The information economy as a rod. The world is teeming with innovation as new business models reinvent every issue industry. Inside Analysis is your source of information and insight about how to make the most of this exciting new era. Learn more at inside analysis dot Comside Analysis dot com. And now here's your host, Eric Kavanaugh. Keep welcome. It's all right, gentleman, Hello and welcome back. Once again. It's the only coast to coast radio show all about
the information economy. It's time for Inside Analysis. Yours truly is here with a very special guest. We're going to talk about securities, a problem that never goes away. It never will go away. It's always going to be a challenge. It's changing by day. We're talking to our Pergosian's a company called bright If it's b R I T I V E. And alright, I'm gonna tell you security. It's one of these issues that only a handful of people at the company, and my British in this partner one time cracked
a joke. He said there's only one person who has about security and his name is scape goat, meaning the person who was in charge of security just gets blamed when something goes wrong and they fire that person and get another person, but they do the same kind of stuff. But one of the more clever comments I've heard about security over the years, and I think this is very, very true. I'm sure you'll agree with this, is that security is not a thing. It's not one object. It's not a technology,
it's not a process. It's a whole amalgam of education, of protocols, of technologies, of observability, and just paying attention. You have to pay attention all the time with this stuff. And I can tell you, folks, in the last four or five months, I've had my corporate debit card hacked twice, which is annoying. Once is okay, because that way I
can see and remember all stupid things I signed up for. You get all the emails that, oh, your credit card was declined, like, yeah, I know, because it got hacked, and I didn't really want to go back to you guys. And luckily the just laters around the country here in America at least have done some good work in not allowing these organizations to keep hammering you with late fees after it goes away. These days, you
just don't get your service anymore. And it goes away. But nonetheless, the security issue is so important, it's never going to not be important, so you always need this cocktail of technologies and processes. And then even still you're going to get hacked sooner or later, So what's your path to remediation? There are lots of things to consider here, but if you choice words or tell us a bit about how you got into the space and what you've
folctured. Yeah, thank you, thanks for having me here. I got into security, and back then it was more about network security or it security as they call it. It's certainly involved quite a bit since then, it's become you know, arguably even at board level issue that's you know that we
see today. But you know, hacks or attacks have gone from just a network breach to steal some data to on cyber warfare or cyber crime, and ransomware is one that's is so lucrative these days for the criminals and so disruptive for many companies in the industry. Right, So it's a very different world
today that we live in. National experience before this company, before Bright, I've been in a space mostly from consulting and services industry, in that industry and I started also another company about ten years ago in identity and Access Spanish minsters Space, but eventually which led you know, and exited that company led to forming by the UH and specifically focusing on the problem in the cloud, you know, space or cloud public cloud technologies and building a product to the
market that hows security risks and vulnerabilities that are preventing businesses from adopting and expanding their public clouds consumption or the clouds adoption. Right, well, let's let's talk about how you do that, because there are lots and lots of ways, and I do like that you're focused on identity management because let's face it, if you're trying to log into a system, the system is trying to
understand, okay, are you the person that you say you are? And historically that's been largely done by passwords, which of course is a pain because you have to remember the passwords, and a lot of people use the same password for everything, and that of course is putting yourself in jeopardy because then folks can hack in and do all kinds of stuff. And you know, it was my business partner, doctor Robin Blore, who years ago taught me
that this whole crime network is not just individuals. In fact, the whole narrative around guy and the foodie being the one who's going in and hacking your system is very disingenuous. It's it's not a guy in hoodie. Sometimes it is, but usually there's this whole industry involved. There are people who specialize in getting access or people who specialize in exploiting that access, and then we'll
just kind of sell their access to other players. And then you have cases like the Colonial Pipeline, which some folks may recall a while back before the Russian invasion of Ukraine took down the East coast's ability to get gas to gas stations. And you know, when I saw that, I thought, I saw this is an active war. This is not just some ransomware. And the government has never come out and said that, but I believe it was
an active war. And it goes to show you so someone actually did the math and figured out, hey, it's shut down distribution on the East Coast, and that would be a very significant inconvenience and in fact put people jeopardy, right, ambulances, things that can't get gasoline. That's a pretty big
problem. So it's not just individuals. I mean, to your point, there is cyber warfare that goes on state sponsored actors, and I think the folks at Google and Facebook and Who and these other big organizations certainly worked very hard to stop all that. Your role and how you fit into this bigger picture. What do you do to enable and sort of provide to all these conproviders. Now that's that's very very good background, just kind of how are you like the state of the world? Really? Uh, why why we
decided to really invest in building in technology? There's any important thing to talk about here. With the clouds technologies and adoption of public cloud, there was a huge change in paradigm shifts really in the world of you know, security and identity, specifically in the back ald the critical know it ass when the
data center. The security model was to protect the data center from perimeter aside from the walls, of course, but there was a perimeter security that work, you know, firewalls and ideas and so on, and I identities existed inside the firewall. With public cloud, that was a complete opposite. Identity essentially became the first and last line of defense when it comes to clouds,
infrastructure and applications. It's fun. That's why identity for us became the first and biggest security elements to protect and what that means from like examples you gws,
they all have pretty robust security controls and identity models. The challenges for any organization operates across different technologies and they also operate on top of the cloud providers infrastructure and security controls and security model that goes across the different providers and they're not Security is very different than AWS, especially when it comes to identity and how they protect. That's what right That's why right of came to market
with a solution that works across the cloud providers. Another very important thing that we did, and this was something that we saw as we were entering the market. We saw a huge issue with what we call is overprivileged access.
