Making improvements by The University of Edinburgh https://padlet.com/moocdeliveryteam/a3wmiuwvsgqyawit en-us 2020-08-04 08:47:54 UTC 2025-11-23 02:07:36 UTC hello@padlet.com Home Security https://padlet.com/moocdeliveryteam/a3wmiuwvsgqyawit/wish/926200957 This technology should uphold the value of privacy by design, unfortunately the fact that users rarely change their passwords from default settings means that it is possible for hackers to watch families through these devices.  

The safety of the user should not be put solely on the user, if a company is aware of the fact that users are likely to use a technology without changing a password they should ensure that security is obtained via other means.  This risk was forseeable in designing their product and it should have been designed more robustly to protect its users.

Home is often deemed our 'private sphere' , there is a human desire to keep this space safe which is exactly why people invest in such devices in the first place, home security is failing its users if it does not protect this.]]> 2020-11-16 08:13:45 UTC https://padlet.com/moocdeliveryteam/a3wmiuwvsgqyawit/wish/926200957 Medical Data https://padlet.com/moocdeliveryteam/a3wmiuwvsgqyawit/wish/937748242 Going back to the initial video this week about smart cities and ideas of medical data being transferred from Fitbit like tech to GPs automatically. Value sensitive design, concerning privacy, could come into play - perhaps in the form of prompts and a welcoming GUI. Data wouldn't always go to the GP automatically but the user instead could choose want data was sent depending on how concerned they were by an ailment etc. Reassuring prompts and reminders about medication/check-ups could promote a level of compatibility also ... ]]> 2020-11-18 17:09:16 UTC https://padlet.com/moocdeliveryteam/a3wmiuwvsgqyawit/wish/937748242 Domestic abuse https://padlet.com/moocdeliveryteam/a3wmiuwvsgqyawit/wish/941868468 I must admit this course just made me realise how domestic abuse victims can basically be 'controlled' by their abusers through technology. While I see some benefits to tracking a phone (in case it is stolen) or even to make sure your friend is safe if they are going on a walk/run alone there should be some system in place where users are alerted their tracking is on (just like the light the installed to laptop cameras in recent years that turns on when the camera is used). ]]> 2020-11-19 15:41:08 UTC https://padlet.com/moocdeliveryteam/a3wmiuwvsgqyawit/wish/941868468 Home security https://padlet.com/moocdeliveryteam/a3wmiuwvsgqyawit/wish/943183708 Home security IoT such as a network digital camera system should uphold a value of privacy. However, design by default and design is often sadly lacking in these devices. The devices are often configured for ease of use and set up, not to uphold privacy. This is understandable as no one wants a long and difficult set up process, but in establishing a path of least resistance, this should also be the path of greatest security. This is not difficult to achieve with some forethought. Preconfiguring a device with a unique QR code in the box to configure a companion app can help quickly establish a secure connection without arduous configuration of settings and credentials. The user shouldn't be prompted to set up security features, only be notified when security is inadequate.]]> 2020-11-19 19:46:36 UTC https://padlet.com/moocdeliveryteam/a3wmiuwvsgqyawit/wish/943183708 Smart Speakers https://padlet.com/moocdeliveryteam/a3wmiuwvsgqyawit/wish/947903251 Smart home devices such as Alexa should make home life easier while also upholding the privacy of a home environment.
An issue occurs though as these types of devices must always be listening so as to pick up command phrases from the users, combine this with their ability to connect to the internet and now there is a potential gap in your home security.
A way to reduce the risk of a device such as this could be to ensure any data is stores (voice recognition etc.) on the device and not in cloud storage, failing this the 'fog' system may be a good alternative. ]]> 2020-11-21 10:44:22 UTC https://padlet.com/moocdeliveryteam/a3wmiuwvsgqyawit/wish/947903251 BBC Box architecture https://padlet.com/moocdeliveryteam/a3wmiuwvsgqyawit/wish/948421309 I quite liked the concept of the BBC box. It is, however, in its first steps and limited. An idea would be to have a design where this bbc box is mandatory for applications, acting as a middle layer between the device and the cloud application. PII data would only be inside the device and the cloud service would send the trained models that require personal information to the box in order to create recommendations. 

