@kirilssolovjovs ://kirils.org/slides/2018-12-27_privacy2018_35c3w.pdf · 2018. 12. 27. ·...
TRANSCRIPT
![Page 1: @KirilsSolovjovs ://kirils.org/slides/2018-12-27_privacy2018_35c3w.pdf · 2018. 12. 27. · @KirilsSolovjovs, 2018. Final tally for personal privacy Social toll – Communication](https://reader033.vdocuments.site/reader033/viewer/2022060523/60528fbdb70850562d1c1817/html5/thumbnails/1.jpg)
Toll of personal privacy in 2018? @KirilsSolovjovshttps://kirils.org
![Page 2: @KirilsSolovjovs ://kirils.org/slides/2018-12-27_privacy2018_35c3w.pdf · 2018. 12. 27. · @KirilsSolovjovs, 2018. Final tally for personal privacy Social toll – Communication](https://reader033.vdocuments.site/reader033/viewer/2022060523/60528fbdb70850562d1c1817/html5/thumbnails/2.jpg)
@KirilsSolovjovs, 2018. https://kirils.org
“Privacy is dead”
16 May 2018, Twitter
![Page 3: @KirilsSolovjovs ://kirils.org/slides/2018-12-27_privacy2018_35c3w.pdf · 2018. 12. 27. · @KirilsSolovjovs, 2018. Final tally for personal privacy Social toll – Communication](https://reader033.vdocuments.site/reader033/viewer/2022060523/60528fbdb70850562d1c1817/html5/thumbnails/3.jpg)
@KirilsSolovjovs, 2018. https://kirils.org
![Page 4: @KirilsSolovjovs ://kirils.org/slides/2018-12-27_privacy2018_35c3w.pdf · 2018. 12. 27. · @KirilsSolovjovs, 2018. Final tally for personal privacy Social toll – Communication](https://reader033.vdocuments.site/reader033/viewer/2022060523/60528fbdb70850562d1c1817/html5/thumbnails/4.jpg)
@KirilsSolovjovs, 2018. https://kirils.org
![Page 5: @KirilsSolovjovs ://kirils.org/slides/2018-12-27_privacy2018_35c3w.pdf · 2018. 12. 27. · @KirilsSolovjovs, 2018. Final tally for personal privacy Social toll – Communication](https://reader033.vdocuments.site/reader033/viewer/2022060523/60528fbdb70850562d1c1817/html5/thumbnails/5.jpg)
@KirilsSolovjovs, 2018. https://kirils.org
![Page 6: @KirilsSolovjovs ://kirils.org/slides/2018-12-27_privacy2018_35c3w.pdf · 2018. 12. 27. · @KirilsSolovjovs, 2018. Final tally for personal privacy Social toll – Communication](https://reader033.vdocuments.site/reader033/viewer/2022060523/60528fbdb70850562d1c1817/html5/thumbnails/6.jpg)
@KirilsSolovjovs, 2018. https://kirils.org
“Meh, that’s just China being China!”
![Page 7: @KirilsSolovjovs ://kirils.org/slides/2018-12-27_privacy2018_35c3w.pdf · 2018. 12. 27. · @KirilsSolovjovs, 2018. Final tally for personal privacy Social toll – Communication](https://reader033.vdocuments.site/reader033/viewer/2022060523/60528fbdb70850562d1c1817/html5/thumbnails/7.jpg)
@KirilsSolovjovs, 2018. https://kirils.org
OK. What about Europe?
