# data[].attributes.attachment_link.provider_name
Online Security News, Reviews, How To and Hacks

# data[].attributes.attachment_link.readable_text
Security breaches and hacking events one after the next are now a mainstay in the news.

No system can be absolutely impenetrable at this point, but humans are empowered over computers to protect their online privacy.

Your weapon? Outsmarting cybercriminals.

First things first. Know what you're dealing with.

What are you protecting yourself from and how do you become vulnerable in the first place?

If you learn about how hackers gain access to your data, then you can implement the appropriate online privacy measures to keep your personal and confidential data safe.
Hacker Strategies
Fake Wireless Access Points - Nothing can be easier than setting up a fake WAP advertised as the "free wireless" network and have all sorts of people instantly connected. Hackers then sniff unprotected data streams that can be surprisingly sent in clear text.

Phishing Scams - Malicious third parties send fake emails that look authentic, having adapted to the appearance of your local bank, payment site, or any other subscription service.

It would typically request you to verify your credentials upon clicking on the link and once they get the information, they'd get away with your funds.

Password Hacking - Bypassing passwords can easily be picked up from a massive data breach.

It's simply a matter of trial and error for a really motivated hacker to discover a router's password especially if left unchanged or reset to default settings.

Free Software - Hackers easily lure even huge businesses onto their trap of shareware or freeware packages.

File Name Trick - File-renaming tricks allow .exe files to be easily incorporated in downloads that are accompanied by a virus or malware.

Social Engineering - Everyone must be aware of this online privacy hacker tactic especially employees who can be manipulated to give out crucial information through phone, email or social media.

Trojans - Malicious programs disguised as something useful, such as an app tool, only to end up installing a malware into user's computer system which then invades their online privacy.

Exploiting Vulnerabilities - Nothing is perfect and everything has flaws and weaknesses.

This is the greatest opportunity for hackers to take over a PC or an entire network.

Now that you know of these stealthy moves from the most ingenious malware and nefarious hackers, you've got five security weapons in the fight for Online Privacy.
Online Privacy Techniques
Two-factor Authentication - Turn this feature on whenever available. Your first line of defense for online privacy is creating a strong password, backed up by the added security of this feature which requires you to enter a code before ultimately gaining access to your account.

Encrypted Remote Storage - Online file-syncing services are fantastic and convenient innovations, yet data remains unencrypted.

Storing valuables entails the use of an encrypted cloud storage service, better yet, have your data encrypted prior to sending it anywhere.

Virtual Private Networks - VPNs serve as an encrypted tunnel that effectively prevents cybercriminals from stealing your credentials and getting a hold of other sensitive information.

It gives you the highest level of online privacy and the lowest risk of exposure of your personal gadget or company device, and everything valuable in it.

Observe Best Security Practices - Recycling passwords across all sites and personal accounts using overly simple combinations, voluntarily giving out personal details, revealing too much in social media, using multiple credit cards for purchases, and the list goes on to the delight of cybercriminals.

These things make you a very attractive target for hackers and must be replaced with best practices.

Check to see if a particular website has an online privacy policy page prior to entering any information and they are deemed trustworthy if they didn't even bother creating one.

Stay updated with software patches and programs only directly from credible providers and run scans periodically.

Take a few minutes to keep your network safe to avoid illegal connections and activities by hackers who connect from the outside.

Don't Be Fooled - Last but not the least, you can never be too cautious when it comes to online privacy.

Never trust public wireless access points and any other unknown network.

The most common mistakes include connecting to an email or bank account on just about any internet connection. Remember that the best things in life are free, and surely tempting.

So don't be too quick to jump on incredible offerings and free downloads, rather get only from trusted sources.

Let hackers realize that they cannot fool you and have you wrapped around their fingers, then they'll have one less victim to target.

# data[].attributes.attachment_link.title
5 Techniques on How to Protect Your Online Privacy | Security Gladiators

# data[].attributes.attachment_link.description
Security breaches and hacking events one after the next are now a mainstay in the news. No system can be absolutely impenetrable at this point, but humans are empowered over computers to protect their online privacy. Your weapon? Outsmarting cybercriminals. First things first. Know what you're dealing with.

# data[].attributes.body
"Increasingly, Internet users find themselves asking someone “How did you find me?” The experience can change the privacy topic from a government policy issue into a highly personal problem."- NBC News (Bob Sullivan Article)
http://www.nbcnews.com/id/3078835/t/online-privacy-fears-are-real/#.W7_J2mhKjIU

# data[].attributes.headline
Recent Article on Security and Privacy Tips

# data[].attributes.subject
Recent Article on Security and Privacy Tips

# data[].attributes.attachment_link.readable_text
Got nothing to hide? Think again.

Privacy is what sets us apart from the animals. It's also what sets many countries and citizens apart from dictatorships and despots. People often don't think about their rights until they need them -- whether it's when they're arrested at a protest or pulled over for a routine traffic stop.

