Jul 20, 2026 · 23 min · 11 segments
Joe Erle interviews Sam Jadali of Melurna about how companies unknowingly leak sensitive data and how that data gets sold and used for retargeting and other nefarious puroses. Sam explains that…
Sam JadaliGuest
Joe ErleHost
And, you know, companies like Solar Turbines and Lockheed or any of these government contractors, I mean, first of all, you know, if they're working for the government, they have They shouldn't be sending information out, whether they know about it or not.

And then because they could get sued or have regulatory issues with the government, lose big contracts.

so if they you know if they breach one of your contractors i mean sure they can exfiltrate all your data right there and um absolutely you know a lot of these are state-sponsored actors you know if like you said if i could buy it for 50 a month what's stopping anyone right yeah stopping any other

oh yeah i mean every app we have installed on our phones right everything we're doing is really being tracked it's so much information what

like who who who should people get off their phone right away life 360 i don't know You know, it's the seemingly innocuous applications that you don't know about.

So typically what a data broker will do is or what they'll do is there's companies that create these SDKs.

any sort of application and so they'll go pay that software maker and they'll say hey we'll pay you 10 grand a month all you got to do is just install this snippet of code right and they don't really know what's going on they're just there to sit there and make money from their application so of course they accept it They accept it.

And then all of a sudden that application is just collecting all sorts of information.

And then the goal of us at Malerna is to go and keep tabs on this doing real-time analysis of whether it's mobile applications or websites and trying to understand okay what's actually being exfiltrated so that we can at least have some hard telemetry and evidence on where that data is going uh but it's man it's changing every day there's just there's something new going on um yeah i mean i would try to avoid applications that where their companies are obviously collecting, you know, user data.

And, you know, companies like Solar Turbines and Lockheed or any of these government contractors, I mean, first of all, you know, if they're working for the government, they have They shouldn't be sending information out, whether they know about it or not.

And then because they could get sued or have regulatory issues with the government, lose big contracts.

so if they you know if they breach one of your contractors i mean sure they can exfiltrate all your data right there and um absolutely you know a lot of these are state-sponsored actors you know if like you said if i could buy it for 50 a month what's stopping anyone right yeah stopping any other

oh yeah i mean every app we have installed on our phones right everything we're doing is really being tracked it's so much information what

like who who who should people get off their phone right away life 360 i don't know You know, it's the seemingly innocuous applications that you don't know about.

So typically what a data broker will do is or what they'll do is there's companies that create these SDKs.

any sort of application and so they'll go pay that software maker and they'll say hey we'll pay you 10 grand a month all you got to do is just install this snippet of code right and they don't really know what's going on they're just there to sit there and make money from their application so of course they accept it They accept it.

And then all of a sudden that application is just collecting all sorts of information.

And then the goal of us at Malerna is to go and keep tabs on this doing real-time analysis of whether it's mobile applications or websites and trying to understand okay what's actually being exfiltrated so that we can at least have some hard telemetry and evidence on where that data is going uh but it's man it's changing every day there's just there's something new going on um yeah i mean i would try to avoid applications that where their companies are obviously collecting, you know, user data.
The rest of this transcript — segmented and speaker-labeled, so you land on the exact moment something was said
Search every transcript — by keyword, by phrase, or by meaning, across every show Radar indexes
Trends — what is surging across podcasts, measured against its own baseline
Alerts — when a name you follow appears in a newly indexed episode
No account is needed to search Radar.