So a lot of times organizations with intention to bring products and new applications to market to support their businesses and growth, we really had to do things from security standpoint in a way that we're not ideal, like giving a lot of access to users assuming they're going to need that or they may be needed at some point but no longer needed later. That created this exposure risk, exposure when access existed but nobody needed it. Of course, attackers love that situation.
That's why you started seeing breach after breaching. Capital Wana was one of the earliest, like clouds, privileged access breaches that we came to know about. That speaks to one problem that we know. What I mean by that is when you give somebody access with assumption they needed twenty four by seven, that access always sits there and the only thing that prevents somebody else to gain
access is a login name and password. It's a terrible security and it's a very vulnerable security to protect, right, So we decided to change that with bred it. We really kind of invented the newer a better way to do it to eliminate everything when the user doesn't need that access. So when it comes to human users, none of us can sit in front of a computer twenty four by seven by three sixty five, right, We can do our
job at certain hours, but after that we don't need that access. So what bright it does is automatically grants that access when the user needs but also removes automatically when that access is no lover needed until the next time to use your needs it. That's a massive reduction of the risk exposure and then attack
surface. Yeah, well you would mentioned something that's interesting. You talked about the models, the security models that these different providers have, and I know if you could do to better secure your environment is to identify where someone logs in, what office are they in, are they in a different office than they normally are in, and that would be in a profile around the user. So the identity management of Chuck, let's say, is that he dials
in from Pittsburgh, Pennsylvania. That's where he works. And if he goes traveling somewhere, you know, wouldn't it be great to know that he's traveling. And of course these banks have systems they don't always work very well, but they say, hey, are you going to be traveling and you say, yes, I'll be traveling to Austria next week. So if my credit card comes across in Austria, it's me, So don't block me out when I'm trying to log into my systems from Austria. Well that's a nice way
to do it, but it's expensive, it's a bit time intense. But these days it seems to me it should be relatively easy if you have the right technology in place to identify the pattern of what is normal, and the normal pattern for Chuck would be he logs in at nine am, he logs out at five pm kind of deal. And if he logs in at two o'clock in the morning, oh well, maybe you kick in an extra security loop to say, hmm, are you really you? And of course people
know these captures. The captors drive me completely bonkers. I hate it, especially on my phone because I'm like, I just give up. I'm like, I won't go in. I don't care, I'm not going to go Is this a bike? Is this a bike? Is? Okay, It's
very annoying. But the point I'm making here is that you can build a profile around the user and then understand who that person is and when they're doing things like they normally do, you still have security, but at least it's a lower level of security when they're doing things and not normally doing that's when
you kick in a higher level of security. Is out about right. That's harder to saying right, and you're correct at Technology today has come a long way and being able to actually do that and do it with a minimum disruption. To your point, captures were invented in what twenty years ago, I think, uh, you know, move that both in security and end users.
Some of the things that we're doing along those lines. When you look at a pretty significant a number of users for Pride or involves cloud developers, DevOps engineers, swe they will just have to do a lot of different things during the It's not a very static, sort of a linear pattern of work, so they jump around a lot of doing this here and something else there.
What we do, what we try to do is gather activity across uh, you know, during the day, across the environments that they were in, whatever an engineer could do with standing up a storage you know, or compute instance or whatnot. So we can actually look at that data from the from the pattern, stampo over time and say, you know, over let's say ninety days, the normal pattern for this type of user has been X, y and Z. Why that's important is because we could also detect when
something goes completely in a different direction one day, right. That allows us to care alerts not looking and fear right can quickly take a look and understand
is it normal? Could they could be a legitimate instance of that situation, but we'd rather verify that than let it go right, So that helps us also enhance you know, the model of like what we should give to home because that also has the data, same data, and analyzing the data helps us understand what next time, next patch of users, what is the normal pattern of access they shouldn't so we can make those grants very easily and immediately.
But basically, if I understand it, you're I mean security have to sit in between systems, right, So someone is on the outside, they're trying to get in to a cloud environment that may have eight, ten, twelve, twenty different applications. And you know, you made a good point about developers. I have developer friends and they tell me that the biggest pain in their job is just logging back into the system. Logging back into that
system. People in the consumer world, now you have all these different protocols. Oh, it's got to be ten characters and a special character. It can't be two characters side by side, like you know, two characters in a row. All this these goofy sort of bespoke rules that mean you have to go with different passwords. And then of course Google allows you to do
that password management feature and they're a system and that's what I use. But of course if someone hacks into that, now they've got access to all your stuff. I mean, these security issues the sorts both ways, right, the adage every sword cuts both ways. I always thought about the key fop. They're like, oh, key fop, that's great, unless someone gets your key fop and they can walk through the parking lot just going like this till they find your car getting a drive away. So it's like some of
these security measures wind up being security risks essentially. How do you balance that out and how do you sit in between So when you actually deploy to a particular client, you're sitting sort of at a layer outside of their environment. But can you also get in to track what they're moving? Tell us about that quickly. Yeah, And early in my career in the security space, somebody said this and it really stuck in my head. The best security is
invisible security, so the end user can't see there. It's been very hard to actually get get to that stage, but I think we're getting getting Definitely we're moving in the right direction. We're not quite there. I'm realizing I'm realizing we're upping our first break. So stand by all that thought, we'll be right back. You're listening to the inside now. What if you could
own a piece of the future. What if you could build your next castle, not on sand, but on the bedrock of a modern blockchain ecosystem. The first Internet gold rush made millionaires, but the third wave is just gathering now and anyone can get in on the action. Hop online to crowdpointtech dot com to learn how you can secure a foothold in the blockchain revolution. Whatever your passion, wherever you want to go in life, there's an opportunity awaiting
you right now. Go to crowdpointtech dot com to learn how the blockchain will fuel the next generation of innovation in this globally connect crowdpointtech dot com your trusted agent in an untrusted world. What's the longest running radio show in the world focused on data? DM Radio. Want to be a guest sometime? Send an email to info at DM radio dot biz. That's info at DM radio dot biz. What if you could own a piece of the future. What if you could build your next castle, not on sand, but on the
bedrock of a modern blockchain ecosystem. The first Internet gold rush made millionaires. The second wave is minting billionaires. But the third wave is just gathering now and anyone can get in on the action. Hop online to crowdpointtech dot com to learn how you can secure a foothold in the blockchain revolution. Whatever your passion, wherever you want to go in life, there's an opportunity awaiting you right now. Go to crowdpointtech dot com to learn how the blockchain will fuel
the next generation of innovation in this globally connected world. That's crowdpointtech dot com. Your trusted agent in an untrusted world. What's the longest running radio show in the world focused on data? DM Radio? Want to be a guest sometime? Send an email to info at DM radio dot biz. That's info at em radio dot biz. Do you need to get your hands on some extra money right now? Maybe twenty five thousand or more If you're a homeowner,
Now it's a perfect time to get cash out. Well in many neighborhoods like yours have gone up in value. You can use the money for anything it's yours. You can buy an in their interest debt, or make home improvements. If you need twenty five thousand, fifty thousand or more, now is the time home values are up and so is your way to use it. No need to use your savings. Called New American funding now and see
how much catch you out you can get. Call eight hundred seven one h three seven bridge seven one h three seven three nine, eight hundred seven three nine, eight hundred seven one h thirty seven sixty six h six Www dot MLS, sumer xs dot org. This is an opera or commitment to end subject borrow or improperty qualations. Not all borrowers will qualify. Terms and conditions
apply equal housing opportunity. When a player in cardiac event brought a national football game to a halt, it's shown a spotlight on the importance of CPR readiness. Now, with youth sports in full swing, the American Heart Association is rallying parents and coaches to be ready in emergency. To be ready, learn hands only CPR. It's a skill anyone can learn in minutes. Just visit Heart dot org slash hands only CPR. Hands only CPR is nationally supported by
Elevant's Health Foundations. Fly anywhere in the world and pay discount prices on your airline tickets. Book a flight today to London, Paris, Madrid, or anywhere else you want to go and pay a lot less guarantee, call the International Travel Department right now at low cost airlines eight hundred two nine eight five seven eight three. Eight hundred two nine eight five seven eight three. That's eight hundred two nine eight fifty seven eighty three. Welcome back to Inside Analysis.
Here's your host, Eric Tavanaughture. Okay, folks back in front Analysis or through the air Kabana with art forgoes in of bright br Ike Ibe. We're talking now about security, getting access to systems, how annoying security can be, but how important it is because when someone gets in, especially with ransomware, and they hold all your stuff hostage. Like I said, the Colonial pipeline shows you how much can be held hostage. Major hospitals have been
held hostage by these things and that. But argue, we're talking a moment ago about how ideal security, which you know out of the covers, can be very powerful these days because you can test all kinds of things. Right, where is this person? What device is it? I mean to me that's one of the key characteristics, right is like is this the device that the person normally uses? I think that's why you see so much focus on these mobile devices these days, and there it is because there's a signature,
there's an IP addressed and there's the unique signature of that device. I'm using that device and it's with me, it's run that. Okay, that's probably a good a good person to grant access too. But tell us more about this invisible security and how you folks do it. Yeah, so how will
you approach this? As certainly a combination of different things, and it does include something you mentioned right, So instead of constantly being the abruptive in forcing the user to re authenticate or prove to the system who they are, we use data. We use some things that we can gather without interfering with the user and their activity in the system that helps us be a fairly user.
