# data[].attributes.attachment_link.title
Internet privacy legislation | IN 60 SECONDS

# data[].attributes.attachment_link.title
These tools can protect your online privacy

# data[].attributes.attachment_link.title
ONLINE PRIVACY: IT DOESN’T EXIST: Privacy and what we can do about it | Denelle Dixon | TEDxMarin

# data[].attributes.attachment_link.title
Internet Privacy Laws Revealed - How Your Personal Information is Protected Online

# data[].attributes.attachment_link.description
Find out how Internet privacy laws help protect your personal information online and what data protection measures you can use against cyber threats.

# data[].attributes.attachment_link.readable_text
Posted: Jul 01 1995 | Revised: Jan 16 2019

1. Online Tracking
2. Mobile Apps
3. Privacy Policies
4. Accessing the Internet
5. Passwords
6. Wireless Networks and Wi-Fi
1. Online Tracking
Almost every major website you visit tracks your online activity. Tracking technology can follow you from site to site, track and compile your activity, and compile all of this into a database. Generally, tracking utilizes a numerical identifier, rather than your real name. This information is used to personalize the content that you see online.

The good news is that almost all browsers give you some control over how much information is revealed, kept and stored. Generally, you can change the settings to restrict cookies and enhance your privacy. Most major browsers now offer a "Private Browsing" tool to increase your privacy. However, researchers have found that "Private Browsing" may fail to purge all traces of online activity.

Most browsers also provide a Do Not Track (DNT) setting. DNT is a way to keep your online activity from being followed across the Internet by advertisers, analytics companies and social media sites. When you turn on the DNT setting in your browser, your browser sends a special header to websites requesting that don't want your activity tracked. Unfortunately, honoring the DNT setting is voluntary. Individual websites are not required to respect it. While a few websites will honor DNT, most websites will ignore your preference.

Some of the tools that are used to track you online include cookies, flash cookies, and fingerprinting.

Cookies. When you visit different websites, many of the sites deposit data about your visit, called "cookies," on your hard drive. Cookies are pieces of information sent by a web server to a user's browser. Cookies may include information such as login or registration identification, user preferences, online "shopping cart" information, and so on. The browser saves the information, and sends it back to the web server whenever the browser returns to the website. The web server may use the cookie to customize the display it sends to the user, or it may keep track of the different pages within the site that the user accesses.

For example, if you use the internet to complete the registration card for a product, such as a computer or television, you generally provide your name and address, which then may be stored in a cookie. Legitimate websites use cookies to make special offers to returning users and to track the results of their advertising. These cookies are called first-party cookies. However, there are some cookies, called third-party cookies, which communicate data about you to an advertising clearinghouse which in turn shares that data with other online marketers. These third-party cookies include "tracking cookies" which use your online history to deliver other ads. Your browser and some software products enable you to detect and delete cookies, including third-party cookies.

Disconnect is a browser extension that stops major third parties from tracking the webpages you go to. Every time you visit a site, Disconnect automatically detects when your browser tries to make a connection to anything other than the site you are visiting. You can also opt-out of the sharing of cookie data with members of the Network Advertising Initiative.

Flash cookies. Many websites utilize a type of cookie called a "flash cookie" (sometimes also called a "supercookie") that is more persistent than a regular cookie. Normal procedures for erasing standard cookies, clearing history, erasing the cache, or choosing a delete private data option within the browser will not affect flash cookies. Flash cookies thus may persist despite user efforts to delete all cookies. They cannot be deleted by any commercially available anti-spyware or adware removal program. However, if you use the Firefox browser, there is an add-on called Better Privacy that can assist in deleting flash cookies.

Fingerprinting. A device fingerprint (or machine fingerprint) is a summary of the software and hardware settings collected from a computer or other device. Each device has a different clock setting, fonts, software and other characteristics that make it unique. When you go online, your device broadcasts these details, which can can be collected and pieced together to form a unique "fingerprint" for that particular device. That fingerprint can then be assigned an identifying number, and used for similar purposes as a cookie.

Fingerprinting is rapidly replacing cookies as a means of tracking. Tracking companies are embracing fingerprinting because it is tougher to block than cookies. Cookies are subject to deletion and expiration, and are rendered useless if a user decides to switch to a new browser. Some browsers block third-party cookies by default and certain browser add-ons enable blocking or removal of cookies.

Unlike cookies and flash cookies, fingerprints leave no evidence on a user's computer. Therefore, it is impossible for you to know when you are being tracked by fingerprinting.

You can test your browser to see how unique it is based on the information that it will share with the sites that you visit. Panopticlick will give you a uniqueness score, letting you see how easily identifiable you might be as you surf the web.

Unfortunately, fingerprinting is generally invisible, difficult to prevent, and semi-permanent. There's no easy way to delete fingerprints that have been collected. Computer users determined to prevent fingerprinting can block JavaScript on their computer. However, some parts of a website (for example, video and interactive graphics) may not load, resulting in a blank space on the webpage.

