The duchess of cambridges sister, pippa, marries in berkshire. Now on bbc news, its time for click. Guards welcome to the south coast of england, and the countrys biggest fortification, dover castle. They say an englishmans house is his castle. This week, this castle is mine. Like every other home in the land, it needs to be well defended, because these days, it is constantly under attack. The walls may keep out burglars, but todays digital invader is wily, and can worm its way in through the smallest gaps. Last weeks global cyber attack on companies in around 150 countries shows just how vulnerable systems can be, even if you are not called into clicking dodgy links. So this week, were looking at cybersecurity. Its me versus the bad guys out there. And they might be small, but theres a lot of them. So what can i do to shore up my defences . One thing is through biometrics. Gadgets already recognise our fingerprint, and now banks are starting to identify us using our voices. So how secure is it . Is it possible, for example, to fake someones voice . We asked dan simmons to give it a go, or most precisely, to find the one person who might stand a chance at breaking into his bank account. Thanks, ben. Well, one of the things that you might not know about me is that i am the only member of the click team to have a twin brother. Hi. His name isjoe, and we kind of sound quite alike. We kind of do sound quite alike. But i came out first, and hejust copied me. Yeah, well, for this report, its going to bejoe trying to copy me. Together . As we try to break into a bank. But first, were going to need some help. Yep, i really think this guy is going to help us. Right, good, good. All right, nice to meet you. If youd like to sit down. What were going to do first is i have this little analysis tool here. And what this will do is just detect, first of all, the pitch of your voice. This system that youre trying to break in is analysing your voice in lots of different ways. So there will be about 100 different variables it is picking up on. Hello, id like to access my account, please, today. Hello, i wondered if i could access my account today. You see there are pretty big differences between them. So who do you think is the bigger adams apple, out of both of you . I cant see mine. Together yayayayahh. You are going to get excited and you will raise your voice. You are going to get excited and you will raise your voice. Its the first time ive tried to use the telephone banking service, and im not set up, so i am hoping. Laughs. How many how long do you want to make this . A bit shorter, ok, a bit shorter. That wasnt axactly the way you said it the first time. Id like to take everything out, today, please. That was. Id like to take everything out, today, please. That is that is close. Out, today, please. Thats not true. Out, today, please. That is not true. Out, today, please. Excellent, that is brilliant. Out, today, please. Thank you very much. Out, today, please. No worries at all out, today, please. What are you dressed like that for . Well, were doing a job, arent we . Ive got a gun. You dont need a gun, do you . Your voice is your weapon. Take that off erica is the voice of nice nice is the voice Security Provider for citibank Credit Ca Rd Holders in the us, among others. Hi, nice to meet you, too. Joes going to try to break into my account, what chances do you think he has . Very slim. What advice can you give me to try and break into his account . Well, youve known him your entire life, so try to imitate his voice. She seems very confident about this what what why is it that you think that, maybe, my twin brother cant break into my account . Voice biometrics is the most accurate form of identification there is for access into financial institutions. Why . It registers over 100 different characteristics with voice. Half of them personality and the half are physical. And you do look a little bit different, and your voices are different, so you will have different vocal characteristics. So therefore, what percentage chance do you think i have . It would be one out of several hundred thousand. How do you make it so that i can access my account, even if, like, at the moment, i have a little bit of a. Coughs. As i said, theres over 100 characteristics, and a cough or cold only affects about two. So we still have all those other characteristics to work with, and we can use those for identification. And has anybody fooled the system through the front door . Basically, pretending to be somebody theyre not . No. Can i ask another question . It mightjust be a bit out the ballpark, but is this legal . With the niceties out of their way, i gave the sample of my voice to the system. I know people might try and access system. I know people might try and a ccess my system. I know people might try and access my account, you need to be aware of it. Joe kept himself busy. Im here to break into the account of dan simmons. Joe, you really dont need the gun. What do i have to do . Lets give this a shot. 0k . Hi, yes, id like to access my current account, if i can, please . Yes, its probably about £10, Something Like that. Yeah. Thanks very much. Yeah, thats great. Thank you. You failed but close. Wow, look at how close this is over here. Look at that if we come over here, it you can see theres the threshold level, and that that is pretty close. That was not a bad first go. Thatjust came out of nowhere. First go, very good. It came out of absolutely nowhere very good. But thats how you test the system, isnt it . Yes, thats how we test the system. We test it with twins, and siblings, and imitators. You know, a fraudster wouldnt get Three Chances, and the reason a fraudster wouldnt get Three Chances is that we would register the multiple failures, and it would dynamically increase the threshold on the third, and put a flag on the