By default, you encounter privacy concerns every time you use your smartphone, surf the web or use a new app. Whether banking online, engaging with social media outlets or browsing online in a coffee shop, your privacy and security are at risk. You’re constantly receiving notices about new privacy policies that are too long to read let alone digest. This online session will be an open discussion about how to address specific privacy concerns and how to reduce your exposure to hacking, identity theft and over-exposure on social media. The session was moderated by Jonathan Bacon

1. Ways to Address
Online Privacy and
Security
TechTalk for JCCC
Retirees Association
May 28, 2020
2-3 PM

2. CURRENT SCAMS
• COVID-19 catfishing
scams rebound amid
pandemic: stealing
photos of frontline
workers scammers lure
victims to give money to
fake charity
• COVID-19
contamination scam
plays off fears of
consumers: by text told
they know someone
with COVID-19, click a
link for further
information and action
• IRS stimulus check
scams ramp up: told IRS
needs their bank
account information in
order to deposit the
check
• COVID-19 grandparent
scams prey on seniors:
posing as grandchildren
who claim they are sick
and need money to pay
their hospital bills
https://www.idtheftcenter.org/current-scam-alerts/

3. COVID-19
(and other)
Charity Scams
• Research: Use watchdog groups such
as CharityWatch, CharityNavigator, and Wise Giving Alliance (Better
Business Bureau)
• Search the Web for charity name plus words such as "complaints,"
"review" or "scam"
• Warning signs: undue pressure, payment method (gift cards, wire
transfers, cash), bogus thank you emails, emails with attachments
• Guard personal data
• Donate direct, don’t respond to email
Source: us.norton.com/internetsecurity-crm-identitytheftprotection-
covid-19-charity-scams-9-tips-to-help-avoid-fakes.html

4. STOLEN DATA: Passwords, Credit card
numbers, Email addresses, Phone
numbers, Dates of birth, Security
questions
• Adobe (38 million)
• Adult Friend Finder
• Canva
• Dubsmash
• eBay (145 million)
• Equifax (143 million)
• Heartland Payment
Systems
• LinkedIn
• Marriott International
(500 million)
• My Fitness Pal
• MySpace
• NetEase
• Sina Weibo
• Yahoo (3 billion)
• Zynga
Check https://haveibeenpwned.com/

6. Your Best Defense
• Use strong, complex
passwords or pass
phrases
• Use two-factor
authentication for
important accounts
(Google, Apple,
financial, health)
• Don’t accept requests
from unknown
individuals
• Beware unexpected
links or attachments
• Download apps from
recognized safe sites
(App Store, Google
Play, Microsoft Store)

7. Healthy
Password
Checklist

8. Best 2020 Password vaults
• Zoho Vault
• Dashlane
• Keeper
• LastPass
• RoboForm
• 1Password
• Norton password manager
www.pcmag.com/picks/the-
best-password-managers
• Password Boss
• Sticky Password Bit Warden
• LogMeOnce
• mSecure

9. Safe Browsing - For Privacy’s
Sake: Incognito, Private &
InPrivate
• Mozilla FireFox’s Private Window = Ctrl-Shift-
P (Win) or Command-Shift-P (macOS). Or open
menu (upper right of Firefox, three short
horizontal lines) select New Private Window.
• Apple Safari’s Private Window = Command-
Shift-N (macOS) or select File > New Private
Window (Win).
• Google Chrome's incognito Window = Ctrl-
Shift-N (Win) or Command-Shift-N (macOS).
Or click menu (upper right –three vertical dots)
select New Incognito Window.
• Microsoft Edge’s InPrivate Window = Ctrl-Shift-
N (Win) or Command-Shift-N (macOS). Or click
menu (upper right, three dots arranged
horizontally) choose New InPrivate window.
www.computerworld.com/article/3356840/how-to-go-incognito-in-
chrome-firefox-safari-and-edge.html

12. DuckDuckGo: Browser or Add-on

13. DuckDuckGo
Browser or
Add-on
• Private Search
• No personal data
collected
• Blocks hidden trackers
• Site Encryption
• Browse as Usual

14. Clear
Browser
Cache and
Cookies
Open Chrome.
• At the top right, click
3 dot menu >
Settings.
• Under "Privacy and
security," click
“Clear browsing
data.”
• Select the
appropriate check
boxes for “Browsing
history,” “Cookies
and other site data.”
and “Cached images
and files.”
• Click “Clear data.”
Open Edge.
• At the top right,
click 3 dot menu >
Settings.
• Select “Privacy
and security.”
• Select “Clear
browsing data.”
• Use check boxes to
select the data you
want cleared.
• Click “Clear.”

