Strategies for reclaiming our personal privacy online
theguardian.com
theguardian.com
1) "First, governments need to ensure that Big Tech’s handling of our private data..."
No. Governments are the ones who want access to what 'Big Tech' collects. They are in no position to limit collection or use where they themselves enjoy and rely upon open access. Google the "going dark" narrative to see in which direction governments want to push privacy.
2) "Different types of data need to be treated differently."
By whome? I'm no republican, but I do think it naive to believe that we can tell google how to handle the data it collects via services it offers for free. They practically invented this data. Rather than ask them to strangle themselves, we should focus on physically limiting their abilities to collect it in the first place (Tor and other clientside encryption schemes).
3) "We need aggressive deletion policies"
Bye Bye internet archives. The right to be forgotten is great until one realizes it's just another form of censorship. Those drunken selfies are painful to see, but the onus is on the idiot users who attach their names and full contact data to every drunken tweet.
5) "affordable paid options, with better privacy?"
Lol. Payment schemes only add to privacy worries. Now they have a CC number, legal name, or even mailing address to attach to an account. Or perhaps the OP wants anonymous payment schemes. That is a far larger issue that runs contrary to my point (1) above.
6) "an ethics body that could give guidance on deletion policies, content moderation and better consumer control"
Another layer of government oversight? Another committee to rubberstamp decisions and project a false image of privacy?
"Quietly, some geeks are decentralizing the net. Again. Who are they? Why are they doing it? What new technologies are they using? How will this change the world?
We interview them to find out, and we're a community to help out."
Data and metadata collected on individuals needs to be considered implicit property of the person. And, any use of that data needs to be licensed and pay royalties. And, a person should not be able to accidentally license their property through click-through EULAs.
in fact, not a single action by an individual is suggested -- only hinting of policy changes
policy is just not enough
1. have a browser that doesn't store cookies, use that for casual browsing.
2. use an adblocker at all times. user agent faker too.
3. use pgp email with no subject lines with offline mail clients.
4. avoid social networks, centralised services. set up your own for other people you know.
5. keep informed. keep looking for how to give away less information. keep looking for which new information is retained. e.g. karma police revelation.
2. Depending on your settings, an agent faker can make you move identifiable should it project a unique or impossible agent. Even one set on to a randomized list can be telling as so few people use such settings. You have to be careful.
3. And who is going to read these emails without subject lines?
4. Unless you are going to live in a unibomber-style shack, you need some form of public network. And any successful private network eventually expands to the point of being public. Even facebook was once private.
5. To keep informed you'll need to read and communicate online ... which only makes 1-4 more difficult.
2 - I agree with you on the user agent. Don't fake it unless you are going to make it more common. Perhaps turning Linux into Windows is a good idea (but make sure you do it right).
3 - I would say many if you recognise the sender.
4 - That's going a bit far. People can live without facebook but they usually fall back to email or other poorly protected methods.
5 - Agreed.
Forgot to mention disabling referer where possible, which you can test with https://www.whatismyreferer.com