 Lovely welcome to my talk. It's let's talk about privacy Yeah, okay, so I Do first intro Probably who I am I'm a candle. I'm just like the regular guy from Berlin and What I do is I do crypto parties a lot And Recently I had certain problems, you know, we I've been into the situation and when we are on crypto parties We have often people that are aware about their privacy. They're probably there They need to do something right and I had the situation with friends of mine people are close to me that were in the situation Unable to understand my argumentation They were not really Caring for privacy and this is what this talk is going to be about. It's going to be about Privacy but not in the sense of here. I want to convince you why privacy matters But rather as an idea to get an argumentation base so people get a better understanding why we caring for privacy That's kind of started with a friend of mine who went to a little bit far away And I was like, hey, we should probably encrypt our Communications because people could might read this and he kind of really blow that and that said, yeah I don't I have nothing to hide and I was really Frustrated. I was not able to tell him. Hey This is important. This matters people Kind of did not get this and I also was a little bit troubled and and Was not not able to give him the message By the way, sorry, just remember something. I have to apologize to you first up because I Did wrote and when I subscribed this actually talk I did the description of the talk in German, but actually holding no in English and it made a little bit people confusing and I'm sorry for that but because of says This talk changed a little bit because what I originally intended to do and in which way I wanted to do changed to what it actually now developed to at adept and I'm sorry and further I do this for the very first time here. I'm in the very first time in front of a crowd and if you have Misunderstandings if you have something you did not understood because of my language or something Please raise your hand ask Questions if you're something to add in addition to help me to give a better Argumentation base, please wait a little bit. We have time. I added like at 20 minutes for the Q&A So we can get something together if no questions are raised we can continue a little bit different topics I had something prepared how you might could prepare on why you should maybe care for this Yeah So probably also the why again from a different angle probably to understand why and To have a better foundation on obviously to grow on this because When I'm not able to communicate the people that are important to me how important this is to me and may not them understand I Probably did not understood it well enough So and I Start digging in and I looked first in the definition of the word Where it comes from because one thing I realized with arguing with those people that were close to me that they had a very Different view of the word privacy as I do and it basically goes like this You know when I need privacy, I shut down my computer. I go into the woods and I have my my sphere I for myself right and The words should be start with it's very interesting because it comes from the Latin language It have been actually being around for quite some time in the ages of the Romans They used to say at loss and you might see the privata, which is like Italian Strava privata Private Street and it could be translated to for example the word self something to myself But also that it's separate It's a single thing or maybe the best thing in this way that goes it's one's own Obviously, this is a meaning of private which then also could be occupied to private Ownership or a company's private when we would use this term in a sense of privacy It would be translated something like this Something is not public. I don't want to have certain records in the public I care that this are not deal with in the public Can you hear me still good? Okay, and Basically what they're said is and this is the fundamental element people know which have been Educated to them the most which have been talked to them that privacy is a right to be left alone and everyone knows this But in this one they have seen just a particular one It says that there has the power to decide on two if they want to be with people or not and this One defines basically the realm of physical privacy basically the ability to go away from people to be Not under people because maybe we need to gather ourself. Maybe it's crucial because we need to Think about the things we want to do next and people then to do an influence on us opposing the opinions and sometimes this Kind of things are hurtful and therefore we need to go we isolate ourself to gather to gain strength Also the term actually have been Be first around around 1980 90 by an American within the article the right to privacy I Want to point this out because this is a natural Impression people have about privacy that there, you know, you can shut down your computer you go somewhere You have your privacy privacy in a sense People don't care about like when I'm home. I'm home. I have my room. I have my sphere No one can hurt me, but it's just a physical Privacy we're talking about and there's more to this Because we care for discretion in intimacy Means basically when I have certain concerns I might gather around my friends I share this concern about other people about my family to get them Helping me maybe to understand each other, but sometimes these things are Hurtful they're kind of a problem and I don't want maybe others. I've talked about to know this It helps me maybe to understand this but you know whenever I was younger It was a little bit easier. I went to school that my friends in school and when I went home I was at home and when I brought a friend home, he obviously know that my frustration with my mother or other people would not be show to them and We all know that when we go to the doctor we care for