How Internet Safety Experts Protect Their Kids Online | Ep2

Yeah. Hi, my name is Ayman Elsawah. Coffee with Ayman everywhere. And I'm a fractional CISO for startups. So I help companies with their security. Talk on information security covering CISO, vCISO, zero trust, non-repudiation, infosec, AppSec, DevSecOps, SOC 2, ISO 27001, NIST, FedRAMP, GDPR, HIPAA, PCI DSS, MFA, SSO, IAM, OAuth, phishing, ransomware, pentest, OSCP, CISO, zero trust, non-repudiation, infosec, AppSec, DevSecOps, SOC 2, ISO 27001, NIST, FedRAMP, GDPR, HIPAA, PCI DSS, MFA, SSO, IAM, OAuth, phishing, ransomware, pentest, OSCP, CISO, zero trust, non-repudiation, infosec, AppSec, DevSecOps, zero 0:46 Internet has been locked down for a while especially since the pandemic and you know i do have bug bounties for them so you know if they too if yeah if they okay can you explain what a bug bite bounty is yeah so a bug bounty is you know in a in a company a corporation where A you have like an app a web app or a software or something a you hire security researchers aka hackers but good hackers right because hackers can be good or bad and you hire them to help you find bugs or security issues in your applications 1:21 Talk on information security covering CISO, vCISO, red team, threat modeling, Enterprise Security Weekly, Security Cafe, Getting Into Infosec, Ayman Elsawah, Adrian Sanabria talk on information security covering CISO, vCISO, red team, threat modeling, Enterprise Security Weekly, Security Cafe, Getting Into Infosec, Ayman Elsawah, Yeah, yeah, yeah. So my kids, you know, they've done, I can share a whole bunch. It's been fun. They found a lot of loopholes. And when they do, I say, can you tell me how you did? And they're reluctant. I'm like, just please tell me. And they tell me and I give them a high five, you know.

Oh yeah there's been a bunch so you know during the pandemic you know they had to do online schooling and so i had filters on the router right and even yes i had filters on the router and so one time i found my son going to a gaming website i'm like how did how did they do that how did he how did he do that and Turned out that he joined a hotspot, an open hotspot. 3:14 Someone else was broadcasting a Comcast hotspot. So he was like sitting in the corner of the room.

Yeah, yeah. Some neighbor, somebody had like an open Wi-Fi and he just hopped on. So then I had to, you know, do device controls, right? So that on the device themselves, they cannot go no matter what internet service provider they're using. That was one example. And

Yeah, yeah, great question. So when a lot of routers have parental controls where you can limit access to certain websites, but that does not, you know, if the device itself is able to, there's a lot of ways you could circumvent that. You could use different DNS providers, VPN, hotspot on your phone to bypass the router altogether. A talk on information security covering CISO, vCISO, red team, threat modeling, Enterprise Security Weekly, Security Cafe, Getting Into Infosec, Ayman Elsawah, Adrian Sanabria. 4:19 A talk on information security covering CISO, vCISO, red team, threat modeling, Enterprise Security Weekly, Security Cafe, Getting Into Infosec, Ayman Elsawah, Adrian Sanabria. So if you have device level protection, such as like Family Link or Microsoft Family software, which is built, you know, which is free, then on the device itself, you can control a lot more granular controls on the device.

Yeah there is i you know every day there's a different device router whatnot so i can't i don't you know it's hard for me to recommend a specific provider what i would say is find whatever is easiest for you to use smart so there's a lot of newer routers now that are like all app based and you can do everything from your device there's there's a big brand that does that right now And it's pretty cool. You can shut off all internet with just the press of a button. So everybody in the whole house is like, hey, mindfulness time. 5:31 Let's practice some mindfulness and no more screens, including the adults. You can just shut off internet for everybody and whip out some board games. So there's that. But then there's also like, I do recommend if you don't have a router that has that, you can use Cloudflare's free service. So Cloudflare, if you go to 1.1.1.1, you could spell it out or use the numbers. And then you plug it into your device, the settings, and it will do some level of filtering automatically. 6:05 Not a whole lot, but you can filter content that you might not want younger kids to see.

Yeah, it's free. They even have their own VPN service.

I don't know. I don't think so, to be honest. I mean, you'd have to know how to change your DNS settings. So I don't know. I think they might, you know, I don't know if there's additional software now, but I guess, you know, I should come up. We should have like an updated page of like, here's the easiest software to use and people just rate it on ease of use, you know, and functionality.

Yeah, so I mean, you can do it from the service level. But now, like with I think with device, with everyone with their own devices, and especially as kids get, you know, their mobile, mobile, then you want to have device level controls. So that's where Family Link would come in.

Yeah.

Yeah so i use family link at home google family link it's built in it's free you just form like a family group you could even you know you just add their email you even get your own calendar it's really interesting and you know funny story there was a kid i was going to somebody's house my kid's cousin actually and they're like you know they're Talk on information security covering CISO, vCISO, red team, threat modeling, Enterprise Security Weekly, Security Cafe, Getting Into Infosec, Ayman Elsawah, Adrian Sanabria.

So I found that a testament. So in any case, Google family in particular, you could lock it down. It's so granular that each app, you could limit time on each app. You could allow apps to work even when the phone's locked. You could just ban apps altogether. Talk on information security covering CISO, vCISO, red team, threat modeling, Enterprise Security Weekly, Security Cafe, Getting Into Infosec, Ayman Elsawah, Adrian Sanabria. 9:15 Talk on information security covering CISO, vCISO, red team, threat modeling, Enterprise Security Weekly, Security Cafe, Getting Into Infosec, Ayman Elsawah, Adrian Sanabria. And, you know, you could also remotely lock it, unlock it, you could play a sound, ping it. You know, of course, there's a lot of other things outside of the technical controls like that I do, like no screens in bedrooms, right? 9:50 That's like no screens in bedrooms. That's the number one rule because it's amazing or no screens in like small, you know, private rooms. I mean it's not in the bathroom not in the bedroom not in you know like yes you know so it's a huge it's a really good rule that rules out a lot yeah it makes it very simple you know hey it's not like i don't trust you just you know let's just be transparent and open things like that you know some other parents do like no headphones like you know only one ear instead of both ears 10:26 So there's there's different levels, you know, it depends on your comfort level. And, you know, we could always we could talk about games. Another story.

Oh, yeah, yeah, yeah.

Oh, I see what you're saying. Well, there's a really good Darknet Diaries episode of a, check it out, darknetdiaries.com, and of an episode of devices that would record the sound and do something with the kid's sound. But it ended up, the devices ended up doing is sending the sound to the provider. And A researcher found those files and like found a lot of like child, you know, camera, audio sounds, everything. 12:01 So, you know, in malicious hands, that could be really bad. What I would say from the simplest thing is if it's on the internet, it's not yours. So don't assume it's yours. Someone else will have it. And then, you know, I mean, my little guy loves Alexa. Like, I'm impressed with Alexa. I avoided Alexa for a long time. I have since embraced it.

Well, as a single dad, I kind of just like, you know, just some entertainment, you know. Yeah, I mean, I just, you know, in fact, I use it sometimes. I like, hey, Alexa, tell me something interesting. And it would just tell me the most interesting things. I'm like, that's cool. And as a lifelong learner, I like learning weird things, you know, or nice things. I don't know. And I don't know if my son came up with this or me. So it's embarrassing. I admit it. But I might be at fault here. 13:00 But, you know, I said, Alexa, make some fart noises.

I might have done that I don't know I was prepared to be like oh no it's not your fault it's okay no that's absolutely your fault why would you say that and wow does Alexa have a library of parts like I was I was blown away in fact so now you have to listen to that so your kids are like playing that on repeat yeah and then he'll kill like yeah I think he I think he had to make a fart song and I was like wow and like

How did I process it?

