Getting a handle on privacy and security

Getting a handle on privacy and security

OpenSourceBridge 2012. An overview and demo of some projects and features being generated by Mozilla that are focused around social, privacy and security

E264a5ad5bd2142a8c61293aa4464397?s=128

mixedpuppy

June 28, 2012
Tweet

Transcript

  1. Thursday, 28 June, 12

  2. Getting a handle on Privacy and Security Thursday, 28 June,

    12
  3. How well do you understand Privacy and Security? "Knowledge is

    power, if you know it about the right person." - Erastus Flavel Beadle Thursday, 28 June, 12
  4. Profile of a User •Blogs (a little) •Avid Facebook user

    •Sells workshops online •Using computers as long as some of you have been alive •Lives with a relatively knowledgable tech nerd •Loves her Mac Air and iPhone •possibly more than me Thursday, 28 June, 12
  5. Profile of a User •Cookies? Mmmm •What’s tracking? •HTTPS? That’s

    what I have you for •Privacy Policies? Aren’t they all the same? •I keep my passwords in my address book, is that bad? •Is this something I’m supposed to know? Thursday, 28 June, 12
  6. How much should people be expected to know? "I am

    not ashamed to confess that I am ignorant of what I do not know." - Marcus Tullius Cicero Thursday, 28 June, 12
  7. How do you communicate Privacy? Thursday, 28 June, 12

  8. We can do more to help people make decisions that

    are right for them "The more you know, the less you understand." - Tao Le Ching Thursday, 28 June, 12
  9. So what have we done? Thursday, 28 June, 12

  10. DNT: Do Not Track •user opt-out of 3rd party tracking

    •industry opt-in notification •alone, does not solve tracking •does not help users otherwise identify and stop tracking source: freefoto.com Thursday, 28 June, 12
  11. DNT: Do Not Track •W3C technical bits defined •Process issues

    •what is tracking? •what happens when you see header? source: freefoto.com Thursday, 28 June, 12
  12. Collusion •Mozilla and Ford Foundation working together •educate users about

    tracking •experimental addon •real-time tracking information •helps users identify tracking •will help users opt-in to tracking •my opinion, UI is still too techy Thursday, 28 June, 12
  13. demo Thursday, 28 June, 12

  14. Personas aka BrowserID •secure verified authentication without passwords •use it,

    it’s awesome •forward looking solution for identity management •does not solve existing password management •demo later Thursday, 28 June, 12
  15. Watchdog •experimental work •examine your passwords •duplicates, age, similarity, strength

    •show you problem areas •help you choose good passwords •not yet built for normal users •demo Thursday, 28 June, 12
  16. demo Thursday, 28 June, 12

  17. Web Activities •Lots of ways to cook an egg •User

    Agent mediates •Inherently private •Users have control •Services have control Thursday, 28 June, 12
  18. demo Thursday, 28 June, 12

  19. SocialAPI •Integrate Social content in browser •User Agent mediates •Inherently

    private •Possibly promiscuous •Users have control •Services have control Thursday, 28 June, 12
  20. demo Thursday, 28 June, 12

  21. Lots of problems to solve, Here’s one unrealistic crazy idea...

    Thursday, 28 June, 12
  22. Privacy Icons? Thursday, 28 June, 12

  23. Why not this? Thursday, 28 June, 12

  24. Privacy Dating Game •in-browser privacy behavioural questionnaire, similar to match.com

    •creates user privacy profile •matches that profile to preferences •Simple UI indicators based on MY profile A single icon that reflects my privacy preferences Thursday, 28 June, 12
  25. Crazy Ideas Welcome Thursday, 28 June, 12

  26. Other ideas and problems •Cookie management •Password management •W3C Privacy

    Dashboard •authorized addon •cookie jars •etc. etc. https://wiki.mozilla.org/Privacy Get Involved, many items on the privacy roadmaps need help. Thursday, 28 June, 12
  27. Users should expect their User Agent to be a User

    Agent. Thursday, 28 June, 12
  28. "Never fail to know that if you are doing all

    the talking, you are boring somebody." - Helen Gurley Brown Questions and Comments Welcome Thursday, 28 June, 12
  29. https://wiki.mozilla.org/Privacy http://blog.mozilla.com/privacy/ http://mozillalabs.com/ irc: #labs #privacy #identity Shane Caraveo Mozilla

    Lab Rat, Privacy Friend, Instigator Vancouver, Canada scaraveo@mozilla.com "I don't even know what street Canada is on." - Al Capone Thursday, 28 June, 12