Firewalls Don't Stop Dragons Podcast

Nate Bartram and Jonah Aragon have been advocating for privacy for a long time. Their sites, The New Oil and Privacy Guides, have a ton of fabulous resources for anyone interested in guarding their data and defending their digital rights. Ever wonder what it's like being a privacy advocate in an increasingly privacy-hostile world? Today, I'll take you behind the scenes of these sites and into the brains of two top-notch privacy warriors.

Interview Notes

Privacy Guides: https://www.privacyguides.org/ 

The New Oil: https://thenewoil.org/ 

Critical Thinking 101: https://ghost.thenewoil.org/critical-thinking-101/

This Week in Privacy podcast: https://podcasts.apple.com/us/podcast/this-week-in-privacy/id1726826455 

Privacy Advocate Toolbox: https://www.privacyguides.org/en/activism/ 

Smartphone privacy guides: https://www.privacyguides.org/videos/2026/02/04/smartphone-security-course-lesson-1-beginners-2/ 

Further Info

My book: https://fdsd.me/book 

My newsletter: https://fdsd.me/newsletter 

Support the mission: https://fdsd.me/support 

Give the gift of privacy and security: https://fdsd.me/coupons 

Get your Firewalls Don’t Stop Dragons Merch! https://fdsd.me/merch 

Table of Contents

0:00:18: Intro

0:02:11: Why did you get into privacy?

0:07:44: What's the most enduring privacy myth?

0:14:13: Do you find people dislike the answer "it depends"?

0:16:50: How would you describe your target audience?

0:22:00: How do you evaluate privacy products?

0:27:59: What products have you unrecommended and why?

0:34:27: What are major privacy red flags?

0:43:09: What product do you use that you do not recommend to others?

0:48:05: How will you handle age checks or repeal of Section 230?

0:55:09: Who do you look to for privacy advice?

1:04:22: What's next for you guys?

1:08:30: Wrap-up

1:10:46: Patron podcast preview

1:11:24: Looking ahead

When we think about improving security and privacy, we tend to add things: password managers, VPNs, encrypted communication apps. But one of the most effective ways to protect yourself is much simpler: remove what you don’t need. Safety through subtraction. Every app you install exposes you to more data collection and security vulnerabilities. Over time, these apps can automatically update, collecting more data and adding new exploitable features. And with the current global unrest, the risk of attacks is greater than normal. I'll give you several top tips for reducing your attack surface.

Article Links

Check Your Asus Router for Malware ASAP: https://lifehacker.com/tech/check-asus-router-for-malware

Instagram drops end-to-end encrypted chats: https://proton.me/blog/instagram-end-to-end-encryption

Viral 'Quittr' Porn Addiction App Exposed the Masturbation Habits of Hundreds of Thousands of Users: https://www.404media.co/viral-quittr-porn-addiction-app-exposed-the-masturbation-habits-of-hundreds-of-thousands-of-users/

Papers, please: Age verification laws threaten everyone's online security and privacy: https://this.weekinsecurity.com/papers-please-age-verification-laws-threaten-everyones-online-security-and-privacy/

Federal Surveillance Tech Becomes Mandatory in New Cars by 2027: https://www.gadgetreview.com/federal-surveillance-tech-becomes-mandatory-in-new-cars-by-2027

Cyberattack on vehicle breathalyzer company leaves drivers stranded across the US: https://techcrunch.com/2026/03/20/cyberattack-on-vehicle-breathalyzer-company-leaves-drivers-stranded-across-the-us/

Large-Scale Online Deanonymization with LLMs: https://simonlermen.substack.com/p/large-scale-online-deanonymization

EU votes to restrict mass scanning of people’s private messages: https://cyberinsider.com/eu-votes-to-restrict-mass-scanning-of-peoples-private-messages/

Mozilla to launch free built-in VPN in upcoming Firefox 149: https://cyberinsider.com/mozilla-to-launch-free-built-in-vpn-in-upcoming-firefox-149/

