The information economy as a rod. The world is teeming with innovation as new
business models reinvent every issue industry. Inside Analysis is your source of information and
insight about how to make the most of this exciting new era. Learn more
at inside analysis dot Comside Analysis dot com. And now here's your host,
Eric Kavanaugh. Keep welcome. It's all right, gentleman, Hello and welcome
back. Once again. It's the only coast to coast radio show all about
the information economy. It's time for Inside Analysis. Yours truly is here with
a very special guest. We're going to talk about securities, a problem that
never goes away. It never will go away. It's always going to be
a challenge. It's changing by day. We're talking to our Pergosian's a company
called bright If it's b R I T I V E. And alright,
I'm gonna tell you security. It's one of these issues that only a handful
of people at the company, and my British in this partner one time cracked
a joke. He said there's only one person who has about security and his
name is scape goat, meaning the person who was in charge of security just
gets blamed when something goes wrong and they fire that person and get another person,
but they do the same kind of stuff. But one of the more
clever comments I've heard about security over the years, and I think this is
very, very true. I'm sure you'll agree with this, is that security
is not a thing. It's not one object. It's not a technology,
it's not a process. It's a whole amalgam of education, of protocols,
of technologies, of observability, and just paying attention. You have to pay
attention all the time with this stuff. And I can tell you, folks,
in the last four or five months, I've had my corporate debit card
hacked twice, which is annoying. Once is okay, because that way I
can see and remember all stupid things I signed up for. You get all
the emails that, oh, your credit card was declined, like, yeah,
I know, because it got hacked, and I didn't really want to
go back to you guys. And luckily the just laters around the country here
in America at least have done some good work in not allowing these organizations to
keep hammering you with late fees after it goes away. These days, you
just don't get your service anymore. And it goes away. But nonetheless,
the security issue is so important, it's never going to not be important,
so you always need this cocktail of technologies and processes. And then even still
you're going to get hacked sooner or later, So what's your path to remediation?
There are lots of things to consider here, but if you choice words
or tell us a bit about how you got into the space and what you've
folctured. Yeah, thank you, thanks for having me here. I got
into security, and back then it was more about network security or it security
as they call it. It's certainly involved quite a bit since then, it's
become you know, arguably even at board level issue that's you know that we
see today. But you know, hacks or attacks have gone from just a
network breach to steal some data to on cyber warfare or cyber crime, and
ransomware is one that's is so lucrative these days for the criminals and so disruptive
for many companies in the industry. Right, So it's a very different world
today that we live in. National experience before this company, before Bright,
I've been in a space mostly from consulting and services industry, in that industry
and I started also another company about ten years ago in identity and Access Spanish
minsters Space, but eventually which led you know, and exited that company led
to forming by the UH and specifically focusing on the problem in the cloud,
you know, space or cloud public cloud technologies and building a product to the
market that hows security risks and vulnerabilities that are preventing businesses from adopting and expanding
their public clouds consumption or the clouds adoption. Right, well, let's let's
talk about how you do that, because there are lots and lots of ways,
and I do like that you're focused on identity management because let's face it,
if you're trying to log into a system, the system is trying to
understand, okay, are you the person that you say you are? And
historically that's been largely done by passwords, which of course is a pain because
you have to remember the passwords, and a lot of people use the same
password for everything, and that of course is putting yourself in jeopardy because then
folks can hack in and do all kinds of stuff. And you know,
it was my business partner, doctor Robin Blore, who years ago taught me
that this whole crime network is not just individuals. In fact, the whole
narrative around guy and the foodie being the one who's going in and hacking your
system is very disingenuous. It's it's not a guy in hoodie. Sometimes it
is, but usually there's this whole industry involved. There are people who specialize
in getting access or people who specialize in exploiting that access, and then we'll
just kind of sell their access to other players. And then you have cases
like the Colonial Pipeline, which some folks may recall a while back before the
Russian invasion of Ukraine took down the East coast's ability to get gas to gas
stations. And you know, when I saw that, I thought, I
saw this is an active war. This is not just some ransomware. And
the government has never come out and said that, but I believe it was
an active war. And it goes to show you so someone actually did the
math and figured out, hey, it's shut down distribution on the East Coast,
and that would be a very significant inconvenience and in fact put people jeopardy,
right, ambulances, things that can't get gasoline. That's a pretty big
problem. So it's not just individuals. I mean, to your point,
there is cyber warfare that goes on state sponsored actors, and I think the
folks at Google and Facebook and Who and these other big organizations certainly worked very
hard to stop all that. Your role and how you fit into this bigger
picture. What do you do to enable and sort of provide to all these
conproviders. Now that's that's very very good background, just kind of how are
you like the state of the world? Really? Uh, why why we
decided to really invest in building in technology? There's any important thing to talk
about here. With the clouds technologies and adoption of public cloud, there was
a huge change in paradigm shifts really in the world of you know, security
and identity, specifically in the back ald the critical know it ass when the
data center. The security model was to protect the data center from perimeter aside
from the walls, of course, but there was a perimeter security that work,
you know, firewalls and ideas and so on, and I identities existed
inside the firewall. With public cloud, that was a complete opposite. Identity
essentially became the first and last line of defense when it comes to clouds,
infrastructure and applications. It's fun. That's why identity for us became the first
and biggest security elements to protect and what that means from like examples you gws,
they all have pretty robust security controls and identity models. The challenges for
any organization operates across different technologies and they also operate on top of the cloud
providers infrastructure and security controls and security model that goes across the different providers and
they're not Security is very different than AWS, especially when it comes to identity
and how they protect. That's what right That's why right of came to market
with a solution that works across the cloud providers. Another very important thing that
we did, and this was something that we saw as we were entering the
market. We saw a huge issue with what we call is overprivileged access.