One way to block JavaScript is to use the Firefox browser with the "add-on" program called NoScript. The combination of Firefox and NoScript can stop JavaScript on websites. Disabling JavaScript stops many forms of browser fingerprinting, because it prevents websites from detecting plugins and fonts, which are necessary to effectively fingerprint a device.

Cross-device tracking. Cross-device tracking occurs when companies try to connect a consumer's activity across their smartphones, tablets, desktop computers, and other connected devices. The goal of cross-device tracking is to enable companies to link a consumer's behavior across all of their devices. While this information serves many purposes, it is particularly valuable to advertisers.

To engage in cross-device tracking, companies use a mixture of both "deterministic" and "probabilistic" techniques. The former can track you through an identifying characteristic such as a login. The later uses a probabilistic approach to infer which consumer is using a device, even when a consumer has not logged into a service.

For example, a company called BlueCava is able to identify and track users online across multiple devices. They can associate multiple devices to the same person or household, by attaching an IP address to a BlueCava identifier and by recognizing and collecting information about the various computers, smartphones, and tablets that people use to connect the internet. Thus, your behavior on one device can be associated with other devices from both your home and office. This information can be very valuable for marketing purposes.

BlueCava's technology enables them to recognize computers and devices by collecting information about your screen type, IP address, browser version, time zone, fonts installed, browser plug-ins and various other properties of your screen and browser. This information is put into a "snapshot" and is sent to their servers to create a unique ID for every browser and to "match" the snapshot to the snapshots they receive from their marketing partners. When they use snapshots to create a unique ID, they are also able to group related screens into "households" based on common characteristics among the snapshots, such as IP addresses. BlueCava allows you to opt out of tracking.

If you are interested in some of the more technical aspects of online tracking, the Princeton Web Census measures cookie-based and fingerprinting-based tracking at one million websites and evaluates the effect of browser privacy tools.
2. Mobile Apps
If you use a smartphone or other mobile device to access the Internet, chances are that you may be using mobile applications (apps) rather than an Internet browser for many online activities. An app is a program you can download and access directly using your mobile device. There are hundreds of thousands of apps available, including numerous free or low-priced choices. Unfortunately, apps can collect all sorts of data and transmit it to the app-maker and/or third-party advertisers. This data may then be shared or sold.

Some of the data points that an app may access from your smartphone or mobile device include:

your phone and email contacts

call logs

internet data

calendar data

data about the device's location

the device's unique IDs

information about how you use the app itself

Many apps track your location. There are location-based services like Yelp and Foursquare that may need your location in order to function properly. However, there are also apps (such as a simple flashlight) that do not need your location to function and yet still track it.

Smartphones and other mobile devices may ask you for specific permissions when you install an app. Read these and think about what the app is asking for permission to access. Ask yourself, "Is this app requesting access to only the data it needs to function?" If the answer is no, don't download it. Learn where to go on your particular phone to determine what you will allow the app to access, and if you are at all suspicious do more research on the app before you download.

Mobile apps generally do not provide ad networks with the ability to set a cookie to track users. Instead, ad networks may use your phone's mobile advertising identifier. These identifiers have different names depending on the brand of your phone. For example, on Android devices they are called Google Advertising ID. On iOS, they are called Identifiers for Advertisers. You can find your device's options to set an opt-out flag using these instructions.
3. Privacy Policies
One way to protect your privacy online is to understand how a site or app will use and share your personal information. Websites and apps generally provide this information in their privacy policy.

California's Online Privacy Protection Act (CalOPPA) requires commercial websites or mobile apps that collect personal information on California consumers to conspicuously post a privacy policy. The privacy policy must, among other things, identify the categories of personally identifiable information collected about site visitors and the categories of third parties with whom the operator may share the information. The privacy policy must also provide information on the operator's online tracking practices. CalOPPA is the first law in the United States to impose disclosure requirements on website operators that track consumers' online behavior. As a practical matter, CalOPPA applies nationwide as long as the site operator collects personal information from California consumers.

According to the California Attorney General, a website, app, or other online service may violate this law if:

it lacks a privacy policy

its privacy policy is hard to find

its privacy policy does not contain all the information required by law

it does not follow its own privacy policy, or

it does not notify users of significant changes to its privacy policy

The California Attorney General operates an online complaint form that consumers may use to report violations.
4. Accessing the Internet
You are likely to access the internet using one or more of these services:

An Internet Service Provider (ISP)

A Mobile (Cellular) Phone Carrier

A Wi-Fi Hotspot

If you use a computer to access the internet and pay for the service yourself, you signed up with an Internet Service Provider (ISP). Your ISP provides the mechanism for connecting to the internet.

Each computer connected to the internet, including yours, has a unique address, known as an IP address (Internet Protocol address). It takes the form of four sets of numbers separated by dots, for example: 123.45.67.890. It's that number that actually allows you to send and receive information over the internet.

Depending upon your type of service, your IP address may be " dynamic", that is, one that changes periodically, or " static", one that is permanently assigned to you for as long as you maintain your service.

Your IP address by itself doesn't provide personally identifiable information. However, because your ISP knows your IP address, it is a possible weak link when it comes to protecting your privacy. ISPs have widely varying policies for how long they store IP addresses. Unfortunately, many ISPs do not disclose their data retention policies. This can make it difficult to shop for a "privacy-friendly" ISP. Some ISPs may share their customers' internet activity with third parties and/or collect your browsing history to deliver targeted advertisements.

When you visit a website, the site can see your IP address. Your IP address can let a site know your geographical region. The level of accuracy depends upon how your ISP assigns IP addresses.

You can block your IP address by utilizing a service such as Tor which effectively blocks this information. Another alternative is to use a Virtual Private Network (VPN). A VPN replaces your IP address with one from the VPN provider. A VPN subscriber can obtain an IP address from any gateway city the VPN service provides. You will have to pick a VPN provider very carefully. Unfortunately, experts can't agree upon which VPN services are best. Some VPNs have potential security flaws that could put your data at risk. It can be difficult to determine how secure a VPN is, and precisely what it is doing with your data. Most experts advise avoiding free VPNs, which may monetize your data in exchange for the free service.

If you access the internet with a phone or other mobile device, you may access the internet using a data plan tied to your cellular phone service. If you have a data plan, your service provider (such as AT&T, Sprint, Verizon, and T-Mobile) collects data about your usage.
5. Passwords
Whenever you have an opportunity to create and use a password to protect your information, make sure that you use a strong password. Passwords are the first line of defense against the compromise of your digital information. Revealing the data on your phone, your banking information, your email, your medical records, or other personal information could be devastating. Yet many people fail to follow proper practices when selecting the passwords to protect this important information. Many websites that store your personal information (for example web mail, photo or document storage sites, and money management sites) require a password for protection. However, password-protected websites are becoming more vulnerable because often people use the same passwords on numerous sites. Strong passwords can help individuals protect themselves against hackers, identity theft and other privacy invasions.

Here are some password "dos" and "don'ts" that can help you to maintain the security of your personal data.

Do use longer passwords. Passwords become harder to crack with each character that you add, so longer passwords are better than shorter ones. A brute-force attack can easily defeat a short password.

Do use special characters, such as $, #, and &. Most passwords are case sensitive, so use a mixture of upper case and lower case letters, as well as numbers. An online password checker can help you determine the strength of your password.

Don't "recycle" a password. Password-protected sites are often vulnerable because people often use the same passwords on numerous sites. If your password is breached, your other accounts could be put at risk if you use the same passwords.

Don't use personal information (your name, birthday, Social Security number, pet's name, etc.), common sequences, such as numbers or letters in sequential order or repetitive numbers or letters, dictionary words, or "popular" passwords.

Don't feel obligated to change your passwords frequently, unless you believe that your password has been stolen or breached. Conventional wisdom considered changing passwords to be an important security practice. Recent research suggests that people who change their passwords frequently select weaker passwords to begin with, and then change them in predictable ways. Of course, if you believe that your password has been breached or compromised, it is essential to change it immediately.

Don't share your passwords with others.

Do enable two-factor authentication (when available) for your online accounts. Typically, you will enter your password and then a code will be sent to your phone. You will need to enter the code in addition to your password before you can access the account. Twofactorauth.org has an extensive list of sites and information about whether and how they support two-factor authentication. It's best to use an option that isn't SMS-based, such as an authentication app on your smartphone.

Don't write down your passwords or save them in a computer file or email. Consider a password manager program if you can't remember your passwords. Alternatively, keep a list of passwords in a locked and secure location, such as a safe deposit box.

Password recovery methods are frequently the "weakest link", enabling a hacker to reset your password and lock you out of your account. Be sure that you don't pick a question which can be answered by others. Many times, answers to these questions (such as a pet's name or where you went to high school) can be ascertained by others through social networking or other simple research tools. It's also a good idea to have your password resets go to a separate email account designed for resets only.
6. Wireless Networks and Wi-Fi
Households and businesses establish wireless networks to link multiple computers, printers, and other devices and may provide public access to their networks by establishing Wi-Fi hotspots. A wireless network offers the significant advantage of enabling you to build a computer network without stringing wires. Unfortunately, these systems usually come out of the box with the security features turned off. This makes the network easy to set up, but also easy to break into.

Most home wireless access points, routers, and gateways are shipped with a default network name (known as an SSID) and default administrative credentials (username and password) to make setup as simple as possible. These default settings should be changed as soon as you set up your Wi-Fi network. In addition, some routers are equipped by default with "Guest" accounts that can be accessed without a password. "Guest" accounts should be disabled or password protected.

