Quiz - Information Security at University of Toronto

* Please select your response

Please wait while we determine your traveller type ...

When signing up for a new service, you're asked to review and agree to its privacy policy. What do you usually do?

Scroll down and click accept without reviewing the policy. My need/want to use the service takes precedence over any data usage.
Skim the policy but even if I have reservations around the data handling practices my need/want to use the service takes precedence and I click accept.
Skim the policy and ultimately accept but make attempts to restrict data usage in some way, such as changing preferences within the service options.
Read the privacy policy and if I see something I do not like, I do not sign up. I will look around to find an alternative service.

How confident are you in your privacy expertise?

I'm definitely not a go-to person for privacy. I barely know where to start with my own.
I know how to enable two-factor authentication and find privacy settings on my browser, but what's the point? Privacy is dead!
I know some things about privacy settings on social media and certain apps, but by no means am I an authority.
I know the ins and outs! Ask me about tools, browsers, extensions, software, and even laws!

How safe do you feel when surfing the internet day to day?

I feel secure while on social media, shopping, or perusing sites. It's not like I seek out danger on the web.
Generally, I feel safe. I take precautions that I'm aware of like checking that a URL is legitimate, but I don't worry excessively.
I don't think anywhere on the internet is safe. At every turn, someone is trying to get their hands on my information and there's little I can do to stop it.
I remain ever vigilant! I use every tool in my arsenal: a VPN, available privacy settings, and more. It's my goal to minimize my risk as much as possible.

How do you feel about targeted ads online or in the real world?

They don't bother me. Sometimes they show me things I'm interested in, so it's fine with me.
I have mixed feelings. They can be useful, but I wonder how much information sites have about me. I’m cautious but not overly concerned.
They're invasive. They remind me that my activities are tracked. I'd like to limit them, but I'm not sure how.
I strongly dislike them. They highlight the extent to which my personal information is monitored and exploited. I do as much as I can to avoid them, like using ad-blockers.

When browsing an e-commerce site, a stream of products are recommended to you based on your previous purchases or account activity. How does that make you feel?

It's really useful and convenient. Keep them coming!
Not a big deal. The site has information about me, but it's only used for product recommendations. I don't see harm in that.
Although I appreciate the convenience, I feel like the site is spying on me.
I'm uncomfortable that a company can compile so much information about me! It reminds me to browse anonymously.

In hybrid and remote workplaces, some organizations track worker productivity with technology, such as keyloggers, smart cameras, and movement monitors. How do you feel about it?

I don't see anything wrong with it. I'm punctual, I get my work done. It's no different than a punch clock or performance review.
I understand why employers might want to track productivity, but transparency is important. As long as my employer communicates their expectations and use of these technologies, I don't mind.
It's definitely invasive. My managers should trust that I get my work done, and use of these technologies undermines that relationship. But if I want to keep my job, I'll have to play ball.
It's a serious breach of my privacy. Adopting such practices erodes the trust in a workplace. I would either advocate against them or pass up on the position all together.

How does the idea of your government tracking your online activities strike you?

It's a little invasive, but at the end of the day I'm not doing anything illegal, so I have nothing to hide!
It’s a bit concerning, but it's important for security reasons. I’m cautious about what I do online, but also I trust the government to regulate itself.
It concerns me deeply because it's an invasion of my privacy. I try to protect myself from such surveillance, but I realize there are limits to what I can accomplish in the face of a government.
It's an affront to my personal freedoms! I take whatever steps necessary to ensure my online activity is kept anonymous.

Do you believe the government has adequate protections in place to protect your privacy?

I haven't thought about it much. I made it this far without an issue, so I imagine they're doing a good enough job.
I trust the government's investment in privacy as much as I trust companies - not at all! Regardless of my efforts, there's little I can do to combat their surveillance.
I believe the government has adequate regulations in place to safeguard my privacy, and I do what I can on my end to protect it also.
Absolutely not. I'm a strong advocate for stricter laws that protect my personal data and take extensive measures to ensure that it is as protected as possible from prying eyes.

With advancements in AI and machine learning, facial recognition is becoming more widespread. What's your take on it?

It's exciting! I can unlock my phone or computer with a glance, and social media can automatically tag me in posts. The future is here!
It's useful technology and I understand it being used in controlled environments, but I'm not sure about my face being used without my consent.
I'm highly skeptical. It's useful for smaller tasks and it's even used as a method of payment in some countries, but I don't like the idea of private companies or the government using it.
Is nothing sacred? Facial recognition is a serious threat to personal privacy and civil liberties. I don't need anyone knowing where I am or what I'm doing just because a camera recognizes me!

Do you think companies have your best interest at heart when it comes to protecting the information they have on you?

Companies wouldn't collect my information if they weren't capable of protecting it, so I trust them.
Some companies genuinely try to protect my data, especially if their business relies on customer trust. However, I'm cautious because not all companies prioritize privacy, and mistakes can happen.
It depends on the company, but I think the majority are interested in profiting from rather than protecting my data.
Of course not! Companies give the impression of privacy to gain trust and attract new customers, but they don't care about it. They do the bare minimum to scrape by the laws and regulations.

