Hashtag #INFO9
Privacy - This'll Make
Your Hair Stand on End
Donna Payne, CEO of PayneGroup
Hashtag #INFO9
Privacy vs. Firm Security
1
Hashtag #INFO9
This Session is
NOT About Firm
Security
It’s about
YOUR
privacy
Why it Matters
Privacy and Lack of Control Over Shared Information
Inaccuracy
Not Just You But Your Family as Well
Too Much Information
Identification Theft
Stalking, Abduction, Rape and other Dangers
2
Hashtag #INFO9
Your Internet ID is
Sometimes All That
Someone Knows of You
Donna Payne
My Correct Internet Identity
CEO of PayneGroup
Social Media - LinkedIn, Twitter, Klout
Mother, Wife, Vegetarian, Photographer, Board of Directors
for Non Profit, Former Government, Former NorTel, etc.
Pictures, Videos and Links Available including my Unlisted
Home Address ad Telephone Number
3
Hashtag #INFO9
Not Me…
Inaccurate Information
How Much Can You Learn
2 Minute
10 – 15 Minutes
Name
All Previous plus
Address
Criminal Record, if any
Property Value
Education
Date of Birth
Social Security Number
Age
Aeriel View of House
Marital Status
User Name, Friends and Family,
Purchasing Habits
Education
More
4
Hashtag #INFO9
More on This In
a Bit…
But First – What We Put Out There
Ourselves
Let’s See Some of
This in Action
5
Hashtag #INFO9
LinkedIn
MOST people have never set their privacy options
View and Approach YOUR Connections
Who has Viewed Your Profile
What Appears When You View Someone Else’s Profile
How Information is Shared with Third-Parties
Take a Look
LinkedIn
Privacy Statement – If you
don’t want info shared,
don’t have a LinkedIn
Account or visit a page!
6
Hashtag #INFO9
Twitter
Tracks friends, followers, and even where you go
on the web once you leave Twitter.
http://lifehacker.com/5911389/twitter-is-tracking-youon-the-web-heres-what-you-can-do-to-stop-it
Take a Look
Tailored Tweets - Trends
7
Hashtag #INFO9
Targeted and Opt Outs
Targeted Ads Program
8
Hashtag #INFO9
Facebook
Sells and shares information
Likes are tracked, whether you click them or not
Three years from now, people are
going to be sharing 8 to 10 times
as much stuff. We’d better be
there, because if we’re not, some
other service will be.
I have over 4000 emails, pictures,
addresses, etc. People just submitted it. I
don’t know why they “trust me” …
Facebook CEO Mark Zuckerberg
Take a Look
Privacy Settings and Tools
Limit who can see your FUTURE posts and status updates
Review your tagged activities which can include songs that you listened to
Limit who can view past posts (friends only…)
Who can look you up by your email address or look you up by name to access Timeline
Should you be included in search engine queries?
Who can post to your timeline (Friends, No One)
Review Posts friends tag you in where nothing appears in timeline unless you ok it.
Review what other people see on your timeline
Who can see posts you've been tagged in
Who can see what others post on your timeline
Review tags add to your own posts before the tags appear on Facebook
When you're tagged in a post, who do you want to add to the audience
Who sees tag suggestions when photos that look like you are uploaded (FACE
RECOGNITION)
9
Hashtag #INFO9
Look up Social Security
Numbers
http://www.instantcheckmate.com/searc
h/success
Selling “Pimping
Out” Your
Information at
Sometimes
Surprising Low Cost
Data Brokers
More than 250 of
them…Get List
from Donna
Some you can
remove yourself
from, others you
cannot unless law
enforcement or
victim of some
crimes.
You won’t believe
it unless you see
it so here goes.
10
Hashtag #INFO9
Where Does This Information
Come From?
Public Records
Social Media
Search Engines
Driver’s License Info from about 2 Dozen States!
Includes license number, issue date and expiration date.
You might also find out the person's gender, birth date,
height, weight, hair color, etc.
Spokeo
Data collector and broker
Collects OUR information from telephone directories, social
networks, photo albums, marketing surveys, mailing lists,
government censuses, real estate listings, business websites.
May include demographics, social profiles, and estimated
property and wealth values.
Includes User Name search which scans and searches through
online locations for similar names. These include social
networks, blogs, photo albums, dating sites, music networks,
video sites, ecommerce stores, and other web services.
11
Hashtag #INFO9
Commerce at Spokeo
What are you worth?
No charge for down to street level information.
$4.95 per month or $35.40 for a year subscription for more
information including house number.
