Protecting Personal Data (With KAREN DAVILA)

Summary

In this video, Karen Davila addresses the importance of online data protection, highlighting the Philippines' high ranking in web attacks and internet scams. She advises against oversharing personal information on social media, suggests using ad blockers and updating apps to block pop-ups, and emphasizes the need for strong, unique passwords. Davila also recommends using two-factor authentication and OTP for added security, warning of the legal consequences of hacking under the Data Privacy Act of 2012. The video concludes with a reminder to use social media wisely and protect personal information.

Takeaways

• 🔐 **Secure Your Digital Home**: Just as you would lock your physical house, ensure your online accounts are protected to prevent unauthorized access.
• 🌐 **Be Mindful of Online Sharing**: Oversharing personal details on social media can make you vulnerable to scams and identity theft.
• 📍 **Location Privacy**: Avoid posting your real-time location; wait until you're safe at home to share experiences to maintain privacy.
• 👥 **Choose Friends Wisely**: Be selective with social media friend requests to prevent potential scammers from accessing your personal information.
• 🚫 **Block Pop-Ups**: Use ad blockers to prevent pop-ups that may contain viruses or attempt to steal personal information.
• 🔗 **Examine URLs Carefully**: Look for 'https' in a website's URL to ensure it's secure before entering personal information.
• 📱 **Keep Devices Updated**: Regularly update your devices and antivirus software to protect against the latest threats.
• 🔑 **Create Strong Passwords**: Use long, unique passwords with a mix of characters, numbers, and symbols to enhance account security.
• 🔄 **Avoid Password Reuse**: Using different passwords for each account reduces the risk of a single breach compromising multiple accounts.
• 🔒 **Two-Factor Authentication**: Enable two-factor authentication for added security, making it harder for unauthorized access.

Q & A

Why is it dangerous to overshare personal information on social media?

Oversharing personal information on social media can expose sensitive details like your location, identification documents, and even financial information. Hackers can use these details to guess your passwords or steal your identity.

What does 'A' stand for in the ABC of avoiding online scams?

'A' stands for 'Avoid oversharing personal information.' This means you should refrain from posting personal documents, your current location, or any identifiable information online to protect your privacy.

How can pop-ups be dangerous when browsing the internet?

Pop-ups may contain viruses or malware, or be used to collect personal information. Clicking on them without verifying their authenticity can put your data and device at risk.

What are some ways to ensure a website is secure before entering personal information?

Check for 'https' in the URL, which indicates that the website is secured. Also, avoid entering personal information on unfamiliar websites or when connected to public WiFi.

Why is it important to keep your devices and apps updated?

Updating your devices and apps ensures they have the latest security patches, which protect against vulnerabilities that hackers can exploit. Failing to update can leave your data exposed to attacks.

What is a strong password, and how can you create one?

A strong password is at least 12 characters long, includes upper- and lower-case letters, numbers, and symbols, and avoids predictable details like names or sequential numbers. Using a passphrase can also enhance security.

Why should you not use the same password for all your accounts?

Using the same password across multiple accounts increases the risk that if one account is hacked, all of your accounts will be vulnerable. A password manager can help you keep track of different passwords.

What is two-factor authentication, and why is it important?

Two-factor authentication adds an extra layer of security by requiring a second form of verification, like an OTP sent to your phone, making it harder for hackers to access your accounts.

What penalties does the Data Privacy Act of 2012 impose for hacking and data breaches?

Under the Data Privacy Act of 2012, hackers can face imprisonment and fines ranging from P100,000 to P5 million, depending on the severity of their violations.

What is the main message of Karen Davila's Media and Information Literacy Project?

The main message is that while social media offers many benefits, users must be cautious about their privacy and security. By following the ABCs—Avoid oversharing, Block pop-ups, and Create strong passwords—users can better protect their personal information online.