![Page 8: @KirilsSolovjovs ://kirils.org/slides/2018-12-27_privacy2018_35c3w.pdf · 2018. 12. 27. · @KirilsSolovjovs, 2018. Final tally for personal privacy Social toll – Communication](https://reader033.vdocuments.site/reader033/viewer/2022060523/60528fbdb70850562d1c1817/html5/thumbnails/8.jpg)
@KirilsSolovjovs, 2018. https://kirils.org
Visas — biometry
![Page 9: @KirilsSolovjovs ://kirils.org/slides/2018-12-27_privacy2018_35c3w.pdf · 2018. 12. 27. · @KirilsSolovjovs, 2018. Final tally for personal privacy Social toll – Communication](https://reader033.vdocuments.site/reader033/viewer/2022060523/60528fbdb70850562d1c1817/html5/thumbnails/9.jpg)
@KirilsSolovjovs, 2018. https://kirils.org
Passports — biometry
not requiring a fingerprint
storing fingerprint only in passports
storing the hash of fingerprints in DB
storing the whole damn fingerprint in DB
![Page 10: @KirilsSolovjovs ://kirils.org/slides/2018-12-27_privacy2018_35c3w.pdf · 2018. 12. 27. · @KirilsSolovjovs, 2018. Final tally for personal privacy Social toll – Communication](https://reader033.vdocuments.site/reader033/viewer/2022060523/60528fbdb70850562d1c1817/html5/thumbnails/10.jpg)
@KirilsSolovjovs, 2018. https://kirils.org
Banks know what you buy
![Page 11: @KirilsSolovjovs ://kirils.org/slides/2018-12-27_privacy2018_35c3w.pdf · 2018. 12. 27. · @KirilsSolovjovs, 2018. Final tally for personal privacy Social toll – Communication](https://reader033.vdocuments.site/reader033/viewer/2022060523/60528fbdb70850562d1c1817/html5/thumbnails/11.jpg)
@KirilsSolovjovs, 2018. https://kirils.org
Online profiling
![Page 12: @KirilsSolovjovs ://kirils.org/slides/2018-12-27_privacy2018_35c3w.pdf · 2018. 12. 27. · @KirilsSolovjovs, 2018. Final tally for personal privacy Social toll – Communication](https://reader033.vdocuments.site/reader033/viewer/2022060523/60528fbdb70850562d1c1817/html5/thumbnails/12.jpg)
@KirilsSolovjovs, 2018. https://kirils.org
Online profiling● EU fixed that in May 2011!
![Page 13: @KirilsSolovjovs ://kirils.org/slides/2018-12-27_privacy2018_35c3w.pdf · 2018. 12. 27. · @KirilsSolovjovs, 2018. Final tally for personal privacy Social toll – Communication](https://reader033.vdocuments.site/reader033/viewer/2022060523/60528fbdb70850562d1c1817/html5/thumbnails/13.jpg)
@KirilsSolovjovs, 2018. https://kirils.org
Online profiling● EU fixed that in May 2011!
● EU fixed that in May 2018!
![Page 14: @KirilsSolovjovs ://kirils.org/slides/2018-12-27_privacy2018_35c3w.pdf · 2018. 12. 27. · @KirilsSolovjovs, 2018. Final tally for personal privacy Social toll – Communication](https://reader033.vdocuments.site/reader033/viewer/2022060523/60528fbdb70850562d1c1817/html5/thumbnails/14.jpg)
@KirilsSolovjovs, 2018. https://kirils.org
Online profiling● EU fixed that in May 2011!
● EU fixed that in May 2018!
![Page 15: @KirilsSolovjovs ://kirils.org/slides/2018-12-27_privacy2018_35c3w.pdf · 2018. 12. 27. · @KirilsSolovjovs, 2018. Final tally for personal privacy Social toll – Communication](https://reader033.vdocuments.site/reader033/viewer/2022060523/60528fbdb70850562d1c1817/html5/thumbnails/15.jpg)
@KirilsSolovjovs, 2018. https://kirils.org
CCTV
![Page 16: @KirilsSolovjovs ://kirils.org/slides/2018-12-27_privacy2018_35c3w.pdf · 2018. 12. 27. · @KirilsSolovjovs, 2018. Final tally for personal privacy Social toll – Communication](https://reader033.vdocuments.site/reader033/viewer/2022060523/60528fbdb70850562d1c1817/html5/thumbnails/16.jpg)
@KirilsSolovjovs, 2018. https://kirils.org
Alright alright, but ...
