Show Notes
Welcoming back John Ozbay on Techlore Talks for Part 1 of discussing many important digital rights concepts! The unexpected challenges of developing open source software, finding & reporting vulnerabilities, security of big tech companies like Google/Apple, progressive web apps, new EU tech developments with the DMA, marketing in privacy, and so much more! John is an old interview favorite and we're thrilled to have him back on! 📱 RESOURCES IN VIDEO • John's Website: https://johnozbay.com/ • Cryptee: https://crypt.ee/ ⏱️ TIMESTAMPS 00:00:00 Interview intro 00:01:26 John & Henry catching up 00:02:58 Cryptee updates since our last interview 00:04:58 What are the challenges of releasing features like MFA? 00:10:44 Google's vulnerability Cryptee discovered & reported 00:15:54 Why does Cryptee have Google login, is it private? 00:22:58 What tech are journalists using to stay safe? 00:29:00 More privacy information on Google sign in 00:32:06 How has Cryptee improved its security? 00:33:04 Global events and their impact on digital rights services 00:41:04 Why does Cryptee use Cloudflare? 00:42:14 How is Cryptee serverless? What does that mean? 00:46:56 Privacy tools that don't require user trust 00:49:26 Starting with some positive Apple discussions 00:54:04 If hardening breaks a service, does that mean it's unsafe? 01:01:20 Apple's Advanced Data Protection 01:02:28 iCloud E2EE vs Crypte E2EE 01:05:42 iCloud metadata vs Cryptee metadata 01:08:04 Exploits vs backdoors & Apple's security approach 01:12:02 Apple's Lockdown Mode vs Google's Advanced Protection Program 01:14:04 Bizarre marketing tactics in the privacy & security space 01:15:38 Broadly speaking: Differences between Apple & Google security? 01:20:12 Apple, EU, PWAs, user control, etc. 🎥 VIDEO Watch on YouTube
🧡 SUPPORT TECHLORE Keep Techlore Talks independent & growing: ★ Support this podcast ★
More from Techlore Talks
DNS quietly reveals everywhere you go online - even on encrypted sites. In this interview, John Todd (CTO at Quad9) provides a DNS masterclass: how DNS works, the privacy implications, how to change your DNS, why Quad9 collects nothing on you, why they are being sued, DNS vs. VPNs, and how a nonprofit can fund itself without compromising privacy. 🔗 SOURCES & LINKS • Quad9: https://quad9.net ⏱️ TIMESTAMPS
Josh Summers spent a decade living in western China before 14 police officers showed up at his door, accused him of espionage, and confiscated every device his family owned. This Techlore Talks interview covers what 17 days of interrogation taught him about digital privacy while traveling, and the practical steps that could make the difference for you. Stop handing out your real email address. addy.io gives every site an alias that forwards to your normal inbox. Open source, self-hostable, with browser extensions and mobile apps. 🚀 Get started for free: https://addy.io/?utm_source=techlore 🔗 SOURCES & LINKS • All Things Secured (website): https://www.allthingssecured.com/ • All Things Secured (YouTube): https://www.youtube.com/@AllThingsSecured • All Things Secured (Odysee): https://odysee.com/@AllThingsSecured ⏱️ TIMESTAMPS
Flock Safety is one of several companies quietly building a searchable database of everyone's car — no warrant required, and no way to opt out. In this Techlore Talks interview, Bob from DeFlock breaks down how ALPR technology works, what "end-to-end encryption" really means in Flock's case, why this issue is bipartisan, and what you can do about it in your own city. 🔗 SOURCES & LINKS • DeFlock: https://deflock.org • No ALPRs Week of Action: https://noalprs.com ⏱️ TIMESTAMPS
California created a free service that deletes your personal information from over 600 registered data brokers. Tom Kemp, Executive Director of the California Privacy Protection Agency (Cal Privacy), breaks down how the DROP system actually works, why data brokers face fines of up to $40 million a day for non-compliance, what to do if you live outside California, and more. 🔗 SOURCES & LINKS • Cal Privacy: https://cppa.ca.gov/ • DROP: https://privacy.ca.gov • California Safe at Home Program: https://www.sos.ca.gov/registries/safe-home ⏱️ TIMESTAMPS
Once you use Strongbox, a community favorite KeePass client, it's hard to use anything else. Alex Logan is the VP of Engineering at Applause, the company behind Strongbox. He dives into why KeePass syncing works differently than cloud-based password managers, how Strongbox's sync tries to close that gap, what the Applause acquisition actually changed, the open source nuance that trips people up, and whether a Windows or Android client is ever coming. 🔗 SOURCES & LINKS • Strongbox: https://strongboxsafe.com/ • Strongbox Subreddit: https://reddit.com/r/strongbox • KeePass: https://keepass.info/ • Have I Been Pwned: https://haveibeenpwned.com/ ⏱️ TIMESTAMPS