1
00:00:00,880 --> 00:00:07,299
This summer, four of the biggest hedge funds on the planet got phone calls from people who said they weren't who they said.

2
00:00:08,119 --> 00:00:11,619
The voices were straight and nobody lost a dollar.

3
00:00:12,460 --> 00:00:14,150
Now, hold that thought.

4
00:00:14,150 --> 00:00:18,004
A couple in Michigan got one phone call from a voice

5
00:00:18,004 --> 00:00:22,600
that they trusted and it cost them sixty six thousand dollars.

6
00:00:23,359 --> 00:00:28,219
What's good, Internet? This is your boy Q. And welcome to the Blast Radius.

7
00:00:28,219 --> 00:00:31,233
His name is Quinn Vidal and Q is the alias.

8
00:00:31,233 --> 00:00:34,526
Podcast launch and we call it the Blast Radius.

9
00:00:34,526 --> 00:00:37,400
Every word perfect as applications in 86.

10
00:00:37,400 --> 00:00:38,942
Fingers gripping keys.

11
00:00:38,942 --> 00:00:40,904
Home row, stop taking risks.

12
00:00:40,904 --> 00:00:44,268
Listen and level up your business's development.

13
00:00:44,268 --> 00:00:47,281
Every episode, a new dose of your medicine.

14
00:00:47,281 --> 00:00:51,136
Technical physician better come and see the specialist.

15
00:00:51,136 --> 00:00:54,640
Nothing at all artificial about this intelligence.

16
00:00:54,640 --> 00:00:56,376
All right. The blast.

17
00:00:56,376 --> 00:01:02,740
Last month, CNN ran a story about a couple in West Michigan, Brian and Wendy.

18
00:01:03,060 --> 00:01:07,799
They were buying a condo. They spent weeks of back and forth with the lender. You know,

19
00:01:07,900 --> 00:01:13,299
normal stuff. The paperwork. They got a guy's name. They recognize his voice and they talked

20
00:01:13,299 --> 00:01:20,099
to him a bunch of times. Now, a few days before closing, an email comes in. It looks like that

21
00:01:20,099 --> 00:01:26,700
the lender. It has the right logo, right thread, everything, the tone, everything. And then the

22
00:01:26,700 --> 00:01:32,340
phone rings, and the number on the screen is the same lender's number, the one that they had talked

23
00:01:32,340 --> 00:01:38,900
to, the same phone, the same voice, the same guy, same cadence. He says, the closing funds need to

24
00:01:38,900 --> 00:01:41,144
go now. Here's where.

25
00:01:41,144 --> 00:01:43,603
So Brian wires $66,000.

26
00:01:43,603 --> 00:01:48,519
Closing morning, the title company calls. Hey,

27
00:01:48,519 --> 00:01:55,180
We're ready. Where's the money? The money's gone. It went days ago to somebody who was never

28
00:01:55,180 --> 00:01:56,173
the lender.

29
00:01:56,173 --> 00:01:58,250
So was this a deepfake?

30
00:01:58,250 --> 00:02:03,939
Here's where I need y'all to slow down with me because the part

31
00:02:03,939 --> 00:02:10,360
that everyone gets wrong and the purpose of this episode, CNN's headline said suspected voice

32
00:02:10,360 --> 00:02:17,620
cloning. Suspected. The people who said this was AI, that's a company called CertIFID. They do

33
00:02:17,620 --> 00:02:22,939
wire fraud prevention and they reviewed the case. They said the email looked authentic,

34
00:02:22,939 --> 00:02:28,259
the number matched, and the caller sounded like the mortgage professional Brian already had

35
00:02:28,259 --> 00:02:34,580
trusted. Now, I'm not saying that they're wrong. Spoofing a caller ID is a $10 trick and cloning

36
00:02:34,580 --> 00:02:39,819
a voice off a guy that's been leaving voicemails and posting mortgage rates videos for them 10

37
00:02:39,819 --> 00:02:46,340
years. Well, get to know how cheap that is. It's very plausible, but nobody proved it.