Yeah. Well, the longest reason that I did not do that was because of that. I did not want devices. I don't like having devices on my network. You don't know what they're doing. So what I would say is if you do have devices, there's a lot of cheap knockoffs. And so as a security expert, there are a lot of cheap knockoffs. And without naming any particular source countries of these knockoffs, but it changes every so often. 15:05 And the thing is with these knockoffs, it could be just me. Somebody could just decide to sell this knockoff camera and then have some software in that camera that goes and snoops on your network and does some other things. So that's something to consider when you're getting a knockoff of something. You might be saving money, but at the very least, I would try to put on a separate network or something like that. But for the average person, that's really complicated. 15:38 If you create a guest network, then yeah. So what I would say is... Even when you buy a reputable device, like say Ring or whatnot, yes, what I would say is these companies all make mistakes. They, you know, they have, they're just big startups in a way sometimes. And they'll have they make mistakes but they correct them and they fix them and so what i would say it's kind of tough it's kind of tough again going back to if it's in the cloud then you know it's not yours it's it's there forever even if they say they delete it you know i don't know where do you draw the line i mean there was one provider where people said where the provider said that they will not they did not send the stuff to the cloud 16:30 It was a camera provider. And then it turned out they did send it to the cloud. So it's just it's hard to trust devices. You know, that's that's what I would say. I think, you know, privacy is dead. It's been dead a long time ago.

It's been that. I mean, you could try to have it like real privacy. I saw a talk 20 years ago about privacy being dead before the internet proliferation of things. And, you know, now people have Samsung smart fridges or sorry, sorry. There's a lot of different smart fridges, right? Not just Samsung, but people have smart fridges with cameras inside them. And to, you know, Talk on information security covering CISO, vCISO, red team, threat modeling, Enterprise Security Weekly, Security Cafe, Getting Into Infosec, Ayman Elsawah, Adrian Sanabria. 17:33 You know, go ahead and look at my fridge stuff. Okay, well, you know, you might say it's innocuous, but what if you have like a can of soda and it mistakes as a can of beer? And then, you know, that's used in a disclosure somewhere else. Like, oh, so-and-so had beer or whatever it is. I don't know.

Exactly all this stuff can be subpoenaed so it's it's a slippery slope you know it's slippery slope i don't know what to tell you there's some things you can do but it's like here's the thing it's the more you're paranoid about something If you're paranoid by something, then just don't use it. Simple, right? Just, you know. And then back to your original question. The less screens, the better. That's my general philosophy. 18:27 Even me, I don't have an Apple. I don't have a watch. I don't have a smartwatch, right? Because I don't want the dings and whatnot. I think... Yeah, I think with all these devices and everything, we're too connected. We're not practicing just like, like, how many people do you know, put their phone on do not disturb and are not affected by their phone all day, all day long? You know, not many. So

Right, right. The phone, I always tell people, the phone is there to serve me, not everybody else. So, you know, I'll use it on my own time.

Absolutely not.

Talk on information security covering CISO, vCISO, red team, threat modeling, Enterprise Security Weekly, Security Cafe, Getting Into Infosec, Ayman Elsawah, Adrian Sanabria. Talk on information security covering CISO, vCISO, red team, threat modeling, Enterprise Security Weekly, Security Cafe, Getting Into Infosec, Ayman Elsawah, Adrian Sanabria. Only one else needs to be on the internet right now you know and then i think from just to you know they're people too they're people and i want to respect their privacy and 20:20 You know, it's just, you know, it's just, it's just, you know, I think my kids are not for the world, right? They're only for my family and their relatives. So that's, that's probably my two cents. It's not everybody's take on it. But also, there's also a lot of... A talk on information security covering CISO, vCISO, red team, threat modeling, Enterprise Security Weekly, Security Cafe, Getting Into Infosec, A talk on information security covering CISO, vCISO, red team, threat modeling, Enterprise Security Weekly, Security Cafe, Getting Into Infosec, 21:04 And so no need, you know, I just found that unnecessary. There was no good reason for me to have them on.

Sometimes, yeah. I encourage them to do different things, but they're not ready. But yeah, I think once upon a time ago, we started a podcast for the school. Talk on information security covering CISO, vCISO, red team, threat modeling, Enterprise Security Weekly, Security Cafe, Getting Into Infosec, Ayman Elsawah, Adrian Sanabria talk on information security covering CISO, vCISO, red team, threat modeling, Enterprise Security Weekly, Security Cafe, Getting Into Infosec, Ayman Elsawah, Adrian Sanabria 21:59 So it was like a little thing like at the end of the day just you know what was it what was the school's news this week this today you know like a daily like on unauthorized school news channel but at home we do a lot of improv so you know they'll do improv and stuff like that but we don't post it online so again i think You know the whole online thing it's it's tough for adults i think a younger young for younger folks it's easier but you know there's when you put yourself online you're going to be subject to you know cyber bullying and stuff like that and comments and 22:38 You know the ilk of the internet so you know i think if people are going to have their kids or help their kids create an online persona i think there's a lot of good things in like what we're doing it teaches you communication skills people skills things like that especially if you're both in the same room and having a conversation that's being recorded that's kind of cool But you know, just, just, you know, don't take it for granted and understand that there's a lot of, you know, you might want to disable comments, things like that for, for some of your kids, videos.

Yeah, there's a lot of different ways. Well, I mean, yeah, I mean, from, again, so the whole internet router thing was a great example. So, you know, in the corporate world, we have something called MDM, where it's mobile device management, where we control the activity that's happening on a laptop. Talk on information security covering CISO, vCISO, red team, threat modeling, Enterprise Security Weekly, Security Cafe, Getting Into Infosec, Ayman Elsawah, Adrian Sanabria. 24:35 Talk on information security covering CISO, vCISO, red team, threat modeling, Enterprise Security Weekly, Security Cafe, Getting Into Infosec, Ayman Elsawah, Adrian Sanabria. Also volunteering at my kid's school was very helpful too. I learned a lot about Chrome and Chromebook management. So I helped and I encourage everybody to help their school get to, you know, like help them with their IT departments. 25:06 Sometimes they're just not like they're understaffed and whatnot. But you can you can there's a lot of really cool controls in google like on chromebooks and things like that so i learned a lot doing that and i took that over to you know some of the family device management stuff i mean besides going to chrome i guess you can go to chrome and see what like management they have there if you decide to have a chromebook for your family it's a little different than organizational settings but yeah

Yes, yes.

Is there a particular game that they love? Well... I mean my son's playing spider-man right now that's pretty popular and my daughter she plays a lot of like the casual games there's this one with where the sun is going down I can't remember and you have to go and you're flying a ship lifestyle not lifestyle but like it's like really quiet and scenic and like very music but scene friendly where it like looks really nice and you do quests basically 26:30 No, no, this is very intense. So it's a it's a like a runner kind of game where you have a ship and you have to go down before the sun goes down and you're a solar powered ship and you have to like navigate the thing. It's really cool. I could I could find in a second.

Yeah. So I have Steam Family Link. I have Steam Family View. So I have a whole library of Steam games. I use Steam as a platform marketplace where I use games. And there's some games that, you know, like fighting games, Mortal Kombat, whatever that I bought before that at the time my kids were too young to play. So I had limited, Steam has a really cool feature where you can allow only certain games for family view settings. So it's really cool. 27:15 So only certain games like casual games and whatnot that I approved were allowed in the family group settings. And then my kids found the code.

