TPL- Toronto Public Library prides itself on staying current on the latest computing trends. And they certainnly delivered this past week with their  presentaion on Security and Data Privacy best practices. The lecture was delivered at TPL’s Lillian H. Smith branch on Thursday May 31st: Lock Down Your Digital Privacy in 10 Easy Steps. And boy the library certainly delivered the goods.

Digital Privacy

Digital privacy is a growing concern as more info spills out on what  Facebook, Google,  Marketing agents and  various levels of government are doing with the data they harvest  routinely without our knowledge or  approval. For example,  Facebook is caught yet again surreptitiously  sharing user data with phone companies  and manufacturers while Google stealthily expands its deep reach into users’ life data and NSA plus 5 Eyes pals are spanning the world for “every increment” of intelligence.
So it appears that Europe’s GDPR – General Data Privacy Regulations inaugurated May 25, 2018 is a welcome counter to the ongoing corporate and governmental invasions of public privacy. The lecture slide states the case:
So this is the premise of the presentation – users cannot afford to give away private information so handily. And TPL has a ten step guide on how to  increase your protection. It is interesting that most of the measures start with simple data security methods. TPL calls it data hygiene and the tools recommended improve data security as well as privacy.

TPL’s Digital Privacy in 10 Easy Steps

Not surprisingly, Digital Privacy starts with software updates and better passwords:

1. Software updates must be done as they become available
   1. many current fixes are for zero-day faults, don’t skip them and remain vulnerable;
   2. if you are not going to update, why keep using the software?
   3. On the Web, antivirus software and web browser are must updates.
2. Antivirus software is now critical firewall defense against Web hack attacks and other exploits – have a Web firewal like Avast or AVG [both free]
3. Use long & strong passphrase for most important passwords
   1. passphrase => masculinemummywasAridlywaytooPapered;
   2. passphrase is memorable because it contains 6-10 real words but no blanks or suggestive punctuation;
   3. size of words should vary in length making deciphering more difficult;
   4. use a meaningful sentence if it helps remembering the passphrase;
   5. a good 5-6 word pass phrase will take 550 years to deciper even at 1000 guesses per second;
   6. Use Diceware Wordgen if you need help making up a passphrase.
4. Reuse passwords carefully
5. Consider using a password vault like LastPass
6. Secure online browsing practices
   1. use several browsers- choose from the best Chrome, Firefox, Opera;- keeep them updated
   2. consider the tradeoff of free services like Facebook, Gmail, Twitter – the price of free is wholescale harvesting of your data, habits, email conents, location, etc. Supposedly, you have control but only after navigating a labyrinth of “management screens”;
   3. use private browser mode whenever possible
7. Social Media Usage “what you post online in social media is akin to yelling it on a street corner. So be mindful of the fact that many strangers[including 3rd parties with other motives] may have or gain acess to whatever you post“;
8. Install privacy enhancing extensions
   1. Privacy Badger is a browser extension that provides user control over 3rd party cookies
   2. HTTPS://EVERYWHERE enforces encrypted communication between your browser and the websites you are visiting;
   3. Ublock Origin  is a browser extension that blocks ads and pop-ups.
9. Email Encryption – consider using Mozilla Thunderbird which interfaces to Gmail, Hotmail, Yahoo, etc
10. Use your best judgement. Decide venues and services pose the greatest risk and then modify/protect your usage of those online sites and services.

The good thing about these Data Privacy  tips is that the choice of methods and software is top notch. But most important is that simple data hygiene will make for not only greater privacy but also computing security. Well done TPL – and if you are in the GTA, check out the library for future presentations.