38
00:02:46,340 --> 00:02:53,229
And here's the thing. Sit with this. It doesn't matter because look at what actually happened.

39
00:02:53,229 --> 00:02:58,889
An email that looked right. A phone number that looked right. A voice that sounded right.

40
00:02:59,250 --> 00:03:05,150
Every signal a normal human taught to check passed. And then a wire went out days before

41
00:03:05,150 --> 00:03:11,090
closing on a phone call with nobody calling the lender back on the number they already had.

42
00:03:11,879 --> 00:03:13,360
That's not an AI story.

43
00:03:13,719 --> 00:03:15,919
That's there was no step story.

44
00:03:16,460 --> 00:03:18,199
The voice could have been a clone.

45
00:03:18,560 --> 00:03:20,939
The voice could have been a guy who's good at voices.

46
00:03:21,219 --> 00:03:24,020
Same $66,000 either way.

47
00:03:25,969 --> 00:03:29,189
Now, let me zoom out because this was a busy summer.

48
00:03:29,349 --> 00:03:35,550
August 5th, Bloomberg reports that a coordinated voice phishing campaign against Citadel,

49
00:03:36,030 --> 00:03:41,710
0.72, Two Sigma, Millennial, and a bunch of other private equity shops,

50
00:03:42,270 --> 00:03:47,437
Callers were pretending to be colleagues, pretending to be IT, trying to

51
00:03:47,437 --> 00:03:53,250
talk to employees into resetting passwords, handing over codes, opening the door.

52
00:03:53,509 --> 00:04:00,919
And I want you to notice who they called, not the CFO, the help desk, whoever resets passwords.

53
00:04:01,120 --> 00:04:06,240
That's the target. Now, a 12 person company has that exact same person.

54
00:04:06,300 --> 00:04:10,060
It's just Dave. And Dave is also the guy who fixes the printer.

55
00:04:10,060 --> 00:04:12,882
Two Sigma statement attempted.

56
00:04:12,882 --> 00:04:15,515
No indication of any impact.

57
00:04:15,515 --> 00:04:19,748
Point 72 told investors no client data taken.

58
00:04:19,748 --> 00:04:23,040
Citadel and Millennial, no comment.

59
00:04:23,040 --> 00:04:26,674
august 11 in spain police arrested a guy

60
00:04:26,674 --> 00:04:31,397
who had been beating a certificate authority's video

61
00:04:31,397 --> 00:04:31,579
id

62
00:04:31,579 --> 00:04:38,100
check you know the thing where you hold up your id to the camera with forged id cards he had a

63
00:04:38,100 --> 00:04:43,480
real-time face swap and I love this he used colored light bulbs from the hardware store to

64
00:04:43,480 --> 00:04:47,555
fake the hologram shine 38 attempts 30 stolen

65
00:04:47,555 --> 00:04:51,720
identities 320 phone lines he was getting real

66
00:04:51,720 --> 00:04:57,079
digital signature certificates in other people's names. You know, the thing where you sign contracts

67
00:04:57,079 --> 00:04:59,512
in an open account with.

68
00:04:59,512 --> 00:05:01,540
How'd he get caught?

69
00:05:01,540 --> 00:05:06,610
The face swap lagged for one second. His real face

70
00:05:06,610 --> 00:05:13,430
popped up on the verification camera like a Zoom call on a hotel Wi-Fi and a person at the issuer

71
00:05:13,430 --> 00:05:14,155
noticed.

72
00:05:14,155 --> 00:05:16,239
Hong Kong, same window.

73
00:05:16,239 --> 00:05:21,949
Police warn about 150 WhatsApp account hijackings in two weeks.

74
00:05:21,949 --> 00:05:28,829
In one of them, scammers took over a father's account and sent his son voice notes, an AI voice

75
00:05:28,829 --> 00:05:35,550
with his dad's sound. I need you to move money. It's urgent. Until the son has sent 10 million

76
00:05:35,550 --> 00:05:43,550
Hong Kong dollars, about 1.3 million US, his entire savings. Notice, not even a live call,

77
00:05:43,949 --> 00:05:51,279
video notes, the laziest deepfake in this episode and the most expensive. One more,

78
00:05:51,279 --> 00:05:54,980
because it's the one that's coming for your company specifically.

