Copy Transcript
Copied
WEBVTT 00:00:00.460 --> 00:00:04.360 Your phone call just traveled 22 ,000 miles through 00:00:04.360 --> 00:00:08.179 space It was completely unencrypted and someone 00:00:08.179 --> 00:00:12.679 with an $800 satellite dish heard every word 00:00:12.679 --> 00:00:15.539 of that conversation This isn't hypothetical. 00:00:16.059 --> 00:00:18.820 It's happening right now to millions of people 00:00:18.820 --> 00:00:23.539 and most of them have no idea I'm Tyler Woodward. 00:00:23.539 --> 00:00:26.640 This is the Tyler Woodward project and today 00:00:26.640 --> 00:00:31.019 we're talking about why you're most private data, 00:00:32.020 --> 00:00:34.780 your voice calls, your text messages, your passwords, 00:00:35.539 --> 00:00:38.219 your Google searches might be flying over satellites 00:00:38.219 --> 00:00:42.600 with zero protection and what you can actually 00:00:42.600 --> 00:00:53.859 do about it. In October 2025, researchers at 00:00:53.859 --> 00:00:58.780 UC San Diego and the University of Maryland They 00:00:58.780 --> 00:01:02.579 published a study called Don't Look Up. And here's 00:01:02.579 --> 00:01:05.900 what they did. They bought $800 worth of consumer 00:01:05.900 --> 00:01:09.260 grade satellite equipment. Things like a motorized 00:01:09.260 --> 00:01:11.959 dish, a tuner card, you know, the kind of stuff 00:01:11.959 --> 00:01:15.159 people use to watch satellite TV. They pointed 00:01:15.159 --> 00:01:18.620 it at the sky and they started capturing data 00:01:18.620 --> 00:01:22.780 traveling through geostationary satellites. What 00:01:22.780 --> 00:01:27.609 they found was roughly 50 % of all IP traffic 00:01:27.609 --> 00:01:31.870 they intercepted was completely unencrypted. 00:01:32.709 --> 00:01:36.409 That means unencrypted phone calls, unencrypted 00:01:36.409 --> 00:01:41.629 text messages, unencrypted passwords, unencrypted 00:01:41.629 --> 00:01:45.109 banking credentials, unencrypted everything. 00:01:46.409 --> 00:01:49.769 And here's what that means. You probably have 00:01:49.769 --> 00:01:53.069 data on those satellites right now, and you don't 00:01:53.069 --> 00:01:56.439 know it. Your carrier didn't tell you. Your bank 00:01:56.439 --> 00:02:00.480 didn't warn you. It just happens silently in 00:02:00.480 --> 00:02:04.319 the background. By the end of this episode, you'll 00:02:04.319 --> 00:02:08.599 understand why this is happening, what specific 00:02:08.599 --> 00:02:12.520 data is at risk, and what you can do to protect 00:02:12.520 --> 00:02:19.819 yourself starting today. Let me start with what 00:02:19.819 --> 00:02:22.780 the researchers actually found because this is 00:02:22.780 --> 00:02:26.879 where it stops being abstract When they captured 00:02:26.879 --> 00:02:30.060 the satellite traffic, they saw unencrypted voice 00:02:30.060 --> 00:02:34.360 calls from cellular networks actual conversations 00:02:34.360 --> 00:02:38.819 They could hear people talking They intercepted 00:02:38.819 --> 00:02:42.879 text messages and clear text SMS content they 00:02:42.879 --> 00:02:46.400 could just read right there in the open They 00:02:46.400 --> 00:02:49.580 saw banking credentials usernames and passwords 00:02:49.580 --> 00:02:54.340 transmitted with absolutely zero encryption corporate 00:02:54.340 --> 00:03:03.219 login information internal System traffic They 00:03:03.219 --> 00:03:06.240 also saw DNS queries which means they could see 00:03:06.240 --> 00:03:09.699 what people were searching for on Google medical 00:03:09.699 --> 00:03:14.740 symptoms financial concerns Personal information, 00:03:14.919 --> 00:03:18.840 all readable right there in the open. One researcher 00:03:18.840 --> 00:03:22.340 mentions in the video that when they intercepted 00:03:22.340 --> 00:03:24.979 their first unencrypted phone call and heard 00:03:24.979 --> 00:03:28.960 a real person's voice, they immediately stopped. 