My friend has a fatalistic view of privacy. How true are his claims?
I've been discussing the topic of privacy with friends and family lately, after just recently realizing how ambivalent I had been about it. A friend of mine seems to think that it's useless to seek privacy online, but the reasons he cites are quite shocking if true. I'm definitely no expert when it comes to IT, but I'm not clueless either. However, I am not informed enough about the current state of technology--particularly concerning tracking--to know how true my friend's claims are. I was hoping some of you could give me perspective on what he's been talking about.
First, he claims that, no matter what, our devices are communicating with all other devices within our proximity and leaking data without our knowledge or permission. He gave the example that when you purchase something with a card at a store, your purchase info is automatically cross-referenced with data on your phone and supplied to advertisers. To me, it seems like this sort of thing (Facebook advertising about things you've done and talked about elsewhere) is due more to user data being collected, shared, and tracked among various services like Facebook or Google. He seems convinced that all wifi-enabled devices are automatically connected to a network even when the device says it is not. I don't know how this would be possible. The phenomenon he is attributing to devices automatically connecting to nearby networks (which ones? simultaneously? how?) seems like it is better explained by the various tracking and surveillance technologies notoriously implemented by "services" such as Facebook.
Second, he seems to think the only way to have true privacy is to make a network completely disconnected from other networks. This seems obviously true, but he is saying this because he believes there is nothing you can do to be anonymous or protect yourself other than being physically isolated. He cites Musk and/or Zuckerberg's secure networks that use sea drones and satellites (but I have no idea what he's referring to).
Third, (this one seems patently false, but I'll include it anyway) he rejoined my claims about open source being the only real option for privacy by saying that any open source phone OS would be compromised as soon as it was released, and that a secure open source OS would only be a real possibility once neural net processors become cheap in the next few decades.
What do you guys make of this? My impression is that he is not very informed and/or gets information from sources that spread false information or attribute everything to grandiose conspiracy theories. Maybe he knows way more than me, but his claims seem wildly out of line with what I've been learning about privacy these past few weeks.
Posted Oct 30, 2018, 4:01 AM UTC
He has been watching way too many spy movies.
Everything he said is bullshit.
I’ve been an IT Security Solutions Architect for years and have studied everything like this in depth and can happily say your friend is plain wrong.
Thank you for confirming! It didn't make much sense to me, but I'm not knowledgeable enough to defend my hunches with concrete information.
[deleted]
Right. I think mostly he's trying to say that because that's the only way to be truly private, you might as well not even try to avoid getting tracked etc.
[deleted]
That sounds like a really cool job title, what do you do exactly!
My job is a blend of two jobs really.
I act as the “Computer Network Architect”. Meaning I lead a team of Network Engineers that focus on the companies internal IT.
While I also act as CISO (Chief Information Security Officer). Building Security Policies and Preconfigured Permission Setups for the IT Managers and their staff to use. I design the employee user policies. I do a bit of data governance where I ensure and enforce (HIPAA, HiTech, & GDPR) compliance.
And I research 24/7 on every new cybersecurity related tool, attack, vulnerability, and practice to ensure I keep the company up to date.
So my job is somewhat complicated.
Wow that seems really cool and fulfilling but also sounds like a lot of hard work. Like you're working even while not on the job reading up on new cybersecurity stuff. What do you use to stay up to date on the newest cybersecurity tools and vulnerabilities?
Believe it not, Twitter & Reddit actually is where most Developers talk about their work the most. Also websites like TheHackerNews.
MIT run websites and journals always have interesting stuff.
I keep an eye on research happening at Carnegie Melon, Stamford, Google, FireEye, IBM, Kaspersky, Symantec, and a bunch of other big cyber firms,
[deleted]
And you sir need to learn to troll properly. Crawl back under your rock.
Everything you just said is complete true. But it still doesn’t make what I said incorrect. The Original Poster’s friend gave specific examples that were completely based in science fiction and not real life things that happen.
Unfortunately in today’s day and age, most software is proprietary and most firmware running on hardware is also proprietary. So there is no way to formally verify what it does or doesn’t do.
This is why it’s of key importance to run only open source software and firmware. Many options exit today for using only Open Source. Check out https://privacytools.io if your interested in using all open source.
The circumstance of a malicious access point or router is a real threat that I come across often in my work and the best way to mitigate that risk is to make sure anything leaving your computer is already encrypted. This is one of the main reasons websites adopting TLS/SSL encryption has been so transformational in the CyberSecurity industry.
I personally suggest that everyone using the internet should download a trustworthy VPN. It mitigates a lot of risks related to network and ISP level attacks. Keep in mind that you are trusting the VPN with any traffic left unencrypted. So it’s crucial that the VPN is trustworthy.
Another more trustworthy option is the Tor Network. But this option comes with slower speeds and some risk of malicious exit nodes.