Privacy Please

Send us a textWhat if managing your company's digital secrets could be as seamless as sending a Slack message? Join us as we converse with Brian Vallelunga, the innovative CEO and founder of Doppler, who reveals his journey from Uber to spearheading a game-changing solution for developers. We cover Brian’s intriguing path, including a rocky venture into the world of crypto machine learning, and a transformative moment in Mexico that highlighted the pressing need for efficient secrets management. Learn how a pivotal dinner conversation and inspiration from Slack's Stuart Butterfield catalyzed the creation of Doppler, making it an indispensable tool for developers around the globe.Why do so many companies fail to protect their most sensitive data? Brian and our hosts break down the alarming oversight of "secrets" like API keys and database URLs in data security. Hear a harrowing personal story of a scam that exploited breached data, gather practical tips on safeguarding your information and much more! Support the show

Send us a textEver wondered about the hidden privacy risks lurking in your everyday Wi-Fi connections? In this episode, Cameron and Gabe discuss the hidden risks of Wi-Fi based positioning systems. They highlight a paper by Eric Rye and David Levine that explores the privacy risks associated with these systems. The paper discusses case studies where sensitive information about troop movements and refugee migrations was revealed through these systems. The conversation emphasizes the need for a larger conversation about the widespread use of these systems and the potential privacy implications.Source: https://arxiv.org/abs/2405.14975Credit: https://www.linkedin.com/in/erik-rye/ & https://www.linkedin.com/in/dave-levin-658b2564/ Support the show

Send us a textShould AI have a role in the legislative chamber? Arizona State Representative Alexander Kolodin says "yes," leading to a groundbreaking law crafted by ChatGPT. I'm Cameron Ivey, and I’ll dissect the story behind this innovative bill addressing deepfakes in elections, made with AI assistance and causing ripples in the privacy community.This isn't just another political maneuver; it's a bold step toward a future where AI and lawmakers collaborate to shape regulations. Join me as we delve into the delicate balance of protecting free speech while curbing AI-generated misinformation. We'll explore Kolodin's approach, which includes measures for authenticating deepfakes through judicial channels, while also preserving the realms of comedy and satire.This legislation aims to control narratives and enhance the efficiency and effectiveness of AI-assisted lawmaking. Our discussion will transcend privacy, touching on the essence of truth in the digital age. Tune in, share your thoughts, and let's unpack this futuristic topic together. Love and privacy to all—Cameron Ivey  Support the show

Send us a textExplore the dark side of cyber threats as we unveil the terrifying impact of ransomware attacks on the healthcare sector. In a gripping discussion with Cameron Ivey and Gabe Gumbs, we uncover how healthcare institutions are targeted for their sensitive data, risking patient privacy and trust. Through real-life stories of ransom payments gone wrong and the looming threat of repeated attacks, we reveal the harsh reality: paying ransom is just the beginning of the nightmare.Drawing insights from the 2023 Verizon Data Breach Investigation Report, we highlight a disturbing trend where ransomware aims not just to steal data, but to cripple operations, leaving vital medical equipment useless and multiplying the risk of human error. We delve into the shortcomings of data backup strategies and debunk myths surrounding the security of SaaS platforms. Join us for this conversation to empower yourself with more insights to safeguard your organization's data and people against cyber threats. Support the show

Send us a textDiscover the intricate dance between technology and ethics as Jake Ottenwaelder, principal privacy engineer at Integrated Privacy LLC, takes us into the heart of fractional privacy engineering. Join us for a captivating journey where Jake, pivoting from cybersecurity to privacy engineering, decodes the complexities of modern data protection laws. He artfully bridges the gap between legal mandates and technical implementation, providing a lifeline to organizations navigating the treacherous waters of GDPR compliance and beyond. This episode is a beacon for anyone seeking clarity on the interplay between privacy, technology, and legal frameworks.As we navigate the subtle distinctions between security and privacy engineering, Jake imparts wisdom on the essence of an engineering mindset in privacy practices. He dissects the rich tapestry of privacy engineering, painting a landscape where ethical data stewardship takes center stage, and integrative privacy solutions redefine how companies interact with consumer data. For those in the security sector eyeing a shift to privacy, Jake offers a roadmap, underscoring process improvement and the potential of privacy automation to transform the industry landscape.We wrap up with a profound discussion on the broader implications of privacy engineering — from the ethical quandaries in AI to the pivotal role data privacy plays in national security. Jake sheds light on the convoluted challenges faced by organizations, such as data deletion and retention, and advocates for equitable privacy that transcends user sophistication. The episode concludes with a reflection on the future of data economy ownership amidst geopolitical shifts, a conversation that will resonate with anyone invested in the intersection of technology, privacy, and global affairs. Support the show

Exploring the issues beyond the TikTok ban: foreign influence, teen safety, and data privacy on social media. Emphasizing the need for comprehensive solutions for a safer digital future.

Send us a textRumor has it, in privacy, we discover how a damning federal report has exposed serious lapses in the tech titan's security armor, leaving businesses and individuals to question their trust in the cloud. As Microsoft faces a breach with Chinese fingerprints and a culture of shrugged shoulders towards security investments, we're unpacking what it all means for the future of enterprise safety. Buckle up as we explore the ramifications for Amazon Web Services and Google Cloud, who might just dance in the rain of Microsoft's storm.Listen in as we highlight the Cybersecurity Review Board's urgent call for action and how CEO Nadella is positioned to lead a revolution in Microsoft's approach to cybersecurity.  Support the show

Send us a textHold onto your hats because we're cracking open the American Privacy Rights Act – a piece of legislation that's causing quite the stir. Will it be the superhero the privacy community has been waiting for, or is it a wolf in sheep's clothing? We dissect the nitty-gritty from data minimization to opt-out rights and ponder the act's potential global ripple effects on data protection.  Support the show

Send us a textJoin us for a our new short Rumor Has It in Privacy.  As I walk you through the labyrinth of class action settlements that could put money back in your pocket. This episode is a treasure map, leading you to the X that marks the spot on significant payouts from big-name companies that might owe you more than just an apology. From Verizon's sneaky fees to Subaru's gear-grinding mishaps and the fiery engines of Kia and Hyundai, I'll be your guide on this solo expedition to reclaim what's yours. Support the show

Send us a textPrepare to have your mind expanded as we navigate the complex labyrinth of large language models and the cybersecurity threats they harbor. We dissect a groundbreaking paper that exposes how AI titans are susceptible to a slew of sophisticated cyber assaults, from prompt hacking to adversarial attacks and the less discussed but equally alarming issue of gradient exposure.As the conversation unfolds, we unravel the unnerving potential for these intelligent systems to inadvertently spill the beans on confidential training data, a privacy nightmare that transcends academic speculation and poses tangible security threats. Resources: https://arxiv.org/pdf/2402.00888.pdf Support the show