Surveillance is also a part of life, and it's getting progressively more invasive. Government eavesdropping is increasing, carried out in wider secrecy, and it's becoming far more localized. In fact, the last three presidents have pushed for greater surveillance: Clinton introduced mandated wiretapping laws, Bush expanded mass domestic surveillance, and Obama expanded the intelligence service's reach -- just in time for Trump.

Now, with a new president in the Oval Office, many are concerned about the future of their fundamental freedoms and constitutional rights.

There is no such thing as perfect security. But no matter who you are or where you are in the world, there are a lot of things you can do -- many of which are simple -- to protect yourself in this turbulent time.

THE SIMPLE STUFF

Your privacy, at its core, relies on your data being secure.

There are some professions -- such as government workers, journalists, and activists -- who face far more and complex threats than the average citizen, who should usually only worry about tech companies tracking them to serve up the best kinds of ads, or government bulk data collection of their personal records. But everyone can take the basic advice and modify it on varying degrees.

While most apps and services nowadays secure your data with encryption on their servers to prevent data from being readable if hacked or served with a government subpoena, many more now are providing it "end-to-end." In other words, nobody else can see what's sent, stored, or received, other than you and the person you're talking to -- not even the companies themselves.

Usually, the only way to break that "end-to-end" model is to attack an endpoint, such as the device you're using, the internet pipe that the data's traveling along, or the company's servers.

If you secure each of those points, you're well on the way in keeping your data private.

SECURE YOUR DEVICES

Your phone is your ultimate endpoint. You carry it everywhere and it usually holds your most personal secrets and sensitive information.

iPhones are widely seen as the most secure mainstream device today. Modern and newer Android devices usually come with strong security features, but there isn't a universal implementation of encryption yet. Your iPhone encrypts as soon as you lock your screen (even the feds can't access it), but Android devices have to be shut down entirely.

Here's a guide on how to secure your iPhone, and here's another guide for most Android devices.

TURN OFF FINGERPRINT PHONE UNLOCK

Your Touch ID or fingerprint sensor is meant to keep your data more secure. But in some cases federal agents can force you to unlock your phone with your fingerprint, because the courts have determined that it's not a violation of the Fifth Amendment, which protects against self-incrimination. The feds however can't force you to turn over your passcode.

Turn off Touch ID by going to Settings > Touch ID & Passcode > turn off iPhone Unlock. (Android users can go to Settings > Security > Lock Screen or Nexus Imprint.)

BE MINDFUL OF EVERY APP YOU INSTALL

Each time you install an app, it will ask you for permissions to your phone's features or data, like your contacts, photos, camera, or even the phone dialer itself. Be mindful of apps that you install, as a single rogue app can punch a hole in your privacy protections.

Take Meitu, the anime photo app that whipped up a privacy storm. For such a simple app, it required almost unlimited and unfettered access to your phone. Remember: if an app is free, you're paying for it in some other way -- and usually it's with your data.

SET A STRONG PASSCODE

Chances are you're already using a six-digit passcode, if you're using a modern version of iOS. But you can make the code as long as you like. We have a simple and handy guide here. Choosing the "custom numeric code" will still give you the number keypad on the lock screen, making the passcode entry easier to type in.

USE A COMPUTER? TAKE THIS ADVICE

Keeping your devices and apps up to date will significantly reduce attacks. Every app or service you install will increase your vulnerability risks because no software is perfect. If you have preinstalled apps or "bloatware," you should remove those -- and that includes web plugins like Adobe's Flash, Oracle's Java, and Apple's QuickTime. Using ad-blockers can prevent ads from installing tracking cookies and even malware (which happens surprisingly often).

You should also consider encrypting your computer, which is easy if you use either Windows or a Mac. Just make sure you don't upload your encryption keys to the cloud, otherwise Microsoft or Apple could be forced to turn them over.

Yes, Windows 10 is more secure than Windows 7, but it's understandable that many think it's a privacy nightmare. We have a separate Windows 10 privacy guide that shows you the right options for you.

REDUCE YOUR ONLINE FOOTPRINT

There are dozens of websites called data brokers that crawl the web for your personal information, and then post it online for the world to see. If you Google your name along with the city you live in, these data broker sites are always the top search results. Websites like MyLife, Whitepages and Spokeo make millions by selling access to this information. You can use this helpful guide from DeleteMe to remove yourself from each of these data broker websites, but this process can be tedious and time consuming.

DeleteMe offers a hands-free service that removes your personal information from the leading data broker websites online, starting at $129 per year - they also offer discounts on multi-person or family plans. DeleteMe does all the hard work for you by going directly to the source and removing your personal information like names, addresses, age, phone numbers, email addresses, and even photos of your home. Removing personal information from data broker websites reduces your online footprint and keeps you, and your family safe.

SECURE YOUR MESSAGING

Now that your device is secure, you should think about your data in-transit -- that is, as it traverses the waves of the wireless spectrum and the pipes of the internet.

SMS messages and phone calls can be intercepted and wiretapped at any time -- it's the law. Police can also use cell-site simulators (known as "stingrays") to force-downgrade your cell connection from LTE to non-encrypted channels to make it easier to snoop on your phone.

