Show notes
Your website looks great to you. But can the people and machines visiting it actually use it?
In Part 1 of this conversation on the Simple and Smart SEO Show, Crystal Waddell sits down with technical SEO consultant Kristine Schachinger to explore website structure, accessibility, and the risks of building with AI without understanding the code.
Kristine shares what she’s observed while testing large language models, why she pays attention to headings and relationships between topics, and how accessibility connects to the growing conversation around AI agents.
Then we get into vibe coding. As a business owner who uses AI and is studying cybersecurity, Crystal brings her own questions to the conversation: What can you safely build yourself? What might you miss? And when should a developer review your work?
If you run a Shopify store, manage your own website, or have started building tools with AI, this episode gives you practical questions to ask before your next launch.
What you’ll learn
- What technical SEO site recovery involves.
- What Kristine’s LLM experiments revealed about how models handle information within a document.
- Why clear headings, page structure, and related topics deserve attention.
- What an accessibility tree is and how it relates to AI agents.
- How small design choices can create big barriers for customers.
- Why Kristine recommends developer review before releasing AI-built software to other people.
Chapters
00:00 Meet Kristine Schachinger
00:31 From design and accessibility to technical SEO
01:56 What is a site recovery?
02:43 Why Kristine tests AI
03:41 Entities and the “messy middle” of content
06:24 Applying page structure to your website
07:50 Understanding the accessibility tree
10:29 Tools for reviewing website accessibility
12:25 Accessibility, legal concerns, and customer experience
19:28 Vibe coding: what could you be missing?
22:12 Security risks and lessons from hacker conferences
24:37 Learning cybersecurity and questioning assumptions
A quote to remember
“So the clearer you are, the better your structure.”
— Kristine Schachinger
Try this after listening
Choose one important page on your website. Review it on your phone, check whether the headings clearly organize the content, and look for text or controls that are difficult to read or use. If you’ve built a public-facing tool with AI, consider having a developer review its functionality and security.
Tools and resources discussed
Chrome DevTools and Lighthouse, Screaming Frog, Sitebulb, DEF CON, and Black Hat.
Connect with Kristine
Find Kristine Schachinger on LinkedIn and listen to her podcast, Webcology, wherever you listen to podcasts.
Coming in Part 2
Does AI search need a new name? Kristine shares her perspective on GEO, AEO, and SEO, plus what she thinks businesses should reconsider about AI-generated content.
Text me your questions or comments!
Hey, Shopify store owners! (Especially if you're selling on Etsy, too!)
Here's a quick question: Are people actually finding your products on Google?
If SEO feels confusing, overwhelming, or like something you'll "get to later", this is for you.
AI SEO Skool breaks it down into simple, doable steps, with weekly live calls.
No tech headaches, no fluff. Join us at aiseoskool.com.
Full transcript
0:00CrystalI am here with Kristine Shachinger.
0:02Kristine is a concierge consultant for Sites Without Walls, and we are going to have not your average conversation about AI today.
0:12So I hope you are excited, like I am, to hear a new perspective. Or maybe something that you just don't hear all the time.
0:20But Kristine, thank you so much for joining me on the Simple and Smart SEO Show Podcast.
0:24Kristine SchachingerYeah. Thank you for having me. I appreciate it.
0:27CrystalYeah.
0:27So the way I always like to start out could you give us, that CliffsNotes version of how you got started and where you've ended up?
0:34Kristine SchachingerSure. I graduated with a degree in sociology and art, which I was a barista for a year. And fortunately used my art education to get started in doing front-end development and design. Then did accessibility.
0:46And then was working for a company, and I was like, "Hey, there's this thing called SEO, and we're spending 4 million a year on Google clicks." at the time, that was considered a lot.
0:53Not so much anymore.
0:54So I said, "Can I do the SEO?" And they said we have this new website, and it's been up for six months,
1:00and the firm we hired to do the SEO hasn't got it indexed yet. So if you can figure out why, you can start doing SEO." So I said, "Okay."
