Explicit Interview with Frank Trezza about Pentesting & Infiltration
Ep. 44

Interview with Frank Trezza about Pentesting & Infiltration

Episode description

Interview with Frank Trezza about Pentesting & Infiltration

This week’s Monero challenge: Copy & paste some text to us from any of guest Frank Trezza’s websites for a chance to win 0.01 XMR!

This week’s Monero winner height & blockhash: 3336974, 5c822569c8440c10444dbeebc4780b035bc60b925668cc4230602d6eaed7fb35

This week’s Monero winner candidate list: almagest, ayn, inkstain, OliverChase, RN, ScandiTiger88

00:00:00 Senate hearings for Trump’s cabinet

00:06:51 Angela McArdle and the Libertarian Party strategy going forward

00:14:56 Plane crash over DC

00:21:02 Back to senate hearings

00:22:47 Whose mayor is worse, Chicago or LA?

00:26:04 Deportations starting

00:31:29 Random silliness

00:37:46 Lyft being sued for not driving a fatty

00:40:02 More on the DC plane crash

00:49:32 Frank Trezza on pentesting & infiltration

Resources discussed on the show:

Steele Trezza & Associates (https://steeletrezza.com/), for when you need a pentesting team.

CounterSurveil Podcast (https://countersurveil.net/), a podcast for those interested in cybersecurity, new episodes every Monday evening.

Download transcript (.srt)
0:00

Alright, welcome to the Canary in the Cage Podcast. I'm Ron Morgan, my co-host Dave Havlicek.

0:17

We're here to entertain you, educate you and hopefully make you laugh. So what the hell

0:23

is going on in this world today?

0:24

Oh, we got a lot of fiery stuff going on in the Senate.

0:29

Yes, we do. But we'll get to that in a few minutes. So with Trump being in office and

0:33

he is coming in swinging off chainsaw, which I love so far. Yeah, I know he's free. He's

0:38

done more though in his first somebody, eight days, nine days than most presidents do in

0:44

a whole lifetime.

0:44

That's wild. I never would have expected that from anyone.

0:47

So but with Trump being in office now, and I'm kind of digging the way he's going, I took

0:52

some time to reflect on Biden.

0:53

Okay.

0:55

And the guy might have been a genius.

0:57

Yeah, why is that?

0:59

I've never seen one person encompass all three stooges into one body.

1:06

I mean,

1:07

Well, there were actually like five stooges, weren't there?

1:09

Well, no, no, no, but

1:10

Which three are you talking about?

1:11

Well, it's okay. So all five did slapstick. It's all different versions of slapstick comedy.

1:17

Sure.

1:17

You know, some would, some were the aggressor, some were the, yeah. So but he's just, he's been

1:22

able to, because I've, yeah, okay. You got Curly Joe and, and ship.

1:26

And yeah, ship and Curly Joe. No.

1:30

Because there was some, some relatives in there too. And I just, Larry Mohan, Curly and

1:36

Curly Joe were family members. I believe they were related.

1:40

Okay. I don't

1:41

I guess I should sort, I just don't believe me. I guess I, I don't know that much about it really.

1:45

But it's slapstick comedy, but they all do their own version of slapstick.

1:49

And that son of a bitch, Biden killed them all. No, I mean, come on, fallen upstairs, fallen

1:55

downstairs, ship misplaced.

1:57

Well, you know what we got to do is take a compilation of all that and like put the

2:01

cartoon sounds on it. Like, why has nobody done that yet? I haven't seen that.

2:05

I've seen the videos of like all the bullshit that he did, but not to the cartoon sounds.

2:09

And actually, if we're going to do that, we have to do, oh, what is the name of that sound?

2:14

I used to have was the ringtone. I've come up. It's the, it's the, the cartoon running.

2:19

Oh, I don't know the name of the sound, but no, but there's a name to it. I actually had to look

2:23

it up because they put us a ringtone. It's you run, but then you slide and then the frying pan sound.

2:30

So that was my ringtone for a while. And actually I was in a meeting when that happened. I'm like,

2:35

whatever, the old it.

2:36

Well, we have the soundboard here too, but we didn't program that to do that. That would be fun.

2:41

Oh, well, I think we can.

2:42

I know we have this one. We have the rimshot. Is that the rimshot? Yeah, the D. I don't know what

2:46

the other, the one of them is jazz and then I don't know what the other two are. The program

2:50

of that might be a good one. That is my favorite. The cartoon running is my favorite sound because

2:54

it was used in multiple comics. Like Fred Flintstone did it. Yeah. Yeah, they all, I mean, it was, it

3:00

was kind of not in a barbarous running sound. So I had looney tunes that used the two didn't they?

3:06

Maybe they, I don't know, maybe they didn't. Maybe I don't know. I just with copyright

3:09

laws and all that other bullshit. Well, back then it was a lot more free, you know, like,

3:13

like people didn't attack each other about that shit. Oh, I wasn't going to bring this up. So I

3:17

have no real information on this, but there was a lady in New Zealand who ordered a sandwich at a

3:21

sandwich shop and she was eating it. She bit into something hard that was an orange like

3:26

plastic thing. She bit into it. She said, what? And then she opened it up and she started recording

3:30

and it was a knife. Someone wrapped the knife up. She's the New Zealand. So all the Americans

3:36

were like, Sue, you can Sue, you can become a millionaire. And her response was, I don't want

3:41

to sue and get that idea in trouble. I just, I didn't hurt. I'm not hurt, you know. I'm like,

3:47

that's pretty much a good definition of how we are versus how some other countries are.

3:51

I'm surprised they didn't come in a roster for having a knife. I mean, in New Zealand, like.

3:56

That is true. So we have Senate hearings. Mind you, I'm a bit behind. So I'm doing an RFK

4:06

Jay. Okay. I get hurt that today. I'm sorry. RFK Jay. Yeah. Yeah. It's all there.

4:12

Him and Bernie Sanders went to lock horns a little bit and Bernie Sanders did not come out

4:18

the victor. No, he did not. So, so this is my interpretation of Bernie Sanders. Sir,

4:24

you create a company that sells onesies. You must stop selling those onesies. Well, sir, I don't

4:32

run that company anymore. I reside for no, it's my mission in life to stop the sale of onesies.

4:40

Unless you're going to make them in my size. So that's my interpretation of Bernie Sanders.

4:47

Did you, did you see the quote where he said, do you promise to negotiate something or other

4:54

like Medicare prices? Yeah. And RFK starts answering, well, Trump has said he wants to

4:59

negotiate and then Bernie cuts him off and says, well, negotiate a big one though.

5:04

And RFK is like, it's the word you literally just used. I can't do any interpretations

5:10

of anybody except Bernie Sanders. Cause it's got to bring your shoulders up and just talk like this.

5:16

So Bernie Sanders, there don't know Robert RFK Jay fucking nailed his ass. He's like,

5:23

I did, I, it's something about taking donations. Yeah. And remember,

5:27

RK Jay goes, well, you know, you are the, the number one senator taking the most money from the,

5:32

from a soup from big pharma. I did not take money from big pharma. And he was trying,

5:37

he kept trying to talk over RFK Jay. And he goes, no, you took 1.5 million, blah, blah, blah.

5:42

He just kept talking and we're not going to, this is not for discussion now.

5:47

You know, here's what I don't understand. Like, are these Democrats trying to get these guys

5:53

confirmed because like, by sending the most extreme retard people, like Senator Warren and

6:00

Bernie Sanders and like you're making the, the Republican rhinos be like, oh, maybe I like these

6:07

guys. So you know that there's a saying that the shot hurt around the world. Yeah. I actually

6:14

forget what war that were, what they were, where they were reference. I forgot. I mean, it's not

6:18

a big deal. But this is like the, the mass exes of the Democrat party around the world.

6:24

It's like they're going to be stuck with their trans people. They're blue-haired people. That's

6:29

the young people that dye their hair blue, not old people. I don't want old people harassing me.

6:32

So this is like, kind of, to kind of change the subject a little bit, this is our chance as

6:36

libertarians to just fucking take over. Oh, what? Take over anything. So we're going to,

6:41

anything, whatever we can. So I picture this, where we're holding the line and Chase Oliver's

6:48

got the sword on him. No, no, no, not Chase Oliver. We're following Chase Oliver. Not Chase

6:51

Oliver. Well, but he's our, he's our head of the party. No, I don't get it. No, he's not. Yeah, he is.

6:56

No, he's not. We will not have this discussion. Angela McCarticle is the, then McCartie.

7:01

Then she just bailed ship. She's like, fuck the libertarians. I'm going to hit pay and

7:06

the Republican party. That's taking something over. What are you talking about? What are you

7:09

talking about? She, that's literally what I just said. It's our chance to take over.

7:13

Wait, she even realized the libertarian party is not what it used to be.

7:16

That is not what she did at all. You are retarded. She also proved that we are the

7:22

farm team for the Republican party. You are literally retarded. So, okay, let me give you,

7:26

because we are literally, every time you do the retarded and stupid line, let me give you an

7:31

analogy of what I think was going on here. So imagine us don't, and don't interject because

7:36

I know what you're going to say. You and I are in a gunfight. Okay? And you run out of ammo,

7:42

and you start throwing all your guns at me. This is, when you're, I look at that, the

7:46

retarded word, the stupid word, that's you just like, less dis, it's when you say something that's

7:52

so goddamn retarded that you obviously didn't think about for five seconds. It's like you have

7:57

this knee jerk reaction that you have to be right, that you don't think you just throw shit at the

8:02

wall and think it's going to stick somewhere. So that's when I call you retarded.

8:06

She libertarian? Yes. Is she on the libertarian chair? Not anymore. Was she just resigned? Oh,

8:11

and she went to where? Allegedly, she's joining the Trump campaign. There's a few other rumors out

8:16

there. I'm not, I'm not getting into those, but even she bailed with the libertarians. No, she did

8:21

not. Okay, so, okay. You don't understand what she's doing. Hold on. If, oh, yeah, there's a master

8:26

plan here. Yes, there is. But you're by nobody ever master plan. Nothing what I said. That's not what

8:31

I said. I said the vast majority of people are stupid and can't make plans. Okay, so, and there

8:36

are people that can, and those are the people we need on our side. So, okay, so let's, let's, let's,

8:40

let's walk this down the road a little bit. She leaves her chair at the libertarian party. Right.