So a lot of times organizations with intention to bring products and new applications to
market to support their businesses and growth, we really had to do things from
security standpoint in a way that we're not ideal, like giving a lot of
access to users assuming they're going to need that or they may be needed at
some point but no longer needed later. That created this exposure risk, exposure
when access existed but nobody needed it. Of course, attackers love that situation.
That's why you started seeing breach after breaching. Capital Wana was one of
the earliest, like clouds, privileged access breaches that we came to know about.
That speaks to one problem that we know. What I mean by that
is when you give somebody access with assumption they needed twenty four by seven,
that access always sits there and the only thing that prevents somebody else to gain
access is a login name and password. It's a terrible security and it's a
very vulnerable security to protect, right, So we decided to change that with
bred it. We really kind of invented the newer a better way to do
it to eliminate everything when the user doesn't need that access. So when it
comes to human users, none of us can sit in front of a computer
twenty four by seven by three sixty five, right, We can do our
job at certain hours, but after that we don't need that access. So
what bright it does is automatically grants that access when the user needs but also
removes automatically when that access is no lover needed until the next time to use
your needs it. That's a massive reduction of the risk exposure and then attack
surface. Yeah, well you would mentioned something that's interesting. You talked about
the models, the security models that these different providers have, and I know
if you could do to better secure your environment is to identify where someone logs
in, what office are they in, are they in a different office than
they normally are in, and that would be in a profile around the user.
So the identity management of Chuck, let's say, is that he dials
in from Pittsburgh, Pennsylvania. That's where he works. And if he goes
traveling somewhere, you know, wouldn't it be great to know that he's traveling.
And of course these banks have systems they don't always work very well,
but they say, hey, are you going to be traveling and you say,
yes, I'll be traveling to Austria next week. So if my credit
card comes across in Austria, it's me, So don't block me out when
I'm trying to log into my systems from Austria. Well that's a nice way
to do it, but it's expensive, it's a bit time intense. But
these days it seems to me it should be relatively easy if you have the
right technology in place to identify the pattern of what is normal, and the
normal pattern for Chuck would be he logs in at nine am, he logs
out at five pm kind of deal. And if he logs in at two
o'clock in the morning, oh well, maybe you kick in an extra security
loop to say, hmm, are you really you? And of course people
know these captures. The captors drive me completely bonkers. I hate it,
especially on my phone because I'm like, I just give up. I'm like,
I won't go in. I don't care, I'm not going to go
Is this a bike? Is this a bike? Is? Okay, It's
very annoying. But the point I'm making here is that you can build a
profile around the user and then understand who that person is and when they're doing
things like they normally do, you still have security, but at least it's
a lower level of security when they're doing things and not normally doing that's when
you kick in a higher level of security. Is out about right. That's
harder to saying right, and you're correct at Technology today has come a long
way and being able to actually do that and do it with a minimum disruption.
To your point, captures were invented in what twenty years ago, I
think, uh, you know, move that both in security and end users.
Some of the things that we're doing along those lines. When you look
at a pretty significant a number of users for Pride or involves cloud developers,
DevOps engineers, swe they will just have to do a lot of different things
during the It's not a very static, sort of a linear pattern of work,
so they jump around a lot of doing this here and something else there.
What we do, what we try to do is gather activity across uh,
you know, during the day, across the environments that they were in,
whatever an engineer could do with standing up a storage you know, or
compute instance or whatnot. So we can actually look at that data from the
from the pattern, stampo over time and say, you know, over let's
say ninety days, the normal pattern for this type of user has been X,
y and Z. Why that's important is because we could also detect when
something goes completely in a different direction one day, right. That allows us
to care alerts not looking and fear right can quickly take a look and understand
is it normal? Could they could be a legitimate instance of that situation,
but we'd rather verify that than let it go right, So that helps us
also enhance you know, the model of like what we should give to home
because that also has the data, same data, and analyzing the data helps
us understand what next time, next patch of users, what is the normal
pattern of access they shouldn't so we can make those grants very easily and immediately.
But basically, if I understand it, you're I mean security have to
sit in between systems, right, So someone is on the outside, they're
trying to get in to a cloud environment that may have eight, ten,
twelve, twenty different applications. And you know, you made a good point
about developers. I have developer friends and they tell me that the biggest pain
in their job is just logging back into the system. Logging back into that
system. People in the consumer world, now you have all these different protocols.
Oh, it's got to be ten characters and a special character. It
can't be two characters side by side, like you know, two characters in
a row. All this these goofy sort of bespoke rules that mean you have
to go with different passwords. And then of course Google allows you to do
that password management feature and they're a system and that's what I use. But
of course if someone hacks into that, now they've got access to all your
stuff. I mean, these security issues the sorts both ways, right,
the adage every sword cuts both ways. I always thought about the key fop.
They're like, oh, key fop, that's great, unless someone gets
your key fop and they can walk through the parking lot just going like this
till they find your car getting a drive away. So it's like some of
these security measures wind up being security risks essentially. How do you balance that
out and how do you sit in between So when you actually deploy to a
particular client, you're sitting sort of at a layer outside of their environment.
