How to avoid phishing attempts. However it’s spelled, it’s bad news

WEBVTT
Kind: captions
Language: en

00:00:06.030 --> 00:00:06.863
- Hi, everyone.

00:00:06.863 --> 00:00:08.250
Sal Khan here from Khan Academy,

00:00:08.250 --> 00:00:09.930
and I'm here with Grace Hoyt,

00:00:09.930 --> 00:00:12.420
head of Account Security
Partnerships at Google

00:00:12.420 --> 00:00:15.000
to talk a little bit about online safety.

00:00:15.000 --> 00:00:16.590
Welcome, Grace.

00:00:16.590 --> 00:00:18.150
- Thanks for having me, Sal.

00:00:18.150 --> 00:00:19.800
- So let's just start at the basics.

00:00:19.800 --> 00:00:23.040
What is online safety

00:00:23.040 --> 00:00:25.233
and what's the worst that could happen?

00:00:26.640 --> 00:00:28.590
- As we spend more of our times online,

00:00:28.590 --> 00:00:31.740
we think about online safety
in a way that people can go

00:00:31.740 --> 00:00:35.640
about their work or school
or personal activities online

00:00:35.640 --> 00:00:37.950
in a way that they feel safe and secure,

00:00:37.950 --> 00:00:40.860
and a big topic in this space that we like

00:00:40.860 --> 00:00:44.220
to provide guidance on is
something called online scams,

00:00:44.220 --> 00:00:46.863
and in particular, how to avoid phishing.

00:00:47.700 --> 00:00:50.400
- Now, phishing, spelled with a P-H,

00:00:50.400 --> 00:00:55.400
P-H-I-S-H-I-N-G, what is that?

00:00:55.500 --> 00:00:58.263
It starts to evoke, people
are maybe fishing for me.

00:00:59.130 --> 00:01:00.030
- That's right, Sal.

00:01:00.030 --> 00:01:01.980
Phishing does have the namesake

00:01:01.980 --> 00:01:05.220
from the word with fishing, with an F,

00:01:05.220 --> 00:01:06.390
but this phishing we're talking

00:01:06.390 --> 00:01:10.560
about is a attempt to impersonate someone,

00:01:10.560 --> 00:01:13.230
a trusted source, or reach you via email,

00:01:13.230 --> 00:01:15.720
phone, or call, and try to get access

00:01:15.720 --> 00:01:17.760
to someone's personal information,

00:01:17.760 --> 00:01:19.470
such as their bank account information,

00:01:19.470 --> 00:01:22.800
their passwords, or address,
and things like that.

00:01:22.800 --> 00:01:24.360
So phishing is a way to sort of bait

00:01:24.360 --> 00:01:27.570
and hook someone in to giving
up personal information.

00:01:27.570 --> 00:01:29.370
Unfortunately, about 80%

00:01:29.370 --> 00:01:32.250
of all cyberattacks begin with phishing.

00:01:32.250 --> 00:01:34.170
So this is something we
think it's really important

00:01:34.170 --> 00:01:36.810
for people to be able
to spot and recognize

00:01:36.810 --> 00:01:38.850
on their own so that this
doesn't happen to them.

00:01:38.850 --> 00:01:41.433
- And what form do these
phishing attacks take?

00:01:42.960 --> 00:01:47.960
- So these can be emails
impersonating a trusted source.

00:01:48.900 --> 00:01:52.110
These can come in the
form of spammy text links

00:01:52.110 --> 00:01:54.000
or phone calls.

00:01:54.000 --> 00:01:56.280
One of the most important
tips that we like

00:01:56.280 --> 00:02:00.000
to advise people is to
not click on a URL link

00:02:00.000 --> 00:02:03.060
before verifying that it really
is the source you're trying

00:02:03.060 --> 00:02:04.200
to get to.

00:02:04.200 --> 00:02:08.160
So it's always best to actually
go directly to a website.

00:02:08.160 --> 00:02:10.290
For example, if you're
trying to reach your bank

00:02:10.290 --> 00:02:13.260
or track the delivery of a package,

00:02:13.260 --> 00:02:15.540
type that directly into your URL,

00:02:15.540 --> 00:02:18.840
as opposed to opening a
suspicious link right out

00:02:18.840 --> 00:02:21.780
of your email inbox or text message.

00:02:21.780 --> 00:02:24.120
Now, if you want to
actually look more closely

00:02:24.120 --> 00:02:26.400
at a link before clicking on it,

00:02:26.400 --> 00:02:28.260
on mobile, you can press and hold down

00:02:28.260 --> 00:02:31.920
on the URL and look for suspicious aspects

00:02:31.920 --> 00:02:34.530
of that link, or typos,

00:02:34.530 --> 00:02:36.330
but you can also just use the option

00:02:36.330 --> 00:02:38.640
to go directly to that link yourself,

00:02:38.640 --> 00:02:39.900
as opposed to opening it out

00:02:39.900 --> 00:02:41.550
of something that looks suspicious.

00:02:41.550 --> 00:02:43.410
- Okay, so this has
definitely happened to me

00:02:43.410 --> 00:02:45.750
in the recent past, where
I get these text messages

00:02:45.750 --> 00:02:47.760
for, "Fraud alert for your bank account,"

00:02:47.760 --> 00:02:48.720
and sometimes it's from a bank

00:02:48.720 --> 00:02:50.100
where I don't even have a bank account,

00:02:50.100 --> 00:02:52.297
so they're just trying to
see if I happen to be...

00:02:52.297 --> 00:02:53.850
"Someone just charged $10,000."

00:02:53.850 --> 00:02:55.590
I'm like, oh, my god,
and then I look at it

00:02:55.590 --> 00:02:57.450
and the URL looks a little bit shady,

00:02:57.450 --> 00:02:59.670
and to your point, you
have to really confirm

00:02:59.670 --> 00:03:01.500
what the URL is, even if
it doesn't look shady,

00:03:01.500 --> 00:03:03.960
and on mobile, you can press and hold.

00:03:03.960 --> 00:03:05.647
Sometimes you get these emails that, "Hey.

00:03:05.647 --> 00:03:08.497
"Someone has just done the
following on your Amazon account.

00:03:08.497 --> 00:03:11.010
"Go log into your Amazon account here,"

00:03:11.010 --> 00:03:15.330
and it's probably a link
to a fake Amazon website.

00:03:15.330 --> 00:03:16.500
You type in your credentials.

00:03:16.500 --> 00:03:19.590
Now they can actually log
into your Amazon account

00:03:19.590 --> 00:03:22.833
or your banking account, or whatever else.

00:03:23.670 --> 00:03:24.503
- Absolutely.

00:03:24.503 --> 00:03:27.030
So unfortunately that's oftentimes

00:03:27.030 --> 00:03:29.850
a way that folks are trying
to grab that password

00:03:29.850 --> 00:03:31.290
and have you hand it over to them.

00:03:31.290 --> 00:03:33.300
So you're exactly right, Sal.

00:03:33.300 --> 00:03:36.390
So we do recommend that people
go straight to that URL.

00:03:36.390 --> 00:03:37.223
- Well, thanks for that.

00:03:37.223 --> 00:03:39.480
I think we're all a little bit less likely

00:03:39.480 --> 00:03:41.463
to get phished and get hooked.


How to stay safe online shopping

WEBVTT
Kind: captions
Language: en

00:00:06.090 --> 00:00:08.550
- So Kelly, you know we all shop online,

00:00:08.550 --> 00:00:11.250
but there's some sites that
you know and you use a lot

00:00:11.250 --> 00:00:13.500
and they usually already
have your credit card stored

00:00:13.500 --> 00:00:14.333
and I use those.

00:00:14.333 --> 00:00:15.450
But every now and then I buy things

00:00:15.450 --> 00:00:17.820
from sites that I might
not be as familiar with.

00:00:17.820 --> 00:00:20.430
And it's a little bit
scary 'cause as we all know

00:00:20.430 --> 00:00:22.020
we don't want random people running around

00:00:22.020 --> 00:00:24.510
with our credit card information or more.

00:00:24.510 --> 00:00:26.490
How do you think about that?

00:00:26.490 --> 00:00:28.350
What safeguards or what
should we be thinking

00:00:28.350 --> 00:00:30.293
in the back of our minds
when we're shopping?

00:00:31.470 --> 00:00:32.580
- Yeah, I agree.

00:00:32.580 --> 00:00:34.470
It's challenging because you know,

00:00:34.470 --> 00:00:36.330
ideally you'd start
with somewhere you trust

00:00:36.330 --> 00:00:38.730
but that isn't always an option.

00:00:38.730 --> 00:00:40.140
I think that, first off,

00:00:40.140 --> 00:00:43.110
think about something like
HPS that will tell you

00:00:43.110 --> 00:00:45.330
not that they're necessarily
a safe shopping site,

00:00:45.330 --> 00:00:47.610
but at least that any
information you share

00:00:47.610 --> 00:00:48.510
is going to them.

00:00:48.510 --> 00:00:50.430
I'm basically saying that the site,

00:00:50.430 --> 00:00:51.990
like traffic between you and the site,

00:00:51.990 --> 00:00:54.750
is encrypted so that you
know that the site is the

00:00:54.750 --> 00:00:56.130
only people getting it.

00:00:56.130 --> 00:00:58.920
Another thing to think about is, you know

00:00:58.920 --> 00:01:01.170
do you have to share your
credit card information?

00:01:01.170 --> 00:01:03.270
So a lot of banks now are doing what we

00:01:03.270 --> 00:01:05.280
call virtual credit card numbers.

00:01:05.280 --> 00:01:06.960
So those are basically

00:01:06.960 --> 00:01:09.660
a throwaway one time number
that they'll give you

00:01:09.660 --> 00:01:13.110
where if it ever gets
lost or charges against it

00:01:13.110 --> 00:01:14.060
that you don't want

00:01:14.909 --> 00:01:16.800
it's not your normal credit card number,

00:01:16.800 --> 00:01:18.390
so you can kind of get rid of it

00:01:18.390 --> 00:01:21.330
and the damage is
limited to that fake one.

00:01:21.330 --> 00:01:22.290
Virtual one.

00:01:22.290 --> 00:01:25.740
So browsers like Chrome and also Android

00:01:25.740 --> 00:01:28.410
have built in features to
actually take advantage of this

00:01:28.410 --> 00:01:31.380
and make it easy for you to
input your virtual number

00:01:31.380 --> 00:01:33.783
instead of your regular
credit card number.

00:01:35.250 --> 00:01:36.083
- This is helpful.

00:01:36.083 --> 00:01:37.110
I thought I was actually pretty savvy.

00:01:37.110 --> 00:01:38.820
I didn't know about these
virtual credit card numbers.

00:01:38.820 --> 00:01:41.610
I have to figure out
how get some of these.

00:01:41.610 --> 00:01:43.830
Super helpful.
Thanks so much Kelly.

00:01:43.830 --> 00:01:44.663
Sure.


Does it really matter what browser I choose?

WEBVTT
Kind: captions
Language: en

00:00:06.180 --> 00:00:08.880
- So Kelly, we have
several different options

00:00:08.880 --> 00:00:10.740
on what type of browser we use.

00:00:10.740 --> 00:00:14.673
Does it matter from a safety
and privacy point of view?

00:00:16.680 --> 00:00:18.660
- Yeah, there are a
couple factors that you

00:00:18.660 --> 00:00:20.130
might wanna think about that make

00:00:20.130 --> 00:00:22.440
a browser potentially safer.

00:00:22.440 --> 00:00:25.320
So one thing that's
important is how frequently

00:00:25.320 --> 00:00:28.980
the browser updates and
ideally automatically updates.

00:00:28.980 --> 00:00:32.850
So attackers are constantly
looking for gaps and holes where

00:00:32.850 --> 00:00:34.710
they can press their advantage.

00:00:34.710 --> 00:00:37.290
And browser manufacturers
should be looking to

00:00:37.290 --> 00:00:40.590
close those gaps and protect your computer

00:00:40.590 --> 00:00:43.500
by releasing updates with
security updates in them.

00:00:43.500 --> 00:00:46.080
Another thing you might
wanna consider is what built

00:00:46.080 --> 00:00:48.480
in security protections your browser has.

00:00:48.480 --> 00:00:52.650
So browsers like Chrome, use
my team service safe browsing

00:00:52.650 --> 00:00:56.370
to offer malware, phishing,
unwanted software protections.

00:00:56.370 --> 00:00:58.920
And so that's basically
your first line of defense.

00:00:58.920 --> 00:01:01.680
We'll be looking out for
you to see if there is

00:01:01.680 --> 00:01:05.160
a dangerous site and warn
you about it so you have that

00:01:05.160 --> 00:01:07.515
before it even touches your computer.

00:01:07.515 --> 00:01:12.390
There are also other things
like Chrome has protections

00:01:12.390 --> 00:01:16.500
against dangerous extensions
that are offered, as well

00:01:16.500 --> 00:01:19.374
as things like feature
that looks for passwords

00:01:19.374 --> 00:01:21.450
that might have been
leaked, so you know that you

00:01:21.450 --> 00:01:22.770
can update your password.

