- Cyber Safety
- Posts
- Your Security Questions Are Probably Public Information
Your Security Questions Are Probably Public Information
In partnership with
How Jennifer Aniston’s LolaVie brand grew sales 40% with CTV ads
For its first CTV campaign, Jennifer Aniston’s DTC haircare brand LolaVie had a few non-negotiables. The campaign had to be simple. It had to demonstrate measurable impact. And it had to be full-funnel.
LolaVie used Roku Ads Manager to test and optimize creatives — reaching millions of potential customers at all stages of their purchase journeys. Roku Ads Manager helped the brand convey LolaVie’s playful voice while helping drive omnichannel sales across both ecommerce and retail touchpoints.
The campaign included an Action Ad overlay that let viewers shop directly from their TVs by clicking OK on their Roku remote. This guided them to the website to buy LolaVie products.
Discover how Roku Ads Manager helped LolaVie drive big sales and customer growth with self-serve TV ads.
The DTC beauty category is crowded. To break through, Jennifer Aniston’s brand LolaVie, worked with Roku Ads Manager to easily set up, test, and optimize CTV ad creatives. The campaign helped drive a big lift in sales and customer growth, helping LolaVie break through in the crowded beauty category.
Personal Information Isn’t Necessarily Private
Pet names, birthdays, hometowns, schools, relatives, and favorite teams may feel personal — but much of this information can be discovered through social media, public records, or previous data breaches.
Attackers Build Profiles Before They Attack
Social engineering often starts with research. A few minutes across LinkedIn, Facebook, Instagram, company websites, and search results can provide enough context to make impersonation significantly more convincing.
Some teams never seem to stop moving. They're on Attio, the agentic CRM.
It’s your always-on revenue engine: agents and workflows build pipeline, chase every buying signal, and move deals forward alongside your team.
Teams like Parallel, Turbopuffer, and Wordsmith build on Attio. Are you one of them?
Oversharing Helps Attackers Sound Legitimate
Conference announcements, vacation posts, new hires, organizational charts, and executive updates can reveal who works with whom, who is traveling, and who might approve sensitive requests.
AI Makes Impersonation Easier to Scale
Publicly available information can be quickly transformed into personalized phishing messages, realistic scripts, and communications designed to match a target’s professional context.
Security Awareness Should Include Digital Footprints
Employees should understand that seemingly harmless public information can become useful intelligence when combined with other data.
Assume Public Information Will Be Used Against Authentication
Avoid knowledge-based security questions where possible, minimize unnecessary public exposure, strengthen recovery processes, and verify sensitive requests through independent channels. If the answer can be researched, it shouldn’t be treated like a password.
Is Your Training Data Actually Model-Ready?
DNSMOS gives you a score, not whether that data fits your model. Treat it as pass/fail and you'll train on audio that looks clean but hurts performance, while tossing good data for no reason. Voices' CTO DJ Jalali just published a white paper with the four-step framework the team uses to set internal thresholds instead.