The Lockdown - Practical Privacy & Security (Ray Heffer)
Explore every episode of The Lockdown - Practical Privacy & Security
| Pub. Date | Title | Duration | |
|---|---|---|---|
| 13 Mar 2023 | 001 - Stalkerware and the Data Collector | 00:28:03 | |
Follow on Twitter (X): @privacypod | |||
| 20 Mar 2023 | 002 - The Lastpass Breach and Recommended Password Managers | 00:43:18 | |
Welcome to episode two of The Lockdown - Practical Privacy and Security podcast. In this episode I share the saga of the LastPass breach, and my thoughts on password managers and authenticator apps. | |||
| 10 Apr 2023 | 003 - The Invisible Net, and Why I use GrapheneOS | 00:25:49 | |
Welcome to episode three of The Lockdown - The Practical Privacy and Security podcast. | |||
| 06 Nov 2023 | 004 - The Psychology of Social Engineering | 00:20:15 | |
Welcome to episode four of The Lockdown - The Practical Privacy and Security podcast. | |||
| 10 Nov 2023 | ZERO TRUST | FRIDAY FIELD NOTES | 00:13:39 | |
In this week’s FRIDAY FIELD NOTES, Ray Heffer discusses the Zero Trust security model, a framework that's revolutionizing how organizations protect their critical systems and data. Diving into the depths of cybersecurity, we clear up common myths and misinterpretations surrounding Zero Trust, illuminating its role as not just a defensive strategy but a comprehensive approach to modern threats. Zero Trust operates on the principle of "never trust, always verify," but what does this mean in practice? Zero Trust doesn't just look outward; it recognizes that threats also come from the inside. By assuming that a breach is not just possible, but has already happened, Zero Trust strategies are uniquely positioned to mitigate damage by insiders, whether malicious or accidental.
NIST Zero Trust Architecture (SP 800-207): https://csrc.nist.gov/pubs/sp/800/207/final | |||
| 24 Nov 2023 | 005 - Brave vs Firefox, and When Privacy Goes Wrong | 00:30:07 | |
In this week’s show, Ray Heffer gives a farewell to Michael Bazzell's Privacy, Security, and OSINT show. Also, speculation about living in a faraday cage continues, and the reasons Firefox is still better than Brave for privacy and security. Ray also talks about when privacy techniques go wrong, with his lockout from Privacy.com. Follow on Twitter (X): @privacypod This week's episode:
Links mentioned in the show: Intro music: The Lockdown "Everything we hear is an opinion, not a fact. Everything we see is a perspective, not the truth." - Marcus Aurelius | |||
| 05 Jan 2024 | 006 - When you Lose your Phone, Nextcloud, and Backups with Restic and Backblaze B2 | 00:42:26 | |
In this week's episode, it's time to wrap up 2023 with another look at Privacy.com, and my strategies for avoiding bank account lockout. I delve into the CIA Triad, breaking down its relevance to everyday privacy concerns. The episode also takes a practical turn with a guide on using FindMyDevice on GrapheneOS, and the FindMyDevice feature on the Garmin Instinct 2 watch for tracking lost phones. | |||
| 29 Jan 2024 | 007 - Defensive OSINT, Privacy on the Road, More Aliases, and Face Morphing | 00:52:12 | |
This week, I introduce Defensive OSINT, address privacy concerns while on the road, and examine the intricacies of alias usage and AI-based face morphing for photo alteration. Sharing insights from my recent travels, I highlight the need for vigilance and innovative strategies for maintaining privacy on the go. The episode explores the pros and cons of using alias names for hotel bookings, including the challenges of identity verification during check-in, while I discuss smart, alternative solutions for these scenarios. Join me as we navigate the complexities of preserving privacy in an era rife with survlleiance and data breaches, providing practical tips and advice for privacy-conscious travelers and digital citizens. In This Week's Show:
Show Links:
Intro voice-over: IRLRosie - Creative Commons Attribution license (reuse allowed) “Give me six lines written by the most honest man, and I will find something in them to hang him.” - Cardinal Richelieu | |||
| 01 Feb 2024 | IMPOSTER SYNDROME | FRIDAY FIELD NOTES | 00:20:45 | |
In this Friday Field Notes episode of The Lockdown, I share my experience with imposter syndrome, and compare practical privacy approaches with extreme measures, inspired by my move to the USA. Follow on Twitter (X): @privacypod In this week's episode:
Show Links:
"Be yourself; everyone else is already taken." -Oscar Wilde | |||
| 16 Feb 2024 | 008 - Anonymity with TOR, Data Removals, and Mozilla Monitor | 00:23:15 | |
In this weeks show I discuss some of the concerns of using TOR over a VPN, and take another look at data removal from people search sites, including a look at Mozilla Monitor, a new service for data removal from the makers of Firefox. I'll also discuss the importance of freezing your credit and putting the title of your home into a revocable living trust, prior to removing your records from people search sites. Follow on Twitter (X): @privacypod In this week's episode:
Show Links:
“If you want to keep a secret, you must also hide it from yourself.” -George Orwell | |||
| 08 Mar 2024 | 009 - Data Broker Sites and a Conversation with Lawrence Gentilello from Optery | 00:53:55 | |
In today's show, I have a conversation with Lawrence Gentilello, the CEO and Founder of Optery, a personal data removal service. Lawrence shares his own experiences with identity theft and what motivated him to start Optery. We also discuss the future of privacy in the United States, Utah's new privacy law, the Utah Consumer Privacy Act (UCPA), and the bare minimum you should be doing to protect and secure your private data. Follow Ray on Twitter @privacypod In this week's episode:
Show Links:
"If privacy is outlawed, only outlaws will have privacy." - Philip R. Zimmermann, creator of PGP encryption | |||
| 15 Mar 2024 | 010 - Alternatives to Authy, SANS OSINT Summit, and Selling your Soul to CLEAR | 00:37:07 | |
In this week's episode:
Show Links:
"The right to be left alone is indeed the beginning of all freedom." - Supreme Court Justice William O. Douglas | |||
| 24 May 2024 | 011 - Living Like a Recluse, Living Trusts, GrapheneOS, and Listener Questions | 00:53:13 | |
After escaping to the mountains and living like a recluse for the past few months, I am back. In this week's show, I discuss my latest experiences in purchasing a home and titling in a living trust, along with the potential obstacles with title deeds and mortgage lenders, and avoiding data breaches with utility companies. I also revisit GrapheneOS after using it daily for the past year, and answer listener questions. In this week's episode:
"Privacy is rarely lost in one fell swoop. It is usually eroded over time, bit by bit." - Daniel J. Solove | |||
| 19 Jul 2024 | 012: Back to the Basics, Back to the iPhone, Authy API Abuse | 00:32:34 | |
This week we go back to the basics of privacy and security for the average Joe or Jane, and discuss the latest iPhone settings for privacy. I also discuss the Twilio Authy API abuse that resulted in 33 million phone numbers for Authy accounts being exposed. Huge thank you to the Patreon supporters!
"I don't want to live in a world where there's no privacy, and therefore no room for intellectual exploration and creativity."
Podcast music: Recluse by Ray Heffer | |||
| 27 Jul 2024 | 013: iCloud Private Relay, Complete pfSense Guide, and Privacy for Kids | 00:50:34 | |
In this week’s show, I take a deeper dive into Apple’s iCloud Private Relay, discussing who should and who shouldn’t use it. I then discuss my latest article, “The Complete Setup Guide to pfSense for Privacy and Security,” and the benefits of an always-on VPN. Lastly, for those who are parents, I offer a discussion on privacy for kids and some non-invasive techniques for protecting them online.
Show Links:
“You never had a camera in my head.” - Truman Burbank | |||
| 09 Aug 2024 | 014 - Social Media, OPSEC for OSINT, and AI Security | 00:21:27 | |
This week I respond to a few listener questions, primarily around the use of social media as a privacy enthusiast. Love it or hate it, you can guess which camp I'm in, social media like LinkedIn has almost become a requirement for job searches, employers, and connecting with other professionals. I also touch on OPSEC for OSINT, a new talk track I am planning to present in the future. It's important for all of us to maintain better Operational Security (OPSEC). Finally, I share my latest blog post: Venturing into AI Security with Locally Hosted LLMs, and why locally hosted AI is essential for privacy. In this week's episode:
Show Links:
Because you made a phone call.
| |||
| 30 Aug 2024 | 015 - NPD202401 (National Public Data Breach) and Windows 11 | 00:27:16 | |
In today’s show, I discuss the National Public Data (NPD) breach, which contains 2.7 billion records, including the social security numbers of US residents. I cover how to check if your SSN is part of the breach and emphasize the importance of setting up a credit freeze for yourself and your kids. I also explore some useful tools for searching large datasets and share my thoughts on a Reddit post. In this week's episode:
Show Links: Credit Freeze for Kids: Experian - https://www.experian.com/help/minor-request.html TransUnion - https://www.transunion.com/credit-freeze/credit-freeze-faq#freeze-other-minor-0 https://www.transunion.com/credit-disputes/child-identity-theft-inquiry-form > I know why you're here, Neo. I know what you've been doing... why you hardly sleep, why you live alone, and why night after night, you sit by your computer. - Trinity (The Matrix)
| |||
| 06 Sep 2024 | 016 - Privacy Discussion with Tyler from EasyOptOuts | 01:06:58 | |
In this episode, we have a special guest, Tyler Murphy, co-founder of EasyOptOuts, a data removal service focused on helping people remove their personal information from publicly accessible people search sites. Tyler discusses the inspiration behind EasyOptOuts, the challenges of maintaining privacy in a world of constant data breaches, and offers insights into data removal from various brokers. This conversation is packed with advice for anyone looking to regain control over their online privacy.
Imagine, then, this situation where we have the huge electronic intercommunication so that everybody is in touch with everybody else in such a way that it reveals their inmost thoughts, and there is no longer any individuality. No privacy. Everything you are, everything you think is revealed to everyone. - Alan Watts
| |||
| 11 Oct 2024 | 017 - Privacy During a Natural Disaster, Self-Hosting Nextcloud, Backblaze B2 & Restic, and Farewell Firefox | 00:56:25 | |
In this episode, recorded on October 10, 2024, I dive into privacy and security during natural disasters, highlighting essential tools like iOS 18’s satellite messaging and Starlink for maintaining communication when traditional systems fail. Next I dive into self-hosting in depth, particularly focusing on Nextcloud for privacy-conscious file sync. The episode concludes with a detailed analysis of a critical vulnerability in Firefox and the merits of switching to LibreWolf for enhanced privacy and security. In this week’s episode:
Show Links:
All warfare is based on deception.
| |||