8:46

And she goes to work for the Republican party. Okay. That's what happened, but that is one of the

8:50

rumors, one of the rumors. Right. Is she going to be a Republican or a libertarian? She's going to be,

8:57

well, okay. When you say those words, what is those words? Is she going to be a member of a party

9:03

or is she going to be a philosophy? Are you talking philosophy or party? Because it's not the same

9:07

thing. Have we ever talked philosophy on this? Yes. Okay. Ron, okay. Ron Paul was a member of the

9:14

Republican party. Yes. But he's a libertarian. Okay. I, there's no question about it. I think Ron Paul

9:21

is amazing. I love listening to him talk, but the reality is he did not progress the libertarian

9:29

movement. He's a libertarian. And yes, he did. That's bullshit. We can have, it's not worth this

9:36

argument on the show. Ron, the stuff that you're saying Trump is so great. Didn't I, okay, did we

9:40

have this conversation like two weeks ago? I said, I said, Ron Paul saying he's a libertarian is like a

9:45

vegan eating a fake hot dog. No. Or we're in pleather. No. Oh, no, it is because. No, it's not. Run

9:53

as a libertarian. Here's the retargeting again. Here's the retargeting again. Libertarian means

10:00

advancing liberty. It doesn't mean you have an L next to your fucking name. I don't care what your

10:05

fucking label is. I don't care what the government says on your fucking form is. I care what your

10:11

philosophy is, how you act, what you're promoting. Ron Paul is a libertarian. And all the things

10:18

that you're liking Donald Trump about, Ron Paul was saying 20, 30, 40 fucking years ago. Yes. Yes.

10:24

That's why he's a libertarian. As a Republican. No, when he was in the libertarian party too.

10:29

How does that, okay, so Ron Paul right now, how does he progress the libertarian movement for the

10:34

libertarian political party? He's done his job. He's done. He's old and like ready to croak. Okay.

10:40

Let him have his fucking final golden year. In the history books. It's going to say Ron Paul and

10:45

it's going to say Republican. I don't care. No, okay. I don't know. So, so why did you run for

10:52

office the last time as a libertarian? What? What's the question? You ran for office, right? Yes.

10:57

Why did you run for office? To help the party. Help the party? How? What do you mean? How to, to get,

11:03

well, for one thing, we need to retain ballot access. Right. So we can keep running in the future.

11:07

True. And the other thing is to just keep that flame alive. Yes. So that we can get the word out.

11:15

Yeah. Keep the movement going. So if you're now, if you go, if you go up to the, if you get called

11:21

up to the Republican party and you're now running as a Republican, there's an R next to your name.

11:26

Okay. No. So? How was that helping the libertarian party? We can't get faster than a percent. I don't

11:32

care about the party. I care about liberty. Okay. You have this bizarre fucking,

11:38

okay. Here's the thing. You are acting exactly like the Chase Oliver fans. If you go on X and

11:43

follow their accounts, which I don't, I muted a lot of them. So you have, you have a detailed

11:48

knowledge of them. Because I was following them before the convention. Oh, wait, wait, what? Yeah.

11:54

You followed them before the convention. Yeah. So you knew what Chase Oliver was. They weren't talking

11:58

about that. You're, you're training the subject. No, no, no. If you listen to them on Twitter,

12:05

they all have the same obsession as you with the party. Like they will literally set liberty on fire.

12:14

They will literally throw people in concentration camps if there's an L next to the fucking name.

12:20

They're that fucking party. So stand and fight for the L. No, I don't care about the L. I care

12:25

about liberty. I care about real things in the real world. So now when I say what I'm going to say,

12:30

I'm going to say Ron Paul was, I forgot the word. He was, he was the same alone in this situation.

12:38

Most people are going to fold to the pressure of the Republican Party. Okay. So if they're

12:42

trained to switch over, they're going to fold. Do you think I'm going to fold? Do you think the

12:47

Republican Party is going to knock on your door? Of course they're not, but you gave the example

12:50

that they did. No, I'm actually referring to Angela at this point. I actually thought you were

12:54

smart enough to figure that out. No, you said you pointed at me and said if they call you,

12:59

no, I'll get crayons. If you pointed at me and said if they call me, no, I said, no, I was,

13:05

yes, you did. It's on tape. We're going to fucking roll it back. The Numerial Challenge,

13:09

what did Ron say? Because I don't fucking know what I said. But the reality is, it's, it's to me,

13:16

it's about progressing the libertarian party. Fuck the party. The Republican Party.

13:20

Fuck the party. Will fucking destroy any libertarian. No, they won't. No, they won't.

13:25

Okay. So let's watch it. Let's, let's, let's watch Angela see how she does. Dude, like you are

13:29

nuts. They haven't destroyed Trump. With Trump. Okay. Trump is destroying them. He kicked out the

13:35

rhinos except for the last few fucking McConnell and these other idiots. So a couple of times in

13:40

a lifetime, people come forth and he has, he has won. That's what we're trying to do. But he is not,

13:45

he has no direct connection to the libertarian party. Yeah, actually he does. He, he's spoken

13:50

No, no, no, no, no. No, you don't, you don't, no, I didn't. Well, I booed him when he said stupid

13:54

shit. I booed, that's, that's fair. No, no. Angela's last act as chair was to give Donald Trump

14:00

a lifetime membership to the libertarian party. Now, I don't know if he accepted it or not.

14:04

He didn't accept it. I don't, I don't know if he's allowed. Do you want to accept it? No.

14:09

I don't know if he's allowed to accept it. Well, I don't think, because he's a Republican.

14:12

Right. I don't think he's allowed. But, but because the Republicans wouldn't allow it.

14:16

They don't have any control over it. They have rules. What's they're going to do? Kick him out

14:20

of fucking president? He's already the president. Okay, so he's going to go ahead and sign up

14:23

with his libertarian party. What, what are they going to do to him? He's already a lame duck

14:27

president and he can't run again. Yeah, but he ain't like duck. He, you know what I mean by the word.

14:33

Because it's really funny, that term is being redefined or arguing about right now,

14:38

because he is getting shit done. He is forcing. Right. And there's nothing they can do about it.

14:43

He can say I'm a libertarian now. He can say that. I mean, that's, that's what he wants to.

14:49

Well, if he wants to get rid of the income tax, that's fucking libertarianism.

14:52

The shit he's doing is very libertarian. Some of it.

14:56

Most of it. I'll be fair. Most of it. Okay. So I was going to get this later. So Trump came out

15:00

today and gave a speech about the horrific plane crash last night. And it's like, but.

15:07

Well, which one? The one over DC? There was a second plane crash last night? There was an F-34.

15:12

Well, yeah, there's an F-35. It wasn't a passenger. Two days ago, a Boeing had to do a belly landing.

15:18

No, no, there was an F-35 in Alaska. Oh, but I think that was that yesterday, the day before.

15:24

I don't remember. But honestly, if I say the plane crash last night, everybody but you goes, oh,

15:29

yeah, it was horrific. But you're like, well, technically there was an F-35 for the pilot

15:35

ejected and it's just fun to the ground and we saw. I don't know which crash you're talking about.

15:41

Everybody else does. So we're just going to go Dave right now.

15:43

Different than him.

15:45

He came out and he presented the facts that he knew. I'm not saying he gave every fact up

15:51

because as president, he's got to hold something back. But he, you know, is it the military's

15:56

problem? Is it FAA? It's definitely not the plane. And people are like, even a co-worker goes, oh,

16:02

Trump is out there blaming the military. And this I go, no, what Europe said is,

16:07

Trump is out there telling the truth and actually answering questions. And you're freaked out because

16:12

you've never seen a politician do that before. And no, and I give him credit for that because

16:17

my example is, if you want to talk about presidents giving information out, now that plane

16:22

crash was last night. Dude, Trump was on X just going kind of crazy like he does. And then this

16:28

morning he came out and he just, you know, he, the speech was good. It was a little weird bumps

16:34

in there. But what are you going to do? But with the other administration, all they would do is come

16:41

out and go, well, the FBI is looking into it. We'll get back to you. So my question is,

16:47

the Francis Key Bridge, the investigation with the FBI, did we ever hear anything about that?

16:53

I thought they did, but it kind of got buried, you know, like on page three. And I didn't really

16:58

read the article. So they didn't read anything. And then the drones, oh, the drones. They got,

17:02

they gave us the answer to that. Did you hear that answer? I heard the answer was, it was just

17:07

an FAA approved. Right. I don't know if they got into the details. No, that's all they said. But

17:12

I'm like, well, that would have been easy for Biden to say, but he didn't. I'm not saying Trump's

17:18

line, he may be being misled or maybe it was just FAA guys out having drone wars. So I don't know

17:23

if you guys heard that alarm, but that means it's time to do the Monero Challenge. Monero Challenge,

17:26

really? Oh, we're gonna spin the wheel? Yes. All right, let's get to the wheel. Here we go.

17:32

All right, it's time to spin the wheel to win Monero. Yes, it is. So, yeah, last week, we had

17:39

the challenge, give us our IP address from our website, and we had six people do that.

17:44

Oh, they actually got it. Six people got it. Well, that was a relatively easy one.

17:48

Yeah, but nobody can hack the IRS and delete, delete, delete. Look, we got your IP address,

17:53

good. All right. So first name Al McGuest, A L M A. A L M A G E S T. G E S T. Okay, next name,

18:03

I'm A Y N. Then we got a new one, Inkstain, I N K. You gotta ask that guy what that means. I'm

18:12

gonna actually do that because I don't know. I've known him for several years. Oh, you have? Yeah.

18:16

I worked with him at the payday loan company. Oh, so he's a pre-tortured lender as well.

18:23

Okay, it was one of the correct to ink stand. Oh, that's weird. Okay, next is Oliver Chase with a

18:30

capital O. And next we got capital R capital N. He's the one that designed our stickers. So,

18:40

get those stickers guys, they're going fast. We just sent them out to Washington DC to one Thomas

18:45

Massey. Well, yeah, but did we are we harassing him or are we actually the letters in the mail? Okay,

18:52

none that can do it. It's gone. The government did it. We just put it in the box and it got to DC.

18:58

Okay, and last but not least, this is from the YouTube comments,

19:01

since we started telling people now more. So, we have a YouTuber that left a comment. Was it

19:05

negative? No, it was good. It was, well, how do I solve the channel? Like, where do I submit the

19:09

answer? And yeah, I've never seen a positive comment on YouTube before. Well, there you go. So,

19:14

this is Scandi Tiger 88 and that's going to be capital S. S C A N D I. I messed up.

19:23

C A N D I Tiger 88. That's E. That's E. All right. E. R. Yeah. E and A. I sure hope you were born

19:34

in 1988 because otherwise using that number is a big no no. It is not. I was graduating high school

19:39

and I can legit use 88. 88. You know, like, I asked talk to you long musk about it. I

19:47

anyway, let's spin the wheel. All right, what do we got going on here? Here we go.

19:51

Don't fuck up the button this time, please. Here we go. They fucked it up again. You got to hit

19:56

it soft, not hard. Like, you're pounding it. Kind of like I would do to you. Oh, Scandi Tiger 88,

20:05

the new guy. Hey, all right. From YouTube. From YouTube. We're already getting dividends. Still

20:09

shocked we're on YouTube. All right, Scandi Tiger. Like I mentioned, you have to contact us. We will

20:14

not be telling you that you won other than right here and now. Yep, we are going to hide from you

20:17

the best we can. You have until the next week's episode is uploaded. All right, try and find this,

20:23

dude. All right, Scandi Tiger, you got the monero, but you got to track us down. That's right. We're

20:29

not coming to you. And before we move on, we're going to do this week's challenge. So we have a

20:33

guest later today. And the challenge is you have to go to one of his websites that he mentions and

20:38

there will be on the result or the show page. And just quote some of the text on one of those pages

20:44

and just you know, give me enough to go on that I can verify it. Yeah, you should watch and there

20:48

you go. That is I like that. Kind of making sure people watch our show. Exactly. So visit our guests.

