Chris Hoofnagle is the West Coast Director for EPIC. It’s his list.
I’ve been working for some time on writing easy-to-understand guides for protecting privacy. Here’s my “top 10” things you can do with very little money or effort to protect your privacy.
Good stuff.
Bruce Schneier • November 25, 2005 10:04 AM
So it seems.
The link is the correct one; I know that. Maybe the site is down.
Fred F. • November 25, 2005 10:08 AM
Did the black helicopters get there before us?
Dave W. • November 25, 2005 10:26 AM
The text only Google Cache of the page will work. Here is the list (from the cached page):
Hoofnagle’s Consumer Privacy Top 10
I’ve been working for some time on writing easy-to-understand guides for protecting privacy. Here’s my “top 10” things you can do with very little money or effort to protect your privacy. I’m presenting this list to the California Office of Privacy Protection later this week, and I’m going to continue to tweak it. I’d appreciate your input. Edits based on your suggestions are marked with and additions.
DO-NOT-CALL REGISTRY. Enroll your telephone numbers (both landline and wireless) in the Federal Trade Commission anti-telemarketing list by calling 1-888-382-1222.
SAFEGUARD YOUR SSN. The Social Security number is the key to identity databases. Those who have it can steal your identity and engage in fraud. Do not keep your Social Security Card or any other document that contains your SSN in your wallet. And don’t give out your SSN unless it is in a tax or employment context.
END STUDENT PROFILING. Your children’s schools can sell personal information to marketers and recruiters. Federal law allows you to opt out of this information sale.
AVOID LOYALTY PROGRAMS. Supermarket and other “loyalty” cards track your purchases and make it easier for companies to sell your information. Be loyal to stores without loyalty cards. If you have to use a supermarket shopping card, be sure to exchange it with your friends or with strangers.
SECURE YOUR ACCOUNTS. Be sure to place a password on your banking, telephone, and utilities accounts. With a password in place, it makes it more difficult for others to access your information.
ENGAGE IN PRIVACY SELF-DEFENSE. Don’t give your phone number or other personal details to businesses unless they really need it. Don’t complete product warranty cards, surveys, or sweepstakes–these are just tools used to collect and sell your data. Be sure to ask businesses how they use your personal information, whether they sell it, and how they protect it.
Posted by Chris Hoofnagle at November 14, 2005 05:43 PM
Roger • November 25, 2005 12:04 PM
The FTC Do Not Call registry can be reached online:
IO ERROR • November 25, 2005 12:37 PM
I have several supermarket shopping cards, none of which have my name (or any real person’s name) and all of which have no real address, either. They still work, too.
Shura • November 25, 2005 1:24 PM
Interesting list, but it seems that most of it applies to US-Americans only – pity. I was expecting something more global. 🙂
Milan Ilnyckyj • November 25, 2005 1:54 PM
Any tips for people in Canada or the United Kingdom? Do any of these carry over?
Bruce Schneier • November 25, 2005 2:18 PM
“Interesting list, but it seems that most of it applies to US-Americans only – pity. I was expecting something more global.”
A lot of these sorts of recommendations are going to be country-specific, as they are largely dependent on local laws.
Do Not Call? • November 25, 2005 2:29 PM
True story:
A reserach company has been calling for the past two months. My wife and I have both told them to remove us from their list — repeatedly. It was not done. Part of it was our fault — we’d say: Remove us and then hang up.
So last time they called, I told the guy if they don’t stop calling they will be getting a lawsuit for harassment (don’t know if that is legal, but what the heck, right).. he tells me: we don’t have authority to do that. Now, I can’t confirm whether or not that is true, but the supervisor supposedly did. Is it really a legal out for them to not give the caller permission? I would think that once I say: Take me off. That should be enough. Am I wrong?
greg • November 25, 2005 5:56 PM
My goodness. What arn’t US companies legaly alowed to trade? Your soul would be fair game too eh? No wonder lots of ppl refuse to accept jobs in the US! (me included, my wife flat refused to go to the US- even with a large sum of money that was offered)
@Do Not Call
Well i don’t about the US. But there was a case here in NZ. The guy said that if he was called again then that would constite a agrrement to pay him $500 (can’t remeber the exact amount, but thats a ball park figure). They called, he went to small claims court and won. Don’t know if they called again.
Greg
Ithika • November 25, 2005 7:34 PM
@ Greg
Got any more info (a link?) on the story about the New Zealand contract-over-phone? If it’s true I’d like to see more. Sounds like a good laugh anyway.
Something which UK residents can try: Save up your junk mail prepaid response envelopes. Then you can mail them back at Christmas time filled with nonsense. Make it heavy nonsense, as they have to pay the postage by weight for it all. Tie it to a brick and post the whole thing! 🙂
Yongqi • November 26, 2005 2:00 AM
Hey I know this is kinda off-topic and should better be posted in a crytography forum, but I can’t find one so I’ll post the question here: what is the impact of the tweable block cipher? I noticed that the new version of TrueCrypt uses a cipher block of operation based upon a treakable cipher, but is this secure? This is kinda new, is there proof that this new mode of operation is secure?
Thanks in advance.
another_bruce • November 26, 2005 8:48 AM
@greg
i applaud your wife’s refusal to come here. it is hypocritical to come to a country you hate just for a ton of cash, gorging like a tick on its fair bosom but bad-mouthing it all the while.
scrumpy • November 26, 2005 10:26 AM
@Yongqi
The new version of truecrypt has been discussed on the sci.crypt newsgroup and a couple of other websites. A good overview of the initial probelem and the method they took to work around it is here:
Yongqi • November 26, 2005 5:06 PM
@scrumpy
Thanks. The forum seems interesting and I think I will join it.
Phil • November 28, 2005 7:21 AM
@IO ERROR sayeth:
I have several supermarket shopping cards, none of which have my name (or any real person’s name) and all of which have no real address, either. They still work, too.<<
Ever use a credit or debit card in conjunction with those supermarket shopping cards?
Companies doing market research are exempt from the DO NOT CALL list. However, I have discovered this is nothing more than an “out.” They will “Claim” it’s “market research” when they are actually trying to sell something. When you tell them to not call again, they will “claim” the exemption because of “market research.” This is not entirely true. If you tell them you are on the “do not call” list, and you ask to be removed, they are required to remove you. If they don’t, you can sue! Even if they are a “market research” company or charity.
Subscribe to comments on this entry
Sidebar photo of Bruce Schneier by Joe MacInnis.
Vasya Pupkin • November 25, 2005 9:57 AM
Dead link.