This week we go back to the basics of privacy and security for the average Joe or Jane, and discuss the latest iPhone settings for privacy. I also discuss the Twilio Authy API abuse that resulted in 33 million phone numbers for Authy accounts being exposed. Huge thank you to the Patreon supporters!

In this week's episode:

1. Back to the basics
2. Advice for the 'average Joe'
3.  The Twilio Authy API breach
4.  iPhone privacy settings
5.  Listener question on doorbell cameras

Show Links:

• 1Password Security Audits: https://support.1password.com/security-assessments/
• Bitwarden Security Audits: https://bitwarden.com/help/is-bitwarden-audited/
• Twilio Breach: https://www.bleepingcomputer.com/news/security/hackers-abused-api-to-verify-millions-of-authy-mfa-phone-numbers/
• MySudo: https://mysudo.com/
• ProtonMail: https://protonmail.com/
• StrongBox: https://strongboxsafe.com/
• KeepassDX: https://www.keepassdx.com/
• Amcrest Cameras: https://www.amazon.com/gp/product/B07ZJS3L5Y

- Edward Snowden

Podcast music: Recluse by Ray Heffer

Official Website: https://psysecure.com

Podcast music: The R3cluse

After escaping to the mountains and living like a recluse for the past few months, I am back. In this week's show, I discuss my latest experiences in purchasing a home and titling in a living trust, along with the potential obstacles with title deeds and mortgage lenders, and avoiding data breaches with utility companies. I also revisit GrapheneOS after using it daily for the past year, and answer listener questions.

In this week's episode:

1. Living in the mountains
2. Buying a house with a living trust
3. Potential pitfalls with title deeds and mortgage lenders
4. Balancing privacy and security
5. The 'All or Nothing' approach
6. Why I still use Obsidian over Standard Notes
7. Revisiting GrapheneOS and the Play Integrity API
8. Baby Reindeer
9. Listeners Questions

- Daniel J. Solove

Official Website: https://psysecure.com

Podcast music: The R3cluse

In this week's show, I discuss CLEAR's intrusive privacy policy and highlight alternatives to Authy using KeePass, with a privacy friendly solution for scanning QR codes. I also address the common mistakes people make when backing up their MFA codes. Additionally, I share some of the highlights from attending the SANS OSINT Summit in Washington, D.C., and explore various uses for custom domain names. Finally, I touch on the Starbucks app and the benefits of using Tello for pre-paid SIM cards.

Follow on Twitter (X): @privacypod
Support the show: https://www.patreon.com/TheLockdown

This episode was recorded on March 14, 2024

In this week's episode:

1. CLEAR Privacy and Selling Souls
2. Authy discontinues the desktop app from March 19th, 2024
3. Alternative MFA solutions using KeepassXC and KeepassDX
4. Storing backup MFA codes in a Veracrypt container
5. Make sure you keep scanned copies of your credit cards and ID!
6. Update on the SANS OSINT Summit
7. Alternative to Mint Mobile with Tello
8. Using the Starbucks app privately
9. Custom domain names

Show Links:

• CLEAR Security Breach: https://www.youtube.com/watch?v=i0I0BTtnMC4
• OSINT Combine Free Tools:  osintcombine.com/freetools
  • Whatsmyname: https://whatsmyname.app/
• Tello:  https://tello.com/
• QR Scanner (PFA) by Secuso Research Group: https://secuso.aifb.kit.edu/english/QR_Scanner.php
• Skull Games: https://skullgames.io/
• Trace Labs: https://www.tracelabs.org/
• Expired Domains: https://www.expireddomains.net/deleted-domains/

- Supreme Court Justice William O. Douglas

Official Website: https://psysecure.com

Podcast music: The R3cluse

In today's show, I have a conversation with Lawrence  Gentilello, the CEO and Founder of Optery, a personal data removal service. Lawrence shares his own experiences with identity theft and what motivated him to start Optery. We also discuss the future of privacy in the United States, Utah's new privacy law, the Utah Consumer Privacy Act (UCPA), and the bare minimum you should be doing to protect and secure your private data.

