Hampir tidak ada privasi lagi ketika berbicara perkembangan teknologi. Semua sosial media meminta foto serta data-data pribadi Anda. Pun data yang ada diperangkat Anda, tidak luput dari pencurian oleh orang yang tidak berhak. Presentasi ini memberikan wawasan bagaimana upaya perlindungan data pribadi Anda di era digital saat ini.

1. Internet Privacy
Secure Your Information
Girindro Pringgo Digdo
Information Security Researcher
Bandung, May 13, 2014
Indonesia Security Incident Responses Team on Internet Infrastructure (ID-SIRTII)

2. whoami
● InfoSec Guy
● Over 5 years as Penetration Tester
● Instructor
● Founder of omega.or.id

3. Where Are We?

4. Where Are We?
Insecure Digital World

5. Headline Bad News
● Gmail users have no "reasonable expectation"
that their communications are confidential.
http://www.theguardian.com/technology/2013/aug/14/google-gmail-users-privacy-email-lawsuit
● Microsoft has admitted that it will hand over data to the U.S.
government, if properly requested, even if that data is stored
somewhere other than the U.S.
http://www.readwrite.com/2011/06/30/microsoft-says-it-will-give-yo

6. Information Security Myths
● Secure Socket Layer (SSL) will protect entire websites.
● Firewall will secure you against attack.
● No issues printed from Automatic Web Vulnerability Scanner.
● Annual Vulnerability Assessment is enough.
● Our developer has a good skill in programming.
● ?

7. Problems
● Difficult law enforcement in border-less world
● People can't expect privacy
● Social engineering works well due to lack of awareness makes
● Physical security
● Malware becoming more and more powerful
● Organized crime
● ?

8. What Should We Do?
Protect Your Information

9. Think before you share
personal information
● Read the website's privacy policy
● Do not share more than you need to
● Choose how private you want your profile or blog to be
● ?

10. Know the risk
● you use public internet
● you enter confidential data (eg username, password)
● you use credit/debit card at store
● ?
What if :

11. Minimize access to your information
● Lock your computer when you are away from it.
● Access with authentication.
eg bios password, account password, Encryption
This prevents another person from waiting for you
to leave and then sitting down at your computer
and accessing all of your information.

12. Encryption
● Protect your confidential information
● Only available for you
● End to end encryption
✔ PGP
● Good Integrity
● ?

13. Encryption

14. Encryption
● Full Disk Encryption
● Using things that:
✔ you know
✔ you have
✔ you are
● Always called as Multi Factor Authentication

15. Encryption

16. Technology
“If you think technology can solve your security problems,
then you don't understand the problems and you don't
understand the technology.”
~ Bruce Schneier

17. Trust But Verify
Feeling Secure is Dangerous

18. Question?
girindigdo@gmail.com
girin@omega.or.id