• 015 - NPD202401 (National Public Data Breach) and Windows 11
    Aug 30 2024

    In today’s show, I discuss the National Public Data (NPD) breach, which contains 2.7 billion records, including the social security numbers of US residents. I cover how to check if your SSN is part of the breach and emphasize the importance of setting up a credit freeze for yourself and your kids. I also explore some useful tools for searching large datasets and share my thoughts on a Reddit post.

    In this week's episode:

    1. On the brink of giving up!
    2. Using OnlyOffice as a Google Docs alternative
    3. National Public Data (NPD) breach
    4. Ripgrep (rg) and Silver Searcher (ag) tools for searching massive datasets
    5. Credit freezes
    6. Best efforts for Windows 11 privacy
    7. ElevenTray, a useful utility to always show Windows 11 tray icons

    Show Links:
    Simplewall - https://github.com/henrypp/simplewall
    ElevenTray - https://github.com/locksec/eleventray
    OnlyOffice - https://www.onlyoffice.com/
    LibreOffice - https://www.libreoffice.org/
    Credit Freeze Guide - https://inteltechniques.com/freeze.html

    Credit Freeze for Kids:
    Equifax - https://www.equifax.com/personal/education/identity-theft/articles/-/learn/freezing-your-childs-credit-report-faq/
    (800)685-1111
    Equifax Security Freeze, PO Box 105788, Atlanta, Georgia 30348

    Experian - https://www.experian.com/help/minor-request.html
    (888)397-3742
    Experian Security Freeze. PO Box 9554, Allen, TX 75013

    TransUnion - https://www.transunion.com/credit-freeze/credit-freeze-faq#freeze-other-minor-0
    (888)909-8872
    TransUnion, P.O. Box 380, Woodlyn, PA 19094

    https://www.transunion.com/credit-disputes/child-identity-theft-inquiry-form

    > I know why you're here, Neo. I know what you've been doing... why you hardly sleep, why you live alone, and why night after night, you sit by your computer. - Trinity (The Matrix)


    Podcast music: Recluse by Ray Heffer

    Show more Show less
    27 mins
  • 014 - Social Media, OPSEC for OSINT, and AI Security
    Aug 9 2024

    This week I respond to a few listener questions, primarily around the use of social media as a privacy enthusiast. Love it or hate it, you can guess which camp I'm in, social media like LinkedIn has almost become a requirement for job searches, employers, and connecting with other professionals. I also touch on OPSEC for OSINT, a new talk track I am planning to present in the future. It's important for all of us to maintain better Operational Security (OPSEC). Finally, I share my latest blog post: Venturing into AI Security with Locally Hosted LLMs, and why locally hosted AI is essential for privacy.

    In this week's episode:

    1. Redacting ███ in your social media profiles
    2. Minimizing the use of profile photos
    3. Always assume private profiles are NEVER private
    4. Addiction to social media and down regulation of the dopamine receptors
    5. More on custom domains
    6. Operational Security for OSINT professionals
    7. Locally hosted LLMs for private AI
    8. Data (PII) leakage with ChatGPT

    Show Links:

    • ChatGPT Privacy Issue - https://www.nytimes.com/interactive/2023/12/22/technology/openai-chatgpt-privacy-exploit.html
    • Brain anatomy alterations associated with Social Networking addiction - https://www.ncbi.nlm.nih.gov/pmc/articles/PMC5362930/
    • AI Security with Locally Hosted LLMs - https://lockdown.media/ai-security-with-llms
    • Expired Domains - https://www.expireddomains.net/
    • SimpleLogin - https://simplelogin.io/
    Because you made a phone call.


    - Brill (Enemy of the State)

    Podcast music: Recluse by Ray Heffer

    Show more Show less
    21 mins
  • 013: iCloud Private Relay, Complete pfSense Guide, and Privacy for Kids
    Jul 27 2024

    In this week’s show, I take a deeper dive into Apple’s iCloud Private Relay, discussing who should and who shouldn’t use it. I then discuss my latest article, “The Complete Setup Guide to pfSense for Privacy and Security,” and the benefits of an always-on VPN. Lastly, for those who are parents, I offer a discussion on privacy for kids and some non-invasive techniques for protecting them online.

    In this week's episode:

    1. Intro
    2. iCloud Private Relay
    3. Complete Guide to pfSense
    4. Privacy for Kids
    5. Listener questions

    Show Links:

    • The Complete Setup Guide to pfSense for Privacy and Security: https://lockdown.media/complete-setup-guide-to-pfsense
    • NextDNS: https://nextdns.io/
    • Cron package for pfSense: https://docs.netgate.com/pfsense/en/latest/packages/list.html
    • Private Relay Outage: https://www.tomsguide.com/phones/iphones/having-browsing-trouble-on-apple-devices-youre-not-alone-apples-private-relay-system-is-having-problems
    • iCloud Private Relay Overview: https://www.apple.com/privacy/docs/iCloud_Private_Relay_Overview_Dec2021.PDF
    “You never had a camera in my head.”

    - Truman Burbank

    Podcast music: Recluse by Ray Heffer

    Show more Show less
    51 mins
  • 012: Back to the Basics, Back to the iPhone, Authy API Abuse
    Jul 19 2024

    This week we go back to the basics of privacy and security for the average Joe or Jane, and discuss the latest iPhone settings for privacy. I also discuss the Twilio Authy API abuse that resulted in 33 million phone numbers for Authy accounts being exposed. Huge thank you to the Patreon supporters!

    In this week's episode:

    1. Back to the basics
    2. Advice for the 'average Joe'
    3. The Twilio Authy API breach
    4. iPhone privacy settings
    5. Listener question on doorbell cameras


    Show Links:

    • 1Password Security Audits: https://support.1password.com/security-assessments/
    • Bitwarden Security Audits: https://bitwarden.com/help/is-bitwarden-audited/
    • Twilio Breach: https://www.bleepingcomputer.com/news/security/hackers-abused-api-to-verify-millions-of-authy-mfa-phone-numbers/
    • MySudo: https://mysudo.com/
    • ProtonMail: https://protonmail.com/
    • StrongBox: https://strongboxsafe.com/
    • KeepassDX: https://www.keepassdx.com/
    • Amcrest Cameras: https://www.amazon.com/gp/product/B07ZJS3L5Y
    "I don't want to live in a world where there's no privacy, and therefore no room for intellectual exploration and creativity."


    - Edward Snowden

    Podcast music: Recluse by Ray Heffer

    Show more Show less
    33 mins
  • 011 - Living Like a Recluse, Living Trusts, GrapheneOS, and Listener Questions
    May 24 2024

    After escaping to the mountains and living like a recluse for the past few months, I am back. In this week's show, I discuss my latest experiences in purchasing a home and titling in a living trust, along with the potential obstacles with title deeds and mortgage lenders, and avoiding data breaches with utility companies. I also revisit GrapheneOS after using it daily for the past year, and answer listener questions.

    In this week's episode:

    1. Living in the mountains
    2. Buying a house with a living trust
    3. Potential pitfalls with title deeds and mortgage lenders
    4. Balancing privacy and security
    5. The 'All or Nothing' approach
    6. Why I still use Obsidian over Standard Notes
    7. Revisiting GrapheneOS and the Play Integrity API
    8. Baby Reindeer
    9. Listeners Questions
    "Privacy is rarely lost in one fell swoop. It is usually eroded over time, bit by bit."

    - Daniel J. Solove

    Show more Show less
    53 mins
  • 010 - Alternatives to Authy, SANS OSINT Summit, and Selling your Soul to CLEAR
    Mar 15 2024


    In this week's show, I discuss CLEAR's intrusive privacy policy and highlight alternatives to Authy using KeePass, with a privacy friendly solution for scanning QR codes. I also address the common mistakes people make when backing up their MFA codes. Additionally, I share some of the highlights from attending the SANS OSINT Summit in Washington, D.C., and explore various uses for custom domain names. Finally, I touch on the Starbucks app and the benefits of using Tello for pre-paid SIM cards.

    Follow on Twitter (X): @privacypod
    Support the show: https://www.patreon.com/TheLockdown

    This episode was recorded on March 14, 2024

    In this week's episode:
    1. CLEAR Privacy and Selling Souls
    2. Authy discontinues the desktop app from March 19th, 2024
    3. Alternative MFA solutions using KeepassXC and KeepassDX
    4. Storing backup MFA codes in a Veracrypt container
    5. Make sure you keep scanned copies of your credit cards and ID!
    6. Update on the SANS OSINT Summit
    7. Alternative to Mint Mobile with Tello
    8. Using the Starbucks app privately
    9. Custom domain names
    Show Links:
    • CLEAR Security Breach: https://www.youtube.com/watch?v=i0I0BTtnMC4
    • OSINT Combine Free Tools: osintcombine.com/freetools
      • Whatsmyname: https://whatsmyname.app/
    • Tello: https://tello.com/
    • QR Scanner (PFA) by Secuso Research Group: https://secuso.aifb.kit.edu/english/QR_Scanner.php
    • Skull Games: https://skullgames.io/
    • Trace Labs: https://www.tracelabs.org/
    • Expired Domains: https://www.expireddomains.net/deleted-domains/
    "The right to be left alone is indeed the beginning of all freedom."

    - Supreme Court Justice William O. Douglas

    Show more Show less
    37 mins
  • 009 - Data Broker Sites and a Conversation with Lawrence Gentilello from Optery
    Mar 8 2024

    In today's show, I have a conversation with Lawrence Gentilello, the CEO and Founder of Optery, a personal data removal service. Lawrence shares his own experiences with identity theft and what motivated him to start Optery. We also discuss the future of privacy in the United States, Utah's new privacy law, the Utah Consumer Privacy Act (UCPA), and the bare minimum you should be doing to protect and secure your private data.

    Follow on Twitter (X): @privacypod
    Support the show: https://www.patreon.com/TheLockdown

    This episode was recorded on March 6, 2024

    Follow Ray on Twitter @privacypod

    In this week's episode:
    1. Lawrence's experience with identity theft highlights the importance of a credit freeze
    2. The need for disinformation
    3. A reminder on hunting apps
    4. The future of data privacy and the need for services like Optery
    5. Data privacy in the UK and the existence of search sites like 192.com
    6. Update on next weeks show
    Show Links:
    • Optery website: https://www.optery.com/
    • PC Magazine Editors Choice Award for Optery: https://www.pcmag.com/reviews/optery
    • PC Magazine's list of the best personal data removal services: https://www.pcmag.com/picks/the-best-personal-data-removal-services
    • Utah Consumer Privacy Act (UCPA): https://attorneygeneral.utah.gov/utah-consumer-protection-act-a-new-law-to-protect-online-privacy/
    "If privacy is outlawed, only outlaws will have privacy."

    - Philip R. Zimmermann, creator of PGP encryption

    Show more Show less
    54 mins
  • 008 - Anonymity with TOR, Data Removals, and Mozilla Monitor
    Feb 16 2024

    In this weeks show I discuss some of the concerns of using TOR over a VPN, and take another look at data removal from people search sites, including a look at Mozilla Monitor, a new service for data removal from the makers of Firefox. I'll also discuss the importance of freezing your credit and putting the title of your home into a revocable living trust, prior to removing your records from people search sites.

    Follow on Twitter (X): @privacypod
    Support the show: https://www.patreon.com/TheLockdown

    This episode was recorded on February 16, 2024

    In this week's episode:
    1. I'm still on the road!
    2. Anonymity with TOR and VPN
    3. Get that Credit Freeze and Revocable Living Trust
    4. Data Removals from people search sites
    5. Mozilla Monitor, a new data removal service
    6. Quick update on the Complete pfSense Setup Guide
    Show Links:
    • Mozilla Monitor: https://monitor.mozilla.org
    • Tor Browser: https://www.torproject.org/download
    • DeepCorr: https://dl.acm.org/doi/pdf/10.1145/3243734.3243824
    • Foundations of Digital Privacy, Part One: https://lockdown.media/the-foundations-of-digital-privacy
    “If you want to keep a secret, you must also hide it from yourself.”

    -George Orwell

    Show more Show less
    23 mins