Privacy summary questions¶

The questions are randomised per student, and you will receive only correct/incorrect feedback for these questions. In each question in Problem 1, there is exactly one correct option.

In Problem 2, each student will receive at least one correct option, usually several. The system gives feedback incorrect for partially correct answers, but Problem 2 is accepted when the score is 12 or more and the points are shown with a yellow background. Points begin to accumulate only when more than half of the choices in the task are correct. The score does not directly indicate whether an individual choice is correct or not.

Question 1

Contextual integrity means that

the same information always has the same data protection requirements.

private information is handled only by individuals who are authorised to do so.

the same information can be public or private depending on the context.

private information remains in its original form.

Question 2

Loss of privacy

is harmful only from an individual’s perspective.

can lead to the erosion of the foundations of a democratic society.

is not a threat as long as data is protected and kept confidential.

is primarily a technical problem.

Question 3

The use of device metadata for optimising internet services is based on the idea that

data for optimisation is obtained from browsing habits.

by combining, for example, the device, browser version, and plugins, a cookie is created that identifies the user across services.

the combination of device characteristics is often unique for each internet user.

cookies deliver device metadata to services.

Question 4

Usability is related to privacy settings because

adjusting privacy settings to suit the user is usually easy.

it gives the user control over the use of their data in the service.

it ensures that the user interprets privacy policies correctly.

users easily make mistakes when adjusting settings and unintentionally reveal private information.

Question 5

A zero-knowledge proof proves a claim such that

no information is revealed.

the only information revealed is the claim itself.

the only information revealed indicates whether the claim is true or not.

both the prover and the verifier remain secret.

Question 6

The systematic evaluation of a privacy technology as a whole aims to

assess the probability of attacks with certain inputs.

measure the attacker’s inference capability using a probability distribution.

use machine learning to calculate what an attacker could infer.

assess risks associated with the technology.

Question 7

Which of the following statements holds?

Even a standard electronic voting protocol removes the need for trust.

Moving to electronic voting would increase trust in the election result, because more people would vote.

Trust in the result of an electronic election can be undermined quite easily, for example by mere rumours.

Trust in electronic elections depends on how reliable the currently very popular ”Election compass” web sites are.

Question 8

How does trust relate to electronic voting as it is possible in theory?

Trust would lose its traditional significance in elections. Only the candidates’ promises would need to be trusted.

Voting would become significantly easier, and representatives could be replaced even mid-term (i.e. there would be no need to trust promises either).

The validity of election results could be invalidated in even advanced protocols based on mere rumours.

There are electronic voting protocols in which ballot secrecy is preserved even if the election authority is not trustworthy.

Question 9

The removal of identifying information is related to

anonymisation

encryption

replication

centralisation

Select the correct statements. You may choose one or more options.

Question 1

Distributing trust is beneficial for privacy, because the risk of all information being disclosed decreases and the ability of trusted parties to misuse information is reduced.

Technical systems could easily be made to support privacy if there were sufficient will to do so.

The use of data obfuscation for protecting privacy is based on limiting the amount of information and linkability.

Privacy is not really a problem for the service provider, because the user can always choose not to use the system.

The threat of revealing ballot secrecy is the main reason why electronic voting has not been implemented.

There are methods to ensure that service providers must also comply with the user’s privacy settings.

The risk of information disclosure decreases when the user has the ability to control the use of their data.

If one has nothing to hide, there is no need to worry about privacy in electronic services.

It is not possible to make privacy-compromising inferences about a user from metadata.

A lax attitude towards privacy protection enables effective opinion influence and manipulation of people.

The Tor network protects the user’s privacy.