Flock Safety's automated license plate readers are in over 5,000 communities and used by more than 40,000 cameras nationwide — sold to cities as a tool to catch car thieves and find missing people. But a Washington Post investigation found at least 50 officers accused of misusing the system, most of them to track romantic partners.

This episode covers:

• The scale of Flock's network and how warrantless searches are legally justified
• Individual abuse cases in Wichita, Milwaukee, and New Bedford
• The Texas sheriff's office case tied to reproductive-related searches
• 404 Media's reporting on ICE's informal access to Flock data despite no official contract
• Flock's "Freeform" search feature and the race/ethnicity flagging controversy
• CEO Garrett Langley's August 13 apology and the new audit reforms
• The historical parallel: NSA's "LOVEINT" scandal from the Snowden leaks
• What's actually working: 39+ contracts canceled by cities in 2026
• 3 concrete steps if your town has these cameras

flock safety, flock cameras, license plate reader, ALPR, police surveillance, data privacy, police stalking, automated license plate reader, mass surveillance, privacy please podcast, cybersecurity, ICE surveillance, police misconduct, LOVEINT

Support the show

Jonathan Sander is back on Privacy Please — and he's brought two blog posts worth arguing about.

Sander (42 Notions, now in an operational role at Myota) joins Cam and Gabe to dig into why ransomware resilience should work like New York City's storm surge infrastructure — building something that pays off before disaster strikes, not just a wall you wait behind. Then the conversation turns to AI agents: why Sander tried and failed to build a clean taxonomy for them, the six dimensions he landed on instead (authority, execution location, trigger, persistence, delegation, tool reach), and why the "hybrid agent" — switching between acting on your behalf and acting with power you never had — might be the hardest identity problem in security right now.

Also covered: why "back to basics" (secrets, resilience, identity) is Sander's answer for teams panicking about AI, and a real story about an AI agent that deleted a Postgres database and just... apologized.

Articles referenced:

• Ransomware Doesn't Have to Hit Like a Hurricane (Myota): https://www.myota.io/articles/ransomware-doesnt-have-to-hit-like-a-hurricane
• Why We Need an AI Agent Taxonomy Right Now But We Can't Have One (42 Notions): https://blog.42notions.com/why-we-need-an-ai-agent-taxonomy-right-now-but-we-cant-have-one/

Chapters:

• 00:00 – Catch-up with Sander
• 14:30 – The hurricane analogy: why Myota built resilience instead of a wall
• 20:30 – What actually makes Myota different from standard backup/cyberstorage
• 22:15 – Why you can't build a clean AI agent taxonomy (and the six dimensions Sander landed on instead)
• 28:50 – The hybrid agent problem: acting "on behalf of" vs. "for the benefit of"
• 45:10 – Sander's one takeaway: get the basics right before chasing the AI hype

Support the show

Full Show Notes

This week on Privacy Please, Cam breaks down four stories that all come back to one theme: choice.

GigaWiper — Microsoft researchers uncovered a new backdoor malware built from pieces of older malware families, giving attackers the ability to decide after they're already inside a network how they want to cause damage — from low-level disk wipes to fake ransomware with encryption keys that are never even saved. Multiple security firms are independently tracking it, with no group attribution yet.

Connecticut's new AI disclosure law — As of July 1st, companies covered by Connecticut's privacy law must clearly disclose whether their data is used to train large language models like ChatGPT, Gemini, DeepSeek, or Grok. Cam digs into why "disclosure" doesn't always mean "clarity," and what to actually look for in a privacy policy update.

California's Delete Act (DROP) — A correction and a deep dive: DROP has been live since January 1st, not launching in August as previously stated. What actually changes on August 1st is enforcement — the date data brokers become legally required to act on deletion requests. Cam walks through exactly how to submit one at privacy.ca.gov.

The Phantom Hacker gold bar scam — A 78-year-old Phoenix woman nearly lost $600,000 in gold bars to a scammer posing as a federal official — until she turned the tables and called the FBI herself. Cam covers the arrest, the courier-for-hire business model behind it, and the billion-dollar scale of phantom hacker scams since 2024.

Tips for this episode:

• Back up your data offline — wipers don't negotiate, there's no ransom to pay your way out
• Search privacy policy updates for "train," "AI," or "language model" before skimming past them
• California residents: submit a DROP request now at privacy.ca.gov so it's queued before enforcement begins on August 1st
• No real government agency will ever tell you to convert your money to gold, crypto, or gift cards — hang up and call the agency back yourself

Sources referenced:

• Microsoft Security research on GigaWiper
• Connecticut Data Privacy Act (CTDPA) amendment, effective July 1, 2026
• California Delete Act / DROP platform, cppa.ca.gov
• FBI IC3 reporting on Phantom Hacker and gold bar scams
• AZFamily coverage of the Gary Christopher arrest, Phoenix Sky Harbor Airport

Chapter Timestamps

00:00 – Cold Open 01:30 – GigaWiper: Choose-Your-Own-Destruction Malware 04:00 – Connecticut's LLM Data Disclosure Law 06:15 – California's Delete Act & DROP Platform 08:30 – The Phantom Hacker Gold Bar Scam 11:30 – Recap & Close

Support the show

Last year, every major outlet ran the same story: 16 billion passwords exposed. Apple. Google. Facebook. The largest breach in history.

It was overblown. Security experts tore it apart within 48 hours.

But here's the thing: the real story underneath that headline is actually scarier. And nobody covered it.

It's called infostealer malware. It's been quietly running on millions of devices — stealing passwords, bypassing MFA, and feeding an underground credential economy that's behind nearly every major breach of the last two years. Ticketmaster. AT&T. Coinbase. All of it traces back here.

In this episode, I dig back into that story and break down:

• Why the 16 billion number was a "fearset, not a dataset"
• What infostealer malware actually is and how it gets on your device
• Why MFA doesn't fully protect you from this (and what does)
• The underground marketplace where your stolen credentials are sold within 48 hours
• The stat that should genuinely keep you up at night: 67 seconds
• Six things you can do right now to protect yourself

SHOW NOTES

Episode: Your Password Is Already For Sale

Last year, the 16 billion password story dominated headlines. The headline was overblown — but the real threat underneath it, infostealer malware, is what nobody talked about. It's an industrial-scale credential theft economy running quietly in the background, and it's the engine behind almost every major data breach of the last two years. We dug back into it because it's only gotten worse.

Resources mentioned:

• Check if your email has been breached: haveibeenpwned.com
• Free password manager: bitwarden.com
• Premium password manager: 1password.com

Key sources:

• Cybernews — original 16 billion credential report (June 2025)
• CyberScoop — "The 16 billion password breach story is a farce"
• Flashpoint / DeepStrike — 1.8 billion credentials stolen in 2025 report
• Microsoft Security Blog — Lumma Stealer breakdown
• IBM X-Force Threat Intelligence Index 2025
• Verizon Data Breach Investigations Report 2025
• SANS Institute commentary

Connect:
🌐 theproblemlounge.com
📺 YouTube: The Problem Lounge Network

Support the show

Gabe and I dig into Shiny Hunters and why the scariest cyberattacks now look like ordinary logins instead of dramatic break-ins. We map how credential theft, social engineering, and SaaS data exports turn basic security hygiene into the difference between a close call and a headline. 

• Shiny Hunters’ scale, loose structure, and why takedowns rarely stick 
• Why ransomware and extortion keep growing as a business model 
• How the tactics evolve from Microsoft 365 and developer creds to SaaS platforms like Salesforce 
• Credential stuffing, vishing, and smishing as “low-friction” intrusion paths 
• The Snowflake-style failure mode of missing MFA and weak password practices 
• Password reuse and how consumer breaches can cascade into enterprise access 
• Data retention and why old records increase privacy risk 
• Vendor risk and the shared responsibility model for identity and data 
• Practical steps that improve security without relying on perfect users 

If you guys have not been to our website, theproblemlounge.com, check it out. Got some new blogs up there. Sign up for the newsletter. Support us, follow us. Let’s get this out to more people. 

Support the show

SHOW NOTES 

The Pornhub breach is being reported as a data story. It's actually a story about shame as a weapon.

In December 2025, a hacker group called ShinyHunters claimed to have stolen 200 million records from Pornhub Premium users — including email addresses, locations, and intimate watch and search history. They sent extortion demands. The data was verified as real.

In this episode of Privacy Please, Cameron Ivey breaks down:

✅ What was actually stolen — and why it's worse than most breaches ✅ The three-way blame game between Pornhub, Mixpanel, and a mysterious 2023 employee access ✅ Why ShinyHunters is one of the most dangerous and active hacker groups operating right now ✅ The bigger question nobody's asking: why does this data still exist? ✅ Five things you can do right now to protect yourself

🔗 RESOURCES MENTIONED:

• Check your email in breaches: haveibeenpwned.com
• Freeze your credit: annualcreditreport.com (links to all three bureaus)
• Data removal: DeleteMe — joindeleteme.com
• Follow the reporting: bleepingcomputer.com | malwarebytes.com/blog

📰 SOURCE REPORTING:

• BleepingComputer — ShinyHunters extortion demand (December 2025)
• Malwarebytes — Pornhub/Mixpanel/SoundCloud breach roundup
• Euronews — Pornhub investigation coverage
• Reuters — user data verification
• Panda Security — breach overview

🎙️ Privacy Please is part of the Problem Lounge Network 🌐 theproblemlounge.com 📺 YouTube: The Problem Lounge Network

If this one hit different — share it. 

Support the show

In this episode of Privacy Please, Cameron Ivey investigates Palantir Technologies — a data analytics company founded in 2003 with CIA backing that has quietly become embedded across nearly every major arm of the U.S. federal government.

This week's investigation covers:

The USDA Deal On April 22nd, the Department of Agriculture signed a $300 million blanket purchase agreement with Palantir to build "One Farmer, One File" — a unified digital profile for every American farmer. The deal was awarded without competitive bidding.

The IRS Bombshell The same week, The Intercept revealed — based on documents obtained by watchdog group American Oversight — that Palantir has been running financial crime surveillance operations inside the IRS since 2018. The IRS has paid Palantir over $130 million for access to a platform that cross-references bank records, tax filings, transaction histories, and more across millions of Americans.

The Immigration Enforcement Machine Palantir's ICE contracts — now over $145 million — power the agency's case management, deportation targeting, and real-time location tracking of immigrants. A tool called ELITE creates individual dossiers on deportation targets by pulling data from the Department of Health and Human Services.

The Pushback That's Working New York City's public hospital network canceled its Palantir contract after community organizing and City Council pressure. In the UK, 229,000 people have signed petitions to remove Palantir from the National Health Service. Public pressure is moving the needle.

Five Things You Can Do Right Now Cameron closes with specific, actionable steps every listener can take — from requesting your IRS transcript to freezing your credit to contacting your representative about sole-source contracting.

Privacy Please is part of the Problem Lounge Network. New episodes weekly. theproblemlounge.com

Chapter Markers 

• 00:00 — Cold Open
• 01:30 — Intro & Show Welcome
• 02:45 — Act One: The USDA Deal
• 06:00 — Act Two: Who Is Palantir?
• 11:30 — Act Three: The Empire Expands (ICE, Policing)
• 17:00 — Act Four: Your Tax Returns Are In There Too
• 24:00 — Act Five: The Layer Nobody's Talking About
• 30:00 — Act Six: The Part That Gives Me Hope
• 34:30 — What You Can Actually Do (5 Tips)
• 39:00 — Closing Reflection (Adjust timestamps after editing)

Support the show

A normal data breach steals names and passwords. This one may have stolen the recipe for building the world’s most powerful AI models, and it happened through software most people will never notice until it breaks. We follow the Mercor breach from the first warning signs to the moment poisoned Python packages hit PyPI and spread in minutes across systems that were set to auto-update.  

We walk through what Mercor actually does in the AI economy, especially RLHF (Reinforcement Learning from Human Feedback), and why that behind-the-scenes work shapes how tools from OpenAI, Anthropic, Meta, and Google behave. Then we unpack Lite LLM, the open source “plumbing” that connects apps to multiple AI services, and how a supply chain attack can bypass the company you’re targeting by compromising the dependencies everyone trusts. 

From there, the focus shifts to the fallout: contractors whose Social Security numbers and identity documents may be exposed, companies scrambling to assess backdoors and credential theft, and the bigger fear that proprietary AI training data sets and labeling strategies are being auctioned on the dark web. We also dig into the compliance controversy around SOC2 and ISO 27001 style certifications and what happens when security audits become performance instead of protection. 

If you care about cybersecurity, data privacy, AI governance, and open source risk, listen through to the end for concrete steps you can take right now. Subscribe, share this with a friend who uses AI tools, and leave a review with your take on who should be held accountable.

Support the show

You already knew you were the product. But did you know you're also the teacher?

Companies are quietly feeding your emails, your work decisions, your customer interactions, and your daily patterns into AI systems — systems designed to automate exactly what you do. And most people have no idea it's happening.

In this episode of Privacy Please, we break down how it works, who's doing it, why your right to delete your own data is functionally broken in the AI era, and what you can actually do about it.

What we cover:

• How "function creep" turns your data into AI training fuel without new consent
• The GitHub policy change that's happening right now — and how to opt out
• Why employees at Amazon, Google, and JPMorgan described training AI as "building your own coffin."
• The deletion problem — why you can't remove yourself from a trained model
• Practical steps to audit your tools and protect yourself today

Links:

• GitHub opt-out: github.com/settings/copilot/features
• Khan v. Figma lawsuit: rainintelligence.com
• FTC on AI data practices: ftc.gov
• Check your state privacy rights: iapp.org/resources/article/us-state-privacy-legislation-tracker
• Delete old posts: redact.dev

Privacy Please is part of The Problem Lounge network. 🌐 theproblemlounge.com 🎙️ Subscribe on Apple Podcasts, Spotify, or wherever you listen

Support the show

Your anonymous account isn't anonymous anymore. Researchers just proved it costs $4 to find out who you are.