20:57

So yeah, exactly. Yeah, definitely want to support our guest. So now we got the give back to the

21:02

Senate chow and the senators. What is Pocahontas? What's her real name again? Warren. Warren. But

21:07

yeah, we've spent on her. Her daddy is we found out who's paying her bills. Didn't we know that already?

21:15

I mean, we can all presume but man, is she shilling for the fucking big pharma? Of course. Man, I

21:22

I'm looking at this and it's not just her. This other one's doing it too. I'm like, do you guys

21:27

realize you're on you're being recorded and you're you're yeah, are you sticking up for Americans?

21:32

Okay. Yeah, you are. But only the ones who work for big pharma. What about the rest of us?

21:38

Standing here at all. I'm like, how dumb are you guys? They they they're still living in like the

21:43

the late 80s where this was on C span at four in the morning and nobody watched it.

21:48

Man, like it's just the more these talks go on. John Federman was right. Yeah, we do not

21:55

send our best and brightest to DC. Nope. Now, is he one of them? Yes, he is. I think he knows it

22:02

and he's happy with that. Yeah. He's like, I got six years. I'm gonna I gear to you gonna run again.

22:07

Oh, maybe you will. I was a Republican. That might be switched over. Maybe. Well, I mean,

22:14

if he was a true blue collar worker, I could honestly say I believe he would switch over. I

22:20

just don't know if he is. I don't know what his career was prior to being. I know he was a mayor.

22:26

He was a mayor. Yeah, he was a mayor of the dog park. No, some town in Pennsylvania and he got in

22:32

trouble. Oh, did he like shoot somebody or was it a gun issue with him? I don't think that was it.

22:38

I think it was just like he was kind of being a dick about parking spots, like having like civilian

22:43

cars towed or some shit like that. I don't remember specifically. So we don't know the full story

22:47

about much later. Now, I'm gonna make I'm gonna make a statement right now that no matter how

22:51

bad he was as a mayor, he's better than Karen Bass. She was or or or or or Brandon Johnson. How

22:57

about that one? Holy fuck, this guy, man. Yeah. Okay, did you see the news today about him? Oh,

23:05

no, there's actually news about him. Dude, the FBI raided his offices or something. And like,

23:12

he has a gift room that like he didn't let them in. I don't know how he had authority to not let

23:20

maybe it wasn't a raid or something. It was like a consensual, you know, run through or something.

23:26

I don't know that details because I didn't. Again, I just read the headlines. I don't read the

23:30

fucking article. But he has a room where his bribes go. And like, it's just like a big Scrooge

23:37

McDuck treasure room. Scrooge McDuck. He literally called it his gift room.

23:45

What the fuck? Chicago. What the fuck is going on? Man, we're not gonna get into it.

23:53

No, but Karen Bass came out today and she wants, I'm starting to get the proper wordage here. I don't

23:58

want to watch the fucking speech again, but when they rebuild the Palisades in a more equitable

24:06

and environmentally stable, okay, sustainable way. Yeah, which means I won't rebuild it at all.

24:10

So is that California 2.0. You know what she's talking about? Is that is that Blackboard? That's

24:15

what this has been saying. Like the fire started, like it was like this big. Yeah. And there were

24:21

Sream that were this big. Yeah. And he's like, I got a plan for California 2.0. Well, dude,

24:26

it's just some trees or some bushes, but you got a plan to rebuild California.

24:33

So yeah, so that just tells me that they're gonna black rock take over the whole fucking

24:37

area. I also heard California is threatening to secede. See you later. Goodbye. No, my favorite

24:43

one is, well, bye. Yeah. It's a tombstone thing, but movie tombstone. No, I know.

24:48

Actual like tombstone thing. The Democrat party would never let it happen.

24:53

A Democrat will never win presidents they ever give without California. True.

24:58

I mean, they have no choice. They have no say over it. Well, bye. Get out. Yeah. Oh, wait, wait,

25:04

hold on. We got to buy some more wall. No, I used to do a joke. I think I said it in the pockets

25:09

before. I don't mind a wall if it starts in Texas and ends in Oregon on the Oregon coast.

25:16

Block them out. We're done with them. Keep your fucking Hollywood pedophiles. Oh,

25:21

so you see the thing I posted? This is actually, it's just funny to me.

25:27

But they, okay, I went all crazy. It looks like. So they made

25:34

Mel Gibson, the ambassador to Hollywood, and it's his job now to root out the pedophiles.

25:41

So I put only a John Glover, Danny Glover is his partner. And then I go, well, let me go,

25:47

I was going to go like make a meme of them and I googled like, Leader Weapon. Yeah.

25:51

Leader Weapon's part of it's an actual thing. Oh yeah, of course. No, no, they're all old and

25:55

shit. Of course. So this, so this should turn into like the go off the pedophiles. So apparently

26:00

these are five is we got, we got a fifth lethal weapon coming out. I'm too old for this shit.

26:04

I'll still watch it. Oh, and then we got them. Okay, so let's address the, the, the, the

26:12

illegal workers in this country. Okay. One, a lot of, a lot of the ones were,

26:16

all the ones so far were deported are not the farm workers. Right. It's all been criminal so far,

26:21

which that's, well, well, criminal is you cross the border. No, no, no, no, that's not true.

26:29

That's fine. That's fine. Okay. So, so these, I believe in this is going to go and go probably

26:38

late millennial or early Gen Z. They're like, what? We have to pick our own vegetables? This is

26:44

going to, it's kind of like the price of stuff. I'm like, oh, you got to mow your own lawn? You

26:49

got to pick your own vegetables? You got to clean your own house? Really? And, and you're okay with

26:56

a company taking advantage of illegal by underpaying them so you don't have to do any of that yourself?

27:03

See, like the thing is, if we didn't have all these government interventions,

27:07

right, fair enough, a lot of those jobs would still pay less, but all the things in our life

27:13

would cost less. Right. And there wouldn't be such a thing as illegals. So whoever did that job would

27:20

be whoever was the, like it would probably be a teenager, right? When we were young, right, you

27:25

would have kids come over and mow the lawn for $5 or day of paper routes or something that you

27:32

don't see anymore when you go to the movies and usher. There's no such thing anymore. Full service

27:38

gas doesn't exist anymore. Actually, no, what Oregon it does because they force you. Yeah,

27:43

in New Jersey it does. Well, one of them stopped. I believe it was Oregon, but, you know, but even

27:49

here, like the gas that you demonstrate, they'll pump your gas for you. But it's, but you're right.

27:53

I, what, what office not does not make an anomaly, does not make it, you're wrong.

27:57

No, but all these jobs will come back and there'll be all these other new jobs because, because people

28:01

don't want to do this shit, but they don't want to pay minimum wage to do it either. So if we

28:07

break that down into different, and I don't want to get into the full detail here, but the reality

28:11

is, let's go to the construction site. Yeah. We need to keep hiring Americans at construction sites,

28:17

but they don't do that anymore. No, no, no, no, no. I don't care what side of line you're born on.

28:21

Okay. Why doesn't matter? Because we need people to know how to build houses.

28:25

Okay. That's a better way to say it. Well, no, but you need to learn, but you start as a laborer,

28:29

like I did, pick it up, cut the two by four, toss them in the, and then I, then I think I'll,

28:33

being born on a different side of a line doesn't change that. Hey, you pick up those two by fours

28:37

really well, why don't you try putting a piece of a nail through two, two by fours, if you have

28:41

a wall. Okay. So then I learned to build a wall, then I learned to build trust, is it okay?

28:45

Okay. Enjoying the, but being born in America has nothing to do with that.

28:48

Um, it's because if you're illegal, they will underpay you and they will, and then,

28:54

and then, that's what I said, like you would have to get rid of all these different,

28:57

the whole of workers gets filled, because they could abuse the illegals. Right.

29:03

My problem with this is we abuse illegals and that's a fucking wrong. So you can go watch

29:07

the line. So, so if you're on this side of the line, you don't get abused. If you're on this

29:11

side, you get abused, but I'm not talking about abuse. I'm talking about get rid of the, the

29:15

unfair regulations that allow that situation to develop. No, I agree. I mean, Ron Paul just said,

29:21

let's just get our country back to start again. We won't care who's here. Exactly. And I, I've

29:26

always honored that. Well, I honored that up until 2020 when Biden's like, Hey, the borders are open.

29:32

Come on in. I'm like, no. So we don't want to be telling people this and that. We don't want to

29:39

be encouraging. We don't want to be getting welfare. We just want to say, here's a job.

29:45

Whoever wants to do it, get your ass over here and do it. So yeah. And to prove my point is I had

29:51

a meeting yesterday with, um, uh, he's, he's Mexican, but he's, he's, he's born, he's, I think he was

29:56

born here, but he's one of the bigger house framers in town. Okay. And he's spent, he's,

30:01

was it started a cleaning company, like a porter service for his daughter. So I met with him and

30:05

I'm like, well, this is, you know, I kind of give him my advice and stuff like this. And then the

30:09

conversation came up. I'm like, well, you do realize that when ice comes to Vegas, shit might change.

30:15

And they're like, yeah, we're kind of looking at that. And I go, I go because I don't know if the

30:19

videos are true in Texas. We're all the construction sites, the Mexicans just aren't showing up.

30:25

That's why I saw that. Or you can watch the video where they're hiding, which is fucking hysterical.

30:30

They're like inflexible duckwork to the wall. And then there's a guy that has the, they're not

30:35

going on his door. They're like, sir, are you an American? Yes, I am. He's very Spanish. And he,

30:41

they're talking, he's like, say this word, say this word. How many points is scored in a football

30:45

thing? Six. Okay. Say Walmart. Say Walmart. And they kick the door. Dude, don't talk to cops. I

30:56

don't care if you're legal, illegal, whatever the fuck, don't talk to cops. Well, this is more

31:02

tongue in cheek. But so, so when I told the people, I go, Hey, if ice does show up in Vegas,

31:07

just tell your Mexicans that are working for you. So blaring country music.

31:12

And have them like, you know, getting into a little bit, cut the big Mexican music,

31:16

get country music going. I used to drive right by you guys. So,

31:22

enough of that. Unless you got something else on the internet.

31:24

No, no, I mean, like, yeah. So I posted a meme that somebody made and it's from what,

31:29

without papers, pizza, sure. I don't know if he made the meme, but whoever made it, God bless you.

31:35

Because they're going after raging against the machine. Yeah, fuck those guys. I never liked

31:40

their music anyway. You know, I like their ambiance. I like their, their, their feel back in the 90s.