You Should Turn On This New Security Update Feature on Your iPhone and Mac: https://lifehacker.com/tech/apples-security-update-iphone-mac-setting

Tip of the Week: https://firewallsdontstopdragons.com/spring-cleaning/ 

Further Info

Greynoise IP Check: https://check.labs.greynoise.io/ 

Joint statement on age verification laws: https://csa-scientist-open-letter.org/ageverif-Feb2026 

CISA Cyber Hygiene Service: https://www.cisa.gov/cyber-hygiene-services 

CISA Bad Practices: https://www.cisa.gov/stopransomware/bad-practices 

My book: https://fdsd.me/book 

My newsletter: https://fdsd.me/newsletter 

Support our mission! https://fdsd.me/support 

Give the gift of privacy and security: https://fdsd.me/coupons 

Get your Firewalls Don’t Stop Dragons Merch! https://fdsd.me/merch 

Table of Contents

0:00:07: Intro

0:01:35: News rundown

0:03:41: Update your Asus routers

0:08:55: Instragram drops E2EE

0:12:57: Porn addiction app exposed user data

0:19:54: Dangers of age verification laws

0:30:45: Car surveillance mandatory in 2027

0:35:46: Cyberattack kills breathalizer-equipped cars

0:39:41: LLMs can deanonymize users

0:51:11: Chat Control defeated!

0:55:22: Firefox free VPN coming

0:59:05: New Apple security fix mechanism

1:03:14: Tip of the Week

1:09:09: More security tips

1:13:53: Patron podcast preview

1:14:17: Looking ahead

When you shop online or through an app, do you ever wonder if you're being charged the same as someone else for the same thing? Even controlling for things like shipping address and local taxes, it turns out that today it's not uncommon for pricing to dynamically change based on factors that may not seem fair. This is called surveillance pricing. Justin Brookman (Consumer Reports) and Eric Gardner (More Perfect Union) recently performed a study on this practice using Instacart, and the results were eye-opening.

Interview Notes

Surveillance pricing study: https://www.consumerreports.org/money/questionable-business-practices/instacart-ai-pricing-experiment-inflating-grocery-bills-a1142182490/ 

Study video (Instagram): https://www.instagram.com/reels/DSC1w_Hjng6/ 

Study video (YouTube): https://www.youtube.com/watch?v=osxr7xSxsGo 

Consumer Reports: https://www.consumerreports.org/ 

More Perfect Union: https://perfectunion.us/ 

Get involved: https://action.consumerreports.org/ 

Instacart’s AI-Enabled Pricing Experiments May Be Inflating Your Grocery Bill: https://www.consumerreports.org/money/questionable-business-practices/instacart-ai-pricing-experiment-inflating-grocery-bills-a1142182490/ 

Pepsi/Walmart exposé: https://ilsr.org/article/independent-business/more-perfect-union-pepsi-walmart/ 

Amazon price tracker: https://camelcamelcamel.com/ 

Further Info

My book: https://fdsd.me/book 

My newsletter: https://fdsd.me/newsletter 

Support the mission: https://fdsd.me/support 

Give the gift of privacy and security: https://fdsd.me/coupons 

Get your Firewalls Don’t Stop Dragons Merch! https://fdsd.me/merch 

Table of Contents

0:00:13: Intro

0:02:44: What's your background?

0:04:26: What triggered this study?

0:06:08: How did you test this theory?

0:09:25: How prevalent is this practice?

0:11:27: What is a "customer surplus"?

0:13:44: Did the pandemic exacerbate this?

0:15:08: Is this practice legal?

0:21:42: How do ESL's work?

0:25:52: Are all the add-on fees legit?

0:28:01: Are the stores participating in this, too?

0:32:01: What do they learn from loyalty programs?

0:37:38: Are digital coupons dynamic, too?

0:41:07: Does this amount to price fixing?

