Firewalls Don't Stop Dragons Podcast cover image

Firewalls Don't Stop Dragons Podcast

Latest episodes

undefined
Sep 2, 2024 • 1h 17min

Crazy Proton Summer

Andy Yen, CEO of Proton, dives into the company’s summer launches: Proton Docs, Wallet, and Scribe, exploring their privacy-first approach. He discusses the challenges of integrating AI while ensuring user security in cryptocurrency, especially with Bitcoin's privacy hurdles. Yen also introduces the Proton Foundation, aimed at protecting their privacy mission. An intriguing proposal to acquire Mozilla for Firefox and insights on the 'compromised machine' threat model provide thought-provoking takes on the future of online privacy solutions.
undefined
Aug 26, 2024 • 1h 22min

National Public Data Breach

The headlines have been on fire with stories about 3 billion people's data being leaked from a company you've never heard of. But like many such stories, the mainstream media gets a lot of the important details wrong and glosses over a lot of the important nuances. Today we're going to dive into what really happened and what you should do about it, whether your data was part of the breach or not. In other news: Illinois waters down its landmark biometric information law; US court rules geofence warrants are unconstitutional; FTC to investigate :surveillance pricing" and files rule impacting shady product reviews; the CFPB cracks down on some types of consumer data sales; and Consumer Reports evaluates several top data deletion services. Article Links [Reuters] Illinois governor approves business-friendly overhaul of biometric privacy law https://www.reuters.com/legal/government/illinois-governor-approves-business-friendly-overhaul-biometric-privacy-law-2024-08-05/ [TechCrunch] US appeals court rules geofence warrants are unconstitutional https://techcrunch.com/2024/08/13/us-appeals-court-rules-geofence-warrants-are-unconstitutional/ [Electronic Frontier Foundation] To Fight Surveillance Pricing, We Need Privacy First https://www.eff.org/deeplinks/2024/08/fight-surveillance-pricing-we-need-privacy-first [ftc.gov] Federal Trade Commission Announces Final Rule Banning Fake Reviews and Testimonials https://www.ftc.gov/news-events/news/press-releases/2024/08/federal-trade-commission-announces-final-rule-banning-fake-reviews-testimonials [natlawreview.com] CFPB Forecasts New Rule Cracking Down on Consumer Data Sales https://natlawreview.com/article/cfpb-forecasts-new-rule-cracking-down-consumer-data-sales [Los Angeles Times] Hackers may have stolen the Social Security numbers of every American. How to protect yourself https://www.latimes.com/business/story/2024-08-13/hacker-claims-theft-of-every-american-social-security-number [troyhunt.com] Inside the "3 Billion People" National Public Data Breach https://www.troyhunt.com/inside-the-3-billion-people-national-public-data-breach/ [consumerreports.org] Evaluating People-Search Site Removal Services https://innovation.consumerreports.org/new-report-data-defense-evaluating-people-search-site-removal-services/ Tip of the Week: OSINT Final Steps https://firewallsdontstopdragons.com/osint-final-steps/  Other Helpful Links Have I Been Pwned: https://haveibeenpwned.com/  NPD Data Breach search tool: https://npd.pentester.com/  Privacy Guides data removal tools: https://www.privacyguides.org/en/data-broker-removals/  Techlore video on data removal: https://www.youtube.com/watch?v=tESbBM2LZHM  Google’s Results About You: https://myactivity.google.com/results-about-you?pli=1  How to freeze your credit: https://firewallsdontstopdragons.com/credit-freeze-now-is-the-time/ How and why to plant your flag: https://firewallsdontstopdragons.com/why-you-need-to-plant-your-flag/  Strong passwords: https://firewallsdontstopdragons.com/need-a-bigger-password-haystack/   Backing up 2FA codes: https://firewallsdontstopdragons.com/how-to-backup-2fa-seed-codes/  Further Info Send me your questions! https://fdsd.me/qna  Check out my book, Firewalls Don’t Stop Dragons: https://fdsd.me/book  Subscribe to the newsletter: https://fdsd.me/newsletter  Become a patron! https://www.patreon.com/FirewallsDontStopDragons  Get your Firewalls Don’t Stop Dragons Merch! https://fdsd.me/merch  Give the gift of privacy and security: https://fdsd.me/coupons  Support our mission! https://fdsd.me/support  Generate secure passphrases! https://d20key.com/#/  Table of Contents Use these timestamps to jump to a particular section of the show. 0:04:00: News preview 0:06:33: Illinois governor approves business-friendly overhaul of biometric privacy law 0:11:18: US appeals court rules geofence warrants are unconstitutional ...
undefined
Aug 19, 2024 • 1h 1min