00:03:29.939 --> 00:03:33.400 They closed the tool because they were afraid 00:03:33.400 --> 00:03:36.919 of what else they'd find if they kept looking. 00:03:38.599 --> 00:03:42.860 Think about that for a second. An academic researcher. 00:03:44.099 --> 00:03:47.560 Someone whose job it is to document vulnerabilities 00:03:47.560 --> 00:03:52.719 got so disturbed by what they were seeing that 00:03:52.719 --> 00:03:57.439 they immediately had to close the tool. Here's 00:03:57.439 --> 00:04:01.039 why that matters for you specifically. If you've 00:04:01.039 --> 00:04:04.979 ever made a phone call from a remote location, 00:04:05.340 --> 00:04:08.819 maybe a mountain, a royal area, an airplane, 00:04:09.560 --> 00:04:11.580 that call might have been routed through one 00:04:11.580 --> 00:04:15.229 of these satellite backhauls. If it did, and 00:04:15.229 --> 00:04:17.790 if that backhaul wasn't encrypted, someone with 00:04:17.790 --> 00:04:21.990 a satellite dish could have listened in. If you've 00:04:21.990 --> 00:04:25.389 ever texted someone from somewhere with spotty 00:04:25.389 --> 00:04:28.129 cell coverage, that text may have been routed 00:04:28.129 --> 00:04:31.269 over satellite, unencrypted, completely readable. 00:04:32.170 --> 00:04:35.529 If you've ever logged into your email or your 00:04:35.529 --> 00:04:39.569 bank from a remote location, even over HTTPS, 00:04:40.149 --> 00:04:44.259 an attacker on a satellite, could potentially 00:04:44.259 --> 00:04:48.139 see what you're accessing through your bank. 00:04:48.920 --> 00:04:51.220 They could see the timing and the volume of your 00:04:51.220 --> 00:04:55.180 traffic. They could infer things about your behavior. 00:04:56.540 --> 00:04:59.939 So why is your data even on satellites in the 00:04:59.939 --> 00:05:03.079 first place? The simple answer is because fiber 00:05:03.079 --> 00:05:07.139 doesn't go everywhere, not yet. Remote locations, 00:05:07.399 --> 00:05:11.000 mountains, deserts, royal areas, ships, airplanes, 00:05:11.600 --> 00:05:16.379 These places don't have terrestrial infrastructure. 00:05:17.519 --> 00:05:20.819 So, cell carriers, banks, utilities, everyone 00:05:20.819 --> 00:05:24.540 with data to move, they utilize satellites as 00:05:24.540 --> 00:05:27.779 the backhaul. When you make a call from a remote 00:05:27.779 --> 00:05:30.660 cell tower, that call gets digitized, packetized, 00:05:30.800 --> 00:05:35.399 and sent up to a geostationary satellite. The 00:05:35.399 --> 00:05:38.439 satellite rebroadcasts it. Someone at a hub station 00:05:38.439 --> 00:05:41.430 on the ground receives it. and then routes it 00:05:41.430 --> 00:05:46.050 to wherever it needs to go. Your data doesn't 00:05:46.050 --> 00:05:49.329 stay on a secure network during that process. 00:05:50.269 --> 00:05:52.670 It becomes an IP packet. That packet travels 00:05:52.670 --> 00:05:55.810 through space and the person receiving it at 00:05:55.810 --> 00:06:00.790 the hub on the ground has no way to know if it's 00:06:00.790 --> 00:06:05.490 been intercepted by someone else. And here's 00:06:05.490 --> 00:06:08.709 the thing. Geostationary satellites are in a 00:06:08.709 --> 00:06:12.269 fixed position above the equator. From any location 00:06:12.269 --> 00:06:14.850 in North America, you can see between 30 and 00:06:14.850 --> 00:06:17.889 40 different satellites at any given time. When 00:06:17.889 --> 00:06:21.029 a ground station sends a signal up to one of 00:06:21.029 --> 00:06:25.149 those satellites, that satellite doesn't send 00:06:25.149 --> 00:06:28.709 it in a tight beam to one receiving station. 00:06:29.209 --> 00:06:33.490 It broadcasts it over thousands of square miles. 00:06:34.730 --> 00:06:37.709 Anyone and that footprint with the right equipment 00:06:37.709 --> 00:06:41.449 could potentially receive it. For television, 00:06:42.110 --> 00:06:45.930 this was solved decades ago. TV signals are scrambled, 00:06:46.250 --> 00:06:50.550 you need a decoder box to watch it. But, IP traffic? 00:06:51.410 --> 00:06:56.029 Often, no encryption at all. Here's the frustrating 00:06:56.029 --> 00:07:00.329 part. This problem isn't new. It's not a surprise 00:07:00.329 --> 00:07:03.620 vulnerability that just got discovered The satellite 00:07:03.620 --> 00:07:06.060 industry has known for decades that unencrypted 00:07:06.060 --> 00:07:11.500 backhaul is a risk. They just decided not to 00:07:11.500 --> 00:07:17.720 fix it. Why? Well, because encryption cost money. 00:07:18.439 --> 00:07:23.220 Satellite equipment vendors sell encryption as 00:07:23.220 --> 00:07:26.519 a separate expensive license, but not a feature. 00:07:27.519 --> 00:07:30.259 A license. You buy the modem, and then you pay 00:07:30.259 --> 00:07:33.519 extra to enable IPSec or link layer scrambling 00:07:33.519 --> 00:07:39.620 of some sort. From a business perspective, if 00:07:39.620 --> 00:07:44.220 you're a satellite or a cellular carrier operating 00:07:44.220 --> 00:07:47.100 remote towers, you have to do a risk calculation. 00:07:47.899 --> 00:07:51.019 The cost of encryption versus the probability 00:07:51.019 --> 00:07:55.060 that someone will intercept this specific satellite 00:07:55.060 --> 00:07:59.490 link. For a long time, The calculation looked 00:07:59.490 --> 00:08:04.149 like the probability is low, so we'll skip that 00:08:04.149 --> 00:08:08.810 feature for now. That calculation just got proven 00:08:08.810 --> 00:08:12.629 catastrophically wrong. When the researchers 00:08:12.629 --> 00:08:16.569 contacted T -Mobile about their unencrypted cellular 00:08:16.569 --> 00:08:21.610 backhaul, T -Mobile responded within weeks. They 00:08:21.610 --> 00:08:24.730 implemented encryption because the liability 00:08:24.730 --> 00:08:29.220 of saying, We were transmitting your phone calls 00:08:29.220 --> 00:08:34.700 unencrypted over satellites. Is, you know, existential. 00:08:36.679 --> 00:08:39.440 Other organizations the researchers contacted, 00:08:40.720 --> 00:08:45.980 slower responses. Some encrypted quickly, others 00:08:45.980 --> 00:08:50.399 are still assessing their options. Here's the 00:08:50.399 --> 00:08:54.500 real problem. There's no regulatory pressure 00:08:54.500 --> 00:09:00.889 to fix this. In January 2025, the FCC tried to 00:09:00.889 --> 00:09:04.129 mandate basic cybersecurity for telecommunication 00:09:04.129 --> 00:09:08.649 carriers. That included encryption on important 00:09:08.649 --> 00:09:13.990 links. In November of 2025, weeks after this 00:09:13.990 --> 00:09:18.710 satellite research went public, the FCC rolled 00:09:18.710 --> 00:09:25.820 it back. 2 to 1 vote. They said, mandatory security 00:09:25.820 --> 00:09:34.120 wasn't quote effective unquote. So we're in a 00:09:34.120 --> 00:09:37.779 regulatory vacuum. There's no legal requirement 00:09:37.779 --> 00:09:41.080 that your carrier encrypt their satellite backhaul. 