
The Audit - Cybersecurity Podcast
Brought to you by IT Audit Labs. Trusted cyber security experts and their guests discuss common security threats, threat actor techniques and other industry topics. IT Audit Labs provides organizations with the leverage of a network of partners and specialists suited for your needs.
We are experts at assessing security risk and compliance, while providing administrative and technical controls to improve our clients’ data security. Our threat assessments find the soft spots before the bad guys do, identifying likelihood and impact, while our security control assessments rank the level of maturity relative to the size of the organization.
The Audit - Cybersecurity Podcast
Field Notes: Coffee, Gliders & Trademark Scams
Ever wonder what the hosts of The Audit talk about when the mics are rolling but the formal interview isn't happening? This Field Notes episode gives you exactly that—unfiltered conversations covering everything from coffee preferences and glider flying to trademark scams targeting cybersecurity professionals.
Nick and Eric dive into Eric's latest aviation adventures (spoiler: gliders are apparently safer than planes with engines), share war stories about scam calls trying to exploit trademark filings, and swap tales about expensive vet visits. Plus, hear some nostalgic cybersecurity stories from the Wild West days when networks ran without firewalls and people could taste peanut butter straight from the jar at grocery stores.
Key Topics:
- Eric's glider pilot training and why it's "safer" than powered flight
- Trademark registration scams targeting IT professionals
- Coffee roasting tips from flight instructors
- Cybersecurity nostalgia: Temple University's router-only network
- Why Eric kept a scammer on the phone for 5 minutes during pickleball
Whether you're here for the cybersecurity insights or just want to know why Nick prefers Diet Coke to Coke Zero, this episode delivers the authentic conversations that happen between industry pros. Don't miss Eric's glider safety argument—it might just change your perspective on risk management.
#cybersecurity #infosec #fieldnotes #aviation #scamcalls #itauditlabs
We're live. Excellent. What's going on, Nick?
Speaker 2:Welcome everybody. How's it going? Good, good, good here. How are you, eric?
Speaker 1:Good, we got a couple of podcasts coming out. We're trying this one at a different time, right Noon central time. I'm not sure if I like it. I kind of like that early morning.
Speaker 2:I'm secretly worried about the morning with another kid on the way getting on at 7 30 every morning, or uh, I guess it's just once a month, so we'll play with the time, but uh, um, we'll see how it goes. I like the 7 30 start time better as well we'll see you, though, in what three weeks? Three weeks today's the last day until not much sleep. Well, I probably won't get much sleep for another 18 years, but at least for the next few weeks it should be pretty rugged you got to be excited.
Speaker 1:That's awesome.
Speaker 2:Yeah, we're very excited. Mother-in-law flew in yesterday to help watch our daughter now while we're at the hospital, so she'll stay here. But nice to have another set of hands, especially when we get back, maybe get a little nap in and and mima can uh take care of both the girl, both the girls that's fantastic yeah, very excited, thank, you, yeah, and we've got uh sip cyber.
Speaker 1:I think that's going live today jen matze's podcast where she's visiting different coffee shops and doing a five-minute or so overview of some cyber things. Yep, which will be fun.
Speaker 2:Is that live today, nick? Yeah, I think it should be going live today. We'll double-check everything, but it should be going out and the field notes from last time went out today, so we've got a lot in the hopper going out. We're looking forward to hearing the feedback on Jen's SIP Cyber Just another way to get out in the community, spread the word of cybersecurity. Check out another coffee shop or local business that she chooses and, you know, leave everybody with. You know maybe some extra knowledge, or you know just some good piece of information that maybe they didn't think about.
Speaker 1:So the last time we were talking about coffee right Cause we were drinking coffee getting started. Now it's noon. We've all had our coffee. Um you an afternoon coffee guy or no?
Speaker 2:I'm a morning coffee and then after that we're hitting the Diet Coke.
Speaker 1:Okay.
Speaker 2:We get off the coffee, we go to the DCs.
Speaker 1:Diet Coke, not Coke Zero.
