Apple just released a major update to its iPhone operating system, iOS 16. This release has some really important security and privacy features, including Passkeys, Lockdown Mode and Safety Check. I’ll give you an overview of these features.

In other news: D-Link routers have a major vulnerability that’s being actively exploited; Uber was completely pwned by a cocky 18-year old hacker; Morgan Stanley was fined $35 million for failing to delete user data from hundreds of hard drives before reselling them; Chrome and Edge may be sending your form data back to Google and Microsoft; a new voice AI tool lets you change your voice to sound like someone else; health apps are sharing your personal data and HIPAA isn’t helping; the US military is using yet another data broker to buy incredibly detailed information on almost all internet users; US border agents can search your phone and even copy your phone’s data, and may save that info for 15 years; your car is coughing up tons of personal and auto data to dozens of data companies; Intel’s new AI will be used to find students who are confused or even emotionally distressed.

1. [BleepingComputer] Moobot botnet is coming for your unpatched D-Link router https://www.bleepingcomputer.com/news/security/moobot-botnet-is-coming-for-your-unpatched-d-link-router/
   
2. [WIRED] The Uber Hack’s Devastation Is Just Starting to Reveal Itself https://www.wired.com/story/uber-hack-mfa-phishing/
   
3. [Ars Technica] $35M fine for Morgan Stanley after unencrypted, unwiped hard drives are auctioned https://arstechnica.com/information-technology/2022/09/morgan-stanley-pays-35m-penalty-for-extensive-failure-to-safeguard-customer-data/
   
4. [BleepingComputer] Google, Microsoft can get your passwords via web browser’s spellcheck https://www.bleepingcomputer.com/news/security/google-microsoft-can-get-your-passwords-via-web-browsers-spellcheck/
   
5. [Ars Technica] With Koe Recast, you can change your voice as easily as your clothing https://arstechnica.com/information-technology/2022/09/with-koe-recast-you-can-change-your-voice-as-easily-as-your-clothing/
   
6. [The Washington Post] Health apps share your concerns with advertisers. HIPAA can’t stop it. https://www.washingtonpost.com/technology/2022/09/22/health-apps-privacy/
   
7. [VICE] Revealed: U.S. Military Bought Mass Monitoring Tool That Includes Internet Browsing, Email Data https://www.vice.com/en/article/y3pnkw/us-military-bought-mass-monitoring-augury-team-cymru-browsing-email-data
   
8. [Engadget] US border forces are seizing Americans’ phone data and storing it for 15 years https://www.engadget.com/us-border-forces-traveler-data-15-years-085106938.html
   
9. [The Washington Post] How to prevent customs agents from copying your phone’s content https://www.washingtonpost.com/technology/2022/09/18/phone-data-privacy-customs/
   
10. [The Markup] Who Is Collecting Data from Your Car? – The Markup https://themarkup.org/the-breakdown/2022/07/27/who-is-collecting-data-from-your-car
    
11. [Protocol] Intel thinks its AI knows what students think and feel in class https://www.protocol.com/enterprise/emotion-ai-school-intel-edutech
    
12. Tip of the Week: https://firewallsdontstopdragons.com/ios-16-privacy-security/
    

• Koe Recast web demo: https://koe.ai/recast/ 
  
• 100-mile US border zone: https://www.aclu.org/other/constitution-100-mile-border-zone 
  
• Tech Model Railroad Club: https://en.wikipedia.org/wiki/Tech_Model_Railroad_Club 
  
• Send me your questions! https://firewallsdontstopdragons.com/dear-carey-podcast-qa/    
  
• Subscribe to the newsletter: https://firewallsdontstopdragons.com/newsletter/new-newsletter/
  
• Check out my book, Firewalls Don’t Stop Dragons: https://www.amazon.com/gp/product/1484261887 
  
• Become a Patron! https://www.patreon.com/FirewallsDontStopDragons 
  
• Donate directly with Monero! https://firewallsdontstopdragons.com/contact/ 
  
• Would you like me to speak to your group about security and/privacy? http://bit.ly/Firewalls-Speaker
  
• Generate secure passphrases! https://d20key.com/#/ 
  

Use these timestamps to jump to a particular section of the show.

• 0:02:54: News rundown
  
• 0:05:53: Major D-Link router vulnerability
  
• 0:08:43: Uber hacked by 18-year old
  
• 0:12:23: Morgan Stanley fined $35 million for mishandling customer data
  
• 0:16:53: Google and Microsoft browser spell checkers may see personal data
  
• 0:23:11: Tool allows you to change your voice to sound like someone else
  
• 0:30:16: Health apps are sharing your personal, sensitive information
  
• 0:37:05: Yet another data broker selling tons of info to US government
  
• 0:43:30: CBP copies your device data and may store it for 15 years
  
• 0:47:56: How to guard your phone data at international borders
  
• 0:54:32: Your car data is up for sale by multiple third parties
  
• 1:00:17: Schools use face AI to find bored or troubled students
  
• 1:05:15: New privacy and security features of iOS 16
  
• 1:16:18: Send me your questions!
  
• 1:20:15: Upcoming interviews