In February 2026, a team from ETH Zurich and Anthropic published a paper that quietly ended the era of practical online anonymity. Their AI pipeline, using nothing but your posts, comments, and forum activity, correctly identified 67% of pseudonymous users from a pool of 89,000 candidates. No name. No photo. No metadata. Just your words.

This episode breaks down exactly how it works, why it's different from every deanonymization scare before it, who's most at risk, and what you can actually do about it.

In this episode:

• How the ESRC pipeline (Extract, Search, Reason, Calibrate) works
• Why previous anonymity attacks required structured data, and this one doesn't
• Why commercial AI safety guardrails didn't stop it
• What "practical obscurity" meant, and why it's gone
• Concrete steps to reduce your exposure today

Links:

• Research paper: arxiv.org/abs/2602.16800
• Delete your Reddit history: redact.dev
• Tor Project: torproject.org
• Signal: signal.org

Privacy Please is part of The Problem Lounge network. 🌐 theproblemlounge.com 🎙️ Subscribe on Apple Podcasts, Spotify, or wherever you listen

Support the show

Cameron and Gabe sit down with Girish Redekar, co-founder and CEO of Sprinto, to pull back the curtain on one of the most misunderstood areas of security: compliance.

Girish built his first startup, RecruiterBox, to 3,500 customers before selling it, and it was the painful, expensive, duct-taped compliance process he experienced firsthand that sparked the idea for Sprinto. Today, Sprinto helps companies move beyond point-in-time audits into something far more valuable: continuous, autonomous trust.

In this episode, we dig into:

• Why passing a SOC 2 or ISO 27001 audit doesn't mean you're actually secure
• The three stages of compliance maturity — and how to climb them
• What "compliance debt" is and why it's quietly eating your business
• How smart CISOs use their security posture as a revenue driver, not a back-office cost center
• The "$100/month" challenge: what actually moves the needle for startups
• How AI is reshaping compliance programs — for better or worse
• Why Girish spent over a year talking to customers before writing a single line of code

Plus: the "sell more jeans" framework every CISO should know, Rich Hickey, The Mom Test, and the toilet paper question.

🔗 Find Sprinto at sprinto.com 

Support the show

How a Super Bowl dog commercial accidentally revealed America's surveillance infrastructure

A family loses their dog. Ring runs a Super Bowl ad. America collectively goes "wait… what?"

This week, we're digging into Ring's "Search Party" feature, the AI-powered doorbell camera tool that lit up millions of living rooms during the big game and immediately made privacy experts lose their minds. Because what looked like a heartwarming story about finding your lost lab was actually a live demonstration of a nationwide networked surveillance system most people didn't know they were part of.

We follow the trail from the commercial to the backlash, from a secret police surveillance partnership that quietly got canceled mid-chaos, to an 84-year-old woman's "deleted" doorbell footage that the FBI recovered anyway.

There's a lost dog. There's Amazon. There's a company called Flock Safety that you need to know about. And there's a question worth asking before you go home and look at your front door.

They sold you a puppy. They built a network.

Support the show

Autonomy sounds like progress until the system turns your choices against you. We dive into how AI agents change the risk equation, why “don’t trust, verify” now beats “trust but verify,” and what to do when the update button itself becomes the attack vector.

We start with the Ivy League leak tied to Harvard and UPenn, where attackers exposed admissions hold notes that map influence rather than credit cards. That context turns routine records into leverage for extortion, social pressure, and geopolitical targeting. From there, we trace the surge of agentic AI in the workplace as employees paste code, legal docs, and sensitive files into chat interfaces. The real accelerant is MCP, the model context protocol that standardizes connections across Google Drive, Slack, databases, and more. Like USB for AI, MCP makes integration simple and powerful, but a single prompt injection can pivot across everything the agent can reach.

Security gets messier with supply chain compromise. A China‑nexus campaign allegedly hijacked the Notepad++ update mechanism, handing a bespoke backdoor to developers who did the right thing. We unpack how to keep patching while reducing risk: signed updates, independent checksum checks, tight egress policies for updaters, and strong monitoring around update flows. On the policy front, Rhode Island’s vendor transparency rule forces companies to name who buys data. It is a nutrition label for privacy, and it lets users and watchdogs finally connect the dots between friendly interfaces and aggressive brokers.

We close with concrete defenses that raise the floor. Move high‑value accounts to FIDO2 hardware keys or platform passkeys to block phishing at the protocol level. Scope agent permissions narrowly, isolate MCP connectors by function, and require explicit approvals for sensitive actions. Log everything an agent touches and review those trails. Autonomy should be earned, minimal, and observable. If AI is going to act on your behalf, it must prove itself at every step.

If this conversation helps you think differently about agents, influence mapping, and how to lock down your stack, subscribe, share with a teammate, and leave a quick review telling us the one control you plan to implement this week.

Support the show

We kick off season seven with a tour of the year’s early privacy & security news: neighborhood watchtowers from Ring, a rival-led hack of Breach Forums, a massive stitched leak in France, a heavy Microsoft patch drop, AI agents on the rise, and new state privacy laws. We share practical steps: self-host cameras, freeze your credit, harden identity portals, and keep humans in the loop when AI handles sensitive data.

• CES unveils Ring’s neighborhood watchtower and its surveillance tradeoffs
• Why self‑hosted DVR systems beat cloud video for privacy
• Breach Forums doxxed by rivals and lessons in OPSEC
• France’s 45 million record “combo” leak and re‑identification risks
• Credit freezes, hard vs soft inquiries, and portal security
• Microsoft’s 114 patches and sane patch management
• AI agents escalating breach risk and human‑in‑the‑loop controls
• New privacy laws in Indiana, Kentucky, and Rhode Island and actionable rights

Please go to theproblemlounge.com and sign up for the newsletter
If you have guests or topics or anything, please reach out to us!

Support the show

We look back at 2025’s privacy and security reality: useful AI where data was ready, repeating breach patterns, and infrastructure limits that slowed the hype. We call out backdoors, weak 2FA, and the shift toward passkeys, decentralization, and owning more of our stack.

• AI succeeds when data, process and governance are mature
• Power, chips and cost constraints limit AI growth
• SALT Typhoon shows backdoor risk and patching failures
• SMS 2FA remains weak while passkeys gain ground
• Data hoarding expands breach blast radius
• Streaming consolidation drives algorithm control and piracy’s return
• Decentralization and self‑hosting rebuild trust with users
• 2026 outlook: AI contraction, ML pragmatism, fewer but stronger tools

Check out our website: the problemlounge.com
If you have episode guest ideas or topics you want us to talk about, please send them our way
Go check out YouTube channel, Privacy Please Podcast

In 2026, would you like to see us do live streams? 

Support the show

It is Monday, December 15th, and the battle for Hollywood has officially gone nuclear.

What started as an $82 billion acquisition by Netflix has morphed into a $108 billion hostile takeover battle with Paramount Skydance. As of this morning, stocks are volatile, the government has frozen the deal, and a massive Class Action Lawsuit has just been filed to burn it all down.

In this Special Report from Privacy Please, we break down the chaos of the last 72 hours. We uncover the "National Security" weapon Netflix is using to kill the deal, the foreign money backing Paramount, and the leaked memos that reveal why executives are selling you out.

No matter who wins—the Algorithm or the Oligarchs—your privacy is the casualty.

Time Stamps / Key Moments:

0:00 - Monday Morning Chaos: Stocks Halted & The $108B Counter-Bid

2:15 - Future A vs. Future B: The Algorithm Era vs. The Oligarch Era

5:30 - BREAKING: The "National Security" Argument & Class Action Lawsuit

8:45 - Leaked Memos: The "Golden Parachute" Betrayal

11:20 - The Fallout: Why Streaming Prices Will Hit $35/Month

What you'll uncover in this deep dive:

The Weekend of Chaos: A complete timeline of how Netflix lost control of the deal over the weekend.

The "Foreign Money" Threat: Why Paramount's backing by sovereign wealth funds has regulators panicked.

Netflix's Hypocrisy: How the surveillance giant is weaponizing "privacy" to stop their competitors.

The Consumer Cost: Why the era of cheap streaming is officially dead.

Join the Community: We are building a community dedicated to navigating these complex digital issues.

Website & Newsletter: https://www.theproblemlounge.com

Support the Show: http://buzzsprout.com/622234/support

Don't forget to Like, Comment, and Subscribe! Your support helps us uncover the stories Big Tech wants to hide.

#WarnerBros #Netflix #Paramount #StreamingWars #PrivacyPlease #Antitrust #FTC #DataPrivacy #Hollywood #BreakingNews #ClassAction #StockMarket

Support the show

A week where the lawful intercept backdoor became the front door, a supply chain hop hit 200+ companies, a bargain app faced a malware lawsuit, and a university breach turned into a donor-targeting roadmap. We share simple moves to lower risk fast and set guardrails that actually hold.

• Salt Typhoon abusing CALEA at major US telecoms
• Negligence, unpatched routers and weak passwords
• Why SMS is transparent and how to switch to Signal
• Kill SMS 2FA and use authenticators or YubiKey
• Gainsight-to-Salesforce island hopping at scale
• Audit connected apps and revoke stale API keys
• Arizona AG lawsuit calling Timu malware
• Shop via browser sandbox and use masked payments
• UPenn donor data leak and Oracle exploit
• Whaling protections with voice verification and data scrubbing
• Practical recap: trust nothing, verify everything

Please follow us or subscribe on your podcast app, and watch the video on our YouTube or at theproblemlounge.com. If you have topics or guest ideas, we would love to hear from you

Support the show

A sleepless night, a soft prompt, and a flood of relief—the rise of AI therapy and companion apps is rewriting how we seek comfort when it matters most. We explore why these tools feel so human and so helpful, and what actually happens to the raw, intimate data shared in moments of vulnerability. From CBT-style exercises to memory-rich chat histories, the promise is powerful: instant support, lower cost, and zero visible judgment. The tradeoff is less visible but just as real—monetization models that thrive on sensitive inputs, “anonymized” data that can often be re-identified, and breach risks that turn private confessions into attack surfaces.

We dig into the ethical edge: can a language model provide mental health care, or does it simulate empathy without the duty of care? We look at misinformation, hallucinated advice, and the way overreliance on AI can delay genuine human connection and professional help. The legal landscape lags behind the technology, with HIPAA often out of scope and accountability unclear when harm occurs. Still, there are practical ways to reduce exposure without forfeiting every benefit. We walk through privacy policies worth reading, data controls worth using, and signs that an app takes security seriously, from encryption to third‑party audits.

Most of all, we focus on agency. Use AI for structure, journaling, and small reframes; lean on people for crisis, nuance, and real relationship. Create boundaries for what you share, separate identities when possible, and revisit whether a tool is helping you act or just keeping you company. If you’ve ever confided in a bot at 2 a.m., this conversation gives you the context and steps to stay safer while still finding support. If it resonates, subscribe, share with a friend who might need it, and leave a review to help others find the show.

Support the show

In this episode of Privacy Please, host Cameron Ivey discusses significant security threats, including a critical vulnerability in Microsoft's WSUS, a major data breach at the University of Pennsylvania, and the emergence of sophisticated malware known as Glassworm. The conversation highlights the importance of cybersecurity measures and the potential consequences of negligence in IT security.

Support the show

She has millions of followers, lands six-figure brand deals, and lives a life of curated perfection. The only catch? She isn't real. She was entirely created by artificial intelligence.

Welcome to the unsettling world of synthetic influencers.

In this compelling episode of Privacy Please, we dive deep into the booming industry of AI-generated online personalities. Discover:

• The Technology: How advanced AI image generators, 3D modeling, and Large Language Models combine to create hyper-realistic avatars and their compelling "personalities."
• The Business Case: Why major brands and marketing agencies are investing millions in digital beings that offer total control, scalability, and no risk of scandal.
• The Privacy & Ethical Dilemmas: We explore the "uncanny valley" of trust, the impact of deception by design, the new extremes of unrealistic beauty standards, and the potential for these AI personas to be used for sophisticated scams or propaganda.
• The Future of Authenticity: What does the rise of the synthetic star mean for human creativity, genuine connection, and the very definition of "real" in our digital world?

It's a future that's already here, shaping what we see, what we buy, and even what we believe.

Key Topics Covered:

• What are virtual/synthetic influencers?
• Examples: Lil Miquela, Aitana Lopez, Shudu Gram
• AI technologies used: image generation, 3D modeling, LLMs
• Reasons for their rise: control, cost, scalability, data collection
• Ethical concerns: deception, parasocial relationships with AI
• Impacts: unrealistic standards, displacement of human creators, potential for malicious use (scams, propaganda)
• Debate around regulation and disclosure for AI-generated content
• The future of authenticity and trust online

Connect with Privacy Please:

• Website: theproblemlounge.com
• YouTube: https://www.youtube.com/@privacypleasepodcast
• Social Media:
  • LinkedIn: https://www.linkedin.com/company/problem-lounge-network

Resources & Further Reading (Sources Used / Suggested):

• Federal Trade Commission (FTC):
  • Guidelines on disclosure for influencers (relevant for future AI disclosure discussions)
• Academic Research:
  • Studies on parasocial relationships with media figures (can be applied to AI)
  • Research on the ethics of AI and synthetic media.
• Industry Insights:
  • Reports from marketing agencies on virtual influencer trends
  • Articles from tech publications (e.g., Wired, The Verge, MIT Tech Review) covering Lil Miquela and similar figures.

Support the show

We unpack how Apple’s Memory Integrity Enforcement changes the rules of mobile security by rebuilding memory architecture, not just adding guardrails. We weigh who should upgrade now, what this means for Android, and why people remain the biggest risk.