Of course, in order to be able to improve the models, users could choose to share their personal data via the box, but just for the time and purpose that they would prefer. ]]> 2020-11-21 18:09:15 UTC https://padlet.com/moocdeliveryteam/a3wmiuwvsgqyawit/wish/948421309 Home security camera systems - Where is the off button? https://padlet.com/moocdeliveryteam/a3wmiuwvsgqyawit/wish/948541185 Home security systems that use cameras and sensors would uphold better the value of privacy if they allowed the user (homeowner) to switch off the cameras and sensors in a visible way. 
The system I have at my house allows me to use my phone to remotely activate the cameras and see the feed, even if the alarm has not been switched on. This means I can spy on my husband when he's home and I'm not (and vice-versa), and he has no way to know or to prevent it. A manual on/off button on each camera would do the trick to protect privacy better!]]> 2020-11-21 19:49:20 UTC https://padlet.com/moocdeliveryteam/a3wmiuwvsgqyawit/wish/948541185 The Storage Trade Off https://padlet.com/moocdeliveryteam/a3wmiuwvsgqyawit/wish/948781685 The data collected in the home and by cameras should be kept private (value). Because of the storage space required to store photos and videos, the cost is better born by Google than me, but facial recognition software can review all of my photos and videos. As long as storage is free, I am not willing to bring all this data into my house. To uphold the privacy value, Google could have two storage "units" -- one that is free with little privacy, and one that costs $1 a month and is guaranteed private. The minimal cost would cover Google's expenses and protect my privacy. This brings up the question, "If I am using a free service, how much can I actually demand from the provider?"]]> 2020-11-21 23:57:45 UTC https://padlet.com/moocdeliveryteam/a3wmiuwvsgqyawit/wish/948781685 https://padlet.com/moocdeliveryteam/a3wmiuwvsgqyawit/wish/950040402 While Apple is not perfect they at least try a little more at keeping data at the device level , include duck duck go browser as an option. Goggle has improved by allowing you to delete some personal data and getting a list of what they have.  This should be available  as a minimum by all provides specially Facebook. ]]> 2020-11-22 17:15:03 UTC https://padlet.com/moocdeliveryteam/a3wmiuwvsgqyawit/wish/950040402 Facial Recognition System https://padlet.com/moocdeliveryteam/a3wmiuwvsgqyawit/wish/951510491 FRTs are tools able to identify people thanks their capacity of rebuild facial print and find matches  and patterns. The aim of these new technology is to help the police to find people (offenders but also victims or missing persons) during investigation. Moreover, it allow to save  precoius resources and time. 
But some problems are behind the corner:  the accuracy of the resaults is not guaranteed (false positive and false negative), discrimination and bias are inside the system, privacy and fairnesss. are compromised. 

To solve these problems the big tech are working on new and powerfull solution, as 3D technology and thermal recognition. Of course, these new technology doesn't solve all the issues. It needs a binding regulamentation of these tools and an improvement of the idea of "privacy by design" to assure the respect of the "strict necessity" principle!]]> 2020-11-23 08:52:35 UTC https://padlet.com/moocdeliveryteam/a3wmiuwvsgqyawit/wish/951510491 Alexa-Related Concerns https://padlet.com/moocdeliveryteam/a3wmiuwvsgqyawit/wish/952181588 Value Alexa should uphold is privacy and security. It fails to do so by always being on, always listening, always recording, and sending all of that information to a cloud that is not local to the user and over which the user has no control. It’s also wildly insecure in terms of its ability to be hacked, which means bad actors have access to the most private life of the users of the tech. Changes that would ensure it’s better at upholding this value include the ability to turn it on and off manually, the ability to access the video and audio the device has stored in the cloud about a user and allow the user to delete it at will, to program in keywords that could make the device stop recording or listening when that word is said, to hardwire the device so that the camera must be switched on manually and have it alert the user when it has been on for a certain period of time, etc.

