laurie segall, thank you. >>> glaxosmithkline will no longer pay doctors. >>> vitamins are no longer necessary. the vitamin industry rakes in $12 billion every year. >>> revenge of nerds. people who were attractive in high school end up making more money later. an 8% bump for good-looking women and 4% more for men. >>> target is shunning queen b. the retailer will not sell the album. it was available digitally first. target says that hurt sales. >>> "forbes" named duane johnson the top grossing actor. >>> coming up, this economy is taking flight, but could groundhog day in washington crush the recovery? i'll go one-on-one with the republican senator who says if democrats want to talk debt ceiling, they better be prepared to bargain over obamacare. it gets an impressive 34 highway mpg and comes with no charge scheduled maintenance. and right now you can drive one home for practically just your signature. sign. then drive. get zero due at signing, zero down, zero deposit, and zero first month's payment on any new 2014 volkswagen. hurry, this offer ends january 2nd. visit vwdealer.com t

let's bring inning cnn money tech correspondent laurie segall. tell us how internet companies track users. >> hey, wolf. essentially they use little bits of code called cookies that track what you're doing and why they do that is because these companies, they make money off of advertising. so if they know what you're looking at, they can actually go and target an ad to you personally. you know, but oftentimes they'll say this. these companies end up having a lot more information than we know they have than they said they had. a lot of examples, google had a supplement over its street view car. they were collecting info off of people's wi-fi networks. they came under fire for that. also facebook, google, twitter, all three.cans have had ftc settlements over privacy violations. so they're all getting audited over the years. so you know, silicon valley needs washington and washington needs silicon valley but this is an ongoing discussion. oftentimes silicon valley is asking for forgiveness and not permission, wolf. >> so answer this because i guess

here's laurie segall. >> hey, rosa. we want to take a look at what it reveals.t we've found. if you've done some holiday shopping at target, you might be wondering what a hacker could learn about you from your credit card. when you swipe, here's what a hacker could learn from the data in that magnetic strip. your name, your credit card number, the card's skpir yags dat date, and the cvv code on the back. >> they can get it by taking just what's on the strip. >> in the case of the target hack, that may have been enough for the hackers to make a counterfeit card. one researchers explains. to the employee everything loo s s normal. >> i can log in, make a selection and do a credit card swipe. it will ask for a cvv. i can put in a cvv, whatever numbers i want. then click pay. right? nothing seems untoward. >> for the customer, pretty standard. >> you're paid, you get your receipt, you move on. >> but for the hacker -- >> i have access to the entire mag strip data that's on this device and i can get all of this and enough nofgs create a whole different card. >> the t

cnn money's laurie segall has that. >> i'm connected to this phone wirelessly right now. in real-time, i'm stealing credit card data. i have to log in, i can make a selection here. and then i can do a credit card swipe. i now have all of your credit card data in here. >> these stockings the grinch are the first things to do. >> reporter: when grinch-like hackers literally steal christmas. these guys are not grinchers, they're researchers with trust wave. their job, find flaws in technology to protect users or shoppers. >> click pay. nothing seems untoward. you're paid. you get your receipt, move on. >> reporter: bypass the cash register, swipe your card on iphone. >> ipod, iphone. works with ipad. you've gone into a big box retailer, you've made a purchase, employee's here to help you now, and you handed me your card, run the card through. >> reporter: and that's where shoppers are at risk. >> once a credit card transaction is run through, we're able to steal the transactions if encrypted if they're not encrypted in the hardware. >> reporter: the problem is in the softwar

laurie segall, thank you. >>> a race against time to get dozens of pilot whales back to deeper water.ir own? when they are nudged out, why do they keep coming back? we'll take you there and ask you the expert about this next. [ female announcer ] ladies and gentlemen i'm here to say a few words about the power of baking stuff with nestle toll house morsels. you can heal a broken heart with a bundt cake. make a monday mornin' feel like a friday afternoon with some nestle toll house morsels. let's close our laptops and open our ovens. these things don't bake themselves. we have to bake them for one another. we can bake the world a better place one toll house cookie at a time. nestle. good food, good life. ♪ [ male announcer ] laura's heart attack didn't come with a warning. today her doctor has her on a bayer aspirin regimen to help reduce the risk of another one. if you've had a heart attack, be sure to talk to your doctor before you begin an aspirin regimen. >>> welcome back to "legal view." i'm ashleigh banfield. a race to save dozens of pilot whales in everglades national park. the