00:09:41.940 --> 00:09:44.740 There's no standard that says encryption must 00:09:44.740 --> 00:09:49.620 be the default. The leverage is all with the 00:09:49.620 --> 00:09:54.269 companies themselves at this point. Let me make 00:09:54.269 --> 00:09:58.529 this concrete with Actual scenarios that apply 00:09:58.529 --> 00:10:02.990 to you scenario one You're traveling and make 00:10:02.990 --> 00:10:06.769 a phone call from a remote area Your call is 00:10:06.769 --> 00:10:09.769 routed via satellite backhaul. If that backhaul 00:10:09.769 --> 00:10:14.690 is unencrypted, which is common Your conversation 00:10:14.690 --> 00:10:18.509 is being broadcast across space Someone with 00:10:18.509 --> 00:10:22.080 a satellite receiver can listen They can hear 00:10:22.080 --> 00:10:27.220 your voice the other person's voice everything 00:10:27.220 --> 00:10:32.940 you say Scenario 2 You text from an airplane 00:10:32.940 --> 00:10:37.460 or a remote location Your SMS is routed via satellite 00:10:37.460 --> 00:10:45.919 unencrypted Someone can read it Scenario 3 You're 00:10:45.919 --> 00:10:49.120 on a flight. You know the flights Wi -Fi and 00:10:49.120 --> 00:10:52.600 log into your email Your login credentials are 00:10:52.600 --> 00:10:55.639 traveling through multiple networks, some of 00:10:55.639 --> 00:10:59.580 which might be satellite based. Even with HTTPS 00:10:59.580 --> 00:11:04.460 on the web browser, an attacker can see you're 00:11:04.460 --> 00:11:07.600 accessing your email provider. They can see the 00:11:07.600 --> 00:11:10.759 timing and volume of your traffic, which tells 00:11:10.759 --> 00:11:16.120 them something about your behavior. Scenario 00:11:16.120 --> 00:11:20.309 4 You're in a royal area with spotty cellular 00:11:20.309 --> 00:11:26.409 signal and you do a Google search That DNS query 00:11:26.409 --> 00:11:30.029 the request to look up that domain might travel 00:11:30.029 --> 00:11:33.929 via satellite Unencrypted an attacker can see 00:11:33.929 --> 00:11:37.250 what you're searching for your medical symptoms 00:11:37.250 --> 00:11:40.830 your financial concerns your personal secrets 00:11:40.830 --> 00:11:46.399 and lastly scenario five you access your bank's 00:11:46.399 --> 00:11:52.860 website from a remote location. With HTTPS, your 00:11:52.860 --> 00:11:57.340 password is encrypted, but an attacker can see 00:11:57.340 --> 00:12:00.679 that you're accessing your bank. They can see 00:12:00.679 --> 00:12:05.820 when you access it, how often, the volume of 00:12:05.820 --> 00:12:08.960 data transferred, they can infer things about 00:12:08.960 --> 00:12:13.059 your financial behavior. The common thread here 00:12:13.549 --> 00:12:16.070 You probably don't know when your data is being 00:12:16.070 --> 00:12:18.669 routed through satellite systems. Your phone's 00:12:18.669 --> 00:12:20.529 not going to tell you. Your bank doesn't tell 00:12:20.529 --> 00:12:24.909 you. Your carrier doesn't tell you. It just happens. 00:12:27.850 --> 00:12:32.210 So, you can't control whether your carrier uses 00:12:32.210 --> 00:12:34.909 satellite backhaul. You can't control whether 00:12:34.909 --> 00:12:38.889 they encrypt it. But you can still protect yourself. 00:12:39.710 --> 00:12:43.370 First, Use end -to -end encrypted messaging. 