But can you also get in to track what they're moving? Tell us about
that quickly. Yeah, And early in my career in the security space,
somebody said this and it really stuck in my head. The best security is
invisible security, so the end user can't see there. It's been very hard
to actually get get to that stage, but I think we're getting getting Definitely
we're moving in the right direction. We're not quite there. I'm realizing I'm
realizing we're upping our first break. So stand by all that thought, we'll
be right back. You're listening to the inside now. What if you could
own a piece of the future. What if you could build your next castle,
not on sand, but on the bedrock of a modern blockchain ecosystem.
The first Internet gold rush made millionaires, but the third wave is just gathering
now and anyone can get in on the action. Hop online to crowdpointtech dot
com to learn how you can secure a foothold in the blockchain revolution. Whatever
your passion, wherever you want to go in life, there's an opportunity awaiting
you right now. Go to crowdpointtech dot com to learn how the blockchain will
fuel the next generation of innovation in this globally connect crowdpointtech dot com your trusted
agent in an untrusted world. What's the longest running radio show in the world
focused on data? DM Radio. Want to be a guest sometime? Send
an email to info at DM radio dot biz. That's info at DM radio
dot biz. What if you could own a piece of the future. What
if you could build your next castle, not on sand, but on the
bedrock of a modern blockchain ecosystem. The first Internet gold rush made millionaires.
The second wave is minting billionaires. But the third wave is just gathering now
and anyone can get in on the action. Hop online to crowdpointtech dot com
to learn how you can secure a foothold in the blockchain revolution. Whatever your
passion, wherever you want to go in life, there's an opportunity awaiting you
right now. Go to crowdpointtech dot com to learn how the blockchain will fuel
the next generation of innovation in this globally connected world. That's crowdpointtech dot com.
Your trusted agent in an untrusted world. What's the longest running radio show
in the world focused on data? DM Radio? Want to be a guest
sometime? Send an email to info at DM radio dot biz. That's info
at em radio dot biz. Do you need to get your hands on some
extra money right now? Maybe twenty five thousand or more If you're a homeowner,
Now it's a perfect time to get cash out. Well in many neighborhoods
like yours have gone up in value. You can use the money for anything
it's yours. You can buy an in their interest debt, or make home
improvements. If you need twenty five thousand, fifty thousand or more, now
is the time home values are up and so is your way to use it.
No need to use your savings. Called New American funding now and see
how much catch you out you can get. Call eight hundred seven one h
three seven bridge seven one h three seven three nine, eight hundred seven three
nine, eight hundred seven one h thirty seven sixty six h six Www dot
MLS, sumer xs dot org. This is an opera or commitment to end
subject borrow or improperty qualations. Not all borrowers will qualify. Terms and conditions
apply equal housing opportunity. When a player in cardiac event brought a national football
game to a halt, it's shown a spotlight on the importance of CPR readiness.
Now, with youth sports in full swing, the American Heart Association is
rallying parents and coaches to be ready in emergency. To be ready, learn
hands only CPR. It's a skill anyone can learn in minutes. Just visit
Heart dot org slash hands only CPR. Hands only CPR is nationally supported by
Elevant's Health Foundations. Fly anywhere in the world and pay discount prices on your
airline tickets. Book a flight today to London, Paris, Madrid, or
anywhere else you want to go and pay a lot less guarantee, call the
International Travel Department right now at low cost airlines eight hundred two nine eight five
seven eight three. Eight hundred two nine eight five seven eight three. That's
eight hundred two nine eight fifty seven eighty three. Welcome back to Inside Analysis.
Here's your host, Eric Tavanaughture. Okay, folks back in front Analysis
or through the air Kabana with art forgoes in of bright br Ike Ibe.
We're talking now about security, getting access to systems, how annoying security can
be, but how important it is because when someone gets in, especially with
ransomware, and they hold all your stuff hostage. Like I said, the
Colonial pipeline shows you how much can be held hostage. Major hospitals have been
held hostage by these things and that. But argue, we're talking a moment
ago about how ideal security, which you know out of the covers, can
be very powerful these days because you can test all kinds of things. Right,
where is this person? What device is it? I mean to me
that's one of the key characteristics, right is like is this the device that
the person normally uses? I think that's why you see so much focus on
these mobile devices these days, and there it is because there's a signature,
there's an IP addressed and there's the unique signature of that device. I'm using
that device and it's with me, it's run that. Okay, that's probably
a good a good person to grant access too. But tell us more about
this invisible security and how you folks do it. Yeah, so how will
you approach this? As certainly a combination of different things, and it does
include something you mentioned right, So instead of constantly being the abruptive in forcing
the user to re authenticate or prove to the system who they are, we
use data. We use some things that we can gather without interfering with the
user and their activity in the system that helps us be a fairly user.
There's also systems that we gather the outside of writer that we gather that prompt
so like the authentication service provider, which can be anything from Microsoft Gator to
Actor or what they do, have data that that is very valuable. We
also gather some of our own data that helps us prove and validating the user.
Ultimately, though I think there's definitely enough awareness already even in the end
user communities that security is very important. So if you are going to if
we are going to centrally enforce certaincurity rules along the way along the process,
that we do it in a way that they understand. And why this is
important especially in communities like developers, right, because they deal with a lot
of very sensitive infrastructure and data. So we do have some control in a
place that when the when the time and the trigger is there, we need
to enforce. So one of them would be to, let's say, have
them re reauthenticate or step up authenticated as we call it, to prove that
there are still gemate users. Ultimately, the goal is to make it at
least disruptive and allow them to do their job. I would have to think
that the vast majority of breach incidents occur upon logging in. Other words,
if someone's logged in already, you know, usually they're going to be working.