31:46

And it made it look like they were really something people that they're going to affect

31:51

change. We're going to make change happen. And then they got old and COVID kicked in. They're like,

31:56

Oh, no, Max and Max and boosted and we don't want you. We're now, we're now working for that. We

32:01

are now the machine. Yeah. So fuck you rage. I'm done with you guys. You guys showed your true

32:09

colors. You were fucking, Oh, what's that word? I can't think of it. You're, you're a basic

32:16

bitch is the entire time. They're one of the rare instances where they, they make shitty music and

32:22

they have shitty opinions. Because I always find like, when I, when I find an artist or

32:27

musician that has good opinions, I'm like, man, that guy sucks though. I just can't, I can't listen.

32:31

They were a bit poppy. I mean, back in the 90s, I didn't really get into like, knowing the difference

32:37

between poppy and not poppy and like, what I just enjoyed music. But the more you, the older I get,

32:42

I'm like, Oh, that was fucking pop music. And they, at this point, they were pop. Yeah. Corporate,

32:49

post punk. Yeah. And then J.D. Vance started a trend of, I don't really care, Margaret.

32:57

It's like literally started trending though. And it was just him,

33:00

talking to a reporter, just asking stupid questions. Did you, did you watch anything that I posted?

33:06

I scroll past it. Did you see the Donald Duck thing? I didn't watch the cartoon though.

33:10

So basically, I remember seeing that a long time ago. Oh, you do? Okay. So I didn't know this.

33:15

Disney was like, apparently working with the government. They said it's propaganda. So

33:19

Patriot to pay taxes. Of course. I will disagree with that right here right now.

33:24

Did you know that there's a banned Donald Duck up? Was it Donald Duck? I think it's Donald Duck,

33:30

they had very racist depictions of Japanese people, because that was okay.

33:35

Right. Racist and cartoon in the 60s and 70s? Yeah. Sambo? Really? What?

33:42

But they have some banned cartoons, but if they're on YouTube, so look them up if you're interested.

33:47

I mean, if you look at Disney now, and you think of it in a sexual manner, I'm like,

33:53

what the fuck? But even like Nick, uh, Nickelodeon, um, SpongeBob SquarePants?

33:59

Yeah. You know anything about that? I know of it. So back in the 90s, my kid was before school and stuff.

34:09

SpongeBob or Squiggly said, see you next Tuesday. And I didn't know what that meant.

34:14

Okay. Again, 90s. What was the 90s, dude?

34:16

Does it mean see you next Tuesday? You know what that means? See you next Tuesday. I don't.

34:21

So see as in the letter C. Okay, I got it. I got it. Interesting.

34:28

Now, was that on purpose? Are you sure that was on purpose? How can it not be? I don't know.

34:31

See you next Monday, see you next Wednesday, see you next Thursday, Friday, Saturday. I remember

34:35

watching running Stimpy when I was young, and that show was fucked up. Holy shit, man.

34:41

Yeah, cartoons follow a whole different role, and I love it. Here's the other one. I picked,

34:48

I picked this meme, it's not meme, it's just a news article. The only reason

34:54

I put it posted this was the husband's response. Oh, did you bother reading this?

34:59

Yeah, I saw it. So there was a family, I believe in Texas.

35:02

Now, is it real? Was this confirmed? Or just a meme?

35:05

I don't know, and I don't care because it made me laugh. And if it is fake or if it is real,

35:12

no one's life is changing any other way except theirs if it is real. So basically in Texas,

35:18

a gunman broke in holding a family hostage, and the wife says, well, I decided to give the guy a

35:24

blowjob to distract him so my husband could knock him on the noggin, and that's what they did.

35:31

Sure, good, fake or real, don't care, it's funny. So, but wait, there was actually,

35:38

there was another point where she said, he definitely, she goes, while I was doing it,

35:42

I found out he definitely wasn't a minute man. But then, and so it was basically,

35:51

it was an article just talking about that. And then the response was, Jennifer's husband Raymond

35:57

only had one thing to say about the ordeal. She's never given me head like that, but we will be

36:03

talking about it later. For now, I'm just glad our children are safe. So if it's a real story,

36:10

awesome Jennifer, great job, you're taking your family. If it's fake, whoever made it up,

36:14

comedy genius, better than Biden because I was fucking bullshit. Biden's not a genius in any way,

36:19

shape or form. He's just a fucking stooge. And then we know Trump turned on the water,

36:25

was that last week or this week? That was last week, yeah. Yeah, so I don't know how it got to

36:29

the top. Massive. Yeah, I posted that one. Yeah, you did that fucking thing. That's really cool.

36:35

What else do I want to talk about Bernie Sanders? On our X-to-counter, it's Bernie

36:38

Sanders getting embarrassed by JFK. RFK Jr. Fuck. My school trained me so well. JFK, JFK, JFK, JFK.

36:52

JFK, JFK. I wake up screaming at night, JFK. I was like, what the fuck are you talking about? I

36:57

don't know. But RFK did say he goes, a year ago, you guys were all my friends. I don't know what

37:05

you're doing to me now. Oh, shit. Did you see his running mate? Nicole? Yeah, she came out,

37:13

fucking swinging a baseball bat. She's just like, hey, I've personally given a bunch of people money

37:20

to run for the Senate. And these are the names. Boom, boom, boom, boom, boom. If you ever want to

37:25

see this again, you will support RFK. What? He has to be nice. Wow. I don't. Yeah. I'm like,

37:33

oh my God. Let's get this like, Trump needs to pick her up as well. Because his press secretary,

37:39

man, she's like 28 years old. She's doing a good job. And she's just fucking killing it up there.

37:46

Well, here's, I'm surprised you didn't bring this one up. Lift is being sued. Did you see that one?

37:52

Okay, bullshit. What the fuck? No, I tried posting a meme on this. X would not let me. Really? Dude,

37:59

okay. Seriously, when this fat girl who can't fit in the backseat of a car wants to sue lift,

38:06

that's what memes are made for. Yeah. I mean, if there's any, any definition of what memes are

38:11

made for, this is it. So what I did was I wouldn't found, okay, I initially started looking for the

38:18

picture of Homer, Fat Homer Simpson. Yeah. Because he gained weight to work at home. Yeah. And they

38:23

had to extract it from his house. Yeah. And they had a back of a tow truck. Yeah. While they're

38:27

hosting it, I could not find that image. So I can find that. Good luck. I know. I know exactly

38:33

where it is. Go find it. The next image that comes to mind is the pickup truck told the fat lady on

38:38

a scooter. So I take that picture. And it may be because I went, you know, hashtag lift. Maybe

38:46

they haven't been I don't know. Oh, don't put hashtags on our X account. Oh, that that's what

38:51

gets a shadow band. Oh, I think you were calling the person out though. So they would see it.

38:56

It did. Do you want to have a fucking like hard on against hashtags because I put a few last week,

39:02

and then I noticed like our engagement just dropped off a fucking cliff. Okay. And I'm like,

39:06

dude, like it was one fucking post and I was doing the uncaged your brain. I'm done. I'm doing

39:10

more. Just don't do the hashtags. So I was so I put this. So there's a pickup truck told a fat

39:15

lady on a scooter up behind the truck. I put hashtag lift, avoid the lawsuit, do the right thing,

39:22

start lift XL. I put that mimic. Have you found that picture yet? I can't do it with no

39:28

means not here. No, it's no, I searched, I searched everything. I went to the episode. I got

39:33

this. There's a website that has literally every single frame of the first 18 seasons that I didn't

39:39

know. But I still I bet it's removed. I would just have to go and find the episode and then and then

39:43

don't do it. No challenge. No, no, no, no, no, no, no, no, no, no, no, no, no, no, no, no, no, no, no,

39:47

she's gonna win her lawsuit. She's gonna win. She's gonna win. How do you figure? Because in

39:53

Michigan where this happened, they actually have weight as a protected class.

40:02

Yeah, but Trump, but okay, let's walk down that road. So with this accident last night, it's

40:10

horrific. But Trump called out the FAA for DI hiring. Right. And people are bringing up what

40:16

they were looking for. They said, if you're visually impaired, you can apply. Oh, nice.

40:23

What the fuck does that mean? I'm visually impaired. I have glasses. No, no, but I mean,

40:27

the list of shit, I'm like, what the fuck? Oh, but wait, sorry. This picture here,

40:32

you see this? That's what the radar people look at. Yeah, I thought it was fake. So what's that

40:37

picture there? I don't know if you can see it. Look, it's on our X account. Tell me that doesn't

40:42

look like a poorly drawn sick figure with a baseball bat, but we're ready to fucking hit one

40:46

of those planes or helicopters. That's where I thought it was. I thought somebody did that and

40:50

they were gonna, they were gonna like, pump the helicopter right out there. And I'm like, well,

40:54

should they didn't do that? Why, why do they draw the sick figure for? That's what they look at.

41:03

So, so let me phrase it the different way. When you're flying in an airplane, you're coming into

41:08

any airport and this is what the fuck they're looking at. Keep you from dying.

41:15

Seriously. I don't know. But okay, let's do a quick talk about the crash last night. Okay.

41:24

I'm just gonna say sometimes accidents are accidents, which is weird because I typically go

41:30

conspiracy route. I'm trying to ignore a lot of that stuff. Here's your phone. No, no, that's on

41:37

the same episode. No, no, no, I found other pictures of the episode. He's on the scale.

41:42

I guarantee you it'll be in here when he was climbing the hill.

41:45

All you gotta do is click on one and then, dude, shut up. All you gotta do is click on the fucking

41:50

frame and then scroll through the episode. Fine. It's not there. I'm telling you it is. Okay. That's

41:55

why. So, you know, ha, keep talking. He's distracted me. So they really need to upgrade their monitors.

42:03

So, yes, they've already admitted the FAA. There was staff shortages in the control tower.

42:14

Who's the new guy for the military? Heads, heads.

42:16

Kexeth?

42:17

Yeah. That guy said, okay, so the ceiling for a helicopter flying through that area is 300 feet.

42:24

Okay.

42:25

The helicopter's at 350, 450 feet.

42:28

Okay.

42:29

I'm trying not to be a, I'm serious, I'm serious.

42:33

Somebody also said that their beacons were turned off.

42:38

Yeah, but I heard that too, but it's right. I mean, but that's the thing. It's right here.

42:43

Yeah, I don't know. I guess.

42:44

So, the PAT 25 is the helicopter. Okay.

42:46

Because PAT 25 is a, it's the code for the people that deliver the VIPs.

42:53

Okay.

42:54

So, it had to be turned on and then the CA, the crash avoidance,

42:58

since you're starting to go off, I would think a Black Hawk could avoid missiles being shot at it.

43:07

Right.

43:09

Missiles move faster than big-ass planes.

43:11

Right.

43:13

Now, who was piloting the plane, or not the plane, the helicopter?

43:18

Okay. Well, it's funny. You brought that up.

