Sharing Secrets

In digital environments, users often encounter quizzes or seemingly harmless activities that, on the surface, look entertaining, however, their purpose is much more sinister.

Social engineers will use these activities to entice users into revealing personal information they wouldn’t usually share.

Here is an example of a current (2018) quiz popular on social media:

“What’s your royal name?

Title: Lord or Lady

First Name: Grandparent’s Name

Surname: Your pet’s first name

Of: Your street name”

I might be Lady Eunice Rover of Dogwood Place

It seems harmless, however, at least three pieces of information you may share could be used as an answer to popular security questions that a website may ask you when resetting your password. You have potentially given social engineers exactly what they need to hack your media accounts or even your bank account. 

Teachers can share this or a similar scenario to students by either reading it to students to facilitate discussion or by providing printed copies all allowing students to discuss in small groups prior to revealing the threats associated with providing this type of personal information. 

Students will research popular security questions used by web pages to help keep your accounts secure. Teachers may choose to direct students to a set of self-selected websites or allow students to research phrases such as "common security questions". Students will compile a list then create an artifact of your (or their) choice to share data that should never be shared online. This can be in the form of a poster, brochure, jingle, PSA, presentation, etc. You will be surprised how many people have no idea that access to this information can be so harmful.