I'm doing a presentation about security/privacy on web and i would appreciate few hints about what would you talk about. Just general, nothing IT specific. I just wanna give a 1000 foot view on few topics and go deeper if I see interest. People should know about a threats on the web and also not just leave defaults everywhere to allow everyone track their every move.
Topics i prepared so far :
- Nothing is free. If it's "free", it gets money by gathering informations about you(VERY SIMPLIFIED)
- CSRF - Don't click everything.
- Passwords - Just don't use the same 10 char long pass on every website... Also how to make a "secure" one
- Defaults - I have a really deep problem with this one. admin/admin is not secure router login. Also many other defaults
- "Smart" devices - They are not so smart when it comes to security. But they excel at tracking your every move.
- Backup everything - We are living in the era of ransomwares. Backups always come handy and can save you LOT of time and sometimes even money.
- Facebook/Instagram/other sites can gather MANY informations if you let them.
- VPNs & Proxies(maybe even Tor)
- Sandboxing applications
- A small bits about random topics - What you delete is not actually deleted. Can be helpful if you accidentally delete something, but can be really dangerous if you think you really erased something. -- Do not use random add-ons in your browser(refering to those malicious sites using facebook to spread) -- few other random bits
- App permissions on smart devices. Does calculator really need to access your microphone?
- PDFs/MP3s can be malicious too! Also i would refer to virustotal.com here.
- Phishing + Social Engineering - I should've mention this earlier. Huge topic. Extremely powerful and sometimes even legal!
- What to do and how to react when you've been "pWn3d". Time is everything here. You need to react.
Every idea appreciated. Simply put : How would you scare people?