account. Right, that is not to say, of course, that its impossible, is it . Its not impossible, its just very improbable. So, dan, your bank account is still safe, although your twin got away with some pretty cool stationery. Yeah, the Old Fashioned way. Were you surprised that the voice attack didnt work . Yeah, iwas, actually. We really tried hard to match up our voices. You know, we used the voice coach and the rest of it, and Itjust Bubbled under what we needed and couldnt get in. What about the simpler stuff that we have been asked by banks in the last few years, like my voice is my password, did you try that . Oh yeah, we had a crack at that. To get into my account, my twin needs my sort code and my account number, things i have already helped him outwith. He also needs to know my birthdate, but thats probably something he already knows. The question is, can my voiceprint give me any extra protection . Secret bank, were not getting any bank names away. Good afternoon. Welcome to hsbc. Oh, its. Please enter your sort code, or. Oh, ive got this one. Now, interestingly, its the pin number, and the account number, which, if you are from the days from the old cheque book, then both of those things youd use to print objects. So if youve got an old cheque from somebody you already know that. Your date of birth. He knows my date of birth because we share the same date of birth. After the tone, please repeat the phrase my voice your password. My voice is my password. Im sorry, i didnt catch that. After the tone, please repeat the phrase my voice your password. My voice is my password. Welcome to hsbc advance. The balance of your account is £1. 21p credit. Im off to the bank for your available balance. I thought it would be more than that, dan. Laughs. Evil twin was in. Perhaps more surprising when you consider the Service Providers test their systems with twins to improve security. I can get into other accounts, apparently, dan, so. Hsbc told us. He did break into your real bank account. That wouldnt be a great defence. He is my twin and not many people have one of those. Computers can emulate and clone voices. We have started to see people fooled in the same way we have been fooled by photo shop pictures. I dont think that will work. Do you mind if we give that a go . Be my guest. Im thinking Tower Of London and the crown jewels. I am thinking im thinking Tower Of London and the crownjewels. I am thinking of recording his voice and i caught him after work. I record his voice and sent his recording to canada. Here is there a version of donald trump. Not bad. Not bad. I would have to say great, the best. We are working with security searches to find out what is the best way to send. This is why we havent made it public yet. The Developers Hope it will give someone back their voice if they lose it through illness or an accident that they are aware it could be used to fake a voice id. One idea i have to work on is to mark the samples. We have to detect this. They are not quite ready to help you. Close but not yet, give it a few years. The bank have come up with something quite new. Even if you have the details of someone, you have the details of someone, you have their fingerprints. You could replicate their voice print. You still wouldnt be able to get in. I know because ive tried to hack in. Major security no no man works at an undisclosed financial institution. 0h. He manages innovation, because they have an innovation unit. So whats he been innovating . Just watch the way he uses his phone, because his Security System is doing just that. And even with all his login details, ill need to replicate how he holds, taps, and tilts his device. Ha, hi chris, would you mind lending me that for a moment . No luck. Its beaten me. Thatll be yours, then. Thank you very much. Cyber security headlines this week. Things could get work worse if shadow group goes ahead with its promise to release fresh batches of tools each month. Spying tools go ahead with its promise to release fresh batches of tools each month. It threatens to sell new code that could compromise Phone Handsets and windows temp as well as data stolen from banks. It was also revealed the squeeze selfie phone. There was an app called lens which turns your smart code camera into a search engine. And space x offered to take your loved ones remains into space. Capsules of ashes will orbit earth for two years before re entering the atmosphere as a shooting star. It costs around £2000. The previous efforts didnt reach orbit. Finally, over latvia, this man achieved the first ever Parachute Jump from a drone. He landed safely with his parachute. Not looking good out there. Ive retired to the inner sanctum. Dover castle was continuously defended the 900 years, right up until the 19505. It was a successful defence. I wonder whether our homes are more ballmer both. Vulnerable. We are filling them with more and more connected devices. This is the family room at the heart of the castle where the lord and his family can relax between some thick walls. The king can unwind with a game of chess. In the 13th century, they didnt have the internet of things but they still have things. How do we make iot more secure . We have a Security Expert as our guest. We have a Security Expert as our guest. We keep hearing about these connected devices continually being hacked. Why is it so hard for manufacturers to make them more secure . It is not hard. Itjust needs thought, effort and time to do it right. They have to get their product to market and somewhere, someone says security. Do they carry on chipping or ship it out and expose us as consumers . That is shocking. I like to think security is getting better. I think it is getting worse at the moment. Everyone wants to jump on the bandwagon. There is less security, Cheaper Products and people are buying it. Dont worry about that. Its