1:07And it only had a noindex tag on it. And yeah, so they... We were paying 20,000 a month for SEO that couldn't be done. So the VP said I could take it over since obviously I couldn't do worse. And that's how I got into SEO. So over the years I keep up all my skills just because I've been through enough economic pivots, let's just call them, where I know that this skill may not be needed today, and this one may be tomorrow.
1:30But since I went out on my own around 2010 or '11, I've just primarily concentrated on doing technical SEO, site recoveries, things of that nature. So I do all SEO except link building 'cause that's a whole thing unto itself.
1:44CrystalWow.
1:44Site recoveries. I've seen you post about this on LinkedIn. What is a site recovery? Like why do people need it, and then how do you help them?
1:51Kristine SchachingerSo when Google comes along with an update and they hit your site, it's gonna be fifty percent to ninety percent loss overnight. So literally goes boop. so
2:00you need someone to go in and evaluate against that update itself. First of all, whether it is an update that caused the problem. 'Cause there are other-- things can cause problems just at the same time and be coincidence. And then if it's the update, like Google's like, "Hey, it's a core update," that could be any of the ranking signals that are out there.
2:14So you have to evaluate the entire site, and then you help them fix it. And when the next update comes through, hopefully they get their traffic back. As long as they've got all the fixes in time, usually about three or four weeks before the new update comes out.
2:26CrystalOkay, so we've established, what you do, who you are, all that type of stuff.
2:31One of the reasons why you came across my radar is because on LinkedIn, there are very few people that have, been in my orbit, or that have come across my feed initially, like you did. With ideas that are a little bit contrary to the general acceptance of AI in search.
2:51And using ChatGPTs and LLMs for instance.
2:55And so I noticed the other day you said that you don't use them.
3:00But you test them constantly. And so I was wondering if you could just give us an example of how you test them, and what that kind of looks like.
3:09Kristine SchachingerSure, and I do use them a little. I just don't use them much. I don't use them for workflows. I do have a client who loves GPT, so sometimes I'll just have the GPT write the answer 'cause they believe that more over me. But generally speaking, I only use it for maybe tone cleanup in a, in, like a email I'm writing just to make sure my tone is correct or something like that. I don't wanna give the impression I never touch them.
3:29But for testing Duane Forrester published an article about there's a messy middle in AI search. And that means that the, AI does not ingest your website like Google does.
3:39And with its regular crawlers, it parses, and it only parses certain elements, and certain things have to be there for it to parse all the way through the document.
3:46So I took Kristine Shachinger loves snow 300 times in a document. That was something I did with Google Suggest years ago, where I made Google Suggest say that.
3:55With no corresponding documents online that supported it. So I did that, and
4:00then there's still no corresponding documents online that say I love snow. And then Kristine Shachinger loves SEO 300 times, and then Kristine Shachinger loves snow again.
4:07And so I looked and I thought I should be the main entity," ' cause that's what they look at is entities and relationships between entities.
4:13Nouns for people who don't know. And I was not. The entities were SEO and snow. so I asked it to summarize what was in the document that I posted to it, and it said that I loved snow.
4:24And I said, "But there's more to the document." It said, "No, there's not." said, "There is more to the document," and it said, "No, there's not."
4:30And I said, "There is more to the document. I wrote it." And so I have found, by the way, that if you're a little rude to it, it corrects itself.
4:38I don't know why that is, but it just does. So I was like, "Hey, so I wrote the document. Oh my gosh, could you please just tell me what else is in the document?" And it's like, "Oh, I am so sorry."
4:48There is something else in the document, and it then it said, that I loved SEO. And I s- asked it because they're wrong a lot, so I do not trust the information that comes out.
4:57But when it comes to LLMs, they're usually pretty good about
5:00understanding what an LLM does. So I asked it, "Hey, why would you have skipped that part?" And it said, the entity was not close to the other one. They were very different.
5:08So I just skipped over to the entity at the bottom, which was the same as the one at the top, or similar to the one at the top." If in the middle of the document, it's not comparable to the ones in opening paragraph, then it skips it. It goes away, right?
5:21That makes sense, but also makes sense in writing. So there's in a messy middle, there's where the author naturally would expand the writing. So you start with your tight summary, where your entities are very close together.