Yeah, yeah, yeah, yeah. Well, so when they found out the code, I'm like, okay, don't enter the code unless I say okay. Of course, I could just change the code at any time, but I was just being lazy at the time, but I could just change the code and then we're good. So yeah, that's the simplest thing. I could change the code. Even on like Amazon, right? Or like on Roku and you go to view an R-rated movie, I have a code entered on so that I have to enter a pin. I always forget the pin, but...

No, they don't know the pin because if I don't know the pin, they don't know the pin.

Yeah, like, hey, kids, what's the thing, right? A talk on information security covering CISO, vCISO, red team, threat modeling, Enterprise Security Weekly, Security Cafe, Getting Into Infosec, Ayman Elsawah, Adrian Sanabria.

Talk on information security covering CISO, vCISO, red team, threat modeling, Enterprise Security Weekly, Security Cafe, Getting Into Infosec, Ayman Elsawah, Adrian Sanabria talk on information security covering CISO, vCISO, red team, threat modeling, Enterprise Security Weekly, Security Cafe, Getting Into Infosec, Ayman Elsawah, Adrian Sanabria A talk on information security covering CISO, vCISO, red team, threat modeling, Enterprise Security Weekly, Security Cafe, Getting Into Infosec, Ayman Elsawah, Adrian Sanabria A talk on information security covering CISO, vCISO, red team, threat modeling, Enterprise Security Weekly, Security Cafe, Getting Into Infosec, Ayman Elsawah, Adrian Sanabria

I think with all the parental questions out there, I think there needs to be better ones, more easier to use. Talk on information security covering CISO, vCISO, red team, threat modeling, Enterprise Security Weekly, Security Cafe, Getting Into Infosec, Ayman Elsawah, Adrian Sanabria.

Yeah, I mean, 100%, I think, I mean, and then, you know, games are written by adults. So adults are writing these games, so they have their own imaginations. So, you know, I think, so another, another misnomer, I heard a parent say this once, oh, because it's animated, I thought it was okay.

Yeah, I'm like, are you kidding? There was one movie that came out several years ago. It was so raunchy. It was so bad. I can't remember. It was an animated movie. And the parent had their kid watch it. I'm like, Wow. And I don't know. I felt like I had to inform. Like, I usually don't do this, but... Or somebody... Actually, I just asked. And anyway, the word got to the parent and they were like, oh, I had no idea. And they literally said, I thought because it was animated, it was fine. I'm like...

Wow, that's cool.

Yeah let's unpack a couple things there i think i think you hit a couple things on the head there one is understanding more and you could only develop empathy and understanding if you've if you participate so there was a good wired article right around the pandemic about a dad who decided to play fortnite with their kid Talk on information security covering CISO, vCISO, red team, threat modeling, Enterprise Security Weekly, Security Cafe, Getting Into Infosec, Ayman Elsawah, Adrian Sanabria. 36:45 So and so because you know you're it's it's it's almost equivalent i mean especially with certain ages and certain genders it's it's the way they bond right it's the way they're bonding and you know i like i let him play games with his cousins and they're they're playing and they're just chatting and stuff so it's like they're in action especially with like they're all over the us right or something like that or global even Another thing is, which I really encourage parents to do, is spend time with their kids in some of these activities, right? 37:19 And what's going to happen is your brain's going to release a neurotransmitter called oxytocin, which is the bonding chemical, right? And it's going to create a bond with your kid. Like shared experiences are bonding experiences. So if you watch a movie together, watch a show together, laugh together, play a video game together, you're going to actually get closer to your kid. And they're going to get closer to you. So I encourage parents to take advantage of this time when the kid is thirsty for their company. 37:58 Because at some point, as we all know, they're going to be teenagers and not want to have anything to do with us. So...

