You are the product. The digital age has brought us many conveniences with the very real cost of our privacy as payment. The terms and conditions that none of us read have allowed companies to build a persona of who we are, and possibly better than we even know ourselves. Learn what your privacy looks like today, and take very real steps toward reclaiming the anonymity that allows you to move through the world without being constantly sold.

1. PRIVACY IN THE AGE OF ANALYTICA
Andrew Lombardi
@kinabalu
1 — @kinabalu

2. ABOUT ME2 — @kinabalu

3. ABOUT ME
> 20 Years in Business
> Published Author
> Software Consultants & Speakers
> Invented the Internet
To our success!
3 — @kinabalu

4. BEGINNING SPRING 5
https://bit.ly/beginningspring5
4 — @kinabalu

5. WEBSOCKET
https://bit.ly/websocketbook
5 — @kinabalu

6. THEY ARE
WATCHING YOU
6 — @kinabalu

7. WHAT THIS TALK WILL COVER
> Why privacy?
> How privacy is dying
> Steps to reclaim your privacy
7 — @kinabalu

8. WHY CARE ABOUT PRIVACY?
> Security
> Limit on Power
> Reputation Management
> Freedom of Expression
8 — @kinabalu

9. UNIVERSAL DECLARATION OF HUMAN RIGHTS
1948
> Article 12 - No one shall be subjected to arbitrary
interference with his privacy, family, home or
correspondence, nor to attacks upon his honour and
reputation. Everyone has the right to the protection of
the law against such interference or attacks.
9 — @kinabalu

10. 4TH AMENDMENT TO US CONSTITUTION
"The right of the people to be secure in their persons,
houses, papers, and effects, against unreasonable
searches and seizures, shall not be violated, and no
Warrants shall issue, but upon probable cause,
supported by Oath or affirmation, and particularly
describing the place to be searched, and the persons or
things to be seized."
10 — @kinabalu

11. BUT I
HAVE NOTHING
TO HIDE!11 — @kinabalu

12. "Arguing that you don’t care
about the right to privacy
because you have nothing to hide
is no different than saying you
don’t care about free speech
because you have nothing to say."
— Edward Snowden
12 — @kinabalu

13. IDENTITY THEFT
13 — @kinabalu

14. 16.7 MILLION
VICTIMS IN
201714 — [Source: https://www.iii.org/fact-statistic/facts-statistics-identity-theft-and-cybercrime]

15. $17 BILLION
IN LOSSES15 — [Source: https://www.iii.org/fact-statistic/facts-statistics-identity-theft-and-cybercrime]

16. 1.3 MILLION
CHILDREN
IDENTITIES STOLEN16 — source: Robert Chapell Jr., 30-year law-enforcement veteran and author of the book "Child Identity Theft: What Every Parent Needs to Know."

17. CAR STICKERS
17 — @kinabalu

18. ';--HAVE I BEEN PWNED?
https://haveibeenpwned.com/
> Websites: 417
> Accounts: 9,139,071,108
18 — @kinabalu

19. APACHE STRUTS CVE-2017-9805
19 — @kinabalu

20. COMPANIESARE NOT EFFECTIVE
AT PROTECTING YOU20 — @kinabalu

21. SOCIAL MEDIA
21 — @kinabalu

22. TOP 10 IOS APPS
> YouTube
> Instagram
> Snapchat
> TikTok
> Messenger
> Gmail
> Netflix
> Facebook
> Google Maps
> Amazon
22 — @kinabalu

23. TOP 10 WEBSITES
> Google.com
> Youtube.com
> Tmall.com
> Facebook.com
> Baidu.com
> Qq.com
> Sohu.com
> Taobao.com
> Login.tmall.com
> Wikipedia.org
23 — According to Alexa

24. 24 — By Facebook - Facebook, Public Domain

25. 25 — @kinabalu

26. FACEBOOK OWNS
> Instagram
> WhatsApp
26 — @kinabalu

27. 27 — Public Domain

28. 2018
AD REVENUE
55 BILLION USD28 — @kinabalu

29. GOOGLE
> Runs top 3 apps on iOS
> Runs top 2 websites worldwide
> Android
> Chromebook
> Nest
> FitBit
29 — @kinabalu

