In this brief episode between travels, I announce the “Ghost in the Source” capture the flag challenge, a cryptographic hunt on my website starting June 21st, 2025. At the end of June I will pick 3 lucky winners which will receive a 6-month TryHackMe subscription voucher. I also provide an update on our new Matrix community.

In this week’s episode:

1. Announcing the “Ghost in the Source” CTF challenge
2. Challenge details and rules
3. Prize information: 3 x 6-month TryHackMe vouchers!
4. Matrix community update for listener interaction
5. Future plans for OSINT CTF challenges

Show Links:

• CTF Challenge Page - https://psysecure.com/ctf/

“When I float weightless back to the surface, I’m imagining I’m becoming someone else.”

- Motoko Kusanagi

Official Website: https://psysecure.com

Podcast music: The R3cluse

In this episode, I explore the privacy implications of using AI apps like ChatGPT and Claude on mobile devices. I discuss why ChatGPT’s requirement for Google Play Store login and audio recording storage led me to Claude on my GrapheneOS device. I also cover my daily app setup, Windows telemetry blocking with SimpleWall, macOS privacy with Little Snitch, and the potential of System76 Linux laptops.

In this week’s episode:

1. Privacy comparison between ChatGPT and Claude AI apps
2. ChatGPT’s audio recording storage and data export concerns
3. GrapheneOS setup without Google Play Store login
4. Using FUTO Keyboard and FUTO Voice for local transcription
5. Essential privacy tools: SimpleWall for Windows and Little Snitch for macOS
6. Windows Subsystem for Linux (WSL) for developers
7. System76 Linux laptops as a privacy-focused alternative

Show Links:

• Anthropic Claude.ai Encryption - https://privacy.anthropic.com/en/articles/10458704...
• Duck.ai - https://duck.ai
• Futo Keyboard & Voice - https://futo.org/
• Aurora Store - https://auroraoss.com/aurora-store
• SimpleWall (Windows Firewall) - https://github.com/henrypp/simplewall
• Little Snitch (macOS) - https://www.obdev.at/products/littlesnitch/
• GeoSpy (OSINT Tool) - https://geospy.net
• System76 Linux Laptops - https://system76.com/
• Mental Outlaw YouTube Channel - https://www.youtube.com/@MentalOutlaw
• DaVinci Resolve - https://www.blackmagicdesign.com/products/davinciresolve
• OSINT Defense & Security Framework - https://psysecure.com/services/odsf/

“██████REDACTED███”

- █████████

Official Website: https://psysecure.com

Podcast music: The R3cluse

In this episode, I discuss what has been keeping me away from the mic, the Open Source Intelligence Defense and Security Framework (ODSF), and share updates on privacy topics including browser security, autonomous taxis, airport security cameras, and managing cryptocurrency. I also address listener questions about anonymous SIM cards and creating separate online identities.

Official Website: https://psysecure.com

In this week’s episode:

1. Introducing the Open Source Intelligence Defense and Security Framework (ODSF)
2. Browser privacy comparisons (Firefox, LibreWolf, Brave, Mulvad)
3. Experiences with Waymo autonomous taxis and privacy considerations
4. TSA security cameras and opting out of facial recognition
5. Listener questions about anonymous SIMs in Australia and creating sock puppet accounts
6. Using cryptocurrency

Show Links:

• BIP39 Generator - https://github.com/iancoleman/bip39
• Phoenix Wallet - https://phoenix.acinq.co
• Zeus Wallet - https://zeusln.com
• LibreWolf Browser - https://librewolf.net/
• OSS Document Scanner (GrapheneOS) - https://github.com/Akylas/OSS-DocumentScanner
• Mullvad Browser (randomDataOnCanvasExtract) - https://github.com/mullvad/mullvad-browser/issues/358
• Mullvad Browser (Letterboxing) - https://github.com/mullvad/mullvad-browser/issues/152

“Minimize what can be known.”

- Me

Official Website: https://psysecure.com

Podcast music: The R3cluse

In this episode, we dive into Apple’s latest privacy retreat with the removal of Advanced Data Protection (ADP) for iCloud in the UK. We break down why Apple made this move, how ADP works, and what it means for users who care about encryption and data security. If you’re in the UK and using Apple’s ecosystem, this episode is a must-listen as I cover strategies to keep your data secure despite Apple’s decision.

In this week’s episode:

1. The UK’s Investigatory Powers Act
2. A technical breakdown of how iCloud ADP was supposed to protect user data.
3. Alternatives to iCloud, including Nextcloud, GrapheneOS, and secure backups.
4. Threat Modeling & The Privacy Spectrum
5. Listener Questions, addressing concerns about online privacy, social media exposure, and what to do when friends dismiss security risks.