It's not just the messages you send that you need to worry about; you also have to think about the data that's generated as a result -- so-called metadata, such as who you're talking to, when, and sometimes where. That information alone can tell a lot about your life, which is why it's so important to intelligence services. Metadata is a core pillar of government surveillance.

Countering metadata collection isn't easy, but its collection can be limited. The trick? Use the right app.

Let's get one myth out of the way: There is no secure email solution -- at least not yet. While there are systems like PGP encryption, which remains the favorite for scrambling the contents of email messages, it's not as strong as it used to be and better instant communications exist.

In ranked order, best first:

USE SIGNAL FOR ENCRYPTED MESSAGING

Signal is by far the simplest and the most secure app when it's used properly. Available for iOS and Android, the end-to-end encrypted messenger was almost universally accepted as the gold standard among security experts and professionals after its debut audit.

The messaging app and its desktop counterpart are also open-source, meaning anyone can look at and inspect the code to ensure there are no backdoors. And, Signal almost entirely removes itself from the surveillance loop by collecting almost no metadata. Even if a user chooses to upload their contacts list to Signal, each record is scrambled and can't be used by the intelligence services.

The Intercept has a simple guide on how to verify your contacts in the unlikely event that your communications are being intercepted. You usually only do this only once (unless you or someone you're talking to changes device).

You can download Signal here.

IGNORE THE FEARMONGERS. WHATSAPP IS BASICALLY FINE

If you heard recently that WhatsApp has a "backdoor," that's wrong. So wrong, in fact, that some of the world's foremost security experts and cryptographers have called for the story to be retracted. The Guardian, which published the story, later said "flawed reporting" led the newspaper to "overstate the potential impact on the security of users' messaging.

The end-to-end encrypted messenger, owned by Facebook, works on a range of devices, including desktop. At its core, it uses the same protocols as Signal -- so it's secure and neither Facebook, WhatsApp, or anyone else can read your messages.

WhatsApp is fine as long as it's being used properly by verifying your keys with the other party. Make sure that you enable security notifications so you can monitor for any key changes.

Do this by going to WhatsApp then Chats > Chat Backup > then set Auto Backup to Off.

You should also turn off online backups -- both on the app and iCloud and Android's settings -- as backups can be cherry-picked out of the cloud by law enforcement with a search warrant.

The app does collect and store more metadata than Signal. That means the government, if it demands data from Facebook, could see who you're talking to and when. A recent report by Forbes confirms that the company could be forced to turn over data it collects, such as IP addresses, phone identifiers, and even location data in some cases.

iMESSAGE IS OK, BUT BE MINDFUL

Apple's iMessage is also encrypted end-to-end, but you can't verify your keys with the people you're messaging. That's a problem, because you can't ever be sure that your messages aren't being intercepted. Recent developments have shown that the system is vulnerable to man-in-the-middle attacks, so don't rely on the system for critical communications. And again, don't back up your messages to iCloud, because Apple can be forced to turn that data over to law enforcement. End-to-end encryption refers to your message securely traversing the internet and not when it's in storage.

That said, you should regularly carry out an encrypted local backup your iPhone or iPad on occasion. It's very simple to do, and can restore your data if you break your device.

AS FOR ENCRYPTED EMAIL...

Again, encrypted email is a fallacy, so you should get the idea out of your head. Consider services that don't require you to handle private keys, such as ProtonMail, which now comes with support for the Tor browser (more on that shortly).

Or, there's still PGP, which remains clunky and difficult to use for even many advanced users. Even the creator of PGP admits he doesn't use it anymore. If you really want to use PGP, get started with these Windows or Mac guides from the Electronic Frontier Foundation.

Or, if you can get an invite to Keybase.io (you can find some here or by searching Twitter), you can choose to import your PGP private key and use the web-based encrypt and decrypt tools. This has raised some eyebrows, but it's entirely optional, as it makes scrambling and unscrambling PGP messages and files significantly easier.

SECURE YOUR BROWSING

Browsing is usually at the heart of what most people do. But just as you're looking out at the world, you also have a lot trying to look in. Ad networks will track you from site to site, your internet provider will log which pages you visit, and hackers will try to target you.

Without getting too into the weeds, no browser is perfect, but some are better than others.

When it comes to the gold standard of privacy, consider using Tor. It's like a regular browser with privacy benefits, and it's often used by the privacy conscious, such as reporters and activists.

The Tor browser lets its users browse the internet anonymously by bouncing traffic through multiple relays. Not only does it hide a user's internet history, it's also used to circumvent state-sanctioned network blocks. The service also allows users to browse parts of the dark web, which aren't accessible through traditional browsers and networks, as well as websites and services that are blocked in your region.

You can use Tor for anything -- but streaming video can be slow, and some web plugins (like Flash) are generally disabled as these can be used to de-anonymize you, defeating the point altogether.

With other browsers, to enhance your security, you can install the HTTPS Everywhere plugin (available for most popular browsers), which forces websites that support website encryption to turn it on by default.

Secure sites are your friend, because it means an attacker can't modify the pages and that internet providers (and the government) can't see which individual web pages you visit on a domain.

