The Inverted Podcast

What security advice is actually helping people stay safe, and what has become outdated “hack lore”?In this episode of the Inverted Podcast, Jeroen Kemperman, Dana Kaufman, and Dario Salice are joined by Bob Lord (former Yahoo CISO, former Twitter security leader, and founder of Hacklore) to debunk some of the most persistent myths in cybersecurity.The conversation explores why common advice such as avoiding public Wi‑Fi, using a VPN for everyday browsing, constantly changing passwords, clearing cookies, avoiding QR codes, or worrying about "juice jacking" may no longer reflect how modern attacks actually work. Bob explains how security guidance can outlive the threats it was created to address, creating confusion, wasted effort, and a false sense of security.The group also discusses Secure by Design principles, why security teams need better data to drive decisions, how passkeys are changing authentication, and what new myths may be emerging in the age of AI.If you build, market, sell, or use security products, this episode is a practical guide to separating real risk from security folklore and focusing on what truly makes people safer.Learn more about Hacklore: https://hacklore.orgWho should watch:Security professionals, IAM engineers, CISOs, developers, product managers, compliance teams, and anyone interested in digital identity and AI.🔔 Subscribe for more insights on identity, security, and AI 💬 What do you think about AI agents acting on your behalf?Connect with the hosts and guests with comments on the video or on LinkedIn to continue the conversation!🎧 Listen, learn, and join the conversation! 🎧Find us on LinkedIn, Spotify, YouTube, Amazon Music/Audible, iHeartRadio or our website, and leave a message with your thoughts or questions. Check out our 🌐website: https://invertedpm.com/✅  Like 👍 and Subscribe for more deep dives into the world of inverted product management! ✅ 🔗 Join the conversation in the Inverted Product Management community on LinkedIn.Inverted PM LinkedIn Group: https://www.linkedin.com/groups/12902712/Music by: BensoundLicense code: KQNVJHTWQEBEDSEA#Cybersecurity #Hacklore #Security #SecureByDesign #Passkeys #Authentication #AI #InvertedPodcast #BobLord #CISO #TechnologyPodcast

Product Design for Trust & Safety | Inverted PodcastIn this episode of the Inverted Podcast, special guest Elliott Sainsbury joins co-hosts Dario Salice, Dana Kaufman, and Cristina for a deep conversation about the role of product design in privacy, security, and trust & safety.Design is more than making interfaces look good or writing clear button text. It shapes how people understand what happens to their data, what choices they’re making, and when they should stop and think before taking action. The group explores how product teams can move beyond dense privacy notices and one-time consent screens toward clearer, more contextual experiences that build trust over time.Elliott shares insights from his work in content design and enterprise software, including how thoughtful messaging, consistent terminology, and intentional friction can help users make better decisions. Dana reflects on how privacy has evolved in product management, from late-stage checkboxes to upfront considerations shaped by regulation, AI, and changing user expectations. Cristina brings a security engineering perspective, connecting these ideas to secure defaults, threat modeling, least privilege, and the importance of helping engineers build safer products without unnecessary friction.Topics include:➡️ Why trust and safety should be part of the product experience➡️ How to make privacy and security choices clearer for users➡️ The trade-offs between opt-in and opt-out models➡️ Why “frictionless” isn’t always the right goal➡️ How AI is making privacy and product development more complex➡️ The role of designers, product managers, and engineers in building trustworthy systems➡️ Why trust has to be maintained throughout the user journey, not just at signupIf you work in product, design, security, privacy, or AI, this conversation is a practical look at how teams can build products that respect users, reduce surprises, and make trust a core part of the experience.Who should watch:Security professionals, IAM engineers, CISOs, developers, product managers, compliance teams, and anyone interested in digital identity and AI.🔔 Subscribe for more insights on identity, security, and AI 💬 What do you think about AI agents acting on your behalf?Connect with the hosts and guests with comments on the video or on LinkedIn to continue the conversation!🎧 Listen, learn, and join the conversation! 🎧Find us on LinkedIn, Spotify, YouTube, Amazon Music/Audible, iHeartRadio or our website, and leave a message with your thoughts or questions. Check out our 🌐website: https://invertedpm.com/✅  Like 👍 and Subscribe for more deep dives into the world of inverted product management! ✅ 🔗 Join the conversation in the Inverted Product Management community on LinkedIn.Inverted PM LinkedIn Group: https://www.linkedin.com/groups/12902712/#IdentitySecurity #Cybersecurity #Passkeys #ZeroTrust #IAM #AIAgents #DigitalIdentity #eIDAS #Privacy #InvertedPodcastMusic by: BensoundLicense code: KQNVJHTWQEBEDSEA

