Security Now (Audio) SN 1052: Global Cellphone Tracking - Checkout.com Fights Back
18 snips
Nov 19, 2025 Can your cellphone be tracked without malware? Absolutely! Discover how telecom signaling allows pinpointing your location. Apple’s new Digital ID is set to transform wallets, while Checkout.com opts to fund cybersecurity research over paying ransom. Google juggles AI in the cloud and rolls back some developer registration rules. Venturing into the risky world of cellphone tracking and privacy, experts reveal the ins and outs of SS7 vulnerabilities. Tune in for juicy listener feedback and vital security insights!
AI Snips
Chapters
Books
Transcript
Episode notes
Apple's Wallet Passport ID Is A Foundation
- Apple launched Digital ID in Wallet using passport data and biometric "proof of life" checks to create a verified domestic ID.
- Steve Gibson views this as a strong foundation for future privacy-preserving age verification APIs.
Refuse Ransoms; Fund Security Research
- Checkout.com refused to pay a ransom and donated the demanded amount to cybersecurity research instead.
- Use transparency and invest breach ransom funds into research rather than rewarding criminals, Gibson suggests as a model response.
Cloud AI Is Practical But Not As Secure
- Google announced Private AI Compute to run Gemini models in a sealed cloud enclave using custom TPUs and attestation.
- Gibson stresses cloud AI can be practical but cannot equal on-device security; evaluate if it's "secure enough."
