You Are Being Manipulated - James Powell

and it's really gonna be back this is my flash beer pretty buddy - you may remember the popping off basically war games and the Catholic flag votes this year's going to be completely different from that so if you're like it's hot girly this will be no ground so as you can tell from the talk out of my admiration about with my life and other people are only too delighted myself included and you may be may be yourself why why does he take this well the reason is I'm gonna get a time we're going to side don't worry has passed one reason is that I have a small child and that this is normally where I would tell

you guys about me but since this is really her story I'm going to tell you about my father how she left this long great and the reason why is because we can think about it children are their perfect social engineers they don't only have society's values right wrong they simply have goals and they get to those goals however they can't yeah please tell small long because they may try to like you just use your trust whatever the end they just want handy if you know there so that's that's what Dorgan but as a you guys maybe hopefully and we're going something yeah excuse it is your product focused on the fact that I started off this with the title slide

that says you're even a belated so most of the room we accept this is fact or we're curious about why our game every though an end of mine you are always being manipulated most of this is not malicious you know there's actually a lot of things that have a little societies how we get along every day's humans we've inability a friend of mine tummy is probably better and I said we influence people that way and I'm sending the like I was with medication so we're I noticed this again came to my daughter at three a long ball for attitude she started trying to pin Amelia and luckily for me I was more wake that day I call it and I

went that's pretty cool because you know my mother my luxury was her my daughters were like the greatest actors life legal really we're still working - that would be my wife but so she's very good ability to be my first step was to just lose faith in humanity it's like all right my daughter to me this naturally overpaid thousands body refresh we obviously have forgotten something very basic so let's start so after I had lost my faith in humanity I thought back to something that one of my instructors or one boy hoping and I'm paraphrasing that what he said was essentially this everyone living life good or bad if you're open to the experience in training so I try and

attempt to embrace that I started with my daughter - Deva just kind of funny you know I'm about to turn thirty eight boys with three year old for I so happy that I didn't think it was going to work out they actually did so and then in one let's look at who our players in this game that I'm about to create there's training program to try to share with you guys so you up build your own let's work together so the way the good guys right we'll start with a left this is actually put people in Charlotte that's the type of America building I just wanted a big corporate building and that building is also mutable so we start

with advertising obviously advertising the good guys for right now if something is a little bit better that I think I obviously get small children and as you can tell from the look of this guy's face he's losing that day and I'm pretty sure she just wanted me together that way and then I got let around another three hours mark so kids do it a little far right we have pets they like attention we feed them we put them into our houses the earlier they were winning we don't so before that in line in this program the good guys are our trainers there are instructors they're also our test cases because what we really want is a low

risk environment so I mean think about it this way if I get on that of hundreds of dollars that's every big whilst Amanda that's back what that happened but if I give my daughter a nectar piece of candy maybe the better will come out this way so the other thing the other manage they have is that my daughter is possibly girl response is evolving so I have that as my training program in Jordan was it should then we have the bad guys so I will stop and say that I chose this picture because often you see I write for the butter my attacking here we've got the usual scammers and con artists everybody knows those guys and then to

be happier you're fishing in your vision attacks saying thanks so social engineering or guess better and then I actually included into this horrible attacks because when you think about it even though they're taking advantage of something there's a little bit of science on the list if you don't go wandering home attacks are still taking advantage of the nobility in humans behavior it's a little more subtle thank you very little but and then we come back to advertising because I think even all agree advertising Errol that were on everyone so and on their motivations so now we know who our actors are you know the good guys and the bad guys obviously that guys are adversaries they're the reason why were

training that is all children of the age no no we just have to laugh okay so the second half of this battle leads us into a central question and it's this time create a low-risk environment that mimics real world attacks so that when I actually come across her old attacks I have enough situational awareness to to be aware and then not be a victim and the answer lies would like most things in social engineering it all starts with trust so let's listen analyzes go quick you guys are sitting through a room listening to a guy with pink highlights talk about social engineering you guys have least a little bit of trust in me already I've got on great it

is not that's cool we'll talk about a network so if you think about two things is away from my daughter I've known her since the moment she was born so I trust her a lot I mean you know so this gives her an advantage so let's see how she leaves I get asked this question on a daily basis and I mean you guys seriously you already want to give her it starts with this question it could be bigger than school of issues at the house papa are you happier unless she's done something very bad the answer is the question is actually the ask it's the first step to building trust yeah he's reinforcing this this positive

