 Think Tech-A-Yay. Civil engagement lives here. Oha, welcome back to the Cyber Underground. I'm your guest host, Rachelle Mansilungan, and I have some special guests with me. I'm actually covering for Dave and Andrew. They're off-island. So let me introduce you to my guests for today. First, my co-host, CJ. Did you want to introduce yourself? Hi, I'm CJ. I'm a UH West O'ahu student and I study computer electronics and working technology. And I'm Rachelle Classiny. Okay. Jack. Hi, I'm Jack Gardena. I'm also a UH West O'ahu student. I study ISA and I'm here to talk about that today. Okay, great. I'm Ashlyn. I am at KCC Still. I'm an ITS student going to West O'ahu to do creative media. Oh, great. Okay, great to have you guys here. And I know a short notice, but thank you for coming here. Thank you for having us. So our first topic today is social media, which I'm sure all of us have, right? Maybe. Anyone want to talk about what social media is exactly? Today we wanted to talk about social media because everyone has it. Companies have it. Websites, students have it. Teachers already have it and they're starting to use it for communication with their students. And we just wanted to maybe, like, confess what apps we have now, what we use it for, why we use it, and how does it affect us in our daily lives. And discuss the pros and cons about it. Right, so pretty much we all use social media every day. So I'm going to confess I use Instagram every day. Instastory everything. Including a light. What you do in the morning? Rushing your teeth. Correct. But how do you all, what other social media apps do you guys have? I'm an Instagram user as well. I've had Facebook for a while. I try and limit it to those two and I'm proud to say that I don't use it every day. Yeah, I use Facebook, Snapchat. I think I use Daily the most. Snapchat, I use the filters. And then what about like, you guys use like dating apps like Tinder. Swipe left. Or just swipe right. No, luckily I don't have to use that. I already have a good guy with me. Yeah. I'm married, so definitely no Tinder. I know what it is. I got a good guy too. Okay, I'm excited. I know you guys use Facebook, so I try not to use Facebook too much. If I do, it's like everything is like, the whole like security. Yeah. I'm so good at that. Oh, that's pretty good. I feel like I have to share a lot since family is on Facebook. So they're like scrolling, seeing what I'm doing. They're like commenting. That's another thing. People are like, why did you do that and what are you doing there? Facebook, I've been using it since 2004. Wow. I'll just date myself a little bit. They really fell out of favor for me when I introduced the news feed. Correct. It used to be really fun. If you wanted to check up on somebody, you clicked on their profile, but now you're just overwhelmed by information every time you use it. It's crazy. There's a lot of third party that you could tell. Yeah, I agree. The advertisements. You were searching something on the web and all of a sudden you see that up here. Yeah, it's kind of creepy, right? Yes. I'd be looking at Amazon. We have Amazon Echo popping up in Facebook. That's really creepy. Ads for the product you were just looking at? Yes. That's fun. I'm pretty sure I turned off that feature, but I still get that. Yeah. I don't know. So what else? I think that what are you like, some pros and cons? More like the cons, I guess. If someone were to post something about themselves, it's like a more defamation of character, especially if they're professional. What do you guys think about that? I think if they're professional, it would affect them a lot. They have to be careful about what they post about themselves, what they discuss online. I mean, it's a free country, of course, but you still have to be careful. I know I've heard that there's some employees that actually go on, like employers that go on to check. I've heard that. Yeah. Yeah, I think it's interesting. It used to be, your life was only in the looking glass if you were famous. Right. Whereas now everyone has social media, everything you do is logged and monitored depending on what kind of privacy settings you use. And that's a pretty fine line to walk. I mean, if you make a mistake, your friends, at least, are going to know about it potentially. We all see what happens when somebody famous does something wrong. I mean, public response is pretty brutal. Yeah. That's right. Intense. I think, I mean, I don't want to be mean, but a lot of people use it for attention. So the last year, I kind of shied away from everything. Right. And just been. Well, as a, I know because we're all into cyber security, do you guys not try, try not to share too many things or? Lately, I've been, yeah, I've been stopping myself from just like posting out. Right. Daily activities. Right. And just only post like really important events. Yeah. Yeah, I'm with CJ. I've got a lot of family that doesn't live on Island. So I try and restrict it just to sharing photos