You download a new app and are asked about permissions it claims to need to function, like your location, contacts, device camera and microphone. What do you do?

The app needs what the app needs, so I'll grant it access to everything.
I question why the app needs all these permissions, but it's too much work to parse through a privacy policy, so I'll just allow it.
I'll enable only the permissions the app might need for how I plan to use it and deny the others.
No app is useful enough to justify access to this much personal information. I'll uninstall it.

How often do you review and/or update the privacy settings on your device's browser?

Browsers have privacy settings? News to me - so never! I'd rather not micromanage my online experience. I just want convenience and ease of use.
I rarely check them because I don't believe it makes a difference. Companies and advertisers always find new ways to track our data.
I don't obsess over them, but I'll update them when there's a major update, a change in my browsing experience, or if I'm notified of a breach.
I review them at least every other month or so. It's important to stay updated on the latest settings that could protect my information.

When setting up a profile on social media, how do you usually operate?

It's called "social" media for a reason - I want people to find me!
I provide whatever information the platform needs, but I'll use a privacy setting here and there. Beyond that, I don't pay much attention to the privacy settings.
I enable as many protections as possible; but at the end of the day, I know the site is still getting my information.
I enable every privacy setting available or I don't have an account on there. There's no in-between!

When it comes to email, do you maintain multiple accounts?

Managing one inbox is hard enough. Why add more?
Sure, I can have multiple email accounts, but they all connect to me anyway. Who am I trying to fool?
I have a couple -- one for personal use and one for work. Any more than that would be overwhelming.
I have separate ones for work, school, lurking, subscriptions, you name it, so I can keep the system on its toes.

When using online services, what considerations do you have when entering information?

I provide the online service with whatever information it needs. I give them the data they need, and they provide me a service -- a simple exchange!
I’m cautious with any service. I'm mindful of how my data might be stored or used by these platforms, but I use them when they make my life easier.
I consider whether the information I’m entering is sensitive or not. I try to avoid sharing personal or highly sensitive data. Otherwise, I’m not overly concerned.
I always take significant precautions. If I use them, I avoid entering sensitive information unless I know the risks, and I ensure that I understand how the platform will use my data.

Health wearables are increasingly common -- have you joined the wave of users?

They're awesome! They track my sleep quality, physical activity, even my heartbeat! My smartwatch keeps my health top of mind, and I'm glad to have it.
Not yet, because I am worried about the data they collect; however, I wouldn't turn one away if I received it as a gift.
I own one and I see its utility, but I did my best to read through its privacy policies and settings to ensure I'm doing what I can to prevent my health information from being misused.
I'd rather not strap a surveillance device to my body, my phone is bad enough. I don't trust the companies that manufacture them or how they use that data.

Do you use apps to track the locations of your friends and family in real-time? Why or why not?

They're great. It's reassuring to know where loved ones are at a given time, especially in an emergency or if they are somewhere new.
I might use them, but only with the consent of those involved and in specific situations, like during travel or for safety. It’s useful if used respectfully and sparingly.
It depends on who wants to use them with me, but I think they're pretty invasive. If someone needs to find me, I'm probably only a text or a call away.
Apps like these are terribly invasive. You can accomplish peace of mind by other means.

Do you have smart devices or appliances at home?

Of course! A smart speaker, thermostat, whatever I can get my hands on. They make life so much easier.
I have a couple smart appliances, like smart lighting or a smart doorbell. They’re useful, and I’ve taken some steps to secure them.
I don't like smart devices because of their constant data collection. I would rather get up to change the temperature than have a company know how warm I keep my home.
I am completely opposed to having smart devices in my home because they're invasive. I don't need my personal life recorded at all hours of the day.

Just recently, you spied a headline in the news that an online service you have an account with has suffered a data breach. How would you react?

Naturally, I'd find myself worrying, but there is so little that I can do to actually to curtail any negative effects this event may have on my life.
Breaches affect hundreds of thousands, if not millions of people. What are the chances that those behind a cyberattack actually care about my information?
I'd do what I can to monitor my other accounts and see if there’s any changes or updates I didn't approve. Maybe I'd go as far as to change my passwords across the different services I use.
I would immediately spring into action and do what research I could to understand the scale of the breach and whether or not my data was affected. If the company doesn't respond well, I am content to take my business elsewhere.

Is privacy dead?

If privacy was dead, I wouldn't be using passwords on every one of my accounts. I feel in control of my private information.
Privacy is basically dead. Between government surveillance, corporate data collection, and frequent breaches, our personal information is hardly private anymore!
It isn’t completely dead, but it’s close. We need stricter regulations and more people advocating for it to ensure we keep what control we have left.
Privacy isn’t dead, but it’s definitely changing. You need to be more vigilant and proactive about protecting it. While we can maintain a level of privacy, it requires effort and smart decisions.

70%

Privacy Quest

Privacy Quest

Privacy Quest

Please wait while we determine your traveller type ...

Statement of Land Acknowledgement