You can also use mobile versions of the Tor browser called Orbot for Android and Onion Browser for iOS, both of which are also open source.

Both of these apps are widely used and trusted by leading security researchers.

DO I NEED A VPN?

A common question is: will a VPN protect my privacy? The simple answer is that you can't know for sure.

VPNs, or virtual private networks, redirect a user's internet traffic through a server, often encrypted, in order to make it difficult for others to eavesdrop on their browsing habits or pinpoint a person's real-world location.

It's no surprise that VPNs are therefore popular among activists or dissidents in parts of the world where internet access is restricted because of censorship, or heavily monitored by the state.

But using a VPN means funneling all of your internet traffic through a third-party. All of it. And while it may be encrypted and unreadable, a lot of information about you -- such as your location and which unencrypted sites you visit -- is still readable.

Security researcher Troy Hunt said in a blog post that because VPN providers control your traffic, "they can inspect it, modify it, log it, and have a very good idea of what it is you're up to."

In short: using a VPN means having to trust it to not abuse your trust and to resist demands for your data by the government in which the provider is located.

If you want to use a VPN to avoid geo-blocks or to evade censorship, plenty of decent services exist. The paid-for services are better for privacy than free services, which often monetize your traffic by serving you trackable ads.

If you need anonymity and privacy, your best bet is to instead use Tor -- which is free.

PUBLIC WI-FI NETWORKS ARE A BIG 'NO'

Remember: If you ever use a public network, like a Wi-Fi hotspot in a coffee shop or anywhere else, be extremely careful. Treat this network as though every page you visit will be monitored -- which may expose your personal information, including your usernames and passwords.

USE YOUR PHONE'S DATA FOR BETTER SECURITY

If you need a secure network, you should use your phone's data -- such as 4G or LTE -- or use your phone as a hotspot for your computer. It's far better to use your phone's data plan for anything important than using insecure public Wi-Fi.

You can usually find your hotspot option in iPhone's settings or Android's notification tray.

BE AWARE OF STINGRAY 'DOWNGRADE' ATTACKS

On that note, be mindful of your connection if you're at public or high-profile events, including protests or demonstrations. We mentioned earlier that police can use "stingrays" to intercept your phone calls and texts, and possibly your browsing data.

There's a lot of secrecy surrounding stingrays, such as who has them and what they do, but some news outlets have discovered other tech with similar aims. Most modern phones use high-speed LTE, which comes with encryption, making interception almost impossible. By blocking or jamming LTE and 3G, the stingray can force a phone into connecting to 2G, which can be easily intercepted by the stingray.

Android users can select a "preferred network type" such as LTE only by accessing a hidden Android menu. Here's a helpful guide which explains how to do it.

For iPhones, you have the option to select LTE as a preference, but no way to disable 2G. Go to Settings > Cellular > Cellular Data Options > Enable LTE > and select Voice & Data.

Then, use your smarts: If you're in a busy area, such as a city, and you suddenly lose LTE connectivity in the middle of a protest, your phone may have been tricked into connecting to a stingray.

SECURE YOUR SERVERS AND CLOUDS

You've secured your phone, your computer, and you can communicate and browse with relative safety. But you still store a wealth of data in the cloud -- in other words, other people's servers.

US citizens and residents have Fourth Amendment protections against unreasonable searches and seizures. In other words, police must get a warrant before anything's searched or taken. But those protections are less clear when it comes to the cloud, according to a guide cross-posted by the Freedom of the Press Foundation. In most cases, authorities still need a warrant to access your data, but they can still serve subpoenas, which don't require a judge to sign off on, to access limited metadata.

It's not only wise to be careful with what you store in the cloud wherever possible, but also to ensure that your various clouds are secure. Some services even allow their staff to read and access your content.

USE STRONG, UNIQUE PASSWORDS

You must use a strong, unique alphanumeric password that is at least in the double-digits of characters for each account you have. Use a password manager like LastPass, 1Password, or Dashlane to generate strong passwords for you.

Once you set strong and unique passwords for each account, it's not necessary to change them often. Many -- even government agencies themselves -- say it's bad advice to change your password often.

NOW, SET UP TWO FACTOR AUTHENTICATION ON EVERYTHING

Two-factor authentication adds an extra layer of protection to your accounts. Once you enter your password, you'll get a code sent to your phone to make sure it's you.

This helps prevent account takeovers from hackers. CNET has a great explainer on two-factor, and why it's so important.

If you are a reporter or a government worker, it's wise wherever possible to have your two-factor token sent to you by an authenticator app, which delivers a code via an encrypted channel. This is because in some cases, SMS messages can be intercepted in a number of ways, such as exploiting flaws in the cell network. But, for most people, receiving two-factor tokens over SMS is generally fine.

You may use many different services, and each process is different. But one website, the aptly-named Turn It On has you covered. It explains how to set up two-factor authentication on dozens of major websites, including Facebook, Google, Twitter, and more.

Just make sure you keep your phone number safe. You might want to set up a strong and secure passcode for your phone account by calling your cell provider.

