Recomendados
Recomendados
Mais conteúdo relacionado
Mais procurados
Mais procurados (20)
Semelhante a The Ins, Outs, and Nuances of Internet Privacy
Semelhante a The Ins, Outs, and Nuances of Internet Privacy (20)
Mais de eBoost Consulting
Mais de eBoost Consulting (7)
Último
Último (20)
The Ins, Outs, and Nuances of Internet Privacy
- 2. What data do they track?
- 3. What data do they track? Can I anonymize my online activity?
- 4. What data do they track? Doesthe web know who I am? Can I anonymize my online activity?
- 5. What data do they track? Doesthe web know who I am? Can I anonymize my online activity? What about privacy rights?
- 8. Whatdata do they track? Doesthe web know who I am? Can I anonymize my online activity? What about privacy rights?
- 9. Whatdata do they track? Doesthe web know who I am? Can I anonymize my online activity? What about privacy rights?
- 10. Whatdata do they track? Doesthe web know who I am? Can I anonymize my online activity? What about privacy rights?
- 11. Whatdata do they track? Doesthe web know who I am? Can I anonymize my online activity? What about privacy rights?
- 12. Whatdata do they track? Doesthe web know who I am? Can I anonymize my online activity? What about privacy rights?
- 13. Whatdata do they track? Doesthe web know who I am? Can I anonymize my online activity? What about privacy rights?
- 14. Whatdata do they track? Doesthe web know who I am? Can I anonymize my online activity? What about privacy rights?
- 15. What data do they track? Doesthe web know who I am? Can I anonymize my online activity? What about privacy rights?
- 20. Photos
- 21. Photos build a life.
- 26. =
- 30. +
- 31. 39% +
- 32. 39% rejected +
- 37. - Rubicon Project - AdSonar(AOL) - Advertising.com (AOL) - Tacoda.net (AOL) - Quantcast - Pulse 360 - Undertone - AdBureau (Microsoft) - Traffic Marketplace - Doubleclick (Google)
- 38. In-Voluntary? Voluntary? - Rubicon Project - AdSonar(AOL) - Advertising.com (AOL) - Tacoda.net (AOL) - Quantcast - Pulse 360 - Undertone - AdBureau (Microsoft) - Traffic Marketplace - Doubleclick (Google)
- 39. In-Voluntary? - Rubicon Project - AdSonar(AOL) - Advertising.com (AOL) - Tacoda.net (AOL) - Quantcast - Pulse 360 - Undertone - AdBureau (Microsoft) - Traffic Marketplace - Doubleclick (Google)
- 40. In-Voluntary? Voluntary. - Rubicon Project - AdSonar(AOL) - Advertising.com (AOL) - Tacoda.net (AOL) - Quantcast - Pulse 360 - Undertone - AdBureau (Microsoft) - Traffic Marketplace - Doubleclick (Google)
- 42. test drive.
- 43. How does it happen? How
- 44. How does it happen? How Where does it go? Where
- 45. Traffic Analysis
- 46. Traffic Analysis Audience Profiling
- 47. Log Files
- 48. Web Beacons
- 49. Cookies
- 50. Consider this.
- 51. Consider this.
- 53. Risk / Reward [-] [+]
- 54. Risk / Reward [-] [+]
- 57. Badware
- 58. Badware
- 59. Badware Malware
- 60. Badware Malware
- 63. Badware Malware Spyware Web Bug Phishing Rootkit Virus Worm Probe Keylogger Trojan Horse …
- 64. Badware Malware Spyware Web Bug Phishing Rootkit Virus Worm Probe Keylogger Trojan Horse Web Bug Phishing Rootkit Virus Worm Probe …
- 67. Tell me, what is privacy?
- 68. Tell me, what is privacy?
- 69. Tell me, what is privacy?
- 70. Tell me, what is privacy?
- 71. Tell me, what is privacy?
- 72. Tell me, what is privacy?
- 73. Privacy Dictionary 1 The quality or state of being apart from company or observation 2 Freedom from unauthorized intrusion Legal Unlawful intrusion into private affairs, disclosure of private information, publication in a false light, or appropriation of a name for personal gain
- 74. Security Dictionary 1 Freedom from danger, risk, etc.; safety 2 Something that secures or makes safe; protection; defense Legal Internet security is a subset of actions aimed at securing information based on computers and in transit between them.
- 75. What you can do about privacy and security.
- 76. Privacy From Two Perspectives Tips For Consumers and Business Owners
- 77. Personal Privacy Ask yourself are you trying to secure your information or your activities? To Secure Activities on the internet consider Anonymity Tools The Onion Router (TOR) – Attempts to conceal your internet tracks by bouncing you around several layers of proxy routers, hence the term onion in the name. Think WikiLeaks To Secure information on your computer consider Privacy Tools Firewalls Antivirus Software (Microsoft Security Essentials-Free) Antimalware Software (SpyBot, Malware Bytes) Always check for proper SSL (https://) encryption before submitting any info to websites Change your Passwords!!!!!