0:44:21: What's been the reaction to your report?

0:49:00: What will you study next?

0:53:04: What can we do about this?

0:58:39: How can we support your work?

1:00:39: Wrap-up

1:03:27: Patron podcast preview

Bad guys have found a willing accomplice for installing malware: YOU. This very effective malware delivery mechanism, dubbed ClickFix, accounted for over half of all infections last year. I’ll tell you how to avoid it, but also explain why you shouldn’t have to.

In other news: Amazon's change to wishlists may expose your address; a new government-grade iOS exploit kit is spreading to criminals; Israel hacked traffic cams to kill Iran's leaders; Meta's AI glasses are a privacy nightmare; new AirSnitch WiFi exploit is clever, but not a threat for most people; Microsoft Office bug allowed AI to read confidential emails; Discord walks back it's plans for age verification; US Senators reintroduce surveillance transparency bill; CA privacy activists call for removing license plate readers; Ente releases new Locker app; Privacy Guides releases wonderful new privacy resource.

Article Links

Amazon Change Means Wishlists Might Expose Your Address https://www.404media.co/amazon-wishlist-address-private-third-party/

Google and iVerify reveal government-grade iPhone exploit kit spreading to hackers https://9to5mac.com/2026/03/03/google-and-iverify-reveal-government-grade-iphone-exploit-kit-spreading-to-hackers/

Israel hacked Tehran's traffic cameras, used AI to plan Khamenei's assassination https://www.yahoo.com/news/articles/israel-hacked-tehrans-traffic-cameras-063114828.html

What Privacy? As Expected Meta Ray Bans Are A Privacy Disaster https://appleinsider.com/articles/26/03/03/what-privacy-as-expected-meta-ray-bans-are-a-privacy-disaster

New AirSnitch attack bypasses Wi-Fi encryption in homes, offices, and enterprises https://arstechnica.com/security/2026/02/new-airsnitch-attack-breaks-wi-fi-encryption-in-homes-offices-and-enterprises/

Microsoft says Office bug exposed customers' confidential emails to Copilot AI https://techcrunch.com/2026/02/18/microsoft-says-office-bug-exposed-customers-confidential-emails-to-copilot-ai/

Discord just canceled its planned age verification rollout, for now https://9to5mac.com/2026/02/24/discord-just-canceled-its-planned-age-verification-rollout-for-now/

Senators Reintroduce Bill to Create Transparency for Court-Ordered Surveillance https://www.wyden.senate.gov/news/press-releases/wyden-daines-booker-and-lee-reintroduce-bill-to-create-transparency-for-court-ordered-surveillance

Privacy activists call on California to remove covert license plate readers https://apnews.com/article/license-plate-readers-surveillance-ice-dhs-db848b1498c55f3c1b3ee1a107dacd10

Ente Locker - Safe space for your most important documents https://ente.io/locker/

Guides and Tools for Privacy Activists https://www.privacyguides.org/en/activism/

Tip of the Week: https://firewallsdontstopdragons.com/fixing-clickfix/ 

Further Info

My book: https://fdsd.me/book 

My newsletter: https://fdsd.me/newsletter 

Support our mission! https://fdsd.me/support 

Give the gift of privacy and security: https://fdsd.me/coupons 

Get your Firewalls Don’t Stop Dragons Merch! https://fdsd.me/merch 

Table of Contents

0:00:08: Intro

0:01:54: News rundown

0:03:36: Amazon wishlist change exposes your address

0:08:44: New iOS exploit kit leaks

0:14:21: Israel hacked traffic cams to kill Khamenei

0:17:19: Meta's AI glasses privacy nightmware

0:22:32: AirSnitch WiFi attack

0:26:31: Microsoft AI bug exposes private emails

0:29:35: Discord backtracks on age verification

0:34:38: Senators reintroduce surveillance transparency bill

0:39:15: Call to remove hidden surveillance cameras

0:44:44: Ente Locker

0:47:51: Privacy Activist Toolbox

0:51:53: Tip of the Week

1:00:36: Patron podcast preview

1:02:15: Looking ahead

Cellular providers need to know your location in order to deliver calls and text message to your phone. But it turns out that they really don't need to know who you are to give you that service. They only need to know how to bill you - and that information can be at little as knowing your ZIP+4 code. Why do we give so much personal information to our mobile service providers when we don't have to? Today, Nick Merrill, founder of Phreeli, will explain how he can give you top notch cell service and know almost nothing about you.