If you do decide to use an encrypted two-factor app, Google Authenticator is highly recommended, as well as Duo Mobile.

CONSIDER DELETING ACCOUNTS YOU NO LONGER USE

If you know you have an account that you never use, delete it. Holding onto these old accounts may expose you to greater hacks or intrusions down the line, even if you long forgot about them.

Log in and shut down the account. You can find out the best way to do this for each site by going to JustDeleteMe.

There is, however, an important caveat: some sites and services recycle accounts after a certain period of inactivity or after an account is deleted. You should be especially mindful of email providers that recycle email addresses or accounts after a period of time.

Microsoft and Yahoo are good examples. If you delete your account, anyone can register for your email address after a grace period. If that account is still linked to other sites and services -- like your social networking account or two-factor authentication -- an attacker could log into those accounts by resetting your passwords sent to your old email address.

DON'T STORE YOUR ENCRYPTION KEYS IN THE CLOUD

You should encrypt as much of your data wherever possible. To make life easier, some providers allow you to upload your encryption keys in case you get locked out of your account. Helpful, yes, but a huge risk to your privacy if leaked.

Windows lets you upload your BitLocker encryption key to the Microsoft cloud. To check to see you have already, go to your Microsoft account, log in, and check. Back up the key onto your computer and delete it from the webpage. You can then re-encrypt your device by following this guide.

Macs also offer the same option. Once you begin encrypting your Mac hard drive, you are given the option to upload your key to your iCloud. If you choose not to, you'll be given a recovery key which can you can keep safe, and your encryption key won't be uploaded to Apple's servers.

BEWARE THE HARD PART

There's a lot you can do to ensure your personal security and data privacy, but all too often it takes two to tango -- in that you should ask your friends, colleagues, and others you communicate with to also jump in.

When it comes to messaging and communication, you put your privacy in their hands as they do yours. It's a collective effort that everyone can -- and should -- support.

A FINAL NOTE

Today's security might not be what is tomorrow's, so this guide will be kept as up to date as it can be. While this guide has been poured over to make sure it's fair and accurate, do take the time to read more (from the various links).

# data[].attributes.attachment_link.title
How to keep your data secure and private, step by step

# data[].attributes.attachment_link.description
Got nothing to hide? Think again. Privacy is what sets us apart from the animals. It's also what sets many countries and citizens apart from dictatorships and despots. People often don't think about their rights until they need them -- whether it's when they're arrested at a protest or pulled over for a routine traffic stop.

# data[].attributes.attachment_link.description
The Federal Communications Commission voted in December 2017 to implement Chairman Ajit Pai's plan to end net neutrality. The fight now shifts to Congress, where pro-network neutrality members will press to use something called the Congressional Review Act to undo this hasty and misguided action.

# data[].attributes.body
The patriot act is an important part of legislature that affects privacy online and is important to know about. It gives the government rights to your information under certain circumstances.

# data[].attributes.attachment_link.readable_text
Delayed Notice Search Warrants: A Vital and Time-Honored Tool for Fighting Crime

Field Report on the PATRIOT Act

The Department of Justice's first priority is to prevent future terrorist attacks. Since its passage following the September 11, 2001 attacks, the Patriot Act has played a key part - and often the leading role - in a number of successful operations to protect innocent Americans from the deadly plans of terrorists dedicated to destroying America and our way of life. While the results have been important, in passing the Patriot Act, Congress provided for only modest, incremental changes in the law. Congress simply took existing legal principles and retrofitted them to preserve the lives and liberty of the American people from the challenges posed by a global terrorist network.

The USA PATRIOT Act: Preserving Life and Liberty
(Uniting and Strengthening America by Providing Appropriate Tools Required to Intercept and Obstruct Terrorism)

Congress enacted the Patriot Act by overwhelming, bipartisan margins, arming law enforcement with new tools to detect and prevent terrorism: The USA Patriot Act was passed nearly unanimously by the Senate 98-1, and 357-66 in the House, with the support of members from across the political spectrum.

The Act Improves Our Counter-Terrorism Efforts in Several Significant Ways:

1. The Patriot Act allows investigators to use the tools that were already available to investigate organized crime and drug trafficking. Many of the tools the Act provides to law enforcement to fight terrorism have been used for decades to fight organized crime and drug dealers, and have been reviewed and approved by the courts. As Sen. Joe Biden (D-DE) explained during the floor debate about the Act, "the FBI could get a wiretap to investigate the mafia, but they could not get one to investigate terrorists. To put it bluntly, that was crazy! What's good for the mob should be good for terrorists." (Cong. Rec., 10/25/01)

Allows law enforcement to use surveillance against more crimes of terror.Before the Patriot Act, courts could permit law enforcement to conduct electronic surveillance to investigate many ordinary, non-terrorism crimes, such as drug crimes, mail fraud, and passport fraud. Agents also could obtain wiretaps to investigate some, but not all, of the crimes that terrorists often commit. The Act enabled investigators to gather information when looking into the full range of terrorism-related crimes, including: chemical-weapons offenses, the use of weapons of mass destruction, killing Americans abroad, and terrorism financing.