43:22

They have said it was a pilot who's been flying since 2019.

43:26

Oh, did he die?

43:27

Yeah. No one survived this.

43:29

Okay.

43:30

More than likely, no one survived the trip to the ground.

43:34

Okay.

43:34

I don't know how to word that any other way.

43:36

Right.

43:37

They probably all died instantly.

43:41

Yeah, this, yeah, whatever.

43:43

But they're now coming out with, they have technology, and they brag about this technology,

43:52

that they can do remote flying of a helicopter.

43:55

Probably.

43:56

I am not saying that, no, they've actually, they've actually done videos of it.

44:00

Okay.

44:00

So, they could turn helicopters into kind of like a drone.

44:03

Right.

44:04

I'm not saying that's what happened. I don't know. I really just, I'm just watching the news,

44:09

and I'm not making my any conclusions right now.

44:13

I'm just going to say accidents happen, and it's a shame when they do.

44:18

Because it's disgusting, this is horrible.

44:19

Doesn't seem like an accident.

44:21

Oh, shit. So, you're a bore of the conspiracy side of it.

44:24

I mean, how do you, how do you accidentally, like, there's a video, someone caught it on video, right?

44:31

Oh, the dash cam?

44:32

Yeah, I think it was, I don't know what it was, but it was a video.

44:34

Yeah.

44:35

And like, you see the plane, I think it was coming towards them, so it looks like it's not moving,

44:40

right? It's just hovering along. And then you see the helicopter on the left,

44:45

and it's just like, be lining right for it.

44:47

Never broke the light that the planes were.

44:48

We're like, how is that an accident? Well, like, what are you flying at?

44:51

So, there's two videos that I think you can't not see the fucking plane.

44:55

Well, no, okay. So, there's a defense to that, but I'll give that.

44:57

So, there are two videos that are out there. One is from like, a security camera off one of the

45:02

government buildings, and the other one is a guy driving to the airport, his dash cam,

45:06

I mean, literally call it.

45:07

Okay.

45:08

Now, it was a family in the car. At this point, I'm really thinking the guy driving when,

45:15

why the fuck was I playing music for my children? Because it was like a really like child song,

45:20

and like a happy song, and then the plane blows up. It's just, it's just poor timing, you know.

45:26

But so, apparently the black hawks, black hawks, helicopters are made to look at the ground.

45:35

Okay.

45:36

So, they're designed to watch the, well, because they're helicopters that are looking for

45:39

places to land, people to shoot, people to kill, and-

45:45

Why would the pilot be doing that though?

45:47

Well, but he made, okay, so the plane was coming in, was descending to land.

45:53

Okay.

45:55

I, and they were short one person, because it's supposed to be four people on there,

45:58

there were only three, and they acknowledged seeing a plane, but they think it was a plane

46:04

that was taken off, not the plane that was landing.

46:07

Black Hawk has a pretty damn big fucking field of view.

46:10

Is that the, is that the black hawk?

46:12

Yeah, well-

46:13

Yeah, I'm trying to avoid the conspiracy in this one right now, so don't throw me shit like that.

46:19

My conspiracy brain is just going to spiral out of control.

46:22

I don't see why you would not have vision in front of you to see a fucking plane that you're

46:25

going right at. It just doesn't make any sense.

46:29

I'm going to let this play out. I don't like doing my conspiracy stuff with death that's involved.

46:34

I mean-

46:35

Well, no, I mean-

46:37

What else are you going to do with it?

46:42

I know people that had family members or friends that died 9-11,

46:45

so I avoided my 9-11 conspiracies, because I don't want to, because I'm very passionate,

46:49

very loud, and very obnoxious. I don't want to be getting into the rant where it was the Israel,

46:55

Jewish people controlling the plane was remotely-

46:58

Wouldn't you think those people would want to know the reality of what happened?

47:01

Is what I say really reality though?

47:04

Most of the time, no.

47:05

If anybody believes in anything that I say-

47:08

You're like Alex Jones, right? You say 90% of the time you say dumb as shit ever,

47:12

but then that 10%, you're like, holy fuck, this guy's got everything.

47:15

So let's go to Alex Jones things. Do you really think that I'm like Alex Jones?

47:19

Yes.

47:20

Okay, why?

47:22

Because you have- well, the mannerisms first fall.

47:25

Okay.

47:25

Like the loud boisterous, that's part of that.

47:28

But it's the same like- you have these weird out there goofy things all the time,

47:33

but then like you occasionally just stumble on something that's amazing.

47:37

So does he laugh and joke the whole time during his show?

47:41

I don't watch his show.

47:41

Anybody who takes me- I mean, it's not that I don't say serious stuff.

47:45

I try to take serious instances and make fun of them.

47:49

That's what I'm trying to do.

47:50

And if I catch something that seems a little weird like the DMZ pipe bomber-

47:56

Yeah, but he can say the same thing.

47:58

But he doesn't. I don't-

48:00

You don't know how he talks to his friends?

48:02

No, because he plays a character and he is like full-on, full-belong conspiracy guy like

48:08

the aliens are watching us and that's- he has a right to exist in this space.

48:13

He does. Everyone does.

48:14

But it's- it's my demeanor versus his demeanor.

48:18

Mines of our like happy and joyful and like-

48:20

I don't think a lot of people-

48:21

Whatever. I mean, I- I- I- I- I-

48:22

You want to convey me to a millionaire that gets sued and lost all his money?

48:26

Go right ahead.

48:27

I'm pretty sure I'm going- well, I'll never make the millionaire.

48:29

A billionaire with a B, sir.

48:31

A ZP?

48:32

He was.

48:33

Really?

48:34

Well, he owed a billion dollars to the people that- the San Diego people.

48:37

All right. So, changing my fucking-

48:40

All right, guys. They're coming after us, man.

48:42

They're all here. They're watching us.

48:45

We- those drones, they were not FAA approved.

48:48

They- they were- they were spying on us, man.

48:51

They- they were watching every move you make.

48:52

Be careful. Get your- get- get- get your protective equipment on.

48:56

I mean, should I do that?

48:57

So, I can have a billionaire?

48:58

Maybe.

48:59

I can do that.

48:59

Maybe.

49:01

Start- start saying that-

49:02

No, the one dude in our group, the community, how it's turned they go,

49:06

come on the show and fucking us have this out.

49:08

Yeah. That chair is not empty.

49:11

We- yeah, I-

49:12

No, I don't care.

49:14

I don't care.

49:14

I'm just having fun.

49:16

How much time are we out here?

49:17

We are at 46 minutes, so we got to wrap this up fairly quickly.

49:20

Okay, so we're not gonna be able to get to the Birthright Citizenship Talk today.

49:24

We'll probably do that next weekend if we can.

49:25

You thought we were gonna get to-

49:26

Well, you know, I- I do want to cover it because it's important.

49:30

Dave plans and I fuck it up.

49:32

But today we do have a special guest for you guys.

49:35

It's Frank Trezza from- well, he's a- he's a pen tester and a security researcher.

49:41

So, we have a- a- like a 40 minute interview with him.

49:45

And-

49:45

Look forward to it.

49:46

Let's roll that.

49:47

Yeah. No, I- I- I- I- I- I- I'm like-

49:49

My brain is just fluttering with questions for him.

49:52

So, let's go see what happens.

49:54

All right.

49:55

And we are doing an interview with-

49:58

Frank Trezza.

49:59

Frank Trezza.

50:00

Can I say what he does or is this the-

50:02

Why don't we let him do that?

50:04

All right. Why don't you tell us what you do?

50:07

So, I am a senior security engineer and a penetration tester.

50:11

Okay.

50:13

I'm sure you'd like an explanation of what the hell those things are though, right?

50:16

I just don't know if you're in porn or not.

50:19

It sounds like you-

50:20

Am I in porn?

50:21

No, no, no porn.

50:22

This is your test, right?

50:23

I thought maybe you like- you tested the girls before-

50:26

I'm- I try to be the funny one, sorry.

50:28

Hey, no, no, no, I- you know, I fuck like a porn star.

50:31

So, I get how you misunderstood.

50:33

It's all good.

50:35

So, no, I'm a penetration tester.

50:37

I guess the- the Jordanian intonation.

50:39

I think they- they probably did that potentially when they came up with that career choice.

50:43

But, uh, just as it is, I- I had to trade companies.

50:47

I test them, so penetration tester.

50:50

And the way that I do that is emulating an adversary,

50:55

a bad actor.

50:56

So, I'm like, doing the same stuff your average bad guy's gonna do,

51:00

but within limits.

51:02

So, that's my scope, right?

51:04

Okay.

51:04

That's the difference between what I do and what these guys who are red teamers do.

51:08

Red teamers have a lot less scope.

51:10

They get to actually do the dirty tricks.

51:13

Uh, they don't have the training wheels on, so to speak.

51:16

They get to really go hard.

51:18

Whereas I go hard within what they agree to.

51:21

I don't get to do true red team emulation.

51:24

I get to do like 80% of that.

51:27

And then I- I'll stop because they don't want me to actually cause service interruption or

51:32

maybe deploy ransomware, right?

51:34

Whereas, uh, you know, you really want to go hard.

51:38

Your- your red teamers are gonna be like long-term engagements,

51:41

embedding themselves into a company.

51:43

Actually, trying to see what they can do that would cause financial harm,

51:48

like getting up to that point and then not causing the harm.

51:51

So it's just a little bit different, but they're very similar.

51:54

And a term a lot of people kind of mix up.

51:56

So.

51:57

Okay.

51:57

So again, I'm not a computer guy.

51:59

Nobody who does this- this show knows I'm not.

52:02

But so if I ask them weird questions, I understand that.

52:05

I don't know what I'm talking about.

52:06

So are you considered like a white hacker or a gray hacker or neither one?

52:12

Well, I'm a purple hacker.

52:13

So, uh, is that a weird thing?

52:17

Yeah.

52:18

So the whole white hat versus black hat thing is more immediate term.

52:23

So like anything else.

52:25

With amongst ourselves, yeah, we might jokingly, for somebody with a black hat,

52:28

they mean like, oh, they're a bad guy hacker or a white hat.

52:31

Like, oh, they're a goody-dooshoes hacker.

52:33

But in reality, the- it's more like I just- I'm an ethical hacker, right?

52:38

So-

52:38

Oh, okay, fair enough.

52:40

I just- I don't do things to hurt people.

52:42

I don't take people's information.

52:44

I always get consent first, kind of like the difference between a guy who goes to a bar

52:49

and picks up a chick and takes her home and she says, no, I stop.

52:53

Like I have consent, right?

52:55

I keep penetrating with my testing here is what I'm saying.

53:00

Okay.

53:01

Um, yeah.

53:02

So I've been kind of trying to do some research on this.

53:04

So- so we got penetration hacker and what was the other one?

53:07

Infilt- infiltration.

53:09

Yes.

53:10

So do you do infiltration hacking too or just penetration hacking?

53:14

So I do a little bit of both.