Speaker 2:I prefer Diet Coke but I don't dislike Coke Zero. I like them both. But yeah, even when I was in the military we had some Diet Cokes and Rippets. Anybody else in the military out there will know exactly what I'm talking about. When we had the Rippets, we had the half can size. I think it was a six-ouncer or an eight-ouncer, it was one of those two sizes. It wasn't a full can, but they came in by the pallets and we had them in the back of the trucks and I think they're outlawed from the military now. I don't know if they had just too much caffeine in one shot or what the deal was, but, um, when we start talking about caffeine, I always think about uh, drinking, drinking rippets all day.
Speaker 1:But coffee in the morning, diet coke in the afternoon nice, I'm a coke zero guy, diet coke's okay, but I prefer opposite of you and um, so I've been tinkering with different coffees and we were talking last time about you know what we were drinking, and um, so I was doing some research from I got put onto this by one of the flight instructors. I'm working on my glider rating and I go down to the hangar one day and he's got this popcorn popper sitting outside the hangar and this is like, say, maybe nine, nine o'clock in the morning or so, and the popcorn popper is out there and it's it's got coffee beans in it. So he's ordering his coffee beans from, I think, this place called sweet martha's, something like that, and, um, they send him the, the green beans, because apparently coffee is only good within seven days of roasting, something like that I mean.
Speaker 1:if you're a true connoisseur. I don't know.
Speaker 2:I had no idea.
Speaker 1:But yeah, he made a good cup. Beans were right there, roasted and then ground burr, not blade grinder. And yeah, we had an espresso before we went out for a flight, I guess.
Speaker 2:I have a lot to learn about coffee because I don't know about the different ways to get the beans ready or prepare the beans. I do have to say and don't kill me in the comments anybody we got Tim Horton's ground for the coffee machine. That's what I had last time we were on. Not good, it's not good coffee.
Speaker 1:Well.
Speaker 2:I don't call it ground coffee in general.
Speaker 1:I mean that's like going and getting bulgers right you, you gotta grind it yourself I used to.
Speaker 2:We did do that in the past not regularly, but it has been done. I'll have to try it again.
Speaker 1:Have to try it again why did you get tim hortons?
Speaker 2:no, no reason, just saw it. Had to try it, try something different. Um, we were on a subscription I think I talked about this last time from uh uh, black rifle coffee. Um, they do, like you know, they send you the the bags, uh, you know, every month or whatever. So we're getting a silencer. Smooth was our favorite and uh, we are. We ran out so ran over across the street. Um, anybody that knows texas at all will know heb uh grocery store. It's the greatest grocery store chain in the country and uh, shout out to heb, sponsor us if you like and get us some good coffee. But, yeah, not on board with Tim Horton's ground, but you make a good point. Maybe it's just the same either way.
Speaker 1:Would you go up in a glider? No, would you rather go in the glider or one with an engine.
Speaker 2:Well, one with an engine.
Speaker 1:But you won't go up in that either.
Speaker 2:I'll go up in a Delta plane.
Speaker 1:So with the glider or a military jet they tow you behind another airplane, right, they tow you up to about 5 000 feet you can go a little less and then they drop you off. Essentially pull the tow, it disconnects, and then you're able to glide around and you're looking for these thermals underneath clouds.
Speaker 1:So that's what the thermals are warm air rising and then they cool and condense as they ascend, as they ascend, and that's why you have those kind of cottony clouds in the summertime that are maybe about 3,000 feet or so. So as the day heats up, the sun's heating the ground, get these thermals, form these clouds, and that's what you'll see birds of prey circling in the thermals right. So I've been in a couple of those thermals before. Where you've got there's some sort of eagle or something in there with you which is really cool, and you're just kind of trying to find the thermal circle up and then glide to the next one. But that's one form of gliding. And in the mountains there's you have the mountain waves from the wind coming over the mountains and then you can go up to tens of thousands of feet how long are you gliding for?
Speaker 2:is there like a limit, like well?
Speaker 1:you can go down but but how?
Speaker 2:what? I guess that the goal would be to stay up as long as possible. I would assume, yeah. So what is that like? What kind of time frame are we looking at? Is it like two minutes, or is it like a half hour, or uh, 15.
Speaker 1:I think my shortest was 12, longest was 25 that's a lot, yeah, a lot longer than I would expect it from a 5 000 foot drop, because the gliders have a great glide ratio like 48 to 1, which means for every 48 feet forward they'll lose one foot.
