Find a small coding issue that you can be very angry about; pick on an imperfect user-experience bug or missed opportunity & frame it as intentionally being in breach of a vague aspect of some critical legislation. Launch a crusade.
Adherence to your Rules™ is more important than outcome; petty concerns like "international jurisdiction" pale in comparison to "foreigners should obey the intent of our laws rather than cutting us off"
The purpose of the Internet is not for people to communicate. The purpose of the internet is to be a framework which can be regulated by you. Ideally in dramatic courtroom showdowns.
How to become a Super #Privacy Activist, pt 3 (corollary):
* try forcing companies to host each person's data in the same regulatory regime as where they live, as it maximises potential state leverage over their data.
* remember, this is not "enabling state censorship". Nope.
1/ a ploy to avoid regulatory breakup 2/ a ploy to sidestep child protection 3/ a ploy to disavow user content 4/ improving the privacy of 2bn people 5/ all of these 6/ none of these
Data privacy regulation never has unintended or negative consequences; any failures of regulation are mere minor edge cases which can be addressed with more and better regulation, and/or "exceptional access" for Governments.
"Anonymity Loves Company™" - therefore the best route towards greater global privacy is to trash attempts by the big platforms to deliver the same, eschewing them in favour of small federated platforms hosted by noble volunteers.
Talk about "Privacy by Design". Don't acknowledge anyone who asks "what does that mean?" or "How can you presume a threat model?" - they are merely technicians.
"Privacy by Design" means "Privacy by Design", and the law knows this
If your friends are Turkish democracy activists, encourage them to leave the evil-whatsapp-data-octopus to experiment with Bip, which is new and uses end-to-end-encrypted HTTPS to talk to Turkish servers!
Make sure to note how both Turkey and Russia are both working hard to pass legislation, just like the EU and China, for data of their citizens to remain within the borders of Government control, where state laws can protect it!
For advancement in your career as a Super Privacy Activist, if you are European you should foster a relationship with a Partner-MEP. In the USA, a Partner-Senator is the best option.
The best Partner-MEP is passionately committed to liberal values and the rule of law, but also wants American companies to be punished so that European ones can "fill the technology gap".
Care and feeding of your Partner-MEP or Partner-Senator is very easy: just tell them everything that you know and they will select the perspectives which best fit their political agenda of the week.
You can help by retweeting it.
How to become a Super #Privacy Activist, pt 22: (ERRATUM)
Twitter is, of course, a WrongPlatform™. You should of course be mirroring the Tweets of your Partner-MEP or Partner-Senator, onto your federated Mastodon server.
Unless it's the Gab one, in which case you are Bad™.
Data Ownership: the goal of "data ownership" is for people to own, review, and delete, any data that is _about_ them.
You cannot delete your tax records because "Government Exceptional Access" or "Socialism" (delete as applicable)
How to become a Super #Privacy Activist, pt 24 (corollary):
Avoid confusing "data ownership" with "data sovereignty" - the former is Right™, whereas the latter is gun-toting libertarian techno-utopianism and is therefore Wrong™, and probably also involves Linux or Blockchain
How to become a Super #Privacy Activist, pt 24 (corollary, pt 2):
As above, if you encounter someone who asks non-policy-related or non-law-related questions relating to "implementations" or "threat models", they are technicians and do not Understand™ and may be safely ignored.
This buffs your Super Privacy Activist credentials by tying-up junior legal clerks for entire _evenings_ trying to justify how they knew what you had previously asked them to do for you.
To the right audience, this is very sexy.
How to become a Super #Privacy Activist, pt 27: (ERRATUM)
The goal of being a Super Privacy Activist is not to be "sexy" - SPAs may express their passion through statement dyed hair, designer glasses, TED talks and guitar solos.
The User™ is everything to a Super Privacy Activist.
Literally.
A User™ cannot negotiate Facebook security settings, yet can attend PGP key-signing parties. They see the value of being warned about Cookies™ 400 times per day.
A User™ will pursue every possible avenue to stop WrongPlatforms™ from tracking them… apart from installing and using TorBrowser which would do most of the work for them.
SPAs care for Users™, because the SPA once was one.
The most egregious example of password-bansturbation that I know of, comes from the French data protection regulator @CNIL; take a look at this nightmare and imagine helping someone less capable navigate it:
@OpenRightsGroup@jimkillock@Forbes@bazzacollins@Facebook@FBoversight Observation number three: unless the user has explicitly opted into something which deletes chats after {1 minute, 1 hour, 1 day} etc, it would be rude to erase stuff - "where have my baby photos gone they were in that chat with my sister!?!", etc
I'm sorry to say "quelle surprise?" - precisely the same happened to the Facebook reporting mechanisms which (again) many people on (Twitter) demanded. :-/
Back in the 90's I worked for Company X, for whom Company Y was a key supplier.
X built a firewall with auto-block of src IPs upon attack (compare fail2ban)
BadGuyZ broke into Y & attacked X from Y's infra; the firewall blocked ALL X-Y comms & impacted N million dollars of biz.
"But we put these filters in for good reasons! Nobody could have foreseen this outcome!", etc… alas, no - censorship, blocking, & control systems ALWAYS have a nasty tendency to blow back in the faces of those who call for them.
Earlier today I got a shout-out for a presentation that I did at "Access All Areas 2" in 1995 - a UK @defcon-alike organised by @mala and @FakeDaveGreen (IIRC?)
Thing is: I still have the talk online, and it's mildly significant.
The pitch was "INTERNET TOOL OF DOOM!" which was riffing on the "SATAN" hysteria of the year previous, and also my experienced with publishing Crack, prior:
The attached are my speaker's notes, near verbatim, with some crappy 1996-era HTML added to infix the images and source code of the tools.
You can't make this stuff up: it appears that today's anti-Refugee flight out of @RAFBrizeNorton is a C130 doing low-level flying over pro-Brexit constituencies?
"Or it could just be a training flight", etc…
You have to applaud them for realising that the people who actually need a "show of strength" are [portion of] the British public who demand that "something needs to be done!"
The C130 has completed its grand tour of the south (including circuits over Salisbury Plain) and now has rather more reasonably been replaced by a less terrifying, more reasonable Shadow R1 surveillance aircraft at 17,000 ft, over Dover: