A Gift of Fire - CH #2

Topics
Ethics in Information Systems
Data Recovery Demo

Chapter 2 Privacy
Men are only as

good as their
technical
development
allows them to
be.
- George Orwell
1-1
1-2
1-1
The Great Debates
Homework: Debate Topic
In Each Class, we are going to

have a Debate
Two Students: Pro vs. Con
Do you have idea for a debate topic you

are interested in?
One paragraph Pro or Con
Email it to [email protected]
Due: 1600 day of next class
Subject: Debate Topic
No credit if I can't figure out your name
Only 1 idea per person
I may pick some of the best
Not your personal opinion Facts

1 week to prepare
Opening Statements
Classmates will ask question
Class will then Vote on winner
1-4
1-3
1-2
1-4
1-3
To the Rescue
1-5
1-12
1-5
1-12
Windows Has Problems
Linux to the Rescue
Linux
Bootable Live CD / USB

Can access Windows File
Systems
Recover Files
Repair Systems
FREE
Download in Minutess
Many Flavors
Blue Screen of Death

Won't Boot
Registry Failure
Driver Problem
Lost Password
Can't access files
1-13
1-13
1
1-13
Ubuntu, Knoppix, Mint
Different Tasks
General, Forensics, Hacking
Different Formats
CD, DVD, USB, Floppy, Network
Run on any/every system

1-14
1
-14
14
4
1-14
4
446 of 500 supercomputers use it

It is the basis of Apple's OSX
1-15
1-15
Using It
Ubuntu
Commitment to Users
Get It
is an ancient African word,

meaning "humanity to others".
Ubuntu also means "I am what I
am because of who we all are".
The Ubuntu Linux distribution
brings the spirit of Ubuntu to the
software world.
www.ubuntu.com
Ubuntu will always be free of charge, and

there is no extra fee for the "enterprise
edition", we make our very best work
available to everyone on the same Free
terms.
Ubuntu includes the very best in
translations and accessibility infrastructure
that the Free Software community has to
offer, to make Ubuntu usable by as many
people as possible.
Websites, Torrents
Books, Magazines
Burn it
CD, DVD, USB
Boot it
BIOS, Boot Key (F12 Dell)
1-16
1-17
1-16
Commitment to Users
Specs
Ubuntu is released regularly and

predictably; a new release is made
every six months. Each release is
supported with security updates for at
least 18 months.
Ubuntu is entirely committed to the
principles of free and open source
software development; we encourage
people to use free and open source
software, improve it and pass it on.
Ubuntu is suitable for both desktop and

server use. The current Ubuntu release
supports Intel x86 (IBM-compatible PC),
AMD64 (Hammer) and PowerPC (Apple
iBook and Powerbook, G4 and G5)
architectures.
Ubuntu includes more than 1,000 pieces
of software: OpenOffice, Internet
Access, Programming, Tools, Games.
1-19
Fourth edition
Sara Baase
Chapter 2:
Privacy
Slides prepared by Cyndi Chie and Sarah Frye. Fourth edition revisions by Sharon Gray.
1-18
The Ubuntu Desktop
1-20
1-19
A Gift of Fire
1-18
1-17
1-21
1-20
1-21
1
-21
21
What We Will Cover
Privacy Risks and Principles

The Fourth Amendment, Expectation of
Privacy, and Surveillance Technologies
The Business and Social Sectors
Government Systems
Protecting Privacy: Technology, Markets,
Rights, and Laws
Communications
Key Aspects of Privacy:

Freedom from intrusion (being left alone)
Control of information about oneself
Freedom from surveillance (from being
tracked, followed, watched)
Privacy threats come in several categories:

Intentional, institutional uses of personal
information
Unauthorized use or release by insiders
Theft of information
Inadvertent leakage of information
Our own actions
New Technology, New Risks:

Government and private databases
Sophisticated tools for surveillance and data
analysis
Vulnerability of data
New Technology, New Risks Examples:

Search query data
New Technology, New Risks Examples:

Smartphones
New Technology, New Risks Summary of Risks:

Anything we do in cyberspace is recorded.
Huge amounts of data are stored.
People are not aware of collection of data.
Software is complex.
Leaks happen.
New Technology, New Risks Summary of Risks

(cont.):
A collection of small items can provide a
detailed picture.
Re-identification has become much easier due
to the quantity of information and power of
data search and analysis tools.
If information is on a public Web site, it is
available to everyone.
New Technology, New Risks Summary of Risks