Interview Notes

Phreeli: https://www.phreeli.com/ 

Double Blind Armadillo: https://www.phreeli.com/files/PhreeliDoubleBlindArmadilloWhitePaper.pdf 

Wired article: https://www.wired.com/story/new-anonymous-phone-carrier-sign-up-with-nothing-but-a-zip-code/ 

Call Detail Record: https://en.wikipedia.org/wiki/Call_detail_record 

2600 Magazine: https://www.2600.com/ 

Zero-Knowledge Proofs: https://firewallsdontstopdragons.com/how-zero-knowledge-proofs-work/ 

Further Info

My book: https://fdsd.me/book 

My newsletter: https://fdsd.me/newsletter 

Support the mission: https://fdsd.me/support 

Give the gift of privacy and security: https://fdsd.me/coupons 

Get your Firewalls Don’t Stop Dragons Merch! https://fdsd.me/merch 

Table of Contents

0:00:12: Intro

0:02:25: Zero Knowledge Proofs!

0:03:35: Lingo

0:07:29: How did you come to found Phreeli?

0:15:08: Who is your target audience?

0:19:18: How can you get by with just ZIP+4?

0:24:10: Is Phreeli more private, say, Mint?

0:28:33: How do I recover my Phreeli acccount?

0:30:22: What identifiers are tied to cell phones?

0:37:12: Can Phreeli work law requires KYC?

0:41:09: How do you separate billing from service?

0:47:23: How can a cellular provider hide a user's location?

0:51:44: Do telecom networks have inherent privacy problems?

0:55:30: How do you handle lawful intercept?

0:59:13: How do you convince the skeptics?

1:02:19: What's the current feature roadmap?

1:04:19: Wrap-up

1:08:59: Patron podcast preview

1:10:35: Looking ahead

In my seemingly never-ending quest to replace all things Google, I've finally found some solid, private alternatives to Google Sheets and Google Forms. And we'll also talk about how the EU is looking to create competing products to reduce their dependence on Big Tech from Silicon Valley.

In the news: Australian drivers' info exposed in breach; school admissions website leaked student data; Discord is rolling out age verification; more countries move to ban social media for kids; Big Tech companies volunteer data to DHS on anti-ICE users; Meta wanted to sneak out facial recognition; researchers find tricky bugs in password managers; DJI robovacs were wide open on the internet; Ring's mass surveillance efforts garner blow back; Russia blocks WhatsApp and Telegram.

Article Links

More than 200,000 Australian drivers exposed in massive data breach https://www.drive.com.au/news/over-200000-driver-licences-hacked-in-massive-data-breach/

Bug in student admissions website exposed children's personal information https://techcrunch.com/2026/02/19/bug-in-student-admissions-website-exposed-childrens-personal-information/

Discord will require a face scan or ID for full access next month https://www.theverge.com/tech/875309/discord-age-verification-global-roll-out

These are the countries moving to ban social media for children https://techcrunch.com/2026/02/17/social-media-ban-children-countries-list/

Reddit, Meta, and Google Voluntarily Gave DHS Info of Anti-ICE Users https://gizmodo.com/reddit-meta-and-google-voluntarily-gave-dhs-info-of-anti-ice-users-report-says-2000722279

Meta reportedly wants to add face recognition to smart glasses while privacy advocates are distracted https://www.theverge.com/tech/878725/meta-facial-recognition-smart-glasses-name-tag-privacy-advoates