79
00:05:55,660 --> 00:06:00,879
July 31st, the State Department and the FBI plus 10 other governments,

80
00:06:01,160 --> 00:06:06,439
Japan, the UK, Canada, Australia, Germany, on down the list,

81
00:06:06,720 --> 00:06:12,000
put out a joint alert about a North Korean IT workers getting hired remotely

82
00:06:12,000 --> 00:06:17,660
by Western companies on stolen identities, fake resumes, AI published.

83
00:06:17,660 --> 00:06:24,779
a stand-in for the interview a laptop shipped to a laptop farm in the states so the login looks

84
00:06:24,779 --> 00:06:31,420
local the FBI's own number for AI involved employment scams last year was almost 13 million

85
00:06:31,420 --> 00:06:35,484
dollars and the FBI says the goal usually isn't

86
00:06:35,484 --> 00:06:39,720
the paycheck it's access to your network the scam

87
00:06:39,720 --> 00:06:45,639
doesn't want your money anymore it wants a job don't read the coverage on any of these here's

88
00:06:45,639 --> 00:06:52,860
the pattern. One, AI gets asserted by somebody selling the fix or by the reporter and almost

89
00:06:52,860 --> 00:06:55,118
never by the victim.

90
00:06:55,118 --> 00:06:58,165
Two Sigma never said AI. 0.

91
00:06:58,165 --> 00:07:00,084
72 never said AI.

92
00:07:00,084 --> 00:07:03,019
CNN said suspected. When a

93
00:07:03,019 --> 00:07:09,699
security company tells you a deepfake did it, ask who confirmed it. Two, they tell it like the deep

94
00:07:09,699 --> 00:07:16,199
fake did the work. It didn't. Michigan started with a spoofed email. Hong Kong started with a

95
00:07:16,199 --> 00:07:21,959
hijacked WhatsApp. The hedge fund started with a phone call to the help desk. The famous one in

96
00:07:21,959 --> 00:07:28,800
ARP Hong Kong 2024, the finance guy on the video call with a fake CFO and fake colleagues about

97
00:07:28,800 --> 00:07:29,904
$25 million.

98
00:07:29,904 --> 00:07:34,322
15 transfers that started with a phishing email.

99
00:07:34,322 --> 00:07:36,899
And the police said that the

100
00:07:36,899 --> 00:07:42,620
video on the call was pre-recorded. They told him to introduce himself, and then he just listened.

101
00:07:43,079 --> 00:07:45,869
Nobody faked a conversation.

102
00:07:45,869 --> 00:07:47,962
They faked a meeting.

103
00:07:47,962 --> 00:07:51,250
The deepfake didn't take $66,000.

104
00:07:51,829 --> 00:07:54,856
A phone call with no callback did.

105
00:07:54,856 --> 00:07:57,439
The deepfake is the last 10%.

106
00:07:57,439 --> 00:08:00,199
Somebody opened the door first.

107
00:08:00,199 --> 00:08:07,819
the voice just walked through it. Now, these are the numbers. Everyone's got a stat that ends in a

108
00:08:07,819 --> 00:08:15,720
percent. deepfakes are up 3000 percent, up 1200 percent. Go find the source. It's a vendor's own

109
00:08:15,720 --> 00:08:23,180
platform. Three years ago, no base number. Here's what the FBI actually counted. And this is the

110
00:08:23,180 --> 00:08:26,565
first year that they even counted it.

111
00:08:26,565 --> 00:08:31,779
Last year, just over a million complaints, $20. 9 billion

112
00:08:31,779 --> 00:08:33,444
reported lost.

113
00:08:33,444 --> 00:08:38,677
Of those, 22,000 mentioned AI, $893 million.