00:01:22.770 --> 00:01:26.370
So thinking about what does
your browser offer in terms

00:01:26.370 --> 00:01:29.820
of built in security protections
can be an important role

00:01:29.820 --> 00:01:31.233
as well.
- Super useful.


What’s private or incognito mode?

WEBVTT
Kind: captions
Language: en

00:00:05.850 --> 00:00:08.310
- So Kelly, one thing that
I see on a lot of browsers,

00:00:08.310 --> 00:00:11.940
they might have like a private
mode, or an incognito mode.

00:00:11.940 --> 00:00:13.650
What do those things generally do,

00:00:13.650 --> 00:00:16.470
and how private, or incognito are they,

00:00:16.470 --> 00:00:17.520
and what should we still think about,

00:00:17.520 --> 00:00:19.170
even if we are using those modes?

00:00:21.000 --> 00:00:25.110
- So, generally, a private
mode, or incognito mode means

00:00:25.110 --> 00:00:27.900
that what is happening
in that browsing session

00:00:27.900 --> 00:00:29.520
on your computer stays there.

00:00:29.520 --> 00:00:31.560
So, sometimes when you browse the web,

00:00:31.560 --> 00:00:34.770
you get things like cookies
that remember who you are,

00:00:34.770 --> 00:00:36.930
remember different things
that have happened,

00:00:36.930 --> 00:00:40.050
so for instance, a site that
you've visited it before,

00:00:40.050 --> 00:00:41.760
maybe that you've logged in before.

00:00:41.760 --> 00:00:43.950
So what those windows do is they say

00:00:43.950 --> 00:00:45.450
that once you close that window,

00:00:45.450 --> 00:00:48.030
everything is forgotten on your computer.

00:00:48.030 --> 00:00:49.740
But what they don't mean,

00:00:49.740 --> 00:00:51.750
is that no one can know what happened,

00:00:51.750 --> 00:00:54.030
because they don't protect against

00:00:54.030 --> 00:00:55.950
other software running on your computer.

00:00:55.950 --> 00:00:57.900
If you're at work, your work administrator

00:00:57.900 --> 00:01:01.170
might still have access to
what's happening on your computer

00:01:01.170 --> 00:01:04.740
or even the Wi-fi network
might have some sort of record

00:01:04.740 --> 00:01:06.210
of what traffic's going through it.

00:01:06.210 --> 00:01:07.500
- So to clean out a lot of the things

00:01:07.500 --> 00:01:09.360
that might be saved on your computer,

00:01:09.360 --> 00:01:10.650
when you're normally browsing.

00:01:10.650 --> 00:01:13.150
And what are the disadvantages
of using that mode?

00:01:15.090 --> 00:01:17.010
- The disadvantages are,

00:01:17.010 --> 00:01:20.460
some of the things that cookies
do are conveniences for you.

00:01:20.460 --> 00:01:24.720
So for instance, if
you remember your login

00:01:24.720 --> 00:01:26.520
on a website, that makes it much easier

00:01:26.520 --> 00:01:28.020
for you to log in next time.

00:01:28.020 --> 00:01:32.250
Or maybe, you want to
have your video service,

00:01:32.250 --> 00:01:33.900
remember what videos you like,

00:01:33.900 --> 00:01:36.540
so that it can give you
better suggestions next time.

00:01:36.540 --> 00:01:39.060
So, the internet, there
are a lot of advantages

00:01:39.060 --> 00:01:40.950
to some of the things like cookies.

00:01:40.950 --> 00:01:43.580
It's just a question of,
in that particular moment,

00:01:43.580 --> 00:01:45.870
is that something that's useful to you?

00:01:45.870 --> 00:01:47.820
Or is that something that you wanna avoid,

00:01:47.820 --> 00:01:51.240
by using a private or incognito browsing?

00:01:51.240 --> 00:01:53.140
- Super useful. Thanks so much, Kelly.


Why you should actually read the URL & be careful with free Wi-Fi

WEBVTT
Kind: captions
Language: en

00:00:06.060 --> 00:00:07.560
- So Kelly, you've convinced me

00:00:07.560 --> 00:00:11.718
that I should be wary as
I browse the internet.

00:00:11.718 --> 00:00:14.457
What should I be doing
to make sure that I can,

00:00:14.457 --> 00:00:17.253
I can leverage the internet
but not get into trouble?

00:00:18.900 --> 00:00:21.390
- Well, I think it all starts with

00:00:21.390 --> 00:00:22.993
where you're connecting to the internet.

00:00:22.993 --> 00:00:25.303
So first off, like you,

00:00:25.303 --> 00:00:27.630
it's great if you're using your own device

00:00:27.630 --> 00:00:30.330
which you trust and your own wifi network

00:00:30.330 --> 00:00:31.350
at home or at work,

00:00:31.350 --> 00:00:33.075
that's kind of the safest option.

00:00:33.075 --> 00:00:36.090
When you're traveling or
when you're out and about

00:00:36.090 --> 00:00:37.800
and at a cafe, that's where, you know,

00:00:37.800 --> 00:00:39.360
the internet can start to get a little bit

00:00:39.360 --> 00:00:40.890
more risky just by nature.

00:00:40.890 --> 00:00:44.062
So, you know, the worst
thing could be a computer

00:00:44.062 --> 00:00:46.560
like in a hotel lobby
where you can log in to get

00:00:46.560 --> 00:00:50.174
your pass or your
boarding pass printed out,

00:00:50.174 --> 00:00:53.310
because you don't know who
else has used that computer,

00:00:53.310 --> 00:00:54.720
you don't know what they put on it.

00:00:54.720 --> 00:00:56.760
That's completely, you know, risky.

00:00:56.760 --> 00:00:58.860
It could be that they've
downloaded something to,

00:00:58.860 --> 00:01:00.150
spyware onto the computer.

00:01:00.150 --> 00:01:01.830
It could be that they've
plugged something in

00:01:01.830 --> 00:01:02.663
that's dangerous.

00:01:02.663 --> 00:01:04.350
You know, it depends.

00:01:04.350 --> 00:01:05.940
If you're just doing something safe

00:01:05.940 --> 00:01:08.580
like looking up a local
restaurant, that's pretty low risk.

00:01:08.580 --> 00:01:10.240
But once you're starting to
think about typing, you know

00:01:10.240 --> 00:01:12.780
your username and
password into a computer,

00:01:12.780 --> 00:01:15.341
that's where I would personally
be a little more cautious.

00:01:15.341 --> 00:01:16.830
You know?

00:01:16.830 --> 00:01:20.164
And then also you can think
about free public wifi networks.

00:01:20.164 --> 00:01:23.107
You really have to think about
if you trust the network.

00:01:23.107 --> 00:01:28.107
So a lot of times, you know,
most sites use hps encryption.

00:01:28.710 --> 00:01:30.810
So that means between you and that site,

00:01:30.810 --> 00:01:33.450
everything you're sending is private.

00:01:33.450 --> 00:01:34.770
It doesn't mean the site is safe,

00:01:34.770 --> 00:01:36.785
it just means that you guys
have a private connection.

00:01:36.785 --> 00:01:40.560
- So make sure I understand
this point, especially

00:01:40.560 --> 00:01:43.650
if you're using a public
network to ensure,

00:01:43.650 --> 00:01:48.650
look at the url, see the https
instead of the http before,

00:01:49.105 --> 00:01:50.377
as part of the url.

00:01:50.377 --> 00:01:52.260
Then you at least know

00:01:52.260 --> 00:01:55.200
that the communications between
you and the site is private.

00:01:55.200 --> 00:01:56.989
You still have to make
sure it's not a shady site

00:01:56.989 --> 00:01:59.105
but at least other people on that network

00:01:59.105 --> 00:02:01.950
aren't going to be able to
see what your password is

00:02:01.950 --> 00:02:04.380
or what you're typing
and things like that.

00:02:04.380 --> 00:02:05.370
- Yeah, exactly.

00:02:05.370 --> 00:02:06.203
Exactly.


The basics of safe browsing

WEBVTT
Kind: captions
Language: en

00:00:06.090 --> 00:00:06.923
- Hi, everyone.

00:00:06.923 --> 00:00:08.370
Sal Khan here from Khan Academy,

00:00:08.370 --> 00:00:12.127
and I'm excited to talk a
little bit about safe browsing.

00:00:12.127 --> 00:00:14.970
Our guest today is Kelly Hope Harrington,

00:00:14.970 --> 00:00:18.990
who's a Senior Staff
Software Engineer at Google.

00:00:18.990 --> 00:00:20.730
Kelly, welcome.

00:00:20.730 --> 00:00:21.570
- Thank you.

00:00:21.570 --> 00:00:23.040
Happy to be here.

00:00:23.040 --> 00:00:25.110
- So safe browsing,

00:00:25.110 --> 00:00:26.005
my sense of browser, we,

00:00:26.005 --> 00:00:29.190
you go to some websites,
it sends up some webpages.

00:00:29.190 --> 00:00:31.190
What's the worst that can happen?

00:00:31.190 --> 00:00:33.420
- Oh, well there, there's all sorts

00:00:33.420 --> 00:00:35.460
of bad things that can
happen on the internet,

00:00:35.460 --> 00:00:37.020
and I think some of the ones

00:00:37.020 --> 00:00:39.270
that are come to mind first are things

00:00:39.270 --> 00:00:41.340
like phishing or social engineering.

00:00:41.340 --> 00:00:43.320
So someone is trying to trick you

00:00:43.320 --> 00:00:45.360
into thinking they're someone you trust.

00:00:45.360 --> 00:00:47.460
So you share either your
personal information

00:00:47.460 --> 00:00:50.280
like your password or your
credit card information,

00:00:50.280 --> 00:00:53.640
or maybe you do something
that you wouldn't otherwise do

00:00:53.640 --> 00:00:54.800
because you trust them.

00:00:54.800 --> 00:00:56.280
And that could be something

00:00:56.280 --> 00:00:58.200
like downloading, installing malware.

00:00:58.200 --> 00:01:02.070
So, malware is something that
will take over your computer.

00:01:02.070 --> 00:01:04.290
The attacker is trying to
do something to get value

00:01:04.290 --> 00:01:05.123
out of you.

00:01:05.123 --> 00:01:07.890
So, maybe they want to take some

00:01:07.890 --> 00:01:10.110
of your personal data and
sell it on the dark web.

00:01:10.110 --> 00:01:13.200
Maybe they want to do
ransomware where they lock

00:01:13.200 --> 00:01:15.120
down your computer and
won't let you use it

00:01:15.120 --> 00:01:16.440
until you pay them money.

00:01:16.440 --> 00:01:18.540
Or maybe they wanna do something sneakier

00:01:18.540 --> 00:01:20.520
and do crypto mining in the background

00:01:20.520 --> 00:01:21.630
so your computer gets hot

00:01:21.630 --> 00:01:24.386
and slow while that's happening.

00:01:24.386 --> 00:01:26.370
We also see unwanted software.

00:01:26.370 --> 00:01:29.610
So, unwanted software might
have something that you do value

00:01:29.610 --> 00:01:30.945
but also does something else.

00:01:30.945 --> 00:01:32.700
- Yeah, so I just wanna
make sure I understand this

00:01:32.700 --> 00:01:34.470
'cause we talk in other
videos about phishing where

00:01:34.470 --> 00:01:37.260
someone pretends to send
you an emergency letter

00:01:37.260 --> 00:01:38.730
from a bank or whatever,

00:01:38.730 --> 00:01:42.090
and many of those phishing
attacks usually try to get you

00:01:42.090 --> 00:01:43.492
to some type of a website.

00:01:43.492 --> 00:01:45.990
And this is where, once
again, you're browsing now.

00:01:45.990 --> 00:01:46.823
You need to make sure that

00:01:46.823 --> 00:01:49.530
that's actually the website
that you think it is.

00:01:49.530 --> 00:01:50.430
- Yeah, yeah.

00:01:50.430 --> 00:01:52.350
You know, I think that the attackers

00:01:52.350 --> 00:01:53.640
know you're looking for stuff,

00:01:53.640 --> 00:01:55.200
so they're trying to take advantage

00:01:55.200 --> 00:01:57.540
of you're already naturally trying to go

00:01:57.540 --> 00:01:58.410
and download something,

00:01:58.410 --> 00:02:01.020
and that is their opportunity
to try and trick you,

00:02:01.020 --> 00:02:02.250
and try and get you to do something

00:02:02.250 --> 00:02:03.720
that you weren't otherwise gonna do.

00:02:03.720 --> 00:02:04.623
- Super helpful.


How can I keep all my smart devices secure?