Password managers less secure than promised https://ethz.ch/en/news-and-events/eth-news/news/2026/02/password-managers-less-secure-than-promised.html

The DJI Romo robovac had security so poor, this man remotely accessed thousands of them https://www.theverge.com/tech/879088/dji-romo-hack-vulnerability-remote-control-camera-access-mqtt

With Ring, American Consumers Built a Surveillance Dragnet https://www.404media.co/with-ring-american-consumers-built-a-surveillance-dragnet/

WhatsApp and Telegram blocked in Russia, Meta 'extremist organization' https://9to5mac.com/2026/02/12/whatsapp-and-telegram-blocked-in-russia-as-meta-designated-an-extremist-organization/

Europe is ready to ditch US tech for private alternatives https://proton.me/blog/european-alternative-us-tech-survey

Tip of the Week: https://firewallsdontstopdragons.com/de-google-my-life-part-5/ 

Further Info

Avoid tax scams: https://firewallsdontstopdragons.com/its-tax-scam-time/ 

Try Mastodon! https://firewallsdontstopdragons.com/how-to-move-to-mastodon/  

Proton referral link: https://pr.tn/ref/ZMNG3DNK 

My book: https://fdsd.me/book 

My newsletter: https://fdsd.me/newsletter 

Support our mission! https://fdsd.me/support 

Give the gift of privacy and security: https://fdsd.me/coupons 

Get your Firewalls Don’t Stop Dragons Merch! https://fdsd.me/merch 

Table of Contents

0:00:07: Intro

0:01:54: News rundown

0:04:27: 200k+ Australian drivers' data exposed

0:08:08: Aadmissions site exposed children's info

0:12:44: Discord to implement age checks

0:23:50: Countries looking to ban social media for kids

0:29:40: Meta, Google Gave DHS Info of Anti-ICE Users

0:32:37: Meta wants to add face recognition while privacy advocates are distracted

0:37:10: Password manager bugs fixed

0:39:57: DJI robovacs security flaw fixed

0:45:43: Ring's new Search Party feature

0:56:36: Russia blocks Telegram, WhatsApp

0:59:15: Europe is ready to ditch US tech

1:04:26: Tip of the Week

1:08:07: Proton referral

1:08:50: Patron podcast preview

1:09:20: Looking ahead

Today I speak with Yahoo CISO Sean Zadig - aka, the Chief Paranoid. Sean has had a long and varied career in cybersecurity, working both in law enforcement (at NASA!) and working security for Big Tech. I'll ask Sean how we can teach our kids about cybersecurity, and how to protect them from the worst of the internet without compromising anyone's privacy. I'll also get his perspective on the relationship between Big Tech, user data, law enforcement and the Fourth Amendment.

Interview Notes

The Paranoids (Yahoo): https://www.yahooinc.com/our-technology/paranoids 

Suddenly a CISO: https://www.yahooinc.com/paranoids/suddenly-a-ciso-four-pieces-of-transitional-advice 

Clipper Chip: https://en.wikipedia.org/wiki/Clipper_chip 

Further Info

My book: https://fdsd.me/book 

My newsletter: https://fdsd.me/newsletter 

Support the mission: https://fdsd.me/support 

Give the gift of privacy and security: https://fdsd.me/coupons 

Get your Firewalls Don’t Stop Dragons Merch! https://fdsd.me/merch 

Table of Contents

0:00:13: Intro

0:01:20: Lingo

0:02:06: How did you become CISO at Yahoo?

0:05:38: Has AI made you job harder?

0:08:54: What the Paranoid ethos?

0:11:49: What a kids taught about cybersecurity?

0:14:05: How do we interest kids in cybersecurity?

0:17:35: How do we get kids to care about privacy?

0:21:42: Can we verify age privately?

0:25:06: Should parents control content restrictions?