I suppose they could walk away and not log out that kind of thing,
and then someone could come up with their machine. I mean, that
does happen, but I'm just guessing that the vast majority of breaches are at
log in time. A fresh cold breach, is that, right, Kenn
We I don't know. What the stats are truly about that, But that
is definitely a very likely scenario. It's a good guess. Yeah, it's
it's you know, when what's users in session, right, that that's now
an active you know session that attacker was able to you know, it used
to be as type of a tackle man in the middle. So if that
was the scenario, then yeah, the legitimate user wouldn't even know somebody else
is piggybacking on that session, right. I think there's another very concerning trend
in the growing type of attacks is when the interactive user human users not even
uh it's not even involved. For example, again, when it comes to
cloud technology, there's there's a lot that's already uh you know, visible and
accessible to APIs and attackers who would love to just exploit that rather than trying
to exploit a user session. Right, And that's what we also have again
as an industry, we're playing a catch up game here trying to protect these
non interactive you know, doors and access points into cloud data and cloud applications.
So for example, how Brider does that is we have this constant of
non human you know or synthetic or machine identity us and calling that we allow
the customers to define any process, any technology that requires access to their infrastructure
and data to authenticate much like human being, and provide the like validation that
who who they as as a non human identity, machine identity, who it
is and or functionality? What API, what service they can access before they
allow that? Right, So this again adds another component of you know security
here that instead of just assuming whoever's access an API is legitimate, trust and
verify. Yeah, I love the trust and verify thing. And you pick
up a really good point about API access and just machine to machine conversations right
constantly as APIs are hit twenty four to seven. So is that a new
security threat or a relatively new security threat of people mimicking machine behavior in order
to get behind an API, grabs some information, pull it back out.
It looks normal, It looks like the normal call. It goes from into
it quick book in my bank for example, back and forth. I mean,
those are the really precious connections to infiltrate, right is when you're going
from one place to another. And I mean I remember I think targets fact
system or something. So it's like, well, it wasn't some user,
it was the machine to machine conversation that was co opted, and that's just
as dangerous as any human loss. For an example, you know, the
problem is a type of mindset and approaches don't work when it comes to cloud
what I mean, for example, to detect a user human user breach,
typically security would review the human logging attempts. They wouldn't necessarily API log in
it. So it's a fundamental issue. Is there enough visibility? Is there
enough data? It's being sort of you know, view through security processes to
detect all possible access points. Arguably most organizations miss that, you know,
miss something. That's that's why breaches keep happening, right yeah, and that
as we suggest, that can be all that's necessary to get into a system.
What should in terms of the API management stuff, how do you how
do you solve for that? I mean, does your technology have a sort
of pattern recognition component where you can watch normal behavior for a period of time
and say, okay, doesn't want you to define normal, you can define
what is abnormal? Is that kind of how your security technology works. I
certainly don't want to sound like we can do anything and everything. To be
honest with you, I think the uh you know, the API type of
use case is it's fair as much mostly to try to standardize and make it
similar to the human active model, where security controls can be as a matter
of a guard rail or a gay or security control upon time of that access.
Right, So that process that's going to kind of has to prove and
validate, you know, and be sort of on the right list before they
view up. When it comes to really defining patterns for the human interactive that
I would just kind of more of a next, next stage problem. It's
just because it's so much more complex and tracking like the human activity and yeah,
it's it's it's one of these one of the most complex problems that needs
to be solved. Talking about the multi cloud side of the equation here.
That is a very useful bit of funkntionality. I can tell you from a
business, I have to care about the difference between as your and gu folks
can care about that, and you folks can care about adhering to their protocols,
which I'm guessing they update on some relatively frequent basis, so you have
to stay on top of how their protocols. Again, APIs ideally you don't
want to have eyes that you want them to stay the same such that everyone
can use it the same way they were using it. But in terms of
these different cloud environments, how do you tackle that? I mean, you
have sort of a layer of abstraction that can say, okay, this is
for as your so use this functionality, this is for GCPU. Yeah,
that's a great point actually that a lot of people don't even think about the
whole ongoing you know, ongoing aspect of how do you maintain how do you
keep up with a very dynamic world of you know, cloud technologists. That's
actually one of the inherent benefits of what Brighte of offers that we are.
We maintain that we we are constantly monitoring and you know, detecting changes and
the key functionality that that right of itself relies only it's GCP or Azure or
whatever opera function that's our job. That's what the customers don't don't have to,
you know, worry about that that that you know, individually, they
don't need to monitor because we do. And that's part of our limit of
our IP, but our limit of our IP of how we do that so
we never we never becomes or the point of destruction for the customer right right
now, that's important. So basically you are solving for the security challenge across
these cloud environments for companies that have people using a AWS for one thing,
you do all of the three major ones. More than that, we do
four major ones, including Oracle Cloud infrastructure okay, and there's a couple of
dozen non infrastructure clouds like Snowflake Service. Now it's one mm. That's a
full time job. Man. How big is your company? How many people?
We are? Fifty full time team members. Yeah, it is what
I'm in. More than that, what what percentage are actual developers and engineers?
Like, out of fifty people, what percentage are people who are coders
or engineers or people of that technical nature. That sounds about right, because
you can't you can't stay on top every I mean these each one of these
environments keeps changing. They have updates all the time, and you have to
stay on top of that stuff. It's and it's changing happily these days.
