

Shared Security Podcast
Tom Eston, Scott Wright, Kevin Tackett
Shared Security is the the longest-running cybersecurity and privacy podcast where industry veterans Tom Eston, Scott Wright, and Kevin Tackett break down the week’s security WTF moments, privacy fails, human mistakes, and “why is this still a problem?” stories — with humor, honesty, and hard-earned real-world experience. Whether you’re a security pro, a privacy advocate, or just here to hear Kevin yell about vendor nonsense, this podcast delivers insights you’ll actually use — and laughs you probably need. Real security talk from people who’ve lived it.
Episodes
Mentioned books

Feb 14, 2022 • 25min
EARN IT Act is Back, Romance Scams, Like and Subscribe Ransomware
The EARN IT Act is back for a second time which would pave the way for a new massive government surveillance system in the US, romance scams are on the rise so don’t fall for love in all the wrong places, and details about a new ransomware attack that wants you to like and subscribe, or else!
** Links mentioned on the show **
It’s Back: Senators Want EARN IT Bill to Scan All Online Messages
https://www.eff.org/deeplinks/2022/02/its-back-senators-want-earn-it-bill-scan-all-online-messages
Our previous episode from June 2020 on EARN IT
https://sharedsecurity.net/2020/06/30/earn-it-act-facial-recognition-fail-can-i-be-phished/
Don’t Let These Romance Scams Taint Your Valentine’s Day, FBI Warns
https://finance.yahoo.com/news/don-t-let-romance-scams-153008730.html
https://www.fbi.gov/scams-and-safety/common-scams-and-crimes/romance-scams
Trafficked with Mariana van Zeller – Romance Scams
https://www.nationalgeographic.com/tv/shows/trafficked-with-mariana-van-zeller/episode-guide/season-02/episode-02-romance-scams/vdka25543244
Ransomware Wants You to Like and Subscribe, Or Else
https://www.vice.com/en/article/epx5ne/ransomware-wants-you-to-like-and-subscribe-or-else
** Watch this episode on YouTube **
https://youtu.be/3ByCba13o5o
** Thank you to our sponsors! **
SLNT
Visit slnt.com to check out SLNT’s amazing line of Faraday bags and other products built to protect your privacy. As a listener of this podcast you receive 10% off your order at checkout using discount code “sharedsecurity”.
Click Armor
To find out how “gamification” of security awareness training can reduce cyber risks related to phishing and social engineering, and to get a free trial of Click Armor’s gamified awareness training platform, visit: https://clickarmor.ca/sharedsecurity
** Subscribe and follow the show **
Join the Shared Security Community on Reddit: https://www.reddit.com/r/SharedSecurityShow/
Sign-up for our email newsletter to receive updates about the show, contest announcements, and special offers from our sponsors: http://eepurl.com/dwcc8D
Subscribe on your favorite podcast app: https://sharedsecurity.net/subscribe
Contact us: https://sharedsecurity.net/contact
Website: https://sharedsecurity.net
YouTube: https://www.youtube.com/c/SharedSecurityPodcast
Twitter: https://twitter.com/sharedsec
Shared Security Merch: https://store.sharedsecurity.net
The post EARN IT Act is Back, Romance Scams, Like and Subscribe Ransomware appeared first on Shared Security Podcast.

Feb 7, 2022 • 29min
Graphics Card Web Tracking, Fake Job Ad Scams, Hacker Takes Down North Korea’s Internet
Researchers have discovered a new web tracking technique using your graphics card, scammers are exploiting security weaknesses on job recruitment websites to post fraudulent job postings, and how a hacker single-handedly took down North Korea’s Internet.
** Links mentioned on the show **
Your graphics card could be used to track you across the web regardless of cookie consent
https://www.pcgamer.com/drawn-apart-gpu-web-tracking/
FBI warning: Scammers are posting fake job ads on networking sites to steal your money and identity
https://www.zdnet.com/article/fbi-warning-scammers-are-posting-fake-job-ads-on-networking-sites-to-steal-your-money-and-identity/
North Korea Hacked Him. So He Took Down Its Internet
https://www.wired.com/story/north-korea-hacker-internet-outage/
https://www.nknews.org/2022/02/new-cyberattack-hits-north-korea-after-hacker-claims-responsibility-for-outages/
** Watch this episode on YouTube **
https://youtu.be/mOtJe4Wo1tM
** Thank you to our sponsors! **
SLNT
Visit slnt.com to check out SLNT’s amazing line of Faraday bags and other products built to protect your privacy. As a listener of this podcast you receive 10% off your order at checkout using discount code “sharedsecurity”.
Click Armor
To find out how “gamification” of security awareness training can reduce cyber risks related to phishing and social engineering, and to get a free trial of Click Armor’s gamified awareness training platform, visit: https://clickarmor.ca/sharedsecurity
** Subscribe and follow the show **
Join the Shared Security Community on Reddit: https://www.reddit.com/r/SharedSecurityShow/
Sign-up for our email newsletter to receive updates about the show, contest announcements, and special offers from our sponsors: http://eepurl.com/dwcc8D
Subscribe on your favorite podcast app: https://sharedsecurity.net/subscribe
Contact us: https://sharedsecurity.net/contact
Website: https://sharedsecurity.net
YouTube: https://www.youtube.com/c/SharedSecurityPodcast
Twitter: https://twitter.com/sharedsec
Shared Security Merch: https://store.sharedsecurity.net
The post Graphics Card Web Tracking, Fake Job Ad Scams, Hacker Takes Down North Korea’s Internet appeared first on Shared Security Podcast.

Jan 31, 2022 • 37min
Ukraine Invasion Hacktivists, Insta360 ONE X2 Vulnerabilities, Google Location Tracking Lawsuits
Hacktivists have hacked a Belarus rail system in an attempt to stop Russian military buildup, someone disclosed a slew of vulnerabilities in the popular Insta360 ONE X2 camera, and Google gets accused of “deceptive” location tracking in multiple lawsuits.
** Links mentioned on the show **
Hacktivists say they hacked Belarus rail system to stop Russian military buildup
https://arstechnica.com/information-technology/2022/01/hactivists-say-they-hacked-belarus-rail-system-to-stop-russian-military-buildup/
Really cool Insta360 One X2 hidden feature!
https://www.reddit.com/r/Insta360/comments/scsue6/really_cool_insta360_one_x2_hidden_feature/
https://www.insta360.com/product/insta360-onex2
Google accused of ‘deceptive’ location tracking in fresh round of lawsuits
https://www.theguardian.com/technology/2022/jan/24/google-sued-privacy-texas-district-of-columbia
** Watch this episode on YouTube **
https://youtu.be/SDXmcrd6CiE
** Thank you to our sponsors! **
SLNT
Visit slnt.com to check out SLNT’s amazing line of Faraday bags and other products built to protect your privacy. As a listener of this podcast you receive 10% off your order at checkout using discount code “sharedsecurity”.
Click Armor
To find out how “gamification” of security awareness training can reduce cyber risks related to phishing and social engineering, and to get a free trial of Click Armor’s gamified awareness training platform, visit: https://clickarmor.ca/sharedsecurity
** Subscribe and follow the show **
Join the Shared Security Community on Reddit: https://www.reddit.com/r/SharedSecurityShow/
Sign-up for our email newsletter to receive updates about the show, contest announcements, and special offers from our sponsors: http://eepurl.com/dwcc8D
Subscribe on your favorite podcast app: https://sharedsecurity.net/subscribe
Contact us: https://sharedsecurity.net/contact
Website: https://sharedsecurity.net
YouTube: https://www.youtube.com/c/SharedSecurityPodcast
Twitter: https://twitter.com/sharedsec
Shared Security Merch: https://store.sharedsecurity.net
The post Ukraine Invasion Hacktivists, Insta360 ONE X2 Vulnerabilities, Google Location Tracking Lawsuits appeared first on Shared Security Podcast.

Jan 24, 2022 • 23min
Pandemic Surveillance in Canada, Malware-Filled USB Sticks are Back, Kill Switches in New Cars
Canada’s federal government admitted to surveilling its population’s movements during the COVID-19 lock-down by tracking 33 million phones, the FBI warned that a hacker group has been sending malware-laden USB sticks to companies, and details on a new law in the United States which will install kill switches in new cars.
** Links mentioned on the show **
Canada secretly tracked 33 million phones during COVID-19 lockdown (misleading title)
https://nypost.com/2021/12/25/canada-secretly-tracked-33-million-phones-during-lockdown/
https://www.reddit.com/r/privacy/comments/s7mb6l/canada_secretly_tracked_33_million_phones_during/
Hackers Have Been Sending Malware-Filled USB Sticks to U.S. Companies Disguised as Present
https://gizmodo.com/hackers-have-been-sending-malware-filled-usb-sticks-to-1848323578
New Law Will Install Kill Switches In All New Cars
https://www.motorious.com/articles/features-3/kill-switches-new-cars/
Join the Shared Security Community on Reddit
https://www.reddit.com/r/SharedSecurityShow/
** Watch this episode on YouTube **
https://youtu.be/0ONxRgWQvw4
** Thank you to our sponsors! **
SLNT
Visit slnt.com to check out SLNT’s amazing line of Faraday bags and other products built to protect your privacy. As a listener of this podcast you receive 10% off your order at checkout using discount code “sharedsecurity”.
Click Armor
To find out how “gamification” of security awareness training can reduce cyber risks related to phishing and social engineering, and to get a free trial of Click Armor’s gamified awareness training platform, visit: https://clickarmor.ca/sharedsecurity
** Subscribe and follow the show **
Join the Shared Security Community on Reddit: https://www.reddit.com/r/SharedSecurityShow/
Sign-up for our email newsletter to receive updates about the show, contest announcements, and special offers from our sponsors: http://eepurl.com/dwcc8D
Subscribe on your favorite podcast app: https://sharedsecurity.net/subscribe
Contact us: https://sharedsecurity.net/contact
Website: https://sharedsecurity.net
YouTube: https://www.youtube.com/c/SharedSecurityPodcast
Twitter: https://twitter.com/sharedsec
Shared Security Merch: https://store.sharedsecurity.net
The post Pandemic Surveillance in Canada, Malware-Filled USB Sticks are Back, Kill Switches in New Cars appeared first on Shared Security Podcast.

Jan 19, 2022 • 30min
Digital Wellbeing with Kelly Finnerty from Startpage
Kelly Finnerty, Director of Brand at Startpage, joins co-host Tom Eston to discuss the very important topic of digital wellbeing. In this episode you’ll learn about the mental, financial, and societal impacts of constant tracking. Plus, what are some holistic approaches and tactics that we can use to help our own digital wellbeing. Kelly also shares details about Startpage’s new web browser extension “Startpage Privacy Protection”.
** Links mentioned on the show **
Startpage Privacy Protection Browser Extension
https://add.startpage.com/protection/
ThinkPrivacy
https://thinkprivacy.ch/
Privacy Mindset: Europe vs. United States (with Kelly Finnerty)
https://sharedsecurity.net/2020/11/09/privacy-mindset-europe-vs-united-states/
StartPage.com – The World’s Most Private Search Engine
https://sharedsecurity.net/2020/09/21/startpage-com-the-worlds-most-private-search-engine/
Use StartPage as your default search engine
https://www.startpage.com/
StartPage’s Privacy Please Blog
https://www.startpage.com/privacy-please/
Follow StartPage Search on Social Media
https://twitter.com/startpage
Follow Kelly on Twitter
https://twitter.com/Kelly_Startpage
Connect with Kelly on LinkedIn
https://www.linkedin.com/in/kelly-finnerty-5267648/
** Watch this episode on YouTube **
https://youtu.be/jXgatSeWWIk
** Thank you to our sponsors! **
SLNT
Visit slnt.com to check out SLNT’s amazing line of Faraday bags and other products built to protect your privacy. As a listener of this podcast you receive 10% off your order at checkout using discount code “sharedsecurity”.
Click Armor
To find out how “gamification” of security awareness training can reduce cyber risks related to phishing and social engineering, and to get a free trial of Click Armor’s gamified awareness training platform, visit: https://clickarmor.ca/sharedsecurity
** Subscribe and follow the show **
Join the Shared Security Community on Reddit: https://www.reddit.com/r/SharedSecurityShow/
Sign-up for our email newsletter to receive updates about the show, contest announcements, and special offers from our sponsors: http://eepurl.com/dwcc8D
Subscribe on your favorite podcast app: https://sharedsecurity.net/subscribe
Contact us: https://sharedsecurity.net/contact
Website: https://sharedsecurity.net
YouTube: https://www.youtube.com/c/SharedSecurityPodcast
Twitter: https://twitter.com/sharedsec
Shared Security Merch: https://store.sharedsecurity.net
The post Digital Wellbeing with Kelly Finnerty from Startpage appeared first on Shared Security Podcast.

Jan 17, 2022 • 37min
Norton 360 Cryptominer, Fake QR Codes on Parking Meters, Facebook Account Deactivation
Norton 360, a popular antivirus product, has installed a cryptocurrency mining program on its customers’ computers, some cities in Texas have been hit with a phishing scam designed to get users to pay through fraudulent QR code stickers on public parking meters, and how Facebook is still collecting data about you even if you deactivate your Facebook account. All this plus the launch of the Shared Security Community on Reddit! (https://www.reddit.com/r/SharedSecurityShow/)
** Links mentioned on the show **
Join the Shared Security Community on Reddit!
https://www.reddit.com/r/SharedSecurityShow/
Norton 360 Now Comes With a Cryptominer
https://krebsonsecurity.com/2022/01/norton-360-now-comes-with-a-cryptominer/
https://krebsonsecurity.com/2022/01/500m-avira-antivirus-users-introduced-to-cryptomining/
https://www.theverge.com/2022/1/7/22869528/norton-crypto-miner-security-software-reaction
Texas parking meters with bogus QR codes for payments
https://gcn.com/cybersecurity/2022/01/cities-texas-hit-qr-code-phishing-scam/360554/
Why Facebook keeps collecting people’s data and building their profiles even when their accounts are deactivated
https://digiday.com/media/why-facebook-keeps-collecting-peoples-data-and-building-their-profiles-even-when-their-accounts-are-deactivated/
** Watch this episode on YouTube **
** Thank you to our sponsors! **
SLNT
Visit slnt.com to check out SLNT’s amazing line of Faraday bags and other products built to protect your privacy. As a listener of this podcast you receive 10% off your order at checkout using discount code “sharedsecurity”.
Click Armor
To find out how “gamification” of security awareness training can reduce cyber risks related to phishing and social engineering, and to get a free trial of Click Armor’s gamified awareness training platform, visit: https://clickarmor.ca/sharedsecurity
** Subscribe and follow the show **
Join the Shared Security Community: https://www.reddit.com/r/SharedSecurityShow/
Sign-up for our email newsletter to receive updates about the show, contest announcements, and special offers from our sponsors: http://eepurl.com/dwcc8D
Subscribe on your favorite podcast app: https://sharedsecurity.net/subscribe
Contact us: https://sharedsecurity.net/contact
Website: https://sharedsecurity.net
YouTube: https://www.youtube.com/c/SharedSecurityPodcast
Twitter: https://twitter.com/sharedsec
Shared Security Merch: https://store.sharedsecurity.net
The post Norton 360 Cryptominer, Fake QR Codes on Parking Meters, Facebook Account Deactivation appeared first on Shared Security Podcast.

Jan 10, 2022 • 33min
Phone Scam Targets Psychologists, All My Apes Gone, Supply Chain Skimmer Attack
A phone scam targeting psychologists reveals that even professionals can become victims, stolen multi-million-dollar NFT’s results in a “all my apes gone” plea for help, and details on a skimmer supply chain attack on more than 100 real estate websites.
** Links mentioned on the show **
The Phone Scam That Targets Psychologists
https://www.psychologytoday.com/ca/blog/the-fraud-crisis/202110/the-phone-scam-targets-psychologists
Thieves Steal Gallery Owner’s Multimillion-Dollar NFT Collection: ‘All My Apes Gone’
https://www.artnews.com/art-news/news/todd-kramer-nft-theft-1234614874/
What is a Crypto Wallet?
https://www.ledger.com/academy/what-is-a-crypto-wallet
3 Ways to Keep Your Cryptocurrency Safe
https://sharedsecurity.net/2021/05/01/3-ways-to-keep-your-cryptocurrency-safe/
Hackers Target Real Estate Websites with Skimmer in Latest Supply Chain Attack
https://thehackernews.com/2022/01/hackers-target-real-estate-websites.html
** Watch this episode on YouTube **
https://youtu.be/pTnAuEtUgIU
** Thank you to our sponsors! **
SLNT
Visit slnt.com to check out SLNT’s amazing line of Faraday bags and other products built to protect your privacy. As a listener of this podcast you receive 10% off your order at checkout using discount code “sharedsecurity”.
Click Armor
To find out how “gamification” of security awareness training can reduce cyber risks related to phishing and social engineering, and to get a free trial of Click Armor’s gamified awareness training platform, visit: https://clickarmor.ca/sharedsecurity
** Subscribe and follow the show **
Sign-up for our email newsletter to receive updates about the show, contest announcements, and special offers from our sponsors: http://eepurl.com/dwcc8D
Subscribe on your favorite podcast app: https://sharedsecurity.net/subscribe
Contact us: https://sharedsecurity.net/contact
Website: https://sharedsecurity.net
YouTube: https://www.youtube.com/c/SharedSecurityPodcast
Twitter: https://twitter.com/sharedsec
Shared Security Merch: https://store.sharedsecurity.net
The post Phone Scam Targets Psychologists, All My Apes Gone, Supply Chain Skimmer Attack appeared first on Shared Security Podcast.

Jan 3, 2022 • 31min
LastPass Master Passwords, New Cars and Your Privacy, Amazon Alexa Lethal Challenge
LastPass users received emails about their master passwords being compromised, details about the privacy policies of new cars, and a story about an Amazon Echo that proposed a lethal challenge to a ten-year-old girl.
** Links mentioned on the show **
Log4j 2.17.1 out now, fixes new remote code execution bug
https://www.bleepingcomputer.com/news/security/log4j-2171-out-now-fixes-new-remote-code-execution-bug/
If any person or organization is suggesting you get spun up about CVE-2021-44832, you should really take a good look at what their motivations may be. pic.twitter.com/RgkvCu3sv2
— Will Dormann (@wdormann) December 28, 2021
From Reddit: We all knew that newer cars are terrible for privacy, but to what extent? Being the owner of a 2018 Honda, I decided to look further into their privacy practices
We all knew that newer cars are terrible for privacy, but to what extent? Being the owner of a 2018 Honda, I decided to look further into their privacy practices from privacy
LastPass users warned their master passwords are compromised
https://www.bleepingcomputer.com/news/security/lastpass-users-warned-their-master-passwords-are-compromised/
Amazon Alexa slammed for giving lethal challenge to 10-year-old girl
https://www.bleepingcomputer.com/news/technology/amazon-alexa-slammed-for-giving-lethal-challenge-to-10-year-old-girl/
** Watch this episode on YouTube **
https://youtu.be/C23QQF3VMnw
** Thank you to our sponsors! **
SLNT
Visit slnt.com to check out SLNT’s amazing line of Faraday bags and other products built to protect your privacy. As a listener of this podcast you receive 10% off your order at checkout using discount code “sharedsecurity”.
Click Armor
To find out how “gamification” of security awareness training can reduce cyber risks related to phishing and social engineering, and to get a free trial of Click Armor’s gamified awareness training platform, visit: https://clickarmor.ca/sharedsecurity
** Subscribe and follow the show **
Sign-up for our email newsletter to receive updates about the show, contest announcements, and special offers from our sponsors: http://eepurl.com/dwcc8D
Subscribe on your favorite podcast app: https://sharedsecurity.net/subscribe
Contact us: https://sharedsecurity.net/contact
Website: https://sharedsecurity.net
YouTube: https://www.youtube.com/c/SharedSecurityPodcast
Twitter: https://twitter.com/sharedsec
Instagram: https://instagram.com/sharedsecurity
Shared Security Merch: https://store.sharedsecurity.net
The post LastPass Master Passwords, New Cars and Your Privacy, Amazon Alexa Lethal Challenge appeared first on Shared Security Podcast.

Dec 31, 2021 • 32min
Web3 and the Decentralized Internet
In our last monthly show of the year we discuss Web3. What is it and what will it mean to have a decentralized Internet. If you’ve wanted to know what Web3, DeFI, NFTs, and cryptocurrency means for cybersecurity and privacy this is one episode you don’t want to miss!
** Links mentioned on the show **
What is Web3?
https://www.freecodecamp.org/news/what-is-web3/
** Watch this episode on YouTube **
https://youtu.be/FInulAah450
** Thank you to our sponsors! **
SLNT
Visit slnt.com to check out SLNT’s amazing line of Faraday bags and other products built to protect your privacy. As a listener of this podcast you receive 10% off your order at checkout using discount code “sharedsecurity”.
Click Armor
To find out how “gamification” of security awareness training can reduce cyber risks related to phishing and social engineering, and to get a free trial of Click Armor’s gamified awareness training platform, visit: https://clickarmor.ca/sharedsecurity
** Subscribe and follow the show **
Sign-up for our email newsletter to receive updates about the show, contest announcements, and special offers from our sponsors: http://eepurl.com/dwcc8D
Subscribe on your favorite podcast app: https://sharedsecurity.net/subscribe
Contact us: https://sharedsecurity.net/contact
Website: https://sharedsecurity.net
YouTube: https://www.youtube.com/c/SharedSecurityPodcast
Twitter: https://twitter.com/sharedsec
Instagram: https://instagram.com/sharedsecurity
Shared Security Merch: https://store.sharedsecurity.net
The post Web3 and the Decentralized Internet appeared first on Shared Security Podcast.

Dec 27, 2021 • 35min
The Year in Review and 2022 Predictions
In our last weekly episode of the year, we discuss the top cybersecurity and privacy news from 2021, a recap of our previous “predictions”, and what we think we’ll see next year. Happy New Year!
** Links mentioned on the show **
Sign up for the Shared Security Show Newsletter
http://eepurl.com/dwcc8D
** Watch this episode on YouTube **
https://youtu.be/nl7JYqGV-5o
** Thank you to our sponsors! **
SLNT
Visit slnt.com to check out SLNT’s amazing line of Faraday bags and other products built to protect your privacy. As a listener of this podcast you receive 10% off your order at checkout using discount code “sharedsecurity”.
Click Armor
To find out how “gamification” of security awareness training can reduce cyber risks related to phishing and social engineering, and to get a free trial of Click Armor’s gamified awareness training platform, visit: https://clickarmor.ca/sharedsecurity
** Subscribe and follow the show **
Sign-up for our email newsletter to receive updates about the show, contest announcements, and special offers from our sponsors: http://eepurl.com/dwcc8D
Subscribe on your favorite podcast app: https://sharedsecurity.net/subscribe
Contact us: https://sharedsecurity.net/contact
Website: https://sharedsecurity.net
YouTube: https://www.youtube.com/c/SharedSecurityPodcast
Twitter: https://twitter.com/sharedsec
Instagram: https://instagram.com/sharedsecurity
Shared Security Merch: https://store.sharedsecurity.net
The post The Year in Review and 2022 Predictions appeared first on Shared Security Podcast.


