Data Privacy Day is on 28 January this year! It is the perfect occasion to take stock of where we are when it comes to online privacy protections. In good news, end-to-end encryption is becoming firmly established as the norm. There is now broad recognition that good privacy protections enable secure online communication. In addition, secure communications is the very basis for meaningful online interactions, from social life to commerce.But as the sheer volume of digital communications continues to increase — and with the advent of AI driven surveillance — it is no longer the content of your message that matters, but its metadata. In fact, the metadata can often reveal things about your life far more accurately than the content. Your message content might contain your thoughts and opinions, but the metadata reveals your actions.Consider this metaphor: you have a bird’s eye view of a busy city. You are watching the cars as they travel through the bustling traffic of the city. Now, from your position you cannot see what or who is inside any given car. But you CAN see its color and size, what house it leaves from at what time, where it is going, how frequently it travels between those addresses and more. From that information, you can deduce quite a lot about what is going on: who is visiting whom, the nature of their relationship, even details about their health, habits, wealth and more. This, in short, is metadata.In this blogpost we give a primer on metadata surveillance and what can be done about it.What is ‘metadata’?Firstly, what is metadata really? It is the data about your message, including its:<ul><li>Origin</li><li>Type</li><li>Destination</li><li>Time</li><li>Length</li><li>Size</li></ul>…and pretty much any other identifiable patterns of your messages.What can it be used for?Metadata can be analysed to reveal internet traffic patterns. These patterns are like a fingerprint, in fact there is a type of attack called “website fingerprinting”! In these types of attacks, someone would download all the pages on a website, analyse the metadata of these pages and then match these to the patterns of traffic. They can thereby learn which specific page a person might be looking at. Now, imagine the website for example provides health advice!In short, metadata can reveal:<ul><li>Which specific web page you visit, even over HTTPS</li><li>Which web domain you request over encrypted DNS</li><li>What you are typing, even in an encrypted web application (search, taxes, health)</li><li>What you say in a voice conversation over encrypted voice channel</li></ul>…and more.Why is metadata valuable?So metadata reveals a lot, but there are other reasons for why it is valuable for anyone wanting to spy on people.<ul><li>It is machine readable, making it the preferred target in AI driven surveillance and makes it easy to analyse large volumes of data.</li><li>It doesn’t take up much storage, compared to say a video file, which means it is easy to collect and store lots of it.</li><li>It is openly available!</li><li>It is currently unprotected by the law.</li></ul>Who has access to metadata?Unfortunately, metadata is largely unprotected, meaning there are a lot of actors who have direct access to it. These include:<ul><li>Internet Service Providers</li><li>Internet Exchanges</li><li>Autonomous systems</li><li>BGP routers</li><li>Internet backbone</li><li>Even your wifi router, LAN</li></ul>…and eavesdroppers, including, famously, the NSA.So what can we do about it?The most effective protection against metadata surveillance today are mixnets. Let’s go back to our original metaphor. Now imagine you are looking down at the busy city, but all the cars are identical. And what is more, they pass through tunnels and under bridges, where they then emerge from but you cannot pinpoint which car is exactly which and if they have changed lanes or not.This is essentially what a mixnet does. It encrypts internet packets in layers of encryption that make all packets look identical. It then ‘mixes’ these packets by having them route through three layers of what are called ‘mix nodes’ where they are mixed with other identical looking packets and micro time delays are added. It becomes pretty much impossible to trace and analyse who is speaking to who. A mixnet makes it impossible for a snooper to know:<ul><li>What you are saying</li><li>Who you are communicating with (sending or receiving messages)</li><li>When you are communicating</li><li>How long you are communicating</li><li>From where you are communicating</li><li>The amount of data you are sending or receiving</li><li>Any patterns in you communications</li><li>Whether you are communicating at all</li></ul>Nym is a decentralised, permissionless mixnet run by node operators all over the world. This is cybersecurity for and by a global community. And what is more, there is a token to make sure that this community of operators and supporters is sustained in the long term!We are always looking for new community members to run nodes and create privacy-enhanced applications on top of Nym. Join our community to participate and keep up to date:<a href="https://discord.com/invite/Nym" rel="noopener noreferrer nofollow">Discord</a>Twitter<a href="https://t.me/nymchan" rel="noopener noreferrer nofollow">Telegram</a>Tools<ul><li><a href="https://chat-demo.nymtech.net/" rel="noopener noreferrer nofollow">Chat webapp</a></li><li><a href="https://github.com/EdenBlockVC/spook" rel="noopener noreferrer nofollow">Ethereum RPC mixer</a></li><li><a href="https://github.com/noot/nym-ethtx" rel="noopener noreferrer nofollow">Ethereum transaction submitter using Nym</a></li><li><a href="https://status.notrustverify.ch/grafana/d/CW3L7dVVk/nym-mixnet" rel="noopener noreferrer nofollow">Mixnet speed dashboard</a></li><li><a href="https://t.me/NodesGuru_bot" rel="noopener noreferrer nofollow">Mixnodes telegram monitoring bot — Nodes.Guru</a></li><li><a href="https://isnymup.com/" rel="noopener noreferrer nofollow">Is Nym mixnet up</a></li><li>Pastenym — anon text sharing service</li></ul>

Data Privacy Day special: a primer on metadata

NymProject

Egyéb ezen a dátumon (2023. febr. 2.) megosztott cikkek

Best Decentralized Exchanges (DEXs) in 2023

3 Great Web3 Music Projects in Crypto

Top 3 Cardano’s NFT Analytics Aggregators

Failliet crypto-leenplatform Celsius opent opnames voor kleine groep gebruikers

Telos Shares January 2023 Recap

How to Play LOCGame on Mobile

Join our free newsletter for daily crypto updates!