with them. Right. That's what I do too. You can use a feature on Facebook to view your profile from somebody else's point of view. Right. So always go on there periodically and try and look at it if I were a malicious actor. Right. You know what my profile would look like. Right. That's right. Keep it anonymous. Mm-hmm. I feel like I don't, I don't post anything, but I feel like how I use my social media, like I'll stay logged on, you know, and like all my devices somewhere to steal my stuff. I'm kind of done. So I had actually a family member, they asked me to meet their Facebook account. I tried to make it as private as possible, but then they told me later that their account got hacked. And I know they don't log off often, especially when they use their mobile. Yeah. So I don't know what kind of firmly to log off of not leaving things on. Yeah. It's so easy to just leave your Facebook, any social media on your phone. Yes. Because no one really needs to remember their password nowadays if you have like Touch ID, biometrics now with Samsung. Like it's crazy. But then you have, they're really, they don't really watch what they're doing sometimes. So maybe you're like at a coffee shop, you leave your laptop there, you leave your phone there, you go to the bathroom, someone could just easily, you know, keep the keep. Especially the public Wi-Fi, right? Yeah, that too. Yeah. I don't like to use public Wi-Fi as often. Yeah. And so I really have to. But it's rarely available when everyone can post things. Yes, right. But that's, that's what's good about social media is how they promote businesses and how business is attract more people nowadays. Right. It's through social media. Well, as, because we're like students and also going to be professional students, do you guys use accounts like social media like LinkedIn or? Oh, yeah. Because I know we have a professor that totally is against using that. I have another professor that shared it with us and when he first had his class, like his shortest profile. I mean, how, are you guys really into that at all? I've held out on LinkedIn for a long time. Yes. Just because I was in the military for a while and was it really necessary? Oh, right. But lately as I've been applying for more jobs, I've met several people that have recommended I use it. Yes, same for me. And one of our professors, Dr. Chapman, I believe, he often talks about if you're going into security depending on the field, you may or may not want to use it like you mentioned. I sort of contemplated that, but I think used responsibly. It's just a good networking tool. Networking exactly. That's, a popular thing. Right. Yeah. And that's like how companies find out about their employees, right? And background checks, getting their clearance. Yes. Sometimes, yeah. Sometimes it might even seem weird that you don't have a social media account because you're not open, right? Right. They might find it like, why is this person sharing stuff about himself? Why are they being so secretive? I actually know people that are like that. Yeah. Yeah. Did you guys ever have MySpace or, you know... Oh, those are names. And MySpace is a little different. I know. I think that started out before Facebook, right? Yeah. So MySpace was like more music-sharing. Right. I really... I remember like making my, kind of like doing web design. Yeah. That was my first time. Yeah. We ever shared HTML. That's how I first started HTML. Your friends with Tom? Yeah. Actually, I was friends with Tom. There's a little tidbit here. The end of the month? Yes. Yeah. We had the same taste in music. Oh, that's cute. Yeah. I won't say the... So there's... I actually probably older than you guys, but there's another social media that I used to use before that, Asian Avenue. Oh. Okay. Never heard of that. I've heard of A-Well though. A-Well. Okay. I'm not going to go there. Yeah. I really liked the music aspect. For MySpace. Yeah. Because Spotify wasn't really there before. I didn't really think about using YouTube as a music outlet either. So... And then designing your own website was pretty fun. Yeah. I enjoyed that. I remember spending hours on the computer just looking for for cold. Yes. I did the same. Just to make my background. I did the same. And the music. And you were learning so much and you didn't even realize it. Yeah. Exactly. Yeah. I didn't realize that anymore. That's all done for you. Yeah. Just because, yeah, they took that feature out, right? I guess for security reasons as well. Yeah. I mean, oh, and people are like, hey, these kids or these adults are stealing my design. Yeah. Like they're getting really sensitive about that now. Yeah. So what are some ways that you guys kind of keep your because I know you guys all use the social media. So what are some ways that you would suggest to should they share more information, less of us, we know how to do open source intelligence for people. Sure. Because we've been doing pen testing and all that. Or in classes we've learned