major curiam sense which i think is amazing and of course I respond there like I said course I'm happy doesn't self-esteem I make sure she feels good you know and then comes the tale which is this it's very simple attack which are very very basic we're starting with a foundation trust is our foundation so does this one pretty trust is just be cautious now hi I'm on autopilot actually deprived as Miss Barrett are you know she does she'll say this and my first reaction is to be cautious and this is great this is just good advice in life that was the same month it's not trust people it's just saying that we need to be cautious we

need to stop we need to leave the situation we're in and then we need to evaluate that and so this caution that very beginning makes us slow down the road it makes us evaluate everything around us and once we've evaluated the situation we go to the usual trust but verify so as a programmer working on a very complex code people may tell me this is how this works okay I trust you you're good programmer but I still believe I can verify the code actually does that your same thing one one specialist social engineering trust with very money so how do I verify my daughter will say you know I'll talk over there like oh it's okay mommy said

it was okay I can do this hold on my gosh my wife because I don't trust me life experiences don't be taught to trust myself so not trusting myself I got to be the Minotaur's related to my daughter that's my wife she does everything I've had in the Rastas there's chocolate bear man so this is how we know benefits you trust but verify and we're conscious so let's look at how this works in the real world right this is an easier for my Dean of Eastern all months so yes bar BC so if you do select your bone you get a phone call person over there he says hi man he will make sure the computers up-to-date well very

large company I think Cisco and you know the people globally I have my teas and I see there could be a vanity so let's again is iti see it has been trust or authority we're kind of looking at the fact that the arul attacks are you more complicated every have multiple everything so either you don't want to be person the screws of the company or your comment back and rest ith that we do that job so then makes his conversation with us and then your livelihood and I know my computer's already up to date because I used to do that job and so a very paranoid if I click on things a lot to update and Dan

says that's awesome well so man now is reinforcing that positiveness ease the ability to then trust the network or I just need you to go check on website at just to make sure that you really alright today okay okay I can do them for you so think about we all kind of laugh a little bit but in the heated moment from someone who is Almighty you may not be thinking they have a ton of things to do who you stopping cautious right you say a day flow I think because it before but maybe many proceeded so then you have to trust madhurbhav a day that's gonna help out but I'm kind of double something let me

call back and you come on me through the steps so obviously here the phone they may give you a phone number ignore that phone number find out what the actual whole new variety and then call back on that number that's greater than a source of variation so a three-year-old has just basically out laid out how we can only be fish let's go G screws and [Music] and she's getting better every day so her older example trust next we go to I was surprised that she got this so if you if you're not going to return reciprocity it is basically in all interactions in life we kinda want a balance so we have us enough paradis if

someone gives you something you kind of feel this need to give something back you would expect the three girl to tell them and kind of attack in my mind you know they barely understand that they're still object permanence so again they understand this whole balancing Paris so look how good I'm please well you've seen the state of our living room this is actually surprising some so she's kept her first step is to give the parents something unexpected we really don't expect very plain and then reinforce that behavior to make sure the parent knows who did something so look how good I did with my babies this is a I'm not making this up really I would

library anything this is these are actual conversations I wrote the downstairs I had this idea so long and then comes the ass almost immediately since I did a good job cleaning I have some game okay very low risk apartment but she actually understood that now that she's created this imbalance we're gonna feel compelled we were right so these are our defenses right and reciprocity is a bit simple but we're I actually never seen this but this is what first things - hallo I know this person will obviously my daughter I never really my converse is a little kid born and this works to both her advantage Anderson is some of the you know you trust you know you've had a lot

of actions to do but at the same time the more you knows someone the more you know their motivations I was trying to make a good with citizens i person to my mother still so so as this is become a disadvantage as times past so she never motivations we kind of where she's coming from but let's see sorry I'm yeah since it lets me have motivation this leads so if I don't there's someone makes a grief I hope that this person why are they doing something for me makes you a little bit cautious they don't have the trust we all right the myth number two is is to give more than cake so if you're trying to create amounts of

something you're going to give them a lot in the beginning and then ask for one very simple thing but that simple thing is actually more valuable to them the problem is you'll see in those relax there's also some antigens so we I don't want to give you the decision that I want to give you enough time to think through what's actually happening I won't you take action immediately so you can really evaluate but if I go back to the original question how well would I know this person I either know the hem those that I don't want to comply with it or I don't know them and I have no reason to want to balance out things or

they have a degree of loyalty so we can apply these two things we kind of take time be cautious again and look at the rubric sample turn my name into this guidance if not component of the product OxiClean and you know OxiClean you start out with infomercial we all are very familiar with the commercials and you know that tagline but wait there's more so let's going to do the scenario right give the target something unexpected okay I you know there are we gonna do these three pounds of oxy please I just have to what exact Marsha and then there's a bunch of on the channel I hear but wait there's more interesting there's a more I didn't see