WEBVTT
Kind: captions
Language: en

00:00:06.060 --> 00:00:07.590
- So Mark, so far we've talked a lot

00:00:07.590 --> 00:00:10.800
about device security and
when we talk about devices

00:00:10.800 --> 00:00:12.337
at least in my mind, I imagine my phone,

00:00:12.337 --> 00:00:15.761
I imagine my laptop, a
tablet, maybe a smart watch,

00:00:15.761 --> 00:00:19.920
but there's actually a much
broader universe of devices,

00:00:19.920 --> 00:00:22.468
smart devices, you
know, smart light bulbs,

00:00:22.468 --> 00:00:25.121
things we might put on things
so that we don't lose them.

00:00:25.121 --> 00:00:27.690
How does that play into this whole notion

00:00:27.690 --> 00:00:28.950
of device security?

00:00:28.950 --> 00:00:30.540
Should we just, you know, not worry

00:00:30.540 --> 00:00:33.570
about the smart light bulb or
whatever else we might buy?

00:00:33.570 --> 00:00:35.970
Or should that also be
part of the picture?

00:00:35.970 --> 00:00:39.690
- I worry about smart devices a little bit

00:00:39.690 --> 00:00:41.636
and the reason is that we've now got,

00:00:41.636 --> 00:00:43.890
I just scratched myself in shot,

00:00:43.890 --> 00:00:47.040
comparable power to what was
on the original space shuttle,

00:00:47.040 --> 00:00:49.770
inside that light bulb,
inside that wall switch.

00:00:49.770 --> 00:00:52.080
Now, for the most part,
they're not doing that much.

00:00:52.080 --> 00:00:54.570
They don't have access
usually to your data.

00:00:54.570 --> 00:00:56.040
You know, if it has a camera or something,

00:00:56.040 --> 00:00:57.240
that's another issue.

00:00:57.240 --> 00:01:00.480
But literally for a light
bulb, the biggest concern

00:01:00.480 --> 00:01:02.640
is that it has access
to your home network.

00:01:02.640 --> 00:01:04.065
It's on that same wifi

00:01:04.065 --> 00:01:07.530
with your laptop and your
phone and your tablet,

00:01:07.530 --> 00:01:09.845
and they may be sharing
sensitive information.

00:01:09.845 --> 00:01:13.704
So for that reason, what
I tend to do is to not buy

00:01:13.704 --> 00:01:16.680
the absolute cheapest
light bulb I can find,

00:01:16.680 --> 00:01:18.270
because those companies,

00:01:18.270 --> 00:01:21.900
with their very thin profit
margins often don't update

00:01:21.900 --> 00:01:23.580
that you know, tiny little computer

00:01:23.580 --> 00:01:25.050
that's inside the light bulb,

00:01:25.050 --> 00:01:26.850
so it may have vulnerabilities,

00:01:26.850 --> 00:01:29.550
it may have weaknesses
that hackers can exploit.

00:01:29.550 --> 00:01:31.931
There are actually a few
examples of that happening.

00:01:31.931 --> 00:01:33.150
So in this case,

00:01:33.150 --> 00:01:36.090
what happened is somebody
found a vulnerability

00:01:36.090 --> 00:01:39.180
affecting millions and
millions of light bulbs

00:01:39.180 --> 00:01:41.545
and switches and smart
toasters and what have you,

00:01:41.545 --> 00:01:44.850
and they were able to
get them all to wake up

00:01:44.850 --> 00:01:48.369
at the same time and to
hit one particular website

00:01:48.369 --> 00:01:50.397
until that website was overwhelmed

00:01:50.397 --> 00:01:52.770
and couldn't keep up with the traffic.

00:01:52.770 --> 00:01:55.590
That's called a denial of service attack.

00:01:55.590 --> 00:01:57.587
And so by doing that,
they were able to use

00:01:57.587 --> 00:02:00.402
lots of innocent people's
smart light bulbs

00:02:00.402 --> 00:02:03.930
and smart toasters to do some real damage.

00:02:03.930 --> 00:02:07.020
So scary, scary crimes
not affecting the person

00:02:07.020 --> 00:02:09.060
in the house, but affecting, you know,

00:02:09.060 --> 00:02:10.950
some victim down the road.

00:02:10.950 --> 00:02:12.355
Again, the best solution to this

00:02:12.355 --> 00:02:16.093
is getting devices that
are updated and patched,

00:02:16.093 --> 00:02:18.900
that do receive those
same security updates

00:02:18.900 --> 00:02:21.030
that you get on your phone or your laptop.

00:02:21.030 --> 00:02:22.860
And most of the reputable
brands, you know,

00:02:22.860 --> 00:02:24.914
certainly the Google
Nest devices, but most

00:02:24.914 --> 00:02:28.089
of the reputable brands will
have those security updates,

00:02:28.089 --> 00:02:30.189
so you'll be in a pretty good place there.


What can I do to protect my devices?

WEBVTT
Kind: captions
Language: en

00:00:06.060 --> 00:00:07.260
- Mark, I'm pretty convinced

00:00:07.260 --> 00:00:11.010
that I need to protect my
devices from other folks.

00:00:11.010 --> 00:00:12.780
How should I think about that?

00:00:12.780 --> 00:00:15.420
How does one protect their device?

00:00:15.420 --> 00:00:16.253
- Yeah.

00:00:16.253 --> 00:00:20.910
The first piece is really
taking what the manufacturers

00:00:20.910 --> 00:00:23.220
and the companies behind
them are giving you.

00:00:23.220 --> 00:00:25.860
So, when you receive this notice that,

00:00:25.860 --> 00:00:28.650
you know, your phone is ready
to get a security update

00:00:28.650 --> 00:00:30.000
or ready to get a patch,

00:00:30.000 --> 00:00:33.180
it's really important to do that ASAP.

00:00:33.180 --> 00:00:36.330
The reason is that, once
that alert shows up,

00:00:36.330 --> 00:00:39.480
the attackers basically
know about a vulnerability.

00:00:39.480 --> 00:00:41.490
So it's kind of like if somebody says,

00:00:41.490 --> 00:00:42.697
you know, on allowed speaker,

00:00:42.697 --> 00:00:44.700
"Hey, your front door is unlocked."

00:00:44.700 --> 00:00:46.410
Like, the longer you wait,

00:00:46.410 --> 00:00:48.420
the more chance for someone to come in.

00:00:48.420 --> 00:00:50.160
So, I know it can be annoying,

00:00:50.160 --> 00:00:51.420
you're in the middle of a meeting,

00:00:51.420 --> 00:00:53.790
you're running for a taxi, what have you,

00:00:53.790 --> 00:00:55.410
but the sooner that you do that,

00:00:55.410 --> 00:00:57.210
the better you are protected.

00:00:57.210 --> 00:01:00.300
On Google devices, on Android phones,

00:01:00.300 --> 00:01:02.010
on our pixel phones,

00:01:02.010 --> 00:01:03.420
we push these out

00:01:03.420 --> 00:01:06.510
and try to make it so
it's as easy as possible.

00:01:06.510 --> 00:01:07.800
So there are very few steps,

00:01:07.800 --> 00:01:09.690
very few things for you to worry about.

00:01:09.690 --> 00:01:10.830
It will take a few minutes,

00:01:10.830 --> 00:01:12.630
it will use some wifi data,

00:01:12.630 --> 00:01:15.150
but that's probably the
first and best recommendation

00:01:15.150 --> 00:01:16.800
I'd give.

00:01:16.800 --> 00:01:17.633
- That's a really interesting point

00:01:17.633 --> 00:01:19.530
because I think all of us, sometimes

00:01:19.530 --> 00:01:22.380
whatever device we're using
from whichever manufacturer,

00:01:22.380 --> 00:01:23.970
they always say, oh,
would you like to update?

00:01:23.970 --> 00:01:24.900
You know, and all this.

00:01:24.900 --> 00:01:25.740
And we're like, oh, I'm busy.

00:01:25.740 --> 00:01:28.140
I don't wanna restart
things, et cetera, et cetera.

00:01:28.140 --> 00:01:30.270
But to your point, it's not just about,

00:01:30.270 --> 00:01:32.280
oh, there's been some shady behavior

00:01:32.280 --> 00:01:34.110
that's already occurred
and this protects you,

00:01:34.110 --> 00:01:36.570
but it's a big beacon to say,

00:01:36.570 --> 00:01:39.060
hey, in case you didn't
notice shady folks,

00:01:39.060 --> 00:01:41.700
these are ways that you might.

00:01:41.700 --> 00:01:45.810
So that's a really good time to update.

00:01:45.810 --> 00:01:48.030
What other things should I watch out for?

00:01:48.030 --> 00:01:52.170
- One of them is to only install
apps from trusted sources.

00:01:52.170 --> 00:01:54.900
So, on your iPhone, it
comes from the App Store,

00:01:54.900 --> 00:01:58.530
on your Google Android phone,
it comes from the Play Store.

00:01:58.530 --> 00:02:01.650
We test these on a continuous basis.

00:02:01.650 --> 00:02:02.880
The Google Play Protect

00:02:02.880 --> 00:02:06.420
scans billions of applications
and is continually updating

00:02:06.420 --> 00:02:07.920
to ensure that you're only getting

00:02:07.920 --> 00:02:08.910
things that have been vetted

00:02:08.910 --> 00:02:10.590
and that have gone through scanning.

00:02:10.590 --> 00:02:13.080
But if you're trying to
get something for nothing,

00:02:13.080 --> 00:02:14.670
or, you know, often is the case,

00:02:14.670 --> 00:02:16.890
your kids are trying to
get something for nothing

00:02:16.890 --> 00:02:18.990
and they find a free version of a game

00:02:18.990 --> 00:02:21.810
that's in some, you know,
dodgy corner of the web,

00:02:21.810 --> 00:02:23.820
this is kind of like
going down a dark alley

00:02:23.820 --> 00:02:25.440
and, you know, buying stuff from somebody

00:02:25.440 --> 00:02:26.730
with a trench coat on.

00:02:26.730 --> 00:02:28.050
You get what you pay for

00:02:28.050 --> 00:02:31.080
and what that might include
is viruses, malware,

00:02:31.080 --> 00:02:32.160
and hacking threats.

00:02:32.160 --> 00:02:33.480
- No, no, I agree so much with that

00:02:33.480 --> 00:02:35.280
because sometimes I've
looked for like, even a patch

00:02:35.280 --> 00:02:36.390
from a well known, you know,

00:02:36.390 --> 00:02:37.770
from some piece of software that comes.

00:02:37.770 --> 00:02:40.800
And I do it and some of
these shady actors actually

00:02:40.800 --> 00:02:42.810
have search results that are pretty high

00:02:42.810 --> 00:02:45.300
that they might be a paid
ad or something like that.

00:02:45.300 --> 00:02:46.980
And I'm not sure whether
they're necessarily

00:02:46.980 --> 00:02:50.400
but you realize that the person
claiming to provide a patch

00:02:50.400 --> 00:02:51.360
for a certain piece of software

00:02:51.360 --> 00:02:54.150
isn't necessarily the
publisher of that software.

00:02:54.150 --> 00:02:55.080
So I'm not saying necessarily

00:02:55.080 --> 00:02:56.340
that those are good or bad actors,

00:02:56.340 --> 00:02:58.020
but it is vary to your point,

00:02:58.020 --> 00:03:00.060
be extra careful you're
installing anything

00:03:00.060 --> 00:03:02.310
on a any kind of device
who it's coming from.

00:03:02.310 --> 00:03:05.430
- We built something at Google
called the Security Checkup

00:03:05.430 --> 00:03:07.590
really designed to be this one stop shop

00:03:07.590 --> 00:03:09.780
for all your devices,

00:03:09.780 --> 00:03:12.030
everything you've got
connected to your account.

00:03:12.030 --> 00:03:16.440
So there's a simple link
g.co/security checkup.

00:03:16.440 --> 00:03:18.690
And what that does is it runs through

00:03:18.690 --> 00:03:21.060
is your device protected
against local threats,

00:03:21.060 --> 00:03:22.560
you know, somebody grabbing it and just,

00:03:22.560 --> 00:03:24.180
you know , surfing your data,

00:03:24.180 --> 00:03:26.580
is it protected against online hacking,

00:03:26.580 --> 00:03:29.460
are you up to date with
patches and security issues,

00:03:29.460 --> 00:03:33.120
are you installing, you know,
apps from safe locations.

00:03:33.120 --> 00:03:35.730
Basically all the tips
that I would give somebody

00:03:35.730 --> 00:03:38.040
bundled together into this one stop shop,

00:03:38.040 --> 00:03:40.113
g.co/security checkup.


How passwords and screenlocks help protect you

WEBVTT
Kind: captions
Language: en

00:00:06.030 --> 00:00:07.170
- I could go on for hours

00:00:07.170 --> 00:00:08.910
about things to think
about with passwords.

00:00:08.910 --> 00:00:11.597
Maybe the top two is that initially

00:00:11.597 --> 00:00:16.597
that a password needs to be
unique on every different site.

00:00:17.370 --> 00:00:21.060
And the reason for that is
that if you share a password,

00:00:21.060 --> 00:00:23.733
if you use the same, you
know, your kid's middle name

00:00:23.733 --> 00:00:26.127
as the password on three different sites

00:00:26.127 --> 00:00:28.680
and any one of those gets broken into,

00:00:28.680 --> 00:00:32.108
now the attackers know your
password to use elsewhere.

00:00:32.108 --> 00:00:34.830
And unfortunately for
many of us, you know,

00:00:34.830 --> 00:00:35.760
there are these rules.

00:00:35.760 --> 00:00:38.400
You need to use capital
letters and symbols

00:00:38.400 --> 00:00:39.720
and punctuation and numbers

00:00:39.720 --> 00:00:41.396
and it becomes impossible to remember,

00:00:41.396 --> 00:00:43.530
so what many people do is they come up

00:00:43.530 --> 00:00:46.843
with one strong password
and then use it everywhere.

00:00:46.843 --> 00:00:50.400
And that's really a
bad idea because again,

00:00:50.400 --> 00:00:52.260
you're vulnerable if it gets reused,

00:00:52.260 --> 00:00:54.276
if any of those sites gets compromised

00:00:54.276 --> 00:00:56.280
now it's out there in the open.

00:00:56.280 --> 00:00:59.940
So instead what we recommend
is to use a password manager

00:00:59.940 --> 00:01:01.650
which is an app that remembers

00:01:01.650 --> 00:01:04.290
and then auto fills wherever you go.

00:01:04.290 --> 00:01:05.880
We have the Google password manager,

00:01:05.880 --> 00:01:07.795
it's built into Android,
it's built into Chrome.

00:01:07.795 --> 00:01:10.320
But other OS makers, other, you know,

00:01:10.320 --> 00:01:11.670
vendors have their products.

00:01:11.670 --> 00:01:13.937
There's third party ones
that are both free and paid.

00:01:13.937 --> 00:01:17.040
Again, you know, you might
get what you pay for,

00:01:17.040 --> 00:01:19.013
so don't just take anything out there

00:01:19.013 --> 00:01:20.880
but if it's coming from Google,

00:01:20.880 --> 00:01:22.316
if it's coming from one
of these big companies,

00:01:22.316 --> 00:01:25.204
that's much much better than memorizing

00:01:25.204 --> 00:01:27.779
and reusing that same
password in multiple places.

00:01:27.779 --> 00:01:29.730
- And that makes a ton of sense.

00:01:29.730 --> 00:01:31.341
I mean, when we talk about the passwords

00:01:31.341 --> 00:01:34.200
for different websites,
but what about, you know

00:01:34.200 --> 00:01:36.450
getting into your device or you know,

00:01:36.450 --> 00:01:38.054
your smartwatch or whatever, you know,

00:01:38.054 --> 00:01:40.650
and now you have other options, you can,

00:01:40.650 --> 00:01:43.230
there's biometrics, your
thumbprint, or your face scan

00:01:43.230 --> 00:01:44.100
and all of that.

00:01:44.100 --> 00:01:45.600
Does it matter or is it, hey,

00:01:45.600 --> 00:01:48.325
this is pretty low risk
that, you know, some spy

00:01:48.325 --> 00:01:50.940
from another country is going
to get access to my phone

00:01:50.940 --> 00:01:51.773
so I should just, you know,

00:01:51.773 --> 00:01:53.610
it's just really to keep my kids out.

00:01:53.610 --> 00:01:54.481
- Yeah, so I mean, it depends.

00:01:54.481 --> 00:01:57.210
For most of us, what we're dealing with

00:01:57.210 --> 00:02:01.104
on device screen locks is
that I left it in a taxi

00:02:01.104 --> 00:02:04.010
or a roommate or family
member picked this up.

00:02:04.010 --> 00:02:07.066
And so then the threat
model is pretty constrained.

00:02:07.066 --> 00:02:10.277
And it generally is
okay to reuse, you know,

00:02:10.277 --> 00:02:12.870
to use a simple pin or a biometric.

00:02:12.870 --> 00:02:16.292
Now you do have to think about
who else has access to it.

00:02:16.292 --> 00:02:19.572
In my own household, I
have very smart kids,

00:02:19.572 --> 00:02:22.514
they watch Khan Academy
videos, they've learned a lot.

00:02:22.514 --> 00:02:25.740
And so if I set the
same thing for my watch,

00:02:25.740 --> 00:02:27.780
my wife's watch, my tablet, my phone,

00:02:27.780 --> 00:02:29.594
and they shoulder surf any of those,

00:02:29.594 --> 00:02:31.662
we have that same problem of you know,

00:02:31.662 --> 00:02:34.478
once it falls in one
place it goes everywhere.

00:02:34.478 --> 00:02:37.170
For the most part though, I'm
not that worried about that.

00:02:37.170 --> 00:02:39.720
- I have to say my
oldest son, if there was

00:02:39.720 --> 00:02:42.278
like an Olympics for this,
he would be a medalist.

00:02:42.278 --> 00:02:43.410
He can't help it.

00:02:43.410 --> 00:02:45.570
He knows he, but if someone,
if you're in the room

00:02:45.570 --> 00:02:47.370
he somehow knows exactly
what you typed in.

00:02:47.370 --> 00:02:48.269
So anyway, yes, beware.

00:02:48.269 --> 00:02:51.068
And I think he's a force for
good, but there might be -

00:02:51.068 --> 00:02:54.586
- Yeah, I mean, foreign
spies and 10 year old kids

00:02:54.586 --> 00:02:57.436
like there's a, you know,
interesting Venn diagram there.


What do we mean by device security? Why should we care about this?

WEBVTT
Kind: captions
Language: en

00:00:06.030 --> 00:00:06.863
- Hi, everyone.

00:00:06.863 --> 00:00:08.190
Sal Khan here from Khan Academy,

00:00:08.190 --> 00:00:09.570
and I'm here with Mark Risher

00:00:09.570 --> 00:00:14.130
who is director of Product
Management at Android at Google

00:00:14.130 --> 00:00:16.800
to talk a little bit
about device security.

00:00:16.800 --> 00:00:18.090
So Mark, welcome.

00:00:18.090 --> 00:00:21.810
And my first question is
what is device security?

00:00:21.810 --> 00:00:23.430
Are we talking about somehow keeping

00:00:23.430 --> 00:00:25.563
our mobile devices secure?

00:00:26.460 --> 00:00:27.720
- We are talking about that.

00:00:27.720 --> 00:00:30.540
We're trying to say, how do
you make sure your device,

00:00:30.540 --> 00:00:32.400
your mobile phone, your tablet,

00:00:32.400 --> 00:00:34.380
anything that's digital these days

00:00:34.380 --> 00:00:37.830
is guarded against unwanted access?

00:00:37.830 --> 00:00:41.040
That could be coming from
hackers in some other country,

00:00:41.040 --> 00:00:43.689
it could be coming from
someone in the room next door.

00:00:43.689 --> 00:00:45.510
In all cases, we wanna give you

00:00:45.510 --> 00:00:48.390
the right level of
protection and security.

00:00:48.390 --> 00:00:50.190
- And I just wanna make
this tangible for folks,

00:00:50.190 --> 00:00:51.240
'cause I think we all have a sense that,

00:00:51.240 --> 00:00:53.880
okay, you know, we don't
want people messing around

00:00:53.880 --> 00:00:56.550
on our phones or on our
tablets or our laptops,

00:00:56.550 --> 00:01:01.550
but when has device security
not gone well for folks?

00:01:01.714 --> 00:01:02.547
(Mark chuckles)

00:01:02.547 --> 00:01:04.800
- There's more and more
information on these devices.

00:01:04.800 --> 00:01:06.690
You know, we trust them with,

00:01:06.690 --> 00:01:09.900
not just whatever the
application itself is asking us,

00:01:09.900 --> 00:01:12.420
but often it knows where
you are in the world,

00:01:12.420 --> 00:01:15.000
your location, it knows
what you've typed in

00:01:15.000 --> 00:01:15.870
and what you've searched,

00:01:15.870 --> 00:01:17.820
it knows whom you're communicating with.

00:01:17.820 --> 00:01:19.260
All these different dimensions,

00:01:19.260 --> 00:01:21.360
you know, they can be exploited.

00:01:21.360 --> 00:01:23.400
For the most part, good
things are happening

00:01:23.400 --> 00:01:25.380
and I'm definitely an
optimist in this space.

00:01:25.380 --> 00:01:26.670
But we wanna make sure

00:01:26.670 --> 00:01:29.100
that people understand what's going on,

00:01:29.100 --> 00:01:31.800
understand who has
access to the information

00:01:31.800 --> 00:01:34.560
and then they can make
the appropriate decisions

00:01:34.560 --> 00:01:37.530
and trade-offs so that they
get the right level of control

00:01:37.530 --> 00:01:40.620
without sacrificing all that's
really cool about technology.

00:01:40.620 --> 00:01:43.590
I really try not to frighten people,

00:01:43.590 --> 00:01:45.600
but to say, you know, what could happen?

00:01:45.600 --> 00:01:48.960
What could happen if all of
your location information

00:01:48.960 --> 00:01:51.660
were out there is, you
know, on a continuum,

00:01:51.660 --> 00:01:53.520
from it could be embarrassing

00:01:53.520 --> 00:01:55.860
to bad things could
happen in the real world

00:01:55.860 --> 00:01:57.480
if someone knows exactly
where you're going

00:01:57.480 --> 00:01:59.250
to be at a given time,

00:01:59.250 --> 00:02:01.890
to they cross correlate that information

00:02:01.890 --> 00:02:03.630
with something else and they use that

00:02:03.630 --> 00:02:06.210
to maybe send you a scam,

00:02:06.210 --> 00:02:09.090
send you a phishing warning, send you,

00:02:09.090 --> 00:02:11.580
you know, some sort of
crime could take place.

00:02:11.580 --> 00:02:16.050
There really is quite a
breadth and unfortunately,

00:02:16.050 --> 00:02:18.540
these criminals are very motivated

00:02:18.540 --> 00:02:20.160
and they're seeing positive results,

00:02:20.160 --> 00:02:22.170
so they do keep innovating.

00:02:22.170 --> 00:02:23.460
And that's again why we want people

00:02:23.460 --> 00:02:25.500
to have that right level of protection,

00:02:25.500 --> 00:02:26.880
that right level of control

00:02:26.880 --> 00:02:29.280
over their sensitive
data on their devices.

00:02:29.280 --> 00:02:31.320
- Yeah, one of the things that
immediately comes into mind

00:02:31.320 --> 00:02:33.270
in other videos we've produced,

00:02:33.270 --> 00:02:35.970
we talk about how
two-factor authentication

00:02:35.970 --> 00:02:36.810
is really important,

00:02:36.810 --> 00:02:38.460
because for someone to be able

00:02:38.460 --> 00:02:39.780
to get access to your password

00:02:39.780 --> 00:02:42.060
and your device is very unlikely.

00:02:42.060 --> 00:02:44.820
But to your point, if they
do get access to your device

00:02:44.820 --> 00:02:47.700
or if they're able to track
your movements in some way,

00:02:47.700 --> 00:02:50.850
they might be able to fake being you

00:02:50.850 --> 00:02:54.120
a little bit better and get
access to all sorts of things

00:02:54.120 --> 00:02:56.280
or pretend to be you and
embarrass you at minimum,

00:02:56.280 --> 00:02:58.920
or do worse, access to your
bank accounts, et cetera.

00:02:58.920 --> 00:03:00.240
- Yeah, that's actually the one

00:03:00.240 --> 00:03:01.830
that I'm even more scared of.

00:03:01.830 --> 00:03:03.217
People might say, you know,

00:03:03.217 --> 00:03:04.800
"I don't do anything suspicious.

00:03:04.800 --> 00:03:06.960
I don't do anything
risky. What do I care?"

00:03:06.960 --> 00:03:10.650
But the problem is that then
what the attackers wanna do

00:03:10.650 --> 00:03:14.430
is leverage your reputation
to go after someone else.

00:03:14.430 --> 00:03:15.990
And that can be terrible.

00:03:15.990 --> 00:03:18.030
Some of you may have seen what we call

00:03:18.030 --> 00:03:20.280
the "Mugged in London" scam.

00:03:20.280 --> 00:03:22.890
You get a message that looks
like it's from your uncle

00:03:22.890 --> 00:03:25.770
or your cousin or your
grandmother or what have you,

00:03:25.770 --> 00:03:27.570
saying, "I've been attacked.

00:03:27.570 --> 00:03:29.250
Please wire money to me."

00:03:29.250 --> 00:03:30.270
And this is a scam.

00:03:30.270 --> 00:03:31.410
It's coming from the attackers

00:03:31.410 --> 00:03:33.660
who broke into that person's account

00:03:33.660 --> 00:03:36.030
and then sent it to all
their family members.