Let’s See What We Can Find
Out on Spokeo
12
Hashtag #INFO9
Why it Matters
No Control
Over Contents
or Access
My doctor was stalked by
former patient
Children can be more
easily lured with
personal information
Violent Criminals
Articles of Interest
http://www.nytimes.com/2013/05/26/technology/for-consumers-an-open-datasociety-is-a-misnomer.html?_r=0
http://jamiedsmith.wordpress.com/2012/06/03/identity-trust-and-a-hierarchy-ofsharing/
http://www.entrepreneur.com/article/226680
13
Hashtag #INFO9
Cameras are
Everywhere
Smile
At Concerts, Sporting Events,
Walking Down the Strip
14
Hashtag #INFO9
Facial Recognition
Take picture of something or someone and use app to
find more information
Databases filled with biometrics
A Few Examples - On Camera
http://www.u2.com/gigapixelfancam/110604/
http://www.steelers.com/fancam/110918/
http://rangers.nhl.com/v2/ext/fancam/index.htm
http://info.kingcounty.gov/transportation/kcdot/Roads/Tr
afficCameras/allcameras/
37 Cameras on Las Vegas Strip http://www.lasvegassun.com/news/2013/jun/04/stripcameras-security-rime-fighting-new-reason-sm/
15
Hashtag #INFO9
Mobile and GPS
Effective January 1st, 2012, all cell
phones in the US must include GPS
technology. By default, every
picture that you take (and may
decide to share) includes your
longitude and latitude for each
specific picture. To see if you have
photos saved on your phone with
GPS, click Photos, Places and zoom
in on various pictures.
Secure for Kids
Turn off Location Services for Pictures and Social Media
Set Restriction Limits (with a password)
Disable some apps (such as Facetime) and set password
Set Location for finding device. You can use to track
child for security.
16
Hashtag #INFO9
Apple Clicking Sound
Apple takes a screen shot of every transition screen and
it gets backed up whenever you synch (important for
eDiscovery). It’s at
c:\users\yourname\appdata\roaming\apple
computer\mobilesync\backup
IP Address
Check your IP address and see where it says
you are. To check this, go to
Whatismyip.com. The IP Address for your
computer will appear.
Copy it and paste it into a site such as
www.maxmind.com to see where it thinks
you are. Some of the assigned IP addresses
are surprisingly accurate while others use a
router and don’t show your actual location.
17
Hashtag #INFO9
More on IP
DNSStuff has a professional version that shows detailed
info)
How Accurate?
18
Hashtag #INFO9
Browser Wars
If you aren’t being charged for the product or service – you are the product.
5 Feet Apart and Different
Results
Donna’s
Sue’s
19
Hashtag #INFO9
Medical Conditions Search
http://www.nytimes.com/2013/05/17/business/a-datatrove-now-guides-drug-company-pitches.html
Are They Tailored?
Eric Schmidt, Google says, “It will be very hard for people
to watch or consume something that has not in some sense
been tailored for them.”
EXPERIMENT and RESULT
You don’t decide what gets in. Internet is showing us what
they think we need to see and not necessarily what we
want to see.
20
Hashtag #INFO9
Some of What is Tracked
Friends
Search Engine Results Page
Email Address
Country (code)
Every Page Visited
from Results Page
Query Including
AutoFill
Suggestions
Language
http://moz.com/blog/the-evil-side-ofgoogle-exploring-googles-user-datacollection
Patterns
What Does In Private Mean?
21
Hashtag #INFO9
Yahoo
http://www.abine.com/blog/2013/yahoo-now-scansthrough-your-emails-and-chats-after-tos-update/
Privacy Browsers
www.duckduckgo.com
Ixquick - https://www.ixquick.com/
22
Hashtag #INFO9
Entering a New Era
Google Glass – Very cool but am
worried about privacy ramifications.
No facial recognition apps allowed for
privacy reasons
Google bans porn apps BEFORE 'Tits and
Glass' app launches
http://wp.me/p1re2-399V
Cell and Computer Spyware
from Brickhouse Security
Brickhouse Security http://www.brickhousesecurity.com/ sells tools such as
Spy Stick to spy on computers, iPhones and more. All for
around $100-150.
Advertises in Airline magazines!
23
Hashtag #INFO9
Recommendations
What You
Can Do Now
to Ensure
Greater
Privacy and
To Protect
Yourself
More Information
IAPP – International Association of Privacy Professionals
Great source of information
Certifications and Membership Available
Conferences
pii and Other Conferences for up-to-date information
Twitter
@PrivacyMemes, @PrivacyCamp, @privacyforum,
@privacyint, @DailyDashboard, @Computerworld,
@Donna_Payne
24
Hashtag #INFO9
Questions and Answers
Hashtag #INFO9
For additional questions, contact me at
DonnaPayne@thepaynegroup.com
Booth 601-603
Thank you!
25