Show Links:

• Apple pulls data protection tool (BBC News) - https://www.bbc.com/news/articles/cgj54eq4vejo
• Apple Intelligence - https://www.macrumors.com/2025/02/11/apple-intelligence-re-enabled-in-latest-updates/
• pfSense Guide - https://psysecure.com/complete-setup-guide-to-pfSense
• Nextcloud Guide - https://psysecure.com/self-hosting-nextlcoud
• Möbius Sync - https://mobiussync.com/
• Obsidian - https://obsidian.md/

“The right to privacy is not merely a right to secrecy. It is a right to control information about oneself.”

- Anonymous

Podcast music: The R3cluse

Official Website: https://psysecure.com

Podcast music: The R3cluse

In this week’s episode, we take a deep dive into Session, a private messaging app, with its co-founder Kee Jefferys. We discuss the philosophy behind Session, its technical architecture, and the broader implications of privacy in a world increasingly hostile to anonymous communication. Kee shares insights on the importance of decentralized networks, the risks of phone number-based messaging, and the role of cryptocurrency in supporting private infrastructure.

We also touch on operational security (OPSEC), the real-world challenges of getting people to adopt privacy tools, and how Session is working to improve usability while maintaining strong privacy protections.

In this week’s episode:

1. Session Private Messenger – Kee Jefferys explains the origins of Session, its core principles, and how it differs from mainstream messaging apps.
2. The Future of Privacy – Discussion on surveillance, government censorship, and the increasing crackdown on privacy tools.
3. Decentralized Messaging – How Session uses a global network of nodes to provide anonymous and resilient communication.
4. Session Pro & Sustainability – Monetization strategies for Session and how the network sustains itself without compromising user privacy.
5. Avoiding the Privacy Valley of Despair – How privacy-conscious users can avoid burnout and find a practical balance.
6. Censorship & Government Interference – Addressing Russia’s blocking of Session nodes and strategies to bypass censorship.

Show Links:

• Download Session - https://getsession.org
• Session Lite Paper - https://getsession.org/litepaper
• Support the Show on Patreon - https://patreon.com/TheLockdown
• Follow Kee on X - https://x.com/JefferysKee

Until they become conscious they will never rebel, and until after they have rebelled they cannot become conscious.

- George Orwell, 1984

Podcast music: The R3cluse

Official Website: https://psysecure.com

Podcast music: The R3cluse

In this week's episode we dive deep into both the psychological and privacy implications of social media apps. I reflect on my observations during recent travels, and explore how social media platforms are distorting human connections while simultaneously collecting vast amounts of personal data.

The episode also tackles the technical aspects of email systems to the limitations of encrypted messaging apps, providing practical advice for maintaining privacy.

In this week's episode:

1. Listener Questions - Deep dive into pfSense vs OPNsense, mobile VPN usage, and dealing with license plate readers
2. Social Media Privacy - Analysis of social media's psychological impact and privacy issues with data collection practices
3. Proper Account Deletion - Step-by-step guide for securely deleting social media accounts
4. Sock Puppet Accounts - Maintaining anonymous online identities
5. Email Privacy - Historical perspective and current state of email security
6. WhatsApp Security - A discussion on encryption and device security

Show Links:

• Support the Show on Patreon - https://patreon.com/TheLockdown
• GrapheneOS - https://grapheneos.org
• The Neuroscience of Engagement - https://medium.com/design-bootcamp/the-neuroscience-of-engagement-b50531a9313b
  
  

"The right information at the right time is deadlier than any weapon."

- Dolores Abernathy (Westworld)

Official Website: https://psysecure.com

Podcast music: The R3cluse

This week on The Lockdown, The Practical Privacy & Security Podcast, we’re kicking off the new year with reflections, updates, and a deep dive into key privacy issues that are shaping 2025. From privacy settings on iOS and GrapheneOS, to AI assistants and their potential privacy pitfalls, this episode covers practical advice, insights, and solutions for everyday users. Additionally, I explore new state-level privacy laws across the U.S. and what they mean for both businesses and individuals.

In this week’s episode:

1. Reflecting on personal privacy practices and professional projects.
2. A look at U.S. state privacy regulations taking effect in 2025.
3. Privacy and security implications of voice assistants like Siri, Alexa, and Google Assistant.
4. Detailed privacy settings for iOS and why GrapheneOS is the better alternative.
5. AI assistants like ChatGPT and Claude, and their risks.
6. Privacy concerns with vehicles, focusing on data leaks and constant surveillance.
7. The intersection of cybersecurity and OSINT in modern attacks.