Some, I guess. Okay. You know, we don't know what's going to happen. But, you know, so we just want to, you know, I think, you know, and back to the whole game. I mean, you also... The whole thing about gaming is only for kids. I mean, also the neuroplasticity and the mental, not mental health effects, but some of the brain acuity that can be developed from gaming Talk on information security covering CISO, vCISO, red team, threat modeling, Enterprise Security Weekly, Security Cafe, Getting Into Infosec, Ayman Elsawah, Adrian Sanabria talk on information security covering CISO, vCISO, red team, threat modeling, Enterprise Security Weekly, Security Cafe, Getting Into Infosec, Ayman Elsawah, Adrian Sanabria 38:58 Talk on information security covering CISO, vCISO, red team, threat modeling, Enterprise Security Weekly, Security Cafe, Getting Into Infosec, Ayman Elsawah, Adrian Sanabria.

Yeah, I don't. Yeah. Got to find your friends, I guess. But anyway.

Yes. Yeah. There's this misnomer, for example, that having a flip phone is more secure than having a smartphone. And I find that... Let's see, how do I say it nicely? Like, it's interesting, but I don't think it's true. And I'd love to be proven wrong. But, you know, I saw a kid with the smartphone and they're just texting all day. It just takes longer. Sorry, with the flip phone. 40:30 But the flip phone had WhatsApp on there. Okay, I was surprised that these phones had. But think about it. These flip phones don't have any parental controls at all. How do you parental control a flip phone? I gave my kid an Android device and it has all the controls I need and more. I can lock it remotely, everything. It's amazing. I track his location, everything. So I think that's one misnomer that flip phones are more secure than smartphones. 41:06 I would also say that just try to delay phone use as much as possible. It's okay if your kid doesn't have a smartphone and other kids do. Do it in a sense where it's good for your family at that right time. I would say that and because and whenever you get whenever you as a parent get discouraged look up the jonathan john something built children's bill of rights and it's one of them is like children have the right to hear no multiple times a day

Maybe. Yeah. Yeah. Yeah. So, yeah, the only thing that says no is, you know, your credit card being denied, I guess, you know.

Yeah.

It depends. I mean, I mean definitely by high school it seems like high school like ninth grade you can't avoid it anymore but in other yeah I mean seventh eighth grade and it depends you could say like just for the summer like I originally started to just help in the summer just to help communication like if he wants to bike somewhere I'm like go ahead bike but it'd be nice for him to call if something happens like did you ever think of smartphones as an alternative not smartphones smart watches 43:11 Oh, so I did. Actually, initially, I actually gave them these devices, which unfortunately, they don't make them anymore. The relay. Do you remember the relay? The relay was this really cool device. All it is was a speaker and a button.

Yeah, yeah. And you pay $10 a month for it. And it was cool. You could have it tell you jokes and stuff like that. And you could install the mobile app and even your relatives can install the mobile app and communicate with your kid. And you could create groups and stuff like that. It was amazing. But unfortunately, I guess the business model didn't work for them and they no longer sell it. But it was $10 a month. It was cellular, so it could work anywhere. You know, had a SIM card and everything. It was cool.

It changes. I think the best thing is to teach. A lot of people are looking for easy answers. But I think the thing is we have to research. We have to spend the time. But we can teach people how to find the answers. So read the privacy policies, for example.

Yeah, you know, one thing that being a cybersecurity professional has taught me is that nothing surprises me anymore. Like, you know, a lot of people think that these companies are taking care of security and have their privacy interests in mind. I'm like, no. No, they're just trying to get products out and, you know, they're trying to survive. Talk on information security covering CISO, vCISO, red team, threat modeling, Enterprise Security Weekly, Security Cafe, Getting Into Infosec, Ayman Elsawah, Adrian Sanabria talk on information security covering CISO, vCISO, red team, threat modeling, Enterprise Security Weekly, Security Cafe, Getting Into Infosec, Ayman Elsawah, 46:35 A little bit of a jaded part, you know, being a security professional.

The block? Oh, I don't know. I can't keep up with their...

So there's cybersecurity and there's privacy. A lot of people like to count them as the same. I like to make them a little separate. There's no wrong or right. I think, again, it goes back to what your level of convenience and risk tolerance or privacy tolerance in this case is. So if you're able to get a Synology device and get a regular camera and have it go to your Synology at home and set that up, then 48:39 Go for it.