Follow on Twitter (X): @privacypod
Support the show: https://www.patreon.com/TheLockdown

This episode was recorded on March 6, 2024

Follow Ray on Twitter @privacypod

In this week's episode:

1. Lawrence's experience with identity theft highlights the importance of a credit freeze
2. The need for disinformation
3. A reminder on hunting apps
4. The future of data privacy and the need for services like Optery
5. Data privacy in the UK and the existence of search sites like 192.com
6. Update on next weeks show

Show Links:

• Optery website: https://www.optery.com/
• PC Magazine Editors Choice Award for Optery: https://www.pcmag.com/reviews/optery
• PC Magazine's list of the best personal data removal services: https://www.pcmag.com/picks/the-best-personal-data-removal-services
• Utah Consumer Privacy Act (UCPA): https://attorneygeneral.utah.gov/utah-consumer-protection-act-a-new-law-to-protect-online-privacy/

- Philip R. Zimmermann, creator of PGP encryption

Official Website: https://psysecure.com

Podcast music: The R3cluse

In this weeks show I discuss some of the concerns of using TOR over a VPN, and take another look at data removal from people search sites, including a look at Mozilla Monitor, a new service for data removal from the makers of Firefox. I'll also discuss the importance of freezing your credit and putting the title of your home into a revocable living trust, prior to removing your records from people search sites.

Follow on Twitter (X): @privacypod
Support the show: https://www.patreon.com/TheLockdown

This episode was recorded on February 16, 2024

In this week's episode:

1. I'm still on the road!
2. Anonymity with TOR and VPN
3. Get that Credit Freeze and Revocable Living Trust
4. Data Removals from people search sites
5. Mozilla Monitor, a new data removal service
6. Quick update on the Complete pfSense Setup Guide

Show Links:

• Mozilla Monitor: https://monitor.mozilla.org
• Tor Browser: https://www.torproject.org/download
• DeepCorr: https://dl.acm.org/doi/pdf/10.1145/3243734.3243824
• Foundations of Digital Privacy, Part One: https://lockdown.media/the-foundations-of-digital-privacy

-George Orwell

Official Website: https://psysecure.com

Podcast music: The R3cluse

In this Friday Field Notes episode of The Lockdown, I share my experience with imposter syndrome, and compare practical privacy approaches with extreme measures, inspired by my move to the USA.

Follow on Twitter (X): @privacypod
Support the show: https://www.patreon.com/TheLockdown

This episode was recorded on January 31, 2024

In this week's episode:

1. Using alias names with food apps
2. More on practical privacy vs the extreme
3. My motivations for privacy after my move to the USA
4. Simplewall for Windows 10
5. Using Virtual Machines
6. Dual boot Windows for gaming vs productivity
7. Micro-segmentation strategies
8. Windows 10 LTSC for privacy?
9.  I'm the Imposter! 

Show Links:

•  qView Image Viewer: https://interversehq.com/qview
• GPG4Win: https://www.gpg4win.org/download.html
• Windows 10 LTSC: https://www.cdw.com/search/?key=Windows%20LTSC
• Simplewall: https://github.com/henrypp/simplewall

-Oscar Wilde

Music: The Lockdown 

Official Website: https://psysecure.com

Podcast music: The R3cluse

This week, I introduce Defensive OSINT, address privacy concerns while on the road, and examine the intricacies of alias usage and AI-based face morphing for photo alteration. Sharing insights from my recent travels, I highlight the need for vigilance and innovative strategies for maintaining privacy on the go. The episode explores the pros and cons of using alias names for hotel bookings, including the challenges of identity verification during check-in, while I discuss smart, alternative solutions for these scenarios. Join me as we navigate the complexities of preserving privacy in an era rife with survlleiance and data breaches, providing practical tips and advice for privacy-conscious travelers and digital citizens.

Follow on Twitter (X): @privacypod
Support the show: https://www.patreon.com/TheLockdown

This episode was recorded on January 27, 2024

In This Week's Show:

1. Privacy on the road with hotels, VRBO rentals, and Uber
2. Why we do this, and the reasons behind our privacy lifestyle
3. A look at Defensive OSINT strategies
4. Face morphing our real photos for privacy
5. Location tracking on your phone
6. MySudo and pre-paid burner numbers
7. A surprise guest?

Show Links:

• Black Portable Hotel Door Lock: https://www.amazon.com/Portable-Security-Additional-Traveling-Apartment/dp/B0CFVS6NRN
• Python Script for ThisPersonDoesNotExist: https://github.com/locksec/tpdne_py
• Facemorph.me: https://facemorph.me
• Upscayl: https://www.upscayl.org
• File Optimizer: https://nikkhokkho.sourceforge.io/static.php?page=FileOptimizer

Intro voice-over: IRLRosie - Creative Commons Attribution license (reuse allowed)
Music: The Lockdown 

Official Website: https://psysecure.com

Podcast music: The R3cluse

In this week's episode, it's time to wrap up 2023 with another look at Privacy.com, and my strategies for avoiding bank account lockout. I delve into the CIA Triad, breaking down its relevance to everyday privacy concerns. The episode also takes a practical turn with a guide on using FindMyDevice on GrapheneOS, and the FindMyDevice feature on the Garmin Instinct 2 watch for tracking lost phones.