There's also systems that we gather the outside of writer that we gather that prompt so like the authentication service provider, which can be anything from Microsoft Gator to Actor or what they do, have data that that is very valuable. We also gather some of our own data that helps us prove and validating the user. Ultimately, though I think there's definitely enough awareness already even in the end
user communities that security is very important. So if you are going to if we are going to centrally enforce certaincurity rules along the way along the process, that we do it in a way that they understand. And why this is important especially in communities like developers, right, because they deal with a lot of very sensitive infrastructure and data. So we do have some control in a place that when the when the time and the trigger is there, we need
to enforce. So one of them would be to, let's say, have them re reauthenticate or step up authenticated as we call it, to prove that there are still gemate users. Ultimately, the goal is to make it at least disruptive and allow them to do their job. I would have to think that the vast majority of breach incidents occur upon logging in. Other words, if someone's logged in already, you know, usually they're going to be working. I suppose they could walk away and not log out that kind of thing,
and then someone could come up with their machine. I mean, that does happen, but I'm just guessing that the vast majority of breaches are at log in time. A fresh cold breach, is that, right, Kenn We I don't know. What the stats are truly about that, But that is definitely a very likely scenario. It's a good guess. Yeah, it's it's you know, when what's users in session, right, that that's now an active you know session that attacker was able to you know, it used
to be as type of a tackle man in the middle. So if that was the scenario, then yeah, the legitimate user wouldn't even know somebody else is piggybacking on that session, right. I think there's another very concerning trend in the growing type of attacks is when the interactive user human users not even
uh it's not even involved. For example, again, when it comes to cloud technology, there's there's a lot that's already uh you know, visible and accessible to APIs and attackers who would love to just exploit that rather than trying to exploit a user session. Right, And that's what we also have again as an industry, we're playing a catch up game here trying to protect these non interactive you know, doors and access points into cloud data and cloud applications.
So for example, how Brider does that is we have this constant of non human you know or synthetic or machine identity us and calling that we allow the customers to define any process, any technology that requires access to their infrastructure and data to authenticate much like human being, and provide the like validation that who who they as as a non human identity, machine identity, who it is and or functionality? What API, what service they can access before they
allow that? Right, So this again adds another component of you know security here that instead of just assuming whoever's access an API is legitimate, trust and verify. Yeah, I love the trust and verify thing. And you pick up a really good point about API access and just machine to machine conversations right
constantly as APIs are hit twenty four to seven. So is that a new security threat or a relatively new security threat of people mimicking machine behavior in order to get behind an API, grabs some information, pull it back out. It looks normal, It looks like the normal call. It goes from into it quick book in my bank for example, back and forth. I mean, those are the really precious connections to infiltrate, right is when you're going
from one place to another. And I mean I remember I think targets fact system or something. So it's like, well, it wasn't some user, it was the machine to machine conversation that was co opted, and that's just as dangerous as any human loss. For an example, you know, the problem is a type of mindset and approaches don't work when it comes to cloud what I mean, for example, to detect a user human user breach,
typically security would review the human logging attempts. They wouldn't necessarily API log in it. So it's a fundamental issue. Is there enough visibility? Is there enough data? It's being sort of you know, view through security processes to detect all possible access points. Arguably most organizations miss that, you know, miss something. That's that's why breaches keep happening, right yeah, and that as we suggest, that can be all that's necessary to get into a system.
What should in terms of the API management stuff, how do you how do you solve for that? I mean, does your technology have a sort of pattern recognition component where you can watch normal behavior for a period of time and say, okay, doesn't want you to define normal, you can define what is abnormal? Is that kind of how your security technology works. I
certainly don't want to sound like we can do anything and everything. To be honest with you, I think the uh you know, the API type of use case is it's fair as much mostly to try to standardize and make it similar to the human active model, where security controls can be as a matter of a guard rail or a gay or security control upon time of that access. Right, So that process that's going to kind of has to prove and validate, you know, and be sort of on the right list before they
view up. When it comes to really defining patterns for the human interactive that I would just kind of more of a next, next stage problem. It's just because it's so much more complex and tracking like the human activity and yeah, it's it's it's one of these one of the most complex problems that needs to be solved. Talking about the multi cloud side of the equation here.
That is a very useful bit of funkntionality. I can tell you from a business, I have to care about the difference between as your and gu folks can care about that, and you folks can care about adhering to their protocols, which I'm guessing they update on some relatively frequent basis, so you have to stay on top of how their protocols. Again, APIs ideally you don't want to have eyes that you want them to stay the same such that everyone can use it the same way they were using it. But in terms of
these different cloud environments, how do you tackle that? I mean, you have sort of a layer of abstraction that can say, okay, this is for as your so use this functionality, this is for GCPU. Yeah, that's a great point actually that a lot of people don't even think about the whole ongoing you know, ongoing aspect of how do you maintain how do you
keep up with a very dynamic world of you know, cloud technologists. That's actually one of the inherent benefits of what Brighte of offers that we are. We maintain that we we are constantly monitoring and you know, detecting changes and the key functionality that that right of itself relies only it's GCP or Azure or whatever opera function that's our job. That's what the customers don't don't have to, you know, worry about that that that you know, individually, they
don't need to monitor because we do. And that's part of our limit of our IP, but our limit of our IP of how we do that so we never we never becomes or the point of destruction for the customer right right now, that's important. So basically you are solving for the security challenge across these cloud environments for companies that have people using a AWS for one thing,
you do all of the three major ones. More than that, we do four major ones, including Oracle Cloud infrastructure okay, and there's a couple of dozen non infrastructure clouds like Snowflake Service. Now it's one mm. That's a full time job. Man. How big is your company? How many people? We are? Fifty full time team members. Yeah, it is what I'm in. More than that, what what percentage are actual developers and engineers? Like, out of fifty people, what percentage are people who are coders
or engineers or people of that technical nature. That sounds about right, because you can't you can't stay on top every I mean these each one of these environments keeps changing. They have updates all the time, and you have to stay on top of that stuff. It's and it's changing happily these days.