The typical automated installation process disables many security features to simplify the installation. Not only can data be stolen, altered, or destroyed, but programs and even extra computers can be added to the unsecured network without your knowledge. This risk is highest in densely populated neighborhoods and office building complexes.

Home networks should be secured with a minimum of WPA2 (Wi-Fi Protected Access version 2) encryption. You may have to specifically turn on WPA2 to use it. The older WEP encryption has become an easy target for hackers. Also, do not name your home network using a name that reveals your identity. Setting up your home Wi-Fi access point can be a complex process and is well beyond the scope of this fact sheet. To ensure that your system is secure, review your user's manuals and web resources for information on security.

The number of Wi-Fi hotspot locations has grown dramatically and includes schools, libraries, cafes, airports, and hotels. With a Wi-Fi connection you can be connected to the Internet almost anywhere. You can conduct the same online activities over Wi-Fi as you would be able to at home or work, such as checking email and surfing the web. However, you must consider the risks to your privacy and the security of your device when using a Wi-Fi hotspot. Most Wi-Fi hotspots are unsecured and unencrypted. Even the expensive pay Wi-Fi service available in many airplanes may be as insecure as the free Wi-Fi offered at your corner coffee house. Therefore, you must take additional steps to protect your privacy.

Because the network at a Wi-Fi hotspot is unsecured, Internet connections remain open to intrusion. Hackers can intercept network traffic to steal your information. There are 3 major privacy threats in a Wi-Fi hotspot:

Man-In-The-Middle Attack refers to the act of intercepting the connection between your computer and the wireless router that is providing the connection. In a successful attack, the hacker can collect all the information transferred and replay them on his computer.

Eavesdropping refers to the act of using sniffer software to steal data that is being transmitted over the network. A sniffer is an application or device that can read, monitor, and capture network data. This is particularly dangerous when conducting transactions over the internet since sniffers can retrieve logon details as well as important information such as credit card numbers.

Looking over the shoulder is the simple act of others looking over your shoulder to see your activities.

There are various ways to help protect your privacy when using Wi-Fi. Begin with basic common sense. Look around to see if anyone is surreptitiously trying to look at your computer. Do not leave your computer unattended. Never conduct unsecured transactions over unsecured Wi-Fi. When entering sensitive information (such as your Social Security number, password, or credit card number), ensure that either the webpage encrypts the information or that your Wi-Fi connection is encrypted. Disable your wireless adapter if you are not using the Internet. Otherwise, you leave your computer open to vulnerabilities if it accidentally connects to the first available network.

VPN (Virtual Private Network). This is the first line of defense against vulnerabilities created by Wi-Fi. A VPN provides encryption over an unencrypted Wi-Fi connection. This will help ensure that all web pages visited, log-on details, and contents of email messages remain encrypted. This renders intercepted traffic useless to the hacker. You can obtain software to set up a VPN through your office or home computer, or you can use a commercial provider's hosted VPN service.

Secure surfing/SSL. When checking your email or conducting any important transaction, adding an "s" after "http" may give you a secured connection to the webpage. Many webmail services provide this feature. This ensures that your login details are encrypted thereby rendering it useless to hackers. Although your email login may be encrypted, some webmail providers may not encrypt your Inbox and messages.

Check for SSL (Secure Sockets Layer) certificates on all websites on which you conduct sensitive transaction. SSL creates a secure connection between a client and a server, over which any amount of data can be sent securely.

Wi-Fi settings. Ensure that your computer is not set to automatically connect to the nearest available Wi-Fi access point. This may not necessarily be a legitimate connection point but instead an access point on a hacker's computer.

Disable file-sharing. Ensure that file sharing is disabled on your computer to ensure that intruders cannot access your private files through the network.

Firewall. Install a firewall on your computer and keep it enabled at all times when using Wi-Fi. This should prevent intrusion through the ports on the computer.

Security updates. Keep your computer's software and operating system up-to-date. This will help plug security holes in the software or operating system.

# data[].attributes.attachment_link.title
Online Privacy: Using the Internet Safely

# data[].attributes.attachment_link.description
Posted: Jul 01 1995 | Revised: Jan 16 2019 1. Online Tracking2. Mobile Apps3. Privacy Policies4. Accessing the Internet5. Passwords6. Wireless Networks and Wi-Fi 1. Online Tracking Almost every major website you visit tracks your online activity. Tracking technology can follow you from site to site, track and compile your activity, and compile all of this into a database.

# data[].attributes.attachment_link.description
New technologies are making it easier for governments and corporations to learn the minutiae of our online activities. Corporations collect our information to sell to the highest bidder while an expanding surveillance apparatus and outdated privacy laws allow the government to monitor us like never before.With more and more of our lives moving online, these intrusions have devastating implications for our right to privacy.

