Why You Should Lie When Setting Up Password Security Questions, over at the Techlicious site, makes me seriously consider whether the use of security questions — and the answers that we provide — should be re-evaluated. The 2018 article emphasizes the lack of security and privacy in our lives, and it notes that by giving responses that describe our personal lives we provide virtual keys that can open doors to potential identity theft problems.
Like a lot of people in the educational technology field, I spent a good deal of time helping 21st Century children understand the importance of not lying, especially about their ages. I encouraged them not to engage in anonymous activities, and I counseled them to avoid sharing made-up information, gossip or innuendo via social media. Continue reading “Should You Make Up Answers to Security Questions?”→
WHDH television news in Boston reported on a United Kingdom survey conducted by the National Cyber Security Centre (NCSC). The data were gathered via telephone polling, and the overall aim was to learn more about how people in Great Britain think about online security, what they worry about, how they learn more, and how they maintain personal security online. Check out the results depicted in a set of amazing charts and graphs.
My guess is that the results would be somewhat similar in the United States.
Also described in the WHDH article was another part of the study in which NCSC researchers conducted password “breach analysis” using information gathered from the website Have I Been Pwned? This website allows individuals from all over the world to type in their email addresses and receive immediate feedback about whether any of their accounts were hacked (or breached). Because the site keeps track of huge data incursions from around the world, it has accumulated massive password data. Note: I have used the site twice and discovered a violated account resulting from a corporate data breach, something that exposed the credit information of millions of people. Continue reading “Online Security and Passwords… Passwords… Passwords”→
Every day, it seems, we hear of another hack of credit cards or the theft of personal data from health records. It’s difficult to keep track of it all, much less protect passwords (are yours secure?), various accounts for home and work, personal information and so much more. Yet it’s not just hackers. Many legitimate companies collect and share personal data, and they do it without an individual’s consent. It seems like more and more companies are cavalier about the privacy of their customers.
Now Senator Edward J. Markey (D-Mass.) has introduced federal privacy legislation that aims to protect American consumers’ personal information by proposing a Privacy Bill of Rights. Senate Bill would establish a set of clear rules that specify how companies can use personal information and what they can and cannot do. The Federal Trade Commission (FTC) would have the authority to make and enforce rules.
Social media and the digital tools that we use every day have transported us into a strange new era. As we use these tools to work and play we tacitly allow them to collect incredible amounts of our personal information — content that documents our lives, likes, loves, and dislikes — and we become sitting ducks for sham news and fraudulent information. Those who possess our information, good guys or bad, can use impersonal algorithms to assess and use our data. Read my post about using Duck, Duck Go.
We hear a lot of discussion about secure passwords, but now people are wondering whether we should pay more attention to the answers we give for security questions.
The article Why You Should Lie When Setting Up Password Security Questions, over at the Techlicious site, makes me wonder whether security questions — and the answers that we provide — should be re-evaluated. The article emphasizes the lack of security and privacy in our lives and notes that by giving answers to security questions that describe our personal lives we set ourselves up for potential identity theft problems when hacks do occur.
It seems so simple when we install apps. Download, click agree and OK a few times, and use. But it’s not as simple as it seems because we may be unintentionally giving free access to lots of our data. When is the last time you read the user agreement before clicking “agree?” When was the last tune you made sure your 21st Century digital kid to read the agreement? The app install process is not that simple a process after all, because your data is valuable, and not just for you.
If like me you get a kick out of taking Facebook quizzes and sharing your results with friends, it’s time to think a bit more about caution and privacy. Have you ever wondered why these quizzes pop up on your account? Parents, teachers, and students all need to understand that these quizzes have little to do with entertainment and lots to do with getting people to part with personal information.
If you do not know much about online quizzes, and you take them or are tempted by many of them, spend a few minutes reading What You Need to Know About Online Quizzes and Surveysover at the Webroot website and Facebook Quizzes: What Happens to Your Data at the BBC. Essentially, when you take a quiz you freely give out your personal information — and it’s not just the answers you provide, but also the data you allow the quiz creator to access. You also give up a bit more of your personal privacy and may have a small app installed on your Facebook page.