Identity is Changing Fast: AI Agents, Passkeys & Digital ID Explained | Inverted PodcastDigital identity is evolving rapidly — from passwords to passkeys, from users to AI agents.In this episode of the Inverted Podcast, we break down the biggest trends in identity security, authentication, and authorization, including the rise of AI agents, phishing-resistant login methods, and government-backed digital identity systems like the EU Digital Identity Wallet.We explore how identity is shifting from static accounts to dynamic, real-time access control, why Zero Trust and runtime security are becoming essential, and what organizations must do to keep up with increasing regulatory pressure and cyber threats.If you're interested in cybersecurity, identity management (IAM), Zero Trust, AI security, or privacy, this episode gives a clear view of where the industry is headed.Topics covered:➡️ Identity security trends in 2026➡️ Passkeys vs passwords (future of authentication)➡️ AI agents and delegated identity➡️ Zero Trust and continuous authentication➡️ Phishing-resistant MFA and account protection➡️ Runtime vs static identity controls➡️ EU Digital Identity Wallet (eIDAS) explained➡️ Regulatory pressure on banks and enterprisesWho should watch: Security professionals, IAM engineers, CISOs, developers, product managers, compliance teams, and anyone interested in digital identity and AI.🔔 Subscribe for more insights on identity, security, and AI 💬 What do you think about AI agents acting on your behalf?Connect with the hosts and guests with comments on the video or on LinkedIn to continue the conversation!🎧 Listen, learn, and join the conversation! 🎧Find us on LinkedIn, Spotify, YouTube, Amazon Music/Audible, iHeartRadio or our website, and leave a message with your thoughts or questions. Check out our 🌐website: https://invertedpm.com/✅  Like 👍 and Subscribe for more deep dives into the world of inverted product management! ✅ 🔗 Join the conversation in the Inverted Product Management community on LinkedIn.Inverted PM LinkedIn Group: https://www.linkedin.com/groups/12902712/Chapters:00:00 Introduction00:11 The Acceleration of Identity Change01:13 From Authentication to Authorization02:22 AI Agents and Identity Challenges03:33 The “Identity Debt” Problem04:32 Runtime vs. Static Security Controls06:00 Continuous Access & Risk Signals07:30 Government Digital ID (EU Wallet)09:10 The Future of Identity & AI Agents#IdentitySecurity #Cybersecurity #Passkeys #ZeroTrust #IAM #AIAgents #DigitalIdentity #eIDAS #Privacy #InvertedPodcastMusic by: BensoundLicense code: KQNVJHTWQEBEDSEA

In this episode of the Inverted Podcast, we dive into one of the most overlooked — and risky — aspects of modern digital systems: account recovery.Joined by security expert Dean H. Saxe, the conversation explores why recovery isn’t just a backup feature, but often the weakest link in your entire authentication system. From real-world examples of compromised accounts to the surprising ways attackers exploit recovery flows, the team breaks down how even the most secure login systems can fail.You’ll hear insights on:➡️ Why account recovery should be treated as a first-class security feature, not an afterthought➡️ How attackers exploit weak recovery processes instead of breaking strong authentication➡️ The trade-offs between security, privacy, and accessibility when designing recovery systems➡️ The real business impact of poor recovery experiences — from lost users to increased costs➡️ Emerging approaches like passkeys, digital credentials, and identity verification➡️ Practical advice for both product teams and everyday users to stay protectedBeyond the technical details, this episode highlights the human side of recovery — from frustrated users locked out of their accounts to the real-life consequences of losing access to your digital identity.If you enjoyed this conversation, don’t forget to like, subscribe, and share for more episodes on security, privacy, cyber abuse, spam, and building better “inverted” products.Connect with the hosts and guests with comments on the video or on LinkedIn to continue the conversation!🎧 Listen, learn, and join the conversation! 🎧Find us on LinkedIn, Spotify, YouTube, Amazon Music/Audible, iHeartRadio or our website, and leave a message with your thoughts or questions. Check out our 🌐website: https://invertedpm.com/✅  Like 👍 and Subscribe for more deep dives into the world of inverted product management! ✅ 🔗 Join the conversation in the Inverted Product Management community on LinkedIn.Inverted PM LinkedIn Group: https://www.linkedin.com/groups/12902712/#securitypm #ProductManagement #riskmanagement #risk #Cybersecurity #InvertedPM #TrustAndSafety #security #abuseprevention #userexperience #hacked #AI #AIsecurity #aigovernance #cybersecurity podcast #tech podcast series #cybersecurity podcasts #cybersecurity podcasts for professionals #technology podcasts #technology podcast #productivity podcasts #startup #cloudsecuritypodcast Music by: BensoundLicense code: KQNVJHTWQEBEDSEA

