Skip to main content

Week 4 [27.03 - 02.04] How to go invisible online


Have you ever thought about who reads your emails? No one beside you? I wouldn’t be so sure. If you use email service like Gmail or Outlook 365, the answer is kind of obvious. Even if you delete an email the moment you read it, it doesn’t mean there is no copy of it on some server. All biggest email services, such as Google, Yahoo, Apple, Microsoft, are now Cloud-based, so in order to be able to access it from any device anywhere at any time there have to be copies. Any email you send can also be inspected by a hosting company, for example,  for marketing purposes, or to find malware(malicious software). Ok, so what can you do to prevent this action?

http://assets.howtobecome.com/assets/images/2014/03/hacker.jpg

Encryption


To become invisible you need encryption, especially asymmetrical encryption. What’s that? Its all based on generating two mathematically related keys: a private key that stays on your device and a public key, which you can post freely on the Internet. What? My encryption key freely on the Internet? Don’t worry. The public key is used to encrypt data and send it to you. Only you, with a small help of the private key, can decrypt data sent to you. Ok, So how I encrypt my emails? The most popular method is PGP, which stands for Pretty Good Privacy. It is not free, but hold your horses, there is also a free version, OpenPGP. There is also the  third option, also free, GPG.

The keys are more or less under your control, which means that their good management is also on you. If you let a company perform encryption, then that company might also keep your private keys and may also be compelled by court order to share them with law enforcement or government agencies. That’s why you should use an application, which offer end-to-end encryption. Your message stays unreadable until it reaches its recipient. Only you and the recipient, not an app developer, an email service, have the key to decode it. It is quite complicated, but luckily, there are some plugins for Chrome or Firefox that make encryption easier(check out Mailvelope). Most popular apps like Messenger or WhatsApp also have end-to-end encryption available.

Metadata


Unfortunately, life isn’t as easy as its sound. Even if you encrypt your emails, a small part of your message is still readable. It is information in the „To” and „From” fields, your IP Address and the subject line. That might sound ok, most people don’t bother about this information, but you’d be surprised how much you can learn from this data. Example?
https://pbs.twimg.com/media/BerIh1RIIAE8oBv.jpg

It is really hard to become invisible online. Luckily, with a few small steps, we can make it a lot of harder for someone to find our personal info.


Do you think you are invisible online?
What is your opinion about NSA spying scandal?

Source:
https://www.wired.com/2017/02/famed-hacker-kevin-mitnick-shows-go-invisible-online/

Comments

Ihor Ahnianikov said…
I'm sure that I'm not invisible online, like anyone using a standard internet service provider. There're a lot of tools to become invisible or almost, for example using an anonymous VPN network or using hidden networks via a TOR browser, but regular person doesn't need it unless he has a paranoia or something to hide. At the same time I think that net neutrality is really important and I'm against any spying tools and systems developed by governments, they may cause big issues like repressions of political activists - depending on the current government sanity.
Unknown said…
Everyone knows that we are not safe on the internet. For example my great Windows 10 sends reports about everything I do. I'm surprised that nobody changed that. Microsoft should be sued for that long ago. Encryption is good idea. Personally I try not to put too much information about me on the Internet. This is the best way I think. I never comment anything on the Facebook. I never give my real name. But they probably know it from other apps. I only do the most important things on the Internet. Most people write too much about their opinions on the Internet. For me it is big mistake.
Sylwia Pechcin said…
I don't think that I'm invisible. But on the other hand no one or barely no one is. For me it would be hard to stay invisible, because it would be associated with no social media, no gmail account or things like that. And for me google account is very useful even if I'm not using gmail. I use this account mainly to save music I like on YT. It's a small thing but for me very useful.
I really regret setting up my facebook and gmail account with real data when I was younger. That pretty much sums up what i think about privacy.
Unknown said…
Ihor told if somebody uses VPN, he has paranoia. I can agree to a point.

Firstly, there are some free VPNs, which are limited in some
part, so if you would like to use VPN, you have to pay for it. It's about 10-20 PLN/month, but still you have to. So, in some part it is a prove that only 'paranoiac' uses it.

On the other hand, it is only 10-20 PLN/month. I think my privacy is worth much more. That's why I use VPN and don't think I'm paranoiac.
Despite the fact that I don't have to hide anything, I do it, because I'm aware.

Facebook is very interesting case. It keeps data from all of sites you've visited. This is really scary to me.