Dating App Privacy

Finding your soul mate or even just a one-night stand can all be done digitally now - there's an app for that. Several, in fact. But in order to find the best match, you need to turn over a lot of extremely personal information. You probably also need to let the app track your location, so you're only matching people within some acceptable distance. You would hope that dating apps would be better than other apps at securing your private data... but are they? And are these services selling my data to advertisers? Today I answer these questions and many more with Zoë MacDonald from Mozilla's Privacy Not Included team who recently published a full report on this topic. Interview Notes Privacy Not Included report on dating apps: https://foundation.mozilla.org/en/privacynotincluded/articles/data-hungry-dating-apps-are-worse-than-ever-for-your-privacy/  Mozilla Foundation: https://foundation.mozilla.org/en/?form=donate-header  Mozilla’s Privacy Not Included: https://foundation.mozilla.org/en/privacynotincluded/  Falling out of love with dating apps: https://www.theguardian.com/lifeandstyle/2023/oct/28/its-quite-soul-destroying-how-we-fell-out-of-love-with-dating-apps  Using dating apps to locate someone: https://www.techradar.com/pro/privacy-flaw-in-top-dating-apps-could-have-revealed-user-location-down-to-2-metres  How to freeze your credit: https://firewallsdontstopdragons.com/credit-freeze-now-is-the-time/  Further Info Send me your questions! https://fdsd.me/qna  Check out my book, Firewalls Don’t Stop Dragons: https://fdsd.me/book  Subscribe to the newsletter: https://fdsd.me/newsletter  Become a patron! https://www.patreon.com/FirewallsDontStopDragons  Get your Firewalls Don’t Stop Dragons Merch! https://fdsd.me/merch  Give the gift of privacy and security: https://fdsd.me/coupons  Support our mission! https://fdsd.me/support  Generate secure passphrases! https://d20key.com/#/  Table of Contents Use these timestamps to jump to a particular section of the show. 0:57:02: Wrap-up and looking ahead 0:02:06: Freeze your credit! 0:04:19: How do modern dating apps work, exactly? 0:08:19: How do they find compatible matches? 0:10:34: Do these apps require constant access to your current location? 0:14:50: How much information used by these apps is inferred vs explicitly requested? 0:17:59: Do these apps use inferred data to weed out bad actors? 0:20:36: How did you decide which apps to evaluate? 0:23:54: What were your key takeaways and most alarming findings? 0:25:57: Do apps owned by the same parent company have similar privacy policies? 0:27:28: How transparent are these apps about sharing your data? 0:29:08: Was there any correlation between app cost and monetizing your data? 0:31:20: Are dating apps better about securing your personal data? 0:33:53: Do any of the dating apps offer end-to-end encryption of DMs? 0:35:40: Do these services try to keep you from leaving the app? 0:39:03: Once you find a match, can you get a refund for unused subscription time? 0:40:28: How do new AI features on dating apps affect your privacy? 0:43:30: Have there been any major dating service data breaches? 0:45:05: How bad are these apps for romance scams like 'big butchering'? 0:47:10: If I still want to use a dating app, how do I maximize my privacy? 0:51:19: Can I use a service on the web only (no app)? Can I delete my data? 0:54:20: How well do dating apps actually work, in terms of finding a mate?
undefined
Aug 12, 2024 • 60min

