Privacy Please

S6, E245 - Hard-coded Secrets and Unencrypted Data: A Digital Security Nightmare


Listen Later

Send us a text

Several popular Chrome extensions, including privacy and security tools, have been found leaking sensitive data through unencrypted HTTP and hard-coded credentials in their code. Security is both hard and easy - hard because of existing unencrypted protocols and trust placed in developers, but easy because fundamental security practices should be common knowledge in 2025.

• Chrome extensions including DualSafe Password Manager and Avast Online Security are leaking sensitive user data
• HTTP vs HTTPS - the 'S' stands for security and encrypts data transmission over the internet
• HTTPS Only extension from EFF forces secure connections when browsing
• Hard-coded credentials in extensions create permanent security vulnerabilities
• Developers sometimes collect excessive data "just in case" rather than minimizing collection
• OWASP (Open Web Application Security Project) provides essential resources for developers
• Technology abstraction makes users less aware of security fundamentals
• The newly restarted OWASP Nomad chapter offers virtual community for application security

Check out our GitHub repository of privacy resources at "Awesome Privacy Engineering Tools" for more information on implementing better privacy practices in development.


Support the show

...more
View all episodesView all episodes
Download on the App Store

Privacy PleaseBy Cameron Ivey

  • 4.6
  • 4.6
  • 4.6
  • 4.6
  • 4.6

4.6

28 ratings


More shows like Privacy Please

View all
WSJ What’s News by The Wall Street Journal

WSJ What’s News

4,350 Listeners

Risky Business by Patrick Gray

Risky Business

361 Listeners

CyberWire Daily by N2K Networks

CyberWire Daily

1,006 Listeners

The Privacy Advisor Podcast by Jedidiah Bracy, IAPP Editorial Director

The Privacy Advisor Podcast

66 Listeners

Smashing Security by Graham Cluley & Carole Theriault

Smashing Security

312 Listeners

Cybersecurity Today by Jim Love

Cybersecurity Today

166 Listeners

Hacking Humans by N2K Networks

Hacking Humans

314 Listeners

Defense in Depth by David Spark, Steve Zalewski, Geoff Belknap

Defense in Depth

74 Listeners

The World in Brief from The Economist by The Economist

The World in Brief from The Economist

1,080 Listeners

Serious Privacy by Dr. K Royal, Paul Breitbarth & Ralph O'Brien

Serious Privacy

23 Listeners

Cyber Security Headlines by CISO Series

Cyber Security Headlines

127 Listeners

She Said Privacy/He Said Security by Jodi and Justin Daniels

She Said Privacy/He Said Security

12 Listeners

The Rest Is History by Goalhanger

The Rest Is History

12,918 Listeners

Masters of Privacy by Sergio Maldonado

Masters of Privacy

7 Listeners

The Rest Is Politics: US by Goalhanger

The Rest Is Politics: US

2,285 Listeners