this company only happen in every infomercial since the beginning of time but I did not expect this so now they're going to give you 30 pounds of oxy mean I just have to pay separately interested still not completely sold but then come the other words for you reinforcing this reciprocity I'm giving you something you won't find the deal this good anywhere else I don't know if you're getting a better deal so you might be right about that let's see how this goes move out the change channeling in and they say can you really pass up an offer this good well you know over about 30 pounds auction for you in about a month so then

hey you know but at the same time it's the same principle they're good they're you know they they have their over here you know most people might miss whatever and then they're gonna give you more and all the axis for sever processing well it's not big deal but once again that separate process is more valuable to them that is to you so like I said happen times are kind of and no disrespect to abilities so he's a good guy but actually that case is interesting because he's not compromised UTSA wants to sell you the product and manipulating you not lying to you about it it's just radar by 30 pounds of on scene how do you know this yeah actually it's

never on my radar by using is never on my radar actually watch commercials but you know sometimes it happens you can't find the remote it's over there somewhere probably in a couch but yeah so it kind of you know advertisers when you think about it they're they're almost worse for the bad that's because they have tons of funding they are well researched in the psychology and they we use every trick and to manipulate it was the action that they won't hurt let's say anyway maybe they were possibly using this it is like I said it's amazing and so this is kind of delicious and so we started in trust you wanna create trust that's how I get anybody to

be doing this they have to trust me and then if I'm be malicious it comes down to urgency so I want to start the trust kind of getting in balance and then so these this is our program so you're thinking to yourself how can a small child creating urgency well it's actually easy to do it for the reasons so this happened because most times that she's crying she can get out enough that the understand kind of a babies once but she just lost it and the reason why is she got her first haircut and so for anyone who actually is a parent you've probably seen the movie frozen possibly thousands of so if you haven't the character one of

main characters in movie Elsa who has the magic powers also has this very well upgrade my daughter had long hair before I was woman and so she after she had her hair cut she wanted to decide us to put her hair into an Elsa braid which she was all we couldn't the result urgency has been created so you forced the parents into immediate action and I say this because the part is there are a lot of students this case is going to be action there is a biological thing that happens is what a small child cries in your brain whether you are a parent or not it actually isn't a certain frequency that your brain is you like

instinctively you moved you come it's insane I didn't believe this in school I have her she cried and I could feel like this part of my brain wake up and go fix the problem for England this happens she's kind of getting out of the house so this is as much reaction as he used to but she is creating a certainty because she could be hurt you know she could there be something actually wrong so you come over easy no I think they what's wrong termed okay you're doing pay then you have to reinforce with the parents yeah it's okay I'm okay all right they why are you crying usually they don't know cuz they're small children and then they also

because in this case you're a very public place people are not staring at you and eat your music your child here is no good to become of this situation so then you're like okay you know what you want you know it's what I can do can you get that for me and it could just be a toy this is right out of me I can't reach over that far harder you get that 40 it could be something else usually it involves like I said candy cookies sweets is shimmery sweet food right now so but it's the same thing she's trading the sense of urgency she's forcing you into this live action once again I'm training I love this she's been there

every day so one day I believe continues now she didn't tell you guys how much better she is with her father and that's coke so obviously how do we how do we beat the urgency but we follow the process wait you guys want my processes control so development process whatever it is you know find the situation make yourself do I have a process if something is wrong the alt you know develop the process once you develop the process training process make sure that you know the steps in surgery and then after you understand that pollo process pretty straightforward right okay so let's go to roll number you remember less than one what happens if you don't follow the

process you're the victim so always always follow the process and I say this kind of literally up here it's not the easiest thing to do otherwise it would be awesome already we're not so we have all the partners now let's let's look at it okay so we're gonna cut it guys I can do an entire talk just on the psychology this one pop-up probably really but I never lose laughs especially you know this we're very comfortable as computers but take a moment to look at this from the standpoint say someone who is you know they were my computer every day but they're out a computer person they really don't want to be the person who

is the ground zero for the attack of the company they don't even personally compromise coming they're using the computer they're going about their job and this brilliantly designed thing pops up okay so oh my god they never wanna be a dress that's gonna be terrifying this you probably don't even know addresses if you're in this situation but they also got you don't you go so you look at it bright red all over the place danger to stop very seasoned virus is capitalized that underlined where's the rest of this normal medical and you and then everything that guide you to is either bright blue and underlined or it's highlighted okay call this number and then they can fix my big here so