00:12:44.470 --> 00:12:48.669 Things like Signal, WhatsApp, iMessage, or another 00:12:48.669 --> 00:12:55.529 encrypted messenger instead of plain SMS. These 00:12:55.529 --> 00:12:58.909 apps encrypt your message on your phone, and 00:12:58.909 --> 00:13:01.070 that encryption survives the journey through 00:13:01.070 --> 00:13:05.850 the satellite. Even if an attacker intercepts 00:13:05.850 --> 00:13:08.590 the satellite traffic, they can't read what was 00:13:08.590 --> 00:13:12.960 in that message. This is the single most effective 00:13:12.960 --> 00:13:17.799 thing you can do right out the gate Second use 00:13:17.799 --> 00:13:22.399 a VPN when you're in a remote area if you're 00:13:22.399 --> 00:13:26.500 relying on satellite internet Sellier and a remote 00:13:26.500 --> 00:13:30.620 location or in -flight Wi -Fi turn on that VPN 00:13:30.620 --> 00:13:36.279 a Good VPN encrypts all your traffic before it 00:13:36.279 --> 00:13:40.190 leaves your device So even if your data routes 00:13:40.190 --> 00:13:42.529 through one of these unencrypted satellite links, 00:13:43.370 --> 00:13:47.990 it's encrypted by the VPN. The satellite operator 00:13:47.990 --> 00:13:50.549 sees the encrypted traffic, but can't actually 00:13:50.549 --> 00:13:55.950 see what the data is. Now, this doesn't make 00:13:55.950 --> 00:14:00.649 you 100 % safe. The VPN provider themselves could 00:14:00.649 --> 00:14:03.690 theoretically see your traffic if they wanted 00:14:03.690 --> 00:14:08.929 to. So, make sure to use a VPN that you trust. 00:14:10.229 --> 00:14:14.070 But I'll tell you this it's dramatically better 00:14:14.070 --> 00:14:20.049 than nothing at all third use HTTPS everywhere 00:14:20.049 --> 00:14:25.649 Most browsers enforce HTTPS by default now anyways, 00:14:26.049 --> 00:14:30.470 so this is mostly automatic But if you see a 00:14:30.470 --> 00:14:33.750 padlock and HTTPS in your address bar, you're 00:14:33.750 --> 00:14:37.419 encrypted at the application layer If a website 00:14:37.419 --> 00:14:43.620 offers both HTTP and HTTPS, always go for HTTPS. 00:14:44.279 --> 00:14:49.000 Fourth, don't assume corporate networks are secure 00:14:49.000 --> 00:14:53.120 just because they're on your phone. If your company 00:14:53.120 --> 00:14:57.720 has a corporate VPN app or a corporate email 00:14:57.720 --> 00:15:02.019 app, use it. Don't just use your personal browser 00:15:02.019 --> 00:15:05.980 to access corporate resources from a remote location. 00:15:06.360 --> 00:15:10.019 The corporate app likely has additional encryption 00:15:10.019 --> 00:15:14.259 and security built into it. Fifth, be skeptical 00:15:14.259 --> 00:15:19.639 about banking from a remote location. If you're 00:15:19.639 --> 00:15:24.399 banking from a remote area, use the official 00:15:24.399 --> 00:15:27.080 bank app rather than the website if possible. 00:15:27.759 --> 00:15:30.259 Apps often have better security than the browser 00:15:30.259 --> 00:15:36.220 -based access. If you must use a browser, verify 00:15:36.220 --> 00:15:40.860 you're on the real website with a valid HTTPS 00:15:40.860 --> 00:15:45.759 certificate. Six, understand what's at risk. 00:15:46.340 --> 00:15:49.600 Medical data, financial data, passwords, personal 00:15:49.600 --> 00:15:54.320 information. These shouldn't be transmitted over 00:15:54.320 --> 00:15:59.580 encrypted links, period, full stop. If you can 00:15:59.580 --> 00:16:04.679 defer that transmission until you're on a secure 00:16:04.679 --> 00:16:09.220 network, do it. If you can't defer it, encrypt 00:16:09.220 --> 00:16:13.340 it. None of these steps are going to be perfect, 00:16:14.039 --> 00:16:17.460 but collectively they make you a much harder 00:16:17.460 --> 00:16:21.320 target than someone who's just transmitting everything 00:16:21.320 --> 00:16:30.200 and clear text over satellites. Here's what should 00:16:30.200 --> 00:16:33.340 concern you more than your personal privacy. 