30. 2018
AD REVENUE
116.3 BILLION USD30 — @kinabalu

31. 31 — By Source, Fair use

32. 2018
AD REVENUE
2.617 BILLION USD32 — @kinabalu

33. 33 — By Amazon.com, Inc. - Logopedia, Public Domain

34. 2018
REVENUE
51 BILLION USD
2.1 BILLION USD AD REVENUE34 — @kinabalu

35. IF IT'S
FREE35 — @kinabalu

36. YOU
ARETHE PRODUCT36 — @kinabalu

37. 37 — @kinabalu

38. Five Tier is a company using bluetooth beacons, wifi
sniffers and aggregate data that it sells to advertisers
for more "targeted ads"
38 — Source: [https://www.consumerreports.org/privacy/digital-billboards-are-tracking-you-and-they-want-you-to-see-their-ads/]

39. > Has downloaded billions of images from social media
> Uses it seemingly for law enforcement purposes
> Claims will never sell to rogue state
39 — @kinabalu

40. "SMART" SPEAKERS
> Amazon, Google and Apple all send recordings to human
reviewers unless you opt out
40 — [Source: https://www.bbc.com/news/technology-47893082]

41. "If you give me six lines written by
the hand of the most honest of
men, I will find something in them
which will hang him."
— Marcus Fabius Quintilianus
41 — @kinabalu

42. RECLAIM
YOUR
PRIVACY42 — @kinabalu

43. The Department of Justice has finally admitted it in
court papers: The nation's telecom companies are an arm
of the government – at least when it comes to secret
spying.
43 — [Source: https://www.wired.com/2009/10/att-doj-foia/

44. EnStream is a joint venture with major Canadian telcos
provides "identity verification and authentication
services.".
> Provides to 3rd party companies
> Charges companies a fee to provide a user's location.
> Users must opt-in but no clear way of doing so.
44 — [Source: https://www.cbc.ca/news/technology/rogers-bell-telus-enstream-location-data-sharing-securus-1.4666739]

45. MESSAGING AND VOICE
Use Signal. Something with E2E encryption
Viable Alternatives: WhatsApp, Telegram, Messages on iOS
45 — @kinabalu

46. 46 — @kinabalu

47. 47 — @kinabalu

48. WHAT IS TOR GOOD FOR?
> Anonymity
> Living in dictatorship
> journalist in oppressive country
> Whistleblower (Snowden)
> Hacker
> Illegal activity
48 — @kinabalu

49. USE A
VPN49 — @kinabalu

50. > Based in British Virgin Islands
> OpenVPN (with TCP/UDP), SSTP, L2TP/IPSec, and PPTP
> 3,000 remote servers in 160 locations and 94 countries
> Buy with Crypto
50 — @kinabalu

51. > Based in Panama
> OpenVPN
> Retains no logs at all
> Buy with Crypto
51 — @kinabalu

52. CHOOSE A BETTER BROWSER
> Brave
> Tor
> Firefox Quantum
> Safari
Not Chrome
52 — @kinabalu

53. INSTALL AD BLOCKERS
> Ka-Block
> Disconnect
> uBlock
53 — @kinabalu

54. 54 — @kinabalu

55. TURN OFF
LOCATION
SERVICES55 — @kinabalu

56. 56 — @kinabalu

57. 57 — @kinabalu

58. SECURE EMAIL
58 — By Jasonstockman - Own work, CC BY-SA 4.0

59. PASSWORD MANAGERS
Not just for passwords
59 — @kinabalu

60. POPULAR PASSWORD MANAGERS
KeePassXC Open Source
60 — @kinabalu

61. 61 — @kinabalu

62. TWO-FACTOR AUTHENTICATION (2FA)
> SMS Passcodes
> Phone Callbacks
> Security Tokens (Google Authenticator, Duo, Authy)
> Push Notifications
> TOTP
> U2F Devices
62 — @kinabalu

63. TWO-FACTOR AUTHENTICATION (2FA)
> Google Authenticator
> Duo
> Authy
63 — @kinabalu

64. 64 — @kinabalu

65. DON'T GOOGLE. DUCKLE?
65 — @kinabalu

66. SUPPORTIVE LAWS
> GDPR
> California Privacy Act (CCPA)
> more...?
66 — @kinabalu

67. "Privacy is rarely lost in one fell
swoop. It is usually eroded over
time, little bits dissolving almost
imperceptibly until we finally
begin to notice how much is gone."
— - Daniel J. Solove
67 — @kinabalu

68. FIN68 — @kinabalu

69. Q & A69 — @kinabalu

70. ANDREW LOMBARDI / @KINABALU
MYSTIC CODERS, LLC
mysticcoders.com
bit.ly/beginningspring5
bit.ly/websocketbook
70 — @kinabalu