let's look at the is happened like I said it's great they're forcing you to an immediate action this thing pops up in the middle of your job you're probably the middle working on something you're not coming out what is this thing by done and then they're going to comfort you it's same thing reciprocity I can help face the problem you have a computer virus you don't want to be the person do about your company old I can help treat it and then click here call now and the problem will go away hey it's ready so I mean it's the whole thing and once again this is a nightmare you know I had to search if I wanted

when I saw this one I was like maybe I should give another talk on just how we could you know the abilities with pretty grants so there you go that's the that's the third attack hosting and I think absolutely just amazing of all time especially you know if we take a moment step back but we all kind of realize but do you think about these types of attacks especially the urgency it only takes you one time to not be in that right mindset it's made that mistake I'm thinking actually quick I mean I know every time I see an email for Amazon investigate various ways I can feel years old because I usually have some

water coming in from Amazon I hate emails a long time you buy an echo but you will get one every day just on how to sell your okay so let's take a moment to rewind a bit cuz I had a kind of a rush to do some things my daughter helped me build a training burger she doesn't realize it's a training program and then from there they kind of expanded my awareness so I noticed that she was using you know manipulating my trust burger and then I've never stood she was building these cases of reciprocity and then obviously from it's time to choose an image she's gonna create urgency I just didn't see how because once again I'm not as

far as person so I have to get trained from the rear so what I want you guys to think about is when you go to a training room we actually do go to training programs to kind of learn within this or we have training at our company it's usually just telling us how to do the difference is is that if we want to get better at the University we're going to get better at detecting and then avoiding these kind of social engineering attacks we actually have to train really fine and so I actually also he believes you did sue yeah I may be your this soon but look at the guy I do so this is just funky out of our

position now on top of I'm a cigar the others top column that guy is he yeah you would think especially you've never been in a fight like this or you've never been in a grappling situation the guy on top has the advantage that guy's face yes he is just he's just there I mean he's very calm he's got me over you guys arms pulled in he's just he's white he's waiting for them over anyway imagine the reason is is because every time he is on the mats he trains lengthy fights we don't do that with social engineering we explain concepts maybe we do we've gotten better with some in addition like a phishing attacks a cake like that we've got to be

able to kind of start to understand we can see the train is starting to shift but for the more subtle more interactors I mean you know look at that give us a talk given by a Jason Street last year even he said I don't have to worry about micro-expressions or a these other things reality or any of the stuff that you would think out of this you know these are the things that we really have focus on because he just is on this fold and then he just follows someone in and he's in your cyber company yes we're not to the love of where we need to actually start focusing on the hard stuff we found a shoe so that's kind of

what I'm trying to do with my daughter and you know the thing is like nothing that it's I don't know malicious fact I probably soap all over those but from a sense of mission becoming more where things happen around me which led me to the title of we're always being manipulated if you don't think about it you're watching TV advertisements for coming on advertisements are actually inside of the programs of logic now you know I know more about ours because I watch television that I use we're talking a TV or that are busy they all have chemistry out there so second part of this is if you built a training program your training program before you

guys make not a terrible parent and I just taught my mother no you can't have any gaming I detected your attack you know me he's nobody's ever wonder what your trading partners I mean you know let's think about our good guys in this case well we got small children they like candy it's awesome very cheap to and then we've got patents well they'll continue to do what they seem to bleed with their pets their animals that's what they did advertisers we don't need any purses guys anymore they're getting paid and they're working all the time and they get tons of resources let's let's not give them as much money you know tell them no and then see your body

power somewhere Elser motivator lenders really they don't need any workers so finally I love this pool training program you guys we all designed your own you start with the basics start with trust we'll give the ways that people are you trust around and then see how this kind of a boss and you know then you'll start picking up areas where it's we use together and the most important part is remember why you're drinking the guys are out there doing this even the criminals before especially the advertisers they are well-funded they are highly motivated and they are constantly improving so the pressure gets tough response it's never going to give up the mid news is is there that

means there are lots of opportunity for low restraint which is bringing one start let's again I get my bobber execution can be my path convinces me that I need to give it some extra treats I haven't really lost that much and as long as I learned from it and not to give away the secret that you guys they just let me say that therefore let's see 27 minutes talking about my daughter I mean I think I've been equated everybody were in parallel so you guys need out for training nobody knows except for today okay yeah the miserable moment the pressure is constant the good news is everybody in this room you're here whether you think

you are not here hacker you can build your own training program you customize it for you because the end of the day social engineering is very individualized it's based on basic principles but at the same time if I'm talking to you you know I'm going to customize based on what you're getting back to the same things happening all the time the serene land which are so good because they can do it to billions of people all of us so they're kind of the masters part with that are there any five

[Music] [Applause]