SWFLN: Digital Privacy & FootPrints

Digital Footprints & Privacy

AM PresentationSWFLN Tech Day

Agenda Staying Secure Minimizing Our Footprints Precautions, Changes & Resources

Staying Secure

Password Managers

• Lastpass• Dashlane• Firefox• KeePassX (works on Linux

& Mac)

Chart Source: http://goo.gl/uBwhw

Two-Step Authentication

Facebook

Amazon

Your Account > Change Account Settings > Advanced Security Settings

Other sites with 2-step authenticationGoogleAppleMicrosoft

Fingerprint Authentication

Pattern Recognition

What’s next?More biometrics – iris scansNFC

Malware and Hackers

Click Bait

Quizzes & Apps

Image & more: https://goo.gl/6eG813

Phishers

Image: http://goo.gl/Tr3uUm

Protection from: Anti-Malware & Other ThreatsClamavMalwarebytesMobile Protection from: Anti-Malware & Other ThreatsNorton SecurityLookout Security

Minimizing Our

Footprints

Choosing a Browser

Chrome

Firefox

Edge

Tor

Internet Explorer

Google and Microsoft

Privacy Extensions for Chrome & Firefox

WOT

Lightbeam

Ad Block Plus

Privacy Badger

No Script

Firefox Only

uBlock Origin

https://goo.gl/HQTefqFirefox Only

Be aware….many extensions extend your digital footprints

Settings to

consider

Chrome

Firefox

Changing your search engine

Duck Duck Go

DisconnectMe

Tor

Creating a more secure Tor:https://www.torproject.org/docs/bridges

• Disables: Flash, RealPlayer, Quicktime, and others

• Keeps websites from tracking

• Useful to keep internet activities away from advertisers, ISPs, and web sites.

• Great for browsing on public networks

• Will not stop the NSA

More @http://goo.gl/etffO5

Browsing Tips

http v. https: what does it mean?

HTTPS server are encrypted by a secure certificate known as an SSL. The encryption prevents third-parties from eavesdropping on communications to and from the server.

Great Articles to Learn More: https://www.eff.org/https-everywhere What Every Librarian Needs to Know…

HTTPSEasily Set Up HTTPS on your site: https://letsencrypt.org/Demand vendors use HTTPS

Make sure if both http and https

options are available you use https for

outgoing links

Private Tabs

Evaluate Your Operating System

Benefits to Linux- Open Source- Host your own cloud

space, RSS Reader and/or Website

- Revive an old PC- Less prone to

malware/viruses than Windows/Apple

- Its Free

Create a VPN or Anonymous NetworkPrism-Break

Leaving Microsoft & Apple Behind

Email

What email services collect?

https://goo.gl/T0yAdp

Alternative Email Services• Set up your own• hushmail • zoho • riseup

Key is to separate your search & your

identity as much as possible

Social Media

Facebook

Don’t forget to set up 2-

step authentication in Login Approvals

Who can see your friends?

Custom Privacy on a Post or Picture

What are you sharing?• Name, profile picture, age, sex, birthday, and other public info• Entire friend list• Everything you’ve ever posted on your timeline• All of your photos and photos you’re tagged in• Education history• Location• Hometown and current city• Everything you’ve ever liked• IP address• Info about the device you’re using including browser and language

Privacy Check Up is the best remedy

Leaving Facebook?

More tips: http://goo.gl/Y2KcwP

Twitter

Rules of Thumb for Libraries• Post Pictures • Allow tagging/but don’t tag

• Allow people to tag you• Set up Filters in settings

•Have a general SM Policy

• Social Media is an engagement tool & a conversation

General Tips• Use unique passwords for

each SM or Facebook as your main login tool

• Nothing is truly private• 4 Main Concerns: Malware,

Hackers, Data Harvesting & Personal Privacy

• Turn off “Location” for posts as a default

There are NO standards at this point. Follow the Electronic Privacy Information Center to learn more

The Internet of Things is a privacy nightmare.

What can we do as librarians?

Educate Ourselves & Users

Full List: https://www.eff.org/who-has-your-back-government-data-requests-2015

Follow Canary Watch (https://canarywatch.org/)

“Warrant canary" is a colloquial term for a regularly published statement that a service provider has not received legal process that it would be prohibited from saying it had received, such as a national security letter. Canarywatch tracks and documents these statements.”

https://twitter.com/warrantcanary

Organize a CrytoParty

What is Google collecting?Is Google trustworthy?

Stayed Involved & Informed Library Freedom Project https://www.eff.org/

diana@novarelibrary.comslideshare.net/dee987

Diana Silveira

www.novarelibrary.com