1. CS44 – Nick Ragouzis – 2007 Privacy – a study in assiduity –

2. CS44 – Nick Ragouzis – 2007 Assiduous adj. 1: marked by careful unremitting attention … … or persistent application Assiduity n. 1: the quality or state of being assiduous : DILIGENCE 2: persistent personal attention

3. CS44 – Nick Ragouzis – 2007 Asymmetry in Value and Options

4. CS44 – Nick Ragouzis – 2007 What does this suggest to you?

5. CS44 – Nick Ragouzis – 2007 Privacy for Chocolate?

6. CS44 – Nick Ragouzis – 2007 Source: IdentityEconomics.com

7. CS44 – Nick Ragouzis – 2007 Source: zillow.com Expectation of privacy?

8. CS44 – Nick Ragouzis – 2007 Key to Vigilance: “Why?”

9. CS44 – Nick Ragouzis – 2007 Passwords If you’ve got to go … online: The best privacy protection you’ve got Until you get something better

10. CS44 – Nick Ragouzis – 2007 Password Savvy Card pins are different: Remember and destroy* Don’t worry: write it down, keep it with you Long password: 12 glyphs Something you will remember: not tough for you Follow rule or its variations, e.g.: First and last third: Caps Middle third: Numbers and punctuation Avoid complete dictionary words; personal details Vary passwords across systems, please Don’t be complacent: Naked userid and password are just not smart privacy and security policy

11. CS44 – Nick Ragouzis – 2007 Challenge Questions Working For You

12. CS44 – Nick Ragouzis – 2007 Distributed Identity Systems are Savvy

13. CS44 – Nick Ragouzis – 2007 Wireless Networks Do you really need to hook up right now?

14. CS44 – Nick Ragouzis – 2007 Hygienic Wireless Replace your home WiFi with WPA2 units Set it up properly! Follow hygienic wired practices: Separate from your internal wired net Move to wired for important data Use savvy password practices Secure *before* identifier exchange Encrypted data exchange Secure identifiers

15. CS44 – Nick Ragouzis – 2007 Free Wireless & Kiosks Security before Convenience Follow savvy practices Clear history Delete cookies: before and after Do not insert unencrypted media In any case: Avoid financial transactions Keystroke loggers, etc. Consider: Anonymous secure proxy browsing

16. CS44 – Nick Ragouzis – 2007 Privacy is not Free Exercising choice Controlling made decisions Rewarding those who honor privacy Punish those who don’t

17. CS44 – Nick Ragouzis – 2007 Choosing Privacy Read the policy, know what’s right, or not Specific, articulated purpose Specific data Specific, limited, availability of data Understand their ‘data sharing’ partnerships No pass-through of web-bugs/beacons Aggregate data only Limited time; EU: 12 months

18. CS44 – Nick Ragouzis – 2007 Recognize Trouble We may collect information that can identify you when using our website or in some other manner (think partnership with free wireless, e.g.,) or from our business partners (any one who pays us, e.g.,) or from third parties (or just from anywhere else). We may combine the personal information that we receive from different sources. Your choices: suck it up, or go away. Editorialized slightly from: evite.com/pages/custservice/privacy.jsp, October, 2007

19. CS44 – Nick Ragouzis – 2007 Use only Session Cookies

20. CS44 – Nick Ragouzis – 2007 evite.com/webbug.img?u=wetrackyou Install and learn to use AdBlock Single-pixel transparent non-linking gifs Personalized beacons attached to banners

21. CS44 – Nick Ragouzis – 2007 evite.com/webbug.img?u=wetrackyou Install and learn to use AdBlock

22. CS44 – Nick Ragouzis – 2007 Know your Counterparty This requires special attention!

23. CS44 – Nick Ragouzis – 2007 Can you see the problem?

24. CS44 – Nick Ragouzis – 2007 Attend to Details

25. CS44 – Nick Ragouzis – 2007 Avoiding the Hook Sender: … a m e r c a … Look closely at the sender If necessary (for emails purporting to be from high- value services), look inside the email header Click-here links: Always look closely at the URL Preferred: only use book-marked URLs to financial institutions or private data collections

26. CS44 – Nick Ragouzis – 2007 Google Safe Browsing for Firefox

27. CS44 – Nick Ragouzis – 2007 New IE Address Bar Indicators

28. CS44 – Nick Ragouzis – 2007 Using Encrypted Services

29. CS44 – Nick Ragouzis – 2007 Read the Source …

30. CS44 – Nick Ragouzis – 2007

31. Discussion

32. CS44 – Nick Ragouzis – 2007 Privacy Resources eff.org idcommons.net cdt.org