Outlines

00:00

🔐 Online Privacy and Security

Karen Davila introduces the importance of online data protection, drawing a parallel between physical locks and digital security. She highlights the Philippines' high ranking in web attacks and the careless sharing of personal information on social media, which can be exploited by hackers. Davila provides practical advice on avoiding oversharing, adjusting privacy settings, and being cautious about friend requests. She also advises against clicking on pop-ups and emphasizes the importance of updating apps and using secure websites.

05:01

🚫 Avoiding Public WiFi Risks

This section discusses the risks associated with using public WiFi for accessing personal accounts, such as banking, and the potential for data compromise. Davila stresses the importance of keeping devices and antivirus software up to date, citing the PhilHealth data breach as a cautionary example. She then moves on to discuss creating strong passwords, advising on length, complexity, and the use of passphrases. Davila also warns against using predictable information in passwords and suggests using a password manager and enabling two-factor authentication for added security.

10:09

🛡️ Legal and Ethical Considerations

In the final paragraph, Davila touches on the legal implications of hacking and data privacy violations under the Data Privacy Act of 2012, which can result in imprisonment and hefty fines. She concludes with a reminder of the power of social media and the importance of using it responsibly. Davila summarizes the key points as the ABC of online safety: avoid sharing personal information, block pop-ups, and create strong passwords, emphasizing the need for users to protect their information and use social media wisely.

Keywords

💡Online Data Protection

Online data protection refers to the measures taken to secure personal information from unauthorized access, theft, or damage. In the video, Karen Davila emphasizes the importance of protecting one's online data, likening it to securing a house against robbers. The video discusses various strategies to prevent data breaches, such as avoiding oversharing personal information and creating strong passwords, which are crucial in the digital age where privacy and security are paramount.

💡Oversharing

Oversharing is the act of disclosing more personal information than is necessary or prudent, particularly on social media platforms. The script warns against oversharing, as it can lead to identity theft or account compromise. For instance, posting pictures of one's ID, bank cards, or location can provide hackers with clues to guess passwords or impersonate the individual. The video advises being mindful of the information shared online to maintain privacy and security.

💡Hackers

Hackers are individuals who gain unauthorized access to computer systems or networks with the intent to steal, alter, or destroy sensitive information. In the context of the video, hackers are portrayed as threats to online security, capable of exploiting overshared information to gain access to personal accounts. The video underscores the need for vigilance and protective measures against such cyber threats.

💡Password

A password is a secret word or phrase that is used to authenticate an individual's identity and grant access to a system or service. The video highlights the importance of creating strong, unique passwords to safeguard online accounts. It advises against using easily guessable information and suggests using a mix of characters, numbers, and symbols to enhance security. The video also mentions the use of passphrases and password managers to further protect against unauthorized access.

💡Two-Factor Authentication

Two-factor authentication (2FA) is a security process in which users provide two different authentication factors to verify themselves as a valid user. The video recommends enabling 2FA for online transactions as an additional layer of security. It serves as an alert system and protection against unauthorized access, even if a password is compromised.

💡Data Privacy Act of 2012

The Data Privacy Act of 2012 is a Philippine law that protects the privacy of individuals and ensures the protection of personal information in the information and communications system. The video references this act to warn against hacking and unauthorized access to personal data, emphasizing the legal consequences of such actions, including imprisonment and hefty fines.

💡Social Media

Social media refers to websites and applications that enable users to create and share content or participate in social networking. The video discusses the dual nature of social media, highlighting its benefits for communication and connectivity while also cautioning about the risks of oversharing and the potential for scams and identity theft.

💡Pop-ups

Pop-ups are small windows that appear on a computer screen, typically over web browser content, to advertise products or collect personal information. The video advises viewers to be cautious of pop-ups, as they can contain viruses or be a means to obtain personal information. It suggests using ad blockers to prevent these potentially harmful interruptions.