Allows federal agents to follow sophisticated terrorists trained to evade detection. For years, law enforcement has been able to use "roving wiretaps" to investigate ordinary crimes, including drug offenses and racketeering. A roving wiretap can be authorized by a federal judge to apply to a particular suspect, rather than a particular phone or communications device. Because international terrorists are sophisticated and trained to thwart surveillance by rapidly changing locations and communication devices such as cell phones, the Act authorized agents to seek court permission to use the same techniques in national security investigations to track terrorists.

Allows federal agents to ask a court for an order to obtain business records in national security terrorism cases. Examining business records often provides the key that investigators are looking for to solve a wide range of crimes. Investigators might seek select records from hardware stores or chemical plants, for example, to find out who bought materials to make a bomb, or bank records to see who's sending money to terrorists. Law enforcement authorities have always been able to obtain business records in criminal cases through grand jury subpoenas, and continue to do so in national security cases where appropriate. These records were sought in criminal cases such as the investigation of the Zodiac gunman, where police suspected the gunman was inspired by a Scottish occult poet, and wanted to learn who had checked the poet's books out of the library. In national security cases where use of the grand jury process was not appropriate, investigators previously had limited tools at their disposal to obtain certain business records. Under the Patriot Act, the government can now ask a federal court (the Foreign Intelligence Surveillance Court), if needed to aid an investigation, to order production of the same type of records available through grand jury subpoenas. This federal court, however, can issue these orders only after the government demonstrates the records concerned are sought for an authorized investigation to obtain foreign intelligence information not concerning a U.S. person or to protect against international terrorism or clandestine intelligence activities, provided that such investigation of a U.S. person is not conducted solely on the basis of activities protected by the First Amendment.

2. The Patriot Act facilitated information sharing and cooperation among government agencies so that they can better "connect the dots." The Act removed the major legal barriers that prevented the law enforcement, intelligence, and national defense communities from talking and coordinating their work to protect the American people and our national security. The government's prevention efforts should not be restricted by boxes on an organizational chart. Now police officers, FBI agents, federal prosecutors and intelligence officials can protect our communities by "connecting the dots" to uncover terrorist plots before they are completed. As Sen. John Edwards (D-N.C.) said about the Patriot Act, "we simply cannot prevail in the battle against terrorism if the right hand of our government has no idea what the left hand is doing" (Press release, 10/26/01)

Prosecutors and investigators used information shared pursuant to section 218 in investigating the defendants in the so-called "Virginia Jihad" case. This prosecution involved members of the Dar al-Arqam Islamic Center, who trained for jihad in Northern Virginia by participating in paintball and paramilitary training, including eight individuals who traveled to terrorist training camps in Pakistan or Afghanistan between 1999 and 2001. These individuals are associates of a violent Islamic extremist group known as Lashkar-e-Taiba (LET), which operates in Pakistan and Kashmir, and that has ties to the al Qaeda terrorist network. As the result of an investigation that included the use of information obtained through FISA, prosecutors were able to bring charges against these individuals. Six of the defendants have pleaded guilty, and three were convicted in March 2004 of charges including conspiracy to levy war against the United States and conspiracy to provide material support to the Taliban. These nine defendants received sentences ranging from a prison term of four years to life imprisonment.

3. The Patriot Act updated the law to reflect new technologies and new threats. The Act brought the law up to date with current technology, so we no longer have to fight a digital-age battle with antique weapons-legal authorities leftover from the era of rotary telephones. When investigating the murder of Wall Street Journal reporter Daniel Pearl, for example, law enforcement used one of the Act's new authorities to use high-tech means to identify and locate some of the killers.

Allows victims of computer hacking to request law enforcement assistance in monitoring the "trespassers" on their computers. This change made the law technology-neutral; it placed electronic trespassers on the same footing as physical trespassers. Now, hacking victims can seek law enforcement assistance to combat hackers, just as burglary victims have been able to invite officers into their homes to catch burglars.

4. The Patriot Act increased the penalties for those who commit terrorist crimes. Americans are threatened as much by the terrorist who pays for a bomb as by the one who pushes the button. That's why the Patriot Act imposed tough new penalties on those who commit and support terrorist operations, both at home and abroad. In particular, the Act:

Eliminates the statutes of limitations for certain terrorism crimes and lengthens them for other terrorist crimes.

The government's success in preventing another catastrophic attack on the American homeland since September 11, 2001, would have been much more difficult, if not impossible, without the USA Patriot Act. The authorities Congress provided have substantially enhanced our ability to prevent, investigate, and prosecute acts of terror.

# data[].attributes.attachment_link.description
Delayed Notice Search Warrants: A Vital and Time-Honored Tool for Fighting Crime Field Report on the PATRIOT Act The Department of Justice's first priority is to prevent future terrorist attacks.

# data[].attributes.attachment_link.readable_text
Working, teaching, and learning away from the MIT campus poses new risks to securing information. IS&T recommends that community members follow these best practices when engaging in activities remotely to help reduce the chance of the information and data you handle at MIT being compromised.

