The Lockdown - Practical Privacy & Security

In this episode, we have a special guest, Tyler Murphy, co-founder of EasyOptOuts, a data removal service focused on helping people remove their personal information from publicly accessible people search sites. Tyler discusses the inspiration behind EasyOptOuts, the challenges of maintaining privacy in a world of constant data breaches, and offers insights into data removal from various brokers. This conversation is packed with advice for anyone looking to regain control over their online privacy.In this week’s episode:Tyler shares how EasyOptOuts was founded, the challenges faced, and their mission to make data removal accessible.Discussion on the widespread availability of personal data on people search sites and the complexities of removing it.Insights into how EasyOptOuts automates data removal, and comparisons with manual removal processes.The challenges posed by bot detection, CAPTCHAs, and deceptive removal processes that often require membership or payment.The potential implications of data breaches, evolving bot detection, and the future of digital identity verification.Tyler shares his own privacy techniques, including the use of VPNs, alias names, and minimizing data exposure online.EasyOptOuts approach to scaling their service, future plans for business and family tiers, and their commitment to remaining a two-person operation.Show Links:EasyOptOuts - https://www.easyoptouts.com/Imagine, then, this situation where we have the huge electronic intercommunication so that everybody is in touch with everybody else in such a way that it reveals their inmost thoughts, and there is no longer any individuality. No privacy. Everything you are, everything you think is revealed to everyone. - Alan Watts

9/6/24 • 66:58

In today’s show, I discuss the National Public Data (NPD) breach, which contains 2.7 billion records, including the social security numbers of US residents. I cover how to check if your SSN is part of the breach and emphasize the importance of setting up a credit freeze for yourself and your kids. I also explore some useful tools for searching large datasets and share my thoughts on a Reddit post.In this week's episode:On the brink of giving up!Using OnlyOffice as a Google Docs alternativeNational Public Data (NPD) breachRipgrep (rg) and Silver Searcher (ag) tools for searching massive datasetsCredit freezesBest efforts for Windows 11 privacyElevenTray, a useful utility to always show Windows 11 tray iconsShow Links:Simplewall - https://github.com/henrypp/simplewallElevenTray - https://github.com/locksec/eleventrayOnlyOffice - https://www.onlyoffice.com/LibreOffice - https://www.libreoffice.org/Credit Freeze Guide - https://inteltechniques.com/freeze.htmlCredit Freeze for Kids:Equifax - https://www.equifax.com/personal/education/identity-theft/articles/-/learn/freezing-your-childs-credit-report-faq/(800)685-1111Equifax Security Freeze, PO Box 105788, Atlanta, Georgia 30348Experian - https://www.experian.com/help/minor-request.html(888)397-3742Experian Security Freeze. PO Box 9554, Allen, TX 75013TransUnion - https://www.transunion.com/credit-freeze/credit-freeze-faq#freeze-other-minor-0(888)909-8872TransUnion, P.O. Box 380, Woodlyn, PA 19094https://www.transunion.com/credit-disputes/child-identity-theft-inquiry-form> I know why you're here, Neo. I know what you've been doing... why you hardly sleep, why you live alone, and why night after night, you sit by your computer. - Trinity (The Matrix)Podcast music: Recluse by Ray Heffer 

8/30/24 • 27:16

This week I respond to a few listener questions, primarily around the use of social media as a privacy enthusiast. Love it or hate it, you can guess which camp I'm in, social media like LinkedIn has almost become a requirement for job searches, employers, and connecting with other professionals. I also touch on OPSEC for OSINT, a new talk track I am planning to present in the future. It's important for all of us to maintain better Operational Security (OPSEC). Finally, I share my latest blog post: Venturing into AI Security with Locally Hosted LLMs, and why locally hosted AI is essential for privacy.In this week's episode:Redacting  ███ in your social media profilesMinimizing the use of profile photosAlways assume private profiles are NEVER privateAddiction to social media and down regulation of the dopamine receptorsMore on custom domainsOperational Security for OSINT professionalsLocally hosted LLMs for private AIData (PII) leakage with ChatGPTShow Links:ChatGPT Privacy Issue - https://www.nytimes.com/interactive/2023/12/22/technology/openai-chatgpt-privacy-exploit.htmlBrain anatomy alterations associated with Social Networking addiction - https://www.ncbi.nlm.nih.gov/pmc/articles/PMC5362930/AI Security with Locally Hosted LLMs - https://lockdown.media/ai-security-with-llmsExpired Domains - https://www.expireddomains.net/SimpleLogin - https://simplelogin.io/Because you made a phone call.- Brill (Enemy of the State)Podcast music: Recluse by Ray Heffer 

8/9/24 • 21:27

In this week’s show, I take a deeper dive into Apple’s iCloud Private Relay, discussing who should and who shouldn’t use it. I then discuss my latest article, “The Complete Setup Guide to pfSense for Privacy and Security,” and the benefits of an always-on VPN. Lastly, for those who are parents, I offer a discussion on privacy for kids and some non-invasive techniques for protecting them online. In this week's episode:IntroiCloud Private RelayComplete Guide to pfSensePrivacy for KidsListener questionsShow Links:The Complete Setup Guide to pfSense for Privacy and Security: https://lockdown.media/complete-setup-guide-to-pfsense NextDNS: https://nextdns.io/ Cron package for pfSense: https://docs.netgate.com/pfsense/en/latest/packages/list.html Private Relay Outage: https://www.tomsguide.com/phones/iphones/having-browsing-trouble-on-apple-devices-youre-not-alone-apples-private-relay-system-is-having-problems iCloud Private Relay Overview: https://www.apple.com/privacy/docs/iCloud_Private_Relay_Overview_Dec2021.PDF“You never had a camera in my head.”- Truman BurbankPodcast music: Recluse by Ray Heffer

7/27/24 • 50:34

This week we go back to the basics of privacy and security for the average Joe or Jane, and discuss the latest iPhone settings for privacy. I also discuss the Twilio Authy API abuse that resulted in 33 million phone numbers for Authy accounts being exposed. Huge thank you to the Patreon supporters!In this week's episode:Back to the basicsAdvice for the 'average Joe' The Twilio Authy API breach iPhone privacy settings Listener question on doorbell camerasShow Links:1Password Security Audits: https://support.1password.com/security-assessments/Bitwarden Security Audits: https://bitwarden.com/help/is-bitwarden-audited/Twilio Breach: https://www.bleepingcomputer.com/news/security/hackers-abused-api-to-verify-millions-of-authy-mfa-phone-numbers/MySudo: https://mysudo.com/ProtonMail: https://protonmail.com/StrongBox: https://strongboxsafe.com/KeepassDX: https://www.keepassdx.com/Amcrest Cameras: https://www.amazon.com/gp/product/B07ZJS3L5Y"I don't want to live in a world where there's no privacy, and therefore no room for intellectual exploration and creativity."- Edward SnowdenPodcast music: Recluse by Ray Heffer

7/19/24 • 32:34

After escaping to the mountains and living like a recluse for the past few months, I am back. In this week's show, I discuss my latest experiences in purchasing a home and titling in a living trust, along with the potential obstacles with title deeds and mortgage lenders, and avoiding data breaches with utility companies. I also revisit GrapheneOS after using it daily for the past year, and answer listener questions.In this week's episode:Living in the mountainsBuying a house with a living trustPotential pitfalls with title deeds and mortgage lendersBalancing privacy and securityThe 'All or Nothing' approachWhy I still use Obsidian over Standard NotesRevisiting GrapheneOS and the Play Integrity APIBaby ReindeerListeners Questions"Privacy is rarely lost in one fell swoop. It is usually eroded over time, bit by bit."- Daniel J. Solove

5/24/24 • 53:13

In this week's show, I discuss CLEAR's intrusive privacy policy and highlight alternatives to Authy using KeePass, with a privacy friendly solution for scanning QR codes. I also address the common mistakes people make when backing up their MFA codes. Additionally, I share some of the highlights from attending the SANS OSINT Summit in Washington, D.C., and explore various uses for custom domain names. Finally, I touch on the Starbucks app and the benefits of using Tello for pre-paid SIM cards.Follow on Twitter (X): @privacypodSupport the show: https://www.patreon.com/TheLockdownThis episode was recorded on March 14, 2024In this week's episode:CLEAR Privacy and Selling SoulsAuthy discontinues the desktop app from March 19th, 2024Alternative MFA solutions using KeepassXC and KeepassDXStoring backup MFA codes in a Veracrypt containerMake sure you keep scanned copies of your credit cards and ID!Update on the SANS OSINT SummitAlternative to Mint Mobile with TelloUsing the Starbucks app privatelyCustom domain namesShow Links:CLEAR Security Breach: https://www.youtube.com/watch?v=i0I0BTtnMC4OSINT Combine Free Tools:  osintcombine.com/freetoolsWhatsmyname: https://whatsmyname.app/Tello:  https://tello.com/QR Scanner (PFA) by Secuso Research Group: https://secuso.aifb.kit.edu/english/QR_Scanner.phpSkull Games: https://skullgames.io/Trace Labs: https://www.tracelabs.org/Expired Domains: https://www.expireddomains.net/deleted-domains/"The right to be left alone is indeed the beginning of all freedom."- Supreme Court Justice William O. Douglas

3/15/24 • 37:07

In today's show, I have a conversation with Lawrence  Gentilello, the CEO and Founder of Optery, a personal data removal service. Lawrence shares his own experiences with identity theft and what motivated him to start Optery. We also discuss the future of privacy in the United States, Utah's new privacy law, the Utah Consumer Privacy Act (UCPA), and the bare minimum you should be doing to protect and secure your private data.Follow on Twitter (X): @privacypodSupport the show: https://www.patreon.com/TheLockdownThis episode was recorded on March 6, 2024Follow Ray on Twitter @privacypodIn this week's episode:Lawrence's experience with identity theft highlights the importance of a credit freezeThe need for disinformationA reminder on hunting appsThe future of data privacy and the need for services like OpteryData privacy in the UK and the existence of search sites like 192.comUpdate on next weeks showShow Links:Optery website: https://www.optery.com/PC Magazine Editors Choice Award for Optery: https://www.pcmag.com/reviews/opteryPC Magazine's list of the best personal data removal services: https://www.pcmag.com/picks/the-best-personal-data-removal-servicesUtah Consumer Privacy Act (UCPA): https://attorneygeneral.utah.gov/utah-consumer-protection-act-a-new-law-to-protect-online-privacy/"If privacy is outlawed, only outlaws will have privacy."- Philip R. Zimmermann, creator of PGP encryption

3/8/24 • 53:55

In this weeks show I discuss some of the concerns of using TOR over a VPN, and take another look at data removal from people search sites, including a look at Mozilla Monitor, a new service for data removal from the makers of Firefox. I'll also discuss the importance of freezing your credit and putting the title of your home into a revocable living trust, prior to removing your records from people search sites.Follow on Twitter (X): @privacypodSupport the show: https://www.patreon.com/TheLockdownThis episode was recorded on February 16, 2024In this week's episode:I'm still on the road!Anonymity with TOR and VPNGet that Credit Freeze and Revocable Living TrustData Removals from people search sitesMozilla Monitor, a new data removal serviceQuick update on the Complete pfSense Setup GuideShow Links:Mozilla Monitor: https://monitor.mozilla.orgTor Browser: https://www.torproject.org/downloadDeepCorr: https://dl.acm.org/doi/pdf/10.1145/3243734.3243824Foundations of Digital Privacy, Part One: https://lockdown.media/the-foundations-of-digital-privacy“If you want to keep a secret, you must also hide it from yourself.”-George Orwell

2/16/24 • 23:15

In this Friday Field Notes episode of The Lockdown, I share my experience with imposter syndrome, and compare practical privacy approaches with extreme measures, inspired by my move to the USA.Follow on Twitter (X): @privacypodSupport the show: https://www.patreon.com/TheLockdownThis episode was recorded on January 31, 2024In this week's episode:Using alias names with food appsMore on practical privacy vs the extremeMy motivations for privacy after my move to the USASimplewall for Windows 10Using Virtual MachinesDual boot Windows for gaming vs productivityMicro-segmentation strategiesWindows 10 LTSC for privacy? I'm the Imposter! Show Links: qView Image Viewer: https://interversehq.com/qviewGPG4Win: https://www.gpg4win.org/download.htmlWindows 10 LTSC: https://www.cdw.com/search/?key=Windows%20LTSCSimplewall: https://github.com/henrypp/simplewall"Be yourself; everyone else is already taken."-Oscar WildeMusic: The Lockdown 

2/1/24 • 20:45

This week, I introduce Defensive OSINT, address privacy concerns while on the road, and examine the intricacies of alias usage and AI-based face morphing for photo alteration. Sharing insights from my recent travels, I highlight the need for vigilance and innovative strategies for maintaining privacy on the go. The episode explores the pros and cons of using alias names for hotel bookings, including the challenges of identity verification during check-in, while I discuss smart, alternative solutions for these scenarios. Join me as we navigate the complexities of preserving privacy in an era rife with survlleiance and data breaches, providing practical tips and advice for privacy-conscious travelers and digital citizens.Follow on Twitter (X): @privacypodSupport the show: https://www.patreon.com/TheLockdownThis episode was recorded on January 27, 2024In This Week's Show:Privacy on the road with hotels, VRBO rentals, and UberWhy we do this, and the reasons behind our privacy lifestyleA look at Defensive OSINT strategiesFace morphing our real photos for privacyLocation tracking on your phoneMySudo and pre-paid burner numbersA surprise guest?Show Links:Black Portable Hotel Door Lock: https://www.amazon.com/Portable-Security-Additional-Traveling-Apartment/dp/B0CFVS6NRNPython Script for ThisPersonDoesNotExist: https://github.com/locksec/tpdne_pyFacemorph.me: https://facemorph.meUpscayl: https://www.upscayl.orgFile Optimizer: https://nikkhokkho.sourceforge.io/static.php?page=FileOptimizerIntro voice-over: IRLRosie - Creative Commons Attribution license (reuse allowed)Music: The Lockdown “Give me six lines written by the most honest man, and I will find something in them to hang him.” - Cardinal Richelieu

1/29/24 • 52:12

In this week's episode, it's time to wrap up 2023 with another look at Privacy.com, and my strategies for avoiding bank account lockout. I delve into the CIA Triad, breaking down its relevance to everyday privacy concerns. The episode also takes a practical turn with a guide on using FindMyDevice on GrapheneOS, and the FindMyDevice feature on the Garmin Instinct 2 watch for tracking lost phones.I also tackle the debate between biometric authentication and passcodes, taking our threat model into consideration. For those interested in storage synchronization solutions, I discuss using Nextcloud for a variety of purposes, including photo backups, syncing Keepass, and markdown notes, highlighting its versatility for privacy.Join me for an episode packed with valuable insights and tips for enhancing your digital privacy and security as we welcome in 2024!Follow on Twitter (X): @privacypodSupport the show: https://www.patreon.com/TheLockdownThis episode was recorded on January 03, 2024In this week's episode:1. Closing 2023 with Privacy.com2. How the CIA Triad Relates to privacy3. Tracking Lost Phones with FindMyDevice on GrapheneOS and a Garmin watch4. Biometric authentication vs Passcodes5. Using Nextcloud for photo backups, Keepass Sync, and taking notes in Markdown6. Backups with Backblaze B2 and ResticShow Links:https://www.privacy.comhttps://strongboxsafe.comhttps://www.keepassdx.comhttps://grapheneos.orghttps://gitlab.com/Nulide/findmydevicehttps://obsidian.mdhttps://www.backblaze.com/cloud-storagehttps://restic.nethttps://www.garmin.com/en-US/p/775697Ray Ban Meta News: https://san.com/cc/investigation-into-new-meta-smart-glasses-brings-privacy-concernsMusic: The Lockdown"We suffer more often in imagination than in reality." - Seneca

1/5/24 • 42:26

In this week’s show, Ray Heffer gives a farewell to Michael Bazzell's Privacy, Security, and OSINT show. Also, speculation about living in a faraday cage continues, and the reasons Firefox is still better than Brave for privacy and security. Ray also talks about when privacy techniques go wrong, with his lockout from Privacy.com.Follow on Twitter (X): @privacypodSupport the show: https://www.patreon.com/TheLockdownThis episode was recorded on  November 22nd, 2023 This week's episode:IntroductionNotable mention for Michael BazzellNew website and Twitter accountWhy I don't use Brave and the reasons Firefox is still the best optionWhen Privacy Techniques Go WrongLinks mentioned in the show:MITRE ATT&CK (Credentials from Web Browsers): https://attack.mitre.org/techniques/T1555/003/MITRE ATT&CK (Password Managers): https://attack.mitre.org/techniques/T1555/005/Tor Project Recommendations: https://support.torproject.org/tbb/tbb-9/Brave (VPN Services) Issue: https://github.com/brave/brave-browser/issues/33726Citi Virtual Credit Cards: https://www.cardbenefits.citi.com/Products/Virtual-Account-NumbersCiti (True Name) Card: https://banking.citi.com/cbol/updatemyname/default.htmIronVest (Formerly Abine Blur): https://ironvest.com/pricing/Wise Virtual Card (UK): https://wise.com/gb/virtual-card/Intro music: The Lockdown"Everything we hear is an opinion, not a fact. Everything we see is a perspective, not the truth." - Marcus Aurelius

11/24/23 • 30:07

In this week’s FRIDAY FIELD NOTES, Ray Heffer discusses the Zero Trust security model, a framework that's revolutionizing how organizations protect their critical systems and data. Diving into the depths of cybersecurity, we clear up common myths and misinterpretations surrounding Zero Trust, illuminating its role as not just a defensive strategy but a comprehensive approach to modern threats.Zero Trust operates on the principle of "never trust, always verify," but what does this mean in practice? Zero Trust doesn't just look outward; it recognizes that threats also come from the inside. By assuming that a breach is not just possible, but has already happened, Zero Trust strategies are uniquely positioned to mitigate damage by insiders, whether malicious or accidental.Follow on Twitter (X): @privacypodSupport the show: https://www.patreon.com/TheLockdownThis episode was recorded on November 09, 2023This week's episode:Introduction and Brill is living in a Faraday cageHow we got to Zero Trust by understadning the Cyber Kill ChainThe Principals of Zero TrustRecommended Zero Trust FrameworksNIST Zero Trust Architecture (SP 800-207): https://csrc.nist.gov/pubs/sp/800/207/finalCISA Zero Trust Maturity Model: https://www.cisa.gov/zero-trust-maturity-modelCyber Kill Chain: https://www.lockheedmartin.com/en-us/capabilities/cyber/cyber-kill-chain.htmlIntro music: The Lockdown"Security is always seen as too much until the day it is not enough." — William H. Webster

11/10/23 • 13:39

Welcome to episode four of The Lockdown - The Practical Privacy and Security podcast.Follow on Twitter (X): @privacypodSupport the show: https://www.patreon.com/TheLockdownThis episode was recorded on November 06, 2023This week's episode:1. I'm back!2. Traveling to London and Los Angeles3. A major privacy invasion for Jennifer Lawrence4. The Psychology of social engineeringIntro music: The Lockdown"To be yourself in a world that is constantly trying to make you something else is the greatest accomplishment." - Ralph Waldo Emerson

11/6/23 • 20:15

Welcome to episode three of The Lockdown - The Practical Privacy and Security podcast.Follow on Twitter (X): @privacypodSupport the show: https://www.patreon.com/TheLockdownThis episode was recorded on April 09, 2023This week's episode:1. The case of Zachary McCoy2. Why do all this?3. The Apple Ecosystem4. My experience with GrapheneOSGet GrapheneOS: https://grapheneos.org/The case of Zachary McCoy:https://www.theguardian.com/us-news/2021/sep/16/geofence-warrants-reverse-search-warrants-police-googleTracking Phones, Google Is a Dragnet for the Police:https://www.nytimes.com/interactive/2019/04/13/us/google-location-tracking-police.htmlDenmark frees 32 inmates over flaws in phone geo-location evidence:https://www.theguardian.com/world/2019/sep/12/denmark-frees-32-inmates-over-flawed-geolocation-revelationsIntro music: The Lockdown"The rights of one are as sacred as the rights of a million." - Eugene V. Debs

4/10/23 • 25:49

Welcome to episode two of The Lockdown - Practical Privacy and Security podcast. In this episode I share the saga of the LastPass breach, and my thoughts on password managers and authenticator apps. Follow on Twitter (X): @privacypodSupport the show: https://www.patreon.com/TheLockdownThis episode was recorded on March 19, 2023This week's episode:1. The LastPass Breach2. Password Managers: Dashlane, 1Password, BitWarden, and KeePassXC3. Authenticator Apps: Google Authenticator, Aegis, and Authy.Recommended Password Managers:1. https://keepassxc.org (Desktop)2. https://www.keepassdx.com (Android only)3. https://strongboxsafe.com (iOS only)4. https://bitwarden.com (Top recommendation for cloud hosted)5. https://1password.com (Ease of use, and great option for cloud hosted)6. https://www.dashlane.com (Expensive, no desktop app)Recommended Authenticator Apps:1. https://authy.com2. https://getaegis.app (Android only)Get Yubikey: https://www.yubico.comIntro music: The Lockdown"In the long run, we will have to rebuild the universe of the online world to have security first and ease of use second." - Moxie Marlinspike

3/20/23 • 43:18

Follow on Twitter (X): @privacypodSupport the show: https://www.patreon.com/TheLockdownThis episode was recorded on March 10, 2023Show Links:Stalkerware: https://www.theregister.com/2023/02/07/stalkerware_developer_fined/IntelTechniques (List of People Search Sites): https://inteltechniques.com/workbook.htmlThis week's privacy tips:1. Privacy check-up / opt-out from people search sites2. Establish a Revocable Living Trust. Be sure to hire an estate planning attorney.3. Custom domains with Namecheap and add privacy.4. Setup a private mailbox with UPS.5. Use Privacy.com for virtual payment cards.6. MySudo virtual phone numbers. Stop being tracked, and avoid SIM swap attacks!7. Use SimpleMobile or Mint for a pre-paid cellphone option.Not Sponsors:https://www.privacy.com/https://mysudo.com/https://www.namecheap.com/Intro music: The Lockdown“Who controls the past controls the future. Who controls the present controls the past.” - 1984 by George Orwell

3/13/23 • 28:03