Facebook, Cyber-bullying & Catfishing:

Could you be a victim

UNM Anderson College of Business

Computers Are a Fad?

Overview

• Introduction• Purpose• Survey Results• Facebook

– Privacy Settings– Posting Settings– Terms of Use– Security Model

• Catfishing• Social Etiquette and Cyber bullying• Use of Information Assurance techniques to protect yourself

Purpose

• To make you more aware of the Facebook Privacy terms, catfishing and cyber bullying

• How to protect yourself using Information Assurance techniques

Survey Results

Question 1

• Have you ever communicated online privately with someone you’ve never met face-to-face?– Yes 50%– No 48%– Not Sure 2%

Yes

No

Not sure

Question 2

• Have you ever answered personal questions about your age, gender, or location in e-mail, IM or online chat ?– Yes 33%– No 61%– Not sure 6%

Yes

No

Not sure

Question 3

• Have you ever answered questions or given out information such as your phone number, address, social security number, etc. over the internet?– Yes 29%– No 66%– Not sure 5%

Yes

No

Not sure

Question 4

• Have you ever created a profile that others can see or link to from your screen name?– Yes 43%– No 43%– Not sure 15%

Yes

No

Not sure

Question 5

• Have you ever opened e-mail and attachments from strangers?– Yes 12%– No 84%– Not sure 4%

Yes

No

Not sure

Question 6

• Have you, or someone you know, ever been the victim or perpetrator of “cyber-bullying”?– Yes 28%– No 58%– Not sure 14%

Yes

No

Not sure

Question 7

• Have you ever been taught anything about the risks of information and/or internet security?– Yes 92%– No 5%– Not sure 3%

Yes

NoNot sure

Question 8

• How much awareness or thought do you give to information and/or internet security?– A lot 55%– Some 40%– None 5%

YesNo

Not sure

Question 9

• Are you a member of a social networking website such as Twitter or Facebook?– Yes 74%– No 25%– Not sure 1%

Yes

No

Not sure

Question 10

• Do you know what personal information is visible and to whom on Facebook?– Yes 74%– No 14%– Not sure 12%

Yes

No

Not sure

Question 11

• Do you ever look at or do things on the internet that you wouldn’t want your parent(s)/guardians(s) to know about?– Yes 20%– No 66%– Not sure 14%

Yes

No

Not sure

Facebook

What is Facebook?

• Facebook is an online social networking service. • Founded by Mark Zuckerberg and fellow Harvard

University students• Its name comes from the colloquial name for the book

given to students at the start of the academic year by some American university administrations to help students get to know one another.

• Publically Traded• Facebook began by invite only to university students• Facebook is now available for all people 13 years and

older

Security Settings

Suggested Security Settings

• Secure Browsing– Turn on secure browsing

• App Passwords– Less risk with third party having unauthorized access

to your Facebook Password.

• Login Approvals– Security code delivery:

• Text to <phone number>• Use Code Generator• Get codes to use when you don't have your phone

Login Approvals

• Click Edit, on the right side next to Login approvals

• Click the check box next to Require a security code to access my account from unknown browsers.

• To turn off login approvals, you will need to enter your password.

Login Approvals

Code Delivery Contd.

Code Delivery Cont.

Code Delivery Contd.

Setup Confirmation

Email Confirmation

Facebook Login with Security Code

Phone Notification

Facebook Privacy Settings

• Privacy on Facebook is highly configurable• Facebook is going through another privacy

terms of use change• Privacy settings are located at:

https://www.facebook.com/help/445588775451827

Privacy Settings and Tools

Suggested Privacy Settings

• Only allow friends to see your posts• Only allow Friends of Friends to send you

Friend Requests• Only allow Friends to look you up using

your email, phone and timeline by name• Turn off linking of your profile to search

engines

Final Facebook Thoughts

• Ensure you know the people you are adding on Facebook before adding them

• Be aware some sites are public, just require a Facebook login

• The more information you provide, the more a potential hacker has access to

• Facebook has implemented a lot of new ways to search for people

• Turn off tagging of locations when posting– Do you really want someone to know you aren’t home?

• Think before you post!

Southwest Learning Centers

Who is this ?

Catfishing

What is Catfishing

• “The phenomenon of internet predators that fabricate online identities and entire social circles to trick people into emotional/romantic relationships (over a long period of time).”[1]

• Facebook has been being used to Catfish people, i.e. MTV show Catfish

Catfishing Red Flags

• The Modeling Profession• Facebook Profiles• Traumatic Injuries and/or Illness• No Pictures• No Webcam [2]

Tips to Avoid Catfishing

• Only talk to people you know in person online

• Be wary when someone does not offer to video chat, avoiding it

• Ensure that a parent or friend (if over 18) knows if you are meeting someone in person that you met on the Internet

Cyber-bullying

What is Cyber-bullying?