this Discretion when we go there that only he knows about my concerns about my health care problem. Maybe or When I go to a lawyer that he really keeps the secret I share with him which might be dangerous for us because they are Could be criminal Therefore we care for discretion and intimacy and we all know those feelings when Someone is talking to you. You know you want that the Person I shared with keep it and imagine, you know, you look at this Little orange guys and he whispered in your ear. I know all of your secrets And I'm gonna tell it everybody. I think we know how this feels. It's very hurtful It is a act of betrayal one of like the most and hated emotions You can see it when people that were a couple they were together Sometimes after breakup how hurtful they become because they are shares this information We shared them in a very close space and they use them against you Because when we share this thoughts this emotion with others we become vulnerable to them And this is one element you want not that information you made have disclosed to a certain person being disclosed to others into the public But Beside of that the information we shared of it's also very important and For us that we have the freedom to self-determine information disclosure the ability to define who I Tell what and who I tell not to because One thing of this I'm with my friends. I might tell something That I would not tell my mother in the sense of we know we shared some drugs together and we had an enjoyable time I might not tells us my mother because she gets concerned of addiction of negative consequences or other things that I might share my thoughts as an Engineer to my boss, which I might not want to share to the upper management in a company because it could be compromising and Also the fact that information Need to be shared Can lead to a certain problem because sometimes I know something I need to disclose But it could be compromising in this point in time. I care for an omity Maybe the information could be so compromising that just raising it Saying it would compromising myself as a person. I As this person would be probably thrown in jail. I would be prosecuted people would act violence so We like to do this in an omity as an crucial element of our society To Express ourself sorry so also Also, we're using this in our democratic system as an tool for voting as a crucial element to express ourself in this democracy system Which by the way, they were quite funny thing on the side, you know There are someone told me I think over those days now that some of the voting machines Supposed to be designed for voting Being so good that there could not recognize who have voted and then they said like we did not know who vote then and who Not and that's kind of interesting so There's a little bit of deficient now you have got a view you see the private Privacy of a person is not just limited by his physical but also to his relationships care It's information. It is close and maybe that information may be not be related to me as person or Certain types of information should not be related to other persons. I've chat with But there's more to this or sorry there Know this point where this being violated where invasion happened of my privacy But we should also understand this that we are the ones making the decision about our privacy and privacy in this point is like A cupcake Yeah cupcakes so There's this beautiful Example of this because when we are in the situation To make a decision about our privacy we often do the same decisions as we do it with food When you're at home with your mama and she makes and bakes beautiful cupcakes Are you first thought is maybe you should not eat this because it would have bad consequences for myself in the future Are you eating this because you're being rewarded? A by your mother smiling because she made something for you on B the chemical reaction those beautiful Cream bombs dust And the same applies for example for a lot of things when you look into the health care They had a lot of policies that forces Companies to reveal what of ingredients they put into certain things what they have been the cake been baked with what of materials and People seem not really much to care So I said just go to the next fast food line and say I want a burger I want to eat I want to be filled and not thinking about the consequences It's might include for their future and this is related to a fact that they do a temporary discount That don't see the consequence in this moment They are unable to see this because you know if I eat one cupcake to cupcake five cupcakes I don't see it immediately. I see it probably in the next morning on the wait I see it maybe in the next weeks when my Belt is not any more fitting So but there's obviously other things to this because this is the one side This is the person who shares information the one does the decision to this but when we share something for example on Facebook It's made very rewarding because every time we share something and we get one of those beautiful Like buttons and we see within the window how something plopped up and things happens our brain rewards us It gives us an uncertain impression of Importance and we really like when we get feedback we like when we share something and we kind of get even addicted to this We want people to like our states But Facebook is implied with certain problems Please don't think that I think Facebook is bad Facebook is a company and they're careful one thing for profit obviously and they're also Interested in what they do so there's something very interesting studies lately You might have here did you might have not here did But there was a kind of manipulation that happens So when you open up Facebook the very first thing you see is the news feed Which is like updates of your friends in the environment what people does what they have shade shared with and what? This Facebook network picked a deliberately Favourite content of