February 17, 2025

Security Planner

58 minutes

Generic security advice is good, but tailored advice is much better. Everyone’s situation is a little different. What are you trying to protect? Who or what are you trying to protect it from? What are the consequences of failure? This is called threat modeling. And thankfully, the wonderful folks at Consumer Reports have a free, easy-to-use Security Planner tool that will help anyone do this assessment and provide custom solutions. My guest today is Yael Grauer, who will help us understand how to think about our security and how the CR tool can help you protect your data and devices.

Interview Notes

Consumer Reports Security Planner tool: https://securityplanner.consumerreports.org/

Yael’s website: https://yaelwrites.com/

Big Ass Data Broker Opt Out List (BADBOOL): https://github.com/yaelwrites/Big-Ass-Data-Broker-Opt-Out-List

Consumer Reports advocacy: https://advocacy.consumerreports.org/

CR’s Digital Standard: https://thedigitalstandard.org/

CR’s Consumer Readiness Report 2024 (PDF): https://innovation.consumerreports.org/wp-content/uploads/2024/09/2024-Consumer-Cyber-Readiness-Report.pdf

How to choose a PIN code: https://firewallsdontstopdragons.com/how-to-choose-a-pin/

Further Info

Send me your questions! https://fdsd.me/qna

Check out my book, Firewalls Don’t Stop Dragons: https://fdsd.me/book

Subscribe to the newsletter: https://fdsd.me/newsletter

Become a patron! https://www.patreon.com/FirewallsDontStopDragons

Get your Firewalls Don’t Stop Dragons Merch! https://fdsd.me/merch

Give the gift of privacy and security: https://fdsd.me/coupons

Support our mission! https://fdsd.me/support

Generate secure passphrases! https://d20key.com/#/

Table of Contents

Use these timestamps to jump to a particular section of the show.

0:00:07: Intro

0:01:07: Interview setup

0:02:35: Yael introduction

0:04:19: What questions should we answer to get useful security advice?

0:06:41: How does Security Planner work?

0:08:03: How does Security Planner tailor its suggestions?

0:10:58: How do you decide what the most important factors are for security?

0:15:11: What might trigger me to re-run this tool and get a fresh report?

0:17:18: How does Consumer Reports research its recommendations?

0:19:59: How does CR vet the products and services that it recommends?

0:23:18: How do you weight things like convenience and ease of use?

0:27:34: Is it okay to make people pay for basic security features?

0:35:08: What role should government play in pushing for better security?

0:36:55: How important is transparency for driving better security?

0:39:15: What did the CR Cyber Readiness survey reveal?

0:43:22: Why do we choose bad passwords?

0:45:55: Why don’t companies provider better support for security problems?

0:51:39: What’s next for you and CR? How do we get updates?

0:53:43: Interview wrap-up

0:56:20: Patron bonus content preview

0:57:06: Looking ahead

...more

View all episodes

By Carey Parker

4.9

6464 ratings