💡Public WiFi

Public WiFi is a wireless local area network that provides internet access to the public, often for free, in places like cafes, airports, and libraries. The video warns against using public WiFi for sensitive transactions, as it can be less secure and more susceptible to hacking, potentially exposing login credentials and other personal information.

💡Antivirus Software

Antivirus software is a computer program used to detect, prevent, and remove malicious software, such as viruses, worms, and Trojans. The video mentions the importance of having up-to-date antivirus software to protect devices from cyber threats, using the example of the PhilHealth data breach, which occurred due to a lack of such protection.

💡OTP (One-Time Password)

An OTP (One-Time Password) is a temporary password that is valid for only one login session or transaction. The video advises viewers to never share their OTPs with anyone, as they serve as a crucial security measure against unauthorized access to accounts. It also warns against scams that may attempt to trick users into revealing their OTPs.

Highlights

The Philippines ranked second globally in web attacks or internet scams according to Kaspersky Security Network.

Filipinos' fondness for social media and careless posting habits increase vulnerability to online threats.

Personal information like IDs and location shared on social media can be exploited by hackers.

Hackers can use personal details to guess passwords or steal identities.

Avoid oversharing personal information to protect online accounts.

Do not post pictures containing personal information such as certificates and IDs.

Sharing location on social media can be a security risk.

Modifying privacy settings to 'Friends only' can enhance security.

Accepting friend requests selectively can prevent scammers from accessing personal information.

Blocking pop-ups and using ad blockers can prevent scams and protect devices.

Secure websites are indicated by 'https', which means they are encrypted.

Avoid logging into personal accounts on public WiFi due to the risk of hacking.

Updating devices and anti-virus apps is crucial to prevent data breaches.

PhilHealth data breach in 2023 highlighted the importance of antivirus software.

Creating strong, unique passwords with a mix of characters is essential for account security.

Using a passphrase instead of a password can make it harder to predict.

Avoid using easily guessable information in passwords, such as names and birthdays.

Using a password manager can help securely store multiple passwords.

Two-factor authentication provides an additional layer of security for online transactions.

Never share one-time passwords (OTP) with anyone to prevent account compromise.

Data Privacy Act of 2012 protects individuals and imposes penalties for violations.

Social media should be used responsibly to avoid becoming a victim of scams.

The 'ABC' of online safety includes avoiding personal information sharing, blocking pop-ups, and creating strong passwords.

Transcripts

Would you want to live in a house without a lock?

It seems dangerous, right?

Because at any time, you could be robbed.

That’s why your door should have a lock.

But what if your stalker…has a duplicate key.

Such is the typical plot in thriller films,

but it is not far from real life.

Especially in the online world, where our accounts function like houses

containing private information.

It can be stolen or compromised if the owner is not careful enough.

I’m Karen Davila.

Today, I will teach you different ways to protect your online data.

According to the study of Kaspersky Security Network, the Philippines ranked second globally

among countries with the most recorded web attacks or internet scams.

Aside from the fact that we Filipinos are very fond of social media,

many of us are careless with what we post.

Do you like to overshare?

To the point that everything in your life is posted on Facebook or in your Instagram stories?

For instance, your new ID just arrived, and you immediately post it on social media.

Or perhaps you are posting pictures with your exact location?

Or maybe even bank cards, checks, and payslips are on your wall and myday?

That’s dangerous!

Hackers can use your personal information to access your online accounts.

It can be a way for them to guess your password, or steal your identity and pretend to be you.

Indeed, scammers are on a different level now.

Isn’t it scary? But don’t worry because I will teach you the ABC to avoid them.

A -- Avoid oversharing personal information!

In short, don’t be OA in posting.

1. Do not post pictures containing your personal information

such as certificates, IDs, addresses, passports, and documents with your signature.

2. Avoid sharing your location. The whole world doesn’t need to know where you are right now,

so it’s better to just post them when you get home to be SAFE!

3. If you love posting, you can modify the Privacy Settings of your account.

Instead of making it public, change it to “Friends only.”