5:31If I was gonna write about iced tea and coffee, iced tea and coffee would be in my first paragraph, right? And then down the road, I might be like, "Oh, and the origin point of iced tea was yada."
5:41And now that's a very wide set of entities in the graph that they have. Google loves that. It gives you more visibility among searches.
5:48But large language models don't, so they skip it. So ugh, that's not so important. So large language models depend a lot on a structure.
5:56H1s, H2s, bullet points. They love
6:00bullet points.
6:00And then the using what's called cosine relevance, which just means how closely are your nouns related, and they follow that through the document. And if they don't see something that's related, then they just skip it, and they go to the next thing.
6:11CrystalOkay, so that is very interesting, and I'm wondering, like, how do we apply that knowledge directly to, say, a homepage?
6:20Kristine SchachingerI'm working with a lawyer who does brain injuries, right? So if I put in the title brain injury, TBI, traumatic brain injury.
6:27Those are very closely related, so the LLM loves that. If I say brain injury, TBI, and halfway down the document I say something like neurological deficits related to brain injury, the large language model is gonna skip that.
6:38Cause it doesn't care about neurological deficits 'cause
6:40too wide. Cosine relevance is an actual score. It's not re-related too closely. But Google likes that, so you wouldn't wanna remove it. But you might add in the h-header, the H1, H2, or a bullet point.
6:52Or at the end in the summary, or an FAQ at the bottom. That's where they came from, the idea of FAQs at the bottom.
6:57These entities in close
7:00on the page.
7:00And then cosine relevance, which is easy to look up. There are tools that do that. And so you wanna make sure you just incorporate those throughout the page. So the parser will follow.
7:09It does need its structure.
7:10It's like SEO two thousand and two. I wasn't in yet then, but let's say two thousand and five.
7:14We used to care about H1s and H2s, like they had to be there correctly.
7:17And we used to care about making sure all our HTML was semantically correct.
7:21And you have to do that again.
7:23Because there's an accessibility tree for agentic SEO, and then there's also the HTML structure that they need to have the entities in.
7:30CrystalOkay, so this is the second time today that I've heard the term accessibility tree.
7:36But I have never really heard of that before. Can you explain that to me? What is an accessibility tree?
7:41Kristine SchachingerSure. It's actually really simple. So, sites should do this already, but most don't. There's something called the WCAG AA standard two-point... I think it's on 2.2 right now, which outlines how your site has to work for people who have disabilities. Especially like screen readers or disability devices.
7:57Someone can't move their arms and legs, they're gonna use a blower, things of that
8:00nature. So your website has to be coded a certain way. In there is the accessibility tree. And the agentic bot uses parts of the accessibility tree. Just a few parts. To follow along and parse the document.
8:11Instead of divs everywhere, in accessibility, you'd be like, "This is the nav. This is the content. This is the form," and the divs will explain that. "This is the footer." So it can follow along that way.
8:22'Cause people have to remember, we're talking to bots. We're talking to machine learning. They're not reading, and they turn everything into math.
8:29So the clearer you are, the better your structure. Then, when it looks at the words even, they're not looking at words. They're looking at the mathematical representation of the words.
8:38CrystalYes, I love that. I'm actually learning about bits and bytes and, ones and zero and the whole binary system. I find it so fascinating that computers have figured out a way to quantify nearly everything in the world between zero and one. In different variations using zero and one.
8:57So it's so crazy. But just a quick question,
9:00does Google use the accessibility tree as well, or is that something unique to LLMs?
9:05Kristine SchachingerThis is the agentic tree, so yes. So this isn't your regular LLM optimization, but you should do it anyways 'cause you should have an accessible website. but the accessibility tree is for the agentic bots.
9:17So yes, Google's gonna be using that for shopping quite heavily.
9:20And they're all gonna use that same layer.
9:22There's not gonna be something unique. LLMs interpret pages differently depending on the LLM or how they interpret the cosine relevance or what they use for citations. But the agentic bot is just basically a machine: " Hey, can you read this page?" " Yes, I can read this page, if the accessibility tree is there."
9:38CrystalWhat if the answer is no, I can't read it?
9:41Kristine SchachingerThen it just won't ingest it. We don't know how much agentic is really gonna matter as far as shopping.
9:46In our industry, some think it's gonna be the biggest thing since sliced bread. I tend to think that people aren't gonna trust it. To let a bot go buy things for them without them being the one at the wheel. So we'll see. But they're already using it in their I believe the UCP uses it,
10:00though I'm not 100% sure.
10:01CrystalOkay.
10:01I teach Shopify sellers particularly creatives. People who are moving from Etsy to Shopify, building their own website.
10:07So one thing I've learned over the years is that a lot of things that you'd think would be naturally included in a CMS like Shopify. something like an agentic tree would be already pre-built in. Do you know whether that's true or not?
10:21Kristine SchachingerI don't know if Shopify is, but if they're doing accessibility like I know Wix does accessibility, it should be. The Lighthouse testing in Chrome Developer Tools will do an agentic test. So it will tell you if the accessibility tree is there, and if it's not, what's missing.
10:35I'm working on a website right now that we're rolling out, and it's like you're missing button text labels, which I know. That's something that it measured in the agentic test. So yeah. So it's really simple. And agentic stuff, accessibility stuff is not like a full accessibility redo on your website. These are very small items that need to be added, but again.
10:51You should be doing it. The market for people who have disabilities online is massive. Just in travel alone 10 years ago, it was a $13 billion market.
10:59Crystal:
11:00So I have a couple of comments to make about that, and then I'll move on from this, but this is so fascinating. I'm like, "Okay, I gotta find out as much as I can about all this." Is there a way to assess your website and identify quickly any accessibility issues that are missing?
11:15CrystalIs that what you were just talking about with the developer tools?
11:18Kristine SchachingerYeah. So Chrome Developer Tools Lighthouse test, you can add an agentic test that will basically tell you.
11:24Also, Screaming Frog and Sitebulb, which are very cheap, inexpensive tools, have an accessibility check. Now that's a full accessibility check, not just agentic tree. So if you just wanna check the agentic tree, check the Lighthouse test in Chrome Developer Tools. If you want a more accessible website, check Sitebulb and Screaming Frog. If you really have to have an accessible site, hire a specialist 'cause I've done that for the government and things like that. And that's a much more involved process. - But just those general tests will tell you if you're accessible for agents.
11:51CrystalSo, last comment on this particular topic. Kind of an anecdotal story.
11:56A few months ago, last year sometime I was notified
12:00via email that I had used a couple of images incorrectly on my website, on my Shopify store, in my Shopify blog. And this blog was from 2020 during social distancing times, and I'd used an image that I found, and I always do a free image search.
12:15And so I'm not sure how this happened, but there's two images and they were not supposed to be used on my blog without permission or without paying for them. Initially when I got the email, I thought, "Ooh, I'm just gonna take these down and ignore it," because part of it feels like spam, and part of it feels like a shakedown.
12:32And I don't know which one it is, and so I'm just gonna take it off.
12:34And, according to Google Search Console, I'd gotten a whopping zero views and visitors to this particular page in the last, however many months. So I was like, "Look, no harm, no foul. I'm just gonna take it down."
12:44In comes the lawyers, right? A few thousand dollars worth of demand letters later, I find out the hard way that y- this is not the way you wanna go about it.
12:53And side note to anybody with an e-commerce store: one negative about using images that are not your own on your blog is that
13:00when it's attached to your e-commerce store, the fines go up exponentially. So anyway, having said that...
13:06Kristine Schachingerpretty sure I know what company this is, so
13:08CrystalYeah.
13:08Kristine Schachingeryeah.
13:09CrystalYeah.
13:09Kristine SchachingerYeah.
13:10Crystalthey're fun.
13:11Kristine SchachingerYeah.
13:11CrystalYeah. So I learned that the hard way, but then I heard recently that there's a new push for people crawling your website to decide if it's as- accessible, and if it's not, now sending a demand letter or suing you on that.
13:27And I just wondered if you'd heard anything about that or had any thoughts, tips, stories?
13:32Kristine SchachingerOh, yeah. That's the new ambulance chasing.
13:35Like years ago, that came from when lawyers would go to hospitals and find someone who was injured in an accident. And sign them up as a case. Now they do it with websites. It's much easier, much more lucrative. Most of the time though, if you have made the attempt to be accessible. And it's just a small thing, like these button labels right now I'm working on.