# data[].attributes.attachment_link.readable_text
What Exactly Are We Trying to Protect?

People may assume it is all about what they are doing, which is a small piece of the picture. However, online privacy has less to do with what you are doing, and more to do with who you are AND what you are doing. On the Internet, data has high value. It's stolen, sold, collected and analyzed.

There are many facets to privacy. There's what you do, and who you are. Who you are is your personally identifiable information (PII), which is as it sounds--your name, date of birth, address, Social Security number, phone numbers and more. What you do are the searches you perform, the websites you visit, the articles you read, even what you buy online.

Whenever you download an app, visit a website or use a social media platform, chances are that company is collecting data on you. People are doing so much more online through their computers and mobile devices today. We make purchases, look up medical conditions, arrange vacations, interact with friends and relatives, just about anything imaginable. With these actions, people are inadvertently creating a huge digital paper trail of data about themselves. While it may not be PII, these companies still track what you do on the Web and collect that data in order to get a clearer picture of you.

What Can Be Done With My Data?

A complete data set on an individual can fetch a pretty penny, completely legally, too. There are now companies known as "data brokers" that collect and maintain data on millions of people, which they analyze, package, and sell without the user's knowledge or permission. Data brokers collect and sell information to other companies for many reasons, including targeted advertising, credit risk assessment, and direct marketing. Luckily, this data is usually anonymized, and does not contain PII.

Why Is Privacy Important?

We all have things to hide. It could be how much money you make, your medical records or your bank account number. Hiding things is not bad. I don't think these are the types of things you'd like broadcasted on your social network for the entire world to see. This is why we must strive to protect our right to privacy.

Earlier this year, a young woman purchased a few nondescript items such as cotton balls, unscented lotion and some vitamins. Based on what the company already knew about her, they were able to correctly predict that she was pregnant, and began targeting her for baby items by sending her coupons in the mail. The issue? She was a teenage girl, and these coupons alerted her father (much to his dismay) that she was indeed pregnant.

The most important thing to remember about your privacy is that it is YOURS. It is your information, your habits and patterns, and your actions. Therefore you should want to protect it in any way possible.

12 Tips to Help You Protect Your Privacy:
1. Secure your passwords.
Passwords are the keys to our digital lives. Cybercriminals employ many tactics to try and crack them. To make this task difficult for them, use strong, complicated passwords.

A good password should be at least eight characters long, and use a combination of uppercase and lowercase letters, numbers and symbols. Don't use full words, names, addresses, phone numbers or any other easily identifiable personal information. Be sure to avoid using the same password across multiple websites as well.

Two-Factor Authentication (2FA), if available, is another way of verifying your identity other than just a username and password. 2FA is comprised of something you know (such as a password), something you have (a mobile phone that a code can be sent to), or something you are (such as a fingerprint).

Never save passwords on your device. Yes, it's convenient. Yes, it saves time. But if you need to safely store passwords, look into a secure password manager. Criminals are getting smarter and need just one chink in the armor to get into the system to rob you blind.

2. Be conscious of all privacy settings.
Most apps offer privacy settings for users. This gives you the freedom to know how much and what kind of information is shared. Always choose the least amount of data sharing. Always be cautious when sharing your name and location. Turn off location services and deny access to your camera.

When it comes to social media, be sure to review your privacy settings. Most social media sites will give you options to select who you are sharing your information with. Be sure those settings are set for trusted individuals and friends, rather than set to public for the whole world to see. You can check your privacy settings (link is external) on popular websites via the Data Privacy Day website.
3. Be aware of your digital footprint.
Whatever you post online is there forever, even if you delete it from where it was originally posted. A digital footprint is somewhat of a digital paper trail. Forum registrations, videos, photos, just about anything you post will all leave traces of information about yourself online.
4. Get reliable security for all of your devices.
In addition to protecting your computer from malware, a good security software program such as Norton Security will protect you from other threats on the Internet landscape. There are still many vulnerabilities out there such as phishing, spyware, rogue websites, adware, keyloggers and more.