tools to use. So, or like the general public, how would you like suggest to them that they shouldn't share? I definitely would say think twice about what you're going to post every time, even if it's just a picture. Yes. Just you and your friends. Right. Like a beer in your hand could mean something else to other people or sharing like your birthday on Facebook. Right. That's a big key aspect of your life people can do. Even just the background and where you're at like they don't have locations. I pretend what locations I'm at. Geolocation too. Yeah. I would say think twice about what you're going to post and then think again. Yeah, I agree with that. I use a lot of Twitter. Okay. I use Twitter. I've never, well, I've tweeted a few times. But really I just use it for information gathering purposes. I mean I read some sports but it is truly amazing what you can pull off of Twitter whether you're mining data or you're just using keyword searches. Right. You know if I'm researching a particular topic or I'm just being nosy about somebody I mean you can spend 10 minutes on Twitter and find out more than you ever would have dreamed. Yes. And I think Twitter is pretty hot right now as far as being in the news because of our current administration and they're using it differently and it's like Twitter's a big one for me. Yes. I remember you doing that in our data piece class right? Right. Yeah. Oh wow. Yes. Data mining. Shout out to Dale. Yeah. How about you actually? I just think like especially when you put like I mean posting for sure but like when you put your interest like some might be kind of like maybe you shouldn't say that right. I mean you are you but you shouldn't say that. Right. Public. I'm kind of shy away from putting where I worked because I've had people where they contact me like oh you worked at So-and-so. I worked there too but I found out later they didn't work there. You know it's like oh that's kind of Oh yes. So there's a lot of Cybersport. Yeah. Right. Yeah. So she did you exactly. Yeah. I think location settings and geolocation in general that is it's a huge one. Yeah. Because if you use it a lot depending on how you use it otherwise that you're attaching yourself 24 hours a day. Yeah. And that can be dangerous for people gathering information about you and you might not want anyone to know that. Right. So it's just that's number one for me. Right. Because in Snapchat make you do that now it makes you Oh yeah. I remember when that came out. Yeah. It would map out all your friends on the US or you know the Hawaii Island. No. You can see where your friend Tom is at 3 p.m. he's at Starbucks or something or in Kapolei. Yeah. It's really funny. I never knew that. Yeah. Yeah. It was like you had to I don't know swipe down first or something. Yeah. Even not in Hawaii like just anywhere in the world like let's say you follow your favorites celebrity you could see them or something. Somebody did see it. I don't know. That reminds me you know recently the Strava fitness app. Oh yeah. People were using it to track their fitness movements and it would geolocation was involved and people were actually looking at those heat maps and figuring out classified military locations. Yes. Whoa. David and you just talked about the last show that was at. Wow. That's crazy. My gosh. That's just enough and that's just a perfect example and you got to be careful what you're putting out there. Watch your posts. Exactly. But definitely it's still fun to like keep in touch with your friends and family especially if they're like abroad. Right. Let's say I don't know maybe a daughter has a mom abroad in the Philippines or something and that's the only way they have they contact each other since you know you know calling each other kind of costs and you know let's hold that thought we're going to take a break guys. We'll be right back. Aloha I'm Richard Concepcion the host of Hispanic Hawaii. You can watch my show every other Tuesday at 2 p.m. We will bring you entertainment educational and also we'll tell you what is happening right here within our community. Think Tech Hawaii. Aloha. Aloha. My name is Mark Shklav. I am the host of Hawaii's Law Across the Sea. Law Across the Sea comes on every other Monday at 11 a.m. Please join us. I like to bring in guests that talk about all types of things that come across the sea to Hawaii. Not just law. Love. People. Ideas. History. Please join us for Law Across the Sea. Aloha. Hi guys. Welcome back to the Cyber Underground. I'm your guest host Rachelle Mansilungan and I have my co-hosts CJ and my two guests Jack and Ashlyn. Earlier we were talking about social media apps the pros and cons and how you could be used for social engineering and open source intelligence. Since you spoke about that let's go into something else that we all pretty much familiar with the National Cyber League which is the spring season is coming up so let's just talk a little bit about that. I know three of us were in the same group last