typical type to trigger emotional reactions This means basically that information I disclosed Be keep back or might not even displayed at all and other information We might not even would have favoured before showing up and the idea was basically to figure if people are acting positive on good news on you know Important things that seem to be caring for them and negative emotions by things that are bad like a Terroristic attack or something Very dangerous happen to them and they could see in their research that this means that their people Did react according to the amount of negative or positive information that came in the comments where with I would say that Or good comment statements and you could see that the emotional Emova triggered and what was the most crucial thing you might would say oh I suppose will not be affected of this right This study have been conducted with around 700,000 people This is a real big number and when you imagine how much this is it could potentially affect everyone that uses Facebook in this entire room and This is dangerous, but wait there's more Because even when you would say okay my niece you That seems so unlikely There have been reports from our most favours agency everyone probably knows in this room That used a tool to manipulate organizations Most of the people I then tell like occupy wall street. They're like what no, I don't know them Which is kind of a sad thing But interesting to this when I say you know flash mob They're like oh, yeah, I know this guy's you know my my first experience with flash mobs where in the town I lived A event where they're basically went to the biggest McDonald's in the region and said yeah You know what we meet all those people in front of it And then we try to eat the entire stock down and really I think around 3000 people showed up They went to the McDonald's and that tried to eat this thing empty Unfortunate there did not manage to because on time the manager of this small McDonald's ordered new resupply and kind of did well but What they did this they test their tool on this people on this flash mobs by manipulating Messages for example instead of the date of tomorrow 12th. It was Monday in two weeks at 12 or even keep the message back of not being delivered and this means that the Information I disclosed was compromised and this is happening in Facebook but Yet even when you decide I'm not part of Facebook. I don't like Facebook. It's kind of a bad thing They're still tracking you and this is the thing what people kind of makes Weird in this point people get becomes emotional. They're like Suddenly gets this realization and it's very important to keep them. Hey, there's an argumentation. There's a fact There's a things that happening Basically what Facebook does The creator cookie every time like a small piece of information your browser keeps and when you visit for example a fan page or Certain resource on Facebook your web browser keeps being tracked with that and the other problem in this is You have a blog you visiting you like to read and he embeds a Facebook like Twitter Google plus And what he does? Oh, sorry What he does is What he does is basically he loads every time you visit the website the Facebook like from it and Now you tells when you visit your blog which might be self-hosted at least that you being visited to this website with a thing But I think Facebook is not the only problem, right? because Google is the same and It's quite interesting to see because When you see this way You could define it as a gateway drug You will probably ask why but who in this room here? Ons Android device So quite a lot of hands went up right So who of you in this room uses YouTube? I mean this entry talk is going to be uploaded to YouTube. So again Google knows what funny fact by the way Google is the biggest search engine in the world YouTube is the second biggest search engine in the world and Obviously a lot of people using Gmail Google search we just did today at Google search some people So this is very interesting because you're not able to avoid this You kind of even when you say I Don't use Gmail. I don't use Google search. I use a Super-great duck duck go. I use stoppage. I use peer-to-peer search engines to get my information You still have the problem for example in Android to use Android properly. We've got the cool awesome tools You need to be locked in choose a Google Play Store, which then Registration your phone with all the information to Google and then you can use it then you can load download applications Right? Also the very first thing Google does it uploads everything on your phone when it's been locked in it loads up your calendar It uploads your contacts that uploads your Wi-Fi passwords as backup. Of course, you can disable this But who does this who thinks about this? And there's even this Let's say it No direct Google service problem Because even when you have said I've no Android phone. I don't use YouTube. I always go to media.ccc.de to get my content There's this call. Let's face it Google fast web project because you know the Google guys are caring for fast internet connection They want to have everything as fast as possible on there and one problem They often share is that they have libraries from the projects for example from jQuery which load very slowly because the original server is kind of Loaded and it takes time to its response. So there it makes us Google fast web project or you could phrase it that way It's Google hosted libraries for web applications. So when you have this basically what happens is funds Adjects jQuery everything you might need to illustrate a website being loaded from Google service directly. So You have really hard trouble to avoid Google in this particular point You have no possibility of just say I don't care about it And I just put it away and this is kind of invaders because every time you load a website a blog or What page you want to they go to Google and send an information