{"id":48109,"date":"2023-10-20T15:57:18","date_gmt":"2023-10-20T15:57:18","guid":{"rendered":"http:\/\/startupsmart.test\/2023\/10\/20\/snitch-hunt-hackathon-exposes-how-easily-you-can-be-found-with-metadata-startupsmart\/"},"modified":"2023-10-20T15:57:18","modified_gmt":"2023-10-20T15:57:18","slug":"snitch-hunt-hackathon-exposes-how-easily-you-can-be-found-with-metadata-startupsmart","status":"publish","type":"post","link":"https:\/\/www.startupsmart.com.au\/uncategorized\/snitch-hunt-hackathon-exposes-how-easily-you-can-be-found-with-metadata-startupsmart\/","title":{"rendered":"Snitch Hunt hackathon exposes how easily you can be found with metadata – StartupSmart"},"content":{"rendered":"
\"Green<\/div>\n

A Melbourne hackathon has revealed how easy it is to expose people through their metadata, as unknowing Australians continue to leave digital footprints into their lives everyday.<\/p>\n

The \u201cSnitch Hunt\u201d was hosted by the University of Melbourne in collaboration with multiple tech groups including ThoughtWorks and Hack For Privacy on World Human Rights Day.<\/p>\n

CryptoParty Sydney, Platypus Initiative, Blueprint for Free Speech, Digital Rights Watch and Electronic Frontiers Australia were also involved.<\/p>\n

At the event, more than 40 participants of all ages and backgrounds were given the task of using metadata to bust a whistleblower.<\/p>\n

A team of students aged 10 to 14 won the game.<\/p>\n

The prize of this hackathon is not a new startup, but rather a lesson on the real threats that metadata retention presents to citizens around the world, says Dr Suelette Dreyfus, who co-organised the event.<\/p>\n

Dreyfus says the teams had access to a number of types of metadata, including emails, IP addresses, phone numbers and geo-locational data, which might have revealed who called at what time, and their location.<\/p>\n

In late 2015, Australia began wide-scale data retention by telecommunications and internet providers, which must keep customer metadata for two years.<\/p>\n

\u201cIt\u2019s very easy to drop little electronic breadcrumbs about your life everywhere you go and not even realise that you\u2019re doing it,\u201d Dreyfus told StartupSmart<\/em>.<\/p>\n

Dreyfus says metadata can reveal your geographical location at certain times of the day, as well as who you talk to and for how long.<\/p>\n

\u201cThe fact that a team of pre-teen girls could hunt down a mock journalist whistleblower in two hours using this metadata should concern everyone about their personal privacy,\u201d she says.<\/p>\n

\u201cI asked a security investigator once: If you were given a choice between the content of a conversation or metadata, which would you choose?<\/p>\n

\u201cHe said he\u2019d rather have the metadata because it tells you more.\u201d<\/p>\n

Why this matters to startups<\/h3>\n

For startups, Dreyfus says putting customer privacy and security front and centre is crucial.<\/p>\n

\u201cA critical component of any brand is trust. If your customers’ privacy is violated because you weren’t careful you break trust,\u201d she says.<\/p>\n

\u201cIncreasingly people are aware that their privacy has monetary value and they want a say in how it\u2019s going to be monetised and if it\u2019s going to be monetised.<\/p>\n

\u201cAs people become more and more aware of the importance of privacy, they are looking for relationships with service providers who are in their corner and are going to fight for them.\u201d<\/p>\n

The power and hazards of metadata retention<\/h3>\n

From Edward Snowden to those behind documentary series like Truth and Power<\/em> on Netflix, many activists have been fighting to show the potential consequences of complacency with metadata retention and poor digital privacy.<\/p>\n

Read more: A message to tech entrepreneurs from Edward Snowden: \u201cWe can build something better\u201d<\/strong><\/a><\/p>\n

NordVPN says new legislative powers on metadata retention and surveillance in Russia, Poland, Germany, the US and the UK this year have created \u201cshocks and abuses\u201d to internet privacy.<\/p>\n

\u201cWe kill people based on metadata,\u201d said the former boss of US-based National Security Agency (NSA) Michael Hayden during a public debate in 2014.<\/p>\n

Back at home, Dreyfus says Australians should be more aware of the metadata that\u2019s being collected about them.<\/p>\n

\u201cIf you have metadata it\u2019s very powerful,\u201d she says.<\/p>\n

But the hazards of metadata retention go beyond whistleblowers, according to NordVPN.<\/p>\n

\u201cCitizen control and surveillance, especially suspicion-less surveillance, whether physical or digital, has not proved to be an effective way to control criminal activity [and] history tells us it has always turned out to be counter-productive, endangering lives and causing fear and insecurity,\u201d the VPN provider said in a statement.<\/p>\n

\u201cFor example, when the government opens a backdoor to citizen\u2019s data, it means that this backdoor could potentially be used by anyone else \u2026 In the wrong hands, it can be used to steal people’s identities and rob them of their bank accounts.<\/p>\n

\u201cData can also get misplaced, systems can crash and everyone can get endangered.\u201d<\/p>\n

The concerns raised come in the wake of several government-targeted attacks including the recent “CensusFail“.<\/p>\n

The Australian government has recently committed $230 million to a Cyber Security Strategy, which includes the Cyber Security Growth Centre to be led by Atlassian’s former head of security Craig Davies<\/a>, and ICT expert David Glance has said this is a “small step in the right direction<\/a>“.<\/p>\n

Protecting digital privacy<\/h3>\n

To protect digital privacy, Dreyfus recommends the use of end-to-end encryption communication tools like ProtonMail, browsers like Tor and secure messaging apps like Whisper Systems\u2019 open-source Signal instead of traditional SMS.<\/p>\n

\u201cTurning on full disk encryption on your laptop or desktop, making sure that you have full encryption enabled on your phone, [using] a longer pin number not just a four-digit pin,\u201d she says.<\/p>\n

\u201cThose things will help nudge us all closer to cyber privacy.\u201d<\/p>\n

Follow StartupSmart on<\/em> Facebook,<\/em> Twitter, LinkedIn and iTunes.<\/em><\/p>\n","protected":false},"excerpt":{"rendered":"

A Melbourne hackathon has revealed how easy it is to expose people through their metadata, as unknowing Australians continue to<\/p>\n","protected":false},"author":2,"featured_media":58285,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[9,6,1],"tags":[],"_links":{"self":[{"href":"https:\/\/www.startupsmart.com.au\/wp-json\/wp\/v2\/posts\/48109"}],"collection":[{"href":"https:\/\/www.startupsmart.com.au\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.startupsmart.com.au\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.startupsmart.com.au\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.startupsmart.com.au\/wp-json\/wp\/v2\/comments?post=48109"}],"version-history":[{"count":0,"href":"https:\/\/www.startupsmart.com.au\/wp-json\/wp\/v2\/posts\/48109\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.startupsmart.com.au\/wp-json\/wp\/v2\/media\/58285"}],"wp:attachment":[{"href":"https:\/\/www.startupsmart.com.au\/wp-json\/wp\/v2\/media?parent=48109"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.startupsmart.com.au\/wp-json\/wp\/v2\/categories?post=48109"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.startupsmart.com.au\/wp-json\/wp\/v2\/tags?post=48109"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}