Just came up with my father again.
He blames me that mother forgot her phone’s and Google password because I recommended against it being a word.
I mentioned encryption, “not necessary unless you’re doing something illegal”.
When mentioning lack of privacy with targeted advertisements, he said that he actually really likes them, because he bought a couple of things he wanted for years.
I don’t really have good arguments.
2 big things for me.
First is that everyone, and I mean absolutely everyone has something they want to hide. People assume “I’m not a violent person or a criminal” except yes you are, and you’ve done something. A great example is everyone in the US speeds, absolutely everyone. Does that mean you want every office to know every instance of you speeding if you get pulled over? So, yes everyone has something they’d rather not say.
Second is more of an example of you should be allowed to go places without everyone knowing. The example was about 5 years ago police used location data to find a person who broke into someone’s home. Problem is that the location data they used returned one person who happened to be on that street around the same time. They were riding their bike down the street. To the police they had the person there, they had proof, it was good enough. Except it wasn’t, and he obviously wasn’t the person they were looking for. Location data put him there though, and sold him out. So maybe not the best thing for whoever to know exactly where you are at any given time.
As for encryption, ask him for his porn history. If he gets upset, just say “why it’s not illegal”
but, I agree with the other person. If you’re dad is like mine and countless others, you’re not fighting against him but propaganda. If that’s the case, you aren’t going to win this. The only winning is turning off the source.
I’m going to be real. I was part way through an explanation before I deleted it. What you are dealing with sounds like a situation where you simply won’t win by using logic. To continue to labor under the presumption that a good and logical reasoning will have an effect is just going to stress you out and achieve nothing.
Google password because I recommended against it being a word.
IT nerds help me out here, but I’ve been under the impression that the best defense against brute force attacks is a very long password, and the idea of sprinkling in special characters or numbers is outdated. Something like “iwenttothestoreandboughtabirthdaycake” is a more secure password than “$6jds_*WghP6”.
edit: Also the mantra to never write down any passwords is more of a workplace piece of advice. I personally think, and this would probably be helpful for older people, that writing down passwords in a notebook which is kept secure in their home is pretty safe. Short of a home invasion, that notebook is safe, and having it can encourage them to diversify their passwords on different accounts. So, if you are going to keep at the issue, taking an angle of using something they are more comfortable with like a paper notebook is going to be accepted more easily than trying to sell them on a password manager or something.
It doesn’t even have to be that long. 12-16 characters and it’ll be infeasible to brute-force for the foreseeable future. But unless you’re talking a high-value target like government, military, or executive suite at a company, no one bothers to brute-force anyway because there’s easier ways to gain access.
The biggest issue with password security is reuse and sharing. The most secure password in the world doesn’t mean a damn thing if you use the same email/password combination across a hundred different websites, because all it takes is for just one of them to suffer a leak and now your credentials are in a dump with millions of others that can be bought for a song and a dance.
This is why it’s imperative to use 2FA for your most important accounts, because it can mean the difference between an attacker getting access and hitting an error page and trying the next poor fucker’s credentials instead.
But also, no one wants to try to remember a hundred different unique passwords so it’s also a good idea to use a password manager. Chrome and Firefox both have them built-in (note that Firefox stores passwords unencrypted on disk unless you set a master password!), but there’s also services like OnePass or Bitwarden that have stronger guarantees.
While being aware that leaking passwords and reusing them is a major risk, I was just asking about the construction of the password as it relates to being attacked directly.
But also, no one wants to try to remember a hundred different unique passwords so it’s also a good idea to use a password manager.
Absolutely. I recommended the notebook approach only because I think people of a certain mindset would be more open to it than a password manager, even if it isn’t as elegant of a solution. At the end of the day it still diversifies passwords. I’m vividly picturing my mom throwing a fit any time a doctor or other office wants her to fill out a form on a tablet instead of paper.
Is there something that would perhaps also work on Android? Also, how do you move the passwords from password manager into the fields? My problem with clipboard is that anything can read it. Of course, that means there has to be something to exfiltrate the data, but 1 problem is better than 2.
As far as I know, the thing is that randomly chosen words will be more secure because there’s simply too many words. However, sentences will be more predictable. And a single word will give quick access to someone with a sufficient wordlist.
Honestly, I don’t remember what exactly my recommendation was, just that I recommended against something quite simple (common word), and that she shouldn’t tell me or anyone else what it is.
Edit: but I am not a professional, so don’t use me for advice.
Everyone’s got something to hide.
For example, I like to keep my credit card number secret from criminals.
Tell him to leave the bathroom door open anytime he’s taking a shit in public then.
Sounds like a frog in boiling water to me.
“May I see your browser history?”
or “give me your credit card number.”
“everyone does something illegal/has something they’re ashamed of” I have that type of autism that doesn’t let me do anything I know is bad; I pay my taxes and rent well before they’re due, I don’t drive over the speed limit, always push the shopping cart back to the corral.
The reason why privacy is important to me isn’t because I’m bad, it’s because being a good person makes you a target when the world is run by bad people.
The US government is currently steering straight into authoritarianism. Do you really want more information about yourself out there, catalogued and ready?
I have nothing to hide, and I also have nothing I want to show to the corpo-government oligarchs who use mass surveillance as a tool of oppression and social control, because almost everything they are doing is evil.
If you have the right relationship for it, ask him about the porn he watches, his banking details and how much money he’s got in his account, and tell him you’ll go buy a billboard to put those on.
Those usually get people quite quickly, but they’re also kind of “gotcha!” moments, and people will generally not respond well to them.
If you want a more structured argument, I think you’ll need to reframe the issue. As I read your comment (I’m almost certainly missing huge amounts of context that could change this answer drastically) your father’s argument is “privacy is bad because it is only used for bad things” and you’re actually arguing back “privacy is good because I want to be left alone”. But your dad thinks that you shouldn’t be left alone, because being left alone means you’re doing something bad.
So, don’t argue why privacy is good, you need to argue why privacy isn’t bad. Find some examples of things he likes that only happened because of privacy. Try to avoid things like revolutions, resistance movements or stuff like that, because it will only reaffirm his view that privacy means you’re doing something bad/anti establishment.
This is where the aforementioned porn/finances comes in, since those are usually things people want to keep private, without having negatives attached (depends a bit with porn on morals). Any guilty pleasures that come into mind would also be useful for this.
Also, make the consequences of no privacy more personal. Government whatever, but what about Janet two doors down? What about his boss? What about his parents?
In the end I’d say it’s all about the framing of why privacy matters in the first place. Establish a minimum need for privacy, then expand from there. Hope this helps you (or someone else)!
Ask him why he doesn’t have a t-shirt with his card details on it
If I was to answer that type of argument, I would consider those:
- why do you close the door of the bathroom when you use it?
- Can I watch you fuck?
- Show me your last income declaration
- Give me your credit card
- Why do you wear clothing?
- Why do you lock the door of the house?
but I tend to ignore people using the “I have nothing to hide” argument
If I have nothing to hide, then I have nothing to prove.
I have nothing to hide
Until the wrong person gets in power, and then you do have something to hide.
That’s generally how I feel about it.
If you have nothing to hide why go into your bedroom to have sex when you can do it in front of the window where everybody can see? I mean it’s not like you are doing anything illegal? Right?
Right?