Protect your devices
Make sure your devices are running newer operating systems supported by the vendor (e.g., Windows 10, macOS Mojave 10.14, or newer) and that all updates have been applied.

Protect your information
When exchanging high risk (i.e. sensitive or personal) information over email (e.g. birth certificates, loan applications), make sure to protect it by encrypting files before sharing.

Secure your home WiFi
Make sure your home router's firmware is up-to date, that you have changed the default password to something strong, and that you have enabled WPA2 encryption for your home WiFi network.

Practice safe video conferencing
Use MIT-approved and licensed enterprise video conferencing tools, such as Zoom, Microsoft Teams, and Webex, which offer protections for your security and privacy, and follow suggested best security practices.

Be aware of COVID-19 related scams
There has been an uptick in malicious attacks to take advantage of the COVID-19 pandemic. Be wary, in particular, of phishing attacks and also of scams that try to trick you into making donations to fraudulent organizations or causes or revealing sensitive information. Protect yourself and your information by using caution when opening emails and attachments.

IS&T is committed to strengthening the security of MIT's infrastructure and information.
Even computers that don't appear to have any valuable information can be attractive targets for attacks. Compromised computers and other devices can be used as a foothold allowing attackers to spread through the network. Networked devices in MIT's public IP space are constantly under attack from devices across the globe. IS&T provides a variety of security services and software to protect the MIT community.

Protect yourself

Take steps to protect your computing and the information you handle at MIT.

Enable automatic updates for your operating systems and software to protect against the latest security threats.

Install Sophos Anti-Virus and CrowdStrike Falcon. Sophos protects your computer against known viruses, worms, and malware. CrowdStrike provides advanced protection against emerging threats, using machine learning to detect patterns commonly seen in attacks.

Use a password manager such as LastPass to generate and protect strong, unique passwords.

Back up your computers using CrashPlan. This cloud-based backup solution makes it easy to recover data from computers that have been lost, stolen, or damaged by malware.

If you handle personally identifiable information (PII), install Spirion to help you detect and securely encrypt or delete files with sensitive information.

Beware of phishing and other scams

Phishing emails and email scams continue to be an effective way for scammers to steal credentials, install malware, or extort cryptocurrency. Many of these emails are targeted to a specific department or lab, and may appear to come from someone you know or do business with.

If an email looks suspicious, report it to phishing@mit.edu by forwarding the email as an attachment. The IS&T Security team will take steps to protect the community.

Learn more

The Information Protection @ MIT website provides access to policies and guidance on safeguarding information at the Institute. The Awareness I: IT Security and Awareness II: IT Security courses are available in the Atlas Learning Center.

Report an IT security incident

It's important to report any IT security incident as soon as you are aware of it so the Security team can take proper steps to limit the impact and extent of loss, investigate, protect other members of the MIT community, and meet any regulatory or legal requirements.

If you believe a breach of MIT information occurred, immediately report the IT security incident by sending email to security@mit.edu or by submitting the form below. The IS&T Security team will contact you to evaluate the situation and determine the next best step. If necessary, they will assemble the Data Incident Response Team. You should not address these situations on your own, as that may corrupt forensic information needed to determine the scope of the issue and the risks to MIT.

# data[].attributes.attachment_link.description
Take steps to ensure that you are secure when working remotely Working, teaching, and learning away from the MIT campus poses new risks to securing information. IS&T recommends that community members follow these best practices when engaging in activities remotely to help reduce the chance of the information and data you handle at MIT being compromised.

# data[].attributes.body
Safe computing is essential to prevent cyber attacks. Changing your password often, having antivirus software installed and being able to distinguish between spam and legitimate sources can save time, money and peace of mind. - #ownthoughts

# data[].attributes.attachment_link.title
Cybersecurity: Crash Course Computer Science #31

# data[].attributes.attachment_link.description
Learn how to protect your personal information and devices online and on-the-go.

# data[].attributes.body
Digital Citizenship is important for our students to understand. With technology comes responsibility and its use needs to be tailored in a way that benefits learning, shows respect for others and creates a positive environment.

# data[].attributes.attachment_link.readable_text
The Definition Of Digital Citizenship
by Terry Heick
This post was originally published in 2013 and was updated in December of 2018
As more and more students interact digitally-with content, one another, and various communities-the concept of digital citizenship becomes increasingly important.

Which begs the question: what is digital citizenship?

Well, first citizenship, which is formally defined as "the quality of an individual's response to membership in a community." This makes citizenship far more complex than a simple legal matter, but rather one that consists of self-knowledge, interaction, and intimate knowledge of a place, its people, and its cultural history.

So digital citizenship is nearly the same thing-"the quality of a response to membership in a digital community" would be a good first crack at the definition.

Revising that might more clearly articulate the differences between physical and digital communities, so a decent definition of digital citizenship then might be "Self-monitored participation that reflects conscious interdependence with all (visible and less visible) community members"

But that leaves out the idea of content itself, which leads us to a pretty good definition for educators: "The quality of habits, actions, and consumption patterns that impact the ecology of digital content and communities."