• memory corruption explained with apartment analogy
• why NOP sleds and heap sprays fail under MIE
• tags, type segregation, and synchronous checks at runtime
• market-share vs design: Apple, Windows, Android trade-offs
• Pegasus, zero-click exploits, and threat profiles
• game hacking parallels: reading vs corrupting memory
• should you upgrade: high-risk users vs everyday users
• why architecture-level security beats bolt-on tools

Support the show

You click "agree," you swipe a loyalty card, you browse online – every digital breadcrumb you leave is being collected, but not just by the apps and websites you use. Welcome to the world of data brokers, a multi-billion-dollar, hidden industry that aggregates, analyzes, and profits from your most intimate personal information.

In this special episode from Privacy Please, we pull back the curtain on this shadowy ecosystem. Discover:

• What a data broker is and how they differ from typical tech companies.
• Where they get your data – from public records and online activity to your shopping habits and app usage.
• Who they sell your data to – marketers, financial institutions, insurers, political campaigns, and even law enforcement.
• The alarming real-world impacts, from hyper-targeted ads and scams to potential discrimination and exploitation.
• This industry operates with minimal regulation in the United States, leaving most consumers vulnerable.
• Actionable steps you can take right now to reclaim some control over your personal information, including data removal requests and essential digital hygiene.

It's an invisible trade happening without your consent, and you are the product. Listen now to understand the true price of your digital life.

Key Topics Covered:

• What are data brokers?
• Sources of personal data collection
• Types of data collected (demographics, health, financial, behavioral)
• Who buys data broker profiles?
• Impacts: targeted ads, scams, discrimination, political targeting
• Lack of federal regulation in the U.S.
• Consumer rights (e.g., CCPA)
• Steps to protect your privacy from data brokers
• Data removal services
• Digital hygiene best practices

Connect with Privacy Please:

• Website: https://theproblemlounge.com/
• YouTube: https://www.youtube.com/@privacypleasepodcast7446
• Social Media:
  • LinkedIn: https://www.linkedin.com/company/problem-lounge-network

Resources & Further Reading (Sources Used):

• Federal Trade Commission (FTC):
  • Data Brokers: A Call for Transparency and Accountability (FTC Report, 2014) 
  • FTC consumer advice on data brokers and privacy
• Consumer Reports:
  • Articles and investigations into data brokers and data removal services
• Electronic Frontier Foundation (EFF):
  • Privacy resources, including "Surveillance Capitalism" explanations
• California Consumer Privacy Act (CCPA):
  • Official information on consumer rights in California
• Identity Theft Resource Center (ITRC):
  • Information on scams and data exposure
• Acxiom, Oracle, Epsilon, Experian, etc.

Support the show

Privacy and cybersecurity leader Sonia Siddiqui joins us to explore the collision between emerging technologies and privacy regulations, offering insights on how companies can navigate this complex landscape while building trust.

• Sonia's journey from aspiring architect to privacy expert, motivated by the intersection of civil rights and privacy
• The growing gap between rapid technological innovation and slower-moving regulatory frameworks
• Examining real-world tensions like WorldCoin's iris scanning under GDPR's biometric data provisions
• Why privacy should be a core business enabler rather than just a compliance checkbox
• The importance of implementing privacy by design as a living process that evolves with technology
• Why principles-based regulation allows for better adaptation to new technologies than prescriptive rules
• The inseparable relationship between privacy and security in building customer trust
• How privacy professionals can stay current through professional networks, podcasts, and continuous learning
• Essential privacy resources including "The Unwanted Gaze" and "Dieterman's Field Guide to Privacy"

Find Sonia and her privacy consulting practice at tamarack.solutions or connect with her at the upcoming AI conference in Boston.

Support the show

The digital world can be treacherous, especially when you're looking for a safe space to share your most vulnerable thoughts. Today's story about the Tea app breach will make you rethink every "anonymous" platform you've ever trusted.

Tea promised women complete anonymity, a digital sanctuary where they could share dating horror stories, relationship struggles, and deeply personal confessions too raw for other platforms. Thousands believed this promise, uploading personal photos and sharing intimate details of their lives. Then security researchers made a chilling discovery: Tea's entire database sat completely unprotected on the internet. No password required. 

The numbers are staggering: 72,000 private images including selfies and IDs, plus 1.1 million direct messages containing confessions about abortion, sexual assault, infidelity, and more, all exposed. But the story takes an even darker turn when someone created "T-Spill," weaponizing this stolen data by turning private photos into ranking games and mapping personal information to real locations. This wasn't just a technical failure; it was a profound betrayal that turned a supposed sanctuary into what can only be described as a predator's playground.

As the FBI investigates and lawsuits mount, we're left with uncomfortable questions about digital trust. How do we balance our need for connection with the reality that our most vulnerable moments are only as protected as the people building these platforms? The next time an app promises total privacy, remember Tea and maybe wait to see how they handle their first crisis before sharing your deepest secrets. Subscribe to Privacy Plays for more deep dives into breaches that expose the very human cost of our connected world, and check out our expanded content on the Problem Lounge Network.

Support the show

For decades, Chris Hansen’s iconic catchphrase, "Why don't you have a seat?" was the prelude to exposing predators in the real world. 

Now, his hunt has moved into the metaverse. His target is Roblox, the global gaming platform used by over 70 million people daily, most of whom are children. Hansen and his team allege the platform is a "cesspool" and a "hunting ground" for criminals, while Roblox maintains its safety systems are robust.

In this special report, "Privacy Please" goes beyond the headlines to investigate the clash. We explore the platform's design, from the "Avatar Loophole" that allows bad actors to bypass chat filters to the recommendation algorithm that can lead young users down dangerous paths. 

Is this a simple case of a company needing to moderate more, or is the very business model that made Roblox a multi-billion dollar success also its greatest safety vulnerability?

Credited Resources & Further Reading

Primary Sources & Reporting:

• Takedown Across America with Chris Hansen: Official platform for Hansen's ongoing investigations and reporting.
• Roblox Corporate Statements & Community Standards: Official statements and policies from Roblox regarding their safety and moderation efforts.
• WIRED/Bloomberg Reporting: Recent articles from major tech publications that have investigated platform safety issues on Roblox and similar metaverse platforms.
• Common Sense Media: A non-profit organization that provides independent reviews and ratings for media and technology, often analyzing the safety features of platforms like Roblox.

(Note: As this is an ongoing investigation, it's recommended to reference the most current news articles and official press releases from the time of recording for the most up-to-date information.)

Support the show

Digital privacy is under siege from all sides, and we're bringing you the latest developments along with a major announcement about our growing privacy-focused network. 

This week has seen a flood of significant data breaches across critical sectors. Air France-KLM and Workday experienced major incidents, with the latter connected to a broader campaign targeting Salesforce CRM systems. These breaches highlight the vulnerability of systems storing vast amounts of customer data and raise serious questions about the security of our critical infrastructure. As we discuss these events, we examine the ripple effects they create and what organizations should be doing differently.

The question of who truly owns your digital identity emerges as a central theme in our conversation. Most people don't realize that when using third-party authentication providers like Google or Facebook, they're surrendering control of their identity. Every "Login with Facebook" click allows these companies to track when and where that identity is used across the digital landscape. We explore self-sovereign identity as an alternative approach, where individuals control their own verification infrastructure rather than relying on tech giants.

We also tackle the paradox at the heart of data minimization efforts. For years, companies have been told that "data is the new oil" or "currency," yet are now expected to minimize collection. This contradiction makes implementing privacy principles challenging. As we put it: "You told me I'm sitting on gold, and now you want me to minimize it?"

Beyond these discussions, we share exciting news about our expansion into a network featuring three distinct shows. In addition to Privacy Please, we're launching "Problem Lounge," exploring the messiness of being human in our technology-driven world, and "Decoded," a technical deep-dive with privacy engineer Jake that will explore privacy-enhancing technologies, cookie audits, and the intersection of privacy and AI.

Visit our new website at theproblemlounge.com to learn more about our expanding network and how you can become part of the conversation around privacy in the digital age.

Support the show

It starts with a strange letter in the mail. A car loan you never applied for. A credit card you don't own. A digital ghost is quietly living your life, and you have no idea how it got the keys. When you turn to one of the silent guardians of your financial identity for help, you find only chaos, confusion, and a company that seems to be a danger to itself.

This week on Digital Fallout, we tell the true story of one of history's most catastrophic data breaches. It's a tale of staggering corporate negligence, a botched public response that became a dark comedy, and a 76-day silent heist where the identities of 147 million people were stolen.

What happens when the keepers of our most valuable secrets simply forget to lock the door?

Show Notes: Sources

This story was pieced together from numerous public records, government reports, and in-depth investigative journalism. For those who want to learn more about the 2017 Equifax breach, these are the key sources we consulted:

• The official report from the U.S. Government Accountability Office (GAO) titled "Data Protection: Actions Taken by Equifax and Federal Agencies in Response to the 2017 Breach," which provides a definitive timeline and analysis of the failures.
• Federal Trade Commission (FTC) public statements and court filings related to the landmark global settlement with Equifax.
• In-depth reporting from security journalist Brian Krebs (KrebsOnSecurity), who meticulously covered the botched response, including the fake phishing sites promoted by Equifax's own Twitter account.
• Technical explainers from outlets like WIRED magazine that broke down the Apache Struts vulnerability and how it was exploited.
• Ongoing coverage of the corporate and financial fallout from The New York Times and The Wall Street Journal during September and October 2017.
• The public testimony of former Equifax CEO Richard Smith before the U.S. House Committee on Energy and Commerce, where many of the internal failures were brought to light.

Support the show

It started with a few flickering screens in a Danish office. Within minutes, a digital plague had paralyzed global trade, leaving the world's largest shipping company powerless and its massive vessels adrift. But this attack wasn't for ransom—it was for pure destruction. In the premiere of Digital Fallout, we uncover the story of a geopolitical cyber weapon that escaped its cage and the unbelievable, accidental miracle that saved a global empire from permanent deletion. This is the story of how our physical world hangs by a fragile digital thread.

Show Notes: Sources

Our story today was built on the foundation of incredible investigative journalism from reporters who covered this event extensively. For listeners who want to dive deeper into the story of the NotPetya attack, these are the primary sources we recommend:

• "The Untold Story of NotPetya, the Most Devastating Cyberattack in History," an article by Andy Greenberg for WIRED magazine, forms the core of the public narrative regarding Maersk's experience.
• The book "Sandworm: A New Era of Cyberwar and the Hunt for the Kremlin's Most Dangerous Hackers" by Andy Greenberg provides deep context on the attackers and the geopolitical landscape.
• Financial and logistical impact reporting from The New York Times, The Wall Street Journal, and Reuters was published in the weeks and months following the June 2017 attack.
• Public statements and quarterly financial reports from A.P. Møller-Maersk detailing the incident's operational and financial costs.

Support the show

We explore how cybercriminals fell victim to their own security mistakes and examine major attacks targeting corporate SharePoint environments. Privacy legislation advances with new protections for children and groundbreaking AI accountability measures in Minnesota.

• Cybercrime forum exposes member data through database misconfiguration
• SharePoint under active attack with remote code execution vulnerabilities 
• California passes enhanced children's privacy legislation requiring stricter parental consent
• Minnesota Consumer Privacy Act launches July 31st with human review rights for AI decisions
• Problem Lounge studio expansion announcement with new podcast launches
• Trust and anonymity requirements in criminal digital ecosystems
• Corporate IT challenges with ubiquitous software vulnerabilities
• Growing complexity of state-by-state privacy compliance requirements

Support the show

The US military has issued a stark warning to all forces to operate under the assumption that their networks have been compromised by Salt Typhoon, a sophisticated threat actor with ties to the Chinese government. This breach highlights the urgency for organizations to adopt Zero Trust principles as cyber warfare becomes the new battlefield.

• Zero Trust is a framework, not a single product or technology
• The first tenant of Zero Trust is treating networks as already compromised
• Salt Typhoon remained undetected in networks for almost a year
• The threat actor targeted telecommunications, energy, and transportation infrastructure
• Critical national infrastructure remains at high risk from similar focused attacks
• Traditional security approaches focusing solely on perimeter defense are inadequate
• Once compromised, networks may never be fully trusted again
• Verification must occur upon every access request, not just initially

Support the show

The European Parliament has released a groundbreaking 175-page study concluding that AI companies' practice of training on copyrighted material without permission constitutes mass reproduction not covered by current laws. This study recommends transforming the landscape through an opt-in system, radical transparency requirements, and fair compensation models for creators whose work trains AI systems.

• EU study reveals AI companies are treating the internet like a free "all-you-can-eat buffet" of creative content
• Recommendation to shift from opt-out to opt-in system requiring AI companies to request permission
• Call for mandatory transparency about what data AI models are trained on
• Proposal for fair licensing models similar to Spotify where creators get paid when their work trains AI
• New EU AI Act regulations taking effect in August will incorporate some of these protections

Stay safe, stay informed, and always question the code.

Support the show

Cameron and Gabe dive into Healthline Media's record-breaking $1.55 million settlement for CCPA violations, examining whether such penalties are sufficient deterrents against improper sharing of sensitive health data.

• Healthline violated CCPA by sharing sensitive user health data with advertisers without proper consent
• First U.S. regulatory action against a company for disclosing "inferred sensitive data"
• Violation included failing to provide mechanisms to opt out of sensitive data sharing
• Discussion of whether fines proportional to company revenue would be more effective
• Comparison of data brokers to other harmful entities in society
• Brief preview of upcoming episode about a major data breach potentially larger than Equifax

Stay safe this holiday weekend and don't put fireworks where they don't belong! Tune in next time for our breakdown of a massive data breach of "epic proportions."

Support the show

Several popular Chrome extensions, including privacy and security tools, have been found leaking sensitive data through unencrypted HTTP and hard-coded credentials in their code. Security is both hard and easy - hard because of existing unencrypted protocols and trust placed in developers, but easy because fundamental security practices should be common knowledge in 2025.