15. On Facebook: Be
Safe, Be Proactive
• Think before you
share anything!
• Don't include birthday,
address, phone on
your profile
www.facebook.com/h
elp/101765758165199
4/
• Review and update
social media privacy
settings
www.facebook.com/h
elp/115450405225661
• Take a Facebook
Privacy Checkup
www.facebook.com/a
bout/basics/manage-
your-privacy/posts#16

16. Problem: Fake
Requests From
Spam Profiles
Clues to fake Facebook
friend requests
• Do you know
requestor or have
friends in common?
• Is request from an
unknown attractive
member of opposite
sex?
• Profile has limited
Facebook history or
timeline?
• Already Facebook
friends?

17. Suspect a Fake
Facebook Request?
• Check with your
friend. New
account?
• Check account for
activity. When
established?
• Process to report
face Facebook friend
request:
https://www.socme
dsean.com/answere
d-how-do-i-report-a-
fake-facebook-
friend-request/

18. Problem: Risks in
Social Sharing
• Facebook, Instagram, and
Snapchat can reveal your
location
• Posting while traveling (Do you
want folks to know your house
or apartment is empty?)
• Photo metadata can identify
your location
Note: sites like metapicz.com,
whereisthepicture.com and
www.pic2map.com can identify
map locations unless geo-tagging
is turned off on the
camera/smartphone.

19. Pic2Map Example
• Displays photo image, camera used, date, address, city, country,
satellite image and standard map of location

20. Problem: Profile Hacking
• Cracking social
media user account
passwords: most
common way to
hack one’s profile
• Solution: Use
complex and
frequently changed
passwords
• Beware of Facebook
Chat (Messenger)
messages even
from people you
know

21. Profile
Hacking
Apps and websites can be
used to create fake
Facebook chats online

22. In Case You’re Hacked:
Symptoms
• Your device slows down
• You’re using far more data with ISP
than expected
• Videos suddenly buffer, web pages
take longer to load
• Programs and apps keep crashing
• Your device (computer, mobile
device, phone) suddenly reboots
• Unexplained online activity

23. In Case You’re
Hacked: Solutions
• Run your antivirus
software
• Install any Operating
System upgrades
• Check Task Manager
(Windows) or
Activity Manager
(Mac) – unknown
apps
• Check ISP data
usage for unusual
spikes
• Reboot system see if
problem persists
• Constantly check
your accounts for
unauthorized
activity

24. Check For Unusual
Activity:
• Unauthorized
financial
transactions
• Credit card charges
or purchases you
didn’t make
• Movies on Netflix
you didn’t stream
• Songs on Spotify or
Pandora you didn’t
play
• Unrecognized
Facebook activity

25. Think Your Account Is
Hacked?
• Change your passwords, even for old
accounts that may use a common password
• Stop using the hacked
password…everywhere!
• Monitor statements (credit cards and
financial institutions) for charges you don’t
recognize.
• Alert financial institutions that you’ve been
hacked, if you find any evidence.
• Use distinctive passwords, especially for
accounts with personal, health and
financial data.
• Use a cross-platform password manager to
store passwords. Some apps generate
complex passwords for you.

26. Your Facebook
Account Hacked?
• Check out
m.facebook.com/help/20330589
3040179/
• Explore link to Step by step guide
m.facebook.com/help/13067254
09382822
• If someone tried to change email
associated with a Facebook
account, Facebook sends a
message to the previous email
account with a special link. You
can click the link to reverse the
email change and secure your
account.

27. Google Account
Hacked?
Report suspicious mail to
Google
productforums.google.co
m/forum/#!msg/gmail/RI
yIm0v-
xnA/py_QQyH4BwAJ

28. Problem: Malicious Links
and Attachments
• Email with fake embedded email
addresses or links
• Email with unsolicited images or video
attached
• If you receive unexpected email or text
attachment (photo, video, link), always
check with sender to verify

29. Innocent eMail or Text: “How are you?”
Don’t volunteer personal details
unless you know who you are
communicating with.

30. Check the real address

31. Resources
10 Worst Social Media Hacks
https://www.infosecurity-
magazine.com/blogs/top-10-worst-
social-media-cyber/
18 Biggest Data Breaches of 20th
Century
https://www.csoonline.com/article/213
0877/the-biggest-data-breaches-of-the-
21st-century.html
Has Your Phone Been Hacked?
https://www.usatoday.com/story/tech/
columnist/komando/2018/05/04/has-
your-computer-phone-been-hacked-
heres-how-tell/559136002/
Privacy/Security Risks of Social Media
https://www.rswebsols.com/tutorials/in
ternet/privacy-security-risks-social-
media

32. Resources
How do I spot and Report a Fake
Facebook Friend Request?
https://www.socmedsean.com/ans
wered-how-do-i-report-a-fake-
facebook-friend-request/
Find Location from Photo
https://www.guidingtech.com/find
-location-from-photo/
How to Spot a Fake Friend Request
https://www.lifewire.com/how-to-
spot-a-fake-friend-request-
2487747
Assembled by Jonathan
Bacon for the Johnson
County Community
College Retirees
Association, March 2019,
updated May 2020

33. Questions or Comments?