00:16:34.700 --> 00:16:38.559 This is a systemic vulnerability in how critical 00:16:38.559 --> 00:16:42.419 infrastructure operates. The researchers found 00:16:42.419 --> 00:16:46.600 unencrypted cellular backhaul, banking systems, 00:16:46.820 --> 00:16:50.600 utility operators. Not all of it was encrypted, 00:16:51.259 --> 00:16:54.519 but roughly half of what they intercepted was 00:16:54.519 --> 00:17:00.700 completely exposed. Imagine if someone with bad 00:17:00.700 --> 00:17:05.259 intentions, not academic researchers, gained 00:17:05.259 --> 00:17:11.640 this capability. Imagine if they spent six months 00:17:11.640 --> 00:17:15.680 intercepting cell backhaul data, identifying 00:17:15.680 --> 00:17:18.640 patterns, understanding when high -value individuals 00:17:18.640 --> 00:17:23.859 are traveling. They could know when a CEO is 00:17:23.859 --> 00:17:27.880 in a remote location. They could intercept financial 00:17:27.880 --> 00:17:32.180 transactions. They could monitor critical infrastructure 00:17:32.180 --> 00:17:39.569 operations. Again, this isn't hypothetical. Geostationary 00:17:39.569 --> 00:17:44.049 satellites are visible to anyone in a wide geographic 00:17:44.049 --> 00:17:49.230 area. The equipment is consumer grade and available 00:17:49.230 --> 00:17:53.930 on the open market. The knowledge is now public. 00:17:55.609 --> 00:18:03.009 The scary part isn't what academics prove. The 00:18:03.009 --> 00:18:07.509 scary part is that It's been possible for so 00:18:07.509 --> 00:18:12.170 long and almost nobody cared enough to fix it 00:18:12.170 --> 00:18:17.009 Here's what I think and my opinion should happen 00:18:17.009 --> 00:18:22.670 again my opinion Satellite operators should encrypt 00:18:22.670 --> 00:18:28.630 all IP traffic by default Not as some sort of 00:18:28.630 --> 00:18:33.730 optional premium feature as a baseline encryption 00:18:33.950 --> 00:18:38.230 should be included, not sold separately. And 00:18:38.230 --> 00:18:40.490 if that makes the price higher for equipment, 00:18:40.890 --> 00:18:46.069 so be it. Telecommunication carriers should mandate 00:18:46.069 --> 00:18:48.730 encryption in their service agreements with these 00:18:48.730 --> 00:18:52.849 satellite operators. They should say, if you're 00:18:52.849 --> 00:18:57.250 carrying our traffic, it has to be encrypted. 00:18:59.750 --> 00:19:06.039 And, obviously. regulatory bodies should require 00:19:06.039 --> 00:19:10.619 it. Here's what will probably happen though. 00:19:11.079 --> 00:19:14.400 Companies that get breached or face public scandal 00:19:14.400 --> 00:19:18.180 because of unencrypted satellite data will start 00:19:18.180 --> 00:19:21.059 demanding encryption from their vendors. Their 00:19:21.059 --> 00:19:25.220 vendors will respond by enabling it. Eventually, 00:19:25.920 --> 00:19:28.359 encryption will become standard because the cost 00:19:28.359 --> 00:19:32.269 of not doing so exceeds the cost of implementing 00:19:32.269 --> 00:19:38.190 it. Of course, it's going to take years. In the 00:19:38.190 --> 00:19:40.069 meantime, your data is still floating through 00:19:40.069 --> 00:19:43.410 space unencrypted, visible to anyone with the 00:19:43.410 --> 00:19:48.170 right equipment. If there's anything you should 00:19:48.170 --> 00:19:51.130 take away from this, it should be this. Some 00:19:51.130 --> 00:19:54.349 of your data is routed through satellites right 00:19:54.349 --> 00:19:58.049 now. You don't know when. You don't know which 00:19:58.049 --> 00:20:01.990 data. But if you live in or travel to remote 00:20:01.990 --> 00:20:06.450 areas, use in -flight wifi, or rely on cell and 00:20:06.450 --> 00:20:10.569 royal regions, it's happening. Not just fear. 00:20:11.470 --> 00:20:17.710 That's how infrastructure works. 