114
00:08:38,677 --> 00:08:42,840
And the FBI says most victims never

115
00:08:42,840 --> 00:08:48,379
realized that AI was involved. So that's the floor. But here's the number I want you to take

116
00:08:48,379 --> 00:08:48,980
home.

117
00:08:48,980 --> 00:08:55,105
$3 billion in business email compromised last year.

118
00:08:55,105 --> 00:08:59,309
$30 million of it, AI. The other $3

119
00:08:59,309 --> 00:09:06,230
billion didn't need it. That's the whole story. The scam that's actually emptying an account is

120
00:09:06,230 --> 00:09:13,490
the boring one. The fake invoice. The changed bank details. The urgent wire. AI is a garnish on it.

121
00:09:13,690 --> 00:09:18,350
A good garnish. But if you're building your defense around spotting the garnish, you're about

122
00:09:18,350 --> 00:09:22,561
to find out why that doesn't work.

123
00:09:22,561 --> 00:09:27,887
How far does this reach and what's changed?

124
00:09:27,887 --> 00:09:30,240
Three things change

125
00:09:30,240 --> 00:09:36,200
and I want to take them in order. What we know about people, what we know about the tech, and a

126
00:09:36,200 --> 00:09:43,179
rule that quietly landed in June that most of y'all are already breaking. I know the instinct.

127
00:09:43,639 --> 00:09:49,840
We'll do a training. We'll show everybody what a deepfake looks like. Here's the research. A meta

128
00:09:49,840 --> 00:09:54,708
analysis, 56 studies, 86,000 people, everything from

129
00:09:54,708 --> 00:09:58,639
photos to audio to video, humans correctly

130
00:09:58,639 --> 00:10:01,732
call a deepfake 55% of the time.

131
00:10:01,732 --> 00:10:07,919
The confidence interval crosses 50. That's a coin. And when they

132
00:10:07,919 --> 00:10:14,379
train people, show them examples, gave them feedback, gave them the AI help, accuracy went

133
00:10:14,379 --> 00:10:15,552
to about 65%.

134
00:10:15,552 --> 00:10:20,423
10 points is still a coin flip with their certificate.

135
00:10:20,423 --> 00:10:23,039
Audio is a little better than

136
00:10:23,039 --> 00:10:28,700
video. It's not good. And the tools to get better every quarter, your people are not going to have

137
00:10:28,700 --> 00:10:34,840
that training. So they don't. Okay. So we buy the software. Here's the problem with software.

138
00:10:35,419 --> 00:10:42,039
Detectors score in the high nineties on the generators they were trained on. Now show them

139
00:10:42,039 --> 00:10:47,799
generator they've never seen before. The next one, next month, they fall off a cliff on their

140
00:10:47,799 --> 00:10:48,906
percentages.

141
00:10:48,906 --> 00:10:53,424
Tens of points, some of them back to a coin flip.

142
00:10:53,424 --> 00:10:56,559
Nobody puts this video is AI light

143
00:10:56,559 --> 00:11:04,059
on Zoom or Teams or Meet. Zoom gets a verified human badge and beta that proves a person is

144
00:11:04,059 --> 00:11:04,618
there.

145
00:11:04,618 --> 00:11:07,134
Not that the video is real.

146
00:11:07,134 --> 00:11:11,141
Teams added a report button, meet, nothing.

147
00:11:11,141 --> 00:11:12,539
So here's where

148
00:11:12,539 --> 00:11:18,259
you're left with. And it's the best news in the episode. Every single one of these that got caught

149
00:11:18,259 --> 00:11:20,606
got caught the same way.

150
00:11:20,606 --> 00:11:27,159
Ferrari in 2024, the CEO's voice cloned, accent and all, calling an

151
00:11:27,159 --> 00:11:34,259
exec about a secret acquisition. The exec says, what's the book you recommended me last week?

152
00:11:34,759 --> 00:11:35,269
Click.

153
00:11:35,269 --> 00:11:43,000
Arup, 25 million out the door and got caught by a routine follow-up call with headquarters.