• Chrome extensions including DualSafe Password Manager and Avast Online Security are leaking sensitive user data
• HTTP vs HTTPS - the 'S' stands for security and encrypts data transmission over the internet
• HTTPS Only extension from EFF forces secure connections when browsing
• Hard-coded credentials in extensions create permanent security vulnerabilities
• Developers sometimes collect excessive data "just in case" rather than minimizing collection
• OWASP (Open Web Application Security Project) provides essential resources for developers
• Technology abstraction makes users less aware of security fundamentals
• The newly restarted OWASP Nomad chapter offers virtual community for application security

Check out our GitHub repository of privacy resources at "Awesome Privacy Engineering Tools" for more information on implementing better privacy practices in development.

Support the show

We explore the recent LexisNexus data breach that exposed sensitive personal information of over 364,000 individuals through a third-party platform accessing their GitHub account. This incident highlights critical vulnerabilities in how data brokers handle our most sensitive information and raises questions about regulatory oversight.

• Data exposed included names, date of birth, phone numbers, social security numbers, and driver's license numbers
• The breach occurred when someone accessed the company's GitHub account through a third-party platform
• Attackers likely found hard-coded credentials that allowed them to move laterally through systems 

• Data brokers operate with minimal regulation despite handling massive amounts of sensitive information
• Better governance policies and automated privacy operations could significantly reduce these risks
• Both technical solutions and regulatory approaches are needed to protect consumer data

• Breach Occurred: December 25, 2024.
• Discovery: April 1, 2025.
• Public Notification: May 27, 2025.
• Notice Letters Sent: May 24, 2025.

Shameless plus: Check out tools like Transcend's autonomous privacy operations to help prevent similar incidents and continue to monitor your privacy activities.

Support the show

Gabe and Cameron dive into the unseen dangers of AI systems, exploring how inherent biases shape our perception and how prompt injection attacks pose serious security threats.

• Generative AI models contain built-in biases based on their training data, favoring Western and particularly North American perspectives
• A recent study shows ChatGPT-4 with personalization is more persuasive than humans 64.4% of the time
• Most users accept AI outputs without questioning the underlying biases
• Prompt injection allows hackers to insert malicious instructions into AI systems that can lead to data leaks and security breaches
• Security professionals don't yet understand the full scope of AI vulnerabilities
• Google's new video generation technology makes it impossible to distinguish between real and AI-created content
• Despite digital concerns, it's important to appreciate real-world experiences like enjoying ice cream on a hot summer day

Support the show

ProPublica's investigation reveals the National Shooting Sports Foundation has been secretly sharing gun buyers' personal information, including underwear sizes, for political purposes. This privacy breach raises serious concerns about data exploitation even in industries that publicly position themselves as defenders of individual rights.

• Gun owners group demands federal investigation into firearms industry data sharing
• Personal data shared included underwear sizes and was allegedly used for political targeting
• NSSF collaborated with Cambridge Analytica to enhance voter data
• Privacy concerns should transcend political divides - "Privacy is an everybody problem"
• The gun industry publicly defends rights while quietly engaging in data exploitation
• Senator Richard Blumenthal supports investigation into these practices

If you're a privacy professional or legal expert with insights on this issue, we'd love to have you on the show to discuss this further and answer some of the questions we've raised today.

Support the show

Privacy Please News, for hitting big topics quickly with a hint of sarcasm to bring some joy and knowledge. 

This week, we hit on the latest privacy events in tech with a satirical perspective on how your data is being shared, sold, and exploited. From Google's dramatic stance on sharing search data to state-sponsored hackers dominating zero-day exploits, this episode highlights the absurdity of our current digital privacy landscape.

• Google CEO Sundar Pichai compares sharing search data to "ripping out the company's brain"
• WhatsApp's new AI feature sends "private" messages to cloud servers despite Meta's safety claims
• Gun rights group outraged after gun industry shared customer data, including underwear sizes, for political campaigns
• OpenAI's Sam Altman promotes eyeball scanning for WorldC, dismissing privacy concerns as regulatory lag
• State-sponsored hackers from China and North Korea are leading the zero-day vulnerability exploitation game

Support the show

Cameron and Gabe return after a brief hiatus to explore major developments in security, privacy, and resilience. They dive into insights from the IAPP conference and VeeamOn, examining how AI governance and outdated privacy tools are reshaping the industry landscape.

• AI governance frameworks dominated IAPP discussions with companies "building the plane as they're flying"
• Verizon's Data Breach Report debunks overblown AI security fears, showing real risks are data leakage and poor access controls
• Growing frustration with outdated privacy management tools is driving demand for better solutions
• Security posture isn't about using recognized brands but about architecture without dangerous gaps
• Sam Altman's virtual appearance at IAPP disappointed attendees expecting an in-person keynote

Stay tuned for our bonus episode covering even more developments from this busy week in privacy and security!

Support the show

Privacy threats continue to escalate as human error undermines even the most secure systems, from military officials accidentally exposing classified information to Russian hackers targeting encrypted messaging apps.

• Signal security breach occurred when defense officials accidentally added a reporter to their encrypted group chat discussing sensitive military operations
• Russian-linked attackers targeting Signal users through QR code vulnerabilities, tricking users into linking their secure accounts to attacker-controlled instances
• QR codes present broader security concerns as users can't verify where they lead before scanning them
• Attackers can place malicious QR codes over legitimate ones in public spaces like restaurants and airports
• 23andMe's bankruptcy raises critical questions about the fate of genetic data from 15 million users
• When companies holding sensitive personal information go bankrupt, data ownership and protection becomes uncertain
• Human error remains the primary vulnerability in most privacy and security systems
• Always consider the long-term implications when sharing personal information with any service

Remember to think beyond the present when sharing your data – consider what might happen to that information in 10, 20, or even 30 years from now.

Support the show

Privacy threats are intensifying across multiple fronts, from genetic data vulnerabilities at 23andMe to corporate violations and messaging app security concerns. Cameron Ivey breaks down three urgent privacy issues and provides practical guidance on protecting your digital footprint in an increasingly vulnerable online landscape.

• 23andMe users should consider deleting their genetic data immediately due to bankruptcy proceedings that could compromise privacy protections
• Law professor Craig Conneth warns that terms of service could change during bankruptcy, with inadequate federal regulations to protect consumers
• Honda fined $632,500 by California Privacy Protection Agency for creating unnecessarily complicated opt-out processes
• Companies must reform data request procedures and stop creating "mazes of chaos" that trick consumers
• Signal messaging app, despite its encryption features, has raised NSA security concerns after being used by senior US officials
• No messaging platform is completely secure for highly sensitive information
• Stay informed about your rights under privacy legislation like the CCPA
• Be mindful about what personal information you share digitally, even on supposedly secure platforms

If you have expertise in these privacy issues and would like to join a deeper discussion on the show, contact Cameron for a potential guest appearance.

Support the show

We explore how uncertainty and chaos create both vulnerabilities and opportunities in privacy and security. Amid global turmoil, cybersecurity professionals must adopt a bias toward action to counter increased threats that thrive in chaotic environments.

• Chaos serves as a smoke screen for malicious actors, just as DOS attacks once distracted from network intrusions
• Recent Ghost ransomware attack affected 70 countries but received less attention due to global uncertainty
• Security resource contraction combined with increased noise creates fertile ground for more breaches
• AI may cause job losses primarily in roles created to support the initial AI boom
• States are tightening data breach reporting requirements with class action lawsuits doubling or tripling since 2022
• Some states introducing "safe harbor" laws to shield businesses that implement strict cybersecurity standards
• Elon's Department of Government Efficiency (DOGE) faces 11 lawsuits for allegedly violating Privacy Act of 1974

Support the show

Today's episode dives into the intersection of AI behavior and digital security concerns. We discuss a startling incident involving a malfunctioning AI robot and explore a new ransomware threat known as Ghost. 

• Overview of an AI robot incident that raised ethical concerns 
• Examination of Asimov's Laws of Robotics and their relevance 
• Introduction to Ghost ransomware and its impact on multiple industries 
• Discussion on backup security strategies and resilience against ransomware 
• Insights into the evolving tactics of ransomware attacks, including Ghost's methods 
• Encouragement for businesses to prioritize future-proofing their data security 

We encourage listeners to reach out with questions or further discussion on data backups and data security measures.

Support the show

The emergence of quantum computing presents a unique set of challenges and opportunities for data security and privacy. As Microsoft reveals its new quantum chip, the industry must prepare for the significant threats that stable quantum computing poses to existing encryption methods. 

• Microsoft announces a new quantum processing chip 
• Potential risks to encryption and data security 
• Industry skepticism toward claims of rapid advancements 
• Understanding the mechanics of quantum computing 
• Implications of quantum technology for various sectors 
• The need for proactive planning and strategy for security professionals

Support the show

The episode delves into the ongoing lawsuits challenging the sharing of personal data by federal agencies with Doge, the Department of Government Efficiency. The hosts discuss the implications of these lawsuits, particularly regarding the lack of clarity surrounding Doge's operations and the dismantling of the CFPB, raising concerns about privacy and data protection.

• Overview of Doge data lawsuits and their significance  
• Concerns about data sharing by federal agencies 
• The troubling lack of transparency surrounding Doge 
• The impact of CFPB restructuring on privacy oversight 
• Risks of diminished regulatory powers over personal data 
• Importance of citizen engagement in privacy advocacy 
• Calls for transparency and accountability in data handling 
• The evolving narrative of privacy in the digital age 
• Encouragement for listeners to stay informed and proactive

Support the show

The episode examines the implications of a recent hacking incident involving the Chinese AI company DeepSeek, which claims to outperform competitors on cost and performance. We discuss the risks associated with AI tools, the necessity for better governance, and the broader impacts of AI on cybersecurity and data privacy. 

• DeepSeek's emergence as a significant player in AI
• Performance claims that challenge established tech firms
• Consequences of the recent hack on industry perceptions
• The dangers of unregulated AI usage in corporations
• Governance challenges surrounding AI adoption
• Personal experiences using AI-driven coding tools
• Future predictions on AI's role in security and privacy

Support the show

The conversation centers on the evolving regulatory landscape amid a new administration, discussing the implications for data privacy and AI legislation. The episode emphasizes state-level movements and the potential for Congress to enact a cohesive national law while addressing emerging concerns around social media and technology.

• Overview of the new administration's regulatory potential 
• Recent state-level data privacy laws and their implications 
• Importance of legislative committees in shaping policy 
• Future prospects for national data privacy legislation 
• National security concerns related to technology, especially TikTok 
• Discussion on transparency in AI data usage 
• Evolving roles of states versus federal government in tech policy 
• Anticipation of 2025's regulatory challenges and opportunities

Support the show

Apple’s recent iOS update has raised serious privacy concerns by enabling AI tools that monitor user behavior without consent. The episode emphasizes the urgent need for users to disable invasive settings while questioning Apple's commitment to privacy amidst its marketing claims. 

• Examination of the AI features in the latest iOS update 
• Default settings that allow data collection on app usage 
• Discussion on Apple's reputation versus actual practices 
• Potential consequences for users who are unaware of these changes 
• Speculation on how this may affect Apple's market share 
• Exploration of the need for privacy-focused technology alternatives 
• Encouragement to take action by adjusting privacy settings 

Go turn off all those privacy-invasive settings on your device. 

Support the show

As 2025 kicks off, we explore the irony of the EU Commission fining itself for breaching its own data privacy regulations. The episode delves into the absurdity of minor fines, enforcement challenges, and the need for accountability in privacy governance.

• Introduction to the state of the world in 2025 
• Discussion of California’s wildfires and broader global issues 
• Examination of the EU’s self-imposed fine for data privacy violations 
• Analysis of the significance of a $412 fine 
• Importance of enforcement over mere fines 
• Teaser for upcoming discussions on legislation and privacy in 2025

Support the show

The episode reflects on the intertwined impacts of AI, privacy, and cybersecurity throughout 2024. We explore trends around ransomware, consumer trust in data privacy, and what to expect in 2025 as technologies evolve and regulations advance.

• Discussion of AI's ambiguous role in cybersecurity 
• Rise of ransomware incidents and implications for critical sectors 
• Notable trends in consumer preferences regarding data privacy 
• Legislative developments in data protection regulations 
• Predictions for 2025 focused on quantum computing and cybersecurity strategies

Support the show

Ever wonder how the privacy landscape in the United States is about to shift dramatically? As we return from our Thanksgiving celebrations, we promise you'll gain highlights into the eight new privacy laws that will redefine how businesses handle consumer data by 2025. States like Delaware, Nebraska, New Hampshire, and Iowa are leading the push for more consumer-friendly policies with default opt-out provisions and enhanced measures for children's privacy. 

Switching gears to cybersecurity, we uncover the alarming breach by the Chinese hacking group Salt Typhoon into US telecommunication firms. This episode stresses the critical importance of securing our communications and highlights the vulnerabilities that lie within current infrastructures. We recommend secure tools like ProtonMail and Signal to bolster personal privacy against these persistent threats. Delve into the potential motivations behind these breaches, including the chilling prospect of strategic data collection for future decryption, and understand why vigilance is more crucial than ever. Join us as we explore these pressing topics.

For more insight our resource for this episode for upcoming state laws: https://transcend.io/blog/state-privacy-laws-2025

Support the show

Join us for an enlightening journey into privacy and technology with Avi, founder of TrustIZ. Discover proactive strategies to tackle privacy challenges and gain insights into Israel's evolving privacy laws post-GDPR alignment. Explore the intersection of privacy and cybersecurity and the transformative role of AI in privacy processes. Avi's dynamic perspective, inspired by the energy of Hamilton, emphasizes the importance of being "in the room where it happens." This episode is a must-listen for those eager to understand the future of privacy in our tech-driven world.