semester for our class so you want to just talk about what the NCL means. Yeah for those people that don't know what National Cyber League is it's like a captured a flag competition where you solve puzzles ranging from easy level to hard level and the categories can range from open source intelligence reconnaissance web application exploitation asset cracking all of the black hat things you can think of right and for this season we have pre-season regular season and post-season so pre-season is where everyone competes individually and at the end depending on how many points you get you are put into it's either gold silver or bronze and then in the regular season you compete with other people in the same bracket at the end there's the team competition which is post-season so you can have a team up to like two to five people and you're competing against the nation so not just in Hawaii you're also competing in the mainland and all the other students up there even professionals can play okay is it kind of strict like the CCDC that you have to be full-time part-time student or it doesn't oh no collegiate cyber defense competition is totally different from NCL in NCL you can be a student you can be a professional as long as you have a coach okay yeah the coach can be a student or a professional in the field and that's the way that's how you can get into the competition and I know that registration is going to start soon right now I believe oh yeah so for those students and professors that want to compete registration is going to be in February February 26 to March 25 you have that full-time to register but there's a fee right but there's a fee yes it's $25 to compete and then for post-season it's $10 per teammate right yeah did you guys want to talk about your experiences within so I know that we were all on the same team we weren't the winning team but you know it's okay because we still individually did well and as a group I think we work well together I agree so did you share your experience with that what is your favorite parts of the NCL so well of course it was team competition yeah individuals it's pretty stressful because a lot of the work is done by yourself yes it's a lot of work on your own hours forget about all your other classes you're taking five classes and you got to focus on this oh my god you're not even going to do the rest of your homework you could probably fall behind class after one week of SCL just a warning it's pretty intense yeah my favorite part was teams obviously because we get to collaborate and meeting other students who had a different view on the categories that were presented right and so people had their specialties that they were good at and other things oh yes I know Jack had a she and I are good at I guess something more like open source open source and wire short it you know I wasn't familiar with NCL before I came to Hawaii and started going to school but it's probably been the most enjoyable thing I've done outside of class since I became a student it's just such a good opportunity to take what you're learning in the classroom and apply it and everybody has a little bit of the competitive nature in them and once the competition starts you end up researching the different categories more and you just learn a ton this one this past competition we had in the fall I've probably spent between the pre-season regular season and post-season I would say 70 to 100 hours I know total on top of my class yes you know as a student you don't always get that chance to use those skills and apply them and while CTFs don't exactly mirror everything you're going to find in the workforce just the chance to use tools extensively and read up on them you can walk into an interview after that and speak confidently about all those things and I think it's just such an asset I just want to point out that the University of Hawaii West Oahu won the competition two years ago in place second last year right so we're doing pretty well we are doing pretty well try and carry the torch this year and it's the hats Hawaii events to come yeah that's right oh yeah I'm just kidding and actually CJ was actually were you part of the winning team no no but I knew them personally and they were like my really good friends and my officers and they represented Hawaii and UH West Oahu very well oh yeah and I don't think we've ever had like a team like that in Hawaii being known as like a cyber team that's pretty big I would say I think it's it's great for the state it's great for the school obviously I think that CTS are something that have a lot of potential if we got those kind of things pushed to the lower levels of education I think kids would really latch on to it yes you talk about developing skills early that's a great opportunity and I think HPU right now is developing a cyber stadium or an e-gaming stadium watch for your ideas about that yes and yeah you know I enjoy the stuff a lot and I know I would like it even more as a kid and 15 years old let's