Show Links:

• Apple offers $95 million in Siri privacy violation settlement
• Amazon to pay $31 million in privacy violation penalties for Alexa voice assistant and Ring camera
• Nulide / FindMyDevice · GitLab
• British journalist could face years in prison for refusing to hand over his passwords to the police - Il Fatto Quotidiano
• Volkswagen EV data leak exposes personal information of 3.3 million people
• Tesla data helped police after Las Vegas truck explosion, but experts have wider privacy concerns

Support this show: https://www.patreon.com/c/TheLockdown
Official website: https://psysecure.com/podcast/

"If you want to keep a secret, you must also hide it from yourself."
-George Orwell

Podcast music: The R3cluse 

Official Website: https://psysecure.com

Podcast music: The R3cluse

In this episode I speak with Luke Mulks, who is the VP of Business Operations at Brave Software. We discuss the privacy concerns over traditional web-based ads, and why Brave is offering a privacy-first alternative.

Show Links:

• Brave Software:  https://brave.com/podcast/ 
• The Brave Technologist Podcast: https://brave.com/podcast/

"Well who's gonna monitor the monitors of the monitors?" - Carla Dean (Enemy of the State)

Podcast music: Recluse by Ray Heffer  

Official Website: https://psysecure.com

Podcast music: The R3cluse

In this episode, we go back to the basics as I discuss what I would do today if I were starting from scratch. It begins with deleting social media accounts, especially Facebook. Additionally, we have an update from Optery in response to listener feedback.

We discuss tools like LibreWolf, Brave, and GrapheneOS, and compare privacy approaches for mobile devices, including Pixel and iPhone. A segment is dedicated to starting a privacy-first journey, from deleting social media accounts to adopting secure communication and password management practices. The episode also touches on how AI, including large language models (LLMs), is reshaping privacy concerns by building highly accurate profiles of users.

In this week’s episode:

• Don't overthink privacy, especially web browsers with Brave, Firefox, and LibreWolf
• Back to the basics starting with deleting social media
• Pixel vs iPhone (GrapheneOS)

Show Links:

• Self-hosting Nextcloud: https://psysecure.com/self-hosting-nextlcoud
• LibreWolf: https://librewolf.net/
• GrapheneOS: https://grapheneos.org/
• Meta fined $1.3b: https://www.nytimes.com/2023/05/22/business/meta-facebook-eu-privacy-fine.html
• Surveillance Watch: https://www.surveillancewatch.io/

"The world outside, the world that you know, it’s gone. It doesn’t exist."
– Christof

Podcast music: Recluse by Ray Heffer  

Official Website: https://psysecure.com

Podcast music: The R3cluse

In this episode, recorded on October 10, 2024, I dive into privacy and security during natural disasters, highlighting essential tools like iOS 18’s satellite messaging and Starlink for maintaining communication when traditional systems fail. Next I dive into self-hosting in depth, particularly focusing on Nextcloud for privacy-conscious file sync. The episode concludes with a detailed analysis of a critical vulnerability in Firefox and the merits of switching to LibreWolf for enhanced privacy and security.

In this week’s episode:

1. Privacy During Natural Disasters. Using of iOS 18’s satellite communication features for emergency contact, Starlink for off-grid internet access, and the importance of internet and Sudo phone numbers for safety without compromising privacy.
2. Bug out bags for emergency preparedness, the utility of Starlink and satellite phones for privacy in disaster zones.
3. Overview of the blog post on hosting Nextcloud, importance of cloud backups using Backblaze B2 and Restic, encrypting backups and maintaining data privacy within home networks.
4. Other Privacy Tools and Practices, including Blue Iris for managing surveillance cameras without internet access, use of Proxmox for virtual machines and running DNS servers with PiHole.
5. Analysis of the Firefox vulnerability (CVE 2024-9680), discussion on the benefits of LibreWolf as a more private alternative to Firefox.

Show Links:

• Self-hosting Nextcloud - https://www.psysecure.com/self-hosting-nextlcoud
• Starlink - https://www.starlink.com/
• Backblaze B2 - https://www.backblaze.com/cloud-storage
• Restic FAQ - https://restic.readthedocs.io/en/latest/faq.html
• Nextcloud End-to-End Encryption - https://docs.nextcloud.com/server/latest/admin_manual/configuration_files/encryption_configuration.html
• Firefox Users Fingerprinted via Cached Intermediate HTTPS Certificates - https://www.bleepingcomputer.com/news/security/firefox-users-fingerprinted-via-cached-intermediate-https-certificates/
• Certificate issue causing add-ons to be disabled or fail to install - https://discourse.mozilla.org/t/fixed-certificate-issue-causing-add-ons-to-be-disabled-or-fail-to-install/39047
• Firefox CVE 2024-9680 - https://www.mozilla.org/en-US/security/advisories/mfsa2024-51/
• LibreWolf - https://librewolf.net/

All warfare is based on deception.

- Sun Tzu

Podcast music: Recluse by Ray Heffer 

Official Website: https://psysecure.com

Podcast music: The R3cluse