Don't forget: Phones need as much protection as any other device, if not more. There are many security providers that offer free services. These can be risky as they mine data from your phone. Always go for a well-known service provider. Norton Mobile Security has a gamut of features that can protect your phone from most threats.
5. Back up your data.
Backing up data is often over looked. But it is a very important aspect of data protection. Ransomware is a type of attack where hackers hold your data hostage for a ransom. There are cloud-based services that offer backup. Or you can opt for Norton Security Premium, which includes backup.
6. Anti-theft your device.
If your gadget is lost or stolen, tracking apps will help you find it. But how do you protect your confidential data before it gets into the wrong hands? Norton Mobile Security allows This includes your , , , , and a
7. Be careful what you do with your phone.
While being cautious with what you do with you phone is always recommended, it can get tiresome. With the vast amount of malware, Trojans, and worms finding sneaky ways to get into your device, it is better to stay protected with a security system that does the work for you. App Advisor (link is external) is a special feature provided by Norton Mobile Security. It prompts privacy risks, intrusive behavior of apps, excessive battery drainage and data plan usage. It also has call/SMS blocking, anti-theft, contacts backup and protects your mobile phone from malware.
8. Watch out for Bluetooth vulnerabilities.
Bluetooth technology offers incredible convenience. It also opens doors for security weaknesses. Make sure you turn off your Bluetooth when you are not using it. While there are options to place your Bluetooth activity in an invisible or undetectable mode, there are some malicious apps that can change that mode and expose your device to threats. That's one more reason to have a security system in place.
9. Keep your operating system up to date.
Software updates perform a myriad of tasks. They are available for both our operating systems and individual software programs. Performing these updates will deliver a multitude of revisions to your computer, such as adding new features, removing outdated features, updating drivers, delivering bug fixes, and most importantly, fixing security holes that have been discovered.
10. Wise up to Wi-Fi
Secure your home network. Change the default username and password on anything that connects to your network, especially your Internet router. Use Wi-Fi Protected Access (WPA), which will encrypt the data traveling through your network. Turn on all firewalls on both hardware and software programs.

While most home Wi-Fi connections are encrypted, some public Wi-Fi connections are not. This Norton WiFi Privacy
11. Delete data that you no longer use.
If you haven't used a program in months- uninstall it. If you have a lot of old documents that you don't access anymore, you can delete those as well, or store them offline on an external hard drive. These can be repositories of personal information that you may have forgotten about. If you haven't used a program in a while, chances are it is outdated.
12. Familiarize yourself with phishing.
Phishers generally attempt to impersonate a well-known organization, such as a banking or financial institution, in order to try to obtain your user credentials, or deliver malware to your computer via suspicious links or attachments in email messages. Never click on attachments or links from unknown senders or from suspicious looking emails. Instead, if you think your account is in jeopardy, go directly to the website in question by typing the address into the URL bar in your browser rather than clicking the link in the message.

# data[].attributes.attachment_link.description
People may assume it is all about what they are doing, which is a small piece of the picture. However, online privacy has less to do with what you are doing, and more to do with who you are AND what you are doing. On the Internet, data has high value.

# data[].attributes.attachment_link.readable_text
Note: This is part one of a two-part series on why online privacy matters and the lengths people have to go to in order to retain their privacy in 2019. This piece is about the why of online privacy. You can read about the extreme lengths Bitcoin developer Jameson Lopp goes to protect his privacy in part two.
Privacy is a strange issue in today's world. People share their outrage on social media when news of a serious user privacy issue at a major tech company gets reported in the media, but there's usually no acknowledgement of the irony associated with sharing this outrage on a platform that has likely had privacy issues of its own in recent months.

At the end of the day, most people simply do not want to take the time to look beyond Google and Facebook to learn how they can better protect their personal data.

After getting swatted in October 2017 , Lopp created a system of extreme operational security (OPSEC) for cypherpunks and wrote a blog post to help others who wish to improve their own OPSEC.

While many people repeat the "I have nothing to hide" mantra when it comes to their reasons for freely handing all of their data over to giant tech companies, governments, or the random developer behind a flashlight app for their phone , Lopp's case shows the online privacy debate is much more complex than it may seem at first glance.

There are plenty of arguments to make against those who say they have nothing to hide , but even after everything from Edward Snowden's NSA leaks to 143 million Americans' social security numbers being compromised in the 2017 Equifax hack , the vast majority of people simply do not care enough to make changes to the way they use the internet. It's convenience over security.

If you're one of those people who doesn't think much about online privacy or computer security, then perhaps you should take a listen to what Jameson Lopp has to say because online privacy is directly related to one's own physical security in today's digital world. In a recent interview with Epicenter , Lopp discussed the risks associated with poor online privacy practices.
You Don't Know Who You Will Trigger Online
"The biggest issue, which I think I talk about near the beginning of my very long post of what I did, is that you don't know what might become an issue," said Lopp when asked about his extreme privacy practices.

The internet connects different people from every corner of the world, and individauls have the potential to reach thousands, millions, or even billions of people with a single social media post. While this interconnectivity has obvious benefits, Lopp made the point that there is also a negative side to the internet in terms of inadvertently connecting with unstable individuals who may get triggered by a thoughtless tweet.

"Within that hoard of people [who see your tweet], there might be one or two imbalanced people or people who have, you know, mental issues. They don't know where the line is, and they're willing to go to an extreme length to try to harm you in some way, or at least to make you afraid," said Lopp.

According to Lopp, his perspective on the impact of his tweets changed when he went from 1,000 followers a few years ago to nearly 200,000 followers today.