2. Encryption 00:20:17.710 --> 00:20:21.849 is never guaranteed. Just because your phone 00:20:21.849 --> 00:20:25.549 feels secure doesn't mean the backhaul is secure. 00:20:26.160 --> 00:20:28.799 Just because you're using a cellular network 00:20:28.799 --> 00:20:31.839 doesn't mean your data is encrypted end -to -end. 00:20:32.339 --> 00:20:37.460 Your carrier is responsible for their own backhaul, 00:20:38.140 --> 00:20:42.420 and many carriers are not enforcing encryption. 00:20:44.940 --> 00:20:48.440 And third, you can protect yourself, but you 00:20:48.440 --> 00:20:52.059 have to do it intentionally. Use Signal or some 00:20:52.059 --> 00:20:55.339 other encrypted messenger. Use a VPN in remote 00:20:55.339 --> 00:20:59.579 areas. Check for HTTPS. Don't transmit passwords 00:20:59.579 --> 00:21:02.819 or sensitive data over unencrypted links if you 00:21:02.819 --> 00:21:09.019 can avoid it. These steps work. Do them. And 00:21:09.019 --> 00:21:12.700 if you're going to remember one thing from this 00:21:12.700 --> 00:21:17.319 episode, satellite backhaul is not a secure communications 00:21:17.319 --> 00:21:20.140 link. It's getting there, but it's going to take 00:21:20.140 --> 00:21:23.490 time. It's a radio signal broadcast that crossed 00:21:23.490 --> 00:21:29.829 hundreds of miles. Treat it as such. When researchers 00:21:29.829 --> 00:21:34.210 at UC San Diego started studying satellite security, 00:21:34.910 --> 00:21:38.490 they were asking a very simple question. How 00:21:38.490 --> 00:21:44.710 easy is it to spy on satellites? Turns out the 00:21:44.710 --> 00:21:49.390 answer is pretty easy. And it's happening right 00:21:49.390 --> 00:21:55.250 now. to millions of people. Your phone call from 00:21:55.250 --> 00:21:58.910 a remote location might be flying over satellites 00:21:58.910 --> 00:22:03.049 unencrypted. Your text messages? Same thing. 00:22:03.509 --> 00:22:07.509 Your password? Same thing. The fix isn't complicated. 00:22:08.849 --> 00:22:12.089 It's just encryption. But until the industry 00:22:12.089 --> 00:22:16.470 decides that encryption is the baseline and not 00:22:16.470 --> 00:22:20.670 a luxury, your data... is going to be public. 00:22:22.349 --> 00:22:25.710 Visit TylerWoodward .me for links to the full 00:22:25.710 --> 00:22:27.950 Don't Look Up research paper. I'm gonna put it 00:22:27.950 --> 00:22:31.809 in the description. A technical breakdown of 00:22:31.809 --> 00:22:36.130 how satellite backhauls work and a guide to choosing 00:22:36.130 --> 00:22:40.789 the right VPN if you're in any of these situations. 00:22:44.400 --> 00:22:48.599 If you want more stuff like this, follow at tylerwoodward 00:22:48.599 --> 00:22:53.700 .me on threads and blue sky. I post quick security 00:22:53.700 --> 00:22:57.619 tips, interesting new research, and my take on 00:22:57.619 --> 00:23:01.900 how the industry is reacting. And if this episode 00:23:01.900 --> 00:23:04.740 was helpful, hit subscribe, drop a like, give 00:23:04.740 --> 00:23:08.039 it a rating on your favorite podcast platform 00:23:08.039 --> 00:23:12.339 so you don't miss the next one. Thanks for hanging 00:23:12.339 --> 00:23:14.480 out with me today. I'm Tyler. This is the Tyler 00:23:14.480 --> 00:23:16.539 Woodward Project. I'll catch you next week.