I also tackle the debate between biometric authentication and passcodes, taking our threat model into consideration. For those interested in storage synchronization solutions, I discuss using Nextcloud for a variety of purposes, including photo backups, syncing Keepass, and markdown notes, highlighting its versatility for privacy.

Join me for an episode packed with valuable insights and tips for enhancing your digital privacy and security as we welcome in 2024!

Follow on Twitter (X): @privacypod
Support the show: https://www.patreon.com/TheLockdown

This episode was recorded on January 03, 2024

In this week's episode:
1. Closing 2023 with Privacy.com
2. How the CIA Triad Relates to privacy
3. Tracking Lost Phones with FindMyDevice on GrapheneOS and a Garmin watch
4. Biometric authentication vs Passcodes
5. Using Nextcloud for photo backups, Keepass Sync, and taking notes in Markdown
6. Backups with Backblaze B2 and Restic

Show Links:
https://www.privacy.com
https://strongboxsafe.com
https://www.keepassdx.com
https://grapheneos.org
https://gitlab.com/Nulide/findmydevice
https://obsidian.md
https://www.backblaze.com/cloud-storage
https://restic.net
https://www.garmin.com/en-US/p/775697

Ray Ban Meta News: https://san.com/cc/investigation-into-new-meta-smart-glasses-brings-privacy-concerns

Music: The Lockdown

"We suffer more often in imagination than in reality." - Seneca

Official Website: https://psysecure.com

Podcast music: The R3cluse

In this week’s show, Ray Heffer gives a farewell to Michael Bazzell's Privacy, Security, and OSINT show. Also, speculation about living in a faraday cage continues, and the reasons Firefox is still better than Brave for privacy and security. Ray also talks about when privacy techniques go wrong, with his lockout from Privacy.com.

Follow on Twitter (X): @privacypod
Support the show: https://www.patreon.com/TheLockdown

This episode was recorded on  November 22nd, 2023 

This week's episode:

1. Introduction
2. Notable mention for Michael Bazzell
3. New website and Twitter account
4. Why I don't use Brave and the reasons Firefox is still the best option
5. When Privacy Techniques Go Wrong

Links mentioned in the show:
MITRE ATT&CK (Credentials from Web Browsers): https://attack.mitre.org/techniques/T1555/003/
MITRE ATT&CK (Password Managers): https://attack.mitre.org/techniques/T1555/005/
Tor Project Recommendations: https://support.torproject.org/tbb/tbb-9/
Brave (VPN Services) Issue: https://github.com/brave/brave-browser/issues/33726
Citi Virtual Credit Cards: https://www.cardbenefits.citi.com/Products/Virtual-Account-Numbers
Citi (True Name) Card: https://banking.citi.com/cbol/updatemyname/default.htm
IronVest (Formerly Abine Blur): https://ironvest.com/pricing/
Wise Virtual Card (UK): https://wise.com/gb/virtual-card/

Intro music: The Lockdown

"Everything we hear is an opinion, not a fact. Everything we see is a perspective, not the truth." - Marcus Aurelius

Official Website: https://psysecure.com

Podcast music: The R3cluse

In this week’s FRIDAY FIELD NOTES, Ray Heffer discusses the Zero Trust security model, a framework that's revolutionizing how organizations protect their critical systems and data. Diving into the depths of cybersecurity, we clear up common myths and misinterpretations surrounding Zero Trust, illuminating its role as not just a defensive strategy but a comprehensive approach to modern threats.

Zero Trust operates on the principle of "never trust, always verify," but what does this mean in practice? Zero Trust doesn't just look outward; it recognizes that threats also come from the inside. By assuming that a breach is not just possible, but has already happened, Zero Trust strategies are uniquely positioned to mitigate damage by insiders, whether malicious or accidental.

Follow on Twitter (X): @privacypod
Support the show: https://www.patreon.com/TheLockdown

This episode was recorded on November 09, 2023

This week's episode:

1. Introduction and Brill is living in a Faraday cage
2. How we got to Zero Trust by understadning the Cyber Kill Chain
3. The Principals of Zero Trust
4. Recommended Zero Trust Frameworks

NIST Zero Trust Architecture (SP 800-207): https://csrc.nist.gov/pubs/sp/800/207/final
CISA Zero Trust Maturity Model: https://www.cisa.gov/zero-trust-maturity-model
Cyber Kill Chain: https://www.lockheedmartin.com/en-us/capabilities/cyber/cyber-kill-chain.html

Intro music: The Lockdown

"Security is always seen as too much until the day it is not enough." — William H. Webster

Official Website: https://psysecure.com

Podcast music: The R3cluse