Speaker 2:So you have two people in the glider, two people in the glider Instructor behind Super long wingspan? I would assume yes. So now, when you're getting towed on the runway, what's that experience like? Are we getting jerked around and all of a sudden we're getting towed on the runway? What's that experience like? Are we getting like jerked around and all of a sudden we're like getting towed off the ground, or what Is it a pretty smooth takeoff.
Speaker 1:Yeah, it's pretty smooth, right? You just you're kind of leveling the wings that the tow plane pulls forward, and then you're really just keeping the wings neutral so they're not dragging on the ground back and forth, and then you'll come up before the tow plane usually because you glide obviously better than the airplane. So you'll be just maybe five feet off of the runway behind the tow plane, and then, as the tow plane comes up, you just have to keep the glider, keep the wings of the tow plane just above the horizon. So you're just following up, trying not to jerk too much on the tow plane or too much side to side, because that makes it a little difficult for the tow.
Speaker 2:Plane pilot seems sketchy, no matter what I mean, so there's got to be an emergency detail both.
Speaker 1:yes, you have the. The tow rope is attached to the glider and you can always pull the release on that and the tow plane can do the same. But the window of safety is really 200 feet. So if you have an engine out, say in the tow plane, then the emergency procedure is to land straight ahead. At the airport that I fly out of, there's a small field off to the right on one of the ends of the runway, so you know that if you need to ditch out you can just go to that field and then if you're above 200 feet I think it's 500 feet you can actually just circle around and land back on the the runway you got to be on your best behavior.
Speaker 2:If you're going down, if you're dishing out, you're going to be in your bed.
Speaker 2:Well, that's what you were telling me. If we go up in your plane, something happens. There's a lot of safety mechanisms but we still have to be at our best behavior going down. But when you're, when you're talking about the glider, anybody listening? I hope you find this interesting because I like this stuff. But I'm imagining, like the old I can't remember when it was developed, but a long, long time ago the U-2 spy plane. It's super, super long wingspan that's riding both sides of the runway and you would know better than me but there's only the two wheels, I think, that are on parallel to each other. So it you know. Tippy, yeah, very tippy.
Speaker 1:But it's once you you have wind going over it and over the rear stabilizer, the rear, the rear fin, it's good, right, then you're. You turn the fin in the back with the pedals, sure.
Speaker 2:So once you, once you get the rating, then you, you just rent one of these and you go up on a Saturday and exactly have 22 minutes of fun.
Speaker 1:Yeah, or longer. Right, you can take cross country trips there's these.
Speaker 1:There's these whole competitions where people are trying to go for long distance glides. Sometimes you got to land in a field, get somebody to to to tow you back, or, or you know, drive you back somebody to tow you back or drive you back. But I mean, that's not optimal. But yeah, it's surprising, right, because I fly the regular plane as well and people usually are like, yeah, that'd be fun to go for a ride, except for you. But I don't know that anybody wants to jump in the glider and I'm like, well, the glider is safer.
Speaker 2:Really how Okay. This is. What we want to understand is how is it safer?
Speaker 1:Because it can glide much, much better than the airplane, right, I mean, yeah, you could pull the parachute in the airplane, but if you do that, right, I mean, you're done, you're coming down wherever it wants to come down. You're likely going to survive that, but it's not going to be fun where the glider is designed to glide and you could land in a field Not ideal, but you're staying within the distance of the runway.
Speaker 2:And if you're gliding down, I'm sure you're coming in pretty soft.
Speaker 1:Sure, yeah, you just have to be committed. So you have a spoiler, these air brakes, right. So when you're lined up and ready to land, you deploy the spoilers, which is essentially a bar that comes up out of the center of the wing and that causes you to lose lift pretty quickly. The only thing about the glider that you don't have in the airplane is you've got one shot at the landing. So once you're committed, spoilers are out and you're in a descent. If another plane pulls out on the runway or you know there's animals on the runway, you know you're pretty committed to that landing, which is why you want to get set up properly for it first.
Speaker 2:Well, I'm glad you like it so much. Yeah, I don't think you'd catch me dead in a glider. For some reason, the thought of not having an engine is scarier than having an engine yeah. Yeah, Cool yeah what else are we? Talking about I don't know I got so sidetracked on this topic about. You know all the piloting you do and going out to these conferences. You know being able to fly yourself out there.
