Online security advice often sounds simple until you actually try to follow it. Between password managers, privacy settings, and data brokers, protecting yourself can start to feel like a full-time job. That gap between what sounds easy and what's actually realistic is where a lot of people get stuck.

My guest today is Yael Grauer, a freelance investigative technology reporter who covers privacy, security, digital freedom, hacking, and mass surveillance. She also works as a program manager of cybersecurity research at Consumer Reports, where she manages Security Planner, a free resource that provides customized guidance to help people stay safe online.

We discuss what actually matters when it comes to protecting yourself, why so much of the responsibility ends up on individuals, and how to approach security in a way that's realistic. She explains where the biggest risks tend to come from, what people often overlook, and how to make practical decisions without turning it into something that takes over your time.

Show Notes:

• [01:02] Yael explains her role at Consumer Reports and how she moved from investigative reporting into security and privacy work.
• [04:26] Long lists of security steps can overwhelm people, often leading to inaction.
• [06:52] Real progress requires pressure on companies and policymakers, not just individuals.
• [09:41] Security advice quickly becomes outdated as platforms and settings constantly change.
• [12:34] App permissions and privacy settings are often confusing and inconsistent across platforms.
• [16:30] Panic and stress can make even simple security decisions harder in the moment.
• [19:50] A practical approach is focusing on the risks most likely to affect you first.
• [20:19] Media and pop culture create unrealistic expectations about hacking and surveillance.
• [25:22] Yael shares personal examples of falling for phishing attempts despite her expertise.
• [27:30] Timing and context can make anyone vulnerable, even those who understand the risks.
• [30:00] The way you pay matters, with credit cards offering better protection in many cases.
• [33:24] Social media platforms often fail to respond effectively to compromised accounts.
• [36:27] Concerns about surveillance often center on location tracking and shared data.
• [39:38] Tools meant for serious crimes can gradually be used for less critical enforcement.
• [43:15] Clear, readable privacy policies help people make informed decisions about their data.
• [45:08] Privacy isn't gone, but maintaining it requires ongoing effort and awareness.
• [47:20] Data broker opt-out tools show progress, though they don't fully solve the problem.
• [52:00] Different state laws create inconsistent protections and added complexity.
• [55:13] Final advice focuses on taking small, practical steps instead of trying to do everything at once.

Thanks for joining us on Easy Prey. Be sure to subscribe to our podcast on iTunes and leave a nice review.

Links and Resources:

• Podcast Web Page
• Facebook Page
• whatismyipaddress.com
• Easy Prey on Instagram
• Easy Prey on Twitter
• Easy Prey on LinkedIn
• Easy Prey on YouTube
• Easy Prey on Pinterest
• Yael Grauer
• Yael Grauer - LinkedIn
• Yael Grauer - Consumer Reports
• Yael Grauer - Instagram