Behind the information economy as a ride. The world is teeming with innovation as
new business models reinvenist. Inside analysisation and insight about how to make the most
of this exciting new era. Learn more at side Analysis dot Inside analysis dot
com. And now here's your host, Eric, Keep welcome to each other,
help chosen to teach. It's all right, lit and gentleman and low
and welcome back. Once again it's the only coast to coast radio show all
about the information economy. It's time for inside Analysis. Your truly is here
with a very special guest. We're going to talk about securities, a problem
that never goes away. It never will go away. It's always going to
be a challenge. It's changing by the day. We're talking to. Our
Pergosian is a company called bright If it's b R I T I V E.
And alright, I'm gonna tell you security. It's one of these issues
that only a handful of people at the company ever really care about it.
And my British business partner one time cracked joke. He said, there's only
one person who has about security and his name is scape Goat, meaning the
person who was in charge of security just gets blamed when something goes wrong and
they fire that person and get another person. But usually they do the same
kind of stuff. But one of the more clever comments I've heard about security
of this is very, very true. I'm sure you'll agree with this,
is that security is not a thing. It's not one object. It's not
a technology, it's not a process. It's a whole amalgam of education,
of protocols, of technologies, of observability, and just paying attention. You
have to pay attention all the time. But this stuff, and I can
tell you, folks, in the last four or five months, I've had
my corporate debit card hacked twice, which is annoying. Once is okay,
because that way I can see and remember all the stupid things I signed up
for. You get all the emails that, oh, your credit card was
declined, like, yeah, I know, because it got hacked and I
didn't when they want to go back to you guys. And luckily the legislators
around the country here in America at least, have done some good work in
not allowing these organizations to keep hammering you with late fees after it goes away.
These days, you just don't get your service anymore it goes away.
But nonetheless, the security issue is so important it's never gonna not important,
So you always need this cocktail of technologies and processes. And then even still
you're going to get hacked sooner or later. So what's your path to remediation?
There are lots of things to consider here, but a few choice words
or tell us a bit about yourself and Bright and how you get into the
space and what you folks are doing. Yeah, thank ar, thanks for
having me here. Just about twenty years ago, and back then it was
more about the IT security as they call it. It's certainly involved quite a
you know, arguably even a board level issue that you know that we see
today. But you know, hacks or attacks have gone from just a network
breach to steal some data to for one, cyber warfare or cyber crime,
and ransomware is one that is so lucrative these days for the criminals and so
disruptive for many companies in the industries. Right, So it's a very different
world today that we live in. My past experience before this company, before
Brighter, I've been in a space mostly from this industry, in that industry,
and I started also another company about ten years ago in identity and access
Spanish mansers space, but eventually which led to you know, uh in specifically
focusing on a problem in the clouds, you know space or cloud public cloud
technologies and building a product to the market that helps reduce the suiting risks and
vulnerabilities that are preventing businesses from adopting and expanding their public clouds consumption or the
clouds adoption. Right, well, let's let's talk about how you do that,
because there are lots and lots of ways, and I do like that
you're focused on identity management because let's face it, if you're trying to log
into a system, the system is trying to understand, okay, are you
the person that you say you are? And historically that's been largely done by
passwords, which of course is a pain because you have to remember the passwords
and for everything, and that of course is putting yourself in jeopardy because then
folks can hack in and do all kinds of stuff. And you know,
it was my business partner, doctor Robin Blore, who years ago taught me
that this whole crime network is not just individuals. In fact, the whole
narrative around the guy in the hoodie being the one who's going in and hacking
your systems. It's it's not a guy in a hoodie. Sometimes it is,
but usually there's this whole industry involved. There are people who specialize in
getting accets or people who specialize in exploiting that access, and it will just
kind of sell their access to other players. And then you have cases like
the Colonial pipeline, which some folks may recall a while back before the Russian
invasion of Ukraine took down the East coast's ability to get gas to gas stations.
And you know, when I saw that, I thought to myself,
this is an active war. This is not just some ransomware. And the
government has never come out and said, but I believe it was an active
war. And it goes to show you how vulnerable if you did the math
and fig eyes, we can shut down distribution on the East Coast and that
will be a very significant inconvenience on in fact, put people in jeopardy,
right, ambulances, things that can't get gasoline. That's a pretty big problem.
So it's not just individuals. I mean to your boson state sponsored addors,
and I think the folks at Google and Facebook and Yahoo and these other
big organizations certainly worked very hard to stop all that. But maybe tell us
about what do you to enable identity manage that you can then sort of provide
to all these cloud providers. That's that's very very good background, just kind
of how you've illustrated like the state of the world really and for us,
why identity was so important and why we decided to really invest in building in
technology. There's a very important thing to talk about here. With the clouds
technologies and adoption of public Cloud, it was a huge change in paradigm shifts
really in the in the world of you know, security and identity. Specifically
back in when everything all the critical know it assets were in the data center,
the security monitor perimeter aside from the walls, of course, but there
was a perimeter security network, you know, firewalls, and and identities existed
inside the firewall. With public cloud, that was a complete pop Identity essentially
became the first and last line of defense when comes through durin applications front.
That's why identity for us became the first and biggest security elements to protect from.