Speaker 1:Now could you glide to Wild west hackenfest in october I mean, I guess technically you could, but the winds have to be right. You definitely need a tow plane to get you there. There's gliders now that have an engine and a propeller in them, so if you need to stretch your distance you can, but it's not something that you would. I wouldn't want to do it yeah, not, not very convenient.
Speaker 2:You just jump on the tesla and have it drive you there so I was going to tell you about the.
Speaker 1:So we recently it audit Labs registered for a trademark, right, yep, and going through that process process is easy enough, some online forms, but the aftermath of the scams that I've got have been crazy. So I've gotten, I think, three letters from different companies. Like that the letter will be you know I'll say trademark publication. You know I'll say trademark, trademark publication. And then you know there's a publication fee of 1460, 1460. Then here's another one for 1450. And it's just these companies that it's public information when somebody registers for a trademark and then they're trying to scam you.
Speaker 1:I was playing pickleball last week after work and I got a call from a number that was out of Boston and I was expecting a call from that area. So I answered it on my watch and it turns out that it was a. It was a scam call for this trademark. So I figured well, what the heck? I'll see how far this goes. The guy he was really trying to get me to give him a credit card number to charge $575 for this, something like I couldn't use the registered trademark until I paid the money. I was like, well, I already paid when I signed up for it and he's like well, you know, he had some excuse about why it didn't work.
Speaker 1:And I was like you know we're an information security company, right, and you know we do this, right. If you go to look at our website, you could see we're an information security company. Do you really think this scam is going to work on me? Oh, information security company, do you really think this scam is going to work on me? Oh, no, it's not a scam. Like he kept going. I mean, you know I'm playing right, like you know, like we're shouting at each other on the pickleball, and he's like but it was, uh, it was pretty good. So I think I kept him on like five minutes.
Speaker 2:We should get uh, we should get hopefully we should set it up sometime. Get, hopefully, a scam caller to call in live on one of the shows. That would be good.
Speaker 2:I had one recently too, similar to that. I was getting these texts and we've talked about this at the office and teams about getting the text about your crypto wallet. It's Coinbase or something. It's an MFA, something you know, it's an mfa code or whatever it is and I had somebody call me about it and they were definitely casing the situation. They were like oh, they were looking for transactions between cryptocom and coinbase and so I was doing the same thing as you, like, I'm just walking through with them, giving them bs answers, and he was asking me how much money I had in each accounts, and then we're just going down the rabbit hole. Why is this relevant? Well, obviously I knew he's asking me this to see if I'm a worthy person to investigate or try to continue this. You know he's casing the situation, you know. But normal people that maybe aren't educated or in this space would think, oh, wow, like this guy's actually trying to help me, but not thinking, well, if I have a hundred dollars in my account, they're not going to waste their time. But if I tell them, oh well, I have two bitcoins, right, they're gonna work. They're, they're in, they're gonna get worked, yeah, right, you're gonna get worked.
Speaker 2:It was like that movie. I don't know if you've seen it. It's called the beekeeper. Yes, do you remember that with jason statham? Yeah, uh, similar to that lady that got uh like her whole life savings or whatever was uh stolen from her. But anyways, yeah, um, we were texting this morning. You had a recent vet visit with the dog. We had one too.
Speaker 1:My mom's 92, right Moved in with us. We moved into this new house and along came a dog and a cat and yeah, that was a new experience. I think the dog got into the cat litter and got sick and I was up every hour I think 14 times from Saturday, from Friday night to Saturday, going out because the backyard is just a mud pit right now. So I got to take the dog on a leash every time and that was not fun. So I was just picturing. You know, nick, that's going to be your life. For years Mine was. You don't want that life.
Speaker 2:I don't blame you. I don't blame you. Yeah, once you the dogs. It's such a commitment, especially if you got to take them on a leash, and nobody's happy taking out a dog at three o'clock in the morning, after you've already, or two or one or four go to the vet the next day, you know, emergency visit, whatever.
