smash-the-firewall/slides/metadata.md
2024-04-24 17:22:29 +02:00

2.9 KiB









> If you give me ~~six lines written~~ **metadata** by the hand of the most honest of men, > I will find something in them which will hang him.
                       Probably Richelieu
--

Metadata

Pieces of information that describe everything BUT the content. Examples:

  • phone call: my location, the duration, who I called
  • a PDF file: the author, the location, the authoring software
  • an encrypted file: date of creation, modification and last access



Content is easier to protect, metadata often leaks.

--

I don't need to know the content if

  • you called a sex line at 2:24 and you stayed on the phone for 12 minutes
  • you called a suicide prevention line
  • You watched a video on anxiety management for 27 minutes at 8:05 AM
  • Your phone was near the one of famous activists during a protest
  • You entered a cannabis dispensary and stayed 44 minutes

--

Why are metadata important #1

In many legal systems, the content is usually protected much better than the metadata. For example, in Italy, phone calls are only recorded in case of ongoing investigations for certain level of crimes, while phone operators are legally required to maintain the metadata of phone calls for 24 months.

--

Why are metadata important #2

Metadata are easy to mine:

  • large scale research: metadata are textual and rigidly structured. There are many algorithms to navigate structured data by keywords, time, descriptions, etc...
  • indexing: there are methods to cluster metadata so that it's easy and fast to retrieve parts of the information on demand
  • statistical analysis: extract current and historical trends, unforeseen categories and forecasts from metadata

--

Why statistical models matter for L.E.

Law Enforcement make wide use of statistical models.

  • Resource allocation
  • Performance evaluation of different units
  • Assessing crime trends
  • Criminal profiling
  • Build correlations and associations
  • Predictive policing and crime forecasting

--

How do I protect myself?

The only real protection here is the mindset.







start with commonsense

end up with paranoia