![Page 17: @KirilsSolovjovs ://kirils.org/slides/2018-12-27_privacy2018_35c3w.pdf · 2018. 12. 27. · @KirilsSolovjovs, 2018. Final tally for personal privacy Social toll – Communication](https://reader033.vdocuments.site/reader033/viewer/2022060523/60528fbdb70850562d1c1817/html5/thumbnails/17.jpg)
@KirilsSolovjovs, 2018. https://kirils.org
Privacy is for criminals
![Page 18: @KirilsSolovjovs ://kirils.org/slides/2018-12-27_privacy2018_35c3w.pdf · 2018. 12. 27. · @KirilsSolovjovs, 2018. Final tally for personal privacy Social toll – Communication](https://reader033.vdocuments.site/reader033/viewer/2022060523/60528fbdb70850562d1c1817/html5/thumbnails/18.jpg)
@KirilsSolovjovs, 2018. https://kirils.org
Not really. In fact ...
27 May 2018, POLITICO
![Page 19: @KirilsSolovjovs ://kirils.org/slides/2018-12-27_privacy2018_35c3w.pdf · 2018. 12. 27. · @KirilsSolovjovs, 2018. Final tally for personal privacy Social toll – Communication](https://reader033.vdocuments.site/reader033/viewer/2022060523/60528fbdb70850562d1c1817/html5/thumbnails/19.jpg)
@KirilsSolovjovs, 2018. https://kirils.org
Privacy is power“Privacy [is] power dynamics between the individual, the state and the market.”
“As recent scandals have illustrated so vividly, privacy is also about the autonomy, dignity, and self-determination of people [..]”
“[Data protection] must seek to mitigate the inherent power imbalances between people — and those that collect, process and profit off their data.”
27 May 2018, POLITICO
![Page 20: @KirilsSolovjovs ://kirils.org/slides/2018-12-27_privacy2018_35c3w.pdf · 2018. 12. 27. · @KirilsSolovjovs, 2018. Final tally for personal privacy Social toll – Communication](https://reader033.vdocuments.site/reader033/viewer/2022060523/60528fbdb70850562d1c1817/html5/thumbnails/20.jpg)
@KirilsSolovjovs, 2018. https://kirils.org
Personal privacy choicesZealously fighting for my privacy over the past 5+ years
![Page 21: @KirilsSolovjovs ://kirils.org/slides/2018-12-27_privacy2018_35c3w.pdf · 2018. 12. 27. · @KirilsSolovjovs, 2018. Final tally for personal privacy Social toll – Communication](https://reader033.vdocuments.site/reader033/viewer/2022060523/60528fbdb70850562d1c1817/html5/thumbnails/21.jpg)
@KirilsSolovjovs, 2018. https://kirils.org
Operating system● Before: Windows 98 => Ubuntu Linux
● After: Linux Mint● Cost: Slower software updates
![Page 22: @KirilsSolovjovs ://kirils.org/slides/2018-12-27_privacy2018_35c3w.pdf · 2018. 12. 27. · @KirilsSolovjovs, 2018. Final tally for personal privacy Social toll – Communication](https://reader033.vdocuments.site/reader033/viewer/2022060523/60528fbdb70850562d1c1817/html5/thumbnails/22.jpg)
@KirilsSolovjovs, 2018. https://kirils.org
Browsing habits● Before: JavaScript & Adobe Flash allowed
● After: No JavaScript except pre-approved sites, no Flash● Cost: Limited choice of e-shopping and online services
Yes, that’s a blank page
P.S. https://kirils.org/#2016-12-30
![Page 23: @KirilsSolovjovs ://kirils.org/slides/2018-12-27_privacy2018_35c3w.pdf · 2018. 12. 27. · @KirilsSolovjovs, 2018. Final tally for personal privacy Social toll – Communication](https://reader033.vdocuments.site/reader033/viewer/2022060523/60528fbdb70850562d1c1817/html5/thumbnails/23.jpg)
@KirilsSolovjovs, 2018. https://kirils.org
Browsing habits● Before: Accept and honor all cookies
● After: Only accept temporary first-party cookies● Cost: ReCAPTCHA hates me