53:15

So I think what you're referring to is what's called FIATSEC, right?

53:18

Physical security testing.

53:20

That's the guys who'll break into a building, you know, get in, prove that it can be done,

53:25

like a high security place.

53:27

I do a little bit of that.

53:28

I don't really get like one or two FIATSEC engagements a year, really.

53:31

We got guys in my industry who that's all they do.

53:34

Like, uh, Jason Street, he was really great talks.

53:37

That dude once got paid to rob a bank, uh, essentially, but not for money.

53:42

He got paid to steal one of their computers, right?

53:46

So, so they dropped this dude off in a country that's in South America in front of a bank.

53:51

They tell him, that's the bank you're going to rob.

53:54

And he goes in and he's wearing like a typical shirt that you'd expect an IT worker to be wearing

54:00

with a Microsoft badge, walks behind the counter, uh, nonchalantly.

54:05

And then somebody's like, Hey, uh, are you IT?

54:07

And he goes, yeah.

54:09

And, uh, my computer's acting really slow.

54:12

And since he's good at what he does, he adopted a pre-tech,

54:15

a pre-tech being like the story you're going with as far as why you're there,

54:19

that he's a computer guy.

54:20

And if you're going to adopt a pre-tech, you have to know what the heck you're doing.

54:24

So you don't pick one when it's something you don't know how to do.

54:26

So he actually helped the lady fix their computer.

54:30

His goal is also to walk out with one of those computers.

54:33

So when he's done, he says, anybody else having problems while I'm here?

54:36

And it's like, well, that person's been complaining about the computer all week,

54:40

but they, they just kind of went out.

54:42

He goes, ah, well, I can bring that back to the shop with me.

54:45

So he just walks over, just connects the cables, grabs the computer, walks out.

54:49

The guy drops them off, come running at him.

54:52

We were trying to raise you.

54:54

Hey, uh, you, you went into the wrong bank.

54:59

Oh, that's a great story.

55:01

Yeah.

55:02

And anyway, he was, he was, he was actually convinced the dudes at the bank like,

55:05

Hey, um, I do this for a living and I have a slight letter of authorization.

55:10

Like my get out of jail free card.

55:12

Just they, they told me the door left goes to one bank and the door to the right goes to another.

55:18

And I made a mistake.

55:20

And he was like a bit of a, mostly honest, but also like still employing some social engineering

55:26

techniques.

55:26

They were still impressed that he was able to do what he did, that they hired a company.

55:30

And now he does both those banks every year.

55:32

Nice.

55:34

This way it doesn't matter which story goes through.

55:37

So I mean, when you come to a fork in the road, you take it.

55:40

Yeah.

55:40

So this is a weird question.

55:41

Are you registered with the government or how do they know you're doing stuff legally

55:47

to test it if they somehow, and I don't know if they can find you, but,

55:51

or if you go to the, if you hack the wrong company, you're like, no, no, I was trying to

55:53

hack this company.

55:55

So you, so you don't get arrested.

55:56

Is that, is that a concern?

55:59

It is.

56:00

I mean, doing the five six stuff.

56:04

I mean, the other stuff's a lot easier because well, not necessarily easier, different

56:09

skillset, different risk model.

56:10

So if I'm doing a physical engagement, I got to make sure my bases are covered.

56:15

I got to be working with a company that's got obviously the insurance that's needed

56:19

for this kind of stuff.

56:20

Oh, okay.

56:21

I cut out there.

56:22

Am I still there?

56:23

Yeah.

56:23

Yep.

56:24

So I got to have the insurance.

56:25

I have to have a signed letter of authorization from the person who's in charge at the company,

56:30

whether that being a CEO or a CSO.

56:33

And also that letter is going to have their phone number and backup phone numbers.

56:37

So if it's the fan, there's somebody they can call to verify.

56:40

I am who I say I am and I am authorized to be doing what I'm doing.

56:45

And we kind of jokingly refer to our SOW as the get out of jail free card.

56:49

But I mean, it has helped people.

56:51

We've had penetration testers who were actually doing a courthouse a couple of months back.

56:55

And they were told they were really staying on the first floor.

56:58

But one of the two of them on that team did not read that letter very carefully and tried to go to

57:02

second floor and their asses got arrested when the alarm went off.

57:05

And that was a whole mess.

57:06

They freaking get them out of.

57:08

But luckily they did eventually get out of it, but they spent a few days in jail as a result.

57:15

Wow.

57:15

They were a very angry sheriff who was in informants was going on and a little bit ego as well.

57:23

That's a thing with cops.

57:25

You go definitely.

57:26

You may keep going.

57:27

You got to be one of them.

57:28

No, yeah.

57:28

Go ahead.

57:29

So this is more of a.

57:32

Okay.

57:33

So I have a question.

57:34

You may this may or may not be in your real house, but we're like with the TikTok ban or the potential TikTok ban.

57:40

They're like, oh, we don't want China having this information from us and they're getting it.

57:45

But yet our government has allowed China to infiltrate infiltrate all of our system, the networks.

57:52

So is that something that you have an opinion on or not?

57:54

I guess I'm kind of throwing stuff out here.

57:58

And he's rolling.

58:00

No.

58:02

Yeah, I have a pretty strong thing for me.

58:06

Well, I'm over here getting here.

58:07

Okay.

58:07

Thank you.

58:08

You guys were frozen for a split second, but the audio was fine.

58:10

But anyway, TikTok ban, right?

58:12

Yeah.

58:13

TikTok ban.

58:14

Excellent.

58:15

City hotel Wi-Fi.

58:16

Sorry.

58:21

Nice.

58:22

We're all frozen again.

58:23

We'll get there.

58:24

We'll work it all out.

58:27

So.

58:36

My opinion on that.

58:43

Yeah, we're not hearing anything right now for you.

58:45

No.

58:49

Oh.

58:50

Yeah.

58:50

No.

58:50

Sorry.

58:51

Sorry.

58:51

Which way?

58:51

In the end.

59:02

You know.

59:03

Oh, we're back.

59:05

Yeah.

59:06

We're we're in the work.

59:06

Can you hear me now?

59:07

Yeah.

59:08

We're in the work through the viewer.

59:09

We're fine.

59:10

We understand.

59:11

All right.

59:12

I knew the video.

59:13

So can you hear me a bit better?

59:15

Yeah.

59:15

I should have a bit more bandwidth.

59:16

That might help.

59:19

All right.

59:20

So.

59:24

I think we're good down.

59:25

So it's like I'm not seeing any pauses.

59:26

So yeah.

59:27

I understand Chinese people are mad about TikTok.

59:30

They're screwed on my internet, I guess.

59:31

But.

59:33

So the gist of it is that when it comes to TikTok ban,

59:38

I'm privy to a bit more information than the general public.

59:40

And some of it is not stuff I'm technically allowed to share.

59:43

Okay.

59:44

So I'm going to tell you what I am allowed to share is there's a lot more to it than just

59:49

the automated with operations on our population that's going on there.

59:53

There are actual concerns about theft of data from companies as a result of utilization of that app.

1:00:00

Right.

1:00:00

People's phones when connected to corporate networks.

1:00:03

So I can't go deeper than that with that specific question just because of what I've read.

1:00:09

I can't disclose if you know what I mean, like TLP read.

1:00:14

Yeah.

1:00:14

No, but I was kind of referring to all the stuff.

1:00:16

I like protocol.

1:00:16

But I was also referring to the China is in a lot of our infrastructural and a lot of our

1:00:21

their governments networks and they're they're like, oh, you can't do TikTok.

1:00:26

But yet the China's are just running a muck in our power companies and our power, you know,

1:00:31

all this stuff.

1:00:32

And they're blaming us because we have a tick.

1:00:34

Well, I don't have a TikTok app, but they're blaming people that have a TikTok app for giving

1:00:38

information to try.

1:00:38

But our government's the one that's allowing them into theirs.

1:00:44

That's a great question.

1:00:45

And there's a lot to it.

1:00:47

So there's a bunch of key, key Chinese devices with backdoors in our critical infrastructure.

1:00:53

A lot of that started with like these IP cameras a few years ago made by a company.

1:01:00

Hick vision, right?

1:01:01

Essentially, they flooded the market with these really

1:01:04

cheap devices that were backdoored, knowing that they're undercut the competition and kind

1:01:09

of get an edge there.

1:01:10

And those got put on government networks and used to pivot.

1:01:13

And they got put on a list that says if your government contractor, you working a government

1:01:18

building, you gotta, you gotta, you can't use these devices.

1:01:21

And then a lot of other devices that are backdoored, like the company's Huawei that makes the

1:01:26

cell phones that are not a lot easier anymore.

1:01:30

They besides backdooring the cheap ass cell phones, we give the four people like the Obama phone

1:01:36

kind of stuff.

1:01:37

They also backdoor like switches and routers that are in critical infrastructure and things

1:01:42

that like bridge big networks together at data points.

1:01:46

So like really good place where multiple networks are converging.

1:01:49

If you are using a device made by a Chinese company, it's not a great place to have said device,

1:01:54

right?

1:01:56

So they've been accused of thing like having backdoors and hardware.

1:02:01

And there's been evidence that there actually are these backdoors.

1:02:05

And we've now seen the awful botnet that are just potentially badly secured routers that

1:02:12

are made from China that might not be intentional backdoors, just that the security on them is

1:02:16

so horrible that they got compromised that are now parts of botnet that are being used to attack

1:02:22

infrastructure with like denial of service attack.

1:02:26

So with the backdoor thing being an issue, is there an electronic manufacturer for phones

1:02:32

or laptops that are better than the others that China has don't have doesn't have their fingerprints on?

1:02:39

Yeah, there's a few.

1:02:40

The U.S. is working on a list of actually having like little certification program kind of like the

1:02:47

Energy Star program type shit that's being headed up by one of those labs that generally does

1:02:52

energy efficiently.

1:02:53

Since you can't think which is probably not the best company to be doing that, but at least they're

1:02:57

trying to put together like a stamp of approval saying the device seems to be backdoor free

1:03:03

before they sell it now.

1:03:05

And that's going to be rolling out I think later this year.

1:03:08

But the general gist of it is like, if you really want to be 100% sure there's no backdoors

1:03:15

in your hardware and software, that's something that's going to require some research

1:03:21

and making sure you buy the right things and then you can control the firmware too.

1:03:25

Like when I'm down on the road, if I need to have a router with me like a travel router,

1:03:32

I get one that I can put my own firmware on like an OpenWRT device, you know, or something that

1:03:38

can run a PSS for firewall like open source firmware where people have looked over the code,

1:03:44

made sure that it is bug and well backdoor free, they could have bugs.

1:03:48

But in general, at least the open source community looked at it and agreed no backdoors here.

1:03:53

And I put that on my device.

1:03:55

Yeah, we covered that on an episode a couple of weeks ago.

1:03:58

Yeah.

1:03:58

We did our open RWT and fresh tomato.