Of couse, VPN or TOR don't prevent spying by Facebook, but I believe it makes much harder to find out my personal info by many other people.
Unknown said…
I believe I'm visible online, because I've never been doing anything to avoid it.
I'm using facebook, I'm using Google, so it's my fault.
When I was younger I was very attentive, what I was typing in an account, what I was publicing. But then, when there was a trend to have facebook I wasn't paying attention this much and now I really don't know where data about me are and if I have got a chance to get invisible now, when I'm older and a little bit smarter.
I'm invisible enough to the point that nobody cares about my data more than I care about it myself. You don't have to be invisible - there is at least a million of people that are far more important, there is really no need to go paranoid about that, unless you're a criminal or you have bad intentions.

Still, I try to limit my activity and I tend to prefer privacy over convenience whenever possible.
Unknown said…
Not invisible at all. I don't think it's quite possible nowadays. Good point on metadata. It is considered harmless data but often many conclusions can be drawn from it.
NSA spying scandal wasn't a scandal for me. I don't consider myself a tinfoil hat crazy person but... "I KNEW IT ALL ALONG AND NOBODY BELIVD ME" ;) If you do your research and are aware of technological possibilities you can come to your own conclusions. Not the first scandal, not the last, still people don't care enough.
Unknown said…
That's the point. We publish photos, change it, delete some of them on public platforms, yet even if we don't see it any more they still exist. Nowadays, people are more aware of the situation, however I don't believe this voluntary sharing of personal data would even stop.
Maciej Główka said…
I agree with you, that all those spying tools should be limited. However, I wonder how many terrorist attacks were canceled thanks to those tools. In my opinion it is really hard to draw a line, which spying systems shouldn't cross.
Maciej Główka said…
Yeah, looking on things people post on Facebook is sometimes really frightening. Good for you that you are so cautious, but I think companies still know much more things about you than you think they know and I think we can't do much about it.
When I hear a question like this I always remember old quote that I've heard on one of the IT conferences - If you wish to be 100 % safe online - go offline - it really works.

Of course there are many things that I would not do without having Internet but still I'm using Facebook just to keep contacts with school friends, and if I want to talk private I've always choose simple old face to face conversation instead of chat/Skype. I would never send private project or info through mail, Facebook, Skype - that's almost suicidal. One of the other things, most of us are using IP Telephony, especially Facebook/Skype are popular. But did someone ever thought that it can be used by Facebook/Skype in any way just to keep their quality of service at best rate ? :)
It is naive to think that you are invisible online. I totally agree with the sentence above quoted by Jakub.
Using encryption and other data protection mechanisms is certainly a good way to improve your privacy on the Internet. But this could not be a substitute for exercising caution when giving out any personal information to others or sharing it through any services.
As a simple rule-of-thumb, you should treat all the data you put online as if they were publically available.
You can't be 100% invisible online. Every action you did in Internet, stays there for ever. On the other hand, if you aren't an important person or celebrity, you will be fine. Usually, people who care about other's activity in network are interested in famous people. So if you are a normal person and you use Internet in smart way, in the worst case scenario you would recive consecutive markteing offer on your mail.
Using encryption and data protection mechanism can improve your privacy, so if you can use them - you should use this opportunity.
Unknown said…
I am definitely visible, because I don’t really care about. I don’t do anything what is illegal so why I should care about it. These days, where everyone use social media it is common thing to left your personal information in network. Another way to stay invisible in web is to use Tor (anonymity network)
If you remember the main rule of information security which reads "any system associated with the human factor, the notoriously unreliable" because to be 100% invisible , for a couple of years very actively developed so the attack vectors of social engineering so as to find the vulnerable spot in the man a couple is much easier than in the information system , TOR and VPN does not guarantee 100% protection.
I know that I'm not invisible online. I think that everyone in our academy knows that. I don't like it but mostly data we leaves on our social media accounts are responsible for how much we are sharing with world. Of course that agency like NSA are spying on us because it's their work. I don't mind it because if I want to have more privacy I would go to tor, so there are ways to be invisible but really I don't do anything that would stand out from most what people are doing online and if I need to hide something I can use apps with encryption but for normal use I don't need that.
Maciej Główka said…
You are right, in real life it is practically impossible to stay invisible :( Having accounts on youtube or gmail makes our lives a lot of easier, but this also means that google knows about us quite a lot
Maciej Główka said…
Do you think you could live without those accounts?
Maciej Główka said…
Good for you, if you don't have anything to hide you don't have to worry that you aren't invisible online ;)
Maciej Główka said…
yeah, but unfortunately most people aren't 'technical' and they don't know basic rules in the internet :(
Maciej Główka said…
Good quote, so true! I agree, that it would be really hard to stay connected with your friends without facebook/skype. Good question, I didn't think about it that way ;)
Maciej Główka said…
Very good rule! It should be told every kid in all schools. Sadly a lot of people think the other way :(
Maciej Główka said…
I think that whistlerblowers are closest to be 100% invisible. Other way to stay quite invisible is not to become famous ;)
Maciej Główka said…
Aren't you afraid that for example your private messages could be leaked?
Maciej Główka said…
Very interesting point! To be honest, most biggest leaks and system breaches were made mostly with social engineering. I think that big companies should spend same amount of money on both, people training and making their systems safer.
Unknown said…
In this century in every single enterprice we should have encrypte data because people who find this data can take a loan and we can have a problem in our entire life
Wojtek Kania said…
I use VPN and I think that I'm not a madman. I'm not a drug dealer and etc. I have nothing to hide. But I use VPN because I really don't like spying me. And nowadays government is not only one who spying us. Facebook with Like button, or Google with AdWords are spying us. If you go to a e-shop with trainers and will find a trainers that you like, but not will buy it. You will have a many commercials on other websites with these trainers. It is spying. And I don't like it.
Bartosz Łyżwa said…
I'm aware that "my" conversations, files, etc aren't visible only for me. I have better solution rather than ecryption and others security tricks. I'm trying to not share my private messages, videos, photos in the internet.
Unknown said…
I'm aware of fact that I'm not the only one who can see my conversations, files etc. There is few tricks that We can use during daily use of computer but it's not 100% effective.
Vyvyan said…
I don't consider myself invisible at all in internet. I don't think it's quite possible nowadays. Still there are few tricks that one can use but these are not always effective.
If you do your research and are aware of technological possibilities you can come to your own conclusions about that scandal. It wasn't the first major scandal in internet and it sure as hell won't be the last one. Still it didn't affect me in any matter yet i am concerned about that.