It seems to be up there. How concerned are you about quantum computing and
quantum going mainstream, which IBM I guess indicate should be happening into five years
or so, because one of the concerns I've heard is that with quantum computing,
all traditional encryption goes out the window and you're gonna have a very hard
time dealing with it. Now, in my simple mind, I'm thinking to
myself, well, there's still are tactics you can put in place to rebuff
those sorts of attacks, like distributed to knowledge service attacks, things of this
nature. There are things you can put a place to you know, throttle
those things. But overall, it does seem to be a very significant risk
that's coming down the pike. What are your thoughts about quantum and what can
we do about it? I'll be very quick. So I think it's revolutionary
for sure, right, and it's going to definitely have a deep impact on
security. But I also know a lot of times the breaching, the attacks
happen because of very basic issues and like the hollow security heyme more than not
having so I think as an industry we need to eliminate like the for attackers
to get in. But with quantum, I think it's also the benefit of
having better technology for security as well, so the leverage property then we will
also have better defense, right, So it goes both ways. Basically,
the good guys get the bad guys get it. Yeah it is. You
know that we're talking about a cashlest society. Everyone's talking about a cashlest society
to day. I'm not gonna lie. That does concern me. I know
that you can counterfeit printed dollars, but you can also hack into someone's account
and make the money go away. And our most recent attack on my debit
card, it made it look like it was Google ads, like we were
just buying Google ads, and lucky for me, we don't buy Google ads.
So I'm like, hmm, that's interesting to have a whole bunch of
And they started small, and they started ramping up. It was like twenty
dollars, seventy dollars, forty two dollars, one hundred and fifty dollars.
I'm like, wait a minute, why why am I broke again? I
know I'm not that foolish, and yeah, because I was hacked again,
and just you know, it frustrates the end user to have these experiences because
you think, shouldn't the banks beyond this kind of stuff. Shouldn't the banks
be watching for these kinds of things. And if you get into the system
where you can be in the banking world, transferring money back and forth.
Well, you have to have some identity somewhere that can be trapped and managed,
right, I mean, I just I'm kind of fascinated at how affected
these bad guys are at infiltrating banking systems because there has to be a signature
of where they came from, right, I mean, I know when the
security were a lot of times they use proxies to kind of bounce around from
place to place, so you can't tell where they came from. But when
you're pulling money out, I mean you're grabbing all kinds of metadata of what
system was on, what the operating system was, what the browser was,
what the location was. All that stuff gets captured. I'm kind of surprised
we don't have more success Or maybe we do and I just don't hear about
it. What are your closing thoughts on just the state of security in this
world and why it's still such a problem. Yeah, certainly this just come
a long way, you know, again, twenty years for me to see
that. I really still think that, you know, security's job. It
was an interesting, you know comment made earlier is about the security being scapegoat.
Right, it's it's it's a very tough job to have because they always
have to balance security versus you know, a business, you know, priorities
and objectives and especially interfering anything that's important for the business. Right so and
there there's inevitably trade offs. Inevitably, it's always it always comes down to
trade offs. I think, you know, as an industry, you know,
as the practitioners out there in the field, you know, make decisions
and sometimes, hopefully most of the times are the right decisions. Sometimes they're
not, and you see outcome. Do you see consequences from the vendor community.
I think we are really making some really big, you know, headries
into bringing technologies to to the practitioners, to the uses of the world to
actually make that balance or decision easier where security doesn't have to cost productivity,
security doesn't have to cost the business a jolly and industry with real secutors or
this would be to be a huge factor in how the how we food an
overall posture about the industry and the securities. Well that sounds good, Art,
well, thank you so much for your time. Folks. We talking
to Art Pergothi and look them up online. Right if Briibe dot Com will
be back to elect to that of your IRA into physical gold and silver.
With a tax free rollover, you can diversify and safeguard your holdings from downturns
by putting your IRA back on the gold standard. Find out how to safeguard
your ass with a tax free rollover with the only IRA that can hold physical
precious metals. Call now for your free gold and silver report. Protect your
IRA today with one simple phone call and learn how to quantify for up to
ten free silver called Genesis Gold Group Empowering Faith Driven Stewardship eight hundred six four
four eight six one one eight hundred six four four eight six one one eight
hundred six four four eight six one one that's eight hundred it's four four eighty
six eleven. Do you own an annuity either fixed rate indextra variable? Are
you paying high fees and getting low returns? If so, Annuity General would
like you to have this free book to learn the pitfalls and mistakes of being
an annuity. The Annuity Duds and Donuts for Baby Boomers contains the little known
truths about annuities, like how to help reduce your fees. It's free,
that's right. Also throw in a free annuity rate report just for calling.
We researched over one thousand annuity it's in benefits from financially strong insurers. You
get annuity duds and don'ts for baby boomers and the Annuity Rate Report both absolutely
free for calling. Annuity General Today. Hurry supplies are limited. Call now
eight hundred two four five one six nine seven, eight hundred two four five
one six nine seven eight hundred two four five one six ninety seven. That's
eight hundred two four five sixty. Do you own a timeshare? Well,
face the facts. You made a mistake, You made a bad purchase.
A timeshare is not an investment. It's a money pit that continues forever.
If you use your time share that's great. But if you don't and you
want illegally get out of your contract, call my friends right now at the
Timeshare Exit Hotline. They're an experienced team of lawyers who help good people like
you get out of a timeshare contract that they just don't want. Don't throw
away your money on maintenance fees, use it for things you really want.