00:03:36.030 --> 00:03:37.680
So again, even if you're not worried

00:03:37.680 --> 00:03:39.990
that you yourself have sensitive data,

00:03:39.990 --> 00:03:41.010
what you really don't want

00:03:41.010 --> 00:03:43.860
is somebody taking your reputation

00:03:43.860 --> 00:03:45.750
and using that to bootstrap their way

00:03:45.750 --> 00:03:47.670
into even more heinous crimes.

00:03:47.670 --> 00:03:48.503
- Wow. That's so powerful.

00:03:48.503 --> 00:03:51.270
I could imagine if someone
close to me texted me right now

00:03:51.270 --> 00:03:52.530
and said that, I'd be like, "Oh yeah,

00:03:52.530 --> 00:03:54.180
how do I help them?"
- Yeah, yeah, yeah.

00:03:54.180 --> 00:03:55.650
- It's a good word of warning.

00:03:55.650 --> 00:03:58.050
- And then both parties
feel guilty about that.

00:03:58.050 --> 00:03:59.880
It's terrible in all around.

00:03:59.880 --> 00:04:02.940
It's really this awful
exploitation. I hate it.

00:04:02.940 --> 00:04:04.680
- Okay, whether or not
you intended to do it,

00:04:04.680 --> 00:04:06.960
you scared me a little
bit, which I think is good.

00:04:06.960 --> 00:04:07.890
- But there's hope. There's hope.

00:04:07.890 --> 00:04:09.190
We can work together, Sal.


How can I review the security of my account?

WEBVTT
Kind: captions
Language: en

00:00:06.090 --> 00:00:08.490
- So Guemmy, you've given us a lot of tips

00:00:08.490 --> 00:00:09.390
and things to think about.

00:00:09.390 --> 00:00:11.820
Is there a way to just see where we are

00:00:11.820 --> 00:00:14.820
in terms of our account security?

00:00:14.820 --> 00:00:18.360
- Yeah. One thing I love
that's evolved in the industry

00:00:18.360 --> 00:00:19.410
over the last few years

00:00:19.410 --> 00:00:21.360
is a lot of the tech providers

00:00:21.360 --> 00:00:24.600
have developed very simple
and easy to use tools.

00:00:24.600 --> 00:00:25.803
Like a number of us have things

00:00:25.803 --> 00:00:29.580
that are like a security
checkup for instance.

00:00:29.580 --> 00:00:31.200
And it's a simple place where you can go

00:00:31.200 --> 00:00:33.191
to be like, "What are the
top things I need to look at

00:00:33.191 --> 00:00:35.070
to get my security better?

00:00:35.070 --> 00:00:36.660
And what is the state that I'm in?"

00:00:36.660 --> 00:00:37.493
Like for example,

00:00:37.493 --> 00:00:38.820
some will give you a score,

00:00:38.820 --> 00:00:40.800
you know, like your 99% safe.

00:00:40.800 --> 00:00:43.140
Or you could have a color,
like a red, green and yellow.

00:00:43.140 --> 00:00:45.450
And so it's really good to go into those

00:00:45.450 --> 00:00:48.090
and see what specific
things in your account

00:00:48.090 --> 00:00:49.563
that you need to go and fix.

00:00:50.400 --> 00:00:51.233
- That's super helpful.

00:00:51.233 --> 00:00:53.520
I have to say, I thought
I knew this pretty well,

00:00:53.520 --> 00:00:55.655
and I do about 80% of what
you've been talking about,

00:00:55.655 --> 00:00:57.300
but I have a little bit of work to do

00:00:57.300 --> 00:00:59.994
to tighten up my my account
security after this.

00:00:59.994 --> 00:01:01.230
(Sal laughs)

00:01:01.230 --> 00:01:02.160
- Yeah, definitely.

00:01:02.160 --> 00:01:03.900
And, and you know, like
a lot of companies,

00:01:03.900 --> 00:01:04.733
including Google,

00:01:04.733 --> 00:01:06.583
we do a lot in the
background automatically

00:01:06.583 --> 00:01:08.070
to protect users.

00:01:08.070 --> 00:01:11.737
And so when one of your services
actually tells you like,

00:01:11.737 --> 00:01:13.440
"Hey, there is something
to pay attention to."

00:01:13.440 --> 00:01:14.273
You really should,

00:01:14.273 --> 00:01:16.860
because that's the last
mile that need to you to do

00:01:16.860 --> 00:01:19.020
in order to protect you more fully.

00:01:19.020 --> 00:01:19.853
- Super useful.

00:01:19.853 --> 00:01:21.510
- Thanks so much Guemmy.

00:01:21.510 --> 00:01:22.660
- Of course. Thank you.


How adding your phone number and 2-factor authentication helps protect your account

WEBVTT
Kind: captions
Language: en

00:00:06.150 --> 00:00:09.090
- All right, Guemmy, so
sometimes sites ask for,

00:00:09.090 --> 00:00:11.040
like, a phone number
for security purposes,

00:00:11.040 --> 00:00:13.440
and I'm always actually afraid
to give my phone number.

00:00:13.440 --> 00:00:15.000
One, I just don't want
random people calling me

00:00:15.000 --> 00:00:15.833
all the time.

00:00:15.833 --> 00:00:18.060
But how do you think about that?

00:00:18.060 --> 00:00:20.670
When is it valuable or
maybe not so valuable?

00:00:20.670 --> 00:00:22.470
- Yeah, it's actually super important

00:00:22.470 --> 00:00:25.680
that when a site asks you
for a security phone number

00:00:25.680 --> 00:00:27.210
that you provide it.

00:00:27.210 --> 00:00:28.530
I think most people would agree

00:00:28.530 --> 00:00:29.640
that they wouldn't hesitate

00:00:29.640 --> 00:00:32.100
to give their credit card
company their phone number,

00:00:32.100 --> 00:00:33.510
because in the case of fraud,

00:00:33.510 --> 00:00:35.550
you do want them to contact you

00:00:35.550 --> 00:00:37.590
and to verify those
charges so that, you know,

00:00:37.590 --> 00:00:39.750
you're not responsible
for them, et cetera.

00:00:39.750 --> 00:00:42.030
In the same way, providing
your phone number

00:00:42.030 --> 00:00:44.100
to these online companies

00:00:44.100 --> 00:00:46.740
gives a way for the
companies to contact you

00:00:46.740 --> 00:00:48.360
in case that there's issues.

00:00:48.360 --> 00:00:49.590
In addition to that,

00:00:49.590 --> 00:00:53.610
the phone number itself is
actually a security mechanism.

00:00:53.610 --> 00:00:56.310
So, for example, a lot of
us on banking services,

00:00:56.310 --> 00:00:57.300
we've tried to log in

00:00:57.300 --> 00:01:00.369
and then the banking service
would send us an SMS code

00:01:00.369 --> 00:01:02.910
sent to your mobile phone number,

00:01:02.910 --> 00:01:04.140
and then you're able to enter that,

00:01:04.140 --> 00:01:07.260
before you're even able to log in.

00:01:07.260 --> 00:01:10.020
And what that does is it
actually prevents that fraud

00:01:10.020 --> 00:01:11.460
from even happening.

00:01:11.460 --> 00:01:13.620
And so instead of just the bank calls you

00:01:13.620 --> 00:01:14.490
because there's fraud,

00:01:14.490 --> 00:01:17.220
it's like, hey, let's prevent
the fraud in the first place.

00:01:17.220 --> 00:01:19.290
- I have to say, that last
point is very important.

00:01:19.290 --> 00:01:21.360
Like people think this is all theoretical.

00:01:21.360 --> 00:01:23.940
I, on not every day, that
would really freak me out,

00:01:23.940 --> 00:01:26.040
but you know, several
times in the past year,

00:01:26.040 --> 00:01:28.110
I get a little code like, you know,

00:01:28.110 --> 00:01:30.300
so and so was trying to
log in to your account

00:01:30.300 --> 00:01:31.133
and there's a code.

00:01:31.133 --> 00:01:31.980
I'm like, "Oh, no!"

00:01:31.980 --> 00:01:35.010
Somehow, maybe someone broke in,

00:01:35.010 --> 00:01:35.843
or they're creating a new,

00:01:35.843 --> 00:01:37.320
I don't know what's going on,

00:01:37.320 --> 00:01:39.720
but the fact that I take comfort

00:01:39.720 --> 00:01:41.400
that they didn't get the code,

00:01:41.400 --> 00:01:43.770
that I got the code and they
wouldn't be able to log in.

00:01:43.770 --> 00:01:45.600
And that kind of goes into, you know,

00:01:45.600 --> 00:01:46.680
is that what we're talking about

00:01:46.680 --> 00:01:48.270
when we're talking about
two-factor authentication?

00:01:48.270 --> 00:01:50.970
That you have to have, you
know, kind of two devices

00:01:50.970 --> 00:01:54.690
that, you know, say a
hacker in a foreign country

00:01:54.690 --> 00:01:57.780
or a bad actor might not have access to?

00:01:57.780 --> 00:01:58.890
- Yes, absolutely.

00:01:58.890 --> 00:02:01.440
You're right that because
that code was only sent

00:02:01.440 --> 00:02:02.640
to your phone number,

00:02:02.640 --> 00:02:04.560
it was not sent to that attacker.

00:02:04.560 --> 00:02:05.670
And so they cannot get in.

00:02:05.670 --> 00:02:07.110
They're stopped at that point.

00:02:07.110 --> 00:02:09.150
And also, if people
don't like phone numbers,

00:02:09.150 --> 00:02:10.920
there's lots of different
ways that you can do

00:02:10.920 --> 00:02:12.810
two-factor authentication.

00:02:12.810 --> 00:02:15.120
We can send prompts to your device.

00:02:15.120 --> 00:02:16.620
There's these things called security keys,

00:02:16.620 --> 00:02:17.730
some people might have heard of.

00:02:17.730 --> 00:02:18.843
There's a big variety.


Yes, you need a password manager. Here’s why.

WEBVTT
Kind: captions
Language: en

00:00:05.970 --> 00:00:06.803
- So Guemmy,

00:00:06.803 --> 00:00:07.636
you're...

00:00:07.636 --> 00:00:08.469
Which I agree with.

00:00:08.469 --> 00:00:11.700
You're telling us to have
hard to break into passwords.

00:00:11.700 --> 00:00:13.170
But then the obvious question is

00:00:13.170 --> 00:00:14.640
how does a normal human being

00:00:14.640 --> 00:00:16.530
manage all of these passwords,

00:00:16.530 --> 00:00:18.480
that don't have regular words in them?

00:00:18.480 --> 00:00:20.848
They can't reuse the same
password over and over.

00:00:20.848 --> 00:00:23.010
How do we manage all of this?

00:00:23.010 --> 00:00:24.120
- Yes, great question.

00:00:24.120 --> 00:00:26.220
It is really hard to keep up with

00:00:26.220 --> 00:00:27.510
all of the different services.

00:00:27.510 --> 00:00:30.450
I don't know about you, but I
use over a hundred services,

00:00:30.450 --> 00:00:31.721
and the only reason I know that,

00:00:31.721 --> 00:00:32.554
(Sal and Guemmy laugh)

00:00:32.554 --> 00:00:35.310
is actually because I've
used a password manager,

00:00:35.310 --> 00:00:38.290
and seeing the list actually surprised me.

00:00:38.290 --> 00:00:39.870
Password managers are great,

00:00:39.870 --> 00:00:42.750
because they can automatically
save the passwords for you.

00:00:42.750 --> 00:00:44.490
And they're super convenient,

00:00:44.490 --> 00:00:46.650
because once you go back to a website,

00:00:46.650 --> 00:00:49.827
not only do they check that
it's not like a phishing website

00:00:49.827 --> 00:00:54.060
or somebody pretending to
be the legitimate website,

00:00:54.060 --> 00:00:57.030
but they'll also conveniently
fill in your password for you,

00:00:57.030 --> 00:00:58.050
and you just click a button.

00:00:58.050 --> 00:01:00.720
And so it's super quick,
especially if you're on mobile.

00:01:00.720 --> 00:01:01.953
It's been a lifesaver.

00:01:03.390 --> 00:01:05.490
One thing that I've always
worried about password managers,

00:01:05.490 --> 00:01:07.440
is sometimes I'm logging
in from my laptop,

00:01:07.440 --> 00:01:10.410
sometimes from my phone,
sometimes from my wife's laptop,

00:01:10.410 --> 00:01:14.430
will the password managers
work across multiple devices?

00:01:14.430 --> 00:01:15.900
- Yeah, different password managers

00:01:15.900 --> 00:01:16.977
definitely have different capabilities,

00:01:16.977 --> 00:01:18.123
but at least on Google,

00:01:18.123 --> 00:01:20.036
when you're signed into
your Google account,

00:01:20.036 --> 00:01:22.440
on the various devices,

00:01:22.440 --> 00:01:24.857
then yes, we can pull together
all of the information,

00:01:24.857 --> 00:01:26.246
from that password manager,

00:01:26.246 --> 00:01:30.510
and display it on the different
devices that you're using.

