Apps or Traps - The Privacy and Access Council of Canada · Link Pyramids Black-Hat SEO Link...

Post on 27-Jul-2020

0 views 0 download

Transcript of Apps or Traps - The Privacy and Access Council of Canada · Link Pyramids Black-Hat SEO Link...

AppsorTraps

RicardoHoar

WhoamI?

• FacultyMemberatMountRoyalUniversity–WebDevelopment– Programming– GeneralEducation

• ChairofDepartmentofMathematicsandComputing

AppsorTraps

AppsandTraps

AppsandTraps

• ObviousTraps– ClickingaLikeButtononFacebook– Usingthesamepasswordonallapps/systems

• LessObviousTraps– SurfingwebwhileloggedintoFacebook– IndexingofSearch/SurfHistory– Geolocationinphotos– WebBugs– UserAgentHeaders– Cookies– Backgroundtracking– Biometricinformation

HTTP

BrowserparsingHTMLandmakingsubsequentrequests

AppsandTraps

• NefariousTraps– Phishing/SpearPhishing– Viruses– SQLinjection– Hacking

• MoreSubtleTraps– Baddevelopers– Poortestingpractices– Badethicalguidanceinsoftwaredevelopment– Minimalviableproducts

Education

Whatisthepurpose?•Goodcitizen•Careerready•Economicfit•Individualfulfillment

DigitalNative

DigitalNative

• Whydoesdigitalliteracy/fluencymatter?• Whatisdigitalliteracy?– Softwareskills?– Understandingofinternet/datastorage?– Algorithms/programming?– Careertraining?– ComputationalThinking?

Education

Whatisthepurpose?•Goodcitizen•Careerready•Economicfit•Individualfulfillment

DigitalNaïveProfessor

• Maynotunderstanddatastorage/transmission– Sharesstudentdatainadvertently

• MaynotunderstandIP– Submitsstudentdatato3rdpartywithoutright

• Maycompelusageofcertainplatforms– Probablydoesnotunderstandwhat’sgoingon

• Assumesstudentsaredigitalnatives– Doesnotteachabouttechnologyandsociety

DigitalNaïveStudent

• Doesnothavetheskillsfacultyexpecttheydo– Applicationskills– Basicunderstandingofemail/web

• Doesnotlearnabouttechnology/privacy• Mightlearnaboutaparticularsoftwareifrequiredforaprogram/course

DigitalNaïveEmployee

• Doesnothavetheskillsemployersexpect– Requiredapplicationaretaught– Securitypracticesdescribed/mandated

• Mightmakedecisionsabouttechnology/privacy– Mayormaynotknowtheyareevenmakingthosedecisions

• Mightchoosesoftware/platforms– Basedoncost– Basedonfunctionality

DigitalNaïveCitizen

• Expectsappstosolveproblems– Hardtoevaluatequality/accuracy– Valuefeaturesaboutimplementation

• Usetechnologytocommunicate– Probablyinefficientatusingtools– Unawareofprotocols/implications

• Awareoftrends– Unawareoftheimpactoftrendsonlargerissues.

WhatI’mscaredof

DigitalCitizenry

Wemustteachthepractical,theoretical,ethicalandsocialaspectsoftechnologytoensure:•Preparedforemployment•Preparedtobeeffectivecitizensindigitalspace•Bettercontributorstoeconomy•Bemorefulfilled?

Foundations?

• Whattechnology/privacy/literacytopicsshouldalluniversitystudentshaveanunderstandingof?– Tohelpthembeeffectivecitizensandemployees–What“pre-requisite”knowledgedotopicshave–Whataretheeducationaloutcomesofa“generallyeducatedgraduate”inthe21stcentury?

Foundations?

• Algorithms• Databases• DataAnalysis• WebFoundations• CommonThreats• Encryption• Visualization• SearchEngines• SoftwareDevelopmentPrinciples• Ethics• RiskBenefitAnalysis• SourceAssessment/Info.Literacy

DataRepresentation

• Text• Images• Video• Websites• MetaData• Indexes

SearchEngines

• Components• PageRank• SimilarityMeasures• Indexing• ReverseIndexing• OtherInputFactors• Individualization• SocialImpacts

Encryption

• Principles• History• Motivation• Mathematics• Implementations

Summary

• Peoplevaluefeatures• DigitalNative• NeedforDigitalliteracy• FoundationalTopics

Beyonduniversaldigitalliteracy

PrivacyanddatainWeb/Appdevelopment•3rdpartyframeworks/services•Datastorage,management,mitigation•Searchengineoptimization•Testdrivendevelopment•Similaritymeasures/datamining•Examples…

SearchEngineOverviewLots of components

IndexingandReverseIndexingThat which makes trillion URL searches possible

Tounderstandindexing(aswesawinChapter11),considerwhatacrawlerandascrapermightidentifyfromawebpageandhowtheymightstoreit.

PageRankAn example

CalculatetheupdatedPageRankforA.

LinkPyramidsBlack-Hat SEO

Linkpyramidsaresimilartolinkfarmsinthatthereisagreatdealofinterlinking.Unlikealinkfarm,apyramidhastheintentionofpromotingoneortwosites.

Thanks!