Popular posts from this blog

Week 11 [03-09.06.2019] The problem with ecological cars emission in UK

The problem with ecological cars emission in UK Since the adoption of the European Emission Allowance Directive in the European Parliament, all car makers have tried to submit. Since 1992, the Euro I standard has been in force, which limited the emission of carbon monoxide to the atmosphere. The Euro VI standard currently applies, which limits the series of exhaust gases. These include: hydrocarbons, nitrogen and carbon oxides, and dust.   The most significant change was brought by the Euro IV standard. For the first time it introduced the limitation of nitrogen oxides, which are responsible for the harmful compounds of smog.   What is smog?   Smog consists of sulfur oxides, nitrogen and carbon. In addition, solid substances such as suspended dust (PM). Dust suspend in atmospheric aerosols may be in liquid and solid form. These can be particles of sea salt, clouds from the Sahara and artificial compounds made by people. These compounds often come fr

Week 12 (12.01-18.01.15) Are you an early bird or a night owl ?

Owls are nocturnal creatures. They’re wide awake at night and they sleep during the day. If this sounds like bliss to you, then, like about 20 percent of the population who find themselves most active at around 9 pm, you may fall into the same category as our feathered friend. Night owls often have difficulty waking up in the morning, and like to be up late at night.  Studies of animal behaviour indicate that being a night owl may actually be built into some people’s genes. This would explain why those late-to-bed, late-to-rise people find it so difficult to change their behaviour. The trouble for night owls is that they just have to be at places such as work and school far too early. This is when the alarm clock becomes the night owl’s most important survival tool. Experts say that one way for a night owl to beat their dependence on their alarm clocks is to sleep with the curtains open. The Theory is that if they do so, the morning sunlight will awaken them gently and naturally.

Week 4 [06-12.11.2017] This is what happens when you reply to spam email.

James Veitch is a British comedian. In today’s Ted Talk James with characteristic for himself a sense of humor shows how he deals with spam emails and why responding to junk messages may be sometimes dangerous. Questions: What do you think about James’s  way of dealing with spam? Why are junk messages legal, even though it sometimes may be a fraud? Dou you have a problem with spam? How do you deal with with it?