Firewalls Don't Stop Dragons Podcast

What do Apple, Tyson Foods and Worldwide Wrestling (WWE) all have in common? And what is “chickenization”? In part 2 of my interview with Cory Doctorow, he explains how some markets in the US economy are completely distorted by dominant sellers as well as dominant buyers. Seeing all of these specific markets as facets of a single economic problem, we can find common cause and perhaps a...

Apple and Epic Games are locked in an epic legal (and PR) battle that may determine the future of the App Store, the Google Play Store, and several other game distribution networks. At the heart of this debate is the disproportionate influence the app store owner has over the apps in their store, including demanding a hefty cut of the app maker’s profits. How did we get to this place? How do...

If you’re a Windows PC user, you know the term “bloatware”, or maybe “crapware”. Every consumer PC comes chock full of it. Free trials of games, cloud storage services and antivirus software. Half a dozen “helper” apps from the PC manufacturer. Pre-installed calling, chat, and shopping services. It’s a mess. But they’re not just annoying. They...

Enterprising scammers have found some very clever ways to trick you into believing your computer needs fixing, when in reality it’s just fine. Using various techniques, fake web pop-up alerts can cause your browser or computer to seem sluggish or malfunctioning. And then you get a helpful pop-up alerting you of a serious problem and offering to help you fix it – for a fee. I’ll t...

Did you know that Google’s search can track you on a non-Chrome browser, even if you block third party cookies? And did you also know that there’s a gaping privacy hole in web surfing that even a VPN may not fix? Is it possible to defeat browser fingerprinting? In the second half of my interview with Mozilla’s Chief Security Officer Marshall Erwin, we’ll answer these questi...

If you really care about online privacy, you can’t use Google’s Chrome browser. Google is an advertising company. Everything else they do is in support of that core business. If you want a secure, fast browser that is actually focused on protecting your privacy, you want to be using Mozilla’s Firefox browser. Today I’ll be speaking with Mozilla’s Chief Security Office...

Epic – the maker of the massively popular game Fortnite – has thrown down the proverbial gauntlet. It has decided that it no longer wishes to cut Apple in for 30% of its profits… Which is exactly what all app developers do – and have explicitly and contractually agreed to do – in return for using Apple’s platform, tools, software development kits, and security t...

Can Facebook or Google really promise to keep your data private in this era of mass surveillance by the likes of the NSA and GCHQ? Max Schrems doesn’t think so, and he’s convinced the EU Court of Justice of the same thing. There’s no way to protect user data when intelligence agencies are hoovering up all our communications and storing them on massive server farms forever. In par...

What good are privacy laws when we all know that intelligence agencies don’t play by the rules? How can any company promise to keep our data safe when we know that agencies like the NSA and GCHQ are hoovering it all up? That’s the essential argument behind the Max Schrems cases at the European Court of Justice. And the EU court agrees. In part 1 of my interview with EFF’s Danny O...

When most people think of protecting their computers, they think of antivirus software. Viruses are a real problem, of course, but how well do antivirus (AV) apps protect you? And are there any downsides to using AV software? Turns out there are plenty – so many that the cons probably outweigh the pros for most people, on Apple Mac or on Windows PC. Don’t believe me? Listen to this sho...

Last week, Twitter was massively hacked – apparently just to launch a Bitcoin scam (though that story is still developing). Famous people’s accounts were taken over, including Joe Biden, Barack Obama, Bill Gates, Elon Musk and several popular brand name accounts. (President Trump’s account was not taken over due to enhanced security measures.) But beyond the details of the hack,...

In the second part of my interview with Renee Dudley from ProPublica, we delve into the cyber insurance and ransomware incident response industries, including how some of these companies are being less than forthcoming about their services. In fact, it appears that several “incident response” companies are simply paying the ransom and then charging companies a fee on top of that. We&#8...

