National

ETV Bharat / science-and-technology

Is online privacy a myth?

Col. Inderjeet Singh, Cyber Security Expert, Director General, Cyber Security Association of India explains how and why privacy in today's world is 100% a myth. People who believe otherwise are simply unaware.

online privacy ,col.inderjeet
Is online privacy a myth?

By

Published : Aug 18, 2020, 5:16 PM IST

Updated : Feb 16, 2021, 7:31 PM IST

Delhi:Have you ever had a conversation on your phone about 'something' and later you saw an advertisement on various social networking sites, search engines etc. Trust me it isn't a coincidence.

Privacy entails two types of information i.e Personally-Identifying Information (PII) or non-PII information. PII refers to the information that can be used to identify an individual, for example - age and physical address alone could identify who an individual is without explicitly disclosing their name, as these two factors are unique enough to typically identify a specific person. Non-PII is information that cannot be used on its own to trace or identify a person, so basically the opposite of PII.

People upload their entire vacation photo album to social networking sites. You purchased a home, your address and the amount you spent are public records the moment you post it Probably we thought the nature of online purchases was completely secure, the personal-care products she’d purchased on e-commerce websites were available for the world to peruse.

Col Inderjeet very strongly believes and says, " The more personal information you make available online, the more vulnerable you become. Everything you say anywhere can be collected and can be used to track, stalk, steal, and monitor your activity. Each and every step you take in the web is recorded, like your texts, calls, video chats, your browsing history, your bank details, and a lot more than you imagine."

When you are online nothing is private, the privacy is gone, and your digital footprint is all over the internet which anyone can track easily. Your data is open to your service providers which are accessible anytime, they can also convince you to share it with partner websites. So, where is the privacy? You actually have no control over personal data. You have almost no privacy at all. When privacy is compromised, though, the problems can go far beyond the exposure of illegal activity or embarrassing information.

Your Internet service provider (ISP) - the company that supplies your Internet connection - knows not only what Web sites you visit, who you emailed, and who emailed you, but the contents of these visitations and correspondences. It can provide the government with a tremendous amount of power over its people, undermine trust, and make people vulnerable to abuse of their information.

Giant companies, all collect data on what you do on your browser. What you are searching for, what kind of person you are etc. What do they do, after that? They indirectly sell YOU!

They sell all your personal data to the marketing companies. They can share your personal information with other parties and use your content for all their existing or future services. And, did you know that one of the major social networking websites can use your identity in ads that are shown to others and license your content to third parties? You might've not read the Terms and Conditions upon registration. There are indeed services that will misuse your personal information even though you don't give your consent, but most companies clearly state in their Terms you agree on that they are entitled to sell your data or use it some other way. But who really reads the Terms and Conditions nowadays?

Col Inderjeet very strongly adds, “YOU ARE NO MORE A USER OF THESE SITES, YOU ARE A PRODUCT”

Social networking sites, search engines, etc can see what we do on their websites or platforms. They use a variety of techniques to accomplish this, including tracking (and geo-locating) your IP address to obtain the actual IP address of people using a virtual private network (a VPN), browser fingerprinting, tracking pixels and a host of other techniques designed to identify the user.

They usually collect pseudonymously information about your computer and about your visits to and use of this website (including your IP address, geographical location, browser type, and version, operating system, referral source, length of visit, page views and website navigation paths. Your browsing history is linked to your identity and is nearly never private, even when you've gone incognito.

Also Read: Artificial Intelligence in Overcoming COVID-19 Crisis

The data that can be pulled from your browser paints a picture that is horrendously frightening. They share anonymized or aggregated data containing your personal data to third parties and these third parties will have access to anonymized data and will be able to identify you as an individual. All the top websites track visitors using various website analysis tools, including the campaign websites of politicians who voted to keep their privacy status quo.

Ideally, the incognito mode or private mode would actually make your browsing private. Unfortunately, the incognito mode doesn't give as much privacy as you might expect. While in incognito mode, cookies are stored only in temporary files and deleted when the session ends, websites can still use identifiers to track you. This is called browser fingerprinting. Though fingerprinting, websites look at different characteristics such as your user time zone, plugin list, and screen resolution. While browser fingerprinting s not always accurate because more devices can share the same fingerprint, studies show that 75% of desktop devices can be uniquely identified.

When you sign up for webinars, newsletters, and/or other marketing materials, they collect information about you. This includes personal details such as name, email address, company name, and possibly other information relevant to the offerings, such as technology interests. In case, you have your name tied to your machine or installed applications it can often store registrant identity. That means a porn site can pull your first and last name, username, stored cookies, etc. This often happens when targeting active offensive intelligence operations. This is even worse on mobile devices, almost all of which have built-in GPS sensors that Apps (and the operating system) can use to obtain your minute-to-minute physical location.

