Byte Sized Security cover art

Byte Sized Security

Byte Sized Security

By: Marc David
Listen for free

Season's Savings | £0.99/mo for 3 months

£5.99/mo after 3 months - terms apply. Cancel monthly
In a world where cyberattacks are becoming more commonplace, we all need to be vigilant about protecting our digital lives, whether at home or at work. Byte Sized Security is the podcast that provides snackable advice on cybersecurity best practices tailored for professionals on the go. Hosted by information security expert, Marc David, each 15-20 minute episode provides actionable guidance to help listeners safeguard their devices, data, and organizations against online threats. With new episodes released every Monday, Byte Sized Security covers topics like social engineering, password management, multi-factor authentication, security awareness training, regulatory compliance, incident response, and more. Whether you're an IT professional, small business owner, developer, or just someone interested in learning more about cybersecurity, Byte Sized Security is the quick, easy way to pick up useful tips and insights you can immediately put into practice. The clear, jargon-free advice is perfect for listening on your commute, during a lunch break, or working out. Visit bytesizedsecurity.com to access episodes and show notes with key takeaways and links to useful resources mentioned in each episode. Don't let cybercriminals catch you off guard - get smart, fast with Byte Sized Security! Tune in to boost your cybersecurity knowledge and help secure your part of cyberspace.Copyright 2026 Marc David Economics Leadership Management & Leadership Politics & Government
Episodes
  • Ep49: ChatGPT Ads: Your Prompts, Your Email, and the Switch That Doesn't Stop Ads

    Ep49: ChatGPT Ads: Your Prompts, Your Email, and the Switch That Doesn't Stop Ads
    Oct 15 2026
    Episode Summary:ChatGPT now shows ads on its Free and Go plans. In this episode Marc walks through what 404 Media found when it ran its own test ads: advertisers can upload lists of emails, phone numbers, or Android advertising IDs, and your current chat shapes which ad appears. Turning off ads personalization changes how ads are picked, but it does not stop them. Marc covers what each setting does and five steps you can take today.Key Topics Covered:404 Media's test ads: how Joseph Cox used OpenAI context hints to steer ads toward privacy and AI chatsCustom audiences: email, phone, hashed identifiers, and Google Advertising IDs, plus include, exclude, and bid-adjustment bucketsThe two switches: Personalize ads vs Ads-Free mode, and why one does not equal the otherWhat OpenAI commits to: advertisers do not get your chats; Temporary Chats show no ads; health and politics limitsFive actions: check your plan, Data Controls, delete ads data, Temporary Chat, and shrink the lists you are onMain Takeaways:Free and Go show ads. Plus, Pro, Business, Enterprise, and Edu do not.Context hints are guidance, not keyword triggers, but your prompt still decides whether an ad fits.Advertisers can match uploaded emails, phone numbers, or Android advertising IDs to ChatGPT users (inclusion and bid bumps need at least 25,000 matched users).Turning off ads personalization still leaves context-based ads on. Ads-Free (Free plan only) or a paid plan is what removes ads.Your personalization setting does not take you off an advertiser's uploaded list.For sensitive topics, use Temporary Chat. It shows no ads and does not use or update memory.Timestamps:[0:00] Cold open[0:50] Intro[1:13] What 404 Media did[2:22] Your email and phone number[4:17] The switch which doesn't stop ads[5:42] What OpenAI promises[6:27] Five things to do today[7:42] OutroTools & Resources Mentioned:404 Media (Joseph Cox, Oct 15, 2026): How ChatGPT Targets Ads To You Based On Your Prompts, Phone Number, and EmailOpenAI Help: Ads in ChatGPTOpenAI Help: Set up Custom Audiences for your CampaignOpenAI Help: Write Context Hints for ChatGPT AdsOpenAI: Our approach to advertising and expanding access to ChatGPTGoogle: Advertising IDByteSizedSecurity blog: ChatGPT ads targeting (prompts, email, phone)Not legal advice. Settings and plan details reflect OpenAI's help pages as of October 15, 2026 and change over time.---I do hope you enjoyed this episode of the podcast. Here are some helpful resources including any sites that were mentioned in this episode.--Listen and subscribe: https://bytesizedsecurity.show/listen--Support ByteSizedSecurity (501(c)(3)): Donate via GiveLively--Questions or tips: email marc@bytesizedsecurity.show (subject: Byte-Sized Security). TikTok: @bytesizedsecurity
    Show More Show Less
    10 mins
  • Ep48: A Short Poem About MFA

    Ep48: A Short Poem About MFA
    Oct 12 2026

    A 20-second poem about multi-factor authentication (MFA), the second step that proves it's really you when you log in.

