← All talks

PW - Why kidz couldn't care less about your password advice.

BSides Las Vegas51:54643 viewsPublished 2022-09Watch on YouTube ↗
About this talk
PW - Why kidz couldn't care less about your password advice. - Mia Landsem PasswordsCon @ 18:00 - 18:55 BSidesLV 2022 - Lucky 13 - 08/09/2022
Show transcript [en]

last talk for the day had passers contract um originally we were having janice from cyprus and london to talk about uh jumping going down the rabbit hole on doing password cracking he couldn't make it and i just knew that i had to make a call to miyalansam from norway same country where i live and say to her that you know i i need you to be a speaker on a short notice a pass for scott mia's never been to vegas before she hasn't been to b-sides or to pass for scum before but this is one of those talks that i'm in a way really looking forward to giving the topic i'm 51 i have well i'm going to be 51 in september i have a teenage daughter mia is just freaking awesome talking to teenagers and the title is why kids couldn't care less about your password advice has nothing to do with my relationship my daughter of course but i'm really happy and proud to introduce mia thank you so you guys it's so cool to be here and i just need to tell you i will make jokes about your age i do respect you i love you of course you're coming to my talk this late i appreciate it there will be jokes don't cry okay good so my name is mia hacker grill lansam so no it's not hacker girl it's grill as in a hot grill because my gaming name was gamer grill which is a term used for a hot girl gamer and i was like 15. so i changed it to hacky grill cause i don't even have a hacker name yet so i just did it i am a pen tester though i am an ethical hacker at orange cyber defense which is the french telecom group orange i'm from norway and i am 25 years old i'm born in 1997 and i'm probably one of the youngest speakers maybe and that's awesome i get to do stuff like this i come from trondheim but i live in oslo the capital i was originally on the national team in taekwondo and i did sports sciences and psychology at norwegian school of sports sciences and then i was like i [ __ ] hate my life i want to do something new and i'm a dropout i just dropped out googled online school oh i.t security awesome i had a puppy and then i'm suddenly a single mom to my puppy i couldn't bring her to school that's why i searched for online school and now i'm in las vegas i mean what um so i finished my id security school two years ago and i got a job at orange cyber funds i'm also an author of the book safe online which is the best-selling children's book in norway when i was 23 and but i'm mostly known for helping victims of image abuse i also work with child abuse so next to my eight to four job at orange cyber defense i do this non-profit at night all my time outside of work i help and answer victims because i mean that that kind of help should be free i've helped way too many people that i should have i'm 25 and my knees hurt my back hurts you know i'm getting these wrinkles i'm working way too much and i've been involved in fraud cases identity theft it's everything i've had hundreds of talking talks in norway and won several awards for my work and thousands of victims we're going to talk about kids and social media authenticating of course this is passwordcon we're gonna talk about passwords how to teach children cybersecurity sexual harassment and image abuse so i'm like mixing my old talk with this new one and i've never done it before so this is cool social media places we we can talk together share click like to have our very own profile that's a social media facebook snapchat tick tock and 97 of children aged 9 to 18 in norway they have their own phone and 87 of the 9 to 10 years old and 90 of them has a social media profile now these are norwegian numbers but i do see when i'm like googling and stuff it's pretty similar to other places and i'm really open to hear if you have some more stuff to add i would love to hear it um send them to me so i use mostly social media to communicate with my mom i'm a mommy's girl i'm gonna call her every day um and i like to do it on video as they live far away and i work a lot i'm very busy i don't get to see them and i love using social media for that i feel like i'm taking a bigger part of their lives than just calling so on social media and all of that an application software we have all of this stuff what are the most common ones so raise your hand if you have facebook oh wow raise your hand if you have linkedin oh that's more people and raise your hand if you use tick tock ah that's not so many of you huh yeah so oh you have ticked awesome so 80 of those aged nine to 18 uses snapchat 65 tick tock 65 instagram and 51 facebook youtube almost everyone but do they really use them all pero's talking about do you have a profile or do you actually are you actually active on it that's another question i have a free website which is just my name and dot no and where people can ask for help i also have an instagram with some followers where people can ask for help for free and i see that kids mostly ask on instagram and snapchat if they need my help and then we have the dinosaurs they're coming to this um to this website sending me emails and my facebook page most kids these days they have a pretty empty facebook profile if you seen it and then you have all the dinosaurs who love writing about what they had for dinner and breakfast on facebook every single day yeah there's a lot of cool stuff to social media and internet as well that's why we're here right we work with cyber or you're interested in cyber because it's so cool but there are some bad sites and i'm not gonna talk about all of them because it's a lot but three out of four 19 years old reports that they have blocked someone on social media seven out of ten said they have added a stranger on social media 26 reports that they have been bullied online in 2020 and some say they have received threats online and when i speak to parents i do educate parents in schools all over norway they say that they're afraid of their kids being bullied that they will have their nudes leaked um that there's dangerous people who likes children pedophiles and abuse but no one is mentioning hackers loss of passwords or other personal uh information so how can we protect them then do you guys recognize this guy on the screen oh he's sitting right there so authenticating that's a hard word to say i just used to say like login or whatever and on most social media apps we need to authenticate you guys have a username you have an email you have a password children does that too and as pair says here children also