13:52You could go to court, they're not gonna fine against you. It's usually if it's egregious or if you've been informed before. It used to be Department of
14:00Justice did that. So before the lawyers started doing it.
14:02So I got a letter at a company I was working at one time that our car section wasn't available to someone who was blind.
14:10And I know we go, "Ha ha ha," but the person was looking for the person who would be driving them. So they did need access to that. And the site-- It was overlooked on the site because people thought hey, they're blind and why would they need cars?"
14:21So we got a letter from the Department of Justice, and we fixed it, and we let them know, and they dropped it all. But lawyers are different. If a lawyer's looking for a payday, you definitely want to talk to a lawyer because I am not a lawyer, and I can't give legal advice. But I would say most of the time, if you fix it, if it's not too egregious, if it hasn't been something you've been told about over and over again.
14:38That the court's not gonna find against you. But uh, you do need to make sure your site's accessible. It's also really good for business. When I worked at Zappos, I was embedded there for nine months. Zappos found that there are people with disabilities who had one arm, one foot, one leg, whatever it happened to be. And they wanted shoes, but they...
14:54Or they wanted a jacket or whatever it happened to be, but they didn't wanna have to pay for an extra shoe that they could never
15:00use, right? So Zappos started actually selling one shoe.
15:03Or, yeah, or one glove or one whatever it happened to be that they were selling. And it turned into a very lucrative market for them. And like in travel, I live in Las Vegas.
15:12We're one of the cities that is most easy for people to travel around when they have wheelchairs or they have assistive devices because we're a new city and everything was built to accessibility codes. Most of the buildings on the Strip are, have-- were built after 1995. So it's a huge market for here, right? Because people come here. We're one of the top five cities that have those devices.
15:31So at the time when I did the research for a company ten years ago, it was a thirteen billion dollar market potential. Which is nothing to sneeze at. So when people don't do accessibility and you just tell them "Do the right thing," it's like, "Meh." We might get sued. Nah, they're not worried about that. But if you say, "Hey, you can make a lot of money by serving populations." '
15:46Cause as people get older also, they don't do well with screens. And their eyes change, and we have a m- aging population, and the... If your contrasts are bad or your font sizes are too small, they can't use your site. So
16:00it's just simple things that can make it so much better for the accessibility population. Sorry, I don't mean to go on. It's one of my little pet, pet...
16:06Crystalyou're right that it's sad that it takes us those types of motivations to do it the correct way. But, hopefully at the end of the day it gets done. I have a quick anecdotal story about that because I have one of those problems now that I can't read small print, without reading glasses or whatever.
16:21And just the other day I was at Chick-fil-A, and I had gotten a free drink of some kind that was in my app, it was a coffee and it was dinner time, so I didn't want to, drink a coffee late at night, but I couldn't see when it expired. So I'm like trying to show the girl that's taking my order "When does this expire?
16:38Can you tell me?" Because I couldn't read it. And it's not that I have vision problems per se, but it was so small that I could not read it on my own. So just a note to Chick-fil-A, if you're listening let's go ahead and make those expiration dates a little larger.
16:51Kristine Schachingeralso board games. I play a lot of board games, and you wouldn't believe how bad the contrast and fine print is. But I have a dry eye issue. I have autoimmune
17:00issue with my eyes, right? And it's gotten really severe this year. And I would look at the screen and everything's blurry, and everything was deformed, and I thought there's something wrong with my retina or something, right? No, I just have really dry eyes.
17:12The oils that are supposed to keep the tears on your eyes to keep them from being dry, they don't stay. So I have like four drops now that I have to take. But when I would look at a screen on my phone, the fonts are all this light gray and small and thin. And then the white of the screen was so bright to my eyes that I couldn't read the phone. I'm like, "I'm trying to read... I can't read it." Literally and it would just happen over time during the day. It would just suddenly at 6:00, can't read phones.
17:36So people should be aware that these are small things you can do on your site that make it better not only for people, but for also the agent bots.