154
00:11:43,779 --> 00:11:50,142
Spain, a person at the issuer watching the feed saw a one-second glitch.

155
00:11:50,142 --> 00:11:51,909
WPP, the ad company,

156
00:11:51,909 --> 00:11:57,830
fake WhatsApp, fake Teams meeting, voice cloner, the CEO, the exec on the other end just

157
00:11:57,830 --> 00:12:05,129
got suspicious and stopped. Not a detector, not one of them. Every deepfake that got caught,

158
00:12:05,230 --> 00:12:07,277
got caught the same way.

159
00:12:07,277 --> 00:12:08,983
Somebody had a rule.

160
00:12:08,983 --> 00:12:13,419
Now here's the part I promise, the regulatory shift.

161
00:12:13,779 --> 00:12:18,340
And I checked this one hard because last episode I told y'all I was going to make claims about

162
00:12:18,340 --> 00:12:25,269
regulation I couldn't source. This one I can. First, the bad news. As of this recording,

163
00:12:25,269 --> 00:12:30,570
there is no law in this country that protects your business from somebody deep faking your CEO.

164
00:12:31,049 --> 00:12:36,309
Not federal, not Texas, not New York, not California. The federal law that passed last

165
00:12:36,309 --> 00:12:43,830
year called Take It Down is about intimate images. Real problem, not this problem. The one for voices

166
00:12:43,830 --> 00:12:50,409
and likeness, no fakes, is sitting on the Senate calendar with no vote. The FTC has a rule against

167
00:12:50,409 --> 00:12:56,110
impersonating a business. And since 2024, and that does give the FTC a stick that it doesn't

168
00:12:56,110 --> 00:13:01,009
give you a takedown. And the part that rule would cover impersonating a person,

169
00:13:01,370 --> 00:13:08,509
your CEO, it was proposed two and a half years ago, still not final. So nobody's coming. The

170
00:13:08,509 --> 00:13:15,330
rule has to be yours. And here's the thing. One of them already is. Since June 19th, if your

171
00:13:15,330 --> 00:13:21,850
business sends ACH payments, payroll through vendors, anything through bank rails, a rule

172
00:13:21,850 --> 00:13:28,570
from Nacha, the people who run the ACH network say you are required to have risk-based procedures

173
00:13:28,570 --> 00:13:34,590
to catch payments made under what they call false pretenses. And they define it,

174
00:13:34,990 --> 00:13:40,470
someone misrepresenting who they are, someone misrepresenting that they are allowed to act

175
00:13:40,470 --> 00:13:45,730
for someone else. Someone misrepresenting whose account the money's going to, they name it.

176
00:13:46,049 --> 00:13:53,159
Business email compromise, vendor impersonation, and payroll impersonation. That's this, the Michigan

177
00:13:53,159 --> 00:13:58,799
phone call. That's the fake vendor email, and it applies to every business that originates ACH,

178
00:13:59,120 --> 00:14:04,820
and they took the size threshold off in June. Now, most of y'all have never heard the word

179
00:14:04,820 --> 00:14:10,399
Nacha and your bank will not send you a memo. But the next time something goes wrong, we had

180
00:14:10,399 --> 00:14:17,450
no procedure is now a worse answer than it was in May. All right. It's that time for us to talk

181
00:14:17,450 --> 00:14:22,769
about what happened on the other side. You know, those stories that might have happened a few years

182
00:14:22,769 --> 00:14:28,169
back. I'm at this tech company, not going to name it. One morning, everybody gets pulled into a Zoom,

183
00:14:28,289 --> 00:14:33,629
all hands on deck. And if you've been in business a minute, you know that a hands on deck coming

184
00:14:33,629 --> 00:14:39,850
is usually never good news. Here's what they tell us. Earlier that same morning, there had been

185
00:14:39,850 --> 00:14:47,029
another Zoom scheduled call by one of the C-level executives, and the invite went to a few people

186
00:14:47,029 --> 00:14:53,490
in HR and finance. Not everybody, just the people who can move money. On that call, there's the

187
00:14:53,490 --> 00:14:56,921
exec on video, face, voice, the whole nine.

