Designing location services for privacy
Upcoming SlideShare
Loading in...5
×
 

Designing location services for privacy

on

  • 377 views

Privacy and security considerations for location aware services.

Privacy and security considerations for location aware services.

Statistics

Views

Total Views
377
Views on SlideShare
377
Embed Views
0

Actions

Likes
0
Downloads
3
Comments
0

0 Embeds 0

No embeds

Accessibility

Categories

Upload Details

Uploaded via as Microsoft PowerPoint

Usage Rights

© All Rights Reserved

Report content

Flagged as inappropriate Flag as inappropriate
Flag as inappropriate

Select your reason for flagging this presentation as inappropriate.

Cancel
  • Full Name Full Name Comment goes here.
    Are you sure you want to
    Your message goes here
    Processing…
Post Comment
Edit your comment

Designing location services for privacy Designing location services for privacy Presentation Transcript

  • Designing location services for privacy and security
    • Rakkhi Samarasekera
    • Twitter: @rakkhis
    • Linkedin.com/in/rakkhi
    • rakkhis.com
  • Step 1 – risks with location data Step 2 – mistakes made by Google and Apple Step 3 – designing location systems properly Presentation Identifier. Information Classification as Needed Step 1 > Step 2 > Step 3 Social location privacy
  • Step 1: It is a problem for some Presentation Identifier. Information Classification as Needed Step 1 > Step 2 > Step 3 Social location privacy View slide
  • Does he know where you live? Presentation Identifier. Information Classification as Needed Step 1 > Step 2 > Step 3 Social location privacy View slide
  • Some people should not be found Presentation Identifier. Information Classification as Needed Step 1 > Step 2 > Step 3 Social location privacy
  • If you aren't doing anything wrong, what do you have to hide? Presentation Identifier. Information Classification as Needed Step 1 > Step 2 > Step 3 Social location privacy
  • “ If I'm not doing anything wrong, then you have no cause to watch me” Presentation Identifier. Information Classification as Needed Step 1 > Step 2 > Step 3 Social location privacy
  • Watch someone long enough, and you'll find something to arrest -- or just blackmail with Presentation Identifier. Information Classification as Needed Step 1 > Step 2 > Step 3 Social location privacy
  • Quis custodiet custodes ipsos? Presentation Identifier. Information Classification as Needed Step 1 > Step 2 > Step 3 Social location privacy
  • Maybe some people should not know where you are….. Presentation Identifier. Information Classification as Needed Step 1 > Step 2 > Step 3 Social location privacy
  • Maybe your boss shouldn’t either… Presentation Identifier. Information Classification as Needed Step 1 > Step 2 > Step 3 Social location privacy
  • Comfortable with location based advertising? Presentation Identifier. Information Classification as Needed Step 1 > Step 2 > Step 3 Social location privacy
  • Step 1 – risks with location data Step 2 – mistakes made by Google and Apple Step 3 – designing location systems properly Presentation Identifier. Information Classification as Needed Step 1 > Step 2 > Step 3 Social location privacy
  • Step 2: clearly some mistakes were made Presentation Identifier. Information Classification as Needed Step 1 > Step 2 > Step 3 Social location privacy
  • Consent buried in terms and conditions Presentation Identifier. Information Classification as Needed Step 1 > Step 2 > Step 3 Social location privacy
  • Better… Presentation Identifier. Information Classification as Needed Step 1 > Step 2 > Step 3 Social location privacy
  • “ Apple is not tracking the location of your iPhone” Presentation Identifier. Information Classification as Needed “ it’s maintaining a database of Wi-Fi hotspots and cell towers around your current location, some of which may be located more than one hundred miles (or just one) away from your iPhone,” Lack of clear communication on WHAT and PURPOSE Step 1 > Step 2 > Step 3 Social location privacy
  • Unique identifiers are the enemy of anonymity Presentation Identifier. Information Classification as Needed Step 1 > Step 2 > Step 3 Social location privacy
  • Why upload data in real time? Presentation Identifier. Information Classification as Needed Step 1 > Step 2 > Step 3 Social location privacy
  • Apple “bug”: location tracking that won't stop… Step 1 > Step 2 > Step 3 Social location privacy
  • No encryption Android v2.3 historical location data not deleted Step 1 > Step 2 > Step 3 security Social location privacy
  • Too much historical data Step 1 > Step 2 > Step 3 Social location privacy
  • Step 1 – risks with location data Step 2 – mistakes made by Google and Apple Step 3 – designing location systems properly Presentation Identifier. Information Classification as Needed Step 1 > Step 2 > Step 3 Social location privacy
  • Consent and notice in context Presentation Identifier. Information Classification as Needed Step 1 > Step 2 > Step 3 Social location privacy
  • Use only for approved purpose Presentation Identifier. Information Classification as Needed Step 1 > Step 2 > Step 3 Social location privacy
  • Encrypt personal data in storage, transit and backup #bettersafethansony Presentation Identifier. Information Classification as Needed Step 1 > Step 2 > Step 3 Social location privacy
  • Presentation Identifier. Information Classification as Needed Step 1 > Step 2 > Step 3 Provide opt-out and disable Social location privacy
  • Presentation Identifier. Information Classification as Needed Step 1 > Step 2 > Step 3 Simple access to update and delete Social location privacy
  • Presentation Identifier. Information Classification as Needed Step 1 > Step 2 > Step 3 Careful of onward transfer and third party access Social location privacy
  • Recap Presentation Identifier. Information Classification as Needed Step 1 > Step 2 > Step 3
    • Notice consent and purpose
    • Security
    • Access and onward transfer
    Social location privacy
  • Designing location services for privacy and security
    • Rakkhi Samarasekera
    • Twitter: @rakkhis
    • Linkedin.com/in/rakkhi
    • rakkhis.com