![Page 24: @KirilsSolovjovs ://kirils.org/slides/2018-12-27_privacy2018_35c3w.pdf · 2018. 12. 27. · @KirilsSolovjovs, 2018. Final tally for personal privacy Social toll – Communication](https://reader033.vdocuments.site/reader033/viewer/2022060523/60528fbdb70850562d1c1817/html5/thumbnails/24.jpg)
@KirilsSolovjovs, 2018. https://kirils.org
E-mailing● Before: HTML support
● After: No HTML support● Cost: My pen-pals hate me
![Page 25: @KirilsSolovjovs ://kirils.org/slides/2018-12-27_privacy2018_35c3w.pdf · 2018. 12. 27. · @KirilsSolovjovs, 2018. Final tally for personal privacy Social toll – Communication](https://reader033.vdocuments.site/reader033/viewer/2022060523/60528fbdb70850562d1c1817/html5/thumbnails/25.jpg)
@KirilsSolovjovs, 2018. https://kirils.org
E-mailing● Before: Public e-mail service
● After: Own domain on own server● Cost: Gmail users never get my first e-mail
![Page 26: @KirilsSolovjovs ://kirils.org/slides/2018-12-27_privacy2018_35c3w.pdf · 2018. 12. 27. · @KirilsSolovjovs, 2018. Final tally for personal privacy Social toll – Communication](https://reader033.vdocuments.site/reader033/viewer/2022060523/60528fbdb70850562d1c1817/html5/thumbnails/26.jpg)
@KirilsSolovjovs, 2018. https://kirils.org
Phone● Before: Siemens CX65
● After: Nokia 3330● Cost: No (properly) encrypted communications
![Page 27: @KirilsSolovjovs ://kirils.org/slides/2018-12-27_privacy2018_35c3w.pdf · 2018. 12. 27. · @KirilsSolovjovs, 2018. Final tally for personal privacy Social toll – Communication](https://reader033.vdocuments.site/reader033/viewer/2022060523/60528fbdb70850562d1c1817/html5/thumbnails/27.jpg)
@KirilsSolovjovs, 2018. https://kirils.org
Mobile apps● Before: ????
● After: no GPS permission*,
no contacts, no mic/cam*
*with specific exceptions
● Cost: Some apps don’t work at all
Stuck in 2010 era
![Page 28: @KirilsSolovjovs ://kirils.org/slides/2018-12-27_privacy2018_35c3w.pdf · 2018. 12. 27. · @KirilsSolovjovs, 2018. Final tally for personal privacy Social toll – Communication](https://reader033.vdocuments.site/reader033/viewer/2022060523/60528fbdb70850562d1c1817/html5/thumbnails/28.jpg)
@KirilsSolovjovs, 2018. https://kirils.org
Social networks & chats● Before: IRC, facebook
● After: XMPP, wire, twitter● Cost: Social exclusion, limited social circle
![Page 29: @KirilsSolovjovs ://kirils.org/slides/2018-12-27_privacy2018_35c3w.pdf · 2018. 12. 27. · @KirilsSolovjovs, 2018. Final tally for personal privacy Social toll – Communication](https://reader033.vdocuments.site/reader033/viewer/2022060523/60528fbdb70850562d1c1817/html5/thumbnails/29.jpg)
@KirilsSolovjovs, 2018. https://kirils.org
Re-socializing● Before: Install ALL THE APPS
● After: Fake phone number in Signal, Telegram, etc.● Cost: Account takeover in 3..2..1.. (Unless you set-up a two-step PIN)
![Page 30: @KirilsSolovjovs ://kirils.org/slides/2018-12-27_privacy2018_35c3w.pdf · 2018. 12. 27. · @KirilsSolovjovs, 2018. Final tally for personal privacy Social toll – Communication](https://reader033.vdocuments.site/reader033/viewer/2022060523/60528fbdb70850562d1c1817/html5/thumbnails/30.jpg)
@KirilsSolovjovs, 2018. https://kirils.org
Other people’s apps● Before: People giving away my information to companies
● After: ???? Private caller ID ????● Cost: Having no friends
![Page 31: @KirilsSolovjovs ://kirils.org/slides/2018-12-27_privacy2018_35c3w.pdf · 2018. 12. 27. · @KirilsSolovjovs, 2018. Final tally for personal privacy Social toll – Communication](https://reader033.vdocuments.site/reader033/viewer/2022060523/60528fbdb70850562d1c1817/html5/thumbnails/31.jpg)
@KirilsSolovjovs, 2018. https://kirils.org
Photos● Before: Loved taking photos and being in photos
