Zero-Click: When Your OS Opens Files For You
A malicious WebP image doesn't need you to open it. It just needs your operating system to glance at it — to generate a thumbnail, index it, or render a preview. That's the zero-click problem, and it's structural, not hypothetical. This episode walks through what actually happens between "file downloaded" and "file executed," why the Linux assumption that root escalation requires authentication is a reasonable default but a terrible guarantee, and how to think about which file types are dangerous on which platforms. Then we get practical: Firejail, sandboxes, and the middle-ground tools that…
The skinny
The skinny isn't ready yet — notes appear once the transcript is processed.