- 78. Consumer Privacy Goals Maintain Secure Identity Only give out personal information on a need to know basis Check URL’s of websites to see that they match the SSL certificate before submitting personal info to sites Computer Updates to OS Plug security holes Data Backups Only as good as your last backup Backups can be infected as well if virus infections are not caught early
- 79. URL SSL Encryption Example
- 80. A Business Owner’s Perspective (i) Ever increasing customer privacy compliance requirements Data Breaches Hackers directly targeting individual companies Sony PS network LulzSec / Anonymous Lockheed Martin (RSA) Industrial Command And Control Virus Stuxnet (Iran)
- 81. A Business Owner’s Perspective (ii) LAN Security - Firewalls Wireless Security – Encryption (WPA2) Website Security – Encryption (SSL) PCI Compliance – External Network Probe For Security Database Security – Encryption of sensitive info on the DB Change Logs – Tracking all changes to sensitive information storage and management Audit Yourself before “THEY” Do – Find issues and fix them, its cheaper and easier….
- 82. A Business Owner’s Perspective (iii) Email Filtering Spam Filtering Services – AppRiver, Postini Email Virus Filtering – AppRiver, AV on the email server Daily Temp file deletion on workstations Clear Cookies, History from web browsers Daily AV Scans on all workstations Daily AV Scans on all servers before backups Cultivate a culture that allows staff to own up to virus infections when they happen. Catching virus activity early is the best defense.
- 83. A Business Owner’s Perspective (iv) Customer Data Collection All Websites and Apps must use SSL encryption when collecting user data. Even something as simple as a email newsletter should be secured. Opt-In on all data collection practices Clearly define what you will and won’t do with client data in a Privacy Policy posted on your site Adhere to your policy or change it if you deem necessary. Do not operate outside your stated policy Define a Data Retention Policy (Usually 3 years) Secure Destruction of data after retention policy
- 84. A Business Owner’s Perspective (v) Going International Know your countries privacy laws and adjust your internal collection practices to match. Sometimes Opt-in is not enough US-EU Safe Harbor Framework COPPA – Under 13 in the US Going international opens up easier routes to hacking corporate networks. Think China Hacking Google
- 85. The Ins, Outs, and Nuances of Internet Privacy June 30, 2011 Greg Hall Owner, 247 IT Outsourcing ghall@247ITOutsourcing.com
Notas do Editor
- Facebook is the most obvious example of a site with serious privacy considerations to address.Lives are documented onlineVoluntarily postedPhotos, locations, marital status, and moreBased on a recent survey in the US, 39% of employers have rejected job candidates after viewing their Facebook profile.http://www.bespokeit.co.uk/2011/06/02/9interesting-facts-about-social-networking-and-internet-privacy/As mentioned in the webinar invitation, Facebook recently came under fire as a result of turning on the photo auto-tagging feature to most of its users be defaultPicasa can do this as can Apple’s iPhotoThe issue is that the database detecting and tagging these photos lives on FB servers (not on the users computer)Creep factor enters when you realize how deep and broad FB’s facial recognition database isSourceshttp://www.pcworld.com/article/229870/facebook_photo_tagging_a_privacy_guide.htmlhttp://nakedsecurity.sophos.com/2011/06/07/facebook-privacy-settings-facial-recognition-enabled/In this case, the distribution of this feature raised privacy concerns
- Facebook is the most obvious example of a site with serious privacy considerations to address.Lives are documented onlineVoluntarily postedPhotos, locations, marital status, and moreBased on a recent survey in the US, 39% of employers have rejected job candidates after viewing their Facebook profile.http://www.bespokeit.co.uk/2011/06/02/9interesting-facts-about-social-networking-and-internet-privacy/As mentioned in the webinar invitation, Facebook recently came under fire as a result of turning on the photo auto-tagging feature to most of its users be defaultPicasa can do this as can Apple’s iPhotoThe issue is that the database detecting and tagging these photos lives on FB servers (not on the users computer)Creep factor enters when you realize how deep and broad FB’s facial recognition database isSourceshttp://www.pcworld.com/article/229870/facebook_photo_tagging_a_privacy_guide.htmlhttp://nakedsecurity.sophos.com/2011/06/07/facebook-privacy-settings-facial-recognition-enabled/In this case, the distribution of this feature raised privacy concerns
- Facebook is the most obvious example of a site with serious privacy considerations to address.Lives are documented onlineVoluntarily postedPhotos, locations, marital status, and moreBased on a recent survey in the US, 39% of employers have rejected job candidates after viewing their Facebook profile.http://www.bespokeit.co.uk/2011/06/02/9interesting-facts-about-social-networking-and-internet-privacy/As mentioned in the webinar invitation, Facebook recently came under fire as a result of turning on the photo auto-tagging feature to most of its users be defaultPicasa can do this as can Apple’s iPhotoThe issue is that the database detecting and tagging these photos lives on FB servers (not on the users computer)Creep factor enters when you realize how deep and broad FB’s facial recognition database isSourceshttp://www.pcworld.com/article/229870/facebook_photo_tagging_a_privacy_guide.htmlhttp://nakedsecurity.sophos.com/2011/06/07/facebook-privacy-settings-facial-recognition-enabled/In this case, the distribution of this feature raised privacy concerns
- Facebook is the most obvious example of a site with serious privacy considerations to address.Lives are documented onlineVoluntarily postedPhotos, locations, marital status, and moreBased on a recent survey in the US, 39% of employers have rejected job candidates after viewing their Facebook profile.http://www.bespokeit.co.uk/2011/06/02/9interesting-facts-about-social-networking-and-internet-privacy/As mentioned in the webinar invitation, Facebook recently came under fire as a result of turning on the photo auto-tagging feature to most of its users be defaultPicasa can do this as can Apple’s iPhotoThe issue is that the database detecting and tagging these photos lives on FB servers (not on the users computer)Creep factor enters when you realize how deep and broad FB’s facial recognition database isSourceshttp://www.pcworld.com/article/229870/facebook_photo_tagging_a_privacy_guide.htmlhttp://nakedsecurity.sophos.com/2011/06/07/facebook-privacy-settings-facial-recognition-enabled/In this case, the distribution of this feature raised privacy concerns
- Facebook is the most obvious example of a site with serious privacy considerations to address.Lives are documented onlineVoluntarily postedPhotos, locations, marital status, and moreBased on a recent survey in the US, 39% of employers have rejected job candidates after viewing their Facebook profile.http://www.bespokeit.co.uk/2011/06/02/9interesting-facts-about-social-networking-and-internet-privacy/As mentioned in the webinar invitation, Facebook recently came under fire as a result of turning on the photo auto-tagging feature to most of its users be defaultPicasa can do this as can Apple’s iPhotoThe issue is that the database detecting and tagging these photos lives on FB servers (not on the users computer)Creep factor enters when you realize how deep and broad FB’s facial recognition database isSourceshttp://www.pcworld.com/article/229870/facebook_photo_tagging_a_privacy_guide.htmlhttp://nakedsecurity.sophos.com/2011/06/07/facebook-privacy-settings-facial-recognition-enabled/In this case, the distribution of this feature raised privacy concerns
- Facebook is the most obvious example of a site with serious privacy considerations to address.Lives are documented onlineVoluntarily postedPhotos, locations, marital status, and moreBased on a recent survey in the US, 39% of employers have rejected job candidates after viewing their Facebook profile.http://www.bespokeit.co.uk/2011/06/02/9interesting-facts-about-social-networking-and-internet-privacy/As mentioned in the webinar invitation, Facebook recently came under fire as a result of turning on the photo auto-tagging feature to most of its users be defaultPicasa can do this as can Apple’s iPhotoThe issue is that the database detecting and tagging these photos lives on FB servers (not on the users computer)Creep factor enters when you realize how deep and broad FB’s facial recognition database isSourceshttp://www.pcworld.com/article/229870/facebook_photo_tagging_a_privacy_guide.htmlhttp://nakedsecurity.sophos.com/2011/06/07/facebook-privacy-settings-facial-recognition-enabled/In this case, the distribution of this feature raised privacy concerns
- Facebook is the most obvious example of a site with serious privacy considerations to address.Lives are documented onlineVoluntarily postedPhotos, locations, marital status, and moreBased on a recent survey in the US, 39% of employers have rejected job candidates after viewing their Facebook profile.http://www.bespokeit.co.uk/2011/06/02/9interesting-facts-about-social-networking-and-internet-privacy/As mentioned in the webinar invitation, Facebook recently came under fire as a result of turning on the photo auto-tagging feature to most of its users be defaultPicasa can do this as can Apple’s iPhotoThe issue is that the database detecting and tagging these photos lives on FB servers (not on the users computer)Creep factor enters when you realize how deep and broad FB’s facial recognition database isSourceshttp://www.pcworld.com/article/229870/facebook_photo_tagging_a_privacy_guide.htmlhttp://nakedsecurity.sophos.com/2011/06/07/facebook-privacy-settings-facial-recognition-enabled/In this case, the distribution of this feature raised privacy concerns
- Facebook is the most obvious example of a site with serious privacy considerations to address.Lives are documented onlineVoluntarily postedPhotos, locations, marital status, and moreBased on a recent survey in the US, 39% of employers have rejected job candidates after viewing their Facebook profile.http://www.bespokeit.co.uk/2011/06/02/9interesting-facts-about-social-networking-and-internet-privacy/As mentioned in the webinar invitation, Facebook recently came under fire as a result of turning on the photo auto-tagging feature to most of its users be defaultPicasa can do this as can Apple’s iPhotoThe issue is that the database detecting and tagging these photos lives on FB servers (not on the users computer)Creep factor enters when you realize how deep and broad FB’s facial recognition database isSourceshttp://www.pcworld.com/article/229870/facebook_photo_tagging_a_privacy_guide.htmlhttp://nakedsecurity.sophos.com/2011/06/07/facebook-privacy-settings-facial-recognition-enabled/In this case, the distribution of this feature raised privacy concerns