to this most people I've seen over the past years have changed their DNS entries to the name server of Google which make it even more easier to get an understanding in this and Just by saying, you know what you just close information to Google about your behavior They get an understanding. Oh Yeah But you know what I shut down my computer. I I quit this I just I don't care, you know, and then I go into my living room. I play a round of Xbox one and Suddenly I Get a fold in the game There's been a report over the last days or actually year. I think I'm not certain anymore about the source too much information Where by cursing The opponent enemy team in the game. He was punished so you play at home and this Xbox one is Listening to what you're saying. They have even a camera which kind of actually observe you and and You say what the fuck and me you lose points you lose So the game The player was punished for cursing at home for gaming something you did in private and you might think what the Hey Why why they're doing this? So, okay? Okay, okay. I think I think I've got the point So, you know you close down your exports one You open up your TV and then Suddenly you realize something maybe I Hope you can read this But basically the Samsung TV you might have where you actually want to play Xbox one on is listen to you as well You can disable this but for example There's an agreement that says please don't say anything private in front of the TV it might be recorded and You know what's really really thing I hear recently a message from someone said like it I don't know how official this is but basically what happens is when your Xbox is listening to you or your personal assistant like Siri That they take the text the message you said Converted to text and uploaded to the server obviously because the self bandwidth because your voice is Kind of much but they're actually people that are there listening and reading the text You're loaded there that it has been uploaded there. So I don't know how much truth This is how much is related to this but basically people that were really private and disclose sexual information or medicine related information where listened by this and The services had all those information in there Okay, you know, I did also a lot of research and I Struggled across this website. You might see this right our favorite agency German type and Why I was reading this article something in my eyesight came there, you know, maybe you see it You see this thing here, right? I was like, what's that like? Yes, okay I opened up and this is a belt This belt sends your mail when you do fat You put it across your bell your belly and when it's not fitting anymore It says a message to you obviously over the crowd and I mean It basically tells me and one thing I did not concern about this Who decide when I'm too fat? I was not really sure about this. I did not research this further now at nothing tells more about your how weighted you are and obviously This is kind of very very invasive which brings us maybe to the thing Internet of the things I Think each and every one of you have here a little bit of this the definition is quite simple to this It's trying to bring chips into every Every day household devices that your lamp is able to send you a message that it might be Going to break down so that you can refresh it on time. So you're not in the dark your refrigerator Sending. Hey, the milk is expiring Please make sure to refresh for new ones and so on And this are very invasive. This are the things that is going to happen This are is actually happening at this point and everything is being uploaded to the cloud. So I'm not sure if you get then can share your fridge status at Facebook but there's a possibility of connecting your fridge to Facebook At least this is what I read a while ago. I'm not so sure and I didn't test it and One thing is why you might ask why and thinking why they're so invasive why they do this Why there's this point that they're trying to I mean very interesting Facebook is actually one big contributor to open source A lot of technologies that put in there is open source. So they cannot be the other evil, right? but As Bruce Knight I put it in a beautiful sentence civilians Is a business model of the internet? so and One thing that made a lot of confusion a little bit Misunderstanding to each of everyone was this keyword because you hear it, you know, every one of these people have heard about Edward Snowden They have heard of the NSA and how they're being surveilled and they heard about the word metadata so Metadata what is what is metadata and just today I hear a beautiful example Basically when you would try to get in Germany a credit you go to Schuva, which is like a credit rating again again tour and what they do is look at certain data, which Could be described as meter data and how likely Based on this data you are to be reliable a reliable payer You also could describe it in a technical term. This is our data about data. So to make a thing phone call I need a my number be the number I try to call and see the date When the phone started and ended so the telecom company can build they're able to crude the phone for the network to your friend There were beautiful example by the EFF about this It's you know, you're standing on the bridge. You're calling a suicide hotline What you're telling them on the top of the bridge remains secret But it's kind of obviously what you do because when you for example use a phone a mobile phone in this case It's also storing the location. This is by the way a very The very description of the for a start and sparring each every one of this or data Preservation or retention to English and basically there stores this type of information Where who what I think most of the people know this in a certain way But what's this very interesting when you put this and apply this to your own life? Because they're thinking can now this type of information not