17:44Because when the bot crawls your site, everything has to be clear and easy to get to. Font size and color, they don't care about as much, obviously, but the agentic tree is the accessibility tree.
17:54CrystalOkay, last anecdotal story, then we'll get back to our regularly scheduled program. I was working on a website,
18:00an older WordPress website.
18:01And I was going through it with one of the people from the company that I was working for and working with.
18:06And I had increased the space between paragraphs because the spacer, the natural spacer, was very narrow,.
18:14And the way that the WordPress site had been set up it just... it didn't look good on mobile. It really was crammed together. So I'm watching, but on on a desktop, it kinda looked like there was too much space. And so I'm just cringing because as we're going down the blog together, she's adjusting the spaces to make them smaller, and I'm like, " But I just thought it was so funny 'cause I was like, yeah, you have to think about what it looks like on the phone, not just the desktop.
18:40So thankfully, their theme has now been updated, and it looks great, as it is. So funny.
18:45Okay, so let's talk about vibe coding. So vibe coding is something I've been guilty of doing. I can't lie, okay? I can't lie. But it's where people build things with AI without the full ability to understand what it's doing.
19:00So why does that combination concern you?
19:02Kristine SchachingerSo if you're just doing it for yourself, that's fine, right? You're just trying to do something for you. That's okay. First of all, by the way, if you're doing websites with it, make sure it can even be read by Google. I tested a few, and they were all JavaScript modules. And when I ran the Screaming Frog Screenshots over it, 'cause they can see what Googlebot sees. The pages were completely blank. just because it shows in a browser does not mean that the Googlebot can see it, right?
19:23China just ran a test on vibe coders versus developers who vibe coded. And the vibe coding puts in a lot more vulnerabilities, which by the way, you're legally responsible for if you make that what you vibe coded public.
19:35So in the state of California, you can sue the developer for any damages that occur from a code that you create. Not just the company, but you yourself as a developer. So when you vibe code something and you just throw it out there vibe coding puts in a lot of vulnerabilities, and if you don't know the logic or how it works, you don't know that they exist.
19:51Developers who vibe code know the logic. They know how to prompt the logic. They know how to make sure the logic is there. But someone who doesn't code
20:00doesn't.
20:00And doesn't know that could be there. So I worry about the people who actually do it and don't tell people. Also, I think you should always tell people it's not a law at this point, if you vibe coded something because it is a vulnerability point. And so I'm not for vibe coding for anything that's gonna be put on the market that people are gonna sell.
20:16You could be exposing people to security risks that you're unaware of. Also just risks from the code being bad. The vibe coding is not better than a real developer.
20:24Again, if you're doing a minimal viable product for your startup, if you're doing stuff for yourself and you wanna take the risk for yourself, no problem.
20:30That's your deal, like I don't care. But if you're putting it out there for people to use, then you should be telling them that it's vibe coded.
20:37And you should also tell them whether you had a developer review the code or not after it was put out there. So China found that the vibe coders, and I might have the exact numbers 100% correct.
20:46We covered it on my podcast a couple weeks ago. But they had 40% more errors.
20:51And like far more issues because they didn't know the errors even existed. So the developer knew how to do what needed to be done and logic it out and then prompt it
21:00properly. The person who didn't have any history did not.
21:03CrystalIt's interesting because I think about people when they draft their terms and, different documents or whatever, it's like always have this reviewed by a lawyer. Or an attorney. And now it's always have your code, your vibe code reviewed by a actual programmer, so I think that's that's very helpful.
21:19Kristine SchachingerI should jump in with a little history. I go to DEF CON every year, which is the hacker conference here in Vegas. I also go to Black Hat, which is the professional cybersecurity conference. I only do it... I'm not a hacker. I do it so I understand what people can do to a website, so I know to recognize the signs. I know how creative they can be. I know what they can do. So once it's, people are mass producing vibe codes from certain types of products, I'm not sure I'm 100% maybe, but pretty sure it's gonna happen. In the early days, Macs did not get hacked, and everyone's like, "Oh, 'cause the security is so good."
21:51No, there just weren't enough people using Macs to make it worth their while. They didn't care.