Like examples you gave, of course, asual GCP pretty robust security controls
and identity models. The challenges for any organization that operates across different technologies and
they also operate on top of the of the cloud providers infrastructure, they have
to build them security and control and security model that goes across the different providers,
and they're not uniform. AZUAL security is very different from GDCP, especially
when it comes to how they pretended that. That's why right of came to
market with a solution that works across the providers. Another very important thing that
we did, and this was something that we saw as we're entering them market,
saw a huge issue with what we cause overprivileged access. So a lot
of times organizations with intention products to market to support their businesses and growth,
we really had to do from security standpoint in a way that we're not ideal,
like giving a lot of access to users assuming they're going to need that,
or they may be needed at some point but no longer needed later.
That created this exposure risk, exposure when access existed but nobody needed it.
Well. Of course, attackers love that situation. That's why you started seeing
breach after Breach in Capital one was one of the earliest like clouds privileged access
breaches that we came to know about, and that speaks to one problem that
we noticed early on how the current access or the traditional access model did didn't
really translate well to cloud. What I mean by that is when you give
somebody access with assumption they needed twenty four by seven, that access always sits
there and the only thing that prevents somebody else to gain access is a login
name and password. It's a terrible security and it's a very vulnerable security to
protect. So we decided to change that with bred It. We really kind
of invented the newer and better way to do it to eliminate everything when the
user doesn't need that access. So when it comes to human users, kine
of us can sit in front of a computer twenty four by seven by three
sixty five, right, we can do our job at certain hours, but
after that we don't need that access. So what bright it does is automatically
grants that access when the user needs but also removes automatically when that access all
over needed until the next time the user needs it. That's a massive reduction
of the risk exposure and then attack surface. Yeah, well you would mentioned
something that's interesting. You talked about the models, the security models that these
different providers have, and I know for sure that one of the things that
you could do to better secure your environment is to identify where someone logs in,
what office are they in, are they in a different office than they
normally are in, and that would be in a profile around the user.
So the identity management of Chuck, let's say, is that he dials in
from Pittsburgh, Pennsylvania. That's where he works. And if he goes traveling
somewhere, you know, wouldn't it be great to know that he's traveling.
And of course these banks have systems they don't always work very well, but
they say, hey, are you going to be traveling and you say,
yes, I'll be traveling to Austria next week. So if my credit card
comes across in Austria, it's me, So don't block me out when I'm
trying to log into my systems from Austria. Well that's a nice way to
do it, but it's expensive, it's a bit time intense. But these
days it seems to me it should be relatively easy if you have the right
technology in place to identify the pattern of what is normal, and the normal
pattern for Chuck would be he logs in at nine am, he logs out
at five pm kind of deal. And if he logs in at two o'clock
in the morning, oh well, maybe you kick in an extra security loop
to say, hmm, are you really you? And of course people know
these captures. The captors drive me completely bonkers. I hate it, especially
on my phone, because I'm like, I just give up. I'm like,
I won't go in. I don't care, I'm not going to go
Is this a bike? Is this a bike? Is? Okay? It's
very annoying. But the point I'm making here is that you can build a
profile around the user and then understand who that person is, and when they're
doing things like they normally do, you still have security, but at least
it's a lower level of security. When they're doing things they're not normally doing,
that's when you kick in a higher level of security is out about right?
That's harder to say, right, And you're correct that technology today has
come a long way and being able to actually do that and do it with
minimal disruption. To your point, captures were invented in what twenty years ago?
I think, uh, you know, to expand on that little bit,
right, I think, yes, there's a lot of opportunity to improve
that both from security and end users experience standpoint. So one of the things
that we're doing along those lines, when you look at a pretty significant a
number of users pro pride or involves cloud developers, develops engineers, it's one
these folks just have to do a lot of different things during the day,
and there's definitely it's not a very static, sort of a linear pattern of
work, so they jump around a lot of doing this here and something else
there. What we do, what we try to do is gather activity across
you know, during the day, across the environments that they were in and
doing whatever or an engineer could do with standing up a storage you know,
or compute instance or whatnot. So we can actually look at that data from
the from the pattern standpoint over time and say, you know, over let's
say ninety days, the normal pattern for this type of user has been X,
Y, and Z. Why that's important is because we could also detect
when something goes completely in a different direction one day, right, So that
allows us to kick off alerts and triggers to say something is not looking and
feeling right, so the security teams can quickly take a look and understand is
it normal? Could they could be a legitimate instance of that situation, but
we'd rather verify that than let it go right. So that helps us also
enhance, you know, the model of like what we should give to home
because that also helps the data, same data. Analys Analyzing the data helps
us understand what next time, next patch of users, what is the normal
pattern of access they shouldn't so we can make those grants very easily and get
people what they need immediately. But basically, if I understand it, you're
I mean security has to sit in between systems, right, So someone is
on the outside, they're trying to get in to a cloud environment that may
have eight, ten, twelve, twenty different applications. And you know,
you made a good point about developers. I have developer friends and they tell
me that the biggest pain in their job is just logging back into the system.
Logging back into that system. People in the consumer world, now you
have all these different protocols. Oh, it's got to be ten characters and
a special character. It can't be two characters side by side, like you
know, two characters and row all this these goofy sort of bespoke rules that
may not have to come up with different passwords. Then of course Google allows
you to do that password management feature in their system, and that's what I
use. But of course as someone hacks into that, now they've got access
to all your stuff. I mean, these security issues. The sword cuts
both ways, right, the old adage every sword cuts both ways. I
always thought about the key fop. I'm like, oh, key fop,
that's great, unless someone gets your key fop and they can walk through the
parking lot just going like this till they find your car getting a drive away.
So it's like some of these security measures wind up being security risks essentially.
How do you balance that out and how do you sit in between?
