Leah Culver of Breaker and Tom Sparks of YC Answer Your Questions About Security and Podcasting

Tom says device security depends on both good technology and legal protections, and recommends using a passcode and biometric authentication. Leah describes using her passcode as a fallback, since restarting an iPhone or repeated failed biometric attempts require it. For Breaker, she says sensitive iOS data belongs in Keychain rather than files such as NSUserDefaults, and companies should explain how they handle government data requests.

Leah and Tom describe authentication as a balance between convenience and security, with factors based on what you know, what you have, and what you are. They point out that passwords and devices can be changed, while a compromised fingerprint is harder to replace. Tom recommends password managers and cautions against SMS or phone calls as authentication factors, citing phone number porting attacks.

Tom says YC uses strong passwords, encryption, VPNs, and code reviews, and advises startups to use established authentication standards and security tools instead of inventing their own. Leah agrees, drawing on her work on an early version of OAuth, and says shared standards let large teams check for vulnerabilities. She also highlights product protections such as alerts for new device logins and password changes.

Leah says Breaker helps people find podcasts through social listening activity and popular episodes, and argues that a compelling episode can hook listeners more readily than a show recommendation. She wants podcasting to grow into a destination for high quality storytelling, while noting the industry’s then-estimated $250 million in annual ad revenue. On startup lessons, she stresses careful spending, asking for help, listening to users, and building from their feedback.

Host Craig says interviews need energetic hosting, clear transitions, and editing that keeps listeners engaged; Leah recommends exploring music and audio storytelling, and Craig suggests transcripts to make episodes searchable. For learning security, Tom points to blogs, Hacker News, capture-the-flag exercises, and inexpensive programmable boards, while Leah says mentorship is valuable. They close with Leah’s advice to master familiar tools instead of chasing every new language or framework.