Skip to content
Sign in
Artwork for The Lockdown - Practical Privacy & Security
The Lockdown - Practical Privacy & Security · July 31 · 53 min

You Are The Proxy - Hackers, Experts, and Bad Advice

In this episode, we continue with a closer look at what cybersecurity competence actually means, and why qualifications, compliance frameworks, and public reputation are poor substitutes for understanding how real attacks work. We explore the cryptography behind Proton Mail, public and private keys, fingerprints, and what you can do with PGP word lists. We’ll also discuss passkeys, account recovery, SIM swaps, ClickFix malware, infostealers, VPN blocking, and the residential proxies that allow malicious traffic to hide behind ordinary household IP addresses. In the show: Hackers, threat actors, security influencers, and the risks created by confident but inaccurate advice Kerckhoffs’s principle: designing security under the assumption that the enemy knows the system How public and private keys work, including Proton Mail encryption, digital signatures, fingerprints, and independent key verification Using the PsySecure Workbench and PGP word lists to make cryptographic fingerprints easier to exchange and verify The problem with passkeys, and why weak account recovery can undermine their security ClickFix attacks that imitate Cloudflare verification pages and trick users into running malicious terminal commands How infostealers target browser data, authenticated sessions, cookies, passwords, and other valuable information Why VPN traffic is increasingly blocked or challenged while attackers move toward residential proxies that resemble legitimate users You are the proxy: How cheap smart home devices, streaming boxes, thermostats, and cameras, can become hidden residential proxies The normalization of identity verification, digital ID checks, and other invasive systems Show Links: The Hidden Backdoors Inside Millions of Smart Devices (WSJ): https://www.youtube.com/watch?v=apEPPKYgLL0 keys.openpgp.org: keys.openpgp.org PsySecure Workbench: https://psysecure.com/workbench An Investigative Framework for Auditing the Security & Privacy of Mobile VPNs: https://www.ndss-symposium.org/wp-content/uploads/2026-s1573-paper.pdf Matrix Community Rooms: Matrix Community Space: https://matrix.to/#/#psysecure:matrix.org Individual Room Links: https://matrix.to/#/#lockdown-intro:matrix.org https://matrix.to/#/#lockdown-podcast:matrix.org https://matrix.to/#/#lockdown-general:matrix.org How to check public key fingerprint from the command line: gpg --show-keys --with-fingerprint public_key_file.asc ★ Support the show on Patreon ★

0:00-53:19
Play in

transcript

No transcript — this publisher did not publish one.

show notes

In this episode, we continue with a closer look at what cybersecurity competence actually means, and why qualifications, compliance frameworks, and public reputation are poor substitutes for understanding how real attacks work. We explore the cryptography behind Proton Mail, public and private keys, fingerprints, and what you can do with PGP word lists. We’ll also discuss passkeys, account recovery, SIM swaps, ClickFix malware, infostealers, VPN blocking, and the residential proxies that allow malicious traffic to hide behind ordinary household IP addresses.

In the show:

  1. Hackers, threat actors, security influencers, and the risks created by confident but inaccurate advice
  2. Kerckhoffs’s principle: designing security under the assumption that the enemy knows the system
  3. How public and private keys work, including Proton Mail encryption, digital signatures, fingerprints, and independent key verification
  4. Using the PsySecure Workbench and PGP word lists to make cryptographic fingerprints easier to exchange and verify
  5. The problem with passkeys, and why weak account recovery can undermine their security
  6. ClickFix attacks that imitate Cloudflare verification pages and trick users into running malicious terminal commands
  7. How infostealers target browser data, authenticated sessions, cookies, passwords, and other valuable information
  8. Why VPN traffic is increasingly blocked or challenged while attackers move toward residential proxies that resemble legitimate users
  9. You are the proxy: How cheap smart home devices, streaming boxes, thermostats, and cameras, can become hidden residential proxies
  10. The normalization of identity verification, digital ID checks, and other invasive systems

Show Links:

Matrix Community Rooms:

Individual Room Links:

How to check public key fingerprint from the command line:

gpg --show-keys --with-fingerprint public_key_file.asc


★ Support the show on Patreon ★

links9

more episodes

All episodes