So when you actually deploy to a particular client, you're sitting sort of in
a layer outside of their environment. But can you also get in to track
what they're moving? Tell us about that quickly. Yeah. Early in my
career in the security space, somebody said this and it really stuck in my
head. The best security is invisible security, so the end user can't see
there. It's been very hard to actually get get to that stage. But
I think we're getting we're moving in the right direction. We're not quite there.
I'm realizing. I'm realizing we're up in our first break. So stand
by all that thought will be right back. You're listening to the incident out.
Can you IRA stand up to the next financial crisis that our top economists
are saying is at our doorsteps? By allocating a percentage of your IRA into
physical gold and silver with a tax free rollover, you can diversifilings from turbulent
markets and economic downturns by putting your IRA back on the gold standard. Find
out how to safeguard your assets with a tax free rollover with a Genesis Gold
Ira, the only IRA that can hold physical precious metals. Call now for
your free gold and silvery port. Protect your IRA today with one simple phone
call and learn how to qualify for up to ten thousand dollars in foilver called
Genesis Gold Group Empowering Faith driven Stewardship. Eight hundred six four four eight six
one one eight hundred six four four eight six one one eight hundred six four
four six one one. That's eight hundred six four four eighty six eleven.
Can IRA stand up to the next financial crisis that our top economists are say
by allocating a percentage of gold and silver with a tax free rollover, ugns
from turbulent markets and economic downturns. By putting your IRA back on legal standard.
Find out how to safeguard your SS with a tax free rollover with a
Genesis Gold IRA, the only IRA that can hold physical precious metals. Couple
report. Protect your IRA today with one simple funk and learn how to qualify
for up to ten thousand dollars in free silver called Genesis Gold Group. Empowering
faith driven Stewardship eight hundred six four four eight six one one hundred seat six
one one eight hundred six four four eight six one one. That's eight hundred
six four four eighty. When a player's sudden cardiac event brought in now football
game to a halt, it's shown a spotlight on the importance of snout.
With youth sports in full swing, American Heart Association is rallying parents and coaches
to be ready in emergency. To be ready, learn hands only CPR.
It's a skill anyone can learn in minutes. Just visit Heart dot org slash
hands only CPR. I'm supported by Elephant's Health Foundation each year three hundred and
fifty thousand meter rest. When seconds matter most, CPR can be the difference
In the American don gene every one person to learn CPR. If you have
ninety seconds, you can be your family CPR hero. Just watch the American
Heart Association's hands only CPR video at Heart dot org and become a hero.
Now. You can fly anywhere in the world and pay discount prizes on your
airline tickets. Book a flight today to London, Ferris, Madrid, or
anywhere else you want to go and pay a lot less guarantee. You call
the International Travel departm right now at low cost airlines eight hundred two nine eight
five seven eight three eight hundred two nine eight five seven eight three. That's
eight hundred two nine eight fifty seven eighty three game to a halt. It's
shown a spotlight on the importance of CPR readiness. Now, with youth sports
in full swing, the American Heart Association is rounding parents and coaches to be
ready in an emergency. To be ready, learn hands only CPR. It's
a skill anyone can learn in minutes. Just visit Heart dot org slash hands
only CPR hands only. CPR is NASH supported. Welcome back to inside Analysis.
Here's your host, Eric Tavanaughture. Okay, folks, back in front
analysis or truly air Kavanami part forgoes then of bright I br tibe. We're
talking all about security, getting access to systems, how annoying security can be,
but how important it is because when someone gets in, especially with ransomware,
and they hold all your stuff hostage. Like I said, the Colonel
pipeline shows you how much can be held hostage. Major hospitals have been held
hostage by these things, and that's a real problem. But argue, we're
talking a moment ago about how the ideal security is invisible security, which you
know under the covers can be very powerful these days because you can test all
kinds of things. Right where is this person? What device is it?
I mean to me, that's one of the key characteristics, right, is
like is this the device that the person normally uses? I think that's why
you see so much focused on mobile devices these days. And there it is
because there's a signature, there's an IP addressed and there's the unique signature of
that device. I'm using that device and it's with me, it's a run
that. Okay, that's probably good a good person to grant access too.
But tell us more about this invisible serre and hydro. Yeah, so how
will you approach this as certainly, so instead of constantly being destructive and forcing
the user to re authenticated or prove to the system who they are, use
data. We use some things that we can gather without being you know,
interfering with the user and their activity in the system. That helps us be
fairly confident that we're still assistant the legitimate user. There's also systems that we
gather the outside of right that we gather that from. So like the authentication
service provider, which could be anything from Microsoft, Gator to Actor or whatnot,
they do have data that that is very valuable. We also gather some
of our own this proof and validating the user. Ultimately, though, I
think there's definitely enough awareness already even in the end user communities that security is
very important. So if you are going to if we are going to essentrally
enforce certain security rules along the boy of the process, that we do it
in a way that they understand why this is important, especially in communities like
developers. Right A lot of very sensitive infrastructure and data. So we do
we do have some control in the place that or when, the when,
the time and the trigger is there we need to enforce. So one of
them would be to, let's say, have them re authenticate or step up
authenticated as we call it, to to prove that they are still us.
Ultimately, the goal is to make it at least job I would occur upon
log and in other words, on log and in other words, if someone's
logged and already you know, usually they're gonna be working. I suppose they
could walk away and not log out that kind of thing, and then someone
could come up to their machine. I mean, that does happen, But
I'm just guessing that the vast majority of breaches are at log in time,
A fresh cold breach, Is that right, cannily, I don't know what
the stats are truly about that, but that is definitely a very likely scenario.