What makes a company truly incorruptible? In this special episode of the Inverted Podcast, Jeroen, Dana, and Dario sit down with legendary entrepreneur and The Lean Startup author Eric Ries to explore the ideas behind his new book, "Incorruptible: Why Good Companies Go Bad…and How Great Companies Stay Great" Together, they unpack why some companies stay true to their values while others slowly compromise under pressure from investors, incentives, and short-term thinking. Eric shares powerful stories from companies like Costco, Cloudflare, and Anthropic, explaining how trust, governance, and long-term purpose can become real competitive advantages—not just ideals.The conversation also dives into why security, privacy, and safety are often the first things sacrificed in profit-driven environments, and why building them into a company’s DNA from the beginning matters more than ever. If you care about building products, companies, or systems that people can truly trust, this episode is for you.In this episode, we cover:➡️The deeper meaning behind The Lean Startup➡️Why speed without long-term thinking can be dangerous➡️The core ideas in Eric Ries’s new book, Incorruptible➡️How companies like Costco and Cloudflare turned principles into strength➡️Why security, privacy, and safety are essential to trustworthy businesses➡️How founders, employees, and even job candidates can spot incorruptible organizationsYou can find Eric's new book "Incorruptible: Why Good Companies Go Bad…and How Great Companies Stay Great" here:https://www.amazon.com/Incorruptible-Shape-Companies-That-Stand/dp/B0FWZZBPZBAnd at the website: https://www.incorruptible.co/If you enjoyed this conversation, don’t forget to like, subscribe, and share for more episodes on security, privacy, cyber abuse, spam, and building better “inverted” products.Connect with the hosts and guests with comments on the video or on LinkedIn to continue the conversation!🎧 Listen, learn, and join the conversation! 🎧Find us on LinkedIn, Spotify, YouTube, Amazon Music/Audible, iHeartRadio or our website, and leave a message with your thoughts or questions. Check out our 🌐website: https://invertedpm.com/✅  Like 👍 and Subscribe for more deep dives into the world of inverted product management! ✅ 🔗 Join the conversation in the Inverted Product Management community on LinkedIn.Inverted PM LinkedIn Group: https://www.linkedin.com/groups/12902712/#securitypm #ProductManagement #riskmanagement #risk #Cybersecurity #InvertedPM #TrustAndSafety #security #abuseprevention #userexperience #hacked #AI #AIsecurity #aigovernance #cybersecurity podcast #tech podcast series #cybersecurity podcasts #cybersecurity podcasts for professionals #technology podcasts #technology podcast #productivity podcasts #startup #cloudsecuritypodcast Spotify: Music by: BensoundLicense code: KQNVJHTWQEBEDSEA

How Do You Build AI Products That Are Compliant Before It’s Too Late?In this special episode of the Inverted podcast, host Dario Salice sits down with Dexter Awoyemi, an independent AI systems architect working at the intersection of AI, regulation, and product design. Together, they explore what it really means to build AI systems responsibly—before compliance becomes a painful afterthought.Dexter introduces his philosophy of “clarity before code”, arguing that teams should start with intent, risk classification, and human oversight rather than jumping straight into models and frameworks. The conversation dives deep into the EU AI Act, including how turning complex regulations into executable knowledge graphs can help product and engineering teams reason about their obligations without reading hundreds of pages of legal text.You’ll hear a candid discussion about:➡️ Why human-in-the-loop is a non‑negotiable requirement for AI systems—and how it affects UX, auditability, and accountability➡️ Common mistakes teams make when applying AI to complex reasoning and regulatory interpretation➡️ How compliance, security, and product teams can collaborate earlier instead of acting as late-stage gatekeepers➡️ What product teams should focus on first: risk classification, observability, and designing for failure modes➡️ Why AI regulation, much like GDPR, is likely to become the global default—and why early compliance is not wasted workThis episode is especially valuable for product managers, engineers, and founders building AI-powered products in regulated or soon-to-be-regulated environments who want to avoid expensive rewrites, organizational friction, and downstream risk.If you’re interested in real-world security strategies, AI security, zero trust, and the evolving challenges facing media organizations, this episode is a must-listen. Connect with the hosts and guests with comments on the video or on LinkedIn to continue the conversation!🎧 Listen, learn, and join the conversation! 🎧Find us on LinkedIn, Spotify, YouTube, Amazon Music/Audible, iHeartRadio or our website, and leave a message with your thoughts or questions. Check out our 🌐website: https://invertedpm.com/✅  Like 👍 and Subscribe for more deep dives into the world of inverted product management! ✅ 🔗 Join the conversation in the Inverted Product Management community on LinkedIn.Inverted PM Linked In Group: https://www.linkedin.com/groups/12902712/#securitypm #ProductManagement #riskmanagement #risk #Cybersecurity #InvertedPM #TrustAndSafety #security #abuseprevention #userexperience #hacked #AI #AIsecurity #aigovernance #cybersecurity podcast #tech podcast series #cybersecurity podcasts #cybersecurity podcasts for professionals #technology podcasts #technology podcast #productivity podcastsMusic by: BensoundLicense code: KQNVJHTWQEBEDSEA