Mind Readings: You Need Passwords for Life in the Age of Generative AI Fraud

In today's episode, let's talk about passwords. Not the ones you log in with, but something from the a blast from the past. Now, one thing I started telling parents in particular about a year ago when 11 Labs voice synthesis hit the market was you need to bring back a Gen X tradition of passwords for pickup. So for those who don't remember, Gen X, we were the generation that were basically raised on neglect. And very often, you know, in the occasions where we would have we even get picked up from school, someone else, you know, a relative would would pick us up from school because our primary caregiver probably was busy at work.

And there was a tradition that was sort of established that uh particularly for families that didn't function as well, the person who is authorized to pick you up will be given a password, right? And then you as the kid would say, okay, you know, Uncle Johnny, what's the password? Because maybe Uncle Johnny's not supposed to be there that day. And if he doesn't say something like, you know, Vatican cameos or Oreo cookies or something, you don't get in the car with them. That was a way, a fairly straightforward primitive way to validate that that person was who they said they were supposed to be, and that they were authorized on that day to have that pickup.

This matters with things like voice synthesis now, because you can get a ransom call that sounds exactly like a loved one. You can get a a fake call from a presidential candidate or a sitting public official. You can get a fake video call with a conference room of executives. It is trivial these days to replicate and clone voices, images, and things like that. And so we need that authentication mechanism.

There's one example of a ransom note that I play at conferences a lot. In fact, we'll we'll play it now. I did this with the consent of the person, Coco, who who lended her voice to this effort. So she's okay with this. So give this a listen.

Hello. Hello, Mom. Listen, I'm in um I'm in a bit of trouble. Look, I can't tell you much. I just I just need you to wire some money on my behalf, all right?

I can't. They say I only have a few more seconds on this call. They'll text you the account number in a moment. Just please do as they say, alright. That is uncannily good.

That sounds exactly like her. And the only way that her mother would have known that this was not hers because I got one piece of the text prompt wrong. I got one word in there that is wrong. Otherwise, it would have passed. It would have it could have fooled any of her relatives.

So you would have that password. You would set if you sit down with your kids and say, okay, kids, you know, this is the password for if you get a call that's from someone that said that sounds like me, ask the password. This is really important for people who are caring for elder parents in some way. You know, even if you just you know uh have a casual relationship with your parents. Elders in particular are very susceptible to this stuff.

So teach them the same thing. Like, hey, remember when we were kids and you had me do that whole password thing with the bus stop? Well, now we're gonna do the same thing. If you get a call that sounds like me saying, hey, I'm trapped in some country and I need five thousand dollars wired to me right away. Ask the password.

And if the the person on the other end can't pronounce the can't provide the password, it's not me. It's not me. It would seem that corporations now need this as well. There was a story in the China South China Morning Post the other day about a Hong Kong trading firm that had a deep fake video simulation of their CFO calling a mid-level clerk in the organization to transfer 25 million dollars. And they did.

It worked. They didn't now. They the people who did this may or may not get caught, probably will get caught. Don't mess with the government of China. But the fact that it worked and that it fooled someone to transfer millions of dollars means that your company needs to have this basic password set up internally today.

Today. Because every criminal, every fraudster has just seen how well this can work and how much money this fraudulent company was able to steal 25 million US dollars in one call. They see they see the cash register ring and they hear that bell and say, we need to do that too. And so they will be coming for you, for your company, for your most vulnerable employees, people who can be fooled by a deep fake video or a deep fake phone call. Set up that internal security procedure, have passwords, maybe even have rotating passwords that change every 30 days or whatever.

That you just know, hey, this is a weird request coming from my my manager, my boss. What's the password? And if they can't provide it, you know it was fake. You will have to protect that, like you do all your other authentication mechanisms. But you need to do this soon because this has been shown to the world to work, and it is too rich of an opportunity for scammers to pass up.

So that's the that's the uh lesson for today. Thanks for tuning in. Talk to you next time. If you enjoyed this video, please hit the like button. Subscribe to my channel if you haven't already, and if you want to know when new videos are available, hit the bell button to be notified as soon as new content is live.