- Facebook is the most obvious example of a site with serious privacy considerations to address.Lives are documented onlineVoluntarily postedPhotos, locations, marital status, and moreBased on a recent survey in the US, 39% of employers have rejected job candidates after viewing their Facebook profile.http://www.bespokeit.co.uk/2011/06/02/9interesting-facts-about-social-networking-and-internet-privacy/As mentioned in the webinar invitation, Facebook recently came under fire as a result of turning on the photo auto-tagging feature to most of its users be defaultPicasa can do this as can Apple’s iPhotoThe issue is that the database detecting and tagging these photos lives on FB servers (not on the users computer)Creep factor enters when you realize how deep and broad FB’s facial recognition database isSourceshttp://www.pcworld.com/article/229870/facebook_photo_tagging_a_privacy_guide.htmlhttp://nakedsecurity.sophos.com/2011/06/07/facebook-privacy-settings-facial-recognition-enabled/In this case, the distribution of this feature raised privacy concerns
- Facebook is the most obvious example of a site with serious privacy considerations to address.Lives are documented onlineVoluntarily postedPhotos, locations, marital status, and moreBased on a recent survey in the US, 39% of employers have rejected job candidates after viewing their Facebook profile.http://www.bespokeit.co.uk/2011/06/02/9interesting-facts-about-social-networking-and-internet-privacy/As mentioned in the webinar invitation, Facebook recently came under fire as a result of turning on the photo auto-tagging feature to most of its users be defaultPicasa can do this as can Apple’s iPhotoThe issue is that the database detecting and tagging these photos lives on FB servers (not on the users computer)Creep factor enters when you realize how deep and broad FB’s facial recognition database isSourceshttp://www.pcworld.com/article/229870/facebook_photo_tagging_a_privacy_guide.htmlhttp://nakedsecurity.sophos.com/2011/06/07/facebook-privacy-settings-facial-recognition-enabled/In this case, the distribution of this feature raised privacy concerns
- Facebook is the most obvious example of a site with serious privacy considerations to address.Lives are documented onlineVoluntarily postedPhotos, locations, marital status, and moreBased on a recent survey in the US, 39% of employers have rejected job candidates after viewing their Facebook profile.http://www.bespokeit.co.uk/2011/06/02/9interesting-facts-about-social-networking-and-internet-privacy/As mentioned in the webinar invitation, Facebook recently came under fire as a result of turning on the photo auto-tagging feature to most of its users be defaultPicasa can do this as can Apple’s iPhotoThe issue is that the database detecting and tagging these photos lives on FB servers (not on the users computer)Creep factor enters when you realize how deep and broad FB’s facial recognition database isSourceshttp://www.pcworld.com/article/229870/facebook_photo_tagging_a_privacy_guide.htmlhttp://nakedsecurity.sophos.com/2011/06/07/facebook-privacy-settings-facial-recognition-enabled/In this case, the distribution of this feature raised privacy concerns
- Facebook is the most obvious example of a site with serious privacy considerations to address.Lives are documented onlineVoluntarily postedPhotos, locations, marital status, and moreBased on a recent survey in the US, 39% of employers have rejected job candidates after viewing their Facebook profile.http://www.bespokeit.co.uk/2011/06/02/9interesting-facts-about-social-networking-and-internet-privacy/As mentioned in the webinar invitation, Facebook recently came under fire as a result of turning on the photo auto-tagging feature to most of its users be defaultPicasa can do this as can Apple’s iPhotoThe issue is that the database detecting and tagging these photos lives on FB servers (not on the users computer)Creep factor enters when you realize how deep and broad FB’s facial recognition database isSourceshttp://www.pcworld.com/article/229870/facebook_photo_tagging_a_privacy_guide.htmlhttp://nakedsecurity.sophos.com/2011/06/07/facebook-privacy-settings-facial-recognition-enabled/In this case, the distribution of this feature raised privacy concerns
- Facebook is the most obvious example of a site with serious privacy considerations to address.Lives are documented onlineVoluntarily postedPhotos, locations, marital status, and moreBased on a recent survey in the US, 39% of employers have rejected job candidates after viewing their Facebook profile.http://www.bespokeit.co.uk/2011/06/02/9interesting-facts-about-social-networking-and-internet-privacy/As mentioned in the webinar invitation, Facebook recently came under fire as a result of turning on the photo auto-tagging feature to most of its users be defaultPicasa can do this as can Apple’s iPhotoThe issue is that the database detecting and tagging these photos lives on FB servers (not on the users computer)Creep factor enters when you realize how deep and broad FB’s facial recognition database isSourceshttp://www.pcworld.com/article/229870/facebook_photo_tagging_a_privacy_guide.htmlhttp://nakedsecurity.sophos.com/2011/06/07/facebook-privacy-settings-facial-recognition-enabled/In this case, the distribution of this feature raised privacy concerns
- Facebook is the most obvious example of a site with serious privacy considerations to address.Lives are documented onlineVoluntarily postedPhotos, locations, marital status, and moreBased on a recent survey in the US, 39% of employers have rejected job candidates after viewing their Facebook profile.http://www.bespokeit.co.uk/2011/06/02/9interesting-facts-about-social-networking-and-internet-privacy/As mentioned in the webinar invitation, Facebook recently came under fire as a result of turning on the photo auto-tagging feature to most of its users be defaultPicasa can do this as can Apple’s iPhotoThe issue is that the database detecting and tagging these photos lives on FB servers (not on the users computer)Creep factor enters when you realize how deep and broad FB’s facial recognition database isSourceshttp://www.pcworld.com/article/229870/facebook_photo_tagging_a_privacy_guide.htmlhttp://nakedsecurity.sophos.com/2011/06/07/facebook-privacy-settings-facial-recognition-enabled/In this case, the distribution of this feature raised privacy concerns