21:54So then there were enough Macs, and now Mac has security. Not 'cause Macs got worse, but because there are enough to care about. Now, when people
22:00are vibe coding, it's like, "Oh, there's only so many people, so many apps," you know?
22:03It's not a general thing. If suddenly it becomes where everyone's vibe coding from, say, some popular tool, the hackers are gonna know what the vulnerabilities are in that code.
22:11And they'll use it against the people who are vibe coding. So people have to be aware that when you don't know what the s- the security risks are, that hackers are very creative people. And if you just go to a, a DEF CON once, you're like, " Gosh, I wanna be mad at you for that, but I can't 'cause it's so brilliant and it's so simple." One girl used ad networks. This isn't about vibe coding, but just a one of those ones where it's oh my gosh, you're brilliant and I hate you at the same time.
22:32She used ad networks was back at that time, were incredibly vulnerable because ad networks never checked the scripts that were being put into the ad network.
22:40So at this time, they were starting to change, so she was trying to find a way around it. what she did is when you touch the page, it's sent from a script, a benign script in the ad unit, to translate a word back to the site, right?
22:54You just had to touch the page, and that word is what triggered the ma- the payload, right? The
23:00malware. But no security scan would ever see it because it wasn't there until you touched the page and created the script.
23:06And triggered it to go off, right? By the word going to a dictionary, a Google dictionary, and changing. Translate, Google Translate and changing. So they're very creative people. So just be careful with vibe coding because it's it's fine if, like I said, developers who know what they're doing, they can at least test for the vulnerabilities, prompt for the vulnerabilities, know the logic to prevent the vulnerabilities.
23:24It won't be 100%. nothing's 100%, but at least you'll have a better chance of it. If you're just like, "Hey guys, I'm gonna go put this on the app market," and suddenly a million people are using it and hackers are like, "Cool. I found the vulnerabilities in that app a million people are using, and now I've attacked it." Now you are responsible for that attack.
23:42CrystalWow. It, again, so interesting. You've said so many things today that are like, I just have a, I have a connection with that. My mother-in-law, she has the autoimmune dry eye thing. And she just told me about that a couple weeks ago. And the hacker conference, that sounds so interesting to me.
23:56I'm actually going to school right now
24:00to get my cyber certificate. I know you don't have to go to school, but I'm like, "I need the foundation." There's so much of that's happening in AI that I feel like I'm missing some of those basic computer operation foundations. So I was like, "You know what?
24:13I'm just going back and I'm gonna, get the certifications and all that type of stuff." So yeah. Yeah. I'm working on that right now. Yeah.
24:19Kristine Schachingerif you come next year, let me know.
24:21CrystalOkay.
24:21Kristine Schachingerdown low on how to keep yourself safe.
24:23CrystalOkay. Yeah. What, what part of the year is it?
24:25Kristine SchachingerIt's in August. It's always the first week in
24:28CrystalAlways in August. Okay. If I don't make it next year, I'll make it the following year because I'll still be in school or finishing up my program.
24:34But I'll be hopefully taking the exam at some point, before that.
24:38Kristine Schachingeryou do not need to be an expert to come 'cause they like to teach people.
24:41CrystalOh, okay
24:42Kristine Schachingerpeople on old school stuff, and they don't allow AI in any of their challenges.
24:46CrystalOh
24:47Kristine Schachingerhave lock picking sessions.
24:50Tamper-resistant, how to get through that, how to security hack something.
24:54There's all sorts of stuff.
24:55CrystalYeah.
24:56Kristine SchachingerYou don't have to be an expert to come.
24:57CrystalAnd I didn't even realize I've been repeating things
25:00that may obviously according to what I've just learned here, are not true. Like I have a MacBook, and I'm like, I've told my dad like, "Oh, you need Apple products. You need the MacBook because it's less vulnerable to viruses and different things."
25:13And I just, I thought that was true. I thought it had something to do with its operating system.
25:16Kristine SchachingerIt's more secure than Windows.
25:18CrystalOkay
25:19Kristine Schachingeryour phone is definitely more secure than an Android. just saying that there's this, there was this idea for many years that you don't need any security software on a Mac 'cause nobody hacks Macs. And it's yeah, no- nobody uses them at the time.
25:30