00:01:30.510 --> 00:01:32.850
- And how do you compare
a password manager,

00:01:32.850 --> 00:01:35.250
which can kind of store all
of these things locally,

00:01:35.250 --> 00:01:37.874
and be able to fill in when you need it,

00:01:37.874 --> 00:01:39.450
and keep track of it.

00:01:39.450 --> 00:01:41.430
To being able to use a service.

00:01:41.430 --> 00:01:44.430
You know, obviously Google
has it, you have Apple,

00:01:44.430 --> 00:01:45.420
You have other folks,

00:01:45.420 --> 00:01:47.482
who have once you sign into that account,

00:01:47.482 --> 00:01:49.530
that allows you to sign
into other accounts.

00:01:49.530 --> 00:01:50.915
Do you recommend both?

00:01:50.915 --> 00:01:53.553
How do you compare those two things?

00:01:54.420 --> 00:01:56.100
- I think it's up to the user's choice,

00:01:56.100 --> 00:02:00.150
and so sometimes users
are going to be limited

00:02:00.150 --> 00:02:02.340
because of what the
website developer has done.

00:02:02.340 --> 00:02:05.503
For example, not all websites
offer the sign in with Google,

00:02:05.503 --> 00:02:08.760
with Apple, sign in with
Facebook, et cetera.

00:02:08.760 --> 00:02:11.760
But all websites do have passwords,

00:02:11.760 --> 00:02:15.030
and so at a minimum you can
always have your own username,

00:02:15.030 --> 00:02:16.650
and password for that service,

00:02:16.650 --> 00:02:19.770
and then store it in the password manager.

00:02:19.770 --> 00:02:21.840
Alternatively, if you don't wanna create,

00:02:21.840 --> 00:02:24.720
a bunch of new accounts
all over the internet,

00:02:24.720 --> 00:02:27.120
you could definitely use your
Google account for instance,

00:02:27.120 --> 00:02:30.450
and sign in into various services
using your Google account.

00:02:30.450 --> 00:02:31.800
I personally like that option

00:02:31.800 --> 00:02:34.290
because it actually reduces the
number of different accounts

00:02:34.290 --> 00:02:35.550
I have to worry about.

00:02:35.550 --> 00:02:37.230
And I mean of course Google is backed

00:02:37.230 --> 00:02:39.150
by the strongest security,

00:02:39.150 --> 00:02:40.530
among the strongest in the industry,

00:02:40.530 --> 00:02:42.660
so it's something that I feel good about.

00:02:42.660 --> 00:02:43.910
- Thanks for that Guemmy.


Why creating a strong password really matters

WEBVTT
Kind: captions
Language: en

00:00:06.090 --> 00:00:06.923
- All right, Guemmy.

00:00:06.923 --> 00:00:09.330
So as, as long as I can
remember on the internet,

00:00:09.330 --> 00:00:11.520
you know, there's always
been, you create passwords,

00:00:11.520 --> 00:00:13.350
and I feel like every
year they're asking me

00:00:13.350 --> 00:00:16.320
to create more and more hard

00:00:16.320 --> 00:00:18.504
or more difficult to remember passwords.

00:00:18.504 --> 00:00:20.610
Why is this happening?

00:00:20.610 --> 00:00:22.680
And and why is just the password

00:00:22.680 --> 00:00:25.020
creation process so important?

00:00:25.020 --> 00:00:27.510
- Yeah, so basically
your password is really

00:00:27.510 --> 00:00:30.120
that key to the front door of your house.

00:00:30.120 --> 00:00:33.720
And we have to make sure
that your password is unique,

00:00:33.720 --> 00:00:35.489
and it's also very strong.

00:00:35.489 --> 00:00:37.740
As you can imagine, if
you use the same key

00:00:37.740 --> 00:00:39.870
across all of the houses in the universe,

00:00:39.870 --> 00:00:42.030
then everybody would have that key

00:00:42.030 --> 00:00:43.920
and they can get into your house as well.

00:00:43.920 --> 00:00:45.630
And so it is really important to make sure

00:00:45.630 --> 00:00:48.240
that not only that you
have a strong password,

00:00:48.240 --> 00:00:50.490
but for all of those accounts
that you do care about

00:00:50.490 --> 00:00:52.364
each of them are
different from each other.

00:00:52.364 --> 00:00:53.197
- Right.

00:00:53.197 --> 00:00:54.690
And there's certain accounts that,

00:00:54.690 --> 00:00:56.910
I mean it is a good
model. I do this, okay.

00:00:56.910 --> 00:00:58.650
If someone were to get
access to this account,

00:00:58.650 --> 00:01:00.840
how bad is it?

00:01:00.840 --> 00:01:03.661
My banking account, my social media,

00:01:03.661 --> 00:01:05.580
those are pretty important.

00:01:05.580 --> 00:01:07.744
So I wanna make sure I have
super strong passwords there.

00:01:07.744 --> 00:01:10.260
Well, if it's something
that's a little bit

00:01:10.260 --> 00:01:11.126
more frivolous or something,

00:01:11.126 --> 00:01:13.620
and it's not the end of the
world someone has access,

00:01:13.620 --> 00:01:14.892
right now you always see these rules

00:01:14.892 --> 00:01:18.096
you know, at least this many characters

00:01:18.096 --> 00:01:21.270
a number, a letter, uppercase, lowercase.

00:01:21.270 --> 00:01:23.370
Why do we keep getting
all these constraints

00:01:23.370 --> 00:01:25.980
being put on our passwords?

00:01:25.980 --> 00:01:28.230
- Well, the whole point of
it is to make the password

00:01:28.230 --> 00:01:30.060
as hard to guess as possible.

00:01:30.060 --> 00:01:33.120
So you don't wanna, you
know, use common words

00:01:33.120 --> 00:01:36.000
or things that can get easily guessed.

00:01:36.000 --> 00:01:38.160
And it's actually very common for users

00:01:38.160 --> 00:01:41.580
to use their names or their
pet names or birthdays.

00:01:41.580 --> 00:01:45.270
These are things that
attackers can also guess

00:01:45.270 --> 00:01:48.240
and will try to get into
your accounts as well.

00:01:48.240 --> 00:01:49.233
That being said,

00:01:51.510 --> 00:01:53.940
the way that we keep safe online

00:01:53.940 --> 00:01:57.270
I think the advice has
changed over the years.

00:01:57.270 --> 00:02:00.360
And so it actually you
don't actually have to

00:02:00.360 --> 00:02:01.980
change your password that often

00:02:01.980 --> 00:02:04.890
as long as you know that
there hasn't been a compromise

00:02:04.890 --> 00:02:06.990
and that you do have a strong password.

00:02:06.990 --> 00:02:10.380
And it's also okay to
like write your password

00:02:10.380 --> 00:02:11.910
even on a post-it if you like.

00:02:11.910 --> 00:02:13.740
But sometimes just being practical

00:02:13.740 --> 00:02:16.200
is the best way to encourage people

00:02:16.200 --> 00:02:18.120
to actually have these stronger passwords

00:02:18.120 --> 00:02:21.030
that they actually can
remember and keep up with.

00:02:21.030 --> 00:02:22.330
- That's super helpful.


How to keep your online accounts secure

WEBVTT
Kind: captions
Language: en

00:00:05.970 --> 00:00:07.560
- Hi everyone, Sal Khan here,

00:00:07.560 --> 00:00:09.640
and I'm here with Guemmy
Kim, who's a director

00:00:09.640 --> 00:00:12.480
of product management at
Google in account security.

00:00:12.480 --> 00:00:14.370
And my question for you, Guemmy is

00:00:14.370 --> 00:00:16.230
everyone's always talking
about account security.

00:00:16.230 --> 00:00:19.590
Why should I or the folks watching care?

00:00:19.590 --> 00:00:21.810
- Yes. So it sounds like a technical term,

00:00:21.810 --> 00:00:24.150
but it's actually something
that affects us every day.

00:00:24.150 --> 00:00:26.790
Think of all of the online
accounts that you use,

00:00:26.790 --> 00:00:29.880
whether that's your bank or
Google or any other service.

00:00:29.880 --> 00:00:32.220
Well, any of those
accounts actually hold all

00:00:32.220 --> 00:00:33.510
of your personal information,

00:00:33.510 --> 00:00:35.880
and like a house, you
want it to protect that

00:00:35.880 --> 00:00:37.770
personal information that you care about.

00:00:37.770 --> 00:00:39.600
There's always gonna be things like bugs,

00:00:39.600 --> 00:00:41.610
and rats, and thieves that try to come in.

00:00:41.610 --> 00:00:44.010
And so you wanna make
sure that they don't.

00:00:44.010 --> 00:00:46.530
- And what's gonna happen,
like, if somehow someone gets

00:00:46.530 --> 00:00:49.740
into my account, what's
the worst that they can do?

00:00:49.740 --> 00:00:53.760
- Well, I mean, just taking
a Google account for example,

00:00:53.760 --> 00:00:56.130
like, not only can they take
your personal information

00:00:56.130 --> 00:00:59.745
like your photos, or information
you're sending in Gmail,

00:00:59.745 --> 00:01:02.730
you know, they could also get access

00:01:02.730 --> 00:01:05.115
to all of your other online accounts.

00:01:05.115 --> 00:01:06.517
As you know, you know,

00:01:06.517 --> 00:01:09.630
your Gmail account is
actually a key to getting

00:01:09.630 --> 00:01:12.540
into your bank, your social
media accounts, your eCommerce,

00:01:12.540 --> 00:01:15.720
because once you compromise,
for example, the Gmail account

00:01:15.720 --> 00:01:18.949
then I can get into all of
those other accounts as well.

00:01:18.949 --> 00:01:21.450
- Yeah, people can steal money from you,

00:01:21.450 --> 00:01:22.830
they can misrepresent you,

00:01:22.830 --> 00:01:24.540
they can see all your private information,

00:01:24.540 --> 00:01:25.373
- Right. Exactly.

00:01:25.373 --> 00:01:26.670
It can get to be pretty scary.

00:01:26.670 --> 00:01:28.895
So I think this is something
people should pay attention to.

00:01:28.895 --> 00:01:29.728
- Mhm.


LearnStorm 2022

WEBVTT
Kind: captions
Language: en

00:00:00.000 --> 00:00:02.758
Hi Teachers, Sal Khan
here from Khan Academy

00:00:02.758 --> 00:00:04.298
and I just wanted to remind you

00:00:04.298 --> 00:00:07.589
that LearnStorm is back
and better than ever

00:00:07.589 --> 00:00:10.422
And in case you're wondering
why should I use LearnStorm

00:00:10.422 --> 00:00:12.171
or the LearnStorm tracker.

00:00:12.171 --> 00:00:14.701
We just have to remember
what it is like to be a learner

00:00:14.701 --> 00:00:17.541
a lot of times as a learner, you
are trying to get through the material

00:00:17.573 --> 00:00:18.983
it's just you and the material

00:00:18.983 --> 00:00:20.504
it can feel a little bit lonely.

00:00:20.504 --> 00:00:24.029
But we know it's very motivating
to be part of something bigger

00:00:24.029 --> 00:00:26.519
than yourself and so what LearnStorn does

00:00:26.519 --> 00:00:28.972
is it takes those individual
learning journeys

00:00:28.972 --> 00:00:30.802
of all your students as they are trying to

00:00:30.802 --> 00:00:32.062
do their assignments on Khan Academy

00:00:32.062 --> 00:00:33.962
as they're trying to get
mastery on Khan Academy

00:00:33.962 --> 00:00:35.586
and turns it into a quest,

00:00:35.586 --> 00:00:36.476
an adventure

00:00:36.476 --> 00:00:39.582
for the entire classroom
where you are all one team

00:00:39.582 --> 00:00:41.522
and you as the teacher are their leader.

00:00:41.522 --> 00:00:44.781
To see if on a regular basis,
on a weekly basis

00:00:44.781 --> 00:00:48.643
they can reach their goals.
So use that LearnStorm tracker

00:00:48.643 --> 00:00:52.114
to create a sense of excitement,
a sense of adventure.

00:00:52.114 --> 00:00:55.079
A sense of camaraderie
and shared journey.

00:00:55.079 --> 00:00:57.537
The second reason
and there are many others,

00:00:57.537 --> 00:00:59.247
to get very excited is that this year

00:00:59.247 --> 00:01:02.727
finally LearnStorm is not just measuring
whether students are

00:01:02.727 --> 00:01:05.270
doing assignments but whether they are
actually mastering

00:01:05.270 --> 00:01:06.030
the content.

00:01:06.030 --> 00:01:08.300
So this reinforces a growth mindset,

00:01:08.300 --> 00:01:10.440
if you haven't mastered it, that's okay.

00:01:10.440 --> 00:01:13.247
You can have another shot.
You just haven't mastered it yet.