It seems to be up there. How concerned are you about quantum computing and quantum going mainstream, which IBM I guess indicate should be happening into five years or so, because one of the concerns I've heard is that with quantum computing, all traditional encryption goes out the window and you're gonna have a very hard
time dealing with it. Now, in my simple mind, I'm thinking to myself, well, there's still are tactics you can put in place to rebuff those sorts of attacks, like distributed to knowledge service attacks, things of this nature. There are things you can put a place to you know, throttle those things. But overall, it does seem to be a very significant risk that's coming down the pike. What are your thoughts about quantum and what can
we do about it? I'll be very quick. So I think it's revolutionary for sure, right, and it's going to definitely have a deep impact on security. But I also know a lot of times the breaching, the attacks happen because of very basic issues and like the hollow security heyme more than not having so I think as an industry we need to eliminate like the for attackers
to get in. But with quantum, I think it's also the benefit of having better technology for security as well, so the leverage property then we will also have better defense, right, So it goes both ways. Basically, the good guys get the bad guys get it. Yeah it is. You know that we're talking about a cashlest society. Everyone's talking about a cashlest society
to day. I'm not gonna lie. That does concern me. I know that you can counterfeit printed dollars, but you can also hack into someone's account and make the money go away. And our most recent attack on my debit card, it made it look like it was Google ads, like we were just buying Google ads, and lucky for me, we don't buy Google ads. So I'm like, hmm, that's interesting to have a whole bunch of
And they started small, and they started ramping up. It was like twenty dollars, seventy dollars, forty two dollars, one hundred and fifty dollars. I'm like, wait a minute, why why am I broke again? I know I'm not that foolish, and yeah, because I was hacked again, and just you know, it frustrates the end user to have these experiences because you think, shouldn't the banks beyond this kind of stuff. Shouldn't the banks
be watching for these kinds of things. And if you get into the system where you can be in the banking world, transferring money back and forth.
Well, you have to have some identity somewhere that can be trapped and managed, right, I mean, I just I'm kind of fascinated at how affected these bad guys are at infiltrating banking systems because there has to be a signature of where they came from, right, I mean, I know when the security were a lot of times they use proxies to kind of bounce around from
place to place, so you can't tell where they came from. But when you're pulling money out, I mean you're grabbing all kinds of metadata of what system was on, what the operating system was, what the browser was, what the location was. All that stuff gets captured. I'm kind of surprised we don't have more success Or maybe we do and I just don't hear about it. What are your closing thoughts on just the state of security in this
world and why it's still such a problem. Yeah, certainly this just come a long way, you know, again, twenty years for me to see that. I really still think that, you know, security's job. It was an interesting, you know comment made earlier is about the security being scapegoat. Right, it's it's it's a very tough job to have because they always have to balance security versus you know, a business, you know, priorities
and objectives and especially interfering anything that's important for the business. Right so and there there's inevitably trade offs. Inevitably, it's always it always comes down to trade offs. I think, you know, as an industry, you know, as the practitioners out there in the field, you know, make decisions and sometimes, hopefully most of the times are the right decisions. Sometimes they're not, and you see outcome. Do you see consequences from the vendor community.
I think we are really making some really big, you know, headries into bringing technologies to to the practitioners, to the uses of the world to actually make that balance or decision easier where security doesn't have to cost productivity, security doesn't have to cost the business a jolly and industry with real secutors or this would be to be a huge factor in how the how we food an overall posture about the industry and the securities. Well that sounds good, Art,
well, thank you so much for your time. Folks. We talking to Art Pergothi and look them up online. Right if Briibe dot Com will be back to elect to that of your IRA into physical gold and silver. With a tax free rollover, you can diversify and safeguard your holdings from downturns by putting your IRA back on the gold standard. Find out how to safeguard your ass with a tax free rollover with the only IRA that can hold physical
precious metals. Call now for your free gold and silver report. Protect your IRA today with one simple phone call and learn how to quantify for up to ten free silver called Genesis Gold Group Empowering Faith Driven Stewardship eight hundred six four four eight six one one eight hundred six four four eight six one one eight hundred six four four eight six one one that's eight hundred it's four four eighty six eleven. Do you own an annuity either fixed rate indextra variable? Are
you paying high fees and getting low returns? If so, Annuity General would like you to have this free book to learn the pitfalls and mistakes of being an annuity. The Annuity Duds and Donuts for Baby Boomers contains the little known truths about annuities, like how to help reduce your fees. It's free, that's right. Also throw in a free annuity rate report just for calling.