1:04:05

Yeah, tomato, open WRT, DDWRT, those are three great projects to do open source

1:04:10

router replacement for firmware.

1:04:12

Yeah, because China or Asia, I guess in general has been sealed on our intellectual properties

1:04:17

since like the 60s.

1:04:19

And obviously it wasn't computers back then, but now they've gone into computers.

1:04:22

So I don't know, I'm just I'm against having certain stuff made overseas that is critical

1:04:28

to our infrastructural.

1:04:32

Do you?

1:04:32

I know, there's also risk for American companies.

1:04:37

I don't trust them.

1:04:38

So you'd like to steal your data today, like, you know, if something's free, as you guys

1:04:43

probably know, you're the product.

1:04:45

Yeah, no, I mean, I'm literally a flip phone guy up until like two years ago when I was forced

1:04:49

to get a smartphone for work.

1:04:53

I don't do I don't my Wi-Fi is off all the time.

1:04:57

I don't go to I don't go to social media on my phones.

1:05:01

Yeah, I do my best to at least not be listened to by Facebook, X, China,

1:05:10

you know, Putin might be listening to my phone as far as I know.

1:05:13

So but is so with China being the government, our government is selling to us that China is in our

1:05:22

power grid and all this.

1:05:23

Is it true that they can actually be in there?

1:05:25

Or is this a scare tactic from our government?

1:05:27

Or is that something you can talk about?

1:05:34

You know, like my my I can talk about it.

1:05:38

I just can't say everything I know about it.

1:05:40

So there are use cases where that China has infiltrated not just China, mind you Russia,

1:05:48

other nation states, these APTs, which are usually nation state actors for a large majority of these

1:05:55

advanced threats, advanced persistent threats, they call them like either they're financially

1:05:59

motivated and really good at working together or they're state sponsored.

1:06:03

And a lot of the time they're crossover.

1:06:05

So one of the ones that's in the news a lot lately are the typhoon groups.

1:06:09

These are Chinese based, you know, you have both typhoon, salt typhoon.

1:06:13

These two groups are nation state actors, right?

1:06:16

And they have definitely infiltrated our telecom systems, for an example, like they got it in

1:06:24

and they have the ability to see what's called a system called signaling system seven,

1:06:28

which is what lets people let's let a phone company.

1:06:33

Like you're running a cell phone provider, connect your internet based IP telephony stuff

1:06:39

to the old school POTS like telephone network.

1:06:43

It's like that bridge in the middle.

1:06:45

And it kind of like can be used, for instance, if you're getting a text message to not then forward

1:06:50

that message to the intended recipient, but let you see it.

1:06:54

There's all sorts of evil tricks that they can do, especially if you don't like,

1:06:57

say you don't put the area code for all the numbers in your phone,

1:07:00

there's ways that they can screw with you as a result of that.

1:07:04

If you don't have like the say one five one six,

1:07:08

for calling Napa County in your phone, you just have like five, you know, your whole phone number,

1:07:14

right? So if you don't, there's just there's just different stupid tricks they can pull

1:07:20

as a result of the access they've got.

1:07:21

So they don't need to swim swap if they want to steal somebody's SMS code,

1:07:25

which is a big thing.

1:07:26

While the government said people should be using responsibly managed encryption.

1:07:30

And then they give a list of what they considered responsibly managed.

1:07:33

Now my issue with their list is what they say is responsibly managed means that that's something

1:07:37

they themselves have a key to.

1:07:40

So if it's responsibly managed, meaning you have the key to see my messages as a government,

1:07:44

that's also something I'm not really comfortable with.

1:07:46

You know, it's like, look, I want to message my friend about something I don't need anybody

1:07:51

listening. It's not that I'm doing anything bad, but I don't need to beat your burden or proof that

1:07:55

if I'm not doing anything wrong, I don't need to work or I think that's bullshit.

1:08:01

I should have an expectation of privacy when I'm talking to people online.

1:08:04

Just like if I'm in a room, I don't need to be in a freaking government's gift to say something

1:08:09

to somebody, you know?

1:08:10

Yeah. So that being said, like all my life, I've got VPNs on them.

1:08:16

I use them frequently. Is there a VPN for cell phones or should there be?

1:08:21

Oh, there is.

1:08:22

Oh, there is.

1:08:22

Oh, yeah.

1:08:23

There's, I mean, there's tons of them.

1:08:25

You're going to drain your battery a bit fast, but like VPNs are great to start.

1:08:29

I don't really like a lot of the ones you'll see.

1:08:32

You're typical YouTubers like Hawke on a podcast.

1:08:35

They're like, this brought to you by NordVPN or a real private internet access.

1:08:40

And it's like, okay, and then they get a 30% kickback when somebody signs up.

1:08:44

But a lot of them are fake oil in terms that they're not set up really all that secure themselves.

1:08:48

And they log, they log user data, man.

1:08:50

And if the government asks for it, they just give it to them.

1:08:53

So you're not really getting that expectation of privacy you're looking for when you sign up

1:08:56

for these services.

1:08:57

If you want to like use a VPN securely, learn how to like set up one yourself.

1:09:02

And, you know, like there's a lot of better ways to do it.

1:09:06

And also a lot of the times these things are going to have a call to DNS leak.

1:09:10

So even though your actual traffic going on port four for three is like encrypted,

1:09:15

when you're looking up what website you're going to go to, it's still going to your ISV DNS.

1:09:20

So you're still like leaking that same data that you're trying to hide.

1:09:23

That's what you talked about last episode.

1:09:27

Okay.

1:09:30

I'm playing that on Dave and I being a lot of the same groups and reading a lot of the same news.

1:09:34

I'm sorry to hear that.

1:09:36

Let's get into the juicy bits.

1:09:38

So tell us the dirty tricks that you use in your work.

1:09:43

Sure.

1:09:43

So if I'm going to be social engineering at the whole school of things, essentially,

1:09:50

I'm going to be using psychological manipulation techniques to achieve my end goal.

1:09:56

I'm going to get somebody to do something that might not be in their best interest,

1:09:59

whether that's going to be like a secretary to put something in their thumb drive that's

1:10:03

going to affect the network or sneaking into a data center by calling ahead of time,

1:10:08

knowing the contact at the company who can authorize people to go into the data center

1:10:12

and then being like, hey, I got this guy, Frank Treasor,

1:10:17

Pete Trezzor, and I got to add him to the list of people who authorize.

1:10:24

And they're going to look at the number that's calling them.

1:10:26

And it's going to have the actual name of the contact.

1:10:29

Because one of my dirty tricks is faking the caller ID that I'm calling from.

1:10:33

So in that regard, I call up, I get myself added to the list,

1:10:37

and then I show up with my ID and walk in.

1:10:39

And I've already been met my objective at that point.

1:10:42

And then go to the cage.

1:10:44

And if I need to now, as Dave is now familiar with ConBoot,

1:10:48

if I need to get into a system and they haven't done a good job of actually encrypting it,

1:10:53

like putting BitLocker on a Windows box, which a lot of companies should be doing, but don't,

1:10:58

I can literally just shove a thumb drive into the cage, assuming now I can get into a lock cage.

1:11:03

And my trick for getting into the lock cage is usually key reuse,

1:11:07

because all these little del boxes, a lot of the times, are going to have the same key.

1:11:12

So they might be like, head of them locked, and one guy just left the key in,

1:11:16

just grab the key and like go to the other cage, open it.

1:11:19

That's super hard.

1:11:20

And sometimes a lot of the data centers have hands on deck.

1:11:23

So they have the ability to go to your cage anyway and open it for you.

1:11:27

So I've yet to use that too.

1:11:28

Like they actually did secure it well and had different locks of different things.

1:11:31

And I'm like, oh man, I forgot my keys back in the office.

1:11:34

He just opened it up for me and it opened it for me.

1:11:36

And I stick ConBoot thumb drive in since I don't actually have a login.

1:11:40

Reproduce, that's not a word.

1:11:49

I reproduced a production server in the middle of the day where it's not supposed to go down.

1:11:52

So that when it comes back up, I can bypass the Windows login screen

1:11:55

and then have proof that I've been there.

1:11:57

And I'll leave a little text file on the desktop of the administrator,

1:12:02

you've been phoned, just this proof that I was there and then leave.

1:12:06

Sometimes they'll be like, I want you to get something off of it.

1:12:10

But I'm always very careful when they say that and double check the SLW

1:12:13

to make sure that we're not getting scammed by some company who wants us to hack a competitor or something.

1:12:20

But yeah, I know a lot of dirty tricks.

1:12:21

I can't tell all of you my freaking tricks, but there's stupid bypass tricks.

1:12:26

It's physical security testing.

1:12:28

You don't have time to be picking a lock, common weaknesses in locks,

1:12:31

things that can be exploited by things like bumpies.

1:12:34

Anybody who's gone to a tool workshop knows about a lot of these things.

1:12:40

And they're great open organizational lock pickers.

1:12:42

Give them a shout out.

1:12:44

And Deviant over at Red Team Alliance, really great at explaining how these things work.

1:12:49

And I'll defer to them in that subject area because that's their wheelhouse.

1:12:54

But also, flippers are great.

1:12:57

I never used one on the actual engagement, right?

1:13:00

But they're fun to play with outside of that for awareness of things.

1:13:03

Loading key cards, for instance, when you need to.

1:13:10

So the electronic locks that are out there now, are you finding those easy to hack as well?

1:13:13

Or is that something that's a little tougher?

1:13:17

So there's this tick in our industry named Leslie Carhart, Hacks for Pancake.

1:13:22

There's a lot of research into this area.

1:13:24

When her karma complex was going to mandate that she use an electronic lock and replace her

1:13:30

traditional key lock system that kind of set her off on, well, I work in the security industry

1:13:34

and I know that's not secure.

1:13:35

But I don't want that.

1:13:36

And they're like, well, you can't live here if you don't go with our lock.

1:13:39

She's like, when you agree to live in a house that has no lock on the front door,

1:13:44

I mean, it's been a block to really just delay mechanisms anyway.

1:13:48

But now you're going to cost all the vulnerabilities of the internet of shit into a lock.

1:13:52

And a lot of these are not well secured or designed in the first place.

1:13:56

Or if you're on the same network, there's ways to essentially open a damn lock.

1:14:01

And a lot of people aren't securing their Wi-Fi all that well anyway.

1:14:05

So I mean, there's a lot of different attack vectors when they come to these locks.

1:14:09

The hotel ones that were very popular a couple of years ago all had a barrel jack.

1:14:13

And essentially, there was a little device you can make with an ESP32, like a little microcontroller,

1:14:20

where you wire those wires to GPIO pins on this thing.

1:14:26

And it would emulate the device code from the manufacturer that they give to the people who

1:14:31

install these locks. So essentially, you could reset the lock on the fly and open the hotel

1:14:37

room doors. That's like sticking something into a barrel jack and waiting three seconds.

1:14:41

So like also some are designed to fail open in an emergency instead of fail closed,

1:14:46

which obviously they should be in case you fire and stuff.