4. Most importantly, choose your friends wisely!

Do not accept friend requests from just anyone.

You never know, the person befriending you online could be a scammer.

B -- Block pop-ups & Update your Apps

Sometimes, when we are reading on the internet, a window suddenly pops up selling a product,

asking for your opinion or details about you.

It is called a pop-up. No matter how good their offer is, don’t just click and believe.

It could contain a virus, or it could be used to obtain your personal information.

To avoid this, we can use ad blockers so that these pop-ups do not appear randomly on our screens.

These apps will serve as shields against scams and dangerous websites that can damage our devices.

And speaking of websites…

Don’t click mindlessly, especially if the website you see is unfamiliar,

Examine its URL first. Is there an “S” after HTTP?

That’s the indication that a website is secured.

Also, as much as possible, avoid logging into your personal accounts like online banking

while your device is connected to public WiFi. Public WiFi can be hacked, and hackers can see your log-in credentials.

You might have accessed the internet freely, but your data has been compromised.

One last tip. Make sure also that your devices and anti-virus apps are updated.

In 2023, PhilHealth experienced a data breach, where the addresses, phone numbers and insurance IDs of contributors were obtained by hackers.

The reason, according to Senior PhilHealth official Israel Paragas, was that the agency allegedly did not have antivirus software when the hacking occurred.

If this is happening in a big agency like PhilHealth, what more could happen to us?

So when you see something that you need to update your cellphone, update it!

You will be more secured when your devices are updated.

And finally... Letter C -- Create A Strong Password

It’s good if your password is long and unique.

For example, what do you think is the most secure password among the three: A, B, or C?

If your answer is B, you’re correct!

A password is stronger if it has at least 12 characters.

It should also have a mix of upper- and lower-case letters.

Add numbers and symbols to make it harder to guess.

You can also use a “passphrase” instead of a password so that it will never be predicted.

Remember: the longer and more unique, the more protected you are!

Do not create a password that contains your name, relative’s name, pet’s name, birthday, address and contact number.

It will be easy to predict especially if these details are posted on your social media accounts.

Here's another one…

Some people make their passwords “secret,” so that when asked by others, they will answer… “secret!”

It’s amusing, but it shouldn’t be imitated.

Password serves as the key to your account.

It is not like candy that you give away freely.

So when creating a password, don’t use a predictable word.

And if you are going to use numbers, don’t use ones that are next to each other on the keyboard, like 12345, QWERTY, or repeated digits like 777.

Those are easy jackpots for hackers

Also, never use the same password for all your social media accounts.

Because if one gets hacked, the others will also be at risk.

If you are afraid that you might forget your password, you can use a password manager.

It will help you take care of storing all your passwords.

If you really want to be safe, activate two-factor authentication for your online transactions.

It will serve as an alert system and additional protection against those who have malicious intent to steal your personal information

You can also use the SMS verification method, where a one-time password or OTP will be sent to your trusted contact number.

Never share the OTP with anyone! Not even with your crush!

It is often a scam for someone to call and ask for the OTP to open your account. That’s dangerous!

There are also push notifications where you will be notified if someone attempts to open your account.

You can decline it if the location of the person trying to open it is suspicious.

Meanwhile, for those attempting to access and hack other people’s accounts, oh well!

Stop that because we have the Data Privacy Act of 2012.

Under this law, you can be imprisoned for several years and fined from P100,000 to P5 million, depending on your violation.

When social media was invented, our connection with each other became faster.

There is nothing wrong with using social media.

But always remember that amidst our leisure and pleasure, you can also become a victim.

So, to our users, always remember the ABC:

A -- Avoid sharing personal information

B -- Block pop-up

C -- Create strong passwords

No one will be at a disadvantage if your information is protected.

Remember, our words are powerful.

Let us use them wisely.

Before you post anything, make sure it is right and true.

This is Karen Davila for the Media and Information Literacy Project of UP Diliman.