Support the show

Discover how these cyber criminals impersonate bosses and coworkers, manipulating emotions to trick victims into transferring money or revealing sensitive information. Learn how to spot the red flags: from urgent requests that cloud judgment, to lookalike email domains designed to deceive. We'll guide you through practical steps to safeguard your organization, emphasizing the importance of communication and verifying requests through trusted channels.

Join me, Cameron Ivey, as I break down these sophisticated scams and explore why adherence to company protocols is crucial in defending against them. 

Support the show

In this episode of Privacy Please, uncover how cutting-edge technologies are transforming voting, and enhancing privacy and integrity in the digital age. Explore decentralized platforms like Mastodon for greater user control and transparency, and see how Bitcoin is shifting power away from traditional authorities. Dive into the potential of cryptographic tools and blockchain to authenticate media and voting information, reducing misinformation and boosting election transparency. Tune in to discover how these innovations promise a bright future for trust in technology.

Support the show

What if a simple app failure could trigger chaos across the financial world? Explore the vital safeguards of Europe's Digital Operational Resilience Act (DORA) with host Gabe Gumbs on Privacy Please. This episode goes into how DORA is transforming digital infrastructure to withstand the onslaught of cyber threats like ransomware, ensuring that your access to financial services remains seamless and uninterrupted. From banks to tech providers, discover the global ripple effects of this European regulation that extends its reach to American firms intertwined with the EU financial sector.

Support the show

Imagine having just one key for every lock in your house—sounds handy, right? But when it comes to your online security, this convenience could lead to disaster. Join me, Cameron Ivey, as we navigate the treacherous waters of online safety during Cybersecurity Awareness Month, with a special spotlight on the simple yet powerful habit of password management. Fresh from my whirlwind travels to PSR in Los Angeles and a corporate retreat in Santa Rosa, I’m back, a little under the weather but eager to share insights that could safeguard your digital life. 

This episode of Privacy, Please is your ticket to understanding the common mistakes we all make, like reusing passwords—and how to avoid falling into these traps. I’ll introduce you to the world of password managers, which can transform the way you protect your online accounts without causing a headache. Expect a light-hearted yet informative discussion packed with practical advice to boost your digital security. Whether you’re a seasoned listener or new to the show, there’s something here for everyone to learn about keeping their online presence secure.

Support the show

Unlock the secrets of privacy innovation and assurance with our enlightening conversation featuring Aaron Weller from HP. Aaron walks us through his fascinating journey of establishing a new privacy engineering function at HP and expanding into privacy assurance. You'll discover how his team is tackling significant challenges, such as developing standards for data aggregation and preventing re-identification attacks, with practical examples like employee surveys and website performance metrics.

What happens when the need for privacy intersects with the rapid advancements in AI? We delve into this critical topic by examining the dual threats of data re-identification and evolving AI legislation. Aaron provides invaluable insights into the ethical principles and security measures necessary to navigate this complex landscape. Additionally, we give you a sneak peek into an intriguing upcoming panel on AI governance featuring a humanoid AI, highlighting the unpredictable and exciting future potential of this groundbreaking technology.

Looking to the horizon, we explore the future predictions in data governance and the revolutionary impact of quantum computing on cryptography. Aaron discusses the strategic rethinking required as AI and technology advance, emphasizing the importance of integrating privacy measures directly into the code. Join us as we reimagine our relationship with data, ponder the necessity for solid foundational frameworks, and highlight the critical role of early detection in privacy issues. This episode is a must-listen for anyone invested in the future of data management and privacy.

Support the show

California's Senate Bill 1047 is on the brink of becoming a law, and we're here to break down what that means for the tech industry and society at large. Tune in as I dissect how this controversial bill mandates rigorous testing of AI systems to identify potential harms such as cybersecurity risks and threats to critical infrastructure. I've got insights from policymakers, including Senator Scott Weiner, who argues that the bill formalizes safety measures already accepted by top AI firms. 

Amidst passionate debates, hear how tech giants like Google and Meta push back against the regulations, fearing they could cripple innovation, especially for startups. Meanwhile, proponents, including whistleblowers from OpenAI and notable figures like Elon Musk and Yoshua Bengio, champion the necessity of such rules to mitigate substantial AI risks. We’ll also explore the broader legislative landscape that aims to combat deep fakes, and automated discrimination, and safeguard the likeness of deceased individuals in AI-generated content.

Support the show

Curious about the latest buzz from DEFCON and Black Hat? We promise you'll gain fresh insights into the world of cybersecurity, including a behind-the-scenes look at Palo Alto's marketing mishap that set the industry ablaze. Join Cameron Ivey and Gabe Gumbs as they shed light on the evolving landscape of cybersecurity, celebrating the growing contributions of diversity while acknowledging the industry's ongoing challenges.

But that's not all—we dive into the nitty-gritty of AWS account takeovers, uncovering the risks and misconceptions that many IT professionals face. From shadow accounts to AWS's dominance over Google Cloud and Microsoft Azure, we've covered you with the latest research and conference highlights. Plus, we share some fun moments and upcoming events like PSR and IAPP in LA, sprinkled with a bit of autograph signing and fan interactions. Tune in for an engaging episode that combines technical deep dives with thoughtful industry reflections and a touch of humor!

Support the show

Ever wondered how evolving privacy laws impact your company’s risk profile and compliance strategies? Join us for a captivating discussion with Ray, the Chief Compliance and Data Privacy Officer at TopCon Healthcare, and K, a seasoned privacy attorney with a unique nursing background. Ray shares his journey from the early days of HIPAA to his current challenges at TopCon, while K offers insights on transitioning seamlessly between legal and non-legal roles. Together, they unravel the complex interplay between legal and consulting roles in data protection, offering valuable insights for anyone navigating the privacy landscape.

From the merits of hiring consultants versus law firms to manage privacy programs to the intricacies of data inventories and impact assessments, this episode tackles the pressing issues companies face today. We explore real-world scenarios, like the innovative Harmony platform at TopCon Healthcare, demonstrating how new business activities can shift a company’s risk profile. Ray and Kay provide a balanced perspective on when to engage consultants for their hands-on expertise and when to turn to law firms for their regulatory acumen.

But it’s not all serious business—Ray shares a hilarious anecdote about the precise positioning of toilet paper, adding a touch of humor to our deep dive into privacy tech evolution and the essential collaboration between privacy and security officers. Whether you’re a privacy professional or someone interested in the dynamic between legal and consulting roles, this episode is packed with insights, practical advice, and a few laughs. Tune in and gain a fresh perspective on the ever-changing world of privacy compliance and consultancy.

Support the show

What if a single cybersecurity incident could cost your company billions? On this episode of Privacy Please, Cameron Ivey and Gabriel Gumbs dissect the monumental CrowdStrike incident that left 8.5 million Windows machines vulnerable and sent shockwaves through the IT community. As a dedicated Linux user, Gabriel lends his unique perspective, backing CrowdStrike amidst the backlash and exploring why public overreactions might be misplaced. We dig into the staggering five billion dollar financial toll and stress the importance of recognizing technology's imperfections. Our hosts also revisit cybersecurity fundamentals—confidentiality, integrity, and availability—emphasizing the crucial role of backup and recovery in maintaining these principles.

But it’s not just about understanding what went wrong; preparation is key. Using the CrowdStrike incident as a pivotal case study, Cameron and Gabriel offer actionable advice on disaster recovery strategies crucial for any business. They break down the shared responsibility model in the cloud, highlighting how data and identity still lie in the hands of the customer. From adhering to the 3-2-1 rule of data protection to automating recovery processes and keeping offline guides, they cover practical steps to bolster your recovery plans. With industry-specific insights and tips tailored to sectors like healthcare and aviation, this episode provides essential guidance for any organization looking to proactively navigate IT disasters.

Support the show

An exclusive livestream episode presented by Transcend and Privacy Please. Join Cam and Gabe as they chat with industry leader Amit Danenberg, who has a proven track record of spearheading security & privacy operations at top organizations like Cisco, Sonos, and Willow Innovations.

We dig into some crucial topics, including:

✅ Uncovering the advantages of prioritizing security & privacy in both operational and cultural aspects
✅ Learning effective ways to manage privacy programs and choosing the right technology partners who share the same vision.
✅ Understanding essential steps to prepare your enterprise for AI while ensuring data privacy & security.

Support the show

As we reach the middle of the year, the focus is on responsible AI usage and the advancement of privacy measures, emphasizing their significance in both personal and business settings.

Our discussion then turns to a more serious topic: the alarming increase in ransomware attacks. Occurring approximately every 17 seconds and leading to the compromise of billions of records, there's a clear need for strong data protection and recovery strategies. We delve into the evolving nature of these cyber threats and explore what businesses can do to protect their operations.

Additionally, mark your calendars for our live show on July 16th featuring special guest Amit Danneberg, who will share insights on integrating privacy and security into business practices. 

Source - https://www.itgovernanceusa.com/blog/data-breaches-and-cyber-attacks-in-2024-in-the-usa#april-2024

Support the show

History of location sharing, it certainly didn't start yesterday folks...😉 

Younger internet users seem to be okay with sharing their location data and the convenience it offers however, what about the potential risks of being constantly tracked? 

Do you know how much of your life is up for grabs in the digital world? In this electrifying episode of "Privacy Please," I, your host Cameron Ivey, morph into Ace Ventura, Privacy Detective, to lead you through the chaotic jungle of digital surveillance. From the massive amounts of location data in your smartphone to the generational divide over tracking, we tackle the intricate dance between convenience and privacy. Whether you're a privacy vet or someone who shrugs off the idea of sharing your whereabouts with friends, this episode is a rollercoaster ride of insights and surprises.

-Source credit to Elaine Moore for the original article

Support the show

What if managing your company's digital secrets could be as seamless as sending a Slack message? Join us as we converse with Brian Vallelunga, the innovative CEO and founder of Doppler, who reveals his journey from Uber to spearheading a game-changing solution for developers. We cover Brian’s intriguing path, including a rocky venture into the world of crypto machine learning, and a transformative moment in Mexico that highlighted the pressing need for efficient secrets management. Learn how a pivotal dinner conversation and inspiration from Slack's Stuart Butterfield catalyzed the creation of Doppler, making it an indispensable tool for developers around the globe.

Why do so many companies fail to protect their most sensitive data? Brian and our hosts break down the alarming oversight of "secrets" like API keys and database URLs in data security. Hear a harrowing personal story of a scam that exploited breached data, gather practical tips on safeguarding your information and much more!

Support the show

Ever wondered about the hidden privacy risks lurking in your everyday Wi-Fi connections? In this episode, Cameron and Gabe discuss the hidden risks of Wi-Fi based positioning systems. They highlight a paper by Eric Rye and David Levine that explores the privacy risks associated with these systems. The paper discusses case studies where sensitive information about troop movements and refugee migrations was revealed through these systems. The conversation emphasizes the need for a larger conversation about the widespread use of these systems and the potential privacy implications.

Source: https://arxiv.org/abs/2405.14975

Credit: https://www.linkedin.com/in/erik-rye/ & https://www.linkedin.com/in/dave-levin-658b2564/

Support the show

Should AI have a role in the legislative chamber? Arizona State Representative Alexander Kolodin says "yes," leading to a groundbreaking law crafted by ChatGPT. I'm Cameron Ivey, and I’ll dissect the story behind this innovative bill addressing deepfakes in elections, made with AI assistance and causing ripples in the privacy community.

This isn't just another political maneuver; it's a bold step toward a future where AI and lawmakers collaborate to shape regulations. Join me as we delve into the delicate balance of protecting free speech while curbing AI-generated misinformation. We'll explore Kolodin's approach, which includes measures for authenticating deepfakes through judicial channels, while also preserving the realms of comedy and satire.

This legislation aims to control narratives and enhance the efficiency and effectiveness of AI-assisted lawmaking. Our discussion will transcend privacy, touching on the essence of truth in the digital age. Tune in, share your thoughts, and let's unpack this futuristic topic together. Love and privacy to all—Cameron Ivey 

Support the show

Explore the dark side of cyber threats as we unveil the terrifying impact of ransomware attacks on the healthcare sector. In a gripping discussion with Cameron Ivey and Gabe Gumbs, we uncover how healthcare institutions are targeted for their sensitive data, risking patient privacy and trust. Through real-life stories of ransom payments gone wrong and the looming threat of repeated attacks, we reveal the harsh reality: paying ransom is just the beginning of the nightmare.

Drawing insights from the 2023 Verizon Data Breach Investigation Report, we highlight a disturbing trend where ransomware aims not just to steal data, but to cripple operations, leaving vital medical equipment useless and multiplying the risk of human error. We delve into the shortcomings of data backup strategies and debunk myths surrounding the security of SaaS platforms. Join us for this conversation to empower yourself with more insights to safeguard your organization's data and people against cyber threats.

Support the show

Discover the intricate dance between technology and ethics as Jake Ottenwaelder, principal privacy engineer at Integrated Privacy LLC, takes us into the heart of fractional privacy engineering. Join us for a captivating journey where Jake, pivoting from cybersecurity to privacy engineering, decodes the complexities of modern data protection laws. He artfully bridges the gap between legal mandates and technical implementation, providing a lifeline to organizations navigating the treacherous waters of GDPR compliance and beyond. This episode is a beacon for anyone seeking clarity on the interplay between privacy, technology, and legal frameworks.

As we navigate the subtle distinctions between security and privacy engineering, Jake imparts wisdom on the essence of an engineering mindset in privacy practices. He dissects the rich tapestry of privacy engineering, painting a landscape where ethical data stewardship takes center stage, and integrative privacy solutions redefine how companies interact with consumer data. For those in the security sector eyeing a shift to privacy, Jake offers a roadmap, underscoring process improvement and the potential of privacy automation to transform the industry landscape.