]]> 2020-11-23 13:24:21 UTC https://padlet.com/moocdeliveryteam/a3wmiuwvsgqyawit/wish/952181588 Education https://padlet.com/moocdeliveryteam/a3wmiuwvsgqyawit/wish/963730903 People are more likely to make more circumspect use of smart tech if they know what is does, what is might do, and how to prevent it. A simple example is setting your browser to block third-party cookies, employing an ad blocker, and similar tools. ]]> 2020-11-26 15:15:40 UTC https://padlet.com/moocdeliveryteam/a3wmiuwvsgqyawit/wish/963730903 EducationPeople are more likely to make more circumspect use of smart tech if they know what is does, what is might do, and how to prevent it. A simple example is setting your browser to block third-party cookies, employing an ad blocker, and similar tools. https://padlet.com/moocdeliveryteam/a3wmiuwvsgqyawit/wish/966175949 2020-11-27 18:39:09 UTC https://padlet.com/moocdeliveryteam/a3wmiuwvsgqyawit/wish/966175949 Data privacy in a box https://padlet.com/moocdeliveryteam/a3wmiuwvsgqyawit/wish/967191720 The problem is having all personal data stored in a physical box at home and not in the cloud is that it risks being stolen or permanently damaged. It means that important data is lost for ever and it makes it too risky as a option. Perhaps, a third party cloud service run by a respected NGO might be a good way forward. ]]> 2020-11-28 16:11:43 UTC https://padlet.com/moocdeliveryteam/a3wmiuwvsgqyawit/wish/967191720 Facial recognition https://padlet.com/moocdeliveryteam/a3wmiuwvsgqyawit/wish/974254954 Facial recognition systems should first be used only where it is initiated by the user (e.g. gaining entry/access to something, identification when passing security gate at the airport, etc.) but it should never be used in a general public area. The reason is simple: In a crowd, you're supposed to be anonymous...that is basically the definition of a public crowd.
If facial recognition is really needed (e.g. for security purpose in a bank or other places with a need for high-security), everyone gaining access to these location should first have access to a notice telling them about the use of such a technology. Then it is up to them to decide if they want to enter such area or not.
The technology is not the problem but the way it is being used. Just like facila recognition systems, nobody wants to be automatically recognized in public with your name, address and ID displayed for everyone to see.

An interesting article below on facial recognition and the choice of using a technology vs. it being automatically be imposed on users.]]> 2020-12-01 03:22:42 UTC https://padlet.com/moocdeliveryteam/a3wmiuwvsgqyawit/wish/974254954 Accepting cookies https://padlet.com/moocdeliveryteam/a3wmiuwvsgqyawit/wish/987604368 Our cookies affect in terms of tracking data and therefore collecting personally identifiable information. In this sense, I think that education is the key to create awareness among the population, of what are we accepting whenever we use the internet. Indeed, consumers can control their cookies' usage, for instance, deleting all cookies from the browser at the end of each session.

But who is doing so?]]> 2020-12-04 14:24:41 UTC https://padlet.com/moocdeliveryteam/a3wmiuwvsgqyawit/wish/987604368 The usage of data to sell you things. Like other areas of digital development and data management. I think for all those commercial platforms there should be an automatic email that is sent out together with other comms such as Chat Bots that talk you through what your data searches and general characterisation evaluation on line will be used for, including the harvesting of basic such criteria through Cookies. Currently there are pages of Terms & Conditions that no one person ever reads. It should be short and delivery, digestible info. john959 https://padlet.com/moocdeliveryteam/a3wmiuwvsgqyawit/wish/989513653 2020-12-04 23:29:46 UTC https://padlet.com/moocdeliveryteam/a3wmiuwvsgqyawit/wish/989513653 How would I revoke consent? https://padlet.com/moocdeliveryteam/a3wmiuwvsgqyawit/wish/990500229 Much of this course I've considered products such as the Google Nest and other prominent IoT items. But I've also had to really think about things like the lowest level of cookies that are collected by a website, just by visiting, these days in the EU/UK.

Let's say hypothetically that I want to revoke every consent that I have made to every public or private institution in the world about the collection, maintenance, storage, continued use, future use, etc. of the data they've collected about me?

How would I do that?

I mean, I know that the answer is "you can't do that." 

But, how would I? If I wanted to, really badly?