being that crucial I think you know, I can put this into the public They've been by the way by the sea is you I think a beautiful example where they're said yeah, you know This type of information are like dick-thill finger fingerprints a poly poly police Needs to this to to identify potential Criminals right and was a little bit. Yeah, no So I made this for myself. I hope you can read this It's a little bit full, but it was like my VPN locks I am a guy obviously around everything and you know VPN is encrypted. It's there's no information being disclosed Unencrypted so if I one can't read this but what it really tell was a little bit For example when I started, you know, my laptop always connects automatically to the internet to my VPN server when I open up the lid and I just looked at this, you know, this is like one day and it started like, you know age 56 and Probably it's this time I started my laptop, right your first connection you read emails you check what is going on Maybe there's a certain delay with the public transportation I Keep my device probably running. I don't know and at certain point you see the connection from myself or choose a and device is lost Maybe he went somewhere. I mean, it's Monday in the week. What some guy who works on it does at 932 probably. Oh, wait 10 10 17 Something is again. Ah new IP address. So you maybe want to work You can see VPN connection timed out again between 12 and 13 and I'm such a guy I always take my laptop with me actually or very often and What could a guy do within the week on Monday between 12 and 30 o'clock? He probably goes to lunch And then you can also see yeah VPN connection Reestablished from the original IP address from where was at work and you see oh it's back from lunch So a while later, it's like six o'clock the VPN connection times out again, and you see oh I think he's off work, right? And a little bit while later from the connection from the very same IP address I had in the morning a new connection. I left home. Yay and at last 1115 The connection went there. Maybe I went to bed. This is probably not as exact But you get probably an idea of how my day would have looked on this day when I worked When I did this I actually did it to a little bit bigger scent before I cut it down Because you could actually see anomalies within this when I went probably to certain places and when you know which IP address Belong to you got a really good idea and this is just like one service it does not include weapon locks for or like proxy locks that does not include my mail lock does not include my job unlock and This is kind of frightening But you know you told your friends and then he comes with this beautiful question Why should we care? One example for this is actually I heard it. I think yesterday or the last two three days that people in France That do pirating With peer-to-peer should be put under the anti-flight list So an imagine how they're going to gather the information that you use peer-to-peer Me data to check what connection you did on what type obviously the connection was and Probably and this is obviously the most Critical one in this This is a former CIA Director and he did publicly stated in an interview that they kill people based on this meter data This is the same information. I just showed to you are used to kill people And this is frightening You should also see this point here you made it he reduced his statement at certain point because he said the meter data the NSA have Different from the ones we just mentioned here because obviously they have way more meter data than I could just show to you but I Think there's a lesson to learn because who have of you heard of the CIA torturing project So there's being a quite big scandal Because within the states the was of report Made by the Senate that basically stated that the CIA have tortured people in the name or against terrorism and a lot and many have died and this people have been kept based on such information and This is probably the hardest thing. No one of them really Revealed information that had something to do with terrorism This where a person like you and me that lived in that area, which was very very badly that had no potential of good work so that looked for jobs and suddenly the rock the Talked to the wrong people that made a wrong phone call and snap was catched and obviously this is quite a Critical thing, but it gives a certain insight how far our own physical Privacy can be invaded by information. We disclose and even more the fact that information I might have disclosed in one room might be manipulated might be changed might be Deliberately stopped so it cannot reach There's even in Germany for example the sample that you know this One report which was done by I don't want to say it but RTL and basically it Put a view on how a gamer should look like and it was actually quite wrong At least how people told me so there were a lot of people there were a big group on Facebook and they said Yeah, you know what we go to demonstrate on on this so When the people arrived or at least the one who tried to organize this it was the only one there were randomly two people but they were not related to and the his friends on our other side later said that they did had different appointments and Even the message was not delivered. So like everyday people get affected of this very particular thing And this does not include the problem with email. It does not include the problem with the overall thing I actually have a little bit more slides to this, but I will try to stop now To allow questions for those regards when questions are there. I also open for any additional supply to this and Hope you liked it for the moment So any questions any complaints criticism misunderstandings additions? I think you could add that the metadata are very Interesting to insurance companies Because you cited as an example of a threat that maybe the CIA is out to get you and I think most of us in this