Cheap Sunglasses and The IT Privacy and Security Weekly Update for the Week Ending May 6th., 2025

EP 241. In this week's update:  
Smile, You’re Training Zuck’s AI.  Meta quietly rewrote the fine print so your Ray-Bans can help train its AI by default—just say "Hey Meta" and wave goodbye to meaningful opt-outs.
The Irish DPC slapped TikTok with a $600M wake-up call after finding the app's transparency was more filter than fact—China got the data, and Europe got the breach of trust.
Billions of leaked passwords confirm that "123456" and "password" still reign supreme—proving users learned absolutely nothing since 2011 except how to get breached faster.
So...  Microsoft now defaults new accounts to passwordless sign-ins, putting the final nail in the coffin for “admin123” and celebrating the slow, glorious death of World Password Day.
Hackers turned the Post’s X account into a crypto scam magnet—demonstrating that even legacy media isn’t immune to modern-day digital pickpocketing.
A supply-chain attack silently lurked in Magento plug-ins for six years before hijacking hundreds of sites—because patience is a virtue, especially for cybercriminals.
Toyota faces a class action for allegedly letting Progressive peek under the hood—tracking your driving habits before you even knew data was in the fast lane.
U.S. border agents are hunting for tech that can photograph every passenger in every car—because nothing says “welcome” like full-surveillance road tripping.

Find the full transcript to this podcast here.