188
00:14:56,921 --> 00:15:01,549
And the ask is, we owe a customer refund, a real customer,

189
00:15:01,549 --> 00:15:07,409
one we actually do business with, and it needs to go out today, just to a different account.

190
00:15:07,750 --> 00:15:12,090
It looked right. It sounded right. But a couple of things were a little bit off.

191
00:15:12,850 --> 00:15:18,649
Sometimes you have that feeling, and this is what it was. And the folks on the call did the thing

192
00:15:18,649 --> 00:15:22,789
they were supposed to. They didn't argue with the face on the screen. They stopped and checked

193
00:15:22,789 --> 00:15:30,139
who they were actually talking to. Now, this didn't take long. It wasn't the exec. It was a

194
00:15:30,139 --> 00:15:36,200
deepfake. It was a setup to walk money right out the door and nothing went out the door. Zero

195
00:15:36,200 --> 00:15:43,519
dollars. So that second Zoom, the all hands on, that was the warning. That happened that morning.

196
00:15:44,000 --> 00:15:47,740
This is what it looks like. This is what's happened. And this is what you should do.

197
00:15:48,539 --> 00:15:54,259
And that's a place with a whole department for this. The small shop doesn't have the department,

198
00:15:54,259 --> 00:16:00,279
but the department was never the part that worked. The part that worked was a couple of people

199
00:16:00,279 --> 00:16:05,559
who felt something was off, and they were allowed to stop and check.

200
00:16:06,559 --> 00:16:12,539
Looking back at Michigan one more time, what was the one signal in the story that couldn't be fake?

201
00:16:13,059 --> 00:16:20,220
Not the email, spoofable. Not the caller ID, spoofable. Not the voice, clonable. For about

202
00:16:20,220 --> 00:16:26,590
six bucks a month and a minute or two of audio off the guy's own website. The one thing the

203
00:16:26,590 --> 00:16:33,870
scammer could not control was the number that Brian already had. If Brian hangs up and he dials

204
00:16:33,870 --> 00:16:40,669
that number back, the real lender picks up. The whole thing dies in about 15 seconds. So the

205
00:16:40,669 --> 00:16:48,029
defense can't be spot the fake. Same lesson as last episode, the message was perfect. The defense

206
00:16:48,029 --> 00:16:54,389
has to be a thing that holds even when the voice is perfect. It's a phone number. You already own

207
00:16:54,389 --> 00:16:57,714
it. The fix. Three things.

208
00:16:57,714 --> 00:17:03,853
First one's free and you can do it before lunch.

209
00:17:03,853 --> 00:17:06,539
Any new bank details,

210
00:17:06,539 --> 00:17:14,079
any change bank details, any urgent transfer, one rule on paper that everybody who touches money

211
00:17:14,079 --> 00:17:15,253
has to read.

212
00:17:15,253 --> 00:17:17,798
New bank details. Hang up.

213
00:17:17,798 --> 00:17:23,180
Call the number you already have, not the number in the

214
00:17:23,180 --> 00:17:30,559
email, not the number that just called you, the number on the file. And two people sign off on

215
00:17:30,559 --> 00:17:36,500
every change. Not because you don't trust your bookkeeper, because the scammer only needs one

216
00:17:36,500 --> 00:17:43,319
of you to be having a bad day, to be off, to not catch the signs. That's the FBI's advice.

217
00:17:43,759 --> 00:17:48,859
That's what the bank tells their own corporate clients. And as of June, written procedure,

218
00:17:48,859 --> 00:17:56,160
Nacha expects you to have. Three sources, one index card. This one's straight from the FBI.

219
00:17:56,759 --> 00:18:03,660
2024, word for word, create a secret word or phrase with your family to verify their identity.

220
00:18:04,140 --> 00:18:10,940
Do it at home tonight, then do it at work tomorrow. Anybody calling, anybody, me included,

221
00:18:10,940 --> 00:18:17,160
asking for money, access, who doesn't know the word is a stranger with your voice.