laurie segall is joining us. sounds like a sophisticated operation. how did it work? >> wolf, absolutely was. something called pony malware. you get a link, looks look something you'd click on. malware would be on the computer, they'd look at your browsing history, get many passwords. as you said, 2 million accounts affected. the scope of the hack was huge. >> what surprising outcome, people using weak passwords which is a big no-no, as far as this situation is concerned. tell us about that. >> absolutely right. what happened, this didn't happen because the passwords were weak, people clicked on a link. what we gathered from the hacks people have weak passwords of the 2 million accounts affected 15,000 people, most common passwords is 123456. and looking at iterations of the 123-digit combo. another common password, password. and again, you see these digits, 123 iteration. hackers probably knew that those were weak passwords but have evidence that these are weak passwords. if your password looks anything like there is, change it immediately. you know, use a number of

laurie segall, thank you so much. i wish i invested in snapcat. >> coming up, all hear about what might have helped this 15-year-old boy beat leukemia. ♪ [ female announcer ] can you bridge a divide with a fresh baked brownie? ♪ yes! yes you can. bake the world a better place with nestle toll house. just 15.99. start with soup, salad and cheddar bay biscuits then choose one of eight entrees plus dessert! four perfect courses, just 15.99. come in to red lobster today and sea food differently. you give them the giggles. tylenol cold® helps relieve your worst cold and flu symptoms. but for everything we do, we know you do so much more. tylenol cold®. the deep sweep power brush by oral-b for the first time. wow. it's "wow," you know? wow. wow. that feels "wow." [ male announcer ] oral-b deep sweep, featuring 3 cleaning zones with dynamic power bristles that reach deep between teeth to remove up to 100% more plaque than a regular manual brush. it seems like it gets more to areas of your mouth that you can't reach with a re

laurie segall explains. >> if you've done some holiday shopping at target. you might be wondering what a hacker could learn about you from your credit card. when you swipe here's what a hacker could learn from the data in that magnetic strip: your name your credit card number the card's expiration date and the c-v-v code on the back. no line >> "all of this key data that can be used to falsify that card and go ahead and fraudulently use online, they can access that just by taking what's on the strip." >> in the case of the target hack, that data may have been enough for hackers to make a counterfeit card. one security researcher, who showed us a different credit card hack, explains: to the employee, everything looks normal: >> "i just have to log in, i can make a selection here, and then i can do a credit card swipe." "it'll ask me for the cvv, i can put in a cvv, whatever numbers i want. and then i click pay, nothing seems untoward." >> for the customer, pretty standard: >> "you're paid, you get your receipt, you move on." >> but for the hacker >> "i have a

jim across ta and laurie segall. thanks so much for joining me this morning. limited time, members can win a free night every day. only at hotels.com and our giant idaho potato truck is still missing. so my dog and i we're going to go find it. it's out there somewhere spreading the good word about idaho potatoes and raising money for meals on wheels. but we'd really like our truck back, so if you see it, let us know, would you? thanks. what? if yand you're talking toevere rheuyour rheumatologistike me, about trying or adding a biologic. this is humira, adalimumab. this is humira working to help relieve my pain. this is humira helping me through the twists and turns. this is humira helping to protect my joints from further damage. doctors have been prescribing humira for over ten years. humira works by targeting and helping to block a specific source of inflammation that contributes to ra symptoms. for many adults, humira is proven to help relieve pain and stop further joint damage. humira can lower your ability to fight infections, including tuberculosis. seri

laurie segall thanks so much. >>> also this morning, anti-american anger is boiling over in india, outraged indians set fire to american flags and denounced president obama in street protests growing decidedly more angry railing against the arrest of an indian diplomat in new york city. this diplomat was strip searched and handcuffed after being accused of faultifying her housekeeper's work visa and grossly underpaying her. the diplomat's treatment has ignited outrage, her countrymen and her lawyer of course. >> she was handcuffed. she was strip searched. she was put in a cell with another people and treated like an ordinary u.s. citizen charged with a crime. the fact is, she isn't an ordinary u.s. citizen. she is a diplomat with immunity, and she should have never been treated this way. >> thus far all indications are standard procedures were followed, but because we recognize that this is a very sensitive issue in india, we are continuing to review exactly what happened in this case. >> the case has severely strained ties between the united states and one of its key allies in asia. india'

joining me, host of ""reliable sources"" and money tech, laurie segal.l read them and are on social media. you read them and feel for these people. ryan, to you, first. walk me through the blogs, they grab the story and run with they will. >> we want them to be true. >> right. >> we forget the first rule, trust and verify. check it out first. there is a industry with websites in the business of finding these things and blowing them up. i don't want to pick on any specific ones, but buzz feed does it and "huffington post" and others like them because they have a lot of interest for people. >> laurie, let me ask you this because you follow social media. it shows how intimately it can light up on twitter and for example, this woman, the blogger, impoverred blogger. >> everyone likes a good story. the speed of the internet is a different kind of speed. that's what happened here. people didn't take a step back. i have fallen victim to this, but sometimes you have to do -- you need to vet. someone reached out to me on twitter and all of us were saying who is t