0:28:36: Are kids echewing tech today?

0:31:51: How do we combat CSAM?

0:40:31: What's it like working in law enforement?

0:47:14: Can we get Big Tech to collect less private data?

0:52:19: Is law enforcement skirting the 4th Amendment?

0:58:14: What's next for The Paranoids?

1:00:01: Wrap-up

1:00:12: Patron podcast preview

1:01:10: Survey highlights

1:05:40: 2026 Milestones

1:06:49: Looking ahead

The latest craze with artificial intelligence is agentic AI - exhibited most recently in the viral AI project called ClawdBot... or Moltbot... or OpenClaw. (The name has changed two times in less than a week.) You download this software, give it access to your AI chatbot accounts, and then give it full and complete access to your computer and online accounts. Why? So you can have an all-powerful assistant who can do real things in the real world as if they were you! What could go wrong?

In other news: a new lawsuit claims Meta can read all your WhatsApp messages; an AI toy exposed chat transcripts of their toddler owners; another AI app leaks millions of private conversations; TikTok's new terms of service are very scary; the US wants visitors to fork over tons of personal info; UK officials were hit by Volt Typhoon; the UK wants to increase facial recognition in public places; the FBI failed to unlock journalist's iPhone with Lockdown Mode enabled; Google adds cool anti-theft features; CA town disables Flock cameras; Google cripples home proxy network; and Firefox adds one toggle to disable AI features.

Article Links

WhatsApp Encryption, a Lawsuit, and a Lot of Noise https://blog.cryptographyengineering.com/2026/02/02/whatsapp-encryption-a-lawsuit-and-a-lot-of-noise/

An AI Toy Exposed 50,000 Logs of Its Chats With Kids to Anyone With a Gmail Account https://www.wired.com/story/an-ai-toy-exposed-50000-logs-of-its-chats-with-kids-to-anyone-with-a-gmail-account/

Massive AI Chat App Leaked Millions of Users Private Conversations https://www.404media.co/massive-ai-chat-app-leaked-millions-of-users-private-conversations/

TikTok's New Terms of Service Has Raised Alarm Bells https://lifehacker.com/tech/tiktoks-new-ownership-tos-concerns

The Trump Administration wants your DNA and social media https://www.privacyinternational.org/news-analysis/5713/trump-administration-wants-your-dna-and-social-media

Hackers suspected of spying on UK officials' calls for years https://www.theregister.com/2026/01/27/chinalinked_hackers_accused_of_yearslong/

Police to get 40 new live facial recognition vans and AI help in sweeping reforms https://news.sky.com/story/facial-recognition-technology-to-be-rolled-out-nationally-and-police-will-get-ai-support-13499172

FBI Couldn’t Get into WaPo Reporter’s iPhone Because It Had Lockdown Mode Enabled https://www.404media.co/fbi-couldnt-get-into-wapo-reporters-iphone-because-it-had-lockdown-mode-enabled/

Google Just Updated These Android Theft Protection Features https://lifehacker.com/tech/google-just-updated-these-android-theft-protection-features

California city turns off Flock cameras after company shared data without authorization https://therecord.media/california-city-turns-off-flock-cameras-unauthorized-sharing

Google cripples IPIDEA proxy network abused by crims https://www.theregister.com/2026/01/29/google_ipidea_crime_network/

Mozilla Adds One-Click Option to Disable Generative AI Features in Firefox https://thehackernews.com/2026/02/mozilla-adds-one-click-option-to.html

Tip of the Week: https://firewallsdontstopdragons.com/agents-of-misfortune/ 

Further Info

TikTok’s Real Privacy Risks: https://internetsafetylabs.org/blog/research/tiktoks-real-privacy-risks/ 

