Welcoming back John Ozbay on Techlore Talks for Part 1 of discussing many important digital rights concepts! The unexpected challenges of developing open source software, finding & reporting vulnerabilities, security of big tech companies like Google/Apple, progressive web apps, new EU tech developments with the DMA, marketing in privacy, and so much more! John is an old interview favorite and we're thrilled to have him back on! Part 2: Coming Soon Original interview: https://www.youtube.com/watch?v=FWqxnY8GOUA John's Website: https://johnozbay.com/ Cryptee: https://crypt.ee/ Sending a massive thanks to John for his time coming on the podcast! ❤️ 🔐 Our Website: https://techlore.tech/ 🕵 Go Incognito Course - to learn about privacy: https://techlore.tech/goincognito 🏫 Techlore Coaching - to get direct support: https://techlore.tech/coaching 💻 Techlore Forum - to connect with other advocates: https://discuss.techlore.tech/ 🦣 Mastodon - to stay updated: https://social.lol/@techlore We cannot provide our content without our Patrons, huge thanks to: BRIGHTSIDE, Clark, Ente, Larry, Afonso, Boori, Brad, Casper, Cookie, Floyd, JohnnyO, kevin, love your content, NotSure, Poaclu, x 🧡 Join them on Patreon: https://www.patreon.com/techlore 💚 To see our production gear, privacy tools we use, and other affiliates: https://techlore.tech/affiliates 💖 All Techlore Support Methods: https://techlore.tech/support 00:00:00 Interview intro 00:01:26 John & Henry catching up 00:02:58 Cryptee updates since our last interview 00:04:58 What are the challenges of releasing features like MFA? 00:10:44 Google's vulnerability Cryptee discovered & reported 00:15:54 Why does Cryptee have Google login, is it private? 00:22:58 What tech are journalists using to stay safe? 00:29:00 More privacy information on Google sign in 00:32:06 How has Cryptee improved its security? 00:33:04 Global events and their impact on digital rights services 00:41:04 Why does Cryptee use Cloudflare? 00:42:14 How is Cryptee serverless? What does that mean? 00:46:56 Privacy tools that don't require user trust 00:49:26 Starting with some positive Apple discussions 00:54:04 If hardening breaks a service, does that mean it's unsafe? 01:01:20 Apple's Advanced Data Protection 01:02:28 iCloud E2EE vs Crypte E2EE 01:05:42 iCloud metadata vs Cryptee metadata 01:08:04 Exploits vs backdoors & Apple's security approach 01:12:02 Apple's Lockdown Mode vs Google's Advanced Protection Program 01:14:04 Bizarre marketing tactics in the privacy & security space 01:15:38 Broadly speaking: Differences between Apple & Google security? 01:20:12 Apple, EU, PWAs, user control, etc. #johnozbay #techlore #cryptee