Firewalls Don't Stop Dragons Podcast

The gift-giving season is upon us and technology presents are always popular! But what you may not realize that the hackers and marketers out there are secretly hoping you’ll give your friends and family certain gifts, too! In this special holiday episode, I’ll tell you about some of the best and the worst holiday gifts and accessories, from a security and privacy viewpoint. Thinking about giving...

It’s been a rough week or so for Apple products, in particular their new Macintosh operating system version called High Sierra. A horrendous security bug was released last week that would let anyone have full, unfettered access to your computer - possible even remotely. That’s about as bad as it gets, folks. I’ll tell you all about it, including how to fix it once and for all. We’ll also talk abou...

In the era of mass surveillance, our communications are being hoovered up, searched and stored by both corporations and intelligence agencies, without a warrant and with almost zero transparency. While we should be fighting for our right to privacy, creating and amending laws is hard and can take years. Dr Andy Yen is the CEO of ProtonMail, a secure email service based in Switzerland. Today we dis...

In our next installment of the Castle Defense 101 series, I’ll help you to choose the web browser that will keep you safe and protect your privacy. We’ll talk about the big four (Safari, Internet Explorer, Firefox and Chrome) as well as some others you’ve never heard of. I walk you through the things you need to consider when comparing these browsers and explain why the choice can be tricky. In th...

The law that enables the warrantless collection and searching of the communications of US citizens is set to expire at the end of 2017. In today’s show, David Ruiz and I discuss several bills in Congress that attempt to curb the rampant abuses of this legislation (Section 702 of the FISA law). These long-overdue reforms go a long way towards restoring the principles of the Fourth Amendment and rec...

We have a lot to catch up on! This week we discuss a Bad Rabbit, a grim Reaper, and some risky Russians. A new WannaCry-like ransomware is hitting Russia and Ukraine, Kaspersky Labs is dealing with a PR nightmare, and a new botnet is forming up that could make last year’s Mirai botnet that took down Netflix, Twitter and AirBND look like small potatoes. We also have some hopeful Android news and di...

Web ads are the bane of our web-surfing existence, and yet people repeatedly reject the notion of paying for web content. How do we strike a balance? Today I speak at length with Ben Williams from Eyeo, the maker of one of the most popular web browser plugins of all time: AdBlock Plus. His company pioneered the notion of ‘acceptable ads’ and has returned some semblance of sanity to our web browsin...

In the second of my two-part interview with activist and author Cory Doctorow, we discuss how copy protection schemes (called “Digital Rights Management”) is trying to control how you watch, save, and share the digital movies, books and music you thought you owned. Cory explains how the World Wide Web Consortium (W3C) has caved into corporate interests and set the stage for serious future security...

In the first of a two-part interview, activist and author Cory Doctorow explains how copyright law has failed to keep up with the realities of the modern digital world, potentially exposing consumers and researchers to crushing lawsuits and generally stifling innovation. Unlike physical books and LP records, every song or movie you stream, every eBook you read, every app you download is accompanie...

Just because you’re not paranoid doesn’t mean they’re not tracking you! And just because you feel that you have nothing to hide doesn’t mean you shouldn’t be worried about privacy. In today’s edition of my Castle Defense 101 series, I spell out why privacy matters and why companies and governments are hell bent on violating it. I’ll also explain the myriad ways by which your web habits are tracked...

Will the robots rise up and take over? Or will Artificial Intelligence usher in a Utopian future? These concepts may have seemed like science fiction just 10-20 years ago, but visionaries like Elon Musk are warning us to take the notion of true AI very seriously. Like any powerful tool, the impact of AI will depend on how we develop and use it. In this week’s episode, I discuss the good, the bad a...

Equifax, one of the three major credit bureaus, was hacked - over 143 million U.S. accounts may have been leaked, making them much more vulnerable to identity theft and fraud. In this episode, I help you understand the potential impacts of this breach and give you several important actions you can take to protect yourself, including instituting a credit freeze on your account. Chris Romeo, CEO and...