Speaker 1:And uh, they came away with four different medications. They wanted to do x-rays, and all this is like, well, hold on, let's just, yeah, let's try this, then we'll. Then we'll, you know, bring the dog back, if need be, and, nick, get the dog home. First round of meds after that, no more diarrhea. He's good, good, right? So, uh, that's good. I don't know if it was just time or if the medication actually did something well either way, they fleeced you for half a G.
Speaker 2:Oh yeah, it's worth it. We take care of the dogs. We had one too. My wife actually took one of our dogs to the vet. He was getting some scabs on the end of his ears and we were thinking it was allergies. Come to find out and he'd been shaking his head back and forth. The vet said no, he's got an ear infection and the blood vessels and the end of his ears are dying because he's flapping his ears so hard. And I was like, yes, I would never have thought that he's had historically bad allergies. So we thought it was just an allergy like whatever you know. So I took him to the vet. Because of that, it started to develop. And hundreds of dollars later, and some medication, allergy shots etc, etc. We figured out that uh, who would? I would never have thought that, that it was killing the blood vessel. So it was killing, you know, the hair was leaving and he was developing scabs.
Speaker 1:All good now, but it never ends around here I was on on my own too over the weekend, like just me, taking care of the dog, my mom and four cats. Yeah, no, kelly was out.
Speaker 2:So you had a zoo going on. I had an absolute zoo the cats are self-sufficient though.
Speaker 1:Those cats are a pain in the ass. Nick, you love the cats. They don't get along with the dog. The cats don't get along with the dog.
Speaker 2:The cat's not gonna it's just yeah, this is. This is probably good, because people listen to the audit. Now they're hopefully listening to the field notes and they're trying to. Now they're understanding who the real cat person is. The truth is coming out in field notes who the real cat person is.
Speaker 1:I'm reminded of a story the last time we got together that story I was telling when I was a kid, of when we were going across the United States and the trucker got stuck in the bright lights, I don't know. I was just talking over these stories with my mom and she's like remember the time that we were in the grocery store and after she said it we were in a Safeway in California, I think it was. We lived at the time in San Jose, staying with my mom's sister. At the time I was young, maybe six or so, and we were in the supermarket and I remember a woman pulls down a jar of peanut butter, opens it up, takes her finger in and tastes the peanut butter, right, and you're like, wow, did I just really see that? Yeah, and that was before they started sealing all of the lids because of the Tylenol scandal back in the day.
Speaker 1:But I mean it's hard to believe now you know where everything is sealed, that there would be a time where it wasn't right. Because I mean people do all sorts of horrible stuff and like why would that woman do that? I don't know, I wanted to taste it horrible stuff. And like why would that woman do that I don't know. I wanted to taste it, I guess, but just the product, just whack and blammer.
Speaker 1:I mean it's the same thing with cyber right. I mean all of the stuff that was going on in the in the late nineties. You know you just run around with machines that didn't have any protection on them. One of the first networks I was exposed to over at Temple University they ran a network, no firewalls, it was all router-based. They thought that was cool at the time.
Speaker 2:Is it still cool? They learned the lesson.
Speaker 1:They were learned the lesson, but yeah, they were. They were pretty proud of the fact. I had a guy I worked with um left and went over to temple and then I went over to visit him one day and he was telling me about how their network was configured and you know, they were using all these sure cells or whatever, um, but that's how they were doing firewalls. But I mean, that was kind of back in the heyday where just figuring things out yeah well, I think we can keep going on this.
Speaker 2:Is there anything else you got to get off your chest? Nothing I think. Uh, yeah, we could certainly keep talking for for hours, but I think that this will wrap up the second episode. Um, probably have one middle of October. I'll be back from a baby leave on the seventh.
Speaker 1:Cybersecurity awareness month. You're coming back, yep.
Speaker 2:We've got a lot in the hopper for that. Jen's got the four part series weekly coming out. So if you guys uh, you know you want please join us, for that Jen's got a lot of really good information that she's going to share, necessary for all walks, whether you're further along in your career or not, we'd love to see everybody join, share it to your friends and please check out the first episode of Field Notes that's up now, and Cyber Sips and the Audit. But thanks guys for joining the second episode of Field Notes awesome, nick, yep, thanks all. And CyberSips and the audit. But thanks guys for joining the second episode of Field Notes Awesome, nick, yep, thanks all.