Dan Geer, CISO at In-Q-Tel, on[1] why this is patently incorrect: > Your digital exhaust is unique hence it identifies. Pooling everyone's digital exhaust also

Dan Geer, CISO at In-Q-Tel, on[1] why this is patently incorrect: > Your digital exhaust is unique hence it identifies. Pooling everyone's digital exhaust also characterizes how you differ from normal. Privacy used to be proportional to that which it is impossible to observe or that which can be observed but not identified. No more -- what is today observable and identifiable kills both privacy as impossible-to-observe and privacy as impossible-to-identify, so what might be an alternative? [...] Privacy will be [...] the effective capacity to misrepresent yourself. > Misrepresentation is using disinformation to frustrate data fusion on the part of whomever it is that is watching you. Some of it can be low-tech, such as misrepresentation by paying your therapist in cash under an assumed name. Misrepresentation means arming yourself not at Walmart but in living rooms. Misrepresentation means swapping affinity cards at random with like-minded folks. Misrepresentation means keeping an inventory of misconfigured webservers to proxy through. Misrepresentation means putting a motor-generator between you and the Smart Grid. Misrepresentation means using Tor for no reason at all. Misrepresentation means hiding in plain sight when there is nowhere else to hide. Misrepresentation means having not one digital identity that you cherish, burnish, and protect, but having as many as you can. Your fused identity is not a question unless you work to make it be. Lest you think that this is a problem statement for the random paranoid individual alone, let me tell you that in the big-I Intelligence trade, crafting good cover is getting harder and harder and for the exact same reasons: misrepresentation is getting harder and harder. If I was running field operations I would not try to fabricate a complete digital identity, I'd "borrow" the identity of someone who had the characteristics that I needed for the case at hand. OPSEC is hard. You leak incredible amounts of data, and modern analysis techniques reveal a lot more than most people realize. Re: your secondary identity - how do you plan on obfuscating the changeover events so the usage times (and/or network entry/exit times) of your secondary identity are not the inverse of when you use your primary identity? I recommend ZOZ's talk "Don't fuck it up!"[2] for a better sense of just how hard is to do proper OPSEC in the modern age of surveillance. [1] http://geer.tinho.net/geer.blackhat.6viii14.txt http://geer.tinho.net/geer.blackhat.6viii14.txt [2] https://www.youtube.com/watch?v=J1q4Ir2J8P8 https://www.youtube.com/watch?v=J1q4Ir2J8P8