Sunday, October 8, 2017

Why everyone needs to care about digital security.

Imagine this, you're out and about, having fun or working (or having fun while working), and you get pick-pocketed, your wallet is safe and your phone is still with you but something is not right. You were not physically stolen from but ALL your data was stolen by someone, could be a government (your own or another), a prankster, a small time crook looking to make a quick buck by selling your banking info, or worse, someone unknown with some motive that requires your private data.This happens to people all the time and most don't know, most that do know don't care and those that do care don't get digitally pick-pocketed.

Back in 7th grade I was talking about digital privacy and security, and to my shock everyone who heard was poking fun about that topic.Having a passcode on a device is just a good idea, and so is disabling any applications that are known to steal one's data. Despite thinking privacy is old and obsolete, everyone who was there got really upset at the prospect of giving their device and passcode to another person in the room. They understood that privacy is needed from each other but didn't seem to care about their data being taken by a company or government (foreign or domestic). Interesting how the conversation changes when the privacy scope switches to the immediate and close rather than the long term and remote.

Odds are if I asked you to unlock your house for me that you'd flat out deny me, same goes if I were to ask for your computer password, phone passcode, or any web login you have. So if you will not immediately and gleefully hand over at least read only access to every file attached to you (this includes that porn stash you'll never admit to) then why would you allow that digital pick-pocketer to gain entry?

Of course I asked that question rhetorically as blogs are not always interactive. My point is clear: "exactly what right does anyone, anyone at all have to gain access to ALL of your data? I think they have the same right as the government: exactly zero right to your data and your life."

I've been told the same things many times by members of the general public and my friends that hear me talk about this. Most people usually say to me that they would be mad if I or another civilian stole their data but wouldn't even lift a finger to stop their government, another government, border agents, or the cops from spying on them. Their reasoning is that they have nothing to hide and therefore nothing to fear, this is wrong on both of the points made.

  1. Everyone hides something, that's why you have a code and don't allow access to strangers. Maybe it's your banking info or that porn stash you never admit to having, maybe a naked selfie you took or an essay you no longer agree with.
  2. You always have something to fear, how do you know what data will come back to bite you later? The answer is that unless you have the omniscience of a god then you never will know what can come back to bite you later.
  3. You don't know that you have nothing to hide because you don't know the thoughts and motives of everyone who is interested in your data.
Privacy cannot happen without strong security which starts with safe usage practices and a strong passcode that you regularly change.

If you have even one password, then you have something you're hiding. I'm not accusing you, we all hide something, you can abide by the law and still have privacy and anyone who tells you different is either delusional, misinformed and deceived, trying to keep you in the dark so you're easy to take advantage of, or connected to a spy agency.

If the government can get in, then a hacker can get in the same way, and when the hacker gets in they'll look like they are with the government and make off with your data unsuspected of any crime. If you still think that it's alright for the government to spy on you and me then that news flash should hopefully awaken you to the real danger of bad security.

To protect yourself. use good passwords, and maybe a password manager such as KeepassX which also helps against keyloggers so they can't steal your code by watching the keyboard, and then educate yourself on your device's vulnerabilities so you can learn to cover them. Educate yourself on your local laws, where I live last time I checked the cops cannot force me to give my codes without a warrant and even then I can remain silent waiting for my lawyer to help though you may be in a different situation. Consider having a fake login that will access a fake folder with random data that is meaningless when used (generic pictures and music, fake names in your contacts. etc...), this will throw off a thief and will allow you to trick a cop or illegal searcher.

No comments:

Post a Comment

Latest Post

Steam on Linux Mint Cinnamon

Most viewed