Firewalls Don't Stop Dragons Podcast

Firewalls Don't Stop Dragons Podcast


Reviewing Mullvad Browser

April 10, 2023

Right after releasing my episode on web fingerprinting, highly-respected VPN provider Mullvad teamed up with Tor to release a new web browser, specifically designed to protect your privacy – including attempting to block fingerprinting! Great timing, so I thought I’d give you my review of the Mullvad Browser – the good, the bad, and (yes) the ugly.


In other news: Timely tips on spotting IRS phone scams; ultrasound attacks can hijack your smart speakers; brace yourself for a wave of more sophisticated AI-based scams; alcohol recover startups shared patients’ data with advertisers; Google to require app developers to let you delete your account data; FBI’s Operation Cookie Monster shuts down popular cybercrime forum; Facebook will grudgingly offer users in Europe to opt out of all tracking; the FDA is requiring medical device manufacturers to improve cybersecurity and support; and I answer a Dear Carey question about how to use a Mac mini as a server to host private versions of cloud apps.


Article Links
  1. [NPR] No, the IRS isn’t calling you. It isn’t texting or emailing you, either https://www.npr.org/2023/04/07/1168353969/irs-scam-tax-day-imposter-how-to-avoid
  2. [Gizmodo] Ultrasound Attack Can Secretly Hijack Phones and Smart Speakers, Researchers Find https://gizmodo.com/ultrasound-attack-hacks-phones-siri-alexa-usenix-1850273055
  3. [WIRED] Brace Yourself for a Tidal Wave of ChatGPT Email Scams https://www.wired.com/story/large-language-model-phishing-scams/
  4. [TechCrunch] Alcohol recovery startups Monument and Tempest shared patients’ private data with advertisers https://techcrunch.com/2023/04/04/monument-tempest-alcohol-data-breach/
  5. [Engadget] Google will require that Android apps let you delete your account and data https://www.engadget.com/google-will-require-that-android-apps-let-you-delete-your-account-and-data-170618841.html
  6. [CNN] ‘Operation Cookie Monster’: FBI seizes popular cybercrime forum used for large-scale identity theft https://www.cnn.com/2023/04/04/politics/genesis-market-fbi-seizure/index.html
  7. [BGR] Facebook and Instagram users can now opt out of tracking, but only in Europe https://bgr.com/tech/facebook-and-instagrams-users-can-now-opt-out-of-tracking-but-only-in-europe/
  8. [scmagazine.com] FDA will refuse new medical devices for cybersecurity reasons on Oct. 1 https://www.scmagazine.com/news/device-security/fda-will-refuse-new-medical-devices-for-cybersecurity-reasons-on-oct-1
  9. Tip of the Week: Mullvad Browser https://firewallsdontstopdragons.com/new-privacy-tool-mullvad-browser/

Further Info

Table of Contents

Use these timestamps to jump to a particular section of the show.


  • 0:00:22: Important software updates
  • 0:01:13: Watchman Privacy interview
  • 0:01:44: News preview
  • 0:04:38: Beware IRS phone scams
  • 0:09:42: New ultrasound attacks against digital assistants
  • 0:17:51: Brace yourself for AI-enhanced email scams
  • 0:27:45: Alcohol recovery startups shared patients’ private data with advertisers
  • 0:30:28: Google will require that Android apps delete your account and data
  • 0:35:00: FBI Operation Cookie Monster shuts down popular cybercrime forum
  • 0:37:43: Facebook users in EU can now opt out of tracking
  • 0:41:15: FDA to require medical devices to have better security and support
  • 0:46:05: Dear Carey: What to do with a Mac mini home server?
  • 0:53:49: Tip of the Week: Mullvad Browser
  • 1:00:07: Wrap-up and preview of upcoming shows

loaded