has to authenticate on social media gaming platforms shocking that says the dinosaur pair too same so even dinosaurs knows that children also has to authenticate they face the same cyber threats every day just as we do even at school they need to authenticate to use stuff and gaming and we do say never share your password with anyone not even your best friend okay but 24 of these children have shared their password with someone and here you have these um dinosaurs telling the children don't don't ever share this but they do see where you write down your password under the socks in your closet because you walk there every time because you always forget your passwords that's how i hacked my dad [Laughter] sorry dad if you're watching and 29 says that they know their parents password on app store or google play so never share your password with anyone but here is my password there is parental controls so you don't need to give them the passwords it's just a google search away really and it's kind of lame if your kid spends thousands of dollars on minecraft try to get that back on the insurance i was told not to drink tequila by my mom it was a bad idea she said did i do it yes i did did it end well no it didn't did you you see that's what happens and did i do it again yeah my mom told me not to steal cookies i stole them and i counted the cookies we will always do what our parents tells us not to do but that doesn't mean we should not not to that doesn't mean that we don't say don't do this and that because we need to tell them like the rules and how they need to behave but why do they share their password even though you say nah so norwegian numbers from 2020 31 of those who shared a password that's because they needed help with something 21 in case they would forget seven percent to prove that i am a good friend and 59 percent who shared a password shared it to help out with snapchat streaks yeah so snapchat streaks is a bigger deal than you might guess how it works after three days of snapping you get these very cool flames we like flames you know and it will start to count the days that you guys have been snapping each other so after three days you get a flame super cool and you want that to go high high high but if you don't snap them for about 24 hours then the hourglass comes it's saying that if you don't snap them really soon you're gonna lose your streak and you have to start all over again no that's like losing your world of warcraft account after 10 years and you have to start leveling up again yes i did that that was horrible i broke up with my boyfriend but we kept a streak for a few more weeks but once he broke the streak i knew it was officially over that day was so sad it can really hurt when a streak ends some of my friends get offended if i break a streak and others don't care as much it all depends on the person my parents took my phone away one time and i gave my friend my login to my snapchat so she could keep up my streaks i was panicked about losing them all because i couldn't get to my phone for two days while i was grounded numbers from my cafe so this is actually my longest trick all my other streaks are like 10 days this is magnus and hi magnus if you're watching 378 days that's a long time i think me and magnus we don't really hang out that much we actually don't really snap each other either we used to for a while and we won't work in it we work a lot we're not that much on snapchat really so now for like 100 days the only things i get from him is streak streak streak once a day to not break the streak and this comes from a person who thinks the streaks is stupid but i do i can't feel what these children are telling because if you have a streak over 300 days you know you want to continue if you win at gambling you you take 1 000 you get 10 000 back of course you want to gamble more and also i remember when i had a boyfriend and the streak was gone that reminded me this is the first time in one year that we have not spoken for a day and that is pretty sad actually so what can we do about this we need to be a god influence or a good role models ourselves so dear dino make sure you know what the kids do but also yourself like saying not share your password don't don't bully people but then you're in the facebook comments calling all the girls fat or are saying that's stupid i had salmon for lunch today because you don't care about the news children they do learn this stuff from somewhere school needs to implement better first passwords so some school still uses the last name and the yearborn of their students i remember mine quite well lam me 97 i'm born in 97 last name is lansam do you think i guessed the password to the other students hell yeah i did did i do something bad yes i did and i'm sorry if you're watching they also use um easily guest passwords and i want them to use some sort of password managers or to step security there's a million functions to these password managers and that's a million functions also that is never even used does the password manager people check what their users are actually using or not why do we need all these functions what do i click what is a vault what is this i don't know even i i'm even confused can we just make it really really really easy so hey there password manager people make easy ones for kids and not so expensive ones to the school because not our schools actually have the money to use stuff like this and that's why they have 80 people creating la min 97 why do they share password with someone else to get help it's very embarrassing to ask your parents for help even i am like now if i need to ask my mom how to like wash my clothing or something i like um mom what do i do with this shirt again they think that the parents know nothing about security and computers even if you work in i.t doesn't mean that they will ask you because they're maybe even afraid that you will make them feel stupid or that you talk too much or you're talking to dinosaur or too nerdy for them to even understand if they won't come to you for help make sure they know where to get help look at the other dinosaurs around them you have the t-rex you have all these other dinosaurs around them talk to them and make sure they know you can contact this t-rex instead of me if you want to it's important that they know where to ask for help if this happens where do they go you are not their only dinosaur in their lives and also why does kids not know about two-step authentication so maybe someone here noticed how i wrote two-step altercation but more up here i did two-step security whoops or maybe not why is these words not standardized on behalf of all young people and all dinosaurs please standardize it it's