We wrap up with a profound discussion on the broader implications of privacy engineering — from the ethical quandaries in AI to the pivotal role data privacy plays in national security. Jake sheds light on the convoluted challenges faced by organizations, such as data deletion and retention, and advocates for equitable privacy that transcends user sophistication. The episode concludes with a reflection on the future of data economy ownership amidst geopolitical shifts, a conversation that will resonate with anyone invested in the intersection of technology, privacy, and global affairs.

Support the show

Rumor Has It, in Privacy...

Banning TikTok won't solve social media's issues with foreign influence, teen harm, and data privacy. Despite the proposed ban, the underlying problems remain unaddressed. We need comprehensive solutions to tackle these challenges head-on. 

Support the show

Rumor has it, in privacy, we discover how a damning federal report has exposed serious lapses in the tech titan's security armor, leaving businesses and individuals to question their trust in the cloud. As Microsoft faces a breach with Chinese fingerprints and a culture of shrugged shoulders towards security investments, we're unpacking what it all means for the future of enterprise safety. Buckle up as we explore the ramifications for Amazon Web Services and Google Cloud, who might just dance in the rain of Microsoft's storm.

Listen in as we highlight the Cybersecurity Review Board's urgent call for action and how CEO Nadella is positioned to lead a revolution in Microsoft's approach to cybersecurity. 

Support the show

Hold onto your hats because we're cracking open the American Privacy Rights Act – a piece of legislation that's causing quite the stir. Will it be the superhero the privacy community has been waiting for, or is it a wolf in sheep's clothing? We dissect the nitty-gritty from data minimization to opt-out rights and ponder the act's potential global ripple effects on data protection. 

Support the show

Join us for a our new short Rumor Has It in Privacy.  As I walk you through the labyrinth of class action settlements that could put money back in your pocket. This episode is a treasure map, leading you to the X that marks the spot on significant payouts from big-name companies that might owe you more than just an apology. From Verizon's sneaky fees to Subaru's gear-grinding mishaps and the fiery engines of Kia and Hyundai, I'll be your guide on this solo expedition to reclaim what's yours.

Support the show

Prepare to have your mind expanded as we navigate the complex labyrinth of large language models and the cybersecurity threats they harbor. We dissect a groundbreaking paper that exposes how AI titans are susceptible to a slew of sophisticated cyber assaults, from prompt hacking to adversarial attacks and the less discussed but equally alarming issue of gradient exposure.

As the conversation unfolds, we unravel the unnerving potential for these intelligent systems to inadvertently spill the beans on confidential training data, a privacy nightmare that transcends academic speculation and poses tangible security threats. 

Resources: https://arxiv.org/pdf/2402.00888.pdf

Support the show

Our discussion takes a turn towards the skepticism now cast over Glassdoor and similar platforms. With anonymity in jeopardy, what's the true weight of an online review? We explore the pitfalls of anonymous comments devoid of context and the importance of leaning on personal networks for the real scoop on companies. The conversation doesn't shy away from the hard questions – it's a prompt for you to scrutinize digital platforms and their promises, urging a proactive stance on personal research. By the end of this thought-provoking dialogue, you'll be inspired to engage in deeper discussions and equipped to navigate the digital realm with a more critical eye... or so we hope.

Support the show

This week on Privacy Please, we'll dissect the challenges that technologists face in harmonizing AI and privacy in their systems, and consider the state of AI governance laws that are shaping our digital future. Plus, get ready for a tale that hits close to home, shedding light on real-world privacy concerns that could affect any of us.

Support the show

Could the addition of 'Govern' to the NIST Cybersecurity Framework 2.0 be the game-changer in how we approach cybersecurity governance?  We unravel the significant evolution of the framework, now bolstering enterprise risk management with a holistic approach that's essential for any organization, big or small. We dissect the interplay of the six functions—Identify, Protect, Detect, Respond, Recover, and the new kid on the block, Govern—and how this integration across the entire lifecycle of protection can redefine the conventional cybersecurity steps. No stone is left unturned as we debate the necessity of maintaining distinct cybersecurity and privacy frameworks in the face of increasing overlap, a question that is becoming more pertinent as the digital age advances.

Support the show

Join us for insights into the crucial aspects shaping the future of privacy. We'll delve into the significance of diversity in the privacy sphere, with women at the forefront of leadership roles. Discover why mentorship is indispensable for those embarking on privacy careers. Explore the delicate balance between profit and privacy, as companies often prioritize the former, jeopardizing user trust. Learn about the anticipated impact of CPRA enforcement on data management and privacy practices. Finally, we'll discuss the imperative of addressing biases in AI development to ensure the fairness of algorithms. Don't miss these essential discussions that are shaping the landscape of privacy.

Support the show

Ever wondered how to keep your AI from turning into a sci-fi cautionary tale? California's Senate Bill 1047 might just be setting the blueprint, and we're unpacking its potential to navigate the tightrope between innovation and consumer safety. Plus, we pay tribute to Black History Month in true literary fashion, tipping our hats to James Baldwin's enduring wisdom in his piercing examination of race in America.

This episode isn't just a rundown; it's a journey through the trenches of tech and culture, where we spotlight California's daring stride into the domain of AI legislation and what it could mean for you. As we highlight CalCompute's mission to democratize AI and dissect measures to safeguard whistleblowers, we invite you to join us in a narrative that connects the dots between the pages of history and the code of the future. 

Support the show

Prepare to embark on a journey through the looking glass of modern airport security with me, Cameron Ivey, as we tackle the TSA's big bet on facial recognition at over 400 US airports. Get ready to peel back the layers of the high-tech CAT2 machines designed to match your face to your ID, and weigh in on the tug-of-war between rapid convenience and the sanctity of privacy. 

We dissect the Traveler Privacy Protection Act and its crusade to safeguard our personal data amidst the rise of automated scanning options. You'll learn how to opt out if you're not keen on taking part in the digital lineup and hear from voices on both sides of the aisle, including Senator Jeff Markley. The episode goes beyond the security checkpoint, exploring the societal ripple effects of facial recognition software, as evidenced by corporate bans. So, buckle up for an unfiltered discussion that might just redefine your next trip to the airport. With Privacy Please, your next flight of thought is now boarding!

Support the show

Celebrate the unsung heroes of privacy with us! Privacy Please's own Cameron Ivey and Gabe Gumbs tip their hats to the vanguards like Debbie Reynolds and Nishant Bhajaria, praising their unwavering dedication to our digital rights. We're not just talking shop; we're honoring the innovators who keep our data safe and our futures secure. From discussing the annual Privacy Week to giving a shout-out to those leading the charge, you'll feel the passion behind the pixels in protecting your personal information.

Ever wonder if the watchdogs can watch themselves? We tackle the heated debate around the SEC's own data mishaps and whether they should be dishing out advice on data protection. Gabe doesn't pull any punches, defending the regulatory body with the kind of fervor that'll have you rethinking your stance on oversight. Listen in for a nuanced look at the complexities of privacy advocacy in the corporate and regulatory spheres – it's more than just a black-and-white issue.

Support the show

This week on Privacy Please, discover the fine line between innovative tech and privacy pitfalls as I guide you through the complexities of generative AI in the corporate sector. Cisco's startling survey findings serve as the backbone of our discussion, revealing that a quarter of companies have pressed the panic button on generative AI tools to prevent data leaks and intellectual property breaches. You'll get a front-row seat to the latest industry moves, with tech juggernauts like Apple and Verizon leading the charge, and an exploration into the tension between AI integration and data protection. 

Support the show

This week on Privacy Please, we dive into the underbelly of CES 2024 as consumer and privacy advocates expose the 'Worst in Show.' From BMW's questionable Alexa partnership to disposable Sennheiser earbuds and Instacart's AI cart pushing ads, discover the tech innovations sparking safety, privacy, and environmental concerns. 

Support the show

Could your phone be spilling your secrets without your consent? Join us as we unravel the unnerving truths behind data privacy infringements, spotlighting the FTC's recent clampdown on X mode. In this enlightening conversation, we explore the treacherous terrain where personal phone location data is bartered for profit, inviting listeners to contemplate the fine line between technological convenience and privacy erosion. We're not shy about the tough questions or the complex answers, with nods to thought leaders like Jeff Jokisch and Heidi Shey for their expert perspectives on this critical issue.

This episode is a tapestry of humor, insight, and a serious call to action for tighter regulation in a market that all-too-often undermines our societal values for the sake of profit. Tune in, and you might find yourself weighing the true price of digital convenience against the cold reality of a world where your every move could be for sale.

Shout outs:

https://www.linkedin.com/posts/heidi-saas-31a7a16_analysis-of-proposed-consent-order-to-aid-activity-7150572092676009984-cd8C/

https://www.linkedin.com/posts/jozian_locationdata-locationprivacy-databrokers-activity-7150638135587078145-Qp8D/?utm_source=share&utm_medium=member_desktop

Support the show

This week on Privacy Please, we talk about Tetsuya Inoue, manager of Asahi Ryokan Hotel, who introduced a unique strategy allowing guests a $1 stay in exchange for live-streaming their entire visit. Despite the project's conclusion, it gained popularity, highlighting the changing attitudes of younger generations towards privacy. The success also brings attention to the broader implications of sacrificing personal privacy for innovative business models, particularly as hidden cameras in holiday rentals become more prevalent. This case prompts a critical discussion on data privacy in an era where technology increasingly infiltrates daily life.

Support the show

This week on Privacy Please, we talk about the top episodes from S4 and show our appreciation for the love and support throughout this awesome journey. Looking forward to S5 and the new network we are launching along with our new show! 

Special shoutout to all of our guests, sponsors and excited for what is to come in 2024!

Support the show

Support the show

This week on Privacy Please, we unravel the surprising truth behind declining cookies and explore if it poses greater privacy risks than acceptance. We also delve into the recent clash between Apple and Beeper Mini's iMessage service, examining the security concerns and efforts to restore the app. Join us as we navigate the delicate balance between privacy awareness and overreaction, providing insights and practical tips for a more informed digital journey. Tune in and discover why it's crucial to strike the right balance in this evolving landscape of online privacy.

Support the show

In this weeks OVERREACTION episode, we unravel Apple's revelation about potential government spying on iPhone push notifications. Plus, we dive into a significant 23andMe data breach affecting 6.9 million users. 

Join us for essential insights on these privacy issues and tips to protect your personal data. Tune in to the Privacy Please Podcast – your guide to staying secure in a digital world!

Support the show

In this weeks OVERREACTION MONDAY: 

• Does ChatGPT Save Data? What You Need to Know 
• Massive Healthcare Data Breach Exposes Full Names, SSNs, and More of 9 Million Patients - What Now?
• Unveiling the Privacy Intrusions: Apps That Could be Watching You

Support the show

This week on Privacy Please, we had the pleasure of hosting David Crawshaw, the CTO and Co-founder of Tailscale. Tailscale specializes in offering innovative software and services designed to facilitate a seamless, secure, and efficient transition of businesses to the cloud. David shares insights into his journey back at Google and with Tailscale's unique approach, emphasizing the importance of smooth and safe cloud migration. 

Support the show

Overreaction Monday:

Get ready to overreact to three privacy-packed articles shaking up the digital scene this this week!

📱 Guardianship Guide: Your Phone, Your Digital Key!
Your phone holds the key to your digital life. Ensure you're equipped with the know-how in case it goes missing. Preparing for the worst is simpler than you think, and it's never been more crucial. #DigitalSecurity #PhoneGuardianship #OverreactionMonday

🚨 YouTube's Privacy Plot Twist: Criminal Charges Alert!
YouTube's in hot water with criminal charges over ad-blocker detection. What does this mean for your online sanctuary? #YouTubePrivacy #DigitalTwist

🔒 Privacy Rollercoaster: Battling for Your Digital Secrets!
Lawmakers clash over digital privacy rules. Will this ride end with a digital fortress or leave us hanging? #PrivacyBattle #DigitalThrills #OverreactionMonday #TechThrills

Support the show

Welcome to Overreaction Monday, your weekly rendezvous with the most pressing issues in the digital world. Tune in every Tuesday as we unpack three headline-making stories, delving deep into the realms of privacy, security, and technology. In this episode, we explore the alarming rise of AI-generated fake nudes, posing a significant threat to privacy, the unsettling revelation of 100,000 Torrent Sites users exposed, and the shockingly easy access to sensitive data from military personnel. Join us as we react, analyze, and dissect these major incidents, shedding light on the importance of safeguarding our digital lives. Stay informed, stay secure.

Support the show

This week on Privacy Please, unravel the mystery of Silicon Valley entrepreneur Tom Kemp, a mastermind in cybersecurity, investor, and policy advisor. Dive deep into his enigmatic journey and glean insights from his groundbreaking book, "Containing Big Tech," where he unveils a path to safeguard civil rights, economy, and democracy. Join us for an intriguing exploration of tech, power, and secrets. Don't miss out!

Support the show

This week on Privacy Please, we go into the heart of digital security and personal privacy. 

As concerns about digital privacy echo historical events, this episode equips you with essential tool and strategies to safeguard your sources and data.

Explore the art of secure communication with sources, learn to navigate the digital landscape anonymously, and discovery how to fortify your email correspondence. In a world where your privacy matters more than ever, embrace radical privacy measures and stay one step ahead. 

Tune in for quick and invaluable insights that empower you to protect your digital life effectively. 

Support the show

This week on Privacy Please, we delve into the intricate world of facial recognition technology, exploring its conveniences, challenges, and profound privacy implications. Drawing insights from Kashmir Hill's book, "Your Face Belongs to Us," we navigate the thin line between convenience and catastrophe. From real-world implications to future predictions, we dissect the digital maze of biometric data and surveillance. We empower listeners to protect their privacy through education, advocacy, and digital literacy. 

Tune in as we unravel the complexities of facial recognition, emphasizing the collective responsibility to safeguard our identities in the digital age. Stay informed, stay vigilant - Privacy Please

Support the show

This week on Privacy Please, we dive deep into data privacy, exploring regulations, secure data features, and striking the balance between innovation and privacy. 

Discover the human side through empowering education and learn the importance of continuous privacy audits. 

Join us as we uncover strategies that build unshakable trust, turning data privacy into a strategic advantage for tech marketers. 

Support the show

🚀 This week on Privacy Please, we're about to drop some knowledge that's hotter than the school cafeteria's mystery meat! 🔥

Attention, parents and students: 📚✏️ It's back-to-school time, and while we can't promise to make algebra fun, we can guarantee you'll leave our episode with your privacy knowledge at the head of the class.

We're serving up more than just cafeteria food for thought. We're dishing out vital tips to safeguard your little Einsteins' online privacy. 🧠🌐

Topics on the menu include:
🔒 Opting out of data sharing (Because your kid's report card shouldn't be traded like Pokémon cards!)
⏰ Managing screen time (It's all fun and games until Fortnite becomes a full-time job.)
📜 Understanding FERPA (Hint: It's not a new spelling bee champ!)

Join us as we make sure your child's online safety and academic success are on the honor roll. 🏆📖

Stay tuned, because this episode may just open some eyes wide enough to catch all those algebraic variables! 🤓🔍 #PrivacyPlease #BackToSchool #PrivacyProtectors

Support the show

This week on Privacy Please, we delve into the groundbreaking 345 Million dollar fine levied against TikTok for Privacy violations affecting children. 

Join us as we uncover the details of this two year investigation, explore the implications for children's data privacy, and examine TikTok's response to the changes. Don't miss this crucial blog cast on safeguarding our children's online privacy. 

Support the show

X Corp, previously known as Twitter, has updated its privacy policy to use user data for AI development. This shift raises concerns about user privacy and legal compliance, especially in light of state-level privacy laws and vague policy language. 

We predict potential legal battles, regulatory responses, increased user awareness, and industry-wide adjustments as companies strive to balance transparency and clarity in their policies. This shift has global implications, shaping the future of AI and privacy regulations. 

Stay tuned for insights into the evolving landscape of AI and data protection.

Support the show

Embark on a captivating journey into the world of digital privacy in this week's episode of Privacy Please! 

Join us as we chat with Ben Brook, Co-Founder and CEO of Transcend, exploring his background, the inception of Transcend, solving tech debt for privacy, demystifying Silicon Valley, and the future of privacy in the tech industry. From measuring privacy success to the importance of data rights, we cover it all. Don't miss this insightful and thought-provoking conversation!

Support the show

This week, we're unpacking highlights from Black Hat, revealing cutting-edge products, and shedding light on the alarming surge of undetectable ransomware attacks. Stay in the cybersecurity loop – tune in now!🎙️ #PrivacyMatters #CybersecurityUpdate #privacypros #podcast#blackhat2023 #blackhat

Stay curious and secure,
Cam

Support the show

This week on Privacy Please, we explore the escalating demand for data in the realm of Generative AI as companies race to fuel powerful AI models. 

The controversy surrounding Zoom's data policy shift serves as a microcosm of this trend, revealing the intricate balance between technological advancement and user privacy. 

Join us to delve into the implications of this data hunger, from AI image generators to advanced chatbots, and discover how the industry navigates the challenge of fostering innovation while respecting ethical data practices.

Support the show

Get ready for an enthralling episode of "Privacy Please" as we sit down with the brilliant Jane Lee, a seasoned Trust and Safety Architect at Sift. Join us as we unravel a captivating conversation that delves deep into Jane's journey and expertise. From the intriguing world of machine learning to an insightful exploration of the "pig butchering" investigation, we leave no stone unturned. Uncover the inner workings of culture and privacy within tech giants like Facebook, and discover the pivot from Personally Identifiable Information (PII) to the fascinating realm of behavioral analysis. But that's not all – we'll also navigate the complex landscape of encryption's limitations and peer into the horizon of crypto's scope and scale. Tune in for a thought-provoking exchange that promises to broaden your understanding of privacy, innovation, and the digital world at large.

Support the show

In this weeks episode, we explore the explosive growth of consumer-facing generative AI tools, which promise to transform our lives and work. However, using these tools comes with important privacy and security considerations. We discuss the significance of checking privacy policies, being cautious about data shared, and utilizing data control settings. By understanding these aspects, users can responsibly enjoy the benefits of AI while safeguarding their personal information.

Support the show

In this week's episode of Privacy Please, join us for a fascinating discussion with Alex Bovee, the CEO and co-founder of ConductorOne. We'll explore the challenges of delegating access control, the shift towards tangible value, potential risks of IAM misconfigurations, the human factor in privacy, and the transformative potential of AI in privacy products. Don't miss this insightful conversation on data security and privacy issues. Tune in now!

Support the show

This week on Privacy Please... In recent years, job hunting has become increasingly difficult, with extended hiring timelines and demanding application processes. Employers, who were once eager to hire, now subject candidates to grueling rounds of interviews. Even with temporary relief during the pandemic, the job market remains challenging, leaving job seekers frustrated and facing uncertainty.

Amidst these challenges, job seekers are also facing privacy concerns. The proliferation of one-way video interviews, necessitated by the pandemic's limitations on in-person interactions, has given rise to the collection of vast amounts of personal data. Moreover, the involvement of multiple stakeholders in the hiring process, as companies prioritize equity and inclusion, raises questions about the privacy and security of candidates' sensitive information.

Support the show

This week on Privacy Please, we talk about Threads vs. Twitter: Global Launch Unveiled, But What's Stopping it in the EU? Privacy Concerns and Recent Rulings Cause a Pause?

Tune in to learn more :) 

Support the show

This week on Privacy Please, we discuss the concept of feeling "normal" in the digital realm. Despite the increasing presence of surveillance and data collection, users in the United States seem unfazed and have developed a sense of acceptance within digital infrastructures. Feeling "normal" online provides a sense of comfort, connection, and social inclusion, even though it may not evoke strong emotions. This desire for normalcy explains why users identify with digital platforms, despite being aware of the potential harm associated with them.

My credited source for this episode is Tung-Hui Hu of the Wired

Support the show

This week on Privacy Please, we talk about Innovation vs. privacy and how this has become a contentious topic in today's digital landscape. 

This conversation explores the delicate balance between fostering technological advancements and protecting individual privacy rights. We delve into the question of which side should take precedence and whether sacrificing privacy is necessary for technological growth. 

Join us as we explore different perspectives, discuss potential solutions, and examine where we stand on this important issue. Are you ready to weigh in on the innovation vs. privacy debate? 

Support the show

This week on Privacy Please, we tell a short story about Max Malware and the Privacy Protectors.

Enjoy!

Support the show

This week on Privacy Please, we talk about the overall costs of recovering from a ransomware incident and how they are increasing… 

"Mitigating these attacks takes time—if the organization even has reliable, tested backups of the systems compromised—and resources. Ransomware is so ubiquitous that it may simply be a threat that we will always have to protect against"

Support the show

This week on Privacy Please, we talk about how Microsoft Outlook, the popular cloud email service, faced a series of outages on Monday after a reported hack by a pro-Russian group called Anonymous Sudan. The group claimed to have launched a distributed denial-of-service (DDoS) attack on Outlook as part of a campaign against US companies and infrastructure. 

Support the show

This week on Privacy Please, we talk about two new events that happened recently involving Toyota Motor Corporation's disclosing their data breach and Dish Network's ransomware attack after admitting they may have paid the ransom without saying they paid for it. 

Support the show

This week on Privacy Please, we talk about Facebook owner Meta being fined a record 1.2 Billion over European data transfers. 

Support the show

This week on Privacy Please, we go over two articles - the first in Cybersecurity news, T-Mobile's second data breach this year (2023), and the second in data privacy news, we talk about how Apple and Google are working together on industry standards to warn device users of unauthorized Bluetooth tracking.  

Article source: Scott Ikeda

Support the show

Are you ready to give Amazon the rights to your health data? 

This week on Privacy Please, we talk about a new online patient service offered by Amazon called Amazon Clinic. Now the catch is, in order to become a patient with amazon clinic, first, you must sign away some privacy. 

Support the show

This week on Privacy Please, we have the pleasure of speaking with the President, VP, and Co-founders at Termageddon, Donata and Hans Skillrud! Tune in to learn more about their backgrounds and how and why Termageddon was created. 

Company info: Termageddon creates policies for your website or application and automatically updates the policies when the law changes.

Support the show

This week on Privacy Please, we had the privilege of speaking with Thomas Perkins, who cofounded Malcore and is more recently known for his reverse engineering skills. Thomas was the data analyst who cracked the source code of TikTok for the Australian cyber security and intelligence firm, internet 2.0. 

About the guest:

As a self-taught professional software engineer, my primary focus is on developing cutting-edge tools that can detect, classify, and prevent malware such as my invention Malcore (https://malcore.io). My passion for coding runs deep, and I firmly believe that it is both a science and an art form. While anyone can learn to code, only a select few can truly master it.

60 Minute episode: https://www.youtube.com/watch?v=0JuVjfHZn3s&t=164s

Article: https://www.afr.com/policy/foreign-affairs/tiktok-s-alarming-excessive-data-collection-revealed-20220714-p5b1mz

Support the show

This week on Privacy Please, we talk about an article surrounding a man who committed suicide after a 6-week-long relationship with an AI-generated chatbot named Eliza. 

Article credit goes to - https://people.com/human-interest/man-dies-by-suicide-after-ai-chatbot-became-his-confidante-widow-says/

Support the show

This week on Privacy Please, we dive into an article from Wired that covers Microsoft's AI-driven Security copilot through ChatGPT.  It aims to deliver the network insights and coordination that “AI” security systems have long been promised.

Support the show

This week on Privacy Please, we dive into another blogcast episode from a time article that speaks on TikTok and what to know about security concerns. 

Let us know your thoughts and email us at cameron.ivey@protonmail.com 

Support the show

This week on Privacy Please, we go unplugged before entering the blogcast that dives into an article surrounding cross-context behavioral advertising (CCBA). 

Support the show

This week on Privacy Please, we have the pleasure of speaking with both, Gary LaFever, co-CEO, General Counsel, and Aaron Stevens, Data Privacy Evangelist at Anonos. 

Main topics:

• We talk about their patented Data Embassy platform that transforms source data into Variant Twins
• What problem is Anonos solving?
• Data Privacy and Security challenges today and for tomorrow
• Much more

Support the show

This week on Privacy Please, we cover two different topics in our unplugged conversation. 

Articles referenced: 

https://www.wired.com/story/ai-has-a-hallucination-problem-thats-proving-tough-to-fix/

https://query.prod.cms.rt.microsoft.com/cms/api/am/binary/RE5bUvv?culture=en-us&country=us

Support link: https://www.buzzsprout.com/622234/support

Support the show

This week on Privacy Please, we go over an article that hits on three big topics in Tech and Privacy. 

• Is Borderless data ending? and does that make data regulation a global issue?
• Decisions about data in the Ukraine war aren’t as easy as they seem
• Big Tech and social media may be making some questionable decisions

Author credit: Jeremy Wagstaff, The Markup

Support Link: https://www.buzzsprout.com/622234/support

Support the show

This week on Privacy Please, we dive into an interesting article on your tax data and why it's up for grabs. 

Support link - https://www.buzzsprout.com/622234/support

Support the show

This week on Privacy Please, we have the pleasure of speaking with the founder and CEO of Nandi Security, Vikram  Venkatasubramanian! 

Please enjoy as we learn about Vikram's background, what problems he is trying to solve, his passion for security and privacy, and much more.

Show your support for the show! Get an email and shout out on the next episode :)  https://www.buzzsprout.com/622234/supporters/new

 Please see below for links to the reports mentioned in the show: 

• Research from UPenn
   |  | Americans_Can't_Consent PDF Document · 3.9 MB
• FIPPs report: 

 |  | Records, Computers and the Rights of Citizens (1973) III. Safeguards for Privacy archive.epic.org | 

• Abandoned apps: https://www.pixalate.com/blog/abandoned-mobile-apps-report

 Links to products and social media:
 

• Website: https://www.getkavalan.com 
• Facebook: https://www.facebook.com/ThePrivacyCompany
• Instagram: https://www.instagram.com/therealnandisecurity/
• LinkedIn: https://www.linkedin.com/company/nandi-security/
• Twitter: https://twitter.com/NandiSecurity 

Support the show

This week on Privacy Please, we dive into an oldie but a goodie. The FTC Extends Deadline to Comply with GLBA Safeguards Rule Until June 9, 2023. 

Support the show

This week on Privacy Please, we have a special treat for you!

Do not miss part 1 of Privacy week's Panel discussion with this all-star cast!

Panel privacy experts:
Debbie Reynolds, The Data Diva
Joe Dehner, The Data Privacy Detective
Punit Bhatia 🔐, Host of Fit4Privacy Podcast
Rebecca Herold, The Privacy Professor
K Royal, JD, PhD, Host of Serious Privacy Podcast

Support the show

This week on Privacy Please, we have a special guest appearance dropping in to hang out with us. We talk about the rising ChatGPT noise and much more! 

Support the show

This week on Privacy Please, we hit on a hot topic surrounding ChatGPT, an AI-based chatbot that has given bad actors with zero coding knowledge easy access to develop malware. 

Article credit goes to Dark Reading and the author - Jai Vijayan

Support the show

This week on Privacy Please, we talk about enterprise ransomware protection and if your organization continues to make common mistakes. 

Support the show

Welcome back to a brand new season of Privacy Please! 

Season 4 begins with an unplugged one where the guys discuss recent data breaches around the globe and how they may impact and continue to shift. 

Support the show

This week on Privacy Please, we have the honor of hosting the Director of Privacy, Security, and Compliance at Active Prospect, Mr. Benjamin Farrar! 