222
00:18:17,160 --> 00:18:24,759
one honest caveat because I don't sell fairy tales a code word beats a voice clone it does not beat

223
00:18:24,759 --> 00:18:31,000
a hijacked account if somebody's already inside dad's whatsapp they can read the word so the word

224
00:18:31,000 --> 00:18:38,859
is layer two the callback is layer one this is the episode two fix again and I'm going to keep

225
00:18:38,859 --> 00:18:44,839
saying until y'all do it the hedge fund callers wanted codes the help desk is the target because

226
00:18:44,839 --> 00:18:50,920
that help desk can reset the thing that protects everything else. Phishing-resistant login,

227
00:18:51,220 --> 00:18:57,940
pass keys where you can get them, text messages, codes off for anything that matters. If your IT

228
00:18:57,940 --> 00:19:05,440
person says that's hard, CISA, C-I-S-A, the federal cyber agency, publishes the exact checklist

229
00:19:05,440 --> 00:19:11,640
for Microsoft 365 and Google Workspace and a free script that grades your setup against it.

230
00:19:11,640 --> 00:19:18,859
free. It's on the link in the description. And if you're hiring remote, verify the school

231
00:19:18,859 --> 00:19:25,660
and the last job directly, not through the candidate. Get a face on a call and get somebody

232
00:19:25,660 --> 00:19:31,480
in a room if you can. And if the paycheck's going to a bank account that isn't in the person's name,

233
00:19:31,480 --> 00:19:35,359
stop. That's the State Department's list, not mine.

234
00:19:35,359 --> 00:19:37,287
Fix three is module three.

235
00:19:37,287 --> 00:19:41,883
Identity, passwords, MFA, and pass keys. It's live. It's free.

236
00:19:41,883 --> 00:19:42,995
There's a quiz.

237
00:19:42,995 --> 00:19:49,593
So fix one and fix two, the callback, the code word, the whole somebody had a rule thing.

238
00:19:49,593 --> 00:19:52,337
That's the social engineering module.

239
00:19:52,337 --> 00:19:56,859
And I'll be honest with you, it's not written yet. It's next.

240
00:19:56,859 --> 00:20:02,359
The community votes on what's written and on the top of the vote, a full lesson within

241
00:20:02,359 --> 00:20:03,279
side of a week.

242
00:20:03,640 --> 00:20:05,440
So if you want it, go vote for it.

243
00:20:05,799 --> 00:20:06,920
That's how this works.

244
00:20:08,569 --> 00:20:10,170
So that's the radius on this one.

245
00:20:10,549 --> 00:20:15,269
A voice that sounded right, a number that looked right, an email that looked right,

246
00:20:15,529 --> 00:20:21,509
and $66,000 because there was no step where any of it had to be checked.

247
00:20:22,789 --> 00:20:24,589
AI didn't beat the process.

248
00:20:24,890 --> 00:20:26,430
There was no process.

249
00:20:26,430 --> 00:20:34,170
You don't need a detector. You need a phone number that you already have and a rule that says you use it.

250
00:20:34,509 --> 00:20:38,509
And the next episode is coming to you this week on Thursday.

251
00:20:38,750 --> 00:20:45,250
We're talking about the robots. Open AI's own AI agents got out of their test lab and broke into another company.

252
00:20:45,569 --> 00:20:50,650
Sounds like a movie. Here's the part that isn't. They didn't invent a new way in.

253
00:20:50,650 --> 00:20:57,549
they used yours that's next. the lessons are in the community inside the Blast Radius on Skool

254
00:20:57,549 --> 00:21:02,950
the foundation's track is free the link's in the description come tell me your callback story

255
00:21:02,950 --> 00:21:07,950
somebody in there got caught one of these with a dumb question and I want to hear it

256
00:21:07,950 --> 00:21:14,170
is your boy Q everything has a Blast Radius just find out how far yours goes and remember

257
00:21:14,170 --> 00:21:16,109
pick a word. Peace.