fine. Give me a hand with this chest, please. In here, ive got some iot devices. Here is one i like the look of. It sends an image of what is going on at your door to your phone so you can answer the door when you are not at home. You can unhook it from the door, press this button and itll give you a wi fi key so you can hack the customers network. Ok, right. Beggars belief. Here we are in a castle. This is a smart door lock. You can lock your door from your phone but it hooks up with voice control. With amazon eco, you can go, lock door. It locks the door for you. It doesnt do anything silly unless you hooked it up to siri. You could shout through the door, unlock door, says the burglar and it unlocks the door. This is the next thing. This is a thermostat and you can control your heating from your home. We found that you could hack them and do crazy things like Install Ransomeware on them so they could hold your Heating System to ransom in the middle of winter. So you can turn the heating off and demand money to turn it back on. Yeah. Buy yourself a fan, like weve got. It seems these gaps in our defences are proving to be a gift for our attackers. Really . A smart kettle . Whats the problem with a smart kettle . You can boil a cuppa from your bed when you wake up. Unfortunately, this early version wasnt secure and you could sit outside someones house, point an aerial at your kitchen and get your wi fi keys. Good lord. Not safe any more. Lets go to the throne room. This is more secure. Ive locked the doors. Ok, right, how can we defend ourselves and our data if we have a home full of connected devices . You have to update your phone. Check the software is bang up to date because the manufacturers may have fixed the bugs. Would you buy a connected device for your children . I wouldnt. I dont think they are safe enough yet. One extra word of advice. It is boring but please make sure you got a good strong password on app that youd use to talk to your toys. Ok, looks like we have some unwelcome guests. I will hand you over to lara who has some important Security Tips that we may be should have paid more attention to. It is every geek for himself. The recent Ransomware Attack showed you dont have to be personally targeted to end up being a victim. This first tip would have protected you against that and many similar attempts to get inside the walls of your castle. One thing you need to do is to update the operating system, the browser and the applications you use. These pieces of software are complicated and they contain bugs. There are other ways we could be leaving ourselves vulnerable. Dont jailbreak devices. Use download applications because without that, you are bypassing the security that has gone into them. At one point, you will lose your devices. When you set it up, ask it to encrypt all the stores. If you dont think youve got anything of value, your contacts are worth a lot of money to cyber criminals. If you are putting documents that you dont want other people to see, i say dont do it. If you download something and you are not expecting it, dont do it. Protect your family and friends. Remove that risk. Brilliant Security Tips there. Unfortunately, i think theyve arrived a little bit too late for me. Still, there you go. Thanks for watching and i really, really hope that i will see you soon hello there, Weather Conditions are more like cornwall this afternoon, dry with sunny spells and feeling warmer. Less like they are staying. One to downpours still around a wetter end to the day for the east. Still wet across the northern half of scotland, that rain will ease a week tonight. Showers becoming fewer in number, mostly drier on sunday morning. Colder than it was. Three 014 morning. Colder than it was. Three or 4 degrees in scotland. Into sunday morning, this is the view across the south, a dry start for the vast majority. The odd isolated shower out in the west and over the hills in wales and maybe north west england. Winds will be lighter than today so quite quickly temperatures will rise. A lovely start across scotland. Northern ireland, thick cloud spreading end. A bright start. Patchy rain. Sunshine in Western Scotla nd patchy rain. Sunshine in Western Scotland but cloud will increase, bringing patchy rain or drizzle. The Odd Shower Across Eastern Shop scotla nd Odd Shower Across Eastern Shop scotland and across wales but they will be liked and few in number, mainly over the hills. For the vast majority on sunday, a dry day and temperatures get a welcome boost, perhaps up to 21 degrees in the south east corner. A fine end to date, patchy rain in the north west of scotland. Patches of rain across north than ireland and scotland. Moreover please on monday and temperatures Still Limited to the mid teens in scotland but further south, widely into the 20s across england and wales. For some it will reach mid 20s. These weak Weather Fronts push of the atlantic which will produce thicker cloud and patchy drizzle in the west. High pressure from mid week onwards so the week ahead will be a good deal drier and set to be warmer as well with temperatures over 20. Goodbye for no. Now. This is bbc news. Im sophie long. The headlines at 4pm. A Grand Welcome for donald trump in saudi arabia, where the us president is making his first foreign trip. He was greeted by king salman at riyadh airport. Mr trump is leaving behind fresh controversy in washington. Theres claims he said firing the fbi chiefjames comey, relieved him of great pressure. Jeremy corbyn insists his party is committed to trident after members of the Shadow Cabinet publicly disagree over the issue. The tories defend their pledge to cut net migration to Tens Of Thousands after it comes under fire from former chancellor george osborne. Hassan rouhani is re elected as iranian president , defeating his conservative rival in a comfortable margin