    Main Takeaway
    • A password alone can be copied, lost, or sold. Add a second factor, ideally a hardware security key or passkey, which a fake login page can't capture.

    Timestamps
    • 0:00 The poem

    Tools & Resources Mentioned
    • CISA: More than a Password
    Show More Show Less
    2 mins
  • Ep47: Why AI Risks Are Different

    Ep47: Why AI Risks Are Different
    Sep 19 2026
    Episode Summary:Someone told Marc that AI panic is nothing new — just the printing press or nuclear weapons all over again. He disagreed, and it turns out there was a report to back it up. In this episode he breaks down why AI collapses the cost of dangerous capability in a way the printing press, the internet, and even nuclear weapons never did, what Anthropic's brand-new September 2026 threat intelligence report documents, where his own "$200 expert" framing overstated the case, and the four guardrails that would close the gap.Key Topics Covered:The argument that started this episode — a debate about whether AI panic is history repeating, and the report Marc found three days later making his case for himWhy the printing press comparison breaks down — institutions had a century (and decades, for the internet) to catch up; AI's capability curve moves in monthsWhat's actually different about nuclear weapons — nuclear risk lives behind physical choke points: materials, facilities, expertise. AI risk lives in a skill, and skills can't be fenced offAnthropic's report: the receipts — three disrupted operations, walked through case by case, that turn the argument from speculative to documentedDoes AI make anyone an expert? Not exactly — Marc's own "$200 subscription = expert" line, and the more defensible version of the claimAttackers, defenders, and who adapts faster — the same models cutting attacker costs are cutting defender costs too, and why that race mattersWhat real AI guardrails would look like — four concrete guardrails: pre/post-release capability testing, enforceable standards, international coordination, and risk-scaled accessMain Takeaways:AI doesn't need generations to reach scale like the printing press or the internet did — model capability jumps happen every few months, not every few decadesNuclear risk is contained by physical choke points (fissile material, facilities, expertise); AI risk lives in a skill, and skills don't have a border to fenceAnthropic's September 2026 report documents real, disrupted operations — including a breach that went from one stolen developer token to full cloud admin control in roughly three hours"$200 subscription = expert" overstates it: AI doesn't manufacture expertise, it lowers the skill required to attempt tasks whose consequences the operator isn't trained to handleDefenders get the same acceleration attackers do — the organizations lagging on AI-assisted defense are the ones absorbing the most riskClosing the gap takes four things: pre/post-release capability testing, enforceable (not voluntary) standards, international coordination, and access that scales with risk instead of priceTimestamps:[0:00] The argument behind this episode[1:03] Why the printing press comparison breaks down[1:53] What's different about nuclear weapons[2:55] Anthropic's report: the receipts[4:46] Does AI make anyone an expert? Not exactly[5:45] Attackers, defenders, and who adapts faster[6:16] What real AI guardrails would look likeTools & Resources Mentioned:Anthropic: Detecting and Countering Misuse of AI (September 2026)NIST AI Risk Management FrameworkEU AI Act (European Commission)Full written guide: Why AI Risks Are DifferentAI is fueling the cybersecurity career boomWhy an AI agent shouldn't inherit your permissionsNot legal advice. Figures reflect Anthropic's report as published on September 10, 2026.---I do hope you enjoyed this episode of the podcast. Here are some helpful resources including any sites that were mentioned in this episode.--Find subscriber links on my site, add to your podcast player, or listen on the web players on my site:Listen to Byte Sized Security --Support this Podcast with a Tip:Support Byte Sized Security --If you have questions for the show, feedback or topics you want covered. Please send a short email to marc@bytesizedsecurity.show with the Subject line of "Byte-Sized Security" so I know it's about the podcast.Connect with me on TikTok: https://www.tiktok.com/@bytesizedsecurity
    Show More Show Less
    9 mins
adbl_web_anon_alc_button_suppression_t1
No reviews yet