● After: Always the photographer● Cost: Bewildered stares
![Page 32: @KirilsSolovjovs ://kirils.org/slides/2018-12-27_privacy2018_35c3w.pdf · 2018. 12. 27. · @KirilsSolovjovs, 2018. Final tally for personal privacy Social toll – Communication](https://reader033.vdocuments.site/reader033/viewer/2022060523/60528fbdb70850562d1c1817/html5/thumbnails/32.jpg)
@KirilsSolovjovs, 2018. https://kirils.org
Legal protection● Before: Companies mishandling my data
● After: Companies (telling me they’re?) not doing that● Cost: Approx 3000 euro/year in lost productivity
Lot’s of “don’t you have anything better to do?”
![Page 33: @KirilsSolovjovs ://kirils.org/slides/2018-12-27_privacy2018_35c3w.pdf · 2018. 12. 27. · @KirilsSolovjovs, 2018. Final tally for personal privacy Social toll – Communication](https://reader033.vdocuments.site/reader033/viewer/2022060523/60528fbdb70850562d1c1817/html5/thumbnails/33.jpg)
@KirilsSolovjovs, 2018. https://kirils.org
Visitors● Before: Friends “checking into” my home
● After: Only trusted circle invited● Cost: More space taken up by undrunk booze hoarded during trips
![Page 34: @KirilsSolovjovs ://kirils.org/slides/2018-12-27_privacy2018_35c3w.pdf · 2018. 12. 27. · @KirilsSolovjovs, 2018. Final tally for personal privacy Social toll – Communication](https://reader033.vdocuments.site/reader033/viewer/2022060523/60528fbdb70850562d1c1817/html5/thumbnails/34.jpg)
@KirilsSolovjovs, 2018. https://kirils.org
Loyalty cards● Before: Real data
● After: Fake data, cloned cards● Cost: I can’t legally request anything about “me”
![Page 35: @KirilsSolovjovs ://kirils.org/slides/2018-12-27_privacy2018_35c3w.pdf · 2018. 12. 27. · @KirilsSolovjovs, 2018. Final tally for personal privacy Social toll – Communication](https://reader033.vdocuments.site/reader033/viewer/2022060523/60528fbdb70850562d1c1817/html5/thumbnails/35.jpg)
@KirilsSolovjovs, 2018. https://kirils.org
Public transport● Before: Paper-based discount tickets
● After: Paper-based one-trip tickets● Cost: 666% (no joke) increase in cost
![Page 36: @KirilsSolovjovs ://kirils.org/slides/2018-12-27_privacy2018_35c3w.pdf · 2018. 12. 27. · @KirilsSolovjovs, 2018. Final tally for personal privacy Social toll – Communication](https://reader033.vdocuments.site/reader033/viewer/2022060523/60528fbdb70850562d1c1817/html5/thumbnails/36.jpg)
@KirilsSolovjovs, 2018. https://kirils.org
Banking● Before: Being paid via wire transfer, using cards to shop
● After: Paid cash, inactive accounts, prepaid cards● Cost: “Gold customer” status unusable
Hard time booking flights and hotels
Never managed to rent a car (should be doable though)
Taxify blocks all my cards
![Page 37: @KirilsSolovjovs ://kirils.org/slides/2018-12-27_privacy2018_35c3w.pdf · 2018. 12. 27. · @KirilsSolovjovs, 2018. Final tally for personal privacy Social toll – Communication](https://reader033.vdocuments.site/reader033/viewer/2022060523/60528fbdb70850562d1c1817/html5/thumbnails/37.jpg)
@KirilsSolovjovs, 2018. https://kirils.org
CCTV● Before: Filmed by all CCTVs on the street & in shops
● After: Wearing a mask● Cost: Security challenges you all the damn time
![Page 38: @KirilsSolovjovs ://kirils.org/slides/2018-12-27_privacy2018_35c3w.pdf · 2018. 12. 27. · @KirilsSolovjovs, 2018. Final tally for personal privacy Social toll – Communication](https://reader033.vdocuments.site/reader033/viewer/2022060523/60528fbdb70850562d1c1817/html5/thumbnails/38.jpg)
@KirilsSolovjovs, 2018. https://kirils.org
Biometric passports● Before: ????
