![Tim Apple Steps Down. Microsoft Can't Quit Recall - BHIS - Talkin' Bout [infosec] News 2026-04-20](https://img.youtube.com/vi/AzmyHLoka0o/maxresdefault.jpg)
Tim Apple Steps Down. Microsoft Can't Quit Recall - BHIS - Talkin' Bout [infosec] News 2026-04-20
Source: YouTube · Black Hills Information Security · published Apr 20, 2026 · 1:06:36
The speaker discusses the potential risks and opportunities associated with collecting user data through browser extensions, highlighting how aggregated data can become valuable at scale.
Key Takeaways:
• The conversation begins with an assessment of data sensitivity, noting that while individual data points (like those from Grammarly) may seem harmless, their value increases significantly when aggregated 0:11.
• At scale, this aggregated data can be monetized or used for targeted insights, such as identifying which password managers or VPNs users have installed 0:23.
• The speaker illustrates this with hypothetical scenarios, such as revealing that a specific user uses both 1Password and Bitwarden, or that 70% of users have a VPN app, demonstrating the depth of profiling possible 0:30.
• This level of detailed user profiling allows for precise marketing or security assessments, turning seemingly innocent browser extension data into a powerful asset 0:36.
The discussion underscores the ethical and security implications of browser extensions, showing how minor data points can combine to create comprehensive user profiles with significant commercial or security relevance.
Sources:
Generate CPE Credits
Generate a professional CPE document from this video's transcript.
Estimated credit: 1 CPE hours
Estimate uses the video runtime (1 hour ≈ 1 CPE, rounded to the nearest 0.5, minimum 0.5, maximum 2.0). The final amount can be lower after review, never higher.
Topic: Cybersecurity. Commonly maps to: Security and Risk Management, Security Operations. Exact CISSP domains are assigned during generation.
Free account. One generation at a time, with a daily limit.
CPEBuddy is independent and not affiliated with or endorsed by ISC2, ISACA, or any certification body. Exports are formatted for common CPE submissions; acceptance is at your certification body's discretion.
Transcript Preview
First 800 characters of the transcript
Which one? The browser one? One? Yeah, just about what I can get from a browser. Yeah, it's a lot, but it's also not. You know what I It's like it's >> Like on the I don't know. It's one of those On some level, it's not that sensitive that you're using the Grammarly extension or whatever. But at scale At scale That's what I was going to say. Yeah, yeah, yeah. As soon as you get like the big enough then then you can sell it. Right. You can sell it. You can say, "Oh, I can tell you exactly who what other like, you know, one password is and oh, by the way, you also use your You also use Bitwarden or like, "Did you know 70% of your users also have a VPN app?" Or I don't know, something like that. >> [laughter] >> You know, like, I don't know. Something There's so many insights you could gain, …