We can help you end your time share contract and stop the money drain immediately
if you are ready to move on with your time share, Call our team
right now. Cancel your time share now with a free call. Eight hundred
two eight nine O four one three, eight hundred two eight nine O four
one three eight hundred two eight nine O four one three. That's eight hundred
two eight nine zero four thirteen. When a player's sudden cardiac event brought a
national football game to a halt, it's shown a spotlight on the importance of
CPR readiness. Now, with youth sports in full swing, the amen of
Heart Association is rallying parents and coaches to be ready in an emergency. To
be ready, learn hands only CPR. It's a skill anyone can learn in
minutes. Just visit haart dot org slash hands only CPR. Hands only CPR
is nationally supported by Elephant's Health Foundation. Now you can fly anywhere in the
world and pay discount prices on your airline tickets. Book a flight today to
London, Paris, Madrid or anywhere else you want to go and pay a
lot less guarantee. Call department right now at low cost airlines eight hundred two
nine eight five seven eight three eight hundred two nine eight five seven eight three.
That's eight hundred two nine eight fifty seven eighty three. Welcome back to
Inside Analysis. Here's your host, Eric Kavanaugh. Okay, back here on
Inside Analysis, talking all things identity management these days, identity resolution. Who
are we out of the systems we use? Know who are invalidate us?
Obviously it's a very huge issue. We were just talking to Art from bright
to all about that and I was remind to some folks are doing and something
that we're actually working on. So a little special treat for our avid listeners,
I'm going to give you a stick preview of something that we've been working
on here at Inside Analysis, at the Blur Group with some of our partners.
You. First of all was my good buddy Sean Brem from Crowdpoint Technologies
and what they've built so federated ID is at the heart of their mission.
What they've really built is a ecosystem, an e commerce ecosystem that's based upon
a blockchain and proprietary blockchain that they've built which also doubles as a database,
so it's not just the traditional slow blockchain style data structure. But they've done
some very clever things in that regard. But what I find really compelling about
their approach is the fact that there are focused on giving value back to the
end user for the used to train algorithms. So if you look at all
the hubbub around open ai, for example, and these lawsuits that have been
filed, what did they base at the alleged They say that open ai went
out and scraped all kinds of content, including copyrighted content, and they use
all that material to build our model, their generative AI model. Well,
it's a good argument. If I've used someone's copyrighted material to train my engine,
which I then make money from, will shouldn't the people whose content was
used get some piece of that action? And that's traditionally how these things work.
I did see just the other day that there was a judgment rendered in
the court somewhere in the US that basically said gen ai generated content cannot be
copyrighted. Now, how they would know what engine generated the content in the
first place is beyond me, and I think that's frankly an open question.
But at least a standard has now been set. So what does that mean,
Well, it means that there's going to have to be some more work
to be done. I heard that open ai also truncated their sniffing engine engine
would determine whether or not content was created by an open AI engine or a
chat GPT or something like that, which also is interesting. Students coming and
they know there's something going to happen here. So what does this all mean?
Well, I can tell you that these large language models, these foundational
models, are absolutely amazing. They are spectacularly powerful, very very interesting.
Yes, we are worried about the trust side of things, but nonetheless we
have to be respectful the fact that this is going to change how business gets
done. So what does that all mean? Well, getting back to Federated
ID, that was Crowdpoints Vision, and their idea is that they're going to
pay attention to when your data is used for something and then pay you for
that small amounts of money first pennies, then dimes and dollars down the road.
Is at least how the theory goes pollution problem at least in their work
here, and this is not going to fuse these topics together here at the
end of our show today, we're creating something that we're calling the Rubric,
and the Rubric is going to use a large language model as its text generation
tool or engine. But the moorings, the anchors of truth, the embeddings,
if you will, Those are going to come from trusted experts. And
so what we're going to do is reach out to folks and if you're interested
in this semi email and so it inside analysis down, if you're an expert
in analytics in particular, these are the folks we're looking to talk to.
First, you could publish your papers or your works, your articles, research
reports, etc. In this system that will then use them and other reports,
other trusted reports as the anchors of truth for the rubric to help folks
make decisions about which analytic tool to use, how to use it, what
other tools can be used in conjunction with it, How could you build a
stack? Basically, what does the modern analytics stack look like? And we're
planning on building that out right now. So it actually uses a technology that
I've already had built called media lens, and media lens I built it.
It's a lens with a Z. It runs a site inside opensource dot org
right now, inside hyphen opensource dot org, and it uses that right now.
What I wanted was an engine that I could use to spin up a
highly focused stream of content that would be useful for a researcher. So I
wanted to stay on top of the open source community. So that's where we've
targeted first. And all I did was went out and found all these different
folks who tweet about open source technologies, who follow their handles media lens tracks
that they track the different handles that I've given them to watch out for.