Do you have backup copies of all your family photos and home videos? What about your tax documents and other financial data? Maybe you have a collection of priceless family history information that you’ve painstakingly compiled over many years. Unless you’re keeping copies of those files in multiple places (including at least one place outside your home!), you’re flying without a net. You’re one m...

There are bills before Congress to use drones along our border for mass surveillance and provisions to capturing all manner of biometric data when you travel. How will that data be used and who will have access? We break it all down for you and tell you how to voice your opinions. India McKinney and Adam Schwartz from the EFF are with me this week to explain several ways that your privacy rights a...

Jeffrey Ritter, author of “Achieving Digital Trust”, is back to help us understand the phenomenon of “fake news” and to explain why it’s not a new thing. We talk about how deception and misdirection have been around since the dawn of marketing and how we can train ourselves to navigate these treacherous waters in the Information Age. Google is claiming they can match your offline, real-world purch...

Chris Romeo regales us with tales of safe-cracking robots, demonic car washes, possessed Teslas, and hacking of voting machines! Where did this all happen? At the hacker conferences, of course! We’ll help you understand how hackers really think and what they really do every year in Las Vegas at the DEFCON and BlackHat conferences. Chris Romeo is CEO and co-founder of Security Journey. His passion...

In this final segment, we address the classic conundrum: law enforcement believes that your servers hold key information that would prevent a devastating terror attack, but revealing the information may violate the privacy of the client, or even other unrelated people. What do you do? Ladar Levison answers that very question. Prior to the interview, I explain what "secure email" really means and w...

Ladar Levison is the CEO and Founder of Lavabit - a secure email service whose most famous customer was Edward Snowden. In part one of my two-part interview with Ladar, we discuss what happened when the FBI came knocking on his door, demanding access to his private security keys. Ladar shares some deep insights into the notion of privacy and intelligence gathering in this country, and how to strik...

Is trust just an emotion or is it more than that? In this week’s episode, I speak at length with Jeffrey Ritter: a lawyer, diplomat, researcher and author of the book “Achieving Digital Trust”. We get to the heart of what it means to trust, how trust is gained and lost, and how living in the Information Age has had such a profound impact on all of the above. Jeffrey has some deep insights on how w...

What could be more crucial to a democracy than a voting system we can trust? Today I speak with Barbara Simons, President of VerifiedVoting.org, on why so many of our US election systems are vulnerable to hacking without leaving a trace. The solutions to these issues are well known and straightforward, and yet we can’t seem to come together in a unified way to implement them. We’ll discuss why the...

Passwords are the bane of our modern existence. Why the hell haven’t we figured out a better way to prove who we are? Today is the first in a series of educational shows that I’ve dubbed Castle Defense 101: Defending Your Digital Drawbridge. In our inaugural session, we’ll take a deep dive into the problem of passwords. What really makes a good password and how do I choose one? How can I possibly...

Lawrence Abrams is the creator and CEO of Bleeping Computer, and he and I delve into the latest malware sweeping the globe called NotPetya (among other things). The supposed ransomware appears to be just plain mean, destroying all the data on your hard drive whether you pay the ransom or not. We’ll tell you what you need to know, including how to protect yourself and what to do if you think you mi...

Are you ready for the next YouTube, Netflix or Hulu? Then you need to fight to save net neutrality. Today I discuss the threatened gutting of the hard-fought net neutrality rules with Ernesto Falcon from the Electronic Frontier Foundation. The new FCC chairman, Ajit Pai, is looking to undo the protections put into place that would allow the next Internet startup to compete on a level playing field...

If you use public WiFi of any sort at the hotel, airport, or coffee shop (AND WHO DOESN'T), then you need to pay attention. A VPN could be a viable answer to protect your data and your devices. The other big challenge is your Internet Service Provider at home is probably capturing and selling your web browsing info - there is something you can do at home to protect yourself as well. Dave Peck help...

The Internet of Things will soon include cars... what could possibly go wrong? If all the cars on the road could tell each other what they were doing, would that make us safer? Maybe. But if your car is constantly broadcasting this information, that would also make it trivial to track you everywhere you go. Worse yet, any time you put something on a network, it is immediately a target for hackers....