Security Cocktail Hour

Eva Galperin explains how stalkerware, ordinary phone access, coercion, and weak privacy defaults can let someone close create devastating real-world harm.

In this episode, we cover:

What stalkerware is and why hiding from the user matters
Why intimate-partner abuse changes the cybersecurity threat model
Privacy as consent and control, not isolation
Why end-to-end encryption is not magic if the endpoint is compromised
Password managers, VPN myths, patching, and backups
What security teams miss when they only focus on exotic adversaries
Guest: Eva Galperin, Director of Cybersecurity at the Electronic Frontier Foundation and co-founder of the Coalition Against Stalkerware.

Resources:

EFF Surveillance Self-Defense: https://ssd.eff.org/
Coalition Against Stalkerware: https://stopstalkerware.org/

This is the full interview version of our conversation with Chad Butler.

Chad previously worked in product security at Amazon and was involved with Prime Air, Amazon's drone delivery program. He joins Joe Patti and Adam Roth to talk about drone delivery, FAA rules, GPS spoofing, detect-and-avoid, ADS-B, autonomous vehicles, AI agents, and the engineering culture needed when software failures can become physical-world safety failures.

Topics include:

Prime Air and product security
commercial drone delivery risk
Part 107 and Part 108
beyond visual line of sight operations
GPS spoofing and drone capture
detect-and-avoid vs right of way
ADS-B tradeoffs
why pilots may not reliably see drones
autonomous vehicles and AI agents
adversarial inputs and edge cases
public trust after catastrophic failures
Challenger, Feynman, and ignored engineering warnings

Autonomous systems are already moving into the physical world. Drones can fly themselves, robot taxis are carrying passengers, and AI systems are taking more action without direct human control.

Chad Butler joins the Security Cocktail Hour to explain why that changes the risk model.

The issue is what happens when autonomous systems make real-world decisions from sensor data, routing logic, and AI-driven judgment that may be wrong, spoofed, or manipulated.

In this feature version, Chad talks with Joe Patti and Adam Roth about:

GPS spoofing and drone capture
beyond visual line of sight drone operations
trusted and untrusted sensor data
AI agents and autonomous vehicles
why optimal-environment testing is not enough
why "nobody will do that" is not a defense
how cyber failures can become safety failures
what Challenger and Feynman still teach us about launch pressure and ignored warnings
This is a feature cut of the conversation. Th full interview will be released soon.

This time we’re revisiting our conversation with Luke Canfield and focusing on how drones are becoming a cybersecurity problem.

Luke walks through war-flying, drone-mounted Wi-Fi Pineapples, rogue access points, cartel drone operations, prison contraband drops, hybrid warfare, and why most security teams are still thinking too flat. The core takeaway: security exists in three dimensions now, and defenders need to start looking up.

Full original episode with Luke Canfield: https://open.spotify.com/episode/18TYWLjiLpqGX995iDmqdL?si=67c757474cc84d33

Security Cocktail Hour:
https://securitycocktailhour.com

Former NASA Administrator and astronaut Charles Bolden joins the Security Cocktail Hour to explain why space is not as isolated as people assume.

We cover:
Why mission control still sits in the middle
Why messages get routed, reviewed, and filtered before reaching a vehicle
How consumer devices expand the attack surface in space
What cooperation in orbit teaches about security and civics
Why he does not buy the hype about easy moon or Mars colonization

Organizations mentioned in this episode:
Intrepid Museum: https://intrepidmuseum.org/
Astronauts for America: https://www.astronautsforamerica.org/