- Facebook is the most obvious example of a site with serious privacy considerations to address.Lives are documented onlineVoluntarily postedPhotos, locations, marital status, and moreBased on a recent survey in the US, 39% of employers have rejected job candidates after viewing their Facebook profile.http://www.bespokeit.co.uk/2011/06/02/9interesting-facts-about-social-networking-and-internet-privacy/As mentioned in the webinar invitation, Facebook recently came under fire as a result of turning on the photo auto-tagging feature to most of its users be defaultPicasa can do this as can Apple’s iPhotoThe issue is that the database detecting and tagging these photos lives on FB servers (not on the users computer)Creep factor enters when you realize how deep and broad FB’s facial recognition database isSourceshttp://www.pcworld.com/article/229870/facebook_photo_tagging_a_privacy_guide.htmlhttp://nakedsecurity.sophos.com/2011/06/07/facebook-privacy-settings-facial-recognition-enabled/In this case, the distribution of this feature raised privacy concerns
- Based on a recent survey in the US, 39% of employers have rejected job candidates after viewing their Facebook profile.
- Based on a recent survey in the US, 39% of employers have rejected job candidates after viewing their Facebook profile.
- Based on a recent survey in the US, 39% of employers have rejected job candidates after viewing their Facebook profile.
- CareerBuilder.com – behavioral targeting focus Let's start with an example of 3rd party tracking: when we went to CareerBuilder.com, which is the largest online jobs site in the United States, and searched for a job, CareerBuilder included JavaScript code from 10 (!) different tracking domains: Rubicon Project, AdSonar, Advertising.com, Tacoda.net (all three are divisions of AOL advertising), Quantcast, Pulse 360, Undertone, AdBureau (part of Microsoft Advertising), Traffic Marketplace, and DoubleClick (which is owned by Google). On other visits we've also seen CareerBuilder include tracking scripts and non-JavaScript web bugs from several other domains. There are pretty sound reasons to hope that when you search for a job online, that fact isn't broadcast to dozens of companies you've never heard of — but that's precisely what's happening here. https://www.eff.org/deeplinks/2009/09/online-trackers-and-social-networks
- CareerBuilder.com – behavioral targeting focus Let's start with an example of 3rd party tracking: when we went to CareerBuilder.com, which is the largest online jobs site in the United States, and searched for a job, CareerBuilder included JavaScript code from 10 (!) different tracking domains: Rubicon Project, AdSonar, Advertising.com, Tacoda.net (all three are divisions of AOL advertising), Quantcast, Pulse 360, Undertone, AdBureau (part of Microsoft Advertising), Traffic Marketplace, and DoubleClick (which is owned by Google). On other visits we've also seen CareerBuilder include tracking scripts and non-JavaScript web bugs from several other domains. There are pretty sound reasons to hope that when you search for a job online, that fact isn't broadcast to dozens of companies you've never heard of — but that's precisely what's happening here. https://www.eff.org/deeplinks/2009/09/online-trackers-and-social-networks
- CareerBuilder.com – behavioral targeting focus Let's start with an example of 3rd party tracking: when we went to CareerBuilder.com, which is the largest online jobs site in the United States, and searched for a job, CareerBuilder included JavaScript code from 10 (!) different tracking domains: Rubicon Project, AdSonar, Advertising.com, Tacoda.net (all three are divisions of AOL advertising), Quantcast, Pulse 360, Undertone, AdBureau (part of Microsoft Advertising), Traffic Marketplace, and DoubleClick (which is owned by Google). On other visits we've also seen CareerBuilder include tracking scripts and non-JavaScript web bugs from several other domains. There are pretty sound reasons to hope that when you search for a job online, that fact isn't broadcast to dozens of companies you've never heard of — but that's precisely what's happening here. https://www.eff.org/deeplinks/2009/09/online-trackers-and-social-networks
- CareerBuilder.com – behavioral targeting focus Let's start with an example of 3rd party tracking: when we went to CareerBuilder.com, which is the largest online jobs site in the United States, and searched for a job, CareerBuilder included JavaScript code from 10 (!) different tracking domains: Rubicon Project, AdSonar, Advertising.com, Tacoda.net (all three are divisions of AOL advertising), Quantcast, Pulse 360, Undertone, AdBureau (part of Microsoft Advertising), Traffic Marketplace, and DoubleClick (which is owned by Google). On other visits we've also seen CareerBuilder include tracking scripts and non-JavaScript web bugs from several other domains. There are pretty sound reasons to hope that when you search for a job online, that fact isn't broadcast to dozens of companies you've never heard of — but that's precisely what's happening here. https://www.eff.org/deeplinks/2009/09/online-trackers-and-social-networks
