privacy - this'll make your hair stand on...
TRANSCRIPT
Hashtag #INFO9
1
Privacy - This'll Make
Your Hair Stand on EndDonna Payne, CEO of PayneGroup
Hashtag #INFO9
Privacy vs. Firm Security
Hashtag #INFO9
2
This Session is
NOT About Firm
Security
It’s about YOUR privacy
Why it Matters
Privacy and Lack of Control Over Shared Information
Inaccuracy
Not Just You But Your Family as Well
Too Much Information
Identification Theft
Stalking, Abduction, Rape and other Dangers
Hashtag #INFO9
3
Your Internet ID is
Sometimes All That
Someone Knows of You
Donna Payne
My Correct Internet Identity
CEO of PayneGroup
Social Media - LinkedIn, Twitter, Klout
Mother, Wife, Vegetarian, Photographer, Board of Directors
for Non Profit, Former Government, Former NorTel, etc.
Pictures, Videos and Links Available including my Unlisted
Home Address ad Telephone Number
Hashtag #INFO9
4
Not Me…
Inaccurate Information
How Much Can You Learn
2 Minute
Name
Address
Property Value
Date of Birth
Age
Marital Status
Education
10 – 15 Minutes
All Previous plus
Criminal Record, if any
Education
Social Security Number
Aeriel View of House
User Name, Friends and Family,
Purchasing Habits
More
Hashtag #INFO9
5
a Bit…But First – What We Put Out There
Ourselves
Let’s See Some of
This in Action
Hashtag #INFO9
6
MOST people have never set their privacy options
View and Approach YOUR Connections
Who has Viewed Your Profile
What Appears When You View Someone Else’s Profile
How Information is Shared with Third-Parties
Take a Look
Privacy Statement – If you
don’t want info shared,
don’t have a LinkedIn
Account or visit a page!
Hashtag #INFO9
7
http://lifehacker.com/5911389/twitter-is-tracking-you-
on-the-web-heres-what-you-can-do-to-stop-it
Tracks friends, followers, and even where you go
on the web once you leave Twitter.
Take a Look
Tailored Tweets - Trends
Hashtag #INFO9
8
Targeted and Opt Outs
Targeted Ads Program
Hashtag #INFO9
9
Sells and shares information
Likes are tracked, whether you click them or not
Three years from now, people are
going to be sharing 8 to 10 times
as much stuff. We’d better be
there, because if we’re not, some
other service will be.
I have over 4000 emails, pictures,
addresses, etc. People just submitted it. I
don’t know why they “trust me” …
Facebook CEO Mark Zuckerberg
Take a Look
Privacy Settings and Tools
Limit who can see your FUTURE posts and status updates
Review your tagged activities which can include songs that you listened to
Limit who can view past posts (friends only…)
Who can look you up by your email address or look you up by name to access Timeline
Should you be included in search engine queries?
Who can post to your timeline (Friends, No One)
Review Posts friends tag you in where nothing appears in timeline unless you ok it.
Review what other people see on your timeline
Who can see posts you've been tagged in
Who can see what others post on your timeline
Review tags add to your own posts before the tags appear on Facebook
When you're tagged in a post, who do you want to add to the audience
Who sees tag suggestions when photos that look like you are uploaded (FACE
RECOGNITION)
Hashtag #INFO9
10
Look up Social Security
Numbers
http://www.instantcheckmate.com/searc
h/success
Data Brokers
Selling “Pimping Out” Your Information at Sometimes Surprising Low Cost
More than 250 of them…Get List from Donna
Some you can remove yourself from, others you cannot unless law enforcement or victim of some crimes.
You won’t believe it unless you see it so here goes.
Hashtag #INFO9
11
Where Does This Information
Come From?
Public Records
Social Media
Search Engines
Driver’s License Info from about 2 Dozen States!
Includes license number, issue date and expiration date.
You might also find out the person's gender, birth date,
height, weight, hair color, etc.
Spokeo
Data collector and broker
Collects OUR information from telephone directories, social
networks, photo albums, marketing surveys, mailing lists,
government censuses, real estate listings, business websites.
May include demographics, social profiles, and estimated
property and wealth values.
Includes User Name search which scans and searches through
online locations for similar names. These include social
networks, blogs, photo albums, dating sites, music networks,
video sites, ecommerce stores, and other web services.
Hashtag #INFO9
12
Commerce at Spokeo
What are you worth?
No charge for down to street level information.
$4.95 per month or $35.40 for a year subscription for more
information including house number.
Let’s See What We Can Find
Out on Spokeo
Hashtag #INFO9
13
No Control
Over Contents
or Access
My doctor was stalked by
former patient
Children can be more
easily lured with
personal information
Violent Criminals
Why it Matters
Articles of Interest
http://www.nytimes.com/2013/05/26/technology/for-consumers-an-open-data-
society-is-a-misnomer.html?_r=0
http://jamiedsmith.wordpress.com/2012/06/03/identity-trust-and-a-hierarchy-of-
sharing/
http://www.entrepreneur.com/article/226680
Hashtag #INFO9
14
Cameras are
EverywhereSmile
At Concerts, Sporting Events,
Walking Down the Strip
Hashtag #INFO9
15
Facial Recognition
Take picture of something or someone and use app to
find more information
Databases filled with biometrics
A Few Examples - On Camera
http://www.u2.com/gigapixelfancam/110604/
http://www.steelers.com/fancam/110918/
http://rangers.nhl.com/v2/ext/fancam/index.htm
http://info.kingcounty.gov/transportation/kcdot/Roads/Tr
afficCameras/allcameras/
37 Cameras on Las Vegas Strip -
http://www.lasvegassun.com/news/2013/jun/04/strip-
cameras-security-rime-fighting-new-reason-sm/
Hashtag #INFO9
16
Mobile and GPS
Effective January 1st, 2012, all cell
phones in the US must include GPS
technology. By default, every
picture that you take (and may
decide to share) includes your
longitude and latitude for each
specific picture. To see if you have
photos saved on your phone with
GPS, click Photos, Places and zoom
in on various pictures.
Secure for Kids
Turn off Location Services for Pictures and Social Media
Set Restriction Limits (with a password)
Disable some apps (such as Facetime) and set password
Set Location for finding device. You can use to track
child for security.
Hashtag #INFO9
17
Apple Clicking Sound
Apple takes a screen shot of every transition screen and
it gets backed up whenever you synch (important for
eDiscovery). It’s at
c:\users\yourname\appdata\roaming\apple
computer\mobilesync\backup
IP Address
Check your IP address and see where it says
you are. To check this, go to
Whatismyip.com. The IP Address for your
computer will appear.
Copy it and paste it into a site such as
www.maxmind.com to see where it thinks
you are. Some of the assigned IP addresses
are surprisingly accurate while others use a
router and don’t show your actual location.
Hashtag #INFO9
18
More on IP
DNSStuff has a professional version that shows detailed
info)
How Accurate?
Hashtag #INFO9
19
Browser WarsIf you aren’t being charged for the product or service – you are the product.
5 Feet Apart and Different
Results
Donna’s Sue’s
Hashtag #INFO9
20
Medical Conditions Search
http://www.nytimes.com/2013/05/17/business/a-data-
trove-now-guides-drug-company-pitches.html
Are They Tailored?
Eric Schmidt, Google says, “It will be very hard for people
to watch or consume something that has not in some sense
been tailored for them.”
EXPERIMENT and RESULT
You don’t decide what gets in. Internet is showing us what
they think we need to see and not necessarily what we
want to see.
Hashtag #INFO9
21
Some of What is Tracked
Search Engine Results Page
Country (code)
Query Including
AutoFill
Suggestions
LanguageEvery Page Visited
from Results Page
Friends
Email Address
Patternshttp://moz.com/blog/the-evil-side-of-
google-exploring-googles-user-data-
collection
What Does In Private Mean?
Hashtag #INFO9
22
Yahoo
http://www.abine.com/blog/2013/yahoo-now-scans-
through-your-emails-and-chats-after-tos-update/
Privacy Browserswww.duckduckgo.com
Ixquick - https://www.ixquick.com/
Hashtag #INFO9
23
Entering a New Era
Google Glass – Very cool but am
worried about privacy ramifications.
No facial recognition apps allowed for
privacy reasons
Google bans porn apps BEFORE 'Tits and
Glass' app launches
http://wp.me/p1re2-399V
Cell and Computer Spyware
from Brickhouse Security
Brickhouse Security -
http://www.brickhousesecurity.com/ sells tools such as
Spy Stick to spy on computers, iPhones and more. All for
around $100-150.
Advertises in Airline magazines!
Hashtag #INFO9
24
Recommendations
What You
Can Do Now
to Ensure
Greater
Privacy and
To Protect
Yourself
More Information
IAPP – International Association of Privacy Professionals
Great source of information
Certifications and Membership Available
Conferences
pii and Other Conferences for up-to-date information
@PrivacyMemes, @PrivacyCamp, @privacyforum,
@privacyint, @DailyDashboard, @Computerworld,
@Donna_Payne
Hashtag #INFO9
25
Questions and Answers
Hashtag #INFO9
For additional questions, contact me at
Booth 601-603
Thank you!