Find Your Digital Footprint

▶ Watch (6:38)

Attendees searched themselves using sites like data brokers and Google dorking. Jacquot added filetype:pdf to find documents from data breaches. One audience member found a GenAI image tagged to their name that was not real. The goal: know how much of you is public before you try to remove it. Jacquot recommended setting up periodic search queries for family members too.

Obfuscate and Shrink Your Footprint

▶ Watch (12:04)

After mapping the footprint, Jacquot explained how to lose yourself. Techniques: request removal from people-finder sites, then ask search engines to de-index the expired URLs. Self-publish false information – a fake address, a blog with wrong details – to add noise. Canary tokens (free at canarytokens.org) alert you when someone searches or clicks data linked to you. Jacquot recommended the book “Extreme Privacy” for step-by-step methods.

Threat Model a Conference

▶ Watch (20:27)

Jacquot asked attendees to threat model the conference they were sitting in. She provided a risk matrix with impact versus likelihood. Example scenario: someone attends a con, lists threats (badge visible, QR code shared), ranks them, and decides mitigations. She suggested using a quantitative risk rating table from OWASP. The key: iterate – re-examine decisions after each event.

Q&A

What steps should someone take for privacy during community activism? Leave all digital devices at home; