Routers Behaving Badly

In this abbreviated but packed episode of Firewalls Don't Stop Dragons, host Kerry Parker dives into a series of alarming tech and security stories. Walmart's $2.3 billion acquisition of Vizio is revealed as a strategic move to expand its ad-driven data collection, raising serious privacy concerns as smart TVs become increasingly invasive. A disturbing practice by Webinar TV is exposed—automatically scraping public Zoom meetings, recording them, and turning them into AI-generated podcasts without consent, highlighting the risks of browser extensions and public link sharing. A massive data breach at Navia Benefit Solutions compromised nearly 2.7 million individuals’ sensitive health and SSN data, reinforcing the need for credit freezes. TP-Link routers are found vulnerable due to unpatched exploits, with users forced to manually update firmware—a reminder of the importance of automatic updates. The FCC’s controversial ban on foreign-made consumer routers is dissected as a politically driven, ineffective measure that targets manufacturing location over actual security, with no real enforcement or technical safeguards. H&R Block’s 2025 tax software is condemned for installing a long-term, unremovable root CA certificate, creating a decades-long backdoor for man-in-the-middle attacks. Meanwhile, Claude’s new AI automation feature for Macs raises red flags about untrusted AI gaining system-level access. On a positive note, Apple appears to have implemented a warning for pasting clipboard content into terminal windows, addressing the 'clickjacking' scam. Finally, a landmark Los Angeles jury verdict finds Meta and Google negligent in designing addictive social media platforms harmful to youth, setting a precedent for thousands of similar lawsuits. The episode ends with a call for stronger security standards, personal vigilance, and systemic change. Key takeaways include: 1) Keep smart TVs offline or use external streaming devices to avoid data harvesting; 2) Never share Zoom links publicly and disable unnecessary browser extensions; 3) Freeze your credit immediately after any data breach; 4) Manually update router firmware or switch to models with auto-updates; 5) Avoid installing software that modifies trusted root certificates; 6) Be extremely cautious with AI tools that gain system-level access; 7) Enable terminal paste warnings on macOS and demand similar protections on Windows; 8) Recognize that corporate accountability for digital harm is beginning to emerge through legal action.