00:01:13.247 --> 00:01:16.696
So we're so excited to be partnering
with all of you and

00:01:16.696 --> 00:01:20.696
all of your students on this years
LearnStorm adventure


Ratios with tape diagrams (part:whole)

WEBVTT
Kind: captions
Language: en

00:00:00.360 --> 00:00:02.070
- [Instructor] We're told
that Peni wrote a survey

00:00:02.070 --> 00:00:05.400
with open-ended and
multiple-choice questions.

00:00:05.400 --> 00:00:09.300
The diagram shows the ratio
of the question types.

00:00:09.300 --> 00:00:11.430
So what it shows us is that for every

00:00:11.430 --> 00:00:15.750
one, two, three, four,
five open-ended questions,

00:00:15.750 --> 00:00:20.430
there are one, two, three,
four multiple choice questions.

00:00:20.430 --> 00:00:23.130
And let's be clear, this
is showing the ratio

00:00:23.130 --> 00:00:25.560
of open-ended questions to
multiple choice questions.

00:00:25.560 --> 00:00:27.750
It's not telling us exactly how many

00:00:27.750 --> 00:00:29.190
of each type of question we have.

00:00:29.190 --> 00:00:31.200
We just know for every five open-ended,

00:00:31.200 --> 00:00:32.520
there are four multiple-choice,

00:00:32.520 --> 00:00:34.410
or for every four multiple-choice,

00:00:34.410 --> 00:00:36.300
there are five open-ended.

00:00:36.300 --> 00:00:40.110
The table shows some numbers
of multiple choice questions

00:00:40.110 --> 00:00:44.640
and total questions that
could be on Peni's survey.

00:00:44.640 --> 00:00:45.810
Based on the ratio,

00:00:45.810 --> 00:00:48.690
complete the missing values in the table.

00:00:48.690 --> 00:00:50.700
So like always, pause this video

00:00:50.700 --> 00:00:52.500
and see if you can have
a go at this on your own

00:00:52.500 --> 00:00:54.250
before we work through it together.

00:00:55.320 --> 00:00:57.660
Alright, so some of you
might not have realized

00:00:57.660 --> 00:00:59.400
that it says total questions here.

00:00:59.400 --> 00:01:01.560
It does not say multiple-choice questions

00:01:01.560 --> 00:01:04.020
and open-ended questions.

00:01:04.020 --> 00:01:06.360
So, one way to tackle
this is to think about,

00:01:06.360 --> 00:01:07.740
well, what is going to be the ratio

00:01:07.740 --> 00:01:11.850
between multiple-choice
questions and total questions?

00:01:11.850 --> 00:01:12.683
So, let's think.

00:01:12.683 --> 00:01:15.030
If we were to create another bar

00:01:15.030 --> 00:01:17.940
for total questions that showed the ratio,

00:01:17.940 --> 00:01:20.340
for every five open-ended questions,

00:01:20.340 --> 00:01:22.500
you'll have four multiple-choice questions

00:01:22.500 --> 00:01:24.690
and you would have nine total questions.

00:01:24.690 --> 00:01:25.740
So it would look like this:

00:01:25.740 --> 00:01:29.700
one, two, three, four, five,

00:01:29.700 --> 00:01:32.670
six, seven, eight and nine.

00:01:32.670 --> 00:01:34.713
I'm just adding these two together.

00:01:35.730 --> 00:01:37.320
So, we could say that the ratio

00:01:37.320 --> 00:01:39.420
of multiple-choice to total questions

00:01:39.420 --> 00:01:41.640
is going to be four to nine.

00:01:41.640 --> 00:01:43.410
For every four multiple-choice questions,

00:01:43.410 --> 00:01:45.960
you're going to have nine total questions.

00:01:45.960 --> 00:01:48.210
So, in this first row we have

00:01:48.210 --> 00:01:50.250
eight multiple-choice questions.

00:01:50.250 --> 00:01:52.830
So, that's two sets of four.

00:01:52.830 --> 00:01:56.820
So, we're gonna have two
sets of nine total questions.

00:01:56.820 --> 00:01:58.980
That still is the same ratio.

00:01:58.980 --> 00:02:02.310
Eight is to 18 as four is to nine.

00:02:02.310 --> 00:02:04.080
And now in the second row they give us

00:02:04.080 --> 00:02:06.720
the actual number of total questions.

00:02:06.720 --> 00:02:10.770
Well, that is nine goes
into 45 five times.

00:02:10.770 --> 00:02:12.900
That's five sets of nine.

00:02:12.900 --> 00:02:15.090
So you're gonna have five sets of four

00:02:15.090 --> 00:02:16.380
multiple-choice questions.

00:02:16.380 --> 00:02:20.403
So five times four is 20, and we're done.


Three things to know about stocks

WEBVTT
Kind: captions
Language: en

00:00:01.080 --> 00:00:02.490
- When you own a stock

00:00:02.490 --> 00:00:05.520
you're owning a fractional
share of a company.

00:00:05.520 --> 00:00:08.610
Now, there's three things that I always

00:00:08.610 --> 00:00:12.450
like to keep people wary
of when they buy a stock.

00:00:12.450 --> 00:00:14.730
The first is, is there's
sometimes a perception

00:00:14.730 --> 00:00:16.380
that the stock prices everything,

00:00:16.380 --> 00:00:18.480
that maybe a $10 per share stock

00:00:18.480 --> 00:00:22.350
is truly cheaper than a
$20 per share price stock.

00:00:22.350 --> 00:00:24.000
That is not the case.

00:00:24.000 --> 00:00:25.380
When you think about what you're paying

00:00:25.380 --> 00:00:27.630
for a share of a company
you have to think about

00:00:27.630 --> 00:00:30.030
what the whole company is valued at.

00:00:30.030 --> 00:00:33.030
So let's say that there's
a $10 per share company

00:00:33.030 --> 00:00:36.420
but it has a billion shares outstanding,

00:00:36.420 --> 00:00:39.270
that means $10 per share
times a billion shares

00:00:39.270 --> 00:00:41.943
that the company is valued at $10 billion.

00:00:42.780 --> 00:00:43.613
On the other hand,

00:00:43.613 --> 00:00:45.900
there might be another
company where the stock price

00:00:45.900 --> 00:00:47.910
is at $100 per share

00:00:47.910 --> 00:00:50.010
but there's only a million
shares outstanding,

00:00:50.010 --> 00:00:52.740
and so that would be $100 times a million

00:00:52.740 --> 00:00:55.320
or a $100 million company.

00:00:55.320 --> 00:00:58.020
Now, it doesn't necessarily mean that,

00:00:58.020 --> 00:01:01.320
let's say, the $10 billion
company is overpriced

00:01:01.320 --> 00:01:04.320
or that the $100 million
company is underpriced,

00:01:04.320 --> 00:01:07.080
what you have to think about
is why would you own it?

00:01:07.080 --> 00:01:10.560
Well, you would own it because
companies generate profits,

00:01:10.560 --> 00:01:13.560
and in theory, those
profits, at some point,

00:01:13.560 --> 00:01:15.780
are going to come to the shareholders

00:01:15.780 --> 00:01:18.360
or someone else might
wanna buy that company.

00:01:18.360 --> 00:01:20.910
So for example, that $10 billion company

00:01:20.910 --> 00:01:22.860
might be making a
billion of profit a year,

00:01:22.860 --> 00:01:24.510
while the $100 million company

00:01:24.510 --> 00:01:28.110
might be making only $5
million of profit a year.

00:01:28.110 --> 00:01:29.640
Now it can get more complex,

00:01:29.640 --> 00:01:33.030
you might be willing to pay
more if the company is growing,

00:01:33.030 --> 00:01:33.863
if you think that

00:01:33.863 --> 00:01:35.400
there's going to be something
exciting that happens

00:01:35.400 --> 00:01:36.720
in the future.

00:01:36.720 --> 00:01:38.820
Now, the last thing I will point out

00:01:38.820 --> 00:01:40.770
is when you buy a stock

00:01:40.770 --> 00:01:43.350
you are buying it from someone else,

00:01:43.350 --> 00:01:45.240
so it's attempting to
look at the stock market

00:01:45.240 --> 00:01:47.910
as this magical thing that
just moves up and down,

00:01:47.910 --> 00:01:49.590
but it's just people

00:01:49.590 --> 00:01:52.500
buying and selling shares
in these companies.

00:01:52.500 --> 00:01:54.630
So if you think you
have an edge on someone,

00:01:54.630 --> 00:01:55.590
you just have to think about,

00:01:55.590 --> 00:01:57.963
well, why are they actually selling it?


What is a 401k?

WEBVTT
Kind: captions
Language: en

00:00:01.350 --> 00:00:06.350
- A 401k is an employer-sponsored
retirement plan.

00:00:06.360 --> 00:00:08.190
Why is it called a 401k?

00:00:08.190 --> 00:00:11.040
Well, that's the section of
the internal revenue code

00:00:11.040 --> 00:00:13.530
for the federal government
that allows you to do it.

00:00:13.530 --> 00:00:14.550
Now, what are the benefits?

00:00:14.550 --> 00:00:17.430
Well, as far as I know,
there's two major ones.

00:00:17.430 --> 00:00:21.660
The biggest one is it
allows you to save money

00:00:21.660 --> 00:00:25.020
for retirement before taxes.

00:00:25.020 --> 00:00:27.600
So, normally you get a
paycheck, you have to pay

00:00:27.600 --> 00:00:29.880
some taxes on that money,
and then you get the money

00:00:29.880 --> 00:00:31.350
and then you might be able to invest it,

00:00:31.350 --> 00:00:33.060
if you're able to save some of it.

00:00:33.060 --> 00:00:36.450
But with the 401k, you get
to put your pre-tax money in

00:00:36.450 --> 00:00:38.310
before taxes are taken out

00:00:38.310 --> 00:00:42.840
and put that into an investment
account for retirement.

00:00:42.840 --> 00:00:45.510
Now, there's a little bit of a catch

00:00:45.510 --> 00:00:50.340
because you can invest it
tax-free in a 401K account,

00:00:50.340 --> 00:00:52.920
but then when you take
it out when you retire

00:00:52.920 --> 00:00:56.010
at an age older than 59 and a half,

00:00:56.010 --> 00:00:59.670
you will then have to pay taxes,
so your taxes are deferred.

00:00:59.670 --> 00:01:02.280
Now, that might work out
because at that time,

00:01:02.280 --> 00:01:03.113
you're retired.

00:01:03.113 --> 00:01:04.500
That might be all of your income.

00:01:04.500 --> 00:01:06.720
You might have a lower tax
rate then, or at minimum

00:01:06.720 --> 00:01:09.120
you were able to at least defer the taxes

00:01:09.120 --> 00:01:11.610
and invest without having to pay them.

00:01:11.610 --> 00:01:13.320
Now, the other benefit of a 401K

00:01:13.320 --> 00:01:17.130
is many employers will
match or do a partial match

00:01:17.130 --> 00:01:18.780
of some of the money that you contribute.

00:01:18.780 --> 00:01:21.030
So some might say for
every dollar you put in

00:01:21.030 --> 00:01:23.940
we'll put 50 cents or for every
dollar we'll put a dollar,

00:01:23.940 --> 00:01:25.170
up to a certain amount.

00:01:25.170 --> 00:01:27.270
So by putting money into a 401k,

00:01:27.270 --> 00:01:28.710
you're to some degree able to get

00:01:28.710 --> 00:01:30.840
free money from your employer.

00:01:30.840 --> 00:01:32.310
Now, there is a catch.

00:01:32.310 --> 00:01:35.220
If you were to take that money
out before your 59 and a half

00:01:35.220 --> 00:01:37.710
or there's some other special cases,

00:01:37.710 --> 00:01:38.880
you're gonna have to pay a penalty

00:01:38.880 --> 00:01:43.260
of about or exactly 10%
of what you take out.

00:01:43.260 --> 00:01:45.780
So it isn't something that
you want to do lightly,

00:01:45.780 --> 00:01:48.300
but in a lot of cases,
because of the employer match,

00:01:48.300 --> 00:01:51.210
it still might be okay to
do it because once again,

00:01:51.210 --> 00:01:53.660
you're getting that free
money from the employer.


What is a credit score?

WEBVTT
Kind: captions
Language: en

00:00:01.320 --> 00:00:03.990
- Your credit score is a measure,

00:00:03.990 --> 00:00:05.970
some would argue an imperfect measure,

00:00:05.970 --> 00:00:07.620
of how likely you are

00:00:07.620 --> 00:00:09.930
to pay for things on time.

00:00:09.930 --> 00:00:11.070
Let's say you were to take a loan.

00:00:11.070 --> 00:00:13.320
How likely are you to pay,

00:00:13.320 --> 00:00:14.880
make the payments on that loan?

00:00:14.880 --> 00:00:16.860
If you were to get a
lease on an apartment,

00:00:16.860 --> 00:00:19.950
how likely are you to pay rent on time?

00:00:19.950 --> 00:00:22.800
Now, there are three credit bureaus.