Smartphones are quickly becoming our wallets, our cameras, our notebooks, even our personal safes. When you install new apps on mobile phones, your phone asks you to confirm the app's access requirements. Typically, apps need to access things like your files (to save things), your camera (to take photos), and maybe GPS (to provide location-specific content). Some apps may need access to even more: your contacts, your profile information, etc. While it's just about impossible to use a smartphone without giving apps access to some of these things, you shouldn't just agree to every app's access terms. Many apps make money selling your information to advertisers, so it's not surprising they want more access than they really need. For instance, does your flashlight app need to know your location? If you don't like the access an app is requesting, look around for a similar app that requires less access.

Col. Inderjeet adds, " Having smart devices in your house managed by other "people" provides third party access to private information such as when you sleep when you're away, and when your children might be home alone. This type of information can be collected, collated, aggregated, assimilated, and used to steal from your house, or in the worst-case scenario, plan a home invasion"

It is better to understand that anything present online can be used against you but definitely you don’t have to go paranoid try saving yourself. Your digital footprint is indelible and can never be erased. There are always safe tips that you can follow and minimize private details of yourself over online platforms.

Do not make peace with your data providing online. Ask questions, ‘Why do you need this data?’, ‘From where have you got my number’ etc.Every time you provide your details or receive a call claiming you have won a lottery, ask such questions. You may need to make extra efforts but that’s better than falling prey to some online scam.

Also Read:Deepfakes: The dark side of Artificial Intelligence

Public Networks Are Public.As no one wants to waste their precious megabytes of their Mobile Data Plans when they can surf at the local coffee shop for free. However, whenever you connect to a public network, you open your device up to everyone else on that network. Any amateur hacker can use public Wi-Fi to spy on other users in the vicinity. You don't have to avoid public Wi-Fi altogether - just be smart about it. If you can't wait to find out news articles and cricket scores, go ahead and search it. But if you were thinking of checking your credit card balance or buying a new pair of shoes on e-commerce websites, wait until you get home. If you do need to visit secure sites or access private data while you're out, consider using a VPN service. Virtual Private Networks encrypt your activity, so no one on the public network can track it. Many businesses offer VPN services for their employees, allowing them to access the company network from anywhere. Some home routers also offer this service.

Your home network isn’t as secure as you think.Though you might think you are secured with your home Wi-Fi network, the truth is that you’re not. The scary fact is that despite how complex the fifteen-character alphanumeric passcode on your home Wi-Fi network might be, most home Wi-Fi routers have absolutely no security protocols at all and will leave you vulnerable to hackers using basic software to get in and gain access to your system.

Ever felt like someone’s watching you?Have you noticed how good online advertising has become over the past few years? It’s because your information isn’t secure and companies are able to take this data and market their products to you nearly instantly. Without taking advantage of encryption software, you’re letting anyone and everyone who wants to know, everything they need to know about you. From what websites you visit, how long you stay, what you watch, what you like, everything. Do you really want total strangers looking in on your personal life like this?

Privacy and freedom go hand in hand.As we spend more of our lives online, we need to pay attention to how much of our lives we expose to whom. We should be the ones in control over who knows what about us and be able to make the choice to stay out of sight from the prying eyes of those who may not always have our best interests at heart.

Is it worth the risk?The truth is that cybercrimes and identity theft are rising every year as criminals get more sophisticated. Hackers go after the easy targets and often these people don’t even know that their data and information are at risk. With the rise in these types of cybercrimes, you have to be proactive if you don’t want to fall, the victim. Using encryption software, it makes sense due to the fact that it’s a lot easier than dealing with the hassle of the consequences. No one wants to spend what might take hours on the phone with customer service to sort things out,if your credit card or banking information is compromised, not to mention having to wait for a new card. How do you protect your online privacy?

Is online privacy a myth?

Secure your browser. Block cookies

Password-protect everything. Your digital devices should be password-protected. That includes your computers, tablets, smartphones, and anything other gadgets with personal data on them.

Don't fall for scams. Beware of websites, phone calls, and emails that try to part you from your personal information. Scammers are getting better at mimicking legitimate businesses, so be on your guard.

Only use secure Wi-Fi connections.Sure, it's convenient to use the free Wi-Fi service at your local coffee shops, but there's no telling who is watching that internet traffic. If you use public Wi-Fi, don't use it to convey private information.

Only use software and Mobile Apps you trust.Whether you're installing new software or Apps on your phone or your computer, make sure you're getting it from a source you trust. Legitimate-looking software can sometimes turn out to be a complete scam, which collects a mountain of data on its users. Make sure anything you download comes from a trusted developer and a trusted source.

Be careful what you share on social media.The first line of defense is to lock down your social media accounts. Share only with the people you want to see the information you're sharing, like your friends and family.

Col Inderjeet is suggesting, " It is also important to note that, if you give away your personal information, you would get personalized ads/emails/messages. However, it’s completely up to you to decide whether you want to give away your personal information data to enjoy personalized reaches or keep your online privacy and don’t give away any information. Unless you do at least these things, yes, online privacy is a complete myth."

Col.Inderjeet can be followed on twitter @inderbarara, insta:inderbarara

Also Read: Coronavirus Pandemic replacing Finger Biometrics with Voice and Facial Biometrics

Last Updated : Feb 16, 2021, 7:31 PM IST

ABOUT THE AUTHOR

...view details