Show notes:

What Is Consent-Based Marketing?

https://activeprospect.com/blog/what-is-consent-based-marketing/ 

TCPA Litigation and Compliance Risks: What You Can Do

https://activeprospect.com/blog/tcpa-litigation-and-compliance-risks-what-you-can-do-to-protect-yourself/

Demo link to see TrustedForm work in a simple example Webform example:  http://trustedform.com/demo 

Collection of ActiveProspect Papers and Use Cases

https://activeprospect.com/whitepaper/

Support the show

This week on Privacy Please, we go into part 2 of our data privacy predictions for 2023. We talk about some past predictions and outcomes as well as, some new bold ones.

Support the show

This week on Privacy Please, the Salty Soothsayer is back for another data privacy predictions episode, and it's a 2 parter. 

Support the show

This week on Privacy Please, we dive into a great article about the war on privacy. We will cover the increasing privacy standards and how to get ahead of it, not only for an individual but for organizations of all sizes. 

Support the show

This week on Privacy Please, we go unplugged again after a nice Thanksgiving break. 

Our main topic for the week covers the WhatsApp data leak, which had over 500 million user records sold online. 

Support the show

This week on Privacy Please, we talk about an interesting article from news atlas around Volkswagen building a high tech smart chair that is motorized with headlights, horn, an entertainment system and a trailer hitch. 

We dig into the topic and  talk more about why and what the privacy would be around a so called smart chair -  Gabriel Gumbs - "Privacy Threat Modeling"

Article - https://newatlas.com/automotive/volkswagen-motorized-office-chair/?ck_subscriber_id=1818630299

Author Credit - Michael Irving 

Support the show

This week on Privacy Please unplugged, we discuss our time at a recent local security professionals event in Tampa. One of the main topics was around diversity specifically in security and we give our thoughts on the sites and sounds of the evening. 

Support the show

This week on Privacy Please, we go over the key differences between Data Security and Data Privacy to better understand to ensure complete protection of the data under your control.

Support the show

This week on Privacy Please, we go into a recent Gartner report on using classification to improve unstructured data security highlighting the benefits of data classification within the broader context of security and compliance. The report also identifies the key criteria and limitations of today’s classification tools and provides expert analysis and guidance. In this episode, we’ll discuss what we consider to be the key takeaways from Gartner’s findings. 

Support the show

This week on Privacy Please, we go unplugged to talk about GDPR and a new endorsed Certification scheme. 

It will allow individuals or entities to obtain certification from an approved accreditation body to demonstrate to the EU and customers that they are GDPR-compliant.

Support the show

What do you get when you put three privacy podcasts on together? A rocking great time! Two women, three men. Five personalities. fifteen opinions! "Dogs and cats living together, mass hysteria!"

Support the show

This week on Privacy Please, the California Privacy Rights Act (CPRA) goes into effect on July 1st, 2023. Tune in to find out the key highlights you need to know about the CPRA, as well as what you can do to make sure your organization remains compliant.

Support the show

This week on Privacy Please, we go into what is IP theft and how to prevent it from happening.  Join us!  

Support the show

This week on Privacy Please, we dive into what data at rest encryption is, what it means for you and your organization, and how to protect it properly.

Support the show

This week on Privacy Please, we cover a hot topic of a potentially dangerous Microsoft O365 functionality that could ransom your SharePoint and Onedrive stored files. Tune in to hear our thoughts and how to prepare. 

Support the show

This week on Privacy Please, we highlight what data exfiltration is, what you need to know about data theft, and what you can do to protect the information stored by your organization.

Support the show

This week on Privacy Please, we had the pleasure of speaking with Vuk Janosevic, Cofounder and CEO at Blindnet. Vuk is a very passionate leader, who builds trust through digital privacy.

Links for Blindnet:
Git
the link to our developer portal 

Support the show

This week on Privacy Please, we go into detail about dark data and what it means for you, your organization, and best practices for securing it. 

Support the show

This week on Privacy Please, we have the great pleasure of speaking with Scott about the security mandates of the new state privacy laws for 2023.

Support the show

This week on Privacy Please, we are honored to speak with Jon von Tetzchner, previously the co-founder and CEO at Opera Software, and now the CEO at Vivaldi Technologies.

Please join us as we learn about his story and why Privacy matters so much to him!  

https://banspying.org/

Support the show

This week on Privacy Please, we had the opportunity to speak with the Founder, and CEO at Carbide, Darren Gallop.

In this episode, we learn about Darren's unique rock star history in the music industry and how he learned to overcome challenges in business early on that lead him to create Carbide. Furthermore, Darren gives us his take on what folks need to know about building data security and privacy into their organizations from the start.

Carbide blog: https://carbidesecure.com/resources/category/blog-posts/
Darren’s LinkedIn page: https://www.linkedin.com/in/darrengallop/
Carbide LinkedIn page: https://www.linkedin.com/company/carbidesecure/ 

Support the show

This week on Privacy Please, we go more in-depth from last week's episode around NIST, MFA phishing attacks, and more - Enjoy! 

Support the show

This week on Privacy Please, we have another great blogcast covering some of the biggest things in emerging security and privacy news today.

The US Department of Commerce's National Institute of Standards and Technology (NIST) has announced the first group of encryption tools that will become part of its post-quantum cryptographic standard - Author Credit, Dark Reading Staff

Lastly, we talk about a massive series of phishing attacks that targeted more than 10,000 organizations - Author Credit, Sergiu Gatlan

Next week we will go unplugged to dive further into these two topics together! 

Support the show

This week on Privacy Please, we are looking ahead to the new changes coming in 2023 around Data Privacy and Compliance. 

The world of data privacy is ever-evolving, and with more and more countries not only proposing privacy legislation but actually enacting it, it’s all the more tricky to maintain compliance. Here’s what’s on the horizon and how your organization can be ready for it all. 

Support the show

This week on Privacy Please, we go dig a bit deeper into Zero Trust. While enterprises have rapidly embraced cloud computing in the last decade or so, the mass shift to remote work accelerated this transition. With an influx of employees accessing sensitive company data from unsecured devices, the security framework known as Zero Trust has been increasingly relied on as a data-protecting hero.

Support the show

This week on Privacy Please, we have a special guest join the show to talk about RSA, Cyber Insurance and many other things related to security and privacy. He is a dear friend and is the Security Awareness Advocate at KnowBe4, Mr. James McQuiggan. 

James also hosts a new podcast himself called - Security Masterminds - Check it out here  https://www.buzzsprout.com/1892704/10255518

Support the show

This week on Privacy Please, we dive into the SEC's proposed data breach disclosure rules and how they will add new pressure on security teams. 

Support the show

This week on Privacy Please, we’ll examine the high cost — and risk — of sensitive data breaches in education in 2021.

Support the show

This week on Privacy Please we have the pleasure of speaking with the man himself, CEO at Kizen, Mr. John Winner! 

We talk about John's epic adventures of starting his own company early in life, and where he is today. We dive into thoughts on how data collection can be used for good, Apple's Privacy changes, why privacy is extremely important to him and his team, and his strong belief in being people-centric.

P.S. Does John own a real cowboy hat? 

Please enjoy this fun conversation and don't forget to have an awesome day! 

Support the show

This week on Privacy Please, we dive into part 2 of our heavy hitter data breach series. 

In this series, we are tracking the impact of last year’s record number of sensitive data breaches on three of the most vulnerable industries prone to cyberattacks: healthcare, financial services, and education. Last week, we uncovered why healthcare was the number one target for cyberattacks.

In today’s episode, we’ll explore the full extent of 2021’s attacks on the financial services industry and why it remains such a high-value target.

Support the show

This week on Privacy Please, we dive into our three-part heavy hitter series of data breaches and start with the number one most vulnerable industry, healthcare. 

Support the show

In this week's episode of Privacy Please, we dive into the next generation of data classification. 

Support the show

This week on Privacy Please,  we welcome, Mr. Jad Boutros, co-founder, and CEO of TerraTrue (Former Snapchat CSO). 

Support the show

This week on Privacy Please, we have the pleasure of speaking with Steve Ginty, the director of threat intelligence at RiskIQ! 

We talk about his story, security, privacy and convenience across corporations and organizations, and much more! 

Support the show

This week on Privacy Please we cover some of the top stories in the security and privacy world.

Support the show

This week on Privacy Please, we cover a few different topics in the world of Privacy. 

Support the show

This week on Privacy Please, we have the pleasure of speaking with the founder of Myota, Mr. Jaeyoon Chung. 

We discuss and learn about Jaeyoon's background, protecting confidentiality, availability, and integrity of data, which is still believed to be the core tenants of security and privacy. We also dive into what is ongoing in Ukraine and much more! 

Support the show

This week on Privacy Please,  we are thrilled to have Chris Hansen back on the show for Part 2. 

Main topics: 

• The unique situation ongoing in Ukraine and the effects around the world
• Many different ways and reasons for diversifying your resource pool
• Replatforming with privacy engineering in mind
• Current Privacy/security trends affected by the current world state

Support the show

This week on Privacy Please, we dive into a few different cybersecurity news topics surrounding a big name breach in Microsoft and Okta as well a statement from president Biden on the state of our Cybersecurity during these very difficult times. 

https://www.whitehouse.gov/briefing-room/statements-releases/2022/03/21/statement-by-president-biden-on-our-nations-cybersecurity/

https://thehackernews.com/2022/03/lapsus-hackers-claim-to-have-breached.html

Support the show

This week on Privacy Please, we talk about Russia's ongoing cyberattacks in Ukraine and what this could mean for the future. We also, speak on the types of cyberattacks, and we can do right now to help. 

Support the show

This week on Privacy Please, we talk about Web3 and the potential threat it presents us. It is key for us to get ahead start thinking about privacy in a different way. 

"Data will be decentralized, making it less clear who's responsible for securing it" - Raj Patel 

"Be Curious, not judgemental" - Ted Lasso

Support the show

This week on Privacy Please, we go into a great article that talks about western intelligence services raising alarms about Cyclops Blink, the latest tool at the notorious group’s disposal.

Author Credit - Andy Greenberg at Wired

Support the show

This week on Privacy Please, we welcome Mr. Backup himself, Curtis Preston!

Curtis is an expert in backup & recovery systems; a space he has been working in since 1993. He has written four books on the subject and is the Chief Technical Evangelist at Druva!

He is also the host of the Restore it All podcast, and the founder and webmaster of backupcentral.com, a website dedicated to backup and recovery. 

Main Topics: 

• The many intricacies of data backup, disaster recovery, and long-term storage.
• Using a SaaS service for data protection and resilience.
• and much more!

Support the show

This week on Privacy Please, we recorded a special episode on Privacy day (January 28th) with our fantastic guest and new friend, Christopher Hansen, SVP, Communication, Media and Technology Portfolio at 3Pillar Global. 

Main Topics:  We talk about his background and how he got into this industry, the death of the cookie, and how COVID has rapidly increased innovation among tech companies.

Support the show

This week on Privacy Please, we are honored to have a very special guest on for celebrating our 100th episode!!! Mr. Todd Feinman, the Founder of Spirion (FKA, Identity Finder) joins the show to tell us his story,  why he and his Partner had this vision almost two decades ago, data privacy and security predictions, and much more! 

Support the show

This week on Privacy Please, we dive into a few articles on ransomware extortion attacks that expose OT data.  The Analysis of "shaming site" data dumps found sensitive documentation from OT organizations, including oil and gas.

Mandiant Report - https://www.mandiant.com/resources/ransomware-extortion-ot-docs

Support the show

This week on Privacy Please we have Mr. Erik Rind, Founder & CEO at ImagineBC! 

We learn about Erik's story, why he created this very fascinating company ImagineBC, which aims to be for blockchain technology what “You’ve got mail” was for the Internet. We also talk AI Driven Robotics, Machine Learning, Privacy, Meta (Facebook) Virtual reality, and much more! 

Support the show

This week on Privacy Please, we bring back on the fantastic Kelly Finnerty from Start Page for part 2 and she brings big news, real talk and belly laughs.  

Introducing Startpage Privacy Protection Extension, protecting you from cookies and trackers across the web. This thing works beautifully! Check out the link below and go download now! 

https://www.startpage.com/privacy-please/startpage-articles/easy-privacy-control-across-the-internet-introducing-startpage-privacy-protection

Support the show

This week on Privacy Please - Short Stories, we talk about the Capital One breach and how it highlights the dangers of insider threats. 

"Incidents show how difficult it is to defend against determined and knowledgeable hackers."

Author credit: James Rundle and Catherine Stupp

Support the show

This week on Privacy Please, we enter 2022 with a brand new season (S3) and we also present a brand new series called PP Short Stories.

SolarWinds CEO, Sudhakar Ramakrishna explains to Computer Weekly (Credit for their interview) just how focused he was on transparency which helped the company get safely through a cyber breach.

Author credit: Alex Scroxton, Security Editor

Support the show

This week of Privacy Please, we have another great blogcast for you! 

Author credit: Gabe Gumbs

Support the show

This week on Privacy Please, we are joined by two very good friends and business partners helping fight against financial crime, Dr. Gary M. Shiffman – Economist and CEO of Giant Oak and Consilient and Juan C. Zarate – co-founder of Consilient. 

-We hope you enjoy this fun and interesting conversation! 

 Backstory: 

Dr. Gary M. Shiffman is an economist and CEO of two machine learning companies, Giant Oak and Consilient. Together, he and Juan C. Zarate co-founded Consilient. They both have really impressive backgrounds as Gary was a former Chief of Staff at U.S. Customs and Border Protection and Juan was also a former national security advisor for combating terrorism. The two have now joined forces to combat financial crime with data privacy-preserving technology. 

 Topics: 

The importance of data privacy within financial institutions and how banks can work together to combat financial crime. 

Shout out to the National Center for Missing and Exploited Children. Please go donate if you get this chance - https://www.missingkids.org/HOME

Support the show