• “Cyber-bullying is bullying that takes place using electronic technology. Electronic technology includes devices and equipment such as cell phones, computers, and tablets as well as communication tools including social media sites, text messages, chat, and websites.”[4]

Statistics

• 84% have seen the people defend the person being harassed; 27% report seeing this frequently.

• 84% have seen the people tell cyber-bullies to stop bullying; 20% report seeing this frequently.

• 66% of teens who have witnessed online cruelty have also witnessed others joining; 21% say they have also joined in the harassment

• 80% say they have defended the victim; 25% have done so frequently

• 43% of teens aged 13 to 17 report that they have experienced some sort of cyber-bullying in the past year.

Statistics Cont.

• More girls are cyber-bullies than boys (59% girls and 41% boys).

• 68% of teens agree that cyber-bullying is a serious problem with today’s youth.[6]Reasons cyber-bullies said they engaged in cyber-bullying:– To show off to friends (11%)– To be mean (14%)– Something else (16%)– To embarrass them (21%)– For fun or entertainment (28%)– They deserved it (58%)– To get back at someone (58%)

Parental Statistics

• Only 7% of U.S. parents are worried about cyber-bullying, even though 33% of teenagers have been victims of cyber-bullying (PEW Internet and American Life Survey, 2011)

• 85% of parents of youth ages 13-17 report their child has a social networking account. (American Osteopathic Association, 2011)

• 52% of parents are worried their child will be bullied via social networking sites. (American Osteopathic Association, 2011)

• 1 in 6 parents know their child has been bullied via a social networking site. (American Osteopathic Association, 2011)

Cyber-bullying by Gender

What can you do?

• Prevent Cyber-bullying• Report Cyber-bullying

What have we learned?

• Be very selective with your Facebook friends

• Implement Security and Privacy settings on Facebook

• Be aware of catfishing• Limit Cyber-bullying

How can you be safer online ?

Information Assurance

• How can you protect yourself and your information online?– Limit who can view your information– Only accept friend requests from people you

know– Use Secure Socket Layer (SSL) connections– Use two-factor authentication to protect your

account– Use strong passwords

Secure Sockets Layer

• HTTPS is the “web” version of secure sockets layer

• You can set the default connection on Facebook to use Secure Sockets Layer

• Data is encrypted between host and website – protecting it from “packet sniffers”

Secure Sockets Layer

• Encrypts traffic between host and your PC

Two-Factor Authentication

• What is two-factor authentication• How do corporations use it• How you can use similar technology with

Online Banking & Email Accounts

Two-Factor Authentication

• Two-factor authentication is a means where a use has to provide two pieces of information to verify or authenticate who they are.

• Combined with a user ID, these two independent verification tokens are validated against two separate verification systems

How we connect to work

• Sandia National Laboratories uses a Cryptocard.

Strong Passwords

• How long could it take to crack your password?• Using a standard alphabet set (case insensitive) without numbers or special characters = 26 characters in set, on

an average 2008-era dual-core PC performing 30,000 MIPS (million instructions per second):

• Using an extended data set with case sensitive letters (upper and lower case), numbers, and 20 special characters = 82 characters in set, on the same 2008-era dual-core PC:

Password Length Maximum Number of Operations (guesses) Maximum Time to Crack 8 208,827,064,576 7.0 seconds 9 5,429,503,678,976 3.0 minutes 10 141,167,095,653,376 1.3 hours 11 3,670,344,486,987,780 34.0 hours 12 95,428,956,661,682,200 36.8 days 13 2,481,152,873,203,740,000 2.6 years 14 64,509,974,703,297,200,000 68.2 years

Password Length Maximum Number of Operations (guesses) Maximum Time to Crack 8 2,044,140,858,654,980 18.9 hours 9 167,619,550,409,708,000 64.7 days 10 13,744,803,133,596,100,000 14.5 years 11 1,127,073,856,954,880,000,000 1,191.3 years

Password Strength

Conclusion

• Facebook is a useful communication tool, but ensure you are being safe with its use

• Use Two-Factor authentication and Secure Sockets Layer when possible

• Use Strong Passwords, do not write passwords down and do not share your password with anyone!

Post High School Learning

• If you are interested in Computers and Computer Security:– Bachelors degree in Computer Science from

UNM– Masters degree from UNM Anderson School

of Management with a concentration in Information Assurance

References

• [1] Catfishing. http://www.urbandictionary.com/define.php?term=Catfishing• [2] Online Dating Red Flags: Warning Signs of a Catfish.

http://www.drphil.com/articles/article/720• It’s catfishing season! How to tell lovers from liars online, and more.

http://www.digitaltrends.com/web/its-catfishing-season-how-to-tell-lovers-from-liars-online-and-more/

• [4] What is Cyber-bullying. http://www.stopbullying.gov/cyberbullying/what-is-it/• [5] Whitman; Mattord (2013-02-01). Principles of Information Security (Page 81).

Delmar Learning. Kindle Edition.