"Now, if I say something that offends someone or that might be against someone's financial interests because they hold a certain crypto asset, then they might feel compelled to try to do something to hurt me or to make me afraid," explained Lopp.

Lopp added that in the case of his swatting, the attacker was unsuccessfully attempting to simply extort him. It was at that point that Lopp realized he had a problem on his hands that could get worse as the popularity of Bitcoin and his own following on social media continued to grow.

"I should probably be conservative and assume that it might get like an order of magnitude worse," said Lopp.

"You don't know who you might piss off, especially if you're active on social media. It's just not possible to fully comprehend the thought processes of everybody else out there who's on the internet who might read or hear something you might say and then what they might do as a result," Lopp added later in the conversation.

The Casa CTO effectively burned down everything associated with his old life and started from scratch ( read more about the extreme measures he took to do that here).
Not Just a Social Media Issue
Of course, it's not just comments on social media that could trigger someone and lead to them target you with some kind of physical attack. After all, you can inadvertently offend someone while driving to work in the morning or standing in line at McDonald's. There are also plenty of out there who will stalk or attack specific people, especially women, even if they've done nothing wrong.

According to Lopp, the average person should at least be worried about the potential for identity theft.

Near the end of his interview with Epicenter, Lopp clarified that he believes that vast majority of people in the world probably have good intentions, but it is the small number of individuals with psychopathic tendencies or those who are simply willing to do things that most others would find immoral that create the need for proper security around one's personal data.

"That's what I'm worried about," said Lopp. "While the likelihood of something like that happening for the average person is probably lower, you never know. And so, it's like a form of insurance against a somewhat unlikely but still possible event."

# data[].attributes.attachment_link.title
If You Don't Care About Online Privacy, You Should Read This

# data[].attributes.attachment_link.description
Note: This is part one of a two-part series on why online privacy matters and the lengths people have to go to in order to retain their privacy in 2019. This piece is about the why of online privacy. You can read about the extreme lengths Bitcoin developer Jameson Lopp goes to protect his privacy in part two.

# data[].attributes.attachment_link.readable_text
In the internet era, consumers seem increasingly resigned to giving up fundamental aspects of their privacy for convenience in using their phones and computers, and have grudgingly accepted that being monitored by corporations and even governments is just a fact of modern life. In fact, internet users in the United States have fewer privacy protections than those in other countries. In April, Congress voted to allow internet service providers to collect and sell their customers' browsing data. By contrast, the European Union hit Google this summer with a $2.7 billion antitrust fine. To assess the internet landscape, the Gazette interviewed cybersecurity expert Bruce Schneier, a fellow with the Berkman Klein Center for Internet & Society and the Belfer Center for Science and International Affairs at Harvard Kennedy School. Schneier talked about government and corporate surveillance, and about what concerned users can do to protect their privacy.
GAZETTE: After whistleblower Edward Snowden's revelations concerning the National Security Agency's (NSA) mass surveillance operation in 2013, how much has the government landscape in this field changed?

SCHNEIER: Snowden's revelations made people aware of what was happening, but little changed as a result. The USA Freedom Act resulted in some minor changes in one particular government data-collection program. The NSA's data collection hasn't changed; the laws limiting what the NSA can do haven't changed; the technology that permits them to do it hasn't changed. It's pretty much the same.

GAZETTE: Should consumers be alarmed by this?

SCHNEIER: People should be alarmed, both as consumers and as citizens. But today, what we care about is very dependent on what is in the news at the moment, and right now surveillance is not in the news. It was not an issue in the 2016 election, and by and large isn't something that legislators are willing to make a stand on. Snowden told his story, Congress passed a new law in response, and people moved on.

GAZETTE: What about corporate surveillance? How pervasive is it?

SCHNEIER: Surveillance is the business model of the internet. Everyone is under constant surveillance by many companies, ranging from social networks like Facebook to cellphone providers. This data is collected, compiled, analyzed, and used to try to sell us stuff. Personalized advertising is how these companies make money, and is why so much of the internet is free to users. We're the product, not the customer.

GAZETTE: Should they be stopped?

SCHNEIER: That's a philosophical question. Personally, I think that in many cases the answer is yes. It's a question of how much manipulation we allow in our society. Right now, the answer is basically anything goes. It wasn't always this way. In the 1970s, Congress passed a law to make a particular form of subliminal advertising illegal because it was believed to be morally wrong. That advertising technique is child's play compared to the kind of personalized manipulation that companies do today. The legal question is whether this kind of cyber-manipulation is an unfair and deceptive business practice, and, if so, can the Federal Trade Commission step in and prohibit a lot of these practices.

GAZETTE: Why doesn't the commission do that? Why is this intrusion happening, and nobody does anything about it?

SCHNEIER: We're living in a world of low government effectiveness, and there the prevailing neo-liberal idea is that companies should be free to do what they want. Our system is optimized for companies that do everything that is legal to maximize profits, with little nod to morality. Shoshana Zuboff, professor at the Harvard Business School, invented the term "surveillance capitalism" to describe what's happening. It's very profitable, and it feeds off the natural property of computers to produce data about what they are doing. For example, cellphones need to know where everyone is so they can deliver phone calls. As a result, they are ubiquitous surveillance devices beyond the wildest dreams of Cold War East Germany.

GAZETTE: But Google and Facebook face more restrictions in Europe than in the United States. Why is that?

SCHNEIER: Europe has more stringent privacy regulations than the United States. In general, Americans tend to mistrust government and trust corporations. Europeans tend to trust government and mistrust corporations. The result is that there are more controls over government surveillance in the U.S. than in Europe. On the other hand, Europe constrains its corporations to a much greater degree than the U.S. does. U.S. law has a hands-off way of treating internet companies. Computerized systems, for example, are exempt from many normal product-liability laws. This was originally done out of the fear of stifling innovation.

"Google knows quite a lot about all of us. No one ever lies to a search engine. I used to say that Google knows more about me than my wife does, but that doesn't go far enough. Google knows me even better, because Google has perfect memory in a way that people don't."
-Bruce Schneier, cybersecurity expert

GAZETTE: It seems that U.S. customers are resigned to the idea of giving up their privacy in exchange for using Google and Facebook for free. What's your view on this?

SCHNEIER: The survey data is mixed. Consumers are concerned about their privacy and don't like companies knowing their intimate secrets. But they feel powerless and are often resigned to the privacy invasions because they don't have any real choice. People need to own credit cards, carry cellphones, and have email addresses and social media accounts. That's what it takes to be a fully functioning human being in the early 21st century. This is why we need the government to step in.

GAZETTE: You're one of the most well-known cybersecurity experts in the world. What do you do to protect your privacy online?

SCHNEIER: I don't have any secret techniques. I do the same things everyone else does, and I make the same tradeoffs that everybody else does. I bank online. I shop online. I carry a cellphone, and it's always turned on. I use credit cards and have airline frequent flier accounts. Perhaps the weirdest thing about my internet behavior is that I'm not on any social media platforms. That might make me a freak, but honestly it's good for my productivity. In general, security experts aren't paranoid; we just have a better understanding of the trade-offs we're doing. Like everybody else, we regularly give up privacy for convenience. We just do it knowingly and consciously.

GAZETTE: What else do you do to protect your privacy online? Do you use encryption for your email?

SCHNEIER: I have come to the conclusion that email is fundamentally unsecurable. If I want to have a secure online conversation, I use an encrypted chat application like Signal. By and large, email security is out of our control. For example, I don't use Gmail because I don't want Google having all my email. But last time I checked, Google has half of my email because you all use Gmail.

GAZETTE: What does Google know about you?
This interview has been edited for length and clarity.
SCHNEIER: Google's not saying because they know it would freak people out. But think about it, Google knows quite a lot about all of us. No one ever lies to a search engine. I used to say that Google knows more about me than my wife does, but that doesn't go far enough. Google knows me even better, because Google has perfect memory in a way that people don't.

GAZETTE: Is Google the "Big Brother?"

SCHNEIER: "Big Brother" in the Orwellian sense meant big government. That's not Google, and that's not even the NSA. What we have is many "Little Brothers": Google, Facebook, Verizon, etc. They have enormous amounts of data on everybody, and they want to monetize it. They don't want to respect your privacy.

GAZETTE: In your book "Data and Goliath: The Hidden Battles to Collect Your Data and Control Your World," you recommend a few strategies for people to protect their privacy online. Which one is the most effective?

SCHNEIER: Unfortunately, we live in a world where most of our data is out of our control. It's in the cloud, stored by companies that may not have our best interests at heart. So, while there are technical strategies people can employ to protect their privacy, they're mostly around the edges. The best recommendation I have for people is to get involved in the political process. The best thing we can do as consumers and citizens is to make this a political issue. Force our legislators to change the rules.

Opting out doesn't work. It's nonsense to tell people not to carry a credit card or not to have an email address. And "buyer beware" is putting too much onus on the individual. People don't test their food for pathogens or their airlines for safety. The government does it. But the government has failed in protecting consumers from internet companies and social media giants. But this will come around. The only effective way to control big corporations is through big government. My hope is that technologists also get involved in the political process - in government, in think-tanks, universities, and so on. That's where the real change will happen. I tend to be short-term pessimistic and long-term optimistic. I don't think this will do society in. This is not the first time we've seen technological changes that threaten to undermine society, and it won't be the last.

# data[].attributes.attachment_link.title
When it comes to internet privacy, be very afraid, analyst suggests

# data[].attributes.attachment_link.description
Cybersecurity expert Bruce Schneier, a fellow with the Berkman Klein Center for Internet & Society, discusses what consumers can do to protect themselves from government and corporate surveillance.