Private TikTok viewer: https://sticktock.com/ 

EFF’s Atlas of Surveillance: https://www.atlasofsurveillance.org/ 

DeFlock: https://deflock.org/ 

My book: https://fdsd.me/book 

My newsletter: https://fdsd.me/newsletter 

Support our mission! https://fdsd.me/support 

Give the gift of privacy and security: https://fdsd.me/coupons 

Get your Firewalls Don’t Stop Dragons Merch! https://fdsd.me/merch 

Table of Contents

0:00:07: Intro

0:00:51: News rundown

0:02:51: WhatsApp encryption questioned

0:11:34: AI toy's logs exposed

0:16:17: AI app leaks user data

0:19:27: TikTok gets worse for privacy

0:23:52: US demands more visitor data

0:30:41: UK hit by Salt Typhoon

0:33:47: UK proposes more mass surveillance

0:36:51: Lockdown Mode protects WaPo journalist iPhone

0:43:03: New Android anti-theft features

0:45:54: CA town shuts down Flock

0:49:07: Google hobbles bad proxy network

0:52:33: Firefox AI kill switch

0:55:18: Tip of the Week

1:02:08: Wrap-up

1:02:21: Patron podcast preview

1:02:30: Looking ahead

We're all busy people with busy lives. We only have so much time and energy. So when security people dole out to-do lists, we really need to focus on the tips with the most bang for the buck. Conversely, we need to avoid wasting people's precious resources on advice that is no longer valid or worth the effort. Today, we'll debunk several of these "Hacklore" tips with security guru Bob Lord.

Interview Notes

Hacklore: https://www.hacklore.org/letter 

Hacklore resources: https://www.hacklore.org/resources 

Elevator (un)safety analogy: https://medium.com/@boblord/psa-elevator-un-safety-7ac69a9498de 

DNC Security Checklist: https://democrats.org/security/ 

CISA Secure by Design: https://www.cisa.gov/securebydesign 

MITRE’s 2007 Unforgivable Vulnerabilities (PDF): https://cwe.mitre.org/documents/unforgivable_vulns/unforgivable.pdf 

Take 9: https://pausetake9.org/ 

Consumer Reports Security Planner tool: https://securityplanner.consumerreports.org/ 

EFF security planning: https://ssd.eff.org/module/your-security-plan 

Removing online data: https://firewallsdontstopdragons.com/data-diet-introduction/ 

Generate passphrases with d20 dice! https://d20key.com/#/ 

Dragon coupons: https://fdsd.me/coupons/ 

Rafifi (film): https://www.imdb.com/title/tt0048021/ 

Xkcd password strength: https://xkcd.com/936/ 

Further Info

My book: https://fdsd.me/book 

My newsletter: https://fdsd.me/newsletter 

Support the mission: https://fdsd.me/support 

Give the gift of privacy and security: https://fdsd.me/coupons 

Get your Firewalls Don’t Stop Dragons Merch! https://fdsd.me/merch 

Table of Contents

0:00:14: Intro

0:00:25: Survey, promo wrap-up

0:01:30: Interview setup

0:02:22: Lingo definitions

0:02:52: What drove you to launch Hacklore?

0:07:12: Is this advice truly wrong?

0:11:51: 1) Avoid public WiFi

0:17:38: 2) Never scan QR codes

0:22:43: 3) Never charge devices from public USB ports

0:24:38: 4) Turn off Bluetooth and NFC

0:28:25: 5) Regularly clear cookies

0:32:47: 6) Regularly change passwords

0:38:19: Why do we not have web password standards?

0:44:24: Any bad tips that didn't make the cut?

0:45:53: WIll Hacklore be regularly updated?

0:46:32: What has been the response to Hacklore?

0:48:08: So what are the actual top security tips?

0:49:56: How do we shift the onus to software makers?

0:53:14: What other resources can you recommend?

0:55:40: What's next for you?

