She Said Privacy/He Said Security

The episode delivers a genuine but uneven payload: specific FTC case mechanics (Vizio, GoodRx pixel tracking, Epic Games defaults remedy, GM driver behavior) are genuinely informative, but large stretches of the runtime are consumed by intro theatre, clothing banter, a kayak anecdote, and generic takeaways like 'limit data retention.' The substantive segments are real but not densely packed per minute.

“Vizio, ah, had to delete all four years of TV viewing history so they couldn't benefit further from that conduct”

“your routers have a unique identifier. And there's a technique called WI fi triangulation where your phone can understand how far certain number of unique routers are from your device and that can be sometimes more precise than GPS data”

The episode mostly recaps publicly known FTC enforcement actions rather than offering first-principles analysis or contrarian takes; frameworks like 'data minimization,' 'use purpose limitations,' and 'sensitive categories' are standard privacy-compliance vocabulary. The WiFi triangulation point and the observation that Texas AGs are re-litigating Vizio-era conduct a decade later are the only meaningfully fresh angles.

“the theory from Dan Solov and Woody Herzog and others is that that creates a common law of privacy that informs other companies”

“those all require I think heightened care. Um, and the FTC has made that quite clear”

Aaron Alva is a genuine practitioner - 10 years as a lead FTC technologist directly involved in landmark enforcement actions including the $5B Facebook matter - not a recycled thought-leader. He brings authentic insider perspective on how remedies are actually drafted and negotiated, which is rare for this topic.

“I was the sole technologist on the Facebook privacy matter after Cambridge Analytica, that resulted in the $5 billion penalty”

“I spent a lot of time alongside case teams in the FTC's location data orders, precisely defining location data, what it means, what is included, what's not included”

The episode names real cases with real figures (Vizio 2017, $5B Facebook penalty, $500M Epic Games, GoodRx, Avast, OkCupid, Market X Mode, Gravy Analytics, Mobwalla, GM) and includes a technically specific point on WiFi triangulation, which is above average for a podcast discussion. The 'lessons' and 'takeaways' segments, however, retreat into generic advice without anchoring to metrics, timelines, or outcomes.

“Goodrx. For instance putting in your prescription that you want a coupon for and putting in the amount and the drug dosage and where you want the prescription served. But what Goodrx had was a Facebook pixel on their website”

“there are some subtle differences in the definition of location data even across the four current FTC orders, in Market X Mode, Gravy analytics and Mobwalla”

The hosts ask broad, open-ended prompts ('what should companies take away?') that let the guest deliver prepared content rather than probing for depth; there is almost no follow-up, pushback, or productive disagreement. The kayak-and-police-boat tangent eats several minutes of runtime, and Justin's most pointed observation ('$5 billion is just the cost of doing business') is left undeveloped rather than pressed.

“So, Aaron, what do you like to do for fun when you're not doing all of this technologist stuff?”

“But the fines don't matter. Uh, don't seem to deter anyone”