00:00:22.800 --> 00:00:25.950
They are TransUnion,
Experian, and Equifax,

00:00:25.950 --> 00:00:27.360
and what happens is,

00:00:27.360 --> 00:00:30.060
is let's say that you have a credit card

00:00:30.060 --> 00:00:32.730
and as you pay that credit card,

00:00:32.730 --> 00:00:33.630
pay the balance,

00:00:33.630 --> 00:00:36.210
or pay the minimum payment on time,

00:00:36.210 --> 00:00:37.980
or you don't pay on time,

00:00:37.980 --> 00:00:40.950
that gets reported to these bureaus.

00:00:40.950 --> 00:00:42.960
These bureaus use an algorithm

00:00:42.960 --> 00:00:44.670
that comes from a company called FICO.

00:00:44.670 --> 00:00:47.040
It used to stand for
Fair Isaac Corporation,

00:00:47.040 --> 00:00:49.110
and that gives you a score,

00:00:49.110 --> 00:00:50.550
and each of the three bureaus

00:00:50.550 --> 00:00:54.240
will have a score between 300 and 850.

00:00:54.240 --> 00:00:56.610
If you have a score near
the high end of that range,

00:00:56.610 --> 00:00:58.590
if you're in the high 700s or above,

00:00:58.590 --> 00:01:00.750
that is an excellent credit rating.

00:01:00.750 --> 00:01:02.610
People will give you loans.

00:01:02.610 --> 00:01:04.740
It will be easy for you to lease things,

00:01:04.740 --> 00:01:06.360
and not only when you get that loan,

00:01:06.360 --> 00:01:08.910
it will actually be at
a lower interest rate.

00:01:08.910 --> 00:01:13.560
If your credit score is in
the 600 to low 700 range,

00:01:13.560 --> 00:01:14.393
that's decent,

00:01:14.393 --> 00:01:15.330
you're probably okay,

00:01:15.330 --> 00:01:16.800
although you might, in certain cases,

00:01:16.800 --> 00:01:18.300
have to pay a higher interest rate

00:01:18.300 --> 00:01:20.040
than the people with the excellent credit.

00:01:20.040 --> 00:01:22.410
And then if your credit
score is in the low range,

00:01:22.410 --> 00:01:26.250
which would be anywhere from
300 to say the high 500s,

00:01:26.250 --> 00:01:27.870
you're going to have
trouble getting a loan,

00:01:27.870 --> 00:01:29.460
or in many cases getting a lease,

00:01:29.460 --> 00:01:30.450
or even if you do,

00:01:30.450 --> 00:01:32.820
you're going to have to
pay a higher interest rate.

00:01:32.820 --> 00:01:36.690
Now, the ways to get as high
a credit rating as possible,

00:01:36.690 --> 00:01:39.060
is pay your bills on time,

00:01:39.060 --> 00:01:40.710
pay your rent on time,

00:01:40.710 --> 00:01:42.360
have a long credit history.

00:01:42.360 --> 00:01:43.890
It's good to have credit.

00:01:43.890 --> 00:01:47.730
So it's good to have a credit
card that has a high limit,

00:01:47.730 --> 00:01:50.670
but to use as little of that as possible.

00:01:50.670 --> 00:01:52.970
So good luck (laughs)
with your credit scores.


Common ancestry and evolutionary trees

WEBVTT
Kind: captions
Language: en

00:00:00.450 --> 00:00:02.010
- [Instructor] Have you ever heard someone

00:00:02.010 --> 00:00:04.800
call birds living dinosaurs?

00:00:04.800 --> 00:00:06.660
You might find that hard to believe.

00:00:06.660 --> 00:00:09.300
After all, the city pigeons
that you see wandering

00:00:09.300 --> 00:00:12.060
around town don't look
particularly ferocious

00:00:12.060 --> 00:00:14.160
like a Tyrannosaurus rex.

00:00:14.160 --> 00:00:16.710
But it turns out that
our feathered friends

00:00:16.710 --> 00:00:18.510
are actually the direct descendants

00:00:18.510 --> 00:00:21.843
of a group of dinosaurs that
lived millions of years ago.

00:00:22.800 --> 00:00:25.440
Birds, like every modern species,

00:00:25.440 --> 00:00:29.130
have a series of ancestors
stretching back through time.

00:00:29.130 --> 00:00:32.070
You can think of these as
the species' grandparents,

00:00:32.070 --> 00:00:35.010
great-grandparents,
great-great-grandparents,

00:00:35.010 --> 00:00:39.000
and so on, going back
thousands to millions of years.

00:00:39.000 --> 00:00:40.620
This series of ancestors

00:00:40.620 --> 00:00:43.473
is called a species evolutionary lineage.

00:00:44.400 --> 00:00:47.340
And, also like every modern species,

00:00:47.340 --> 00:00:48.780
birds have related species

00:00:48.780 --> 00:00:50.880
that share a part of their lineage

00:00:50.880 --> 00:00:53.553
but then branch off on
their own evolutionary path.

00:00:54.690 --> 00:00:57.390
The modern bird lineage stretches way back

00:00:57.390 --> 00:01:01.830
to 165 million years ago
to the Jurassic Period.

00:01:01.830 --> 00:01:03.840
During this time, iconic dinosaurs,

00:01:03.840 --> 00:01:07.320
like the stegosaurus and
brachiosaurus, roamed the Earth,

00:01:07.320 --> 00:01:10.710
as well as distant relatives
of our modern-day birds,

00:01:10.710 --> 00:01:13.680
like archaeopteryx and anchiornis.

00:01:13.680 --> 00:01:16.050
Both archaeopteryx and anchiornis,

00:01:16.050 --> 00:01:17.970
among other bird-like dinosaurs,

00:01:17.970 --> 00:01:20.490
are considered some of the first birds

00:01:20.490 --> 00:01:23.400
based on their long
arms, feathered bodies,

00:01:23.400 --> 00:01:25.620
wings and other physical characteristics

00:01:25.620 --> 00:01:28.050
that are shared by all birds.

00:01:28.050 --> 00:01:30.930
But all birds, both modern-day species

00:01:30.930 --> 00:01:33.000
and these earlier bird relatives

00:01:33.000 --> 00:01:35.100
that lived in the distant past,

00:01:35.100 --> 00:01:37.290
all traced their evolutionary lineage

00:01:37.290 --> 00:01:39.600
back to a common ancestor,

00:01:39.600 --> 00:01:42.150
which is an ancestral group of organisms

00:01:42.150 --> 00:01:45.570
that is shared by one or more lineages.

00:01:45.570 --> 00:01:48.960
In other words, any of the
modern birds that you see today,

00:01:48.960 --> 00:01:51.090
whether it's a dove or a penguin,

00:01:51.090 --> 00:01:55.113
they all evolved from the same
bird-like dinosaur ancestor.

00:01:56.130 --> 00:01:59.460
Evolutionary trees can be
used to show the relationships

00:01:59.460 --> 00:02:02.520
between different lineages,
like different bird species,

00:02:02.520 --> 00:02:04.770
and their common ancestors.

00:02:04.770 --> 00:02:06.960
Scientists build evolutionary trees

00:02:06.960 --> 00:02:08.790
using various lines of evidence,

00:02:08.790 --> 00:02:11.850
such as examining fossils
and body structures

00:02:11.850 --> 00:02:14.640
or using DNA to identify shared traits

00:02:14.640 --> 00:02:16.620
and other similarities.

00:02:16.620 --> 00:02:19.560
The trees serve as models
for studying evolutionary

00:02:19.560 --> 00:02:21.690
relationships over time.

00:02:21.690 --> 00:02:23.790
So let's take a look at a tree

00:02:23.790 --> 00:02:26.010
that scientists built for city pigeons,

00:02:26.010 --> 00:02:29.730
also called rock doves,
and their relatives.

00:02:29.730 --> 00:02:31.620
What can the tree tell us?

00:02:31.620 --> 00:02:35.370
How are doves and these
other species related?

00:02:35.370 --> 00:02:38.580
Evolutionary trees are
called trees for a reason.

00:02:38.580 --> 00:02:41.460
The evolutionary
relationships between lineages

00:02:41.460 --> 00:02:45.240
are represented by branches
showing who is related to whom

00:02:45.240 --> 00:02:47.370
and to what degree.

00:02:47.370 --> 00:02:49.740
The tips of the branches
of an evolutionary tree

00:02:49.740 --> 00:02:52.020
show the modern groups of organisms.

00:02:52.020 --> 00:02:56.250
In this case, we have doves,
mesites, and sandgrouse.

00:02:56.250 --> 00:02:58.050
They all look different from one another,

00:02:58.050 --> 00:03:00.090
but you can see some physical traits,

00:03:00.090 --> 00:03:01.650
like their small bills,

00:03:01.650 --> 00:03:04.530
that are similar between
all of these birds.

00:03:04.530 --> 00:03:07.140
Let's take a look at
this evolutionary tree.

00:03:07.140 --> 00:03:09.930
What do you think that
this branch point means?

00:03:09.930 --> 00:03:13.380
The branch point, or the
place where branches split,

00:03:13.380 --> 00:03:16.500
represents common ancestors
that existed in the past,

00:03:16.500 --> 00:03:18.390
among these bird lineages,

00:03:18.390 --> 00:03:21.090
from which these modern-day birds evolved.

00:03:21.090 --> 00:03:24.420
Mesites and sandgrouse shared
a common ancestor in the past,

00:03:24.420 --> 00:03:26.130
about 60 million years ago,

00:03:26.130 --> 00:03:28.860
which is represented by a branch point.

00:03:28.860 --> 00:03:31.890
But what does this branch
point mean exactly?

00:03:31.890 --> 00:03:34.260
Basically, this branch point represents

00:03:34.260 --> 00:03:36.630
that at some time in the distant past,

00:03:36.630 --> 00:03:38.940
at least 60 million years ago,

00:03:38.940 --> 00:03:42.840
a bird species existed, that
wasn't a mesite or sandgrouse,

00:03:42.840 --> 00:03:44.880
but it did have some traits found

00:03:44.880 --> 00:03:47.700
in both mesites and sandgrouse.

00:03:47.700 --> 00:03:50.550
This species was the common ancestor.

00:03:50.550 --> 00:03:53.520
At some point, this common
ancestor species split

00:03:53.520 --> 00:03:56.460
and gave rise to two
different evolutionary paths

00:03:56.460 --> 00:03:57.990
or lineages.

00:03:57.990 --> 00:04:00.390
One of those paths gave rise to mesites

00:04:00.390 --> 00:04:03.450
and the other led to sandgrouse.

00:04:03.450 --> 00:04:05.820
And if we go even further back,

00:04:05.820 --> 00:04:08.430
to about 65 million years ago,

00:04:08.430 --> 00:04:10.830
we see yet another branch point

00:04:10.830 --> 00:04:13.800
representing another common ancestor.

00:04:13.800 --> 00:04:17.670
This common ancestor would later
split to form two lineages,

00:04:17.670 --> 00:04:19.560
one giving rise to doves

00:04:19.560 --> 00:04:21.930
and the other leading
to the common ancestor

00:04:21.930 --> 00:04:23.673
of mesites and sandgrouse.

00:04:24.720 --> 00:04:26.880
Looking at this evolutionary tree,

00:04:26.880 --> 00:04:29.700
we can also learn about
how closely related

00:04:29.700 --> 00:04:31.920
different lineages are.

00:04:31.920 --> 00:04:34.350
Organisms that share a common ancestor

00:04:34.350 --> 00:04:36.120
in the more recent past

00:04:36.120 --> 00:04:39.300
are more closely related to one another.

00:04:39.300 --> 00:04:42.090
But organisms that share a common ancestor

00:04:42.090 --> 00:04:46.590
in the more distant past
are less closely related.

00:04:46.590 --> 00:04:49.380
The common ancestor of
mesites and sandgrouse

00:04:49.380 --> 00:04:51.480
existed in the more recent past

00:04:51.480 --> 00:04:53.803
than the common ancestor of mesites,

00:04:53.803 --> 00:04:56.130
sandgrouse and doves.

00:04:56.130 --> 00:04:58.497
This means that mesites and sandgrouse

00:04:58.497 --> 00:05:00.870
are more closely related to each other

00:05:00.870 --> 00:05:02.283
than they are to doves.

00:05:03.570 --> 00:05:06.330
Dinosaurs are far in the past now,

00:05:06.330 --> 00:05:09.540
but their relatives are still among us.

00:05:09.540 --> 00:05:11.820
All the birds that you see every day

00:05:11.820 --> 00:05:15.090
evolved from a two-legged
feathered common ancestor

00:05:15.090 --> 00:05:16.080
that roamed the Earth

00:05:16.080 --> 00:05:20.760
over 165 million years ago with dinosaurs.

00:05:20.760 --> 00:05:24.090
So the next time you see
a rock dove flying by

00:05:24.090 --> 00:05:26.490
or picking up scraps in a city square,

00:05:26.490 --> 00:05:28.740
you're really looking at a dinosaur,

00:05:28.740 --> 00:05:31.623
or at least a distant
relative of a dinosaur.