It's more technical. It's more work, right? So again, you know, you know, Or you can get, you can try to maybe do a happy medium. Maybe you get a non-cloud device, right? That, I mean, it's, it's, it's almost impossible.

Yeah, I mean, hands down, I trust Apple, you know, from a privacy perspective. Hands down, Apple probably goes above and beyond from a privacy perspective compared to other companies. But, you know, they don't make any camera doorbells or anything like that.

Yeah, yeah, yeah. And then, you know, and then keep in mind also that if something is in the cloud, at any point in time, it can be subpoenaed by the police. So that's something to take into consideration. If you want to have a private conversation in front of your door and don't want it to be recorded by your ring, then cover your ring or walk away or something like that. Even though even though recording actually we're veering way off here but like recording in public is actually public domain so you're allowed to photograph anyone in the public street you don't have to ask for permission so that's but you know you don't want your own doorbell so anyway so there is that but i digress yeah i don't know i think it just read the policies and assess your own personal comfort level and go from there

Yeah, I mean, my kids are the ones. They've been pretty helpful. They tell me what's going on. They tell me what kids are doing at school, things like that. So they've been helpful in that regard. The only one piece of advice I would say is just don't be naive. Don't take it for granted that everything is hunky-dory. Talk on information security covering CISO, vCISO, red team, threat modeling, Enterprise Security Weekly, Security Cafe, Getting Into Infosec, Ayman Elsawah, Adrian Sanabria. 52:14 So just be careful. Filter as much as possible. Oh, come up with a... I did this recently. I came up with a device policy at home. I haven't made the kids sign it yet. It's still in draft. But it's going to be like, your parents have the right to inspect your devices at any point in time. There's no expectation of privacy. Right? Okay, I like it. That's really good. Is there anything that happened that you were like, Oh, this must be like, this has to be inside of or did you find like some template online that you liked? 53:04 A talk on information security covering CISO, vCISO, red team, threat modeling, Enterprise Security Weekly, Security Cafe, Getting Into Infosec, A talk on information security covering CISO, vCISO, red team, threat modeling, Enterprise Security Weekly, Security Cafe,

Yeah it's unfortunate the way companies respond to security research can be hit or miss where you know somebody will report something and then you know we have something that you know you're supposed to fix something within 90 days of reporting it and sometimes that doesn't happen and so a security researcher might disclose the issue and force them by public disclosure To fix something you know and sometimes they think they fixed it but they there was another way that it wasn't fixed so it's you know just like in life i it'd be nice if companies were just more transparent and upfront instead of like hiding from things so i don't have any comments on this particular issue but just a general good practice when there is a security incident is to just be upfront with your with your users if it's going to affect their data

No, no. You know, just for parents to stay strong, you know. I think the hardest thing is to stay strong and, you know, understand that you are doing the right thing. You know, your kids are not going to like it all the time, but it's in their benefit. So just, you know, just tell yourself, give yourself some affirmations, give yourself some forgiveness that you're doing the right thing. But keep trying and don't be naive. 55:23 Ask people, ask, you know, find the security experts in your area. Find, you know, you know, gobble up all of Cyber Frida's information because she has all the guides. So, yeah. I'm trying. Yeah.

Yeah, yeah, yeah, yeah, yeah. But, you know, just play, you know, whenever you get a device or whatever, just look, press the gear button and look at the parental controls. It's got to be there. Yeah, be curious and find out where the parental controls are.

Nice. That's awesome. Yeah. Just, you know, every app, just go to the settings and explore, you know, be curious.

Yeah. Yeah. Coffee with Ayman everywhere. So LinkedIn, Twitter, Instagram, all the places. So just Google my name or Ayman Elsawah anywhere.

All right. Thank you. It was a pleasure.