Firewalls Don't Stop Dragons Podcast

Today marks an incredible milestone for this podcast: 500 episodes! Not only is that a crazy long run for any podcast, but I’ve also been astonishingly consistent. I’ve managed to put out an episode of this show every single week for 500 straight weeks! Okay… I did miss one week 8 years ago… I’ll give you that story in today’s podcast. But as always for my &#822...

In the last week, many news organizations have breathlessly covered the “AI doomer” comments by a former Anthropic employee, who said that many of his colleagues were secretly worried about AI ending all of humanity – and that it could happen in just a few years. But to me, there are more pressing concerns with AI and so far we’ve not responded in useful ways. I have severa...

While we do have some state privacy laws in the US that require companies to allow you to opt out of data collection, these companies have devised clever ways to make these options very hard to find and/or very hard to choose in a clear and consistent manner. The Electronic Privacy Information Center (EPIC) has done a study on several such companies and the tricky ways they have obscured the mecha...

Probably the single most important device on your home network in terms of security is your Wi-Fi router. In most cases, it’s the only thing between all your networked devices and the Internet’s bad guys. It’s crucial that you’re using an updated (and update-able) device from a reputable maker. I’ll explain why it’s important and how to pick a good router. In ot...

Software apps today are a hodgepodge of libraries, software development kits, and third party code, all stitched together like Frankenstein’s monster. Furthermore, software developers use common tools to create and deploy this software. The bad guys have figured out that by compromising one of these third party components or the tools used to create the products, they can instantly infect hu...

As part of my celebration of the upcoming 500th podcast, I’m launching Phase 2 of my “cyber neighbor” campaign to both help as many people be more secure and private as possible, but to also learn from this experience so I can improve these campaigns in the future. In particular, as I write the 6th edition of my book, I’m funneling this feedback into improving those Tips, a...

It’s August, which means it’s time for Hacker Summer Camp once again! I flew out to a sweltering Las Vegas, Nevada, to attend two of the three major cybersecurity (“hacker”) conferences: BSides and DEF CON. I had an amazing week, spending time with new and old friends, meeting some of the people I’ve interviewed in person, lining up more podcast guests, and having won...

One of the most underrated uses for modern chatbots, in my estimation, is tech support. I don’t mean the chatbots offered by product websites, I mean using one of the “frontier” model bots to troubleshoot problems via chat conversations. They are extremely good at this – and they are infinitely patient and available 24/7. Today I’ll give you tips on how to try this fo...

With so many cyber threats to report on, it’s easy to get lost in the weeds. It’s good to take a step back and look at the big picture every so often. Today, I’ll review some of the top security and privacy threats with investigative cybersecurity journalist Zack Whittaker from Tech Crunch. We’ll talk about age verification, mercenary spyware, surveillance capitalism, criti...

Over the last 2-3 months, large software makers such as Microsoft have been releasing tons of fixes for vulnerabilities in their apps and operating systems. Did their software suddenly get a lot worse? No. They’re using the latest AI tools to find these bugs that humans missed and that have been lurking in their software for months or even years – and they’re fixing them. That&#8...

With modern AI tools, how do we know which images and videos are real and which ones are generated? Wouldn't it be helpful to have some digitally verifiable way to tell where something came from and whether it has been altered? Turns out, that technology already exists. It's open and free to use, and it's supported by many technology companies. I'll be digging into all the details of the Coalition...

It's time to start the official countdown to my 500th podcast episode! I've been publishing a podcast every single week for over nine years now, which is a rather amazing accomplishment (if I do say so myself). But the entire purpose of the podcast - as well as my book and my blog - has been to try to improve the security and privacy of as many people as possible. So to celebrate this momentous oc...

Our Constitutional rights were written without any concept of modern technology such as cell phones and the internet. Much of our privacy laws are still geared towards the pre-digital age. Even though the internet is many decades old now, the era of traveling with smartphones and laptops is still relatively new and the laws around privacy have not kept up. Today I’ll be speaking with Nathan...

With the 500th podcast and America’s 250th anniversary approaching, I’ve been doing a lot of thinking about how we can be better digital neighbors and digital citizens. We’re all in this together. Your security and privacy overlaps the security and privacy of many others. It’s important to improve our own situation, but we need to also realize that failing to do so can put...

Most of the chatbots in the news today are trained on public data (often including copyrighted data). But it doesn’t have to be that way. What if you had a chatbot that could access all of your personal or company data, but hosted locally so that all the data was secure and private? You could ask it all sorts of interesting questions about that data, run helpful reports, and tease out import...

In the final part of my series on downloading all of your historical emails from the cloud, we’ll make backups of your archive and make sure we store them in multiple places, following the 3-2-1 backup rule. I’ll also tell you about an interesting open source email archive project that you might find interesting. In the news: the FCC wants to kill burner phones; the WeedHack malware targets Minecr...

What would you do if you suddenly lost your bank account – and potentially access to all your funds? What about your credit cards? How long could your business stay afloat if you could no longer receive payments? Most of us take financial services for granted, but they can be taken away at any time – for almost any reason. And sometimes the reason is just that they don’t like you...

As part of my ongoing series on creating a full backup of all your old emails, we want to take some time to verify that we got everything okay. In today’s Tip of the Week, I’ll give you several pointers on how to go about doing this. In the last installment, we’ll make a couple backups and (optionally) delete everything from your email provider. In the news: AI firms want your fi...

When you’re working for your employer, no matter where you are, you’re on company time, using company equipment. Your employer has a responsibility to protect their assets – not just their equipment and facilities, but their data, as well. That gives employers several reasons to monitor you and any devices you might be using for work – including your mobile phone, potential...

In the next phase of withdrawing our email data from the cloud, we’re going to download a complete archive of every email we’ve ever sent. It’s not as easy as it should be, but it’s also not that difficult. I’ll give you an overview in today’s Tip of the Week, but you should read the full blog for detailed steps. In the news: Venmo finally makes transactions pri...

Cindy Cohn has been on the front lines, defending your digital rights, for three decades. With the Electronic Frontier Foundation (EFF), she has litigated several seminal legal cases that have directly impacted the lives of all Americans. As she retires from her role as Director of the EFF, she’s written a memoir about her time there and documents several of these legal fights called Privacy...

Probably the oldest online data you have – like, still have out there right now – is your emails. Did you have an AOL account? Or email through your internet service provider (ISP)? Statistically speaking, you probably have a Gmail, Yahoo Mail or Outlook (previously HotMail) account. Unless you explicitly closed those accounts or deleted those emails, they’re still there. Emails...

We have relied on prophets and seers for most of human history, largely because humans are obsessed with the future – specifically their own. But prophecy has often been used to determine or at least influence the future, not just predict it. In her new book, Prophecy, Carissa Véliz explains the power and perils of prediction, from the Oracle of Delphi to modern AI, giving us some much-neede...

Artificial Intelligence – in particular, Large Language Models (LLMs) or “chatbots” – are increasing in power at an astonishing pace. In fact, the latest models from Anthropic (Claude Mythos) and OpenAI (ChatGPT 5.4 Cyber) are so good at reading software code and finding vulnerabilities, that their makers have strictly limited initial access to manufacturers of the most pop...

There are all sorts of things that can be used to identify us online and in the real world, beyond our names, addresses, and phone numbers. But data brokers are desperate to tie all of these unique pieces of information together, building a valuable marketing dossier. It’s become a massive industry – being able to map one supposedly anonymous or pseudonymous piece of data to the a pers...