]]> 2020-12-05 19:05:14 UTC https://padlet.com/moocdeliveryteam/a3wmiuwvsgqyawit/wish/990500229 Make the change of the default password by design a default before any robot vacuum cleaner can be used for the first time https://padlet.com/moocdeliveryteam/a3wmiuwvsgqyawit/wish/991360107 My proposal would be to make the change of the default password of a robot vacuum cleaner part of the define feature. That way, every user would be required to change the default password of a newly acquired robot vacuum cleaner before its first use.]]> 2020-12-06 11:07:12 UTC https://padlet.com/moocdeliveryteam/a3wmiuwvsgqyawit/wish/991360107 The limits of individual consent https://padlet.com/moocdeliveryteam/a3wmiuwvsgqyawit/wish/1004241404 If the limits of my freedom are where the freedom of others begins. Why our implicit individual consent can compromise the privacy of third parties?]]> 2020-12-09 21:56:27 UTC https://padlet.com/moocdeliveryteam/a3wmiuwvsgqyawit/wish/1004241404 Privacy of Guest as Value https://padlet.com/moocdeliveryteam/a3wmiuwvsgqyawit/wish/1007447275 In one of my previous posts I discussed how uncomfortable I feel when I go to visit friends who have 'smart homes' as I am never sure if their devices are 'listening' to our conversations and gathering my personal data. In my opinion, home devices should uphold privacy values and in particular privacy rights of home visitors ( home staff, guests, service providers, etc.) Right now the design and functioning of the technology is to make it part of the ambient and as discreet as possible. One possible improvement could be for the smart devices such as Alexa to distinguish the guests voices and request consent to process their personal data. This way home visitors would not have to be trying to figure out which one of the many flower bases could be a smart devices recording every move ]]> 2020-12-10 18:34:30 UTC https://padlet.com/moocdeliveryteam/a3wmiuwvsgqyawit/wish/1007447275 Privacy Settings to be adaptive https://padlet.com/moocdeliveryteam/a3wmiuwvsgqyawit/wish/1008220560 Privacy settings are set by users, or agreed by users upon purchase or activation of a device or software. In the case of IOT devices, Smart TV, Fire and Security Alarms, Internet Hub, usually in the users rush to get the devices out of the box and working default settings are agreed. A different approach would be to make devices, or Software activation result in the strongest Privacy settings, that the user then has to change. A further refinement would be after a time period say 60 days the user has to reauthorize Privacy settings if they have been reset. Some software/Devices is starting to do this, but the only way to enforce this is by law, very much in the same way electrical supply systems are regulated. ]]> 2020-12-10 22:17:35 UTC https://padlet.com/moocdeliveryteam/a3wmiuwvsgqyawit/wish/1008220560 "Privacy" is really a past we believe to still be the present https://padlet.com/moocdeliveryteam/a3wmiuwvsgqyawit/wish/1011711231 I looked through others ideas before posting to see where I disagreed and agreed and really through exploration of this course I see privacy in its entirety is simple a myth. in order to progress technology through IoT and recent practices, we must sacrifice a part of our identity piece by piece. Simply going on to a different website each day for university research or for a break I am presented with cookies and regulatory forms which of course I don't read as my brain has accepted this is the way. I believe to achieve the progression required. To become truly ubiquitous, these compromises must be made. I do not accept negligence in this action, care MUST be taken, guidelines MUST be followed but I accept it none the less.]]> 2020-12-12 00:18:57 UTC https://padlet.com/moocdeliveryteam/a3wmiuwvsgqyawit/wish/1011711231 Personal Information Management Systems- PIMS https://padlet.com/moocdeliveryteam/a3wmiuwvsgqyawit/wish/1012852497 PIMS market shows a huge growth potential, estimating 16 billion GBP in the UK. This could be a solution for many of the privacy issues underlined in the 'smart home' , but designers should explain the benefits and risks of different types of PIMS (local or cloud) for data security.]]> 2020-12-12 23:26:49 UTC https://padlet.com/moocdeliveryteam/a3wmiuwvsgqyawit/wish/1012852497 Privacy and Consent https://padlet.com/moocdeliveryteam/a3wmiuwvsgqyawit/wish/1018230212 We are still living in a world where we our default is to assume privacy in certain situations eg walking through town centre etc etc so we are still adjusting our behaviours and mindsets to actually we are being watched and our privacy is very limited. While I am normally carefully about what IoT technology I have allowed into my house suddenly now that I am working from home I need a webcam for work and suddenly I no longer think about the implication of what is the camera recording and what can be accessed through it.
When t comes to consent I increasingly find that I cannot or often do not fully understand the different options in relation to the software I am looking to use or the cookies on the website and find myself just accepting as there is not the time to fully engage with it. So again making compromises due to not fully understanding and design of the software not aiding.
So clear and easy to understand design that alerts me to this would help but then again what is easy for me to understand is maybe difficult for someone else - so are we doomed to gradually give away our privacy?

 ]]> 2020-12-14 23:21:45 UTC https://padlet.com/moocdeliveryteam/a3wmiuwvsgqyawit/wish/1018230212 Improvement in IoT design https://padlet.com/moocdeliveryteam/a3wmiuwvsgqyawit/wish/1018581500 Smart devices must consider security of data and people when they are designed. The designers often assume that users have full knowledge of the functioning of the device and they read and understand the fine print, and that they will use all necessary levels of protection. This should be pivoted around and all design should be safe and privacy protected by default.

The rush to market products and save time and cost needs to give way to security consideration. 

