other
- Location
formats.md:58- Finding
Pre-Show Recording Without Explicit Informed Consent
- Content
View full analysis
Vulnerability Details
File Location:
formats.md, line 58
Vulnerability Type: Privacy and recording-consent violation
Risk Level: MediumVulnerable Content
markdown ### Making Guests Shine - Let them tell stories fully (don't interrupt climaxes) - Set up their expertise before they speak - Use their words back to them ("You mentioned...") - End with a question that lets them be inspiring - **Silence after answers** — guests fill silence with deeper insights - **"Tell me more about that"** — better than next question when interesting - **Record pre-show chat** — often the best material before "we're recording"Technical Analysis
The instruction recommends recording a guest's pre-show conversation before the guest believes formal recording has begun. It does not require advance disclosure, explicit consent, a visible recording indicator, or separate approval before the captured material is published.
A participant may reasonably regard pre-show discussion as private and may disclose personal information, confidential business details, credentials, legal matters, or other sensitive content that they would not disclose during an announced recording. The issue is a consent and privacy risk rather than unauthorized system access or privilege escalation, so it falls outside categories T01–T09.
Attack Path
- A podcast producer or agent follows the instruction and starts recording before announcing the formal session.
- The guest believes the pre-show discussion is private and speaks without knowledge that audio is being captured.
- The recording captures private, personal, or commercially sensitive statements.
- The producer uploads the recording to editing, transcription, cloud-storage, or AI-processing services.
- Pre-show material is incorporated into an episode, transcript, promotional clip, or internal archive without separate approval.
- The guest's statements or personal data are exposed beyond the context in which ...[truncated 650 chars]
- Remediation
View remediation
Remediation Suggestions
Replace the instruction with consent-centered guidance, for example:
markdown - **Pre-show recording:** Record pre-show discussion only after every participant has given explicit, informed consent. Clearly announce when recording begins, provide a visible or audible recording indicator, and obtain separate approval before publishing any pre-show material.Apply the following safeguards:
- Obtain explicit consent from every participant before activating any recording device or service.
- State whether pre-show audio will be retained, transcribed, uploaded to third-party services, or considered for publication.
- Use a clear audible announcement or visible recording indicator when capture begins.
- Treat pre-show material as non-publishable by default.
- Obtain separate, documented approval before including pre-show content in an episode, transcript, clip, or promotional asset.
- Provide a process through which participants can request deletion of pre-show recordings.
- Restrict access to recordings and define retention and deletion periods.
- Verify and follow all recording-consent and privacy laws applicable to the producer and each participant.