(cont.):
Information on the Internet seems to last forever.
Data collected for one purpose will find other
uses.
Government can request sensitive personal data
held by businesses or organizations.
We cannot directly protect information about
ourselves. We depend upon businesses and
organizations to protect it.
Terminology:
Personal information any information
relating to an individual person.
Informed consent users being aware of what
information is collected and how it is used.
Invisible information gathering - collection of
personal information about a user without the
users knowledge.
Terminology:
Cookies Files a Web site stores on a visitors
computer.
Secondary use Use of personal information
for a purpose other than the purpose for
which it was provided.
Data mining Searching and analyzing
masses of data to find patterns and develop
new information or knowledge.
Location apps
Data sometimes stored and sent without
users knowledge
Search engines collect many terabytes of data

daily.
Data is analyzed to target advertising and
develop new services.
Who gets to see this data? Why should we
care?
Terminology:
Computer matching Combining and
comparing information from different
databases (using social security number, for
example) to match records.
Computer profiling Analyzing data to
determine characteristics of people most
likely to engage in a certain behavior.
Two common forms for providing informed

consent are opt out and opt in:
opt out Person must request (usually by
checking a box) that an organization not use
information.
opt in The collector of the information may
use information only if person explicitly
permits use (usually by checking a box).
Discussion Questions
Have you seen opt-in and opt-out choices?
Where? How were they worded?
Were any of them deceptive?
What are some common elements of privacy
policies you have read?
The Fourth Amendment
The Fourth Amendment
Fair information principles

1. Inform people when you collect information.
2. Collect only the data needed.
3. Offer a way for people to opt out.
4. Keep data only as long as needed.
5. Maintain accuracy of data.
6. Protect security of data.
7. Develop policies for responding to law
enforcement requests for data.
The right of the people to be secure in their person, houses,

papers, and effects, against unreasonable searches and
seizures, shall not be violated, and no Warrants shall issue,
but upon probable cause, supported by Oath or affirmation,
and particularly describing the place to be searched, and the
persons or things to be seized.
4th Amendment, U.S. Constitution
Sets limits on governments rights to search our

homes and businesses and seize documents and
other personal effects. Requires government
provide probable cause.
Two key problems arise from new technologies:
New Technologies
Make possible noninvasive but deeply
revealing searches
particle sniffers, imaging systems, location

trackers
What restrictions should we place on their

use? When should we permit government
agencies to use them without a search
warrant?
Much of our personal information is no longer

safe in our homes; it resides in huge databases
outside our control.
New technologies allow the government to
search our homes without entering them and
search our persons from a distance without our
knowledge.
Supreme Court Decisions and

Expectation of Privacy

Olmstead v. United States (1928)
Katz v United States (1967)
Supreme Court allowed the use of wiretaps

on telephone lines without a court order.
Interpreted the Fourth Amendment to apply
only to physical intrusion and only to the
search or seizure of material things, not
conversations.
Supreme Court reversed its position and

ruled that the Fourth Amendment does apply
to conversations.
Court said that the Fourth Amendment
protects people, not places. To intrude in a
place where reasonable person has a
reasonable expectation of privacy requires a
court order.

Search and Seizure of Computers

and Phones
Video Surveillance and Face

Recognition
Kyllo v United States (2001)
How should we interpret plain view for

search of computer or smartphone files?
Security cameras
Increased security
Decreased privacy
Marketing and Personalization
Discussion questions:
Should organizers at events which are
possible terrorist targets use such systems?
Should we allow them to screen for people
with unpaid parking tickets?
Data mining
Targeted ads
Informed consent
Do Not Track button in browsers
Social Networks
Our Social and Personal Activity
Paying for consumer information
What we do
Is there information that you have posted to
the Web that you later removed? Why did you
remove it? Were there consequences to
posting the information?
Have you seen information that others have
posted about themselves that you would not
reveal about yourself?
Supreme Court ruled that police could not use

thermal-imaging devices to search a home
from the outside without a search warrant.
Court stated that where government uses a
device that is not in general public use, to
explore details of the home that would
previously have been unknowable without
physical intrusion, the surveillance is a
search.
Video Surveillance and Face

Recognition
Post opinions, gossip, pictures, away from

home status
What they do
New services with unexpected privacy settings
Life In the Clouds
Location Tracking
Location Tracking
Security of online data

Convenience
Global Positioning Systems (GPS) computer

or communication services that know exactly
where a person is at a particular time
Cell phones and other devices are used for
location tracking
Pros and cons
TTools
l for
f parents
GPS tracking via cell phones or RFID
A Right to Be Forgotten
Government Systems
Government Systems
The right to have material removed.
Databases:
Government Accountability Office (GAO) monitors government's privacy policies
Burden of proof and "fishing expeditions"
Data mining and computer matching to fight
terrorism
Public Records: Access vs. Privacy:
Government Systems
National ID Systems
National ID Systems
Discussion Questions:
What data does the government have about
you?
Who has access to the data?
How is your data protected?
Social Security Numbers
A new national ID system - Pros
negative right (a liberty)

positive right (a claim right)
Too widely used

Easy to falsify
Various new proposals would require

citizenship, employment, health, tax,
financial, or other data, as well as biometric
information. In many proposals, the cards
would also access a variety of databases for
additional information.
Public Records records available to general

public (bankruptcy, property, and arrest records,
salaries of government employees, etc.)
Identity theft can arise when public records are
accessed
How should we control access to sensitive public
records?
would require the card

harder to forge
have to carry only one card
A new national ID system - Cons
Threat to freedom and privacy