And then what it'll do is it'll grab any URL that is shared by these
folks with hashtags like open source or drammio or apache or the other terms,
the key terms that are associated with that particular industry, and that publishes them
as pending posts in my environment, and then I can choose to post them
or not. And every time I post, what essentially doing is building out
my content lake. And so this is where we're going to use the engine
to help find these anchors of truth that will sort of pin down the truth
and allow the generative AI functionality to spin appropriate words around the concepts that DROMPT
delivers. So what are we talking about? I mean, really, if
you think about Siri and these other engines that are now currently used for these
purposes, they're valuable. They can sort find information for you, but they're
not really trusted experts in a particular domain, and one would be a big
thing to chew off, to bite off, if you will, for the
current engine. So right now, serries just kind of pointing you to different
things on the web or giving you information that is readily available, like the
weather or what time of meeting is, things of that nature. But when
you start getting into really dense areas of content, like in trade press around
analytics, for example, well you're going to need more than that, and
that's what we're focused on. So we're focused on finding the right experts to
provide their materials in a trusted fashion, and then whenever that material gets used
via the rubric by a paying client, the people whose insights were used in
that time mind meld, they will get rewarded with credits. Now, it's
going to take a while to build this thing up, but the point is
we're going to try to create a center of gravity around the finite number of
vendors or a finite number of people who focus on this, and we're looking
for help to do that. So, like I say, if you're hearing
this and you think it sounds like a good idea, send me email info
at dm Radio dot biz or info at inside Analysis dot com. Both of
those come directly to me, and we'll be curious to talk to you and
maybe show you a preview of this thing. But the idea is that you
really right now, folks are paying lots and lots of money for Gardner and
Forrester and some of these other consultants or Boston Consulting Group. A lot of
very smart people at these companies, but it's hard to get access to these
people. And they are just finite human beings, so they don't know everything,
but they know a lot about a particular domain for example. Well,
if you think about the power of these foundational models to piece together vectors of
information from multiple sources, if you get to a critical mass of embeddings,
and this is the key, you need a critical massive embeddings from trusted sources,
then all of a sudden you have a very interesting intelligent chat bond that
you can counsel to find out information about big decisions like which technology should we
buy, like which technologies work well with each other. That's another very important
thing to understand. It's a lot of times some technologies don't work together so
well, and some do so knowing which technologies work well in which environments also
very useful stuff just best practices, I mean, knowing how to go about
setting up us certain pieces of information. I mean a lot of people know
that, a lot of people understand sequel, but nonetheless a lot of people
don't. I think, so our rubric is going to be an assistant to
help folks understand enterprise technology and out of the weeds do do some playing around
and get some better answers faster and less expensively. Right, Because if you
bring together all these smart minds and get good content from people who know what
they're talking about, and find ways to wait those scores, to wait the
information and to align it to topically. And that's what these embeddings do.
I mean, just to kind of cap it off here, embeddings are mathematical
representations of text strengths. That's really what they boiled down to. And what
the folks did building these large language models is you know, they did some
amazing work at being able to vectorize information text so they turn it into numbers
such that you can do statistical analysis more easily in fine patterns in data.
Okay, this word is us context. It's also used in that context.
When does it mean this? When does it mean that? These are the
kinds of solutions that these large language models can provide. They can give you
really good information about what should be in a certain context and what should not.
The key again is the embeddings. The embeddings allow you get to get
closer and closer to the truth. So I just wanted to tease that fund
stuff to you. Folks hop online to inside analysis dot com sending info at
inside analysis dot com. You want to get involved in an Southern California's MindSpring
legend you love and the best talk KCA Litilindaca, Littilindaca, Little Melinda.
Now here's a new concept, digital network advertising where businesses display your ad inside
their building. If a picture is worth a thousand words, your company is
going to thrive with digital network advertising. Choose your marketing sites or jump on
the DNA system and advertise with all participants. Your business ad or logo is
rotated multiple times an hour inside local businesses where people will discover your company.
Digital network advertising DNA a novel way to be seed and remembered. Digital network
advertising with networks in Redlands and YUKAIPA call in the nine on nine area two
two nine two nine three for introductory pricing, that's nine O nine two two
two nine two nine three for digital network advertising one last time Digital network advertising
nine O nine two two two nine two nine three. Tahebo te Club's original
pure Poudi Arco Superta helps build red corepuscles in the blood, which carry oxygen
into our organs and cells. Our organs and cells need oxygen to regenerate themselves.
The immune system needs oxygen to develop, and cancer dyes in oxygen.
So the tea is great for healthy people because it helps build the immune system,
and it can truly be miraculous for someone fighting a potentially life threatening disease
due to an infection, diabetes, or cancer. The tea is also organic
and naturally caffeine free. A one pound package is forty nine ninety five which
includes shipping. To order, please visit toebot club dot com. Tebow is
spelled T like tom, A H, E, B like boy, oh,
then continue with the word T and then the word club. The complete
website is to hubot club dot com or call us at eight one eight six
one zero eight zero eight eight Monday through Saturday nine am to five pm California
time. That's eight one eight six one zero eight zero eight eight tebowt club
dot Com with sixty years of fascinating facts. This is the man from yesterday,
back in time to this time. Nineteen fifty eight, mister Greenjee of
cbstv's Captain Kangaroo sings a song on the show. It's called Erie Canal and
he did it once before and it's even been released as a children's record.
I've got an old mule runner name it South. Fifteen years on Erie Canal
cheets good old worker and a good old pal years and from this time.
In nineteen eighty, Farah Fawcett and Ryan O'Neill announced that it'll soon be married.
Ryan O'Neill was married to actresses Joeanna Moore and Lee Taylor Young. Farah
Fawcett was married to Lee Majors. And what is that like when you when
you go out, when you travel around the country and people say, oh
my god, there she isn't because and people got they say, oh look
there's a Farrah Fawcett. Well, different cities have different reactions. I love
New York, New York clubs me and from September of nineteen sixty six,
the Monkey's debut on NBCTV and Last Train to Clarksville is their first single.