Hacker Summer Camp 2024

Dive into the buzzing atmosphere of Hacker Summer Camp in Las Vegas, featuring key insights from the DEF CON and BSides conferences. Discover the 'Undisruptible 27' initiative aimed at bolstering critical infrastructure. Uncover the balance of security and privacy in NFL stadiums with facial recognition tech. Explore the implications of a patent for car surveillance and legal rulings on smartphone searches. Plus, get practical tips on managing your online privacy and personal data in this digital age!
undefined
Aug 5, 2024 • 1h 15min

Catch You on the BSide

Jack Daniel, a captivating storyteller and co-founder of Security B-Sides, shares his vibrant journey through the hacker landscape. He discusses the origins and evolution of BSides conferences, emphasizing their community-driven nature compared to larger events. Jack highlights the transformation of the hacker community, the significance of documenting its history, and the power of chosen family in overcoming challenges. His unique insights into modern hacking and memorable conference experiences add a rich texture to this engaging conversation.
undefined
Jul 29, 2024 • 59min

CrowdStrike Lessons Learned

A recent cybersecurity incident revealed how a single company can disrupt major airlines and hospitals. Google's shift on third-party cookies raises concerns about online privacy. The ethical dilemmas of using mobile ad location data for tracking individuals are scrutinized. Notable vulnerabilities in digital payment systems and mobile forensics are discussed, highlighting risks like sextortion that target minors. Plus, useful tips on protecting public data online are shared.
undefined
Jul 22, 2024 • 1h 22min

Open Source Intelligence

Jason Edison, an expert in OSINT, discusses how individuals can protect their privacy by removing personal information online. Topics include data removal tools, credit freezes, and privacy apps like MySudo and SimpleLogin. Practical advice on managing personal data and resources offered by Intel Techniques are also covered.
undefined
Jul 15, 2024 • 1h 18min

How & Why to Block Ads

Learn how to protect your privacy by blocking ads online and stay updated on cybersecurity news including WiFi scams, hidden cameras in Airbnb rentals, router vulnerabilities, password security, and data breaches. Discover the evolution of privacy-preserving ad attribution and get excited about Proton's encrypted Google Docs alternative. Explore the importance of ad blocking for privacy and security with recommended tools like Ublock Origin and DNS-based solutions.
undefined
Jul 8, 2024 • 1h 11min

Promising Privacy Tech

Irene Knapp, a former Google privacy expert, discusses Privacy Enhancing Technologies that protect personal data while still allowing for data insights. She shares insights into Google's privacy approach and her experiences at the company. Topics include secure multi-party computation, zero-knowledge proofs, and the challenges of balancing privacy with data collection in the age of AI.
undefined
Jul 1, 2024 • 1h 20min

Backing Up Other Data

This podcast covers backing up data owned by others, including online photo albums and cloud documents. It also discusses European politicians' personal data exposure, Proton's transition to non-profit, Microsoft tracking sex toy purchases, online ID verification service breaches, Mac info-stealer via Google Ads, mail surveillance by law enforcement, ALPR vulnerabilities, UK hospital hack, Kaspersky software ban, Sonos data selling removal, and privacy-centric ad firm acquisition by Mozilla.

Get the Snipd
podcast app

Unlock the knowledge in podcasts with the podcast player of the future.
App store bannerPlay store banner

AI-powered
podcast player

Listen to all your favourite podcasts with AI-powered features

Discover
highlights

Listen to the best highlights from the podcasts you love and dive into the full episode

Save any
moment

Hear something you like? Tap your headphones to save it with AI-generated key takeaways

Share
& Export

Send highlights to Twitter, WhatsApp or export them to Notion, Readwise & more

AI-powered
podcast player

Listen to all your favourite podcasts with AI-powered features

Discover
highlights

Listen to the best highlights from the podcasts you love and dive into the full episode