTs using Gemini, ransomware payments decrease, abandoned AWS risk
Episode 27 - Protect Yourself Online: Mobile Carrier Breach, Password Tips, and QR Code Scams
190. More Than Money: Decoding online safety from personal data to shopping with former TikTok cybersecurity lead, Caitlin Sarian aka Cybersecurity Girl