Still too wordy? Maybe a shorter version for students-with some moral imperatives and implied advice-could be: "the self-monitored habits that sustain and improve the digital communities you enjoy or depend on."
Overview
Term: Digital Citizenship

Definition: The quality of habits, actions, and consumption patterns that impact the ecology of digital content and communities.

Examples of Digital Citizenship: Communicating with respect, respecting other's privacy, seeing things from another perspective, adding helpful information/context to a discussion or wiki page, supporting others by offering useful feedback, encouraging them, or sharing work they're proud of, etc.

Big Idea: Treating people, places, and 'spaces' with respect

Related Teaching & Learning Concepts: Empathy, Social Learning, Critical Literacy, Connectivism, Communal Constructivism

Related Teaching & Learning Resources:
63 Things Every Student Should Know In A Digital World Moving Students From Digital Citizenship To Digital Leadership
Related Cultural Trends: Ubiquity of social media, Political 'discussions' on social media platforms, Freedom of Speech, 'Global-Local' social norms (i.e. China/free speech), Blogging, YouTube, Sociocultural equity, Globalization, Mental health, Bullying/Trolling, Clickbait, Critical thinking, 'Fake News'
The Definition Of Digital Citizenship

# data[].attributes.attachment_link.description
The Definition Of Digital Citizenship by Terry Heick This post was originally published in 2013 and was updated in December of 2018 As more and more students interact digitally-with content, one another, and various communities-the concept of digital citizenship becomes increasingly important. Which begs the question: what is digital citizenship ?

# data[].attributes.attachment_link.readable_text
Welcome to the updated Digital Citizenship Website

Digital Citizenship is a concept which helps teachers, technology leaders and parents to understand what students/children/technology users should know to use technology appropriately. Digital Citizenship is more than just a teaching tool; it is a way to prepare students/technology users for a society full of technology. Digital citizenship is the continuously developing norms of appropriate, responsible, and empowered technology use. Too often we are seeing students as well as adults misusing and abusing technology but not sure what to do. The issue is more than what the users do not know but what is considered appropriate technology usage.

The new Digital Citizenship Handbook for School Leaders: Fostering Positive Interactions Online by Mike Ribble and Marty Park, is now available at ISTE.org or Amazon.com

The Knights of 17th Street​is a fiction book for Young Adults that connects with the ideas of digital citizenship in an action filled format. Check out more information here.

Order the paperback or Kindle version from Amazon.

Digital Citizenship Today

The concept of Digital Citizenship is being viewed as an important area of educational knowledge not only in the United States but around the world. Whether it is called digital citizenship, digital wellness or digital ethics the issues are the same; how should we act when we are using digital tools, interacting with others online, and what should be taught to help the next generation be better stewards of this technology.

After 15 years working on this topic there has been some updating to the nine elements of Digital Citizenship. In addition to the updates to the the Digital Citizenship definition, as well as the Nine Elements a new Framework has been created to help users to understand and organize these themes. It is the S3 Framework (Safe, Savvy and Social). Go to the Nine Elements page to learn more about these changes.

Some great materials and discussions for our 2019 Digital Citizenship week! Here are a couple of conversations on the topic: Facebook Live with Tito de Morais (Portugal) - Facebook: facebook.com/cyberbullying.pt/videos/464966610778236/

YouTube: https://youtu.be/_HbNRzyoNBc and a Podcast with LaKisha Hudson (Dr. Hudson's Counseling Corner) Apple Podcast: https://podcasts.apple.com/us/podcast/dr-hudsons-counseling-corner/id1433902401#episodeGuid=Buzzsprout-1813330
YouTube: https://youtu.be/lF71q5x5Dn8 Buzzsprout: http://www.buzzsprout.com/152176

Working with Dr. Marty Park we have released a a new, updated book on Digital Citizenship titled - The Digital Citizenship Handbook for School Leaders: Fostering Positive Interactions Online. Once again we will be partnering with ISTE (International Society for Technology in Education). Don't let the title scare you off, if you are looking for information on Digital Citizenship, you are a school leader. If you have questions or comments about the material found on this website please click on the Contact Us link to send us your information. If you are interested in reading more about Digital Citizenship please go to the Resources page then scroll down to Publications and click on the link for information you are interested in. See the latest article in Tech & Learning (Spring 2019) - Digital Citizenship Framework Updated

For those who are a member of ISTE please join the Digital Citizenship PLN (Professional Learning Network) to see how you can get involved. There is also a new initiative for everyone interested in the Digital Citizenship discussion - #digcitcommit. Go to the website - https://digcitcommit.org/ to join in. We need everyone to lend their voice to this topic.

# data[].attributes.attachment_link.title
Digital Citizenship Consulting - Education, Technology Support

# data[].attributes.attachment_link.description
Welcome to the updated Digital Citizenship Website Digital Citizenship is a concept which helps teachers, technology leaders and parents to understand what students/children/technology users should know to use technology appropriately. Digital Citizenship is more than just a teaching tool; it is a way to prepare students/technology users for a society full of technology.