0:56:53: Wrap-up

1:00:40: Generating passphrases

1:02:00: Accessing show notes

1:03:08: Dragon coupons

1:03:40: Patron podcast preview

1:04:24: Looking ahead

There exist many interesting technical tools which can greatly improve our privacy while still allowing us to use very personal data. In the next installment of my series on Privacy Enhancing Technologies, we'll look at zero-knowledge proofs - what they are, how they work and what types of privacy problems they can address. Specifically, we'll show how you can prove that you know a secret without actually revealing the secret.

In other news: Florida may be implementing an age-gating law; the UK government is now considering a ban on VPNs; 17 more people browser plugins that steal your data; popular apps used to harvest data using real-time bidding; police unmask millions of surveillance targets due to Flock redaction failures; AI company sued for secretly scoring job seekers; Microsoft gives BitLocker keys to FBI; and the FTC finalizes restrictions on GM car data gathering and sharing.

Article Links

Oppose Florida's AI age verification bill, protect your privacy https://www.miamitech.club/oppose-sb-482/

UK government targets VPNs in online safety consultation as Lords vote for ban https://www.techradar.com/vpn/vpn-privacy-security/uk-government-targets-vpns-in-new-online-safety-consultation-as-lords-vote-for-ban

If You've Installed Any of These 17 Browser Extensions, Delete Them Now https://lifehacker.com/tech/delete-malicious-ghostposter-browser-extensions

Candy Crush, Tinder, MyFitnessPal: See the Thousands of Apps Hijacked to Spy on Your Location https://www.wired.com/story/gravy-location-data-app-leak-rtb/

Police Unmask Millions of Surveillance Targets Because of Flock Redaction Error https://www.404media.co/police-unmask-millions-of-surveillance-targets-because-of-flock-redaction-error/

AI Company Eightfold Sued Helping Companies Secretly Score Job Seekers 2026 01 21 https://www.reuters.com/sustainability/boards-policy-regulation/ai-company-eightfold-sued-helping-companies-secretly-score-job-seekers-2026-01-21/

Microsoft Gave FBI BitLocker Encryption Keys, Exposing Privacy Flaw https://www.forbes.com/sites/thomasbrewster/2026/01/22/microsoft-gave-fbi-keys-to-unlock-bitlocker-encrypted-data/

FTC Finalizes Order Settling Allegations that GM and OnStar Collected and Sold Geolocation Data Without Consumers’ Informed Consent https://www.ftc.gov/news-events/news/press-releases/2026/01/ftc-finalizes-order-settling-allegations-gm-onstar-collected-sold-geolocation-data-without-consumers

Tip of the Week: https://firewallsdontstopdragons.com/how-zero-knowledge-proofs-work/ 

Further Info

Annual Listener Survey!!! https://fdsd.me/survey2026 

New Patron Promotion!! https://fdsd.me/promo126 

Data Privacy Week: https://www.staysafeonline.org/data-privacy-week  

HaveIBeenFlocked: https://haveibeenflocked.com/ 

404 Media FOIA Forum: https://www.404media.co/foia-forum-archive/ 

NextDNS: https://nextdns.io/ 

My book: https://fdsd.me/book 

My newsletter: https://fdsd.me/newsletter 

Support our mission! https://fdsd.me/support 

Give the gift of privacy and security: https://fdsd.me/coupons 

Get your Firewalls Don’t Stop Dragons Merch! https://fdsd.me/merch 

Table of Contents

0:00:07: Intro

0:00:51: Last call for survey, dragon coin

0:02:17: Winter storm

0:03:14: News preview

0:05:02: Proposed FL age-gating bill

0:11:33: UK government targets VPNs

0:15:42: More malicious browser extensions

0:21:22: Popular apps leaking personal info (again)

0:31:26: Have I Been Flocked?

0:41:37: AI company sued for secretly scoring job seekers

0:46:41: Microsoft give BitLocker keys to FBI

0:56:05: FTC restricts GM from selling car data

0:59:34: Tip of the Week

1:10:49: Wrap-up

1:12:16: Patron podcast preview

1:12:42: Looking ahead