]]> 2020-12-15 02:15:26 UTC https://padlet.com/moocdeliveryteam/a3wmiuwvsgqyawit/wish/1018581500 Alexa automatic mute https://padlet.com/moocdeliveryteam/a3wmiuwvsgqyawit/wish/1025989937 Alexa should uphold the value of privacy, but one of the main concerns is that she is always listening. You could add a feature where you can set certain times of the day for her to be automatically muted so that she cannot accidentally be triggered on to listen.]]> 2020-12-16 22:47:10 UTC https://padlet.com/moocdeliveryteam/a3wmiuwvsgqyawit/wish/1025989937 Geo/location services https://padlet.com/moocdeliveryteam/a3wmiuwvsgqyawit/wish/1028726272 Unless required, these only monitor your journeys when you ask them to. I’ve found occasions where Google is able to map out wherever I’ve been, without me (knowingly) having selected for them to track me like this. Being transparent with how much data a company has access to or profiles is also important, transparent in a clear way and not buried within a long privacy policy. Perhaps someone can have their usual long policy, but also have a summary part where people can click “I understand” to certain material statements, it disaggregated these things just like the GDPR tries to do. Additionally so many “financial” companies call me relating to an investment and I have no idea how they got my details and why there are so many that call me. There is clearly an issue with how data is shared. ]]> 2020-12-17 17:48:56 UTC https://padlet.com/moocdeliveryteam/a3wmiuwvsgqyawit/wish/1028726272 Navigators with only the essential. https://padlet.com/moocdeliveryteam/a3wmiuwvsgqyawit/wish/1030710914 We have got used to using Google Maps for our daily driving needs.
In most cases, google records everything, from the route we have followed, our speed, the shops we stopped at, or crossed; it even suggests we write reviews about them! Is all this part of our navigation needs? 
If I were to design such a system, I would pop up a set of settings before every use:
"Please select the info you would like us to collect during the navigation" with nothing pre-selected. Then for each of these fields, a clear explanation of how this would be used and how it would be useful to me. ]]> 2020-12-18 09:27:23 UTC https://padlet.com/moocdeliveryteam/a3wmiuwvsgqyawit/wish/1030710914 Tackling function creep https://padlet.com/moocdeliveryteam/a3wmiuwvsgqyawit/wish/1032627003 Value sensitive design should incorporate a way for the original intended purpose of the technology  to be 'hard-wired' into the design so that any change in use is signalled to the user and requires further explicit consent]]> 2020-12-18 20:45:40 UTC https://padlet.com/moocdeliveryteam/a3wmiuwvsgqyawit/wish/1032627003 Home smart camera https://padlet.com/moocdeliveryteam/a3wmiuwvsgqyawit/wish/1033211094 A design modification that enables the user to access and manage cloud data ]]> 2020-12-19 09:28:39 UTC https://padlet.com/moocdeliveryteam/a3wmiuwvsgqyawit/wish/1033211094 All smart technologies suppose to be slave of the humans. However, what it algorithm is changed by interested designers in the way that it would work just for them?Perhaps should be a lot of supervisors involved. https://padlet.com/moocdeliveryteam/a3wmiuwvsgqyawit/wish/1033360674 2020-12-19 13:42:19 UTC https://padlet.com/moocdeliveryteam/a3wmiuwvsgqyawit/wish/1033360674 really clear data usage https://padlet.com/moocdeliveryteam/a3wmiuwvsgqyawit/wish/1033713048 upfront clarity about what is going to be 1) collected, 2) used, 3) stored (where & for how long) and 4) accessed (and by whom). Proactive communication of any changes to that - in a clear email of a couple of paragraphs, not pages of legalese]]> 2020-12-19 21:05:52 UTC https://padlet.com/moocdeliveryteam/a3wmiuwvsgqyawit/wish/1033713048 Tech laws help decentralise the internet architecture https://padlet.com/moocdeliveryteam/a3wmiuwvsgqyawit/wish/1036847535 The Brussels' law GDPR rightly sets the framework of privacy by design so that firms can comply to this legislation, esp. their clients are based in the EU. 

Potentially problematic which IoT technologies may enable incl. dataveillance and cybersecurity, and these issues should be addressed by tech policies and regulations as well as tech solutions (e.g. Freedom Box, BBC Box, Signal, decentralised social media like FedDiverse, etc). 

Our society has been exponentially digitalised while human capacity and knowledge as well as tech policies do not match up with fast-paced technological development.  Thus, the so-called new governors (ie. tech giants) set their rules (ie. business models based on neoliberalism) which compromise our democracy, freedom of expression and privacy. 
 
Digital rights advocates along with democratic and just governments can thus help raise awareness, educate and scrutinise tech conglomerates' business practices or even fine them if found violating in/national laws.]]> 2020-12-21 21:48:33 UTC https://padlet.com/moocdeliveryteam/a3wmiuwvsgqyawit/wish/1036847535