● After: Not giving up your fingerprints● Cost: Living without a passport & not getting to travel
![Page 39: @KirilsSolovjovs ://kirils.org/slides/2018-12-27_privacy2018_35c3w.pdf · 2018. 12. 27. · @KirilsSolovjovs, 2018. Final tally for personal privacy Social toll – Communication](https://reader033.vdocuments.site/reader033/viewer/2022060523/60528fbdb70850562d1c1817/html5/thumbnails/39.jpg)
@KirilsSolovjovs, 2018. https://kirils.org
Creating photocopies of ID● Before: “Yes, of course you can copy my ID”● After: “Nope. Nope. Nope. Nope”
● Cost: Cannot use Revolut / N26
Good people getting annoyed
Had to call the cops on clerks at
a hotel in Belgium
Called an (_*_) by a banker
![Page 40: @KirilsSolovjovs ://kirils.org/slides/2018-12-27_privacy2018_35c3w.pdf · 2018. 12. 27. · @KirilsSolovjovs, 2018. Final tally for personal privacy Social toll – Communication](https://reader033.vdocuments.site/reader033/viewer/2022060523/60528fbdb70850562d1c1817/html5/thumbnails/40.jpg)
@KirilsSolovjovs, 2018. https://kirils.org
Final tally for personal privacy● Social toll
– Communication challenges
– Disapproval by peers and society
– Limited social circle
● Financial toll– Limited choices on-line
(goods, hotels, travel)
– Increased transportation costs
● Technological toll– Much more time needed to do the same things
– Impeded access to new tech
– Inability to take part in the IoT craze
● No– access to own data
– international travel
PRICELESS
![Page 41: @KirilsSolovjovs ://kirils.org/slides/2018-12-27_privacy2018_35c3w.pdf · 2018. 12. 27. · @KirilsSolovjovs, 2018. Final tally for personal privacy Social toll – Communication](https://reader033.vdocuments.site/reader033/viewer/2022060523/60528fbdb70850562d1c1817/html5/thumbnails/41.jpg)
@KirilsSolovjovs, 2018. https://kirils.org
What can we do?
● Convince legislators– Can’t lobby? Complain loudly on social media
or watch my presentation on lobbying
● Develop privacy-conscious systems – Not a dev? Demand that devs do that!
● Don’t be complicit– Stand up for yourself
– Lead by example
![Page 42: @KirilsSolovjovs ://kirils.org/slides/2018-12-27_privacy2018_35c3w.pdf · 2018. 12. 27. · @KirilsSolovjovs, 2018. Final tally for personal privacy Social toll – Communication](https://reader033.vdocuments.site/reader033/viewer/2022060523/60528fbdb70850562d1c1817/html5/thumbnails/42.jpg)
@KirilsSolovjovs, 2018. https://kirils.org
Who was that guy?● A privacy zealot, obviously
● Lead researcher at Possible Security, Latvia
● Hacking and breaking things:– Network flow analysis & RE
– Social engineering
– Legal dimension
@KirilsSolovjovsFollow me! It’s all English!