Internet Privacy
- 1. Internet Privacy Secure Your Information Girindro Pringgo Digdo Information Security Researcher Bandung, May 13, 2014 Indonesia Security Incident Responses Team on Internet Infrastructure (ID-SIRTII)
- 2. whoami ● InfoSec Guy ● Over 5 years as Penetration Tester ● Instructor ● Founder of omega.or.id
- 4. Where Are We? Insecure Digital World
- 5. Headline Bad News ● Gmail users have no "reasonable expectation" that their communications are confidential. http://www.theguardian.com/technology/2013/aug/14/google-gmail-users-privacy-email-lawsuit ● Microsoft has admitted that it will hand over data to the U.S. government, if properly requested, even if that data is stored somewhere other than the U.S. http://www.readwrite.com/2011/06/30/microsoft-says-it-will-give-yo
- 6. Information Security Myths ● Secure Socket Layer (SSL) will protect entire websites. ● Firewall will secure you against attack. ● No issues printed from Automatic Web Vulnerability Scanner. ● Annual Vulnerability Assessment is enough. ● Our developer has a good skill in programming. ● ?
- 7. Problems ● Difficult law enforcement in border-less world ● People can't expect privacy ● Social engineering works well due to lack of awareness makes ● Physical security ● Malware becoming more and more powerful ● Organized crime ● ?
- 8. What Should We Do? Protect Your Information
- 9. Think before you share personal information ● Read the website's privacy policy ● Do not share more than you need to ● Choose how private you want your profile or blog to be ● ?
- 10. Know the risk ● you use public internet ● you enter confidential data (eg username, password) ● you use credit/debit card at store ● ? What if :
- 11. Minimize access to your information ● Lock your computer when you are away from it. ● Access with authentication. eg bios password, account password, Encryption This prevents another person from waiting for you to leave and then sitting down at your computer and accessing all of your information.
- 12. Encryption ● Protect your confidential information ● Only available for you ● End to end encryption ✔ PGP ● Good Integrity ● ?
- 13. Encryption
- 14. Encryption ● Full Disk Encryption ● Using things that: ✔ you know ✔ you have ✔ you are ● Always called as Multi Factor Authentication
- 15. Encryption
- 16. Technology “If you think technology can solve your security problems, then you don't understand the problems and you don't understand the technology.” ~ Bruce Schneier
- 17. Trust But Verify Feeling Secure is Dangerous