Take the last at the station because major reservation are slowly with Moore at Man
from Yesterday dot com. The Tri City Shopping Center in Redlands is serving up
some really cool ice cream at Lamicho Akina. Then get your chocolates and other
delights from Seased Candies. Moms and future moms who visit the mall can cool
off and relax while they get treated like royalty at Shiny Nails or Francis Nails,
and then pampered at Texture Hair. The Tri City Center is filled with
retailers who care about you. Shop at the Tri City Center in Redlands and
see why they call it the mall with a heart. At least since the
invention of the wheel, people have fixed, tinkered with, and improved every
device they've possessed. It's been a human right. But after several thousand years,
suddenly legal clauses are being tucked in purchase agreements, saying that today's owners
of products must not even peak, much less poke inside the inner workings of
our devices. Makers of anything with a computer chip in it, everything from
your car to your toothbrush. Have been especially vehement about this rewriting human nature
by outlawing our right to repair. Yes, they assert, you own the
thing, but we own the intangible ideas that make it work. So at
the product malfunctions, you must return it to us and pay us a premium
to repair it. Plus, they prattle, you could hurt yourself trying to
do it yourself, so trust us. Bovine excrement mark Steve Woseniac companies inhibit
your rights so they can have power control over everything. Is he some consumer
radical? No. Woseniac is the co founder of Apple, the multibillion dollar
global goliathe that is the world's biggest producer of consumer electronics. He's a pall
that Apple has now become a fierce opponent of self repair. He says,
we wouldn't have had an Apple except that early innovators like him grew up in
a very open technology world from the start, He points out, openness helps
spread innovation and consumer demand. So why stop the self repair community? He
asks two big reasons. Besides letting corporations lock in monopoly profits from the repair
industry, it also dissuades customers from bothering with repairs. Just throw the thing
away and buy a new one. This is Jim High are saying. If
you wonder where's such massive, deadly levels of pollution by lead, mercury,
plastic, et cetera come from look to the gross throwaway ethic of big tech
profiteers like Apple. Tune into The Ferran Dozier Show, Music marks Place in
Time, the soundtrack to life Sunday nights at eight pm or KC eight a
radio playing the hottest hits and the coolest conversations Sunday nights at APM on The
Ferran Dozier Show. Within the ray of music, talk sports, coming the
outreach and veteran resources and the hits from the sixties, seventies, eighties,
nineties and today's hits. The Ferran Dozier Show on KCA Radio on all available
streaming platforms and alto six point five GM in ten fifty am The Ferran Dozier
Show or KCA eight Radio. Was your car involved in an accident or just
need help with dents? All Magic Paint and Body Collision Centers in business for
over thirty years. They're highly trained staff and certified technicians and friendly staff are
the best in the business and treat each car as if it was their own.
All Magic Paint and Body Collision Centers are family owned and offer state of
the art equipment and tools to ensure optimum results. They use the latest technology
and computerized color matching and specialize in frame repairs with their modern laser measuring systems.
They're o EM certified and they have four locations to serve you. All
Magic Paint and Body Collision Centers offer rental car assistance with free drop off and
pick up services too, and their work has a lifetime guarantee. All Magic
Paint and Body Collision Centers are in Narco, East Vale, Marino Valley and
in Fontana. Call them at one eight hundred sixty one Magic. That's one
eight hundred six one Magic. All Magic Paint and Body Collision Centers one eight
hundred sixty one Magic, All Magic Paint and Auto Body says drive carefully.
CACAA Radio has openings for one hour talk shows. If you want to host
a radio show, now is the time. Make CACAA your flagship station.
Our rates are affordable and our services are second to nine. We broadcast to
a population of five million people plus. We stream and podcast on all major
online audio and video systems. If you've been thinking about broadcasting a weekly radio
program on real radio plus the Internet, contact our ceo add two eight one
five nine nine ninety eight two eight one five nine hundred. You can skype
your show from your home to our Redlands, California studio, where our live
producers and engineers are ready to work with you personally. A radio program on
CACAA is the perfect work from home avocation in these stressful times. Just type
CACAA radio dot com into your browser to learn more about hosting a show on
the best station in the nation, or call our CEO for details two eight
one five nine nine eight hundred. For several years, CACAA has been marketing
the Youngevity brand of nutritional and personal care products. Our experience with Youngevity has
been one hundred percent positive, so we are pleased to recommend them to you.
Regarding nutritional supplements, we recommend pollen Burst in the berry flavor and tangy
tangerine two point zero in the tablet form. For regularity issues, we recommend
three day cleans and for personal care, we recommend morning hydration cream. You
can shop online for Youngevity at www dot KCAA team dot com, or you
can order by phone by calling eight hundred nine eight two three one nine seven
and tell customer support that you are part of the KCAA team. Youngevity is
an American company based in San Diego. Call Youngevity at eight hundred nine eight
two three one nine seven and ask about monthly autoship that allows you to buy
Youngevity products at wholesale prices. That number again eight hundred nine eight two three
one nine seven. Killistina KCAA, Lomolinda at one oh six point five FM
K two ninety three CF Burrito Valley, NBC News Radio. I'm Chris Garraggio.
Families who lost loved ones in the nine to eleven terror attacks will be
gathering at the World Trade Center Memorial in Manhattan for the twenty second anniversary of
the attacks Monday. During the ceremony, names of the nearly three thousand victims
killed will be read out loud. There will be moments of silence, belltolls,
and music as part of the ceremony. For the first time this year,
there will be a tribute at the memorial glade after the ceremony to recognize
people who have died from, and are still experiencing illnesses tied to the aftermath
of the attacks. The glade was dedicated in twenty nineteen on the seventeenth anniversary