Increased potential for abuse
Protecting Privacy
Encryption Policy
Rights and Law
Technology and Markets:

Privacy enhancing-technologies for
consumers
Encryption
Government ban on export of strong

encryption software in the 1990s
(removed in 2000)
Warren and Brandeis: The inviolate personality

Judith Jarvis Thomson: Is there a right to privacy?
Rights and Law:

Contrasting viewpoints
Rights and Law:

Contrasting viewpoints (cont.)
Transactions
Ownership of personal data
A basic legal framework: Enforcement of
agreements and contracts
Regulation
Free Market
k View
Freedom of consumers to make voluntary
agreements
Diversity of individual tastes and values
Response of the market to consumer
preferences
Usefulness of contracts
Flaws of regulatory solutions
Consumer Protection View

Uses of personal information
Costly and disruptive results of errors in
databases
Ease with which personal information leaks
out
Consumers need protection from their own
lack of knowledge, judgment, or interest
Rights and Law:

Contrasting viewpoints
Privacy Regulations in the

European Union
Communications
How would the free market view and the
consumer protection view differ on errors in
Credit Bureau databases?
Who is the consumer in this situation?
EUs rules are more strict than U.S. regulations

EU Data Privacy Directive
Public-key cryptography
Business tools and policies for protecting data
Rights and Law
Prohibits transfer of personal information to

countries outside the EU that do not have an
adequate system of privacy protection.
Safe Harbor plan
Abuses still occur
Puts requirements on businesses outside the
EU
Wi t
Wiretapping
i and
d Email
E il Protection:
P t ti
Telephone
1934 Communications Act prohibited interception of
messages
1968 Omnibus Crime Control and Safe Streets Act
allowed wiretapping and electronic surveillance by
law-enforcement (with court order)
Email and other new communications
Electronic Communications Privacy Act of 1986 (ECPA)
extended the 1968 wiretapping laws to include
electronic communications, restricts government
access to email
The NSA and Secret Intelligence

Gathering
Communications
The National Security Agency (NSA)
The Communications Assistance for Law

Enforcement Act (CALEA)
Passed in 1994
Requires telecommunications equipment be
designed to ensure that the government can
intercept telephone calls (with a court order
or other authorization).
Rules and requirements written by Federal
Communications Commission (FCC)
Foreign Intelligence Surveillance Act (FISA)

established oversight rules for the NSA
Secret access to communications records
Closing Thought
We sleep safe in our

beds because rough men
stand ready in the night
to visit violence on those
who would do us harm.
George Orwell
1-76
6
1-76
End of this Lecture
1-77
1-77

A Gift of Fire - CH #2

Uploaded by

Copyright:

Available Formats

A Gift of Fire - CH #2

Uploaded by

Document Information

Original Description:

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

A Gift of Fire - CH #2

Uploaded by

Copyright:

Available Formats

Topics

Ethics in Information Systems

Data Recovery Demo

Men are only as

The Great Debates

Homework: Debate Topic

In Each Class, we are going to

Do you have idea for a debate topic you

Not your personal opinion Facts

Windows Has Problems

Linux to the Rescue

Bootable Live CD / USB

Blue Screen of Death

Ubuntu, Knoppix, Mint

Run on any/every system

446 of 500 supercomputers use it

is an ancient African word,

Ubuntu will always be free of charge, and

Ubuntu is released regularly and

Ubuntu is suitable for both desktop and

The Ubuntu Desktop

What We Will Cover

Privacy Risks and Principles

Privacy Risks and Principles

Key Aspects of Privacy:

Privacy Risks and Principles

Privacy Risks and Principles

Privacy Risks and Principles

Privacy threats come in several categories:

New Technology, New Risks:

New Technology, New Risks Examples:

Privacy Risks and Principles

Privacy Risks and Principles

Privacy Risks and Principles

New Technology, New Risks Examples:

New Technology, New Risks Summary of Risks:

New Technology, New Risks Summary of Risks

Privacy Risks and Principles

Privacy Risks and Principles

Privacy Risks and Principles

New Technology, New Risks Summary of Risks

Search engines collect many terabytes of data

Privacy Risks and Principles

Privacy Risks and Principles

Privacy Risks and Principles

Two common forms for providing informed

Privacy Risks and Principles

The Fourth Amendment

The Fourth Amendment

Fair information principles

The right of the people to be secure in their person, houses,

Sets limits on governments rights to search our

particle sniffers, imaging systems, location

What restrictions should we place on their

Much of our personal information is no longer

Supreme Court Decisions and

Supreme Court Decisions and

Olmstead v. United States (1928)

Katz v United States (1967)