- CareerBuilder.com – behavioral targeting focus Let's start with an example of 3rd party tracking: when we went to CareerBuilder.com, which is the largest online jobs site in the United States, and searched for a job, CareerBuilder included JavaScript code from 10 (!) different tracking domains: Rubicon Project, AdSonar, Advertising.com, Tacoda.net (all three are divisions of AOL advertising), Quantcast, Pulse 360, Undertone, AdBureau (part of Microsoft Advertising), Traffic Marketplace, and DoubleClick (which is owned by Google). On other visits we've also seen CareerBuilder include tracking scripts and non-JavaScript web bugs from several other domains. There are pretty sound reasons to hope that when you search for a job online, that fact isn't broadcast to dozens of companies you've never heard of — but that's precisely what's happening here. https://www.eff.org/deeplinks/2009/09/online-trackers-and-social-networks
- Search for (214) 244-3399 in phone.Spokeo - Going to go through a manual search of my own nameInformation is embedded not only on the “surface web” but also on the “deepnet”Think of this like the ocean—cast a net in the ocean and you’ll catch all in the surface, but nothing in the deep which is rich with lifeGRAPHIC: http://www.spokeo.com/privacyOther places your data lives electronicallyMedical recordsGovernment databasesEcommerce sites (Amazon, eBay)Search engines (Google, Bing, AOL)
- Search for (214) 244-3399 in phone.Spokeo - Going to go through a manual search of my own nameInformation is embedded not only on the “surface web” but also on the “deepnet”Think of this like the ocean—cast a net in the ocean and you’ll catch all in the surface, but nothing in the deep which is rich with lifeGRAPHIC: http://www.spokeo.com/privacyOther places your data lives electronicallyMedical recordsGovernment databasesEcommerce sites (Amazon, eBay)Search engines (Google, Bing, AOL)
- http://www.ted.com/talks/aaron_koblin.html
- traffic analysisHow does traffic analysis work? Every user is given a unique ID (e.g. within Google, AOL, Bing, etc.)Every device that accesses the internet has a unique IPInternet data packets have two parts: a data payload and a header used for routing. The data payload is whatever is being sent, whether that's an email message, a web page, or an audio file. Even if you encrypt the data payload of your communications, traffic analysis still reveals a great deal about what you're doing and, possibly, what you're saying. That's because it focuses on the header, which discloses source, destination, size, timing, and so on.https://www.torproject.org/about/overview.html.enhow else do sites get my data?data logging - records computer usage (time, sites visited, etc)it’s as basic as searches…search engines--every search is tracked
- how else do sites get my data?data logging - records computer usage (time, sites visited, etc)it’s as basic as searches…search engines--every search is tracked
- log filesWeb beaconscookies - data stored on a user's computer that assists in automated access to websites or web features or other information; can also be used for user-tracking by storing special usage history data in a cookietraditional cookie is a HTTP cookie, invented by Lou Montulli and John Giannandrea at Netscape in 1994Cookies are small text files that web servers typically send to computers when a user visits a website. Cookies are stored as text files on the hard drive, and can be accessed by web servers when the user returns to that website or goes to another website. Cookies are used by companies to collect and send information about a user's website visit – for example, number of visits, average time spent, pages viewed, navigation history through the website, and other statistics. This information helps companies improve the user's online experience in many ways: allowing companies to monitor website performance, making the website easier to use, measuring the effectiveness of promotional placement, and tailoring the website to better match a user's interests and preferences. Cookies cannot be used to access any other data on a computer's hard drive, or to personally identify a user. Users who prefer not to accept cookies can set their Internet browser to notify them when they receive a cookie or to prevent cookies from being placed on their hard drive.http://selectout.org/results/optout/users are generally not explicitly alerted when a cookie is droppedflash cookies - local shared objects; work the same way as normal cookies except are used by Adobe Flash Player; same risks as normal cookies but are not as easily blocksThese cookie files are stored outside of the browser's control. Web browsers do not directly allow users to view or delete the cookies stored by a Flash application, users are not notified when such cookies are set, and these cookies never expire. Flash cookies can track users in all the ways traditionally HTTP cookies do, and they can be stored or retrieved whenever a user accesses a page containing a Flash applicationhttps://www.eff.org/deeplinks/2009/09/new-cookie-technologies-harder-see-and-remove-wideWhat's more, the Berkeley researchers found that Flash cookies are often used to deliberately circumvent users' HTTP cookie policies. That is, a site may intentionally store the same information redundantly in both HTTP cookie and Flash cookie forms. When a user deletes the HTTP cookie, the site may "respawn" it from the copy that was stored as a Flash cookie! It seems clear that site operators know many users don't want to be tracked with cookies, but have found a way of circumventing those users' privacy preferences.https://www.eff.org/deeplinks/2009/09/new-cookie-technologies-harder-see-and-remove-wideevercookie - JS based application which produces cookies in a web browser that actively "resist" deletion by redundantly compying themselves in different forms on the user's machine (e.g. Flash Local Shared Objects, window.name caching)
