I am a teacher of Computing. I'm seeing plenty of stories and comments on HN with regard to how we can better protect out own privacy, and plenty of retorts explaining that the average citizen does not have the technical ability to enact these measures.<p>So tell me, what should I do differently in my classroom from now on?
What are the fundamental concepts and skills I should be teaching my students, to assist them in protecting their privacy and data?
You should teach them to be good people by example and subtle advice. And above all, show them that programming is one of the most enjoyable intellectual activities and actually needs no computer at all. You can write programs with pen and paper, or just in your mind. And if somehow the government ends up watching live feeds of us all one day (I don't think we're there yet btw), then who cares. Professional athletes still win games when the whole world's watching. And we used to, or still do, believe in all-knowing God(s). Let's just hope the god of the next generation follows the 'golden rule' of treating others the way you want to be treated, and also making us in god's image. Or let's hope there's no god at all. Yeah... I think the news this week is that profound. NSA/CIA/FBI/etc have ascended to have nearly god-like powers... we must put them in their place, afterall, our country was founded upon the idea that no man can take away our God-granted liberties. That turns out to be a powerful and useful concept, whether you're a believer or not.
I would steer clear of things like VPN and Tor. You might want to mention them but that's about it as it might get you in quite a bit of troubles with parents, the school etc.<p>GPG is a good thing to teach, the same as HTTPS and things like the EFF's HTTPS-Everywhere extension for most major browsers. Don't just stick to HTTPS though, make the leap to TLS/SSL and how it can be used to protect other forms of communication like e-mail.<p>BitTorrent Sync would be another thing I'd have a look at as it allows them to create their own Dropbox-like system, sharing files with friends etc. without entrusting their data to a third party.<p>Someone advised to never use free e-mail services but even with paid ones you have no guarantee your data won't be turned over. So if you want to be absolutely sure, host your stuff yourself.<p>Have a look at the Freedombox, <a href="https://www.freedomboxfoundation.org/" rel="nofollow">https://www.freedomboxfoundation.org/</a>, and ark-OS, <a href="http://ark-os.org/" rel="nofollow">http://ark-os.org/</a>. Teach them about open source communication platforms and protocols such as XMPP (Jabber). You don't have to teach them how to set this stuff up, that would also require a working knowledge of Linux, but make them aware. Linux itself wouldn't be a bad thing to mention too.<p>Most importantly though, don't be an idiot. Don't share things on the internet you deem private or not for public consumption or when you do chose to do so, make sure others can't reade it.
Remind them that the Internet is forever, anything that reaches somebody else's computer screen can be assumed to be potentially public knowledge.
I think that beyond the obvious skills (encrypting everything, using HTTPS and TOR where possible) you need to instill in them a healthy sense of paranoia. If they think the government is reading their Facebook chat messages they're sure as hell not going to use it.
Teach them how to use PGP/GPG, S/MIME, VPNs, never to use "free" email services, never post anything identifying on any social networking site, don't use cloud file services without encrypting files first/etc.<p>Thats a good start anyways.
I'd just like to point out that the issues here are not clear cut. Teaching students to hide their activities from the authorities also enables them to hide their activities from parents and schools. I have greatest scope to teach what I like between the ages of 11-14. Are children this young able to responsibly use the skills I might provide them in masking their identities online and protecting their data?