say you're studying password cracking scanning enumeration all these important subject matter areas that's how we improve things so gotta get the word out yes we do because I know that hats we provide like CTF training and I know we had a lot of members that were saying they're kind of intimidated because we all started from the bottom we don't know what we're doing right but then like if you keep doing these competitions or those trainings I feel like you grow more and you learn more absolutely so on top of NCL they also have a gym it used to be hosted in Netlab another virtual sandbox a place where you can practice for the competition and the connection was like really bad before no one really liked the interface but now the gym looks exactly like NCL the competition did you use the gym throughout the last year so did I yeah I did and I would never have known to use the tools they hinted inside the gym what kind of tools you could use right yeah I really like all the thing the category that I really hate sorry NCL is log analysis because log analysis that's where you take big pieces of data needle and a haystack big pieces and you're trying to find this one piece of information and it costs like what 10 to 50 points sometimes even 100 points and it's yeah like Jackson it's looking for a needle and a haystack yes so it takes I'd say logs are a category where you feel really tired from everything else and you just want to take a break you need a lot of time to do log analysis for me if you're not good at filtering out the logs you don't have any idea how to do that right or if you don't but if you're really good you can use like regular expressions Python just to filter those words the key words and to provide some more context on that the harder challenges are intense right that last day I can recall all of us just basically banging our heads against the wall trying to figure them out but what NCL does that's kind of neat is you know they provide such a large breadth of information and material that you're able to accomplish I would say 75% of it you know fairly easily and quickly and it's that last 25 or 10% that's really difficult and that's where you're pushing yourself that's where you're trying to find the needle in a haystack and that's where you're really making your money as far as your skills go just to find that stuff you may not ever have dealt with it before and that's when you go on our you know Google and you know learn how to do it and it tends to stick with you pretty well yeah I do have to say though it's not a free for all so if you enter wrong answers you're definitely going to have a lower score yeah I mean we were trying to keep up our accuracy right yeah accuracy it's so important what was it the wire shark one yeah where you had to look for a smart home that that wakes up all the device I think because of NCL I got better wire shark from you and Jack whatever you guys taught me it was so good like the very last day all the teams just started spamming the NCL interface with answers and you could they even showed a graph in their Slack channel about the accuracy of all the teams it's like this and then yeah because we get pretty much desperate right yeah we were really desperate and oh my god so last year uh UHS Walu was like first place for like for like one minute two minutes and then when you refresh the page right then you got second oof right so that's pretty tough yeah so I mean we're going to close to it but then like as a I know you guys are you guys going to enter this coming this spring oh yes absolutely Ash and I think you should do it I know you haven't done it oh she's going to do it yes you definitely have to do it yeah I mean any like last two bits you guys want to see about social media or NCL definitely encourage your students to play NCL it's a very good learning tool yep yeah I echo that 100% the programs KCC West Oahu NCL together you're going to walk away with it a lot better prepared to get a job than you would be otherwise oh yes anything about social media you want to add I know you said you want to share I think again yeah pretty much especially the young people out there they want to share everything their addresses to just please be careful yes it's scary or you know what just don't have social media turn off location sign turn off yes it's okay okay thanks for having us yes and thank you so much guys for having for coming on the show I know it was a short notice but I'm so glad to have all three of you here to help me support and hopefully Dave again I know he mentioned that he wanted to have us once a month but I don't know where are you Dave where are you Dave love to work with you guys alright well hopefully we did a good job and we made you guys proud it was pretty fun did you guys I know this is your second time I know Andrew and Dave pretty well and I had the pleasure of being on with Andrew before so hope you're well Andrew okay guys so this is the cyber underground until next time Aloha