1:14:49

So I mean, if you really need to get into a target room,

1:14:53

some places maybe pulling a fire alarm might unlock all the doors for instance.

1:14:58

Well, technically by fire code, they could fail closed from the hallway into the hotel room,

1:15:04

but the hotel room out, they can't. So yeah, if they're programming them to fail open

1:15:12

to ingress, then they is what they're doing. Just to them, I guess.

1:15:18

Well, but in the fire situation, it's egress.

1:15:20

They don't care. No, I know.

1:15:23

But they're just going to do whatever is easiest to them.

1:15:25

Yeah. But that's, I mean, hotel states are not safe. Also, I get everyone's

1:15:30

are that I mean, 90% of those, you can just pull down the guide from the manufacturer itself,

1:15:35

and it'll show you how to open a damn thing if you don't have the code.

1:15:38

So it's all a facade, nothing secure here in this world nowadays.

1:15:43

Yeah. Cause even now they're coming out with the, if you got a car with the push button start,

1:15:49

they're like, Oh yeah, your car is compromised. We stole in there because you can just wait till

1:15:53

they push the button and you can capture that. Yeah, you clone it. Yeah, you clone it and then

1:15:57

you're in the car. A lot of those are actually relay. So like your, so the way it works is

1:16:03

you, you capture the signal of a key before it gets to the car and you block that signal

1:16:09

from reaching the car. And then right. So now you're the one with the valid key. And a lot of

1:16:15

times doing this can also break the valid key because it's a rolling code and now they're not

1:16:19

going to match. So you can use that. And a lot of people have been experimenting with like the

1:16:24

flipper with the original firmware that let you do this have essentially broken their own

1:16:29

ability to get both into their cars and parking garages from their own device and had to go get

1:16:34

them reset because they're using rolling. I have that planned. I was just so named that I was

1:16:39

actually what we were talking about was Googling flipper because I had heard, I get, I'm not a

1:16:43

tech guy, but I heard that that's what gets people into a lot of things. It gets you passed a lot of

1:16:48

electronic locks. Yeah. So I do have a episode planned for the flipper zero, but I wanted to

1:16:53

actually get one and play around with it first. Okay. And so, so Frank knows people here in Vegas,

1:16:58

they run a vending machine that will take cash that has flipper zeros and other things. Really?

1:17:04

But I had trouble accessing it. So, but yeah, if you have, I blame Drew, apparently they're,

1:17:10

they're moving location so the vending machine is temporarily inaccessible now.

1:17:14

If you had gone the first time we talked, you would have been able to get in if you

1:17:17

had like hit the button at the door and like wait a minute for them to answer. They would have

1:17:21

buzzed in the user. But you know, you know, Drew Redshift Porter, he's in a lot of the same groups

1:17:27

as you and me there, Dave. He can help, help you get one if you want to buy one in cash instead of,

1:17:31

you know, buying it off the websites. Do you know about any other place besides Vegas to do that?

1:17:36

Because I know a lot of our fans would like to probably get one of those but not have their

1:17:42

names tied to it. You know, in terms of in real life locations, I think that's the only one I've

1:17:49

ever come across. Okay. You know, maybe in terms of your local hacker space, if you've got one or a

1:17:55

DC7, a DEF CON meetup group, there might be somebody willing to sell you one. I think I've seen

1:18:01

them on XMR Bazaar as well. So if you, if you want to buy them with Monero, obviously you're

1:18:05

giving away your address or and address to the seller. But use a drop, you know, when you

1:18:13

discuss that on the show. Oh, yeah, Dave put in depth with the like fake fingers you put on with

1:18:17

fake fingerprints. Yeah, we got all into that. It's kind of cool actually. I love how Dave dresses

1:18:24

like how people think I should look. That was kind of the point. Yeah. That's not how I normally dress

1:18:31

for those of you that you're my stereotype. I love it.

1:18:36

Yeah. So anything else you wanted to bring up?

1:18:39

Hack the planet. There you go.

1:18:43

Yeah, we're so we're on a free version of zoom and we've got eight,

1:18:49

eight and a half minutes left. So before they cut us off, we have to restart it if you want to. But

1:18:54

I'm gonna think what else I've got. Yeah, I kind of want to just like let Frank do his thing.

1:18:59

Yeah. You want to talk about anything or you want to advertise anything?

1:19:04

Sure. I'll shamelessly plug my company. Oh, please don't. I have a penetration testing company

1:19:09

called Steel Trezza, S-P-E-L-E, you know, the E at the end, not just like the way Steel is spelled.

1:19:16

And then my last name, which is also hard to spell. So we're shortening that to S-T-A in the

1:19:20

future. But right now it's steeltrezza.com. And we do penetration testing, secure architecture design,

1:19:28

a lot of the things you'd think a hacker would be good at. We do. And that's my shameless plug

1:19:34

there. And I have a podcast, which counterserville podcasts on Mondays, which Dave, you're always

1:19:40

welcome to hop on men, you know, and we have guests occasionally. And we shoot the shit every

1:19:45

Monday, kind of like you would do at a bar with a bunch of hackers at DEF CON. So it's

1:19:51

fairly informal. We talk a little bit about what goes on each week in terms of race and security.

1:19:56

And we waste a lot of time just going off topic and having conversations about things that interest

1:20:01

us. So feel free to tune into that. It's on the R&D YouTube channel. Adrian Crenshaw,

1:20:06

being a good friend of mine, who I used to do recording of security conferences with,

1:20:10

and run a podcast with. And now we do our podcasts on his channel every Monday.

1:20:14

So nice.

1:20:15

That's at seven o'clock Eastern. So feel free to check that out if you're a person who was

1:20:24

interested in the topic that counterstaffel podcast.

1:20:28

Some of those links over signal so I can get them on our episode page.

1:20:33

And then counterstaffel.net is our website there. And I'll shoot the links on signal.

1:20:39

So are you self taught or did you get from our education?

1:20:43

I'm a weird hybrid man. My older brother Richard taught me a lot when I was little.

1:20:48

And I taught myself a lot when I was older. And a lot of it was the need to get online

1:20:54

in an age when it was very expensive to get online and needing to learn how to

1:20:58

pick AOL into letting me online with knowing that they don't sell you verified credit card

1:21:03

till the end of the month. And I remember doing that snowballed from there.

1:21:10

Oh, so that's great. Is there any advice you can give me?

1:21:12

Dave, you got any prefixes, man? Any advice? Yeah.

1:21:17

People like me, I'm not a strong electronics. I mean, I know enough, but I don't like,

1:21:23

I don't want to, I'm more of a proper and I'm more of a, I won't, I won't upload the QR codes.

1:21:30

I won't touch those damn things. What is, yeah, so that's my personality. So anything to

1:21:36

for advice for somebody like me. Enable multi-factor for everything that supports it.

1:21:42

All right, MFA authentication. Use, I'm not, I hate recommending this one,

1:21:48

but it's easiest for people. Google is a decent two-factor for a lot of things.

1:21:54

If you are an average user and don't know how to set up a self-posted version of this,

1:21:59

having a password manager is also really good. So right now I'm using Bitwarden and myself.

1:22:04

So I'll recommend them because they have a free version so you can use them both your

1:22:08

cell phone and your computer, but there are more secure self-hosted alternatives to that as well.

1:22:15

In general, keep your things secure. Don't reuse passwords. Don't give out more information than

1:22:22

you need to. Be cognizant of your surrounding and have an idea of what's going on when you're in

1:22:30

public and not get taken advantage of. These are all kind of things I'm sure your audience is

1:22:35

already pretty familiar with based on the few casts that I have seen of you guys.

1:22:41

But in general, the biggest one thing that most people do that's stupid is using variations on

1:22:46

the same password everywhere. So don't do that. And then when your stuff is leaking a data breach

1:22:52

and I go to look for your password, I won't be able, I'm being the royal we here, won't be able to

1:22:57

use the password you used before to get into your current shit or try permutations of that to get

1:23:05

in. And if you're MFA-ing everything, it's more than just getting a password anyway. And don't use

1:23:10

SMS as second factor for anything. As my friend Lucky has been screaming from the hilltop since

1:23:16

2017 or probably sooner, SMS is not secure. Even before China popped it, it wasn't secure. It wasn't

1:23:23

secure because we let vendors take over a cell phone number to send SMS messages that get responses

1:23:32

to it. And a lot of them don't check you even own that number. So like SMS has never been safe.

1:23:38

So don't use it as your second factor because they're really stupid way to get pop. And if you can,

1:23:45

you know, use responsibly managed encryption. And I'm only saying responsibly managed in the

1:23:51

ironic sense here. And that if you lose your keys and you're not a tech savvy person, you know how

1:23:57

to back them up and have them somewhere, you should use one of the services you can pay for

1:24:02

that will hold them for you. And you know, we're not going to then just resell that crap. So

1:24:09

it's a matter of doing a little bit of research first and taking people and companies you want to

1:24:14

work with and not just going with whoever the YouTube people tell you to go by this week.

1:24:21

They're getting a kickback from. Also for your average user VPNs aren't even needed because

1:24:28

ACBS is almost on everything nowadays. Anyway, you know, if you're just an average Joe going on

1:24:34

the internet, you know, the whole also Netflix thing, like, oh, you can watch Netflix in the

1:24:38

other country kind of bullshit because they have a list of the VPN endpoints. It doesn't even work.

1:24:46

I just travel for work a lot. So I had a VP in hotels and coffee shops. That's what he's

1:24:52

going to be here for. You know, if you're going to give your guests in your house access

1:24:58

your Wi-Fi have a guest Wi-Fi network that segmented from your other devices.

1:25:02

Things like this are fairly good advice in general. You know, it's not too hard.

1:25:06

And most consumer grade devices nowadays, you set up things called VLAN where your Wi-Fi

1:25:11

also has post isolation. So the people on the Wi-Fi can only see out to the internet and not

1:25:16

talk to each other on the local network and turn off UP and P on your own router. And we

1:25:22

need to open a port do it manually because UP and P is a really nice stupid way people

1:25:26

expose things. They don't intend to see the internet and then those things get hacked and

1:25:30

people get your network through them. Oh, that's actually really good advice. We got two minutes

1:25:36

left. You were cool. Yeah, I think we're good. So yeah, thanks for joining us. No, I really

1:25:40

appreciate it. I love talking to you. It was really good. I like that. Like what you do. Thanks,

1:25:44

guys. Appreciate you. Hope you have a good rest of your day. I hope you do. All right, man. Have a

1:25:49

good one. See you. All right. Thanks for listening. Okay. Good night. See you guys next week. We'll see

1:25:54

you next week. Hope you enjoyed the show. Thank you for joining us at the Canary in the Cage Podcast.

1:25:58

Don't forget to like, subscribe and share us to help build the community. You can find us at

1:26:03

Odyssey, Rumble, YouTube or your favorite podcast app and even on the dark web at I2P. Thanks for

1:26:10

listening and see you next time.