- log filesWeb beaconscookies - data stored on a user's computer that assists in automated access to websites or web features or other information; can also be used for user-tracking by storing special usage history data in a cookietraditional cookie is a HTTP cookie, invented by Lou Montulli and John Giannandrea at Netscape in 1994Cookies are small text files that web servers typically send to computers when a user visits a website. Cookies are stored as text files on the hard drive, and can be accessed by web servers when the user returns to that website or goes to another website. Cookies are used by companies to collect and send information about a user's website visit – for example, number of visits, average time spent, pages viewed, navigation history through the website, and other statistics. This information helps companies improve the user's online experience in many ways: allowing companies to monitor website performance, making the website easier to use, measuring the effectiveness of promotional placement, and tailoring the website to better match a user's interests and preferences. Cookies cannot be used to access any other data on a computer's hard drive, or to personally identify a user. Users who prefer not to accept cookies can set their Internet browser to notify them when they receive a cookie or to prevent cookies from being placed on their hard drive.http://selectout.org/results/optout/users are generally not explicitly alerted when a cookie is droppedflash cookies - local shared objects; work the same way as normal cookies except are used by Adobe Flash Player; same risks as normal cookies but are not as easily blocksThese cookie files are stored outside of the browser's control. Web browsers do not directly allow users to view or delete the cookies stored by a Flash application, users are not notified when such cookies are set, and these cookies never expire. Flash cookies can track users in all the ways traditionally HTTP cookies do, and they can be stored or retrieved whenever a user accesses a page containing a Flash applicationhttps://www.eff.org/deeplinks/2009/09/new-cookie-technologies-harder-see-and-remove-wideWhat's more, the Berkeley researchers found that Flash cookies are often used to deliberately circumvent users' HTTP cookie policies. That is, a site may intentionally store the same information redundantly in both HTTP cookie and Flash cookie forms. When a user deletes the HTTP cookie, the site may "respawn" it from the copy that was stored as a Flash cookie! It seems clear that site operators know many users don't want to be tracked with cookies, but have found a way of circumventing those users' privacy preferences.https://www.eff.org/deeplinks/2009/09/new-cookie-technologies-harder-see-and-remove-wideevercookie - JS based application which produces cookies in a web browser that actively "resist" deletion by redundantly compying themselves in different forms on the user's machine (e.g. Flash Local Shared Objects, window.name caching)
- log filesWeb beaconscookies - data stored on a user's computer that assists in automated access to websites or web features or other information; can also be used for user-tracking by storing special usage history data in a cookietraditional cookie is a HTTP cookie, invented by Lou Montulli and John Giannandrea at Netscape in 1994Cookies are small text files that web servers typically send to computers when a user visits a website. Cookies are stored as text files on the hard drive, and can be accessed by web servers when the user returns to that website or goes to another website. Cookies are used by companies to collect and send information about a user's website visit – for example, number of visits, average time spent, pages viewed, navigation history through the website, and other statistics. This information helps companies improve the user's online experience in many ways: allowing companies to monitor website performance, making the website easier to use, measuring the effectiveness of promotional placement, and tailoring the website to better match a user's interests and preferences. Cookies cannot be used to access any other data on a computer's hard drive, or to personally identify a user. Users who prefer not to accept cookies can set their Internet browser to notify them when they receive a cookie or to prevent cookies from being placed on their hard drive.http://selectout.org/results/optout/users are generally not explicitly alerted when a cookie is droppedflash cookies - local shared objects; work the same way as normal cookies except are used by Adobe Flash Player; same risks as normal cookies but are not as easily blocksThese cookie files are stored outside of the browser's control. Web browsers do not directly allow users to view or delete the cookies stored by a Flash application, users are not notified when such cookies are set, and these cookies never expire. Flash cookies can track users in all the ways traditionally HTTP cookies do, and they can be stored or retrieved whenever a user accesses a page containing a Flash applicationhttps://www.eff.org/deeplinks/2009/09/new-cookie-technologies-harder-see-and-remove-wideWhat's more, the Berkeley researchers found that Flash cookies are often used to deliberately circumvent users' HTTP cookie policies. That is, a site may intentionally store the same information redundantly in both HTTP cookie and Flash cookie forms. When a user deletes the HTTP cookie, the site may "respawn" it from the copy that was stored as a Flash cookie! It seems clear that site operators know many users don't want to be tracked with cookies, but have found a way of circumventing those users' privacy preferences.https://www.eff.org/deeplinks/2009/09/new-cookie-technologies-harder-see-and-remove-wideevercookie - JS based application which produces cookies in a web browser that actively "resist" deletion by redundantly compying themselves in different forms on the user's machine (e.g. Flash Local Shared Objects, window.name caching)