Unless you’ve been living under a rock, you know that ransomware is one of the most common and most lucrative cybersecurity rackets today. But despite all the press, ransomware is massively under -reported because companies don’t want bad press. And in most cases, unless it can be proven that data was actually stolen, companies are under no legal obligation to inform the data subjects...

TikTok is the hot new social media service (Snapchat and Instragram are so last year), particularly in Asian countries like India. But India just banned this and several other apps from China over privacy concerns – and I have a feeling they won’t be the last. The TikTok app was just revealed to be copying the user’s clipboard contents every few seconds for some completely unknow...

In the second half of my interview with Eduard Goodman and Adam Levin from Cyberscout, we discuss the privacy aspects of our new work- and learn-from-home reality. How much privacy should you really expect? What are your legal rights? What should we beware of when using a single device for both work and personal things? How much should companies be willing to spend to make sure their employees and...

Today I speak with not one but two experts on security and privacy to get their insights, stories and tips on staying safe from scammers and hackers in our new COVID19 pandemic reality. These guys have dealing with cyber incidents every day and bring some unique perspectives. In some ways, it’s same stuff, different day; but the pandemic, economy woes and general civil unrest have given the...

With the US general election just over 20 weeks away and no vaccine in sight for the coronavirus, it’s time to think very seriously about how you’re going to vote. Even if you think you want to vote in person this November, you should have a backup plan: voting by mail. This means that you’ll need to register for an absentee ballot – and the sooner you do so, the better pre...

We’ve established that we have a high speed internet access problem – now what can we do about it? In part 2 of my interview with the EFF’s Ernesto Falcon, we’ll talk about how broadband fiber-based internet is a critical piece of national infrastructure, not unlike the highway system. It enables and supports industry and innovation, and ubiquitous access would greatly incr...

The COVID-19 era has exposed several weaknesses in American infrastructure and exacerbated the gulf between the haves and the have-nots. Perhaps nowhere is this more evident than the digital divide: access to high speed internet. While much of the country was able to work and learn from home, for too many communities this was simply not an option due to poor or non-existent broadband access. In to...

The FBI is once again trash-talking Apple for not helping them in their investigation of a terrorist – this time, the alleged perpetrator of the Pensacola shooting. However, like the San Bernardino shooting a few years ago, Apple has actually done everything in its power to aid law enforcement. The issue is the “in its power” part. The FBI and DOJ would prefer that Apple (and the...

Intel created the Thunderbolt protocol to give us blazingly fast data transfer and other interesting features. Thunderbolt usually comes with the newer USB-C ports, common on laptops, especially Macbooks. Unfortunately, researchers have found a major flaw affecting all computers that will allow bad guys to gain access to your computer in just a few minutes with a few hundred dollars of common equi...

In part two of my interview with Malwarebyte’s David Ruiz, he tells us how to avoid the scams we discussed last week. And then we move on to discuss the potentially serious privacy issues that could come from the emerging surveillance regimes, designed to help us curb the spread of the coronavirus. David Ruiz is a content writer for Malwarebytes, covering online privacy, cybersecurity, and t...

In times of great fear and anxiety, we need to be especially vigilant against snail oil salesmen. Never letting a good crisis go to waste, the bad guys are capitalizing on the chaos to lure us into downloading malware and buying fraudulent (or even harmful) advice and products. In part one of my interview with Malwarebyte’s David Ruiz, we talk about the explosion of COVID-19-related phishing...

Every time there’s a data breach at a company or service where you do business, there’s a chance that the bad guys will reverse engineer your password. And once they do that, they will almost surely try to use that email and password combination to log into dozens of other sites – a hacking technique called credential stuffing . And why do they do this? Because they know most peo...

The bad guys are having a field day with all the coronavirus hubbub, using our fears and anxieties to trick us into clicking bad links, downloading infected files, or installing malware. While the topic is new, the techniques are the same: phishing. Using cleverly disguised emails and text messages, bad guys trick us into giving up credit card and social security numbers, login credentials, and ot...