stupid we have like 10 different names for the same thing and everyone is fighting now we need to use this it's nothing to fight about the children especially the children they don't understand this word what kid uses the word authenticate what do they say when they log into their favorite game i'm authenticating myself into fortnite no they're saying i'm logging in now you guys we're gonna win this they're logging in logging on it's stupid for everyone to have different ways to do it and like apps or sms or maybe email how to set it up it's stupid standardize it don't fight about it just agree so i will say two-step security because it's easy to recognize two steps okay there's two steps not two-factor two-step security maybe two-step login security easy for everyone to understand so also children they're pretty lazy now they're really smart they can even hack their parents but they're just used to getting all the answers they're not googling anymore they don't know how to use google they don't know how to find this information themselves because they just watch youtube and tick tock all day we need to make sure that we just don't give them the answers some people some kids that are like 14 and they have all these social media ask me what is two-step security google it don't just ask me find the information yourself as well understand what is important to these children and why because when i speak about snapchat streak me and you here you're laughing but for children it's actually more important to have a snapchat streak with their friends and loved ones than being safe they know it's bad to give away the passwords they know it's bad they know they're told not to but friendship and love beats that common sense losing a snapchat streak may cause drama fights lots of friends lots of status and it's a way to prove who is the best of friends and that's really important to these children i think that snapchat should make two-step security a must if you are going to have the opportunity to have streaks because they know that 59 of these children giving out their passwords it's for snapchat streak and snapchat streak only then they should make it a must of course they can let them even with the two-step security as well but not if the parents took away their phone and they're grounded then they can't because they are just giving out the password if they're gonna give them the two-step security as well it's not gonna work and also they need to stop and think one more time children especially one young ones they can't really stop and think too and two three times it doesn't work that way and also i don't like children using money but me you have kids here they use all the money and on the minecraft and fortnite all the skins and all of that so maybe snapchat could have like a packet that you can buy if you're going away you're losing your phone whatever pay a dollar and you won't lose your streak for five days it's easy money for them it's not too expensive and it shouldn't take much time to get that also maybe parents can try to understand how important the streaks are you're taking away their phone which is a punishment i do not support at all because it just means they're scared to do a stupid [ __ ] because they're gonna lose their games and friends that's horrible they should know that if they did something bad then you should have a talk with them don't just take their phone tell them and show them why was this comment you said on someone's picture wrong you don't have to take away anything and if you do snapchat streak let them log in once a day and fix the streak i'd rather do that which i think is stupid and not necessary at all but it's not stupid for them gaming i believe that a lot of ik people they're into i.t because of gaming me myself i was on a gaming team i also my first time on television was in 2014 it was this mia with this light very very light voice and i was speaking about gaming and being a full-time athlete trying to reach the olympics and 86 percent of those aged 9-18 they do play games online and i loved games if it wasn't for gaming i wouldn't be in las vegas today good reaction skills skills they can use in other activities i was a full-time athlete doing good in school and balancing all this stuff talking and tv shows about gamers about this issue they also feel that they're learning english better and most games they do need a password kids they contact me or their parents because they're getting hacked on their favorite game and when you spend like thousands dollars that's not fun at all it's a lot of accounts that they maybe spend years on leveling up or spend a lot of money on and they're really really sad someone in the game tricked them and said if you give me your password i i can show you this cool skin so where did i learn about security it's gaming i built my first computer when i was 15 just because i needed to play better i needed better fps i didn't want it to lag i wanted a nice gaming computer i didn't care about forensics hacking or whatever i just wanted to play my games the password they use so the problem is they have now of course because people like ped and says that you need different passwords for applications so if you get hacked on one of them you won't get hacked on the other ones that's great and i agree the problem is children need to make multiple passwords they also need to keep to keep track of passwords safely and they also have to think about the strength of their passwords we're talking about children who still likes barbie and plays fortnite and they need to think about grown-up stuff the first very passwords are received by parents or at school and i remember this very well because the passwords are mostly related to their lives sports gaming animals names numbers colors if you go to like um password leaks and you search for my old email you're gonna see football 1997 mia 0904 my birthday and when i needed a longer password because that's that was the thing you know you need a long ass password mia 0904 0904 and then when you need special things i just did the same and then some kind of march i stopped using those password when i was 16. it's just luck that i was never hacked 16 that's like that's nine years ago dangerous i never thought about that before i was into gaming because i didn't want to lose my account younger kids they do rely on family support for password maintenance that's from nist and my parents never helped me with that they didn't know things about passwords i knew their password sorry mom um i could figure it out all the time bad habits they're learning best practices at school and by parents or other relatives but they have bad habits they reuse the passwords and th