Scam Tactics, Stalkerware, Pegasus, and Surveillance Reform, with David Ruiz from Malwarebytes

Ledger recently announced Ledger Atom, a mobile device that combines hardware wallet security with Android usability. In this episode of Techlore Talks, Ledger’s CTO explains what this device actually protects, where it stops, and what it means for privacy.🔗 SOURCES & LINKS • Ledger hardware wallets (affiliate): https://www.ledger.com/techlore• Ledger hardware wallets (non-affiliate): https://www.ledger.com• Ledger Atom details (affiliate): https://shop.ledger.com/pages/ledger-atom?r=1fb45e5b9178• Ledger Atom details (non-affiliate): https://shop.ledger.com/pages/ledger-atom⏱️ TIMESTAMPS(00:00) - INTRO (00:09) - WHAT'S NEW? (00:34) - SECURITY COMPARISON (02:33) - SECURE MODE (03:40) - SECURITY VS. PRIVACY (05:08) - APPS USING THE SECURE ELEMENT (07:01) - GOALS FOR THE FUTURE (08:10) - THE IMPLANT ATTACK (10:31) - APPLYING TO OLDER DEVICES (11:45) - POST-QUANTUM (14:17) - USABILITY (15:39) - FUTURE POSSIBILITIES 🎥 VIDEOWatch on YouTube 🧡 SUPPORT TECHLOREKeep Techlore Talks independent & growing: ★ Support this podcast ★

System76 creates premium Linux computers, but they also helped draft the open source exemption language for Colorado's age attestation bill. In this interview, System76 CEO Carl Richell explains how it happened, why open source is different, and what's next for Pop!_OS and COSMIC.This episode is sponsored by SLNT. Check out their faraday bags and get 15% off + free shipping on qualifying orders: SLNT.com/TECHLORE🔗 SOURCES & LINKS• System76: https://system76.com ⏱️ TIMESTAMPS(00:00) - INTRO (03:52) - PRODUCT TIMELINE & EXPANSION (08:45) - SYSTEM76 CUSTOMERS (10:24) - SYSTEM76 PRODUCT LINEUP (12:24) - POLITICAL INVOLVEMENT (18:58) - SYSTEMD PULL REQUEST (19:52) - SPONSOR: SLNT (20:47) - HOW TO GET INVOLVED (24:44) - PROPRIETARY VS. OPEN SOURCE (27:51) - TOP TO BOTTOM INTEGRATION (30:21) - LTT LINUX CHALLENGE (33:47) - WHAT IS LINUX STILL LACKING? (35:50) - LINUX PHONES (38:41) - ARM SUPPORT (40:28) - AI (44:28) - MEMORY PRICES (45:00) - FUNDING (45:32) - WHAT'S NEXT? (47:05) - PICK A DISTRO (47:56) - HOW TO FOLLOW 🎥 VIDEOWatch on YouTube 🧡 SUPPORT TECHLOREKeep Techlore Talks independent & growing: ★ Support this podcast ★

DNS quietly reveals everywhere you go online - even on encrypted sites. In this interview, John Todd (CTO at Quad9) provides a DNS masterclass: how DNS works, the privacy implications, how to change your DNS, why Quad9 collects nothing on you, why they are being sued, DNS vs. VPNs, and how a nonprofit can fund itself without compromising privacy.🔗 SOURCES & LINKS• Quad9: https://quad9.net ⏱️ TIMESTAMPS(00:00) - INTRO (01:00) - WHAT IS QUAD9? (01:30) - HOW IS IT FREE? (02:48) - WHAT'S RECURSIVE DNS? (04:11) - DNS PRIVACY CONCERNS (07:19) - DEFAULT DNS PROVIDER + OPTIONS (09:15) - DNS ON iOS (11:02) - WHERE TO SET YOUR DNS (13:47) - CYBERSECURITY & PRIVACY (16:16) - WHAT'S BLOCKED (18:55) - CUSTOM DNS ON A ROUTER (20:11) - COMMON MISCONCEPTIONS (21:50) - HTTPS VS. TLS VS. QUIC (25:56) - RECOMMENDATIONS (27:20) - CENSORSHIP CIRCUMVENTION (30:01) - SNI & ECH (33:49) - LAWSUITS (40:45) - THE NUANCE BEHIND BLOCKING (42:23) - FOLLOW THE FIGHT (42:52) - THE QUAD9 TEAM (43:39) - OPERATION COSTS (45:34) - MONETIZING DATA? (50:25) - OTHER REVENUE MODELS (57:53) - WHY TRUST QUAD9? (01:00:39) - SPEED DIFFERENCES (01:06:32) - QUAD9 VS. DIY FILTERING (01:08:42) - VPN VS. DNS (01:13:08) - PI-HOLE (01:15:11) - LOOKING FORWARD (01:18:10) - HOW TO FOLLOW 🎥 VIDEOWatch on YouTube 🧡 SUPPORT TECHLOREKeep Techlore Talks independent & growing: ★ Support this podcast ★

Josh Summers spent a decade living in western China before 14 police officers showed up at his door, accused him of espionage, and confiscated every device his family owned. This Techlore Talks interview covers what 17 days of interrogation taught him about digital privacy while traveling, and the practical steps that could make the difference for you.Stop handing out your real email address. addy.io gives every site an alias that forwards to your normal inbox. Open source, self-hostable, with browser extensions and mobile apps. 🚀 Get started for free: https://addy.io/?utm_source=techlore🔗 SOURCES & LINKS• All Things Secured (website): https://www.allthingssecured.com/• All Things Secured (YouTube): https://www.youtube.com/@AllThingsSecured• All Things Secured (Odysee): https://odysee.com/@AllThingsSecured⏱️ TIMESTAMPS(00:00) - INTRO (02:03) - LIVING ABROAD (04:12) - WHY ASIA? (05:29) - GETTING KICKED OUT OF CHINA (12:16) - LIFE AFTER DEPORTATION (17:25) - PARALLELS BETWEEN THEN & NOW (20:41) - AMERICAN VS. CHINESE CITIZENS (24:07) - HOW CULTURE IMPACTS SURVEILLANCE (27:22) - SPONSOR SEGMENT (28:53) - TAKEAWAYS FROM JOSH'S EXPERIENCE (34:02) - OBSCURITY (36:21) - TRAVEL ADVICE (37:51) - SECONDARY DEVICES (38:57) - NEVER TAKE YOUR PHONE HERE (40:23) - SILENT TRAVEL RISK (44:06) - EASTERN VS. WESTERN SURVEILLANCE (46:46) - THE EFFECTS OF INVISIBILITY (51:16) - ALL THINGS SECURED ORIGINS (54:10) - WHERE TO START (56:28) - VIEWING PRIVACY DIFFERENTLY (01:02:29) - FINDING BALANCE (01:06:43) - FINAL THOUGHTS (01:07:35) - HOW TO FOLLOW 🎥 VIDEOWatch on YouTube 🧡 SUPPORT TECHLOREKeep Techlore Talks independent & growing: ★ Support this podcast ★

Flock Safety is one of several companies quietly building a searchable database of everyone's car — no warrant required, and no way to opt out. In this Techlore Talks interview, Bob from DeFlock breaks down how ALPR technology works, what "end-to-end encryption" really means in Flock's case, why this issue is bipartisan, and what you can do about it in your own city.🔗 SOURCES & LINKS• DeFlock: https://deflock.org• No ALPRs Week of Action: https://noalprs.com ⏱️ TIMESTAMPS(00:00) - INTRO (01:38) - WHAT IS FLOCK? (03:27) - WHY HAS FLOCK SPECIFICALLY BLOWN UP? (04:53) - THE FUNDAMENTAL CONCERNS (07:10) - WHERE ARE THESE CAMERAS? (09:20) - ALTERNATE INCENTIVES (10:58) - LIMITS ON ALPR DATA (12:53) - FLOCK'S TECH (14:49) - DEFLOCK'S WEBSITE (16:23) - THE IMPACT OF THE MAP (17:11) - THE EXPANSION OF THE MAP (18:35) - HAS FLOCK REACHED OUT? (19:23) - WHY FLOCK ISN'T RENEWED (20:27) - DE-FLOCK, OR DE-ALPR? (21:07) - GETTING STARTED (22:51) - WHY BOB GOT INVOLVED (23:53) - IS THIS BIPARTISAN? (25:21) - HOW TO FOLLOW (26:00) - THE CITY THAT'S DONE THE MOST (27:25) - OUTRO 🎥 VIDEOWatch on YouTube 🧡 SUPPORT TECHLOREKeep Techlore Talks independent & growing: ★ Support this podcast ★

California created a free service that deletes your personal information from over 600 registered data brokers. Tom Kemp, Executive Director of the California Privacy Protection Agency (Cal Privacy), breaks down how the DROP system actually works, why data brokers face fines of up to $40 million a day for non-compliance, what to do if you live outside California, and more.🔗 SOURCES & LINKS• Cal Privacy: https://cppa.ca.gov/• DROP: https://privacy.ca.gov• California Safe at Home Program: https://www.sos.ca.gov/registries/safe-home ⏱️ TIMESTAMPS(00:00) - INTRO (01:44) - CPPA VS. CAL PRIVACY (02:52) - TOM'S BACKGROUND (04:39) - CAL PRIVACY RELATIONSHIP WITH BIG TECH (07:38) - CAL PRIVACY INSPIRATION (12:23) - THE PRIVACY PARADOX (15:15) - CALIFORNIA'S APPROACH VS. OTHERS (18:04) - UPCOMING BROWSER REQUIREMENTS (19:15) - DELETE REQUEST AND OPT-OUT PLATFORM (DROP) (26:08) - HOW DROP WORKS (28:05) - DROP VS. DATA REMOVAL SERVICES (00:00) - 37:14 WHO RUNS THE DROP TECH? (39:43) - DATA SECURITY & INFRASTRUCTURE (46:14) - LEAVING OR CUSTOMIZING DROP (46:46) - TIMING (47:33) - DATA BROKER REGISTRY (49:41) - DATA BROKER REACTION (51:36) - WHY IS THIS RETROACTIVE? (54:45) - HOW TO ADVOCATE WHERE YOU ARE (57:50) - FEDERAL PRIVACY REGULATION (01:00:12) - HOW TO UTILIZE YOUR RIGHTS & TOOLS (01:04:14) - FINAL THOUGHTS 🎥 VIDEOWatch on YouTube 🧡 SUPPORT TECHLOREKeep Techlore Talks independent & growing: ★ Support this podcast ★

Once you use Strongbox, a community favorite KeePass client, it's hard to use anything else. Alex Logan is the VP of Engineering at Applause, the company behind Strongbox. He dives into why KeePass syncing works differently than cloud-based password managers, how Strongbox's sync tries to close that gap, what the Applause acquisition actually changed, the open source nuance that trips people up, and whether a Windows or Android client is ever coming.🔗 SOURCES & LINKS• Strongbox: https://strongboxsafe.com/• Strongbox Subreddit: https://reddit.com/r/strongbox• KeePass: https://keepass.info/• Have I Been Pwned: https://haveibeenpwned.com/ ⏱️ TIMESTAMPS(00:00) - INTRO (02:47) - OVERVIEW OF PASSWORD MANAGERS (04:50) - 3 TYPES OF PASSWORD MANAGERS (08:50) - PASSWORD SYNCING (11:23) - SERVERS + APPLE iCLOUD (13:13) - KEEPASS CLIENT INCONSISTENCY + GAPS (19:12) - NEXTCLOUD SYNC (19:59) - WIFI SYNC (21:17) - iCLOUD ADVANCED DATA PROTECTION (ADP) (23:01) - STRONGBOX TARGET USER (25:11) - AUTOFILL (29:34) - BROWSER SUPPORT (30:34) - BROWSER EXTENSION SECURITY (32:57) - APP CONNECTIONS (35:10) - SAFETY & ANALYTICS CONCERNS (40:57) - OPEN SOURCE (43:19) - BROADENING STRONGBOX'S HORIZONS (46:06) - THE STRONGBOX TEAM (47:54) - STRONGBOX ACQUISITION (51:34) - PAYING FOR OPEN SOURCE + PRICING (56:24) - WHAT'S NEXT? + HOW TO FOLLOW 🎥 VIDEOWatch on YouTube 🧡 SUPPORT TECHLOREKeep Techlore Talks independent & growing: ★ Support this podcast ★

Every major global event brings the same scam tactics wearing a new mask. In this interview, David Ruiz, journalist and privacy advocate at Malwarebytes, breaks down how to identify (and avoid) scams, stalkerware vs. nation-state spyware, and what privacy is actually about.🔗 SOURCES & LINKS• Malwarebytes: https://malwarebytes.com/• Coalition Against Stalkerware: https://stopstalkerware.org/• Citizen Lab: https://citizenlab.ca/• Electronic Frontier Foundation: https://eff.org/ ⏱️ TIMESTAMPS(00:00) - INTRO (01:31) - DAVID'S BACKGROUND (06:38) - POLICY BEHIND-THE-SCENES (09:18) - WORLD CUP SCAMS (16:58) - BEHAVIORAL VS. TECHNOLOGICAL DEFENSES (18:53) - SCAMS VS. MARKETING (21:49) - RESPONSIBILITY (24:35) - WHERE TOOLS FIT + MALWAREBYTES TOOLS (28:42) - MALWAREBYTES RELATIONSHIP TO BIG TECH (31:30) - ANALYTICS (33:56) - COALITION AGAINST STALKERWARE (41:46) - STALKERWARE VS. GOVERNMENT SPYWARE (44:32) - STALKERWARE IS MOSTLY ANDROID? (47:44) - DAVID'S TECH STACK (50:29) - FINAL THOUGHTS 🎥 VIDEOWatch on YouTube 🧡 SUPPORT TECHLOREKeep Techlore Talks independent & growing: ★ Support this podcast ★

Your bank can freeze your account, block your transfers, and demand explanations for how you spend your own money. Cake Wallet founder & CEO Vik Sharma learned this firsthand when trying to transfer $90 between his accounts. In this interview, he shares this story, along with the history of Cake Wallet, why financial privacy matters, the importance of decentralization, Bitcoin vs. Monero, silent payments, and more.Thank you to PikaSim for sponsoring this episode! Visit https://pikasim.com/techlore and use code "TECHLORE" for 10% off your anonymous eSIM.🔗 SOURCES & LINKS• Cake Wallet: https://cakewallet.com/• Monero by Cake Wallet: https://monero.com/• Cupcake: https://cupcakewallet.com/ ⏱️ TIMESTAMPS(00:00) - INTRO (01:47) - HOW VIK GOT INTO CRYPTO (03:32) - THE VALUE OF DECENTRALIZATION (06:15) - THE VALUE OF CRYPTO FOR SKEPTICS (08:54) - CAKE WALLET PHILOSOPHY + VISION (12:48) - TECHNICAL VS. PHILOSOPHICAL CRITICISM (15:30) - "WE CAN'T SEE THAT" (18:39) - SPONSOR (20:30) - BLOCKCHAIN PRIVACY CONCERNS (27:29) - ZCASH RECEPTION (29:25) - SILENT PAYMENTS (31:10) - CUPCAKE (34:03) - PRIVACY & SECURITY VS. MARKETING (38:39) - CENSORSHIP RESISTANCE (40:02) - CURRENT CONCERNS (42:28) - HOW TO FOLLOW 🎥 VIDEOWatch on YouTube 🧡 SUPPORT TECHLOREKeep Techlore Talks independent & growing: ★ Support this podcast ★

End-to-end encrypted file sharing may sound simple, but for Cryptee, it took five years to ship. In this interview, Henry sits down with John Ozbay, founder and CEO of Cryptee, to talk through why: preventing CSAM, why client-side scanning doesn't work, how Cryptee's solution was designed to raise the barrier to mass spread without compromising encryption, and the broader philosophical question of where developer liability ends and moral responsibility begins.🔗 SOURCES & LINKS• Cryptee: https://crypt.ee• Stop Chat Control: https://stopchatcontrol.eu• Open Web Advocacy: https://open-web-advocacy.org• EDRI: https://edri.org ⏱️ TIMESTAMPS(00:00) - INTRO (04:08) - E2EE SHARING HESITATIONS (14:09) - HOW IS BIG TECH HANDLING THIS? (16:24) - LOCAL SCANNING (19:27) - HOW ARE CHAT APPS HANDLING THIS? (21:24) - E2EE BACKUPS (22:40) - HOW MUCH IS THIS CONSIDERED? (25:38) - CRYPTEE'S SOLUTION (42:09) - THREAT MODELING (48:18) - MEGA'S APPROACH (53:16) - LIABILITY VS. RESPONSIBILITY (01:01:40) - HOW TO ENGAGE PRODUCTIVELY (01:09:48) - CHAT CONTROL & ULTERIOR MOTIVES (01:21:34) - IS CHAT CONTROL DEAD? (01:25:33) - HOW JOHN GOT INVOLVED (01:34:44) - CHANGING OVER TIME + RIGHT TO REPAIR + LINUX (01:41:32) - CLOSING THOUGHTS 🎥 VIDEOWatch on YouTube 🧡 SUPPORT TECHLOREKeep Techlore Talks independent & growing: ★ Support this podcast ★