room Don't feel personally threatened by that But having insurance companies collect your metadata is I think a more real threat and as you said it can affect your Schufer entry and Might of course affect your insurance rates if they can Make conclusions about a risky behavior on your part. Thank you very much Any further questions so I'm kind of surprised I kind of expected that people would now raise and say no that's wrong or this is kind of Need to be there or something. Okay? One thing I wanted to put in addition to this is let's say how we can prevent something like this how you should behave What I would expect probably for my friends what I wish from people that are close to me to do this Maybe to keep that or to yourself In a sense of you know, you don't When you need to use Some service you need to use Facebook Don't share everything on this go there subscribe what you need to subscribe Like what you need to like and then it's it don't disclose too much information. You're already share too much There's a very beautiful principle for this which interesting to German it's Datensparsamkeit if you try to translate this it's a little bit difficult to do this Basically principle of data economy or data reduction and data economy, you know, we have a society or Technology which is interested in grabbing every piece of information every bit of information about you to squeeze the last drop of your privacy out to make money out of this and Sometimes you can for example not avoid using Facebook, but for example, what's quite funny You can see can you can use for example Facebook with Tor if you can relate to this They have an own onion address to this with this address can simply open it up You log in it works. No problem Sorry So here's a little bit on overview what I've done about this because I'm administrator. I'm aware of this I try to reduce my data print in the internet Which brings me by the way to a certain thing because I had certain concerns because this is a recorded talk And you know, I do a talk about privacy Do I record this do I put it in the internet? Do I allow people to live stream this in particular and? But I had very interesting feedback and especially this this is a public talk in any way I talked to a crowd of people I try to teach why I learned I want to show my rise Extended and hope that people can align to this and I think it's also very Helpful to others and it may be available resources to others in a later point So I decided and because I have the ability to decide to to let it be uploaded to be streamed What I do is I run Linux obviously like most of the people here I Changed my Android I have a smartphone like most of you But very interesting was you Saigon mod most of the people that try to avoid Google dust uses But I then realized something very interesting I'm safe right now And then I remember oh wait wait wait. There's this Google play problem, and I've no internet Shit normally there would be the logo of Google play But basically as I described it before every time you try to use your smartphone with good Applications you need to log into the Google play which needs an email address Very interesting to this is as well Even when you're not using Google play you have no account to this Google have the power to remove applications from your device entirely They can remotely delete this they're only very few examples of this you barely find any resources to this But there are examples to this and the entire Google library is a problem in this What you can do is when you install saigon mod you cannot you can choose to not install saigon mod with the Google play library This is quite helpful because You're not sharing any information with that, but at this point it becomes difficult to run applications you want What I did in this particular I use the fdroid Fdroid is an open source base repository for Android applications, and I synchronize most of my information I have with my own cloud so Again on this Yeah, quite finishing right now because now to my last words to Protect your privacy is hard. It's very very very hard to do this because Even when you're trying to actively not involve this Somewhere have stored your contact data in their address book which was uploaded to Facebook Uploaded to Google or any other third service. I do not mention yet and even When you're not using this technologies somewhere on a computer all of the information has been Stored in any way and the only thing what we really can do is we can increase the cost Someone has to take to gain information about us. This is the only thing we are able to and I've really really really hope this gave you a little bit inside of a Better argumentation foundation to get people motivated maybe to care more about the privacy And all what I cannot say is thank you for listening any questions Thank you for your talk first Maybe more of a statement than a question to your last statement that you're talking about increasing the costs for the people that have Negative effects by doing surveillance on us But the thing is they get the money from us in the first place So I would also put the focus in the thing that we have institutions states and companies that violate our human rights But that have the power from us That at least theoretically can be taken away from them Questions. Okay. I guess this is it. Please note. I put this talk under the creative comments You can get it at any time Also, I have to thank to certain people at least if they were to I hope to see in the room but I don't see this which was Slido and Flush cats or Helping reviewing going through this my girlfriend my people around me everyone we have listened over the last days to me And here are the references which kind of include everything, but it's a little bit cut because this slide starts not supports us and Yeah, you can get the full list if you want to I can give you the presentation and I will put it obviously online soon Thank you very much