We researched over one thousand annuity it's in benefits from financially strong insurers. You get annuity duds and don'ts for baby boomers and the Annuity Rate Report both absolutely free for calling. Annuity General Today. Hurry supplies are limited. Call now eight hundred two four five one six nine seven, eight hundred two four five one six nine seven eight hundred two four five one six ninety seven. That's eight hundred two four five sixty. Do you own a timeshare? Well,
face the facts. You made a mistake, You made a bad purchase. A timeshare is not an investment. It's a money pit that continues forever. If you use your time share that's great. But if you don't and you want illegally get out of your contract, call my friends right now at the Timeshare Exit Hotline. They're an experienced team of lawyers who help good people like
you get out of a timeshare contract that they just don't want. Don't throw away your money on maintenance fees, use it for things you really want. We can help you end your time share contract and stop the money drain immediately if you are ready to move on with your time share, Call our team right now. Cancel your time share now with a free call. Eight hundred two eight nine O four one three, eight hundred two eight nine O four
one three eight hundred two eight nine O four one three. That's eight hundred two eight nine zero four thirteen. When a player's sudden cardiac event brought a national football game to a halt, it's shown a spotlight on the importance of CPR readiness. Now, with youth sports in full swing, the amen of Heart Association is rallying parents and coaches to be ready in an emergency. To be ready, learn hands only CPR. It's a skill anyone can learn in
minutes. Just visit haart dot org slash hands only CPR. Hands only CPR is nationally supported by Elephant's Health Foundation. Now you can fly anywhere in the world and pay discount prices on your airline tickets. Book a flight today to London, Paris, Madrid or anywhere else you want to go and pay a lot less guarantee. Call department right now at low cost airlines eight hundred two nine eight five seven eight three eight hundred two nine eight five seven eight three.
That's eight hundred two nine eight fifty seven eighty three. Welcome back to Inside Analysis. Here's your host, Eric Kavanaugh. Okay, back here on Inside Analysis, talking all things identity management these days, identity resolution. Who are we out of the systems we use? Know who are invalidate us? Obviously it's a very huge issue. We were just talking to Art from bright to all about that and I was remind to some folks are doing and something
that we're actually working on. So a little special treat for our avid listeners, I'm going to give you a stick preview of something that we've been working on here at Inside Analysis, at the Blur Group with some of our partners. You. First of all was my good buddy Sean Brem from Crowdpoint Technologies and what they've built so federated ID is at the heart of their mission.
What they've really built is a ecosystem, an e commerce ecosystem that's based upon a blockchain and proprietary blockchain that they've built which also doubles as a database, so it's not just the traditional slow blockchain style data structure. But they've done some very clever things in that regard. But what I find really compelling about their approach is the fact that there are focused on giving value back to the
end user for the used to train algorithms. So if you look at all the hubbub around open ai, for example, and these lawsuits that have been filed, what did they base at the alleged They say that open ai went out and scraped all kinds of content, including copyrighted content, and they use all that material to build our model, their generative AI model. Well,
it's a good argument. If I've used someone's copyrighted material to train my engine, which I then make money from, will shouldn't the people whose content was used get some piece of that action? And that's traditionally how these things work. I did see just the other day that there was a judgment rendered in the court somewhere in the US that basically said gen ai generated content cannot be
copyrighted. Now, how they would know what engine generated the content in the first place is beyond me, and I think that's frankly an open question. But at least a standard has now been set. So what does that mean, Well, it means that there's going to have to be some more work to be done. I heard that open ai also truncated their sniffing engine engine would determine whether or not content was created by an open AI engine or a
chat GPT or something like that, which also is interesting. Students coming and they know there's something going to happen here. So what does this all mean? Well, I can tell you that these large language models, these foundational models, are absolutely amazing. They are spectacularly powerful, very very interesting. Yes, we are worried about the trust side of things, but nonetheless we have to be respectful the fact that this is going to change how business gets
done. So what does that all mean? Well, getting back to Federated ID, that was Crowdpoints Vision, and their idea is that they're going to pay attention to when your data is used for something and then pay you for that small amounts of money first pennies, then dimes and dollars down the road.
Is at least how the theory goes pollution problem at least in their work here, and this is not going to fuse these topics together here at the end of our show today, we're creating something that we're calling the Rubric, and the Rubric is going to use a large language model as its text generation tool or engine. But the moorings, the anchors of truth, the embeddings,
if you will, Those are going to come from trusted experts. And so what we're going to do is reach out to folks and if you're interested in this semi email and so it inside analysis down, if you're an expert in analytics in particular, these are the folks we're looking to talk to.
First, you could publish your papers or your works, your articles, research reports, etc. In this system that will then use them and other reports, other trusted reports as the anchors of truth for the rubric to help folks make decisions about which analytic tool to use, how to use it, what other tools can be used in conjunction with it, How could you build a stack? Basically, what does the modern analytics stack look like? And we're
planning on building that out right now. So it actually uses a technology that I've already had built called media lens, and media lens I built it. It's a lens with a Z. It runs a site inside opensource dot org right now, inside hyphen opensource dot org, and it uses that right now. What I wanted was an engine that I could use to spin up a highly focused stream of content that would be useful for a researcher. So I wanted to stay on top of the open source community. So that's where we've
targeted first. And all I did was went out and found all these different folks who tweet about open source technologies, who follow their handles media lens tracks that they track the different handles that I've given them to watch out for.
And then what it'll do is it'll grab any URL that is shared by these folks with hashtags like open source or drammio or apache or the other terms, the key terms that are associated with that particular industry, and that publishes them as pending posts in my environment, and then I can choose to post them or not. And every time I post, what essentially doing is building out
my content lake. And so this is where we're going to use the engine to help find these anchors of truth that will sort of pin down the truth and allow the generative AI functionality to spin appropriate words around the concepts that DROMPT delivers. So what are we talking about? I mean, really, if you think about Siri and these other engines that are now currently used for these
purposes, they're valuable. They can sort find information for you, but they're not really trusted experts in a particular domain, and one would be a big thing to chew off, to bite off, if you will, for the current engine. So right now, serries just kind of pointing you to different things on the web or giving you information that is readily available, like the
weather or what time of meeting is, things of that nature. But when you start getting into really dense areas of content, like in trade press around analytics, for example, well you're going to need more than that, and that's what we're focused on. So we're focused on finding the right experts to provide their materials in a trusted fashion, and then whenever that material gets used via the rubric by a paying client, the people whose insights were used in
that time mind meld, they will get rewarded with credits. Now, it's going to take a while to build this thing up, but the point is we're going to try to create a center of gravity around the finite number of vendors or a finite number of people who focus on this, and we're looking for help to do that. So, like I say, if you're hearing this and you think it sounds like a good idea, send me email info
at dm Radio dot biz or info at inside Analysis dot com. Both of those come directly to me, and we'll be curious to talk to you and maybe show you a preview of this thing. But the idea is that you really right now, folks are paying lots and lots of money for Gardner and Forrester and some of these other consultants or Boston Consulting Group. A lot of very smart people at these companies, but it's hard to get access to these
people. And they are just finite human beings, so they don't know everything,
but they know a lot about a particular domain for example. Well, if you think about the power of these foundational models to piece together vectors of information from multiple sources, if you get to a critical mass of embeddings, and this is the key, you need a critical massive embeddings from trusted sources, then all of a sudden you have a very interesting intelligent chat bond that you can counsel to find out information about big decisions like which technology should we
buy, like which technologies work well with each other. That's another very important thing to understand. It's a lot of times some technologies don't work together so well, and some do so knowing which technologies work well in which environments also very useful stuff just best practices, I mean, knowing how to go about setting up us certain pieces of information. I mean a lot of people know that, a lot of people understand sequel, but nonetheless a lot of people
don't. I think, so our rubric is going to be an assistant to help folks understand enterprise technology and out of the weeds do do some playing around and get some better answers faster and less expensively. Right, Because if you bring together all these smart minds and get good content from people who know what they're talking about, and find ways to wait those scores, to wait the information and to align it to topically. And that's what these embeddings do.
I mean, just to kind of cap it off here, embeddings are mathematical representations of text strengths. That's really what they boiled down to. And what the folks did building these large language models is you know, they did some amazing work at being able to vectorize information text so they turn it into numbers such that you can do statistical analysis more easily in fine patterns in data. Okay, this word is us context. It's also used in that context.
When does it mean this? When does it mean that? These are the kinds of solutions that these large language models can provide. They can give you really good information about what should be in a certain context and what should not. The key again is the embeddings. The embeddings allow you get to get closer and closer to the truth. So I just wanted to tease that fund stuff to you. Folks hop online to inside analysis dot com sending info at
inside analysis dot com. You want to get involved in an Southern California's MindSpring legend you love and the best talk KCA Litilindaca, Littilindaca, Little Melinda. Now here's a new concept, digital network advertising where businesses display your ad inside their building. If a picture is worth a thousand words, your company is going to thrive with digital network advertising. Choose your marketing sites or jump on
the DNA system and advertise with all participants. Your business ad or logo is rotated multiple times an hour inside local businesses where people will discover your company.
Digital network advertising DNA a novel way to be seed and remembered. Digital network advertising with networks in Redlands and YUKAIPA call in the nine on nine area two two nine two nine three for introductory pricing, that's nine O nine two two two nine two nine three for digital network advertising one last time Digital network advertising
nine O nine two two two nine two nine three. Tahebo te Club's original pure Poudi Arco Superta helps build red corepuscles in the blood, which carry oxygen into our organs and cells. Our organs and cells need oxygen to regenerate themselves. The immune system needs oxygen to develop, and cancer dyes in oxygen. So the tea is great for healthy people because it helps build the immune system, and it can truly be miraculous for someone fighting a potentially life threatening disease
due to an infection, diabetes, or cancer. The tea is also organic and naturally caffeine free. A one pound package is forty nine ninety five which includes shipping. To order, please visit toebot club dot com. Tebow is spelled T like tom, A H, E, B like boy, oh, then continue with the word T and then the word club. The complete website is to hubot club dot com or call us at eight one eight six one zero eight zero eight eight Monday through Saturday nine am to five pm California
time. That's eight one eight six one zero eight zero eight eight tebowt club dot Com with sixty years of fascinating facts. This is the man from yesterday, back in time to this time. Nineteen fifty eight, mister Greenjee of cbstv's Captain Kangaroo sings a song on the show. It's called Erie Canal and he did it once before and it's even been released as a children's record.
I've got an old mule runner name it South. Fifteen years on Erie Canal cheets good old worker and a good old pal years and from this time. In nineteen eighty, Farah Fawcett and Ryan O'Neill announced that it'll soon be married.
Ryan O'Neill was married to actresses Joeanna Moore and Lee Taylor Young. Farah Fawcett was married to Lee Majors. And what is that like when you when you go out, when you travel around the country and people say, oh my god, there she isn't because and people got they say, oh look
there's a Farrah Fawcett. Well, different cities have different reactions. I love New York, New York clubs me and from September of nineteen sixty six, the Monkey's debut on NBCTV and Last Train to Clarksville is their first single. Take the last at the station because major reservation are slowly with Moore at Man from Yesterday dot com. The Tri City Shopping Center in Redlands is serving up some really cool ice cream at Lamicho Akina. Then get your chocolates and other
delights from Seased Candies. Moms and future moms who visit the mall can cool off and relax while they get treated like royalty at Shiny Nails or Francis Nails, and then pampered at Texture Hair. The Tri City Center is filled with retailers who care about you. Shop at the Tri City Center in Redlands and see why they call it the mall with a heart. At least since the invention of the wheel, people have fixed, tinkered with, and improved every
device they've possessed. It's been a human right. But after several thousand years, suddenly legal clauses are being tucked in purchase agreements, saying that today's owners of products must not even peak, much less poke inside the inner workings of our devices. Makers of anything with a computer chip in it, everything from your car to your toothbrush. Have been especially vehement about this rewriting human nature by outlawing our right to repair. Yes, they assert, you own the
thing, but we own the intangible ideas that make it work. So at the product malfunctions, you must return it to us and pay us a premium to repair it. Plus, they prattle, you could hurt yourself trying to do it yourself, so trust us. Bovine excrement mark Steve Woseniac companies inhibit your rights so they can have power control over everything. Is he some consumer radical? No. Woseniac is the co founder of Apple, the multibillion dollar
global goliathe that is the world's biggest producer of consumer electronics. He's a pall that Apple has now become a fierce opponent of self repair. He says, we wouldn't have had an Apple except that early innovators like him grew up in a very open technology world from the start, He points out, openness helps spread innovation and consumer demand. So why stop the self repair community? He asks two big reasons. Besides letting corporations lock in monopoly profits from the repair
industry, it also dissuades customers from bothering with repairs. Just throw the thing away and buy a new one. This is Jim High are saying. If you wonder where's such massive, deadly levels of pollution by lead, mercury, plastic, et cetera come from look to the gross throwaway ethic of big tech
profiteers like Apple. Tune into The Ferran Dozier Show, Music marks Place in Time, the soundtrack to life Sunday nights at eight pm or KC eight a radio playing the hottest hits and the coolest conversations Sunday nights at APM on The Ferran Dozier Show. Within the ray of music, talk sports, coming the outreach and veteran resources and the hits from the sixties, seventies, eighties,
nineties and today's hits. The Ferran Dozier Show on KCA Radio on all available streaming platforms and alto six point five GM in ten fifty am The Ferran Dozier Show or KCA eight Radio. Was your car involved in an accident or just need help with dents? All Magic Paint and Body Collision Centers in business for over thirty years. They're highly trained staff and certified technicians and friendly staff are the best in the business and treat each car as if it was their own.
All Magic Paint and Body Collision Centers are family owned and offer state of the art equipment and tools to ensure optimum results. They use the latest technology and computerized color matching and specialize in frame repairs with their modern laser measuring systems. They're o EM certified and they have four locations to serve you. All Magic Paint and Body Collision Centers offer rental car assistance with free drop off and
pick up services too, and their work has a lifetime guarantee. All Magic Paint and Body Collision Centers are in Narco, East Vale, Marino Valley and in Fontana. Call them at one eight hundred sixty one Magic. That's one eight hundred six one Magic. All Magic Paint and Body Collision Centers one eight hundred sixty one Magic, All Magic Paint and Auto Body says drive carefully. CACAA Radio has openings for one hour talk shows. If you want to host
a radio show, now is the time. Make CACAA your flagship station. Our rates are affordable and our services are second to nine. We broadcast to a population of five million people plus. We stream and podcast on all major online audio and video systems. If you've been thinking about broadcasting a weekly radio program on real radio plus the Internet, contact our ceo add two eight one
five nine nine ninety eight two eight one five nine hundred. You can skype your show from your home to our Redlands, California studio, where our live producers and engineers are ready to work with you personally. A radio program on CACAA is the perfect work from home avocation in these stressful times. Just type CACAA radio dot com into your browser to learn more about hosting a show on the best station in the nation, or call our CEO for details two eight
one five nine nine eight hundred. For several years, CACAA has been marketing the Youngevity brand of nutritional and personal care products. Our experience with Youngevity has been one hundred percent positive, so we are pleased to recommend them to you. Regarding nutritional supplements, we recommend pollen Burst in the berry flavor and tangy tangerine two point zero in the tablet form. For regularity issues, we recommend
three day cleans and for personal care, we recommend morning hydration cream. You can shop online for Youngevity at www dot KCAA team dot com, or you can order by phone by calling eight hundred nine eight two three one nine seven and tell customer support that you are part of the KCAA team. Youngevity is an American company based in San Diego. Call Youngevity at eight hundred nine eight two three one nine seven and ask about monthly autoship that allows you to buy
Youngevity products at wholesale prices. That number again eight hundred nine eight two three one nine seven. Killistina KCAA, Lomolinda at one oh six point five FM K two ninety three CF Burrito Valley, NBC News Radio. I'm Chris Garraggio. Families who lost loved ones in the nine to eleven terror attacks will be gathering at the World Trade Center Memorial in Manhattan for the twenty second anniversary of the attacks Monday. During the ceremony, names of the nearly three thousand victims
killed will be read out loud. There will be moments of silence, belltolls, and music as part of the ceremony. For the first time this year, there will be a tribute at the memorial glade after the ceremony to recognize people who have died from, and are still experiencing illnesses tied to the aftermath of the attacks. The glade was dedicated in twenty nineteen on the seventeenth anniversary