- Talk about how
- Talk about how
- outside of legal, common practice data collection, there are security risksbadwaremalwarespywareweb bugphishingPhishing emailsare an attempt by thieves to lure you into divulging personal and financial information, for their profit. They pretend to be from well-known legitimate businesses, and increasingly look as if they actually are. They use clever techniques to induce a sense of urgency on your part so that you don't stop to think about whether they are legitimate or not. You can learn to know what to look for and where to report these scams when you find them
- outside of legal, common practice data collection, there are security risksbadwaremalwarespywareweb bugphishingPhishing emailsare an attempt by thieves to lure you into divulging personal and financial information, for their profit. They pretend to be from well-known legitimate businesses, and increasingly look as if they actually are. They use clever techniques to induce a sense of urgency on your part so that you don't stop to think about whether they are legitimate or not. You can learn to know what to look for and where to report these scams when you find them
- outside of legal, common practice data collection, there are security risksbadwaremalwarespywareweb bugphishingPhishing emailsare an attempt by thieves to lure you into divulging personal and financial information, for their profit. They pretend to be from well-known legitimate businesses, and increasingly look as if they actually are. They use clever techniques to induce a sense of urgency on your part so that you don't stop to think about whether they are legitimate or not. You can learn to know what to look for and where to report these scams when you find them
- outside of legal, common practice data collection, there are security risksbadwaremalwarespywareweb bugphishingPhishing emailsare an attempt by thieves to lure you into divulging personal and financial information, for their profit. They pretend to be from well-known legitimate businesses, and increasingly look as if they actually are. They use clever techniques to induce a sense of urgency on your part so that you don't stop to think about whether they are legitimate or not. You can learn to know what to look for and where to report these scams when you find them
- outside of legal, common practice data collection, there are security risksbadwaremalwarespywareweb bugphishingPhishing emailsare an attempt by thieves to lure you into divulging personal and financial information, for their profit. They pretend to be from well-known legitimate businesses, and increasingly look as if they actually are. They use clever techniques to induce a sense of urgency on your part so that you don't stop to think about whether they are legitimate or not. You can learn to know what to look for and where to report these scams when you find them
- outside of legal, common practice data collection, there are security risksbadwaremalwarespywareweb bugphishingPhishing emailsare an attempt by thieves to lure you into divulging personal and financial information, for their profit. They pretend to be from well-known legitimate businesses, and increasingly look as if they actually are. They use clever techniques to induce a sense of urgency on your part so that you don't stop to think about whether they are legitimate or not. You can learn to know what to look for and where to report these scams when you find them
- outside of legal, common practice data collection, there are security risksbadwaremalwarespywareweb bugphishingPhishing emailsare an attempt by thieves to lure you into divulging personal and financial information, for their profit. They pretend to be from well-known legitimate businesses, and increasingly look as if they actually are. They use clever techniques to induce a sense of urgency on your part so that you don't stop to think about whether they are legitimate or not. You can learn to know what to look for and where to report these scams when you find them
- outside of legal, common practice data collection, there are security risksbadwaremalwarespywareweb bugphishingPhishing emailsare an attempt by thieves to lure you into divulging personal and financial information, for their profit. They pretend to be from well-known legitimate businesses, and increasingly look as if they actually are. They use clever techniques to induce a sense of urgency on your part so that you don't stop to think about whether they are legitimate or not. You can learn to know what to look for and where to report these scams when you find them
- how else do sites get my data?data logging - records computer usage (time, sites visited, etc)it’s as basic as searches…search engines--every search is tracked
- What exactly is the scope of the issue we’re looking at here?Privacy, security, compliancePrivacy determines what is and is not tracked and collected. Security addresses how this tracking and data storage are done. Compliance addresses standards set (especially in the courts) that set minimum privacy and security measures in place.
- What exactly is the scope of the issue we’re looking at here?Privacy, security, compliancePrivacy determines what is and is not tracked and collected. Security addresses how this tracking and data storage are done. Compliance addresses standards set (especially in the courts) that set minimum privacy and security measures in place.