It's a good guess. Yeah, it's it's you know, when what's
the users inter session, right that that's now an active you know session that
attacker was able to you know, used to be this type of attack called
man in the middle. So if that was at the scenario, then yeah,
the legitimate user wouldn't even know somebody else's piggyback attacks. Is the interactive
user human users not even uh, it's not even involved. For example,
again, when it comes to cloud technology, there's there's a lot that's already
uh, you know, visible and accessible to attackers who would love to just
exploit that rather than trying to exploit a user's session. Right, And that's
where we also have again as an industry, we're playing a catch up game
here trying to protect these non interactive you know, doors and access points into
cloud data and cloud applications. So, for example, how Brider does that
is we have this constant of non human you know or synthetic or machine identity
used the call it that we allow the custom us to define any process,
any technology that requires access to their infrastructure and data to authenticate much like a
human being and provide the validation that who who they as as a non human
identity of machine identity, who it is and or functionality? What API,
what service they can access before they allow that? Right. So this again
adds another component of security here that instead of just assuming whoever's access an API
that is legitimate, trust and verify. Yeah, I love the trust and
verify thing. And you pick up a really good point about API access and
just machine to machine conversations, right, which happen all the time constantly,
and these APIs are hit twenty four to seven. So is that a new
security threat or a relatively new security threat of people mimicking machine behavior in order
to get behind an API grabs some information. Look back out, it looks
normal, It looks like the normal call it goes from, for example,
back and forth. I mean, those are the really precious connections to full
trade, right, is when you're going from one place to another. And
I mean I remember, I think the target breach came in through an HVAC
system or something through an IoT system. So it's like, wow, it
wasn't some user, it was the machine to machine conversation that was cooptable.
You know. The album is again legacy type of mindset and approaches or what
I mean. For example, to detect the user human user breach, typically
security would review the human logging attempts. They wouldn't necessarily look at API logg
in attempts, right, So it's a fundamental issue. Is there enough visibility?
Is there enough data? That's being sort of you know, filtered and
reviewed through security processes to detect all possible access points. Arguably most organizations miss
that, you know, miss something. That's that's why breaches keep happening,
right Yeah, and that as we suggest that can be all that's necessary to
get into a system. What should in terms of the API management stuff,
how do you how do you solve for that? I mean, does your
technology have a sort of pattern recognition too much normal behavior for a period of
time and say okay, this looks normal. Then once you define normal,
you can define what is abnormal? Is that kind of how your security technology
works. I certainly don't want to sound like we can do anything, and
I think the uh, you know, the API type of use case is
it's fair to say our approach has been similar to the model where its security
kind of more as a matter of you know, a guard rate or two
control upon time of that access. Right. So like as I'm describing that
that they you know and be sort of one the white list before they re
allow when it comes to it really utterns for the non human interactive that I
would say it's kind of more of a next next stage problem. It's just
because it's so much more complex and tracking like the human activity and yeah,
it's it's it's one of these one of the most complex prostl Yeah, and
well, so let's talk about the multi cloud side of the equator. A
useful bit of functionality, I can tell you from a business perspective, because
I don't want to have to care about the difference between Azure and GCP and
Amazon Web Services. You folks can care about that, and you folks can
care about adhering to their protocols, which I'm guessing they update on some relatively
frequent basis, so you have to stay on top of how their protocols change.
But of course with well again with APIs, ideally you don't want to
have to deprecate APIs, right, they're APIs that you want them to stay
the same such that everyone can use it the same way they were using it.
But in terms of these different cloud environments, how do you tackle that?
I mean, do you have sort of a layer of abstraction that can
say, Okay, this is for Azure, so use this functionality, this
is for GCP, use that functionality. How does that work? Yeah,
that's a great point. Actually that's not for any when you know, ongoing
aspect of how do you maintain how do you keep up with a very dynamic
world of cloud technology and APIs so, so that's that's actually one of the
inherent benefits of what right of offers that we are we maintain that we are
constantly monitoring and you know, detecting changes and the key functionality that that right
of itself relies on, I say it's GCP or Azure or whatever functionality that
our system depends on to function. That's our job. That's what comes with
the value of righting that the customers don't don't have to you know, worry
about that that because we don't part of our limited our ip of how we
do that, so we we never we never becomes or the point of destruction
for the customer right right now, that's important. So basically you are solving
for the security challenge across these cloud environments for companies that have people using for
the correct to all the three major ones, is that right actually do more
than that we do for major ones including Oracle Cloud infrastructure. Okay, and
there's just a couple of dozen non infrastructure clouds likes of Snowflakes service now opposite
sixty five it's one. Mmm, that's a full time job. Man.
How big is your company? How many people? We are? Fifty?
So for fifty full tigers. But yeah, we're growing fast, and uh
it is what I'm in more than that. What percentage are actual developers and
engineers? Like, out of fifty people, what percentage are people who are
coders or engineers or people of that technical nature? Eight eight percent? Yeah,
that's that sounds about right, because you can't you can't stay on top
of everything. I mean, these each one of these environments keeps changing.
They have updates all the time, and you have to stay on top of
that stuff. Uh it's and it's changing rapidly these days. It seems to
me, how concerned we got a couple minutes luf there, How concerned are
you about quantum computing and quantum going mainstream? Which IBM, I guess indicating
the concerns I've heard is that with quantum computing, all traditional encryption goes out
the window and wind updating myself. Well, there's still are tactics you can
put in place who rebuff those sorts of attacks, like just to you know,
throttle those things. But overall, it does seem to be a very
significant risk that's coming down the pike. What are your thoughts about quantum and
what we do about it. I'll be very great. So I think it's
revolutionary for sure, right, and it's going to definitely have deep impact on
security. But I also know a lot of times the breaching the attacks happen
because of very basic issues and like the following security hygiene more than not having
strong enough encryption in place. So I think as an industry we need to
get our act together first of all to eliminate like these easy paths and for
attackers to get in. But with quantum, I think it's also the benefit
of having better technology for security as well, so the leverage property, then
we will also have better defense, right, So it goes both ways.
Basically, the good guys, bad guys get it. Yeah, it is.
You know that we're talking about a cash list society. Every one's talking
about a cashlest society. Day. I'm not gonna lie. That does consented
dollars, but you can also hack into someone's account and make the money go
away. And our most recent hack on my debit card Google ads. Lucky
for me, we don't that's interesting to have a whole bunch of And they
started small and they started ramping up. It was like twenty dollars, seventy
dollars, forty two dollars, one hundred and fifty dollars. On my Wait
a minute, why why am I broke again? I know I'm not that
foolish, and yeah, because I was hacked again. And just you know,
it frustrates the end user to have these experiences because you think, shouldn't
the banks beyond this kind of stuff? Shouldn't the banks be watching for these
kinds of things. And if you get into the system where you can be
in the banking world transferring money back and forth, well you have to have
some identity somewhere that can be trapped and managed, right, I mean,
I just I'm kind of fascinated at how affected these bad guys are at infiltrating
banking systems because there has to be a signature of where they came from,
right, I mean, I know in the security were a lot of times
they use proxies to kind of bounce around some play it's the place, so
you can't tell where they came from. But when you're pulling money out,
I mean, you're grabbing all kinds of metadata of what system was on,
what the operating system was, what the browser was, what the location was,
all that stuff gets captured. I'm kind of surprised we don't have more
success or maybe we do and I just don't hear about it. What are
your closing thoughts on just the state of security in this world and why it's
still such a problem. Yeah, and certainly the industry has come a long
way, you know, in twenty years, been long enough times for me
to see that. I really still think that, you know, security's job.
There was an interesting you know how many made alias about security being scapegoat
right. It's it's it's a very tough job to have because they always have
to balance security versus you know, a business, you know, priorities and
objectives and especially interfering anything that's important for the business right so right, and
there there's inevitably trade offs. Inevitably, it's always it always comes down to
trade offs, I think it. You know, as an industry, you
know, as the practitioners out there in the feel you know, make decisions
and sometimes hopefully most of the times, whether the right decisions. Sometimes they're
not. And you see outcome news, see the consequences from the vendor community.
I think we are really making some really big, you know, head
raisings and bringing technologies to the practitioners, to the siss of the world to
actually make that balance or decision easier where security doesn't have to cost productivity,
security doesn't have to cost the business, agility and so on. That's I
think as an industry we're making a big, big step towards right. I
feel like that that's for the next ticketute or so. This would be a
huge should be a huge factor in how the how we prove them overall posture
of the industry and the security. Well that sounds good. Art, Well,
thank you so much for your time. Holf you been talking to Art
for GHOSTI and look them up online right as to be R I T I
B dot com will be a two life and five. Do you own an
annuity either fixed rate indextra variable? Are you paying high fees and getting low
returns? If so, Annuity General would like you to have this free book
to learn the pitfalls and mistakes of buying an annuity. The Annuity Dues and
Don'ts for Baby Boomers contains the linon truths about annuities, like how to help
reduce your fees and increase retirement income. And it's free. That's right free.
As a bonus, we'll also throw in a free annuity rate report just
for calling. We researched over one thousand annuities so benefits from financially strong insurers.
You get end Boomers and the annuity rate Report Your rate report both absolutely
free for calling Annuity General Today. Hurry supplies are limited. Call now eight
hundred two four five one six nine seven, eight hundred two four five one
six nine seven eight hundred two four five one six nine seven made a bad
purchase. A timeshare is not an investment. It's a money pit that continues
forever. If you use your time share, that's great. But if you
don't and you want illegally get out of your contract, call my friends right
now at the time Share Exit Hotline. They're an experienced team of lawyers who
help good people like you get out of a time share contract that they just
don't want. Don't throw away your money on maintenance fees, use it for
things you really want. We can help you end your time share contract and
stop the money drain immediately. If you are ready to move on with your
time share, call our team right now. Canstle your time share now with
over two nine oh six seven O five eight hundred two nine oh six seven
O five eight hundred two nine oh six seven fun that's eight hundred two nine
oh sixty seven. Do you need to get your hands on some extra money
right now? Maybe twenty five thousand or more If you're a homeowner. Now
it's perfect time to get cash out about homes in many neighborhoods. You can
use money for anything yours. You can buy an investment property, pay off
higher interest debt, or mailm implements if you need twenty five thousand, fifty
thousand him home values are up and so is your equity. We offer you
a way to use it. No need to use your sittings. Called New
American Funding now and see how much cash out you can get. Call eight
hundred seven one h three seven three nine, eight hundred seven one h three
seven three nine, eight hundred seven one h three seven three nine. That's
eight hundred seven one h thirty seven thirty nine MLS sixty six oh six www
dot MLS, consumer xs dot org. This is not an offer or commitment
to end subject to borrow or improperty qualifications. Not all borrowers will qualify.
Terms and conditions supply equal housing opportunity. Now you can fly anywhere in the
world and pay discount prices on your airline tickets. Book a flight today to
London, Paris, Madrid, or anywhere else you want to go and pay
a lot less guarantee. Call the International Travel Department right now at low cost
airlines eight hundred two nine eight five seven eight three. Eight hundred two nine
eight five seven eight three. That's eight hundred two nine eight fifty seven eighty
three. When a player's sudden cardiac event brought a national football game to a
halt, it's shown a spotlight on the importance of CPR readiness. Now,
with youth sports in full swing, the American Heart Association is rallying parents and
coaches to be ready in an emergency. To be ready, learn hands only
CPR. It's a skill anyone can learn in minutes. Just visit Heart dot
org slash hands only CPR. Hands only CPR is nationally supported by an elevant
Welcome back to Inside Analysis, here's your host, Eric Kavanaugh absolutely okay bolts
back here on Inside Analysis talking all things identity management these days, identity resolution,
Who are we out of the systems we use know who we are and
validate us. Obviously, it's a very huge issue. We were just talking
to Art from bright to all about that and I was reminded of some other
approaches that some folks are doing and something that we're actually working on. So
a little special treat for our avid listeners, I'm going to give you a
stick preview of something that we've been working on here at Inside Analysis of the
Blur group with some of our partners. And the example I wanted to get
first of all was my good buddy Sean Brem from Crowdpoint Technologies and what they've
built so federated ID is at the heart of their mission. What they've really
built is a ecosystem, an e commerce ecosystem that's based upon a blockchain and
proprietary blockchain that they've built, which also doubles as a database. It's not
just the traditional slow blockchain style data structure, but they've done some very clever
things in that regard. But what I find really compelling about their approach is
the fact that there are focused on giving value back to the end user for
the data of theirs that is used to train algorithms. So if you look
at all the hubbub around open ai, for example, and these lawsuits that
have been filed, what did they basically alleged? They say that open ai
went out and scraped all kinds of content, including copyrighted content, and they
use all that material to build out their model, their generative AI model.
Well, it's a good argument if I've used someone's copyrighted material to train my
engine, which I then make money from, while shouldn't they whose content was
used get some piece of that action? And that's traditionally how these things work.
I did see just the other day that there was a judgment rendered in
a court somewhere in the US that basically said gen ai generated content cannot be
copyrighted. Now, how they would know what engine generated the cons places beyond
me, and I think that's frankly an open question. But at least a
standard has now been set. So what does that mean, Well, it
means that there's going to have to be some more work to be done.
I heard that open ai also truncated their sniffing engine. Their engine would determine
whether or not content was created by an open AI engine or a chat GPT
or something like that, which also is interesting. Obviously, they see the
lawsuits coming and they know there's something going to happen here. So what does
this all mean? Well, I can tell you that these large language models,
these foundational models, are absolutely amazing. They are spectacularly powerful, very
very interesting. Yes, we are worried about the trust side of things,
but nonetheless we have to be respectful of the fact that this is going to
change how business gets done. So what does that all mean? Well,
getting back to federated I that was crowdping's vision and their idea is that they're
going to pay attention to when your data is used for something and then pay
you for that small amounts of money first pennies, then dimes and dollars down
the road, is at least how the theory goes. So that helps solve
the identity resolution problem at least in their world. But what we're going to
do here, and this is how I'm going to fuse these topics together here
at the end of our show today the rubric and the Rubric is going to
use a large language model as its text generation tool or engine. But the
moorings, the anchors of truth, the embeddings, if you will, Those
are going to come from trusted experts. And so we're going to do is
reach out to folks and if you're into this, send me an email and
though at inside analysis dot com. If you're an expert in analytics in particular,
these are the folks we're looking to talk to. First, you could
publish your papers or your works, your articles, research reports, etc.
In this system that will then use them and other reports, other trusted reports
as the anchors of truth for the rubric to help folks make decisions about which
analytic tool to use, how to use it, what other tools can be
used in conjunction with it, How could you build a stack? Basically,
what does the modern analytics stack look like? And we're planning on building that
out right now. So it actually uses a technology that I've already had built
called media lens, and media lens I built it. It's a lens with
a Z. It runs a site inside openside hyphen open source dot org and
it uses that right now. What I wanted was an engine that I could
use to spin up a highly focused stream of content that would be useful for
a researcher. So I wanted to stay on top of the open source community.
So that's where we've targeted first. And all I did was went out
and found all these different folks who tweet about open source technologies, who follow
their handles, media lens tracks that they tracked the different handles that I've given
them to watch out for. And then what it'll do is it'll grab any
URL that is shared by these folks with hashtags like open source or drammio or
apache or the other terms, the key terms that are associated with that particular
industry, and that publishes them as pending posts in my environment, and then
I can choose to post them or not. And every time I post,
what I'm essentially doing is building out my content lake. And so this is
where we're going to use the engine to help find these anchors of truth that
will sort of pin down the truth and allow the generative AI functionality to spin
appropriate words around the concepts that the prompt delivers. So what are we talking
about? I mean, really, if you think about Siri and these other
engines for these purposes, they're valuable. They can sort of find information for
you, but they're not really trusted experts in a particular domain. And one
reason for that is because it would be chew off to bite off, if
you will, for the current engine. So right now, series kind of
pointing you to different things on the web or giving you information that is readily
available, like the weather or what time of meeting is, things of that
nature. But when you start getting into really dense and in trade press,
for example, well you're going to need more than that, and that's what
we're focused on. So we're focused on finding the right experts to provide their
materials in a trusted fashion, and then whenever that material gets used via the
rubric by a paying client, the people whose insights were used in that immediate
sort of real time mind meld, they will get rewarded with credits. Now,
it's going to take a while to build this thing up, but the
point is we're going to try to create a center of gravity around the topic
of analytics because there's a finite number of vendors or a finite number of people
who focus on this, and we're looking for help to do that. So,
like I say, if you're hearing this and you think it sounds like
a good idea, send me email info at dm radio dot biz or info
at inside Analysis dot com. Both of those come directly to me, and
we'll be curious to talk to you and maybe show you a preview of this
thing. But the idea is that you really right now, folks are paying
lots and lots of money for Gardner and Forrester and some of these other consultants
or Boston Consulting Group. A lot of very smart people at these companies,
but it's hard to get access to these people. And they just finite human
beings, so they don't know everything, but they know a lot about a
particular domain for example. Well, if you think about the power of these
foundational models to piece together vectors of information from multiple sources, if you get
to a critical mass of embeddings, and this is the key, you need
a critical massive embeddings from trusted sources, then all of a sudden you have
a very interesting, intelligent chatbot that you can counsel to find out information about
big decisions like which technology should we buy, like which technologies work well with
the other. That's another very important thing to understand. It's a lot of
times some technologies don't work together so well, and some do so knowing which
technologies work well in which environments also very useful stuff. There's best practices,
I mean, knowing how to go about setting up a sequel statement to find
certain pieces of information. I mean a lot of people know that, a
lot of people understand sequel, but nonetheless a lot of people don't. And
we're a very interesting phase right now in the world. So are built out
as assistant to help folks understand enterprise technology, get out of the weeds,
do some better answer faster and less expensively. Right, Because if you bring
together all these smart minds and get good content from people who know what they're
talking about, and find to wait those scores, to wait the information and
to align it topically. And that's what these embeddings do. I mean to
kind of cap it off here, embeddings are taxed straight down to And what
the folks did building these large language models is, you know, they did
some amazing work at being able to vectorize information text, so they put it
into numbers such that you could do statistical analysis more easily in fine patterns in
data. Okay, this word is used in this context. It's also used
in that context. When does it mean this? When does it mean that
these are the kinds of solutions that these large language models can provide. They
can give you really good information about what should be in a certain context and
what should not. But the key again is the embeddings. The embeddings that
you get to get closer and closer to the truth. So I just wanted
to tease that fun stuff to you folks online to asialysis dot com, sending
emails dot com. You want to get involved and reha some fun solutions and
different products. M I'm Elizabeth Powers. According to the American Veterinary Medical Association,
thirty eight percent of US households include at least one A legacy Southern in
California's KCAA, the number one talk radio station in the Inland Empire. KCAA
Radio has openings for one hour talk shows. If you want to host a
radio show, now is the time. Make CACAA your flagship station. Our
rates are affordable and our services are second to nine. We broadcast to a
population of five million people plus. We stream and podcast on all major online
audio and video systems. If you've been thinking about broadcasting a weekly radio program
on real radio plus the internet, contact our CEO at two eight one five
nine nine eight hundred two eight one five nine nine ninety eight hundred. You
can skype your show from your home to our Redlands, California studio, where
our live producers and engineers are ready to work with you personally. A radio
program on CACAA is the perfect work from home advocation in these stressful times.
Just type CACAA radio dot com into your browser to learn more about hosting a
show on the best station in the nation, or call our CEO for details.
Two eight one five nine nine eight hundred. Now here's a new concept,
digital network advertising for businesses. Display your ad inside their building. If
a pictures were of a thousand words, your company is going to thrive with
digital network advertising. Choose your marketing sites or jump on the DNA system and
advertise with all participants. Your business ad or logo is rotated multiple times an
hour inside local businesses where people will discover your company. Digital network advertising DNA
a novel way to be seen and remembered. Digital network advertising with networks in
Redlands and YUKAIPA call in the nine O nine area two two nine two nine
three for introductory pricing. That's nine O nine two two two nine two nine
three for Digital network advertising one last time Digital Network Advertising nine oh nine two
two two nine two nine three. Tahebot Club's original pure Poudi Arco supertea comes
from the only tree in the world that fungus does not grow on. As
a result, it naturally has anti fungal, anti infection, anti viral,
antibacterial, anti inflammation, and anti parasite properties. So that tea is great
for healthy people because it helps build the immune system, and it can truly
be miraculous for someone fighting a potentially life threatening disease due to an infection,
diabetes, or cancer. The tea is also organic and naturally caffeine free.
A one pound package off T is forty nine ninety five, which includes shipping.
To order, please visit tehebot club dot com. Tahibow is spelled T
like tom, a h ee b like boy oh. Then continue with the
word T and then the word club. The complete website is Tohebot club dot
com or call us at eight one eight six one zero eight zero eight eight
Monday through Saturday nine am to five pm California time. That's eight one eight
six one zero eight zero eight eight Tebot Club dot com The Tri City Shopping
Center in Redlands is serving up some really cool ice cream at Lamicho Akana.
Then get your chocolates and other delights from Seas Candies. Moms and future moms
who visit the mall can cool off and relax while they get treated like royalty
at Shiny Nails or Francis Nails and then pampered at Texture Hair. The Tri
City Center is filled with retailers who care about you. Shop at the Tri
City Center in Redlands and see why they call it the mall with a heart
with sixty years of fascinating facts. This is the man from yesterday, back
in time, from this time. In nineteen eighty seven, treasure hunters have
found the Titanic's legendary safe and planned to open it during a live TV broadcast.
The Titanic's safe was found on the ocean floor to an half miles below
the surface at the Titanic site. It'll be opened on live TV broadcast in
October here in nineteen eighty seven. Tonight, we will show you for the
first time artifacts which have been lost to the world for more than seventy five
years. We will reveal new evidence which could explain why the Titanic went down,
and we will open the recovered safe and police and discover what surprises they
contain. And from this time in nineteen sixty eight, according to Jean's maker
Levi Strauss, there's been an uptick in Jene sales to women. Some of
it can be traced to actress Donna Douglas, who, as Lama Clappett wears
jeans every week on the Beverly Hillbillies. This has been a films present ice
and from August of nineteen seventy one, singer Lobo says his recent and first
hit, Me and You and a Dog named Boo, had hit written all
over it. Lobo says the dog is real, although not his. Boo
is a German shepherd with Moore at man from yesterday dot Com. The Tri
City Shopping Center in Redlands is serving up some really cool ice cream at Lamicho
Akana. Then get your chocolates and other delights from Sees Candies. Moms and
future moms who visit the mall can cool off and relax while they get treated
like royalty at Shiny Nails or Francis Nails and then pampered at Texture Hair.
The Tri City Center is filled with retailers who care about you. Shop at
the Tri City Center in Redlands and see why they call it the Mall with
a Heart. Every Wednesday at three pm, it's The Uncommon Sense Democrat with
host Eric Bounmt. I love when his people talk about how old Joe Biden
is, but he's just a couple of years behind it. You'll get the
best political commentary and stuff like this. Good night. Join us for the
Uncommon Sense Democrat every Wednesday at three pm on the stations that leave no listener
behind kc AA ten fifty am Man one oh six point five. Bobila here
with my home improvement tip of the day. Gas powered fireplaces have been showing
up in more and more homes in the past few years. They're clean,
easy to use, and add a nice ambiance to the home. However,
at one drawback is the noises they sometimes make. If you hear a popping
noise when the burner's on, it may signal small leaks around joints in the
burner assembly. To test for leaks, first turn off the burner and once
the ceramic logs have cooled off, remove them from the firebox. Next,
mix a bit of liquid detergent with water and pour it into a spray bottle.
Turn the now exposed burner assembly back on and look for any small bursts
of flame that may be popping around the joints. If you don't see any,
try spraying a little detergent makes on the various joints and fittings in the
burner assembly. If you see bubbles, you found the leak. If you
can't find a leak, or the leak you find appears to be a hole
in the assembly itself, you'll want to call in a pro. Get more
info at bob Vila dot com and right here at home. But need Bob
Viva. Was your car involved in an accident or just need help with dents?
All Magic Paint and Body Collision Centers in business for over thirty years.
They're highly trained staff and certified technicians and friendly staff are the best in the
business and treat each car as if it was their own. All Magic Paint
and Body Collision Centers are family owned and offer state of the art equipment and
tools to ensure optimum results. They use the latest technology in computerized color matching
and specialize in frame repairs with their modern laser measuring systems. They're OEM certified
and they have four locations to serve you. All Magic Paint and Body Collision
Centers offer rental car assistance with free drop off and pick up services too,
and their work has a lifetime guarantee. All Magic Paint and Body Collision Centers
are in Narco, East Vale, Marino Valley and in Fontana. Call them
at one eight hundred and sixty one Magic. That's one eight hundred six one
Magic. All Magic Paint and Body Collision Centers one eight hundred sixty one Magic,
All Magic Paint and Allabody says drive carefully. KCAA invites you to join
doctor Sean Pruett, the Pharmacist on call each Monday afternoon at one pm on
KCAA. Doctor Pruett is known as the Pharmacist for the uninsured. Doctor Pruett
listens to your medical questions and he takes your concerns seriously. So tune into
doctor Sean Pruett each Monday afternoon at one pm right here on casey AA Radio
ten fifty am and one oh six point five FM, the station that leaves
no listener behind. Killistina KCAA Lamolinda at one oh six point five FM,
K two ninety three CF Marino Valley, NBC News Radio. I'm Tammy Trehillo.
Extreme flooding is leaving tens of thousands stranded at a music and arts festival
in Nevada. One attendee of Burning Man describes the scene the alkali dust here.
Once it gets wet, it turns into the cakiest, stickiest mud,
And it has just been impossible to get around when people's cars are getting stuck
in the roads, and like I mean, people are like trying to leave
it. A few people are getting out. Organizers first told the crowd Friday
to shelter in place and conserve food and water. Authorities closed nearby roads in
Nevada's Black Rock Desert and are keeping anyone from entering or leaving the event.
Some attendees have left by foot, hiking multiple miles to an accessible road.
At least one person has died. More rain is in the forecast. The
festival is set to wrap up tomorrow. Millions of Americans are on the go
over this Labor Day weekend. Experts predict it will be one of the busiest
travel weekends of the year across the US. The FAA says Atlanta, Los
Angeles, and Denver are among the busiest airports. Triple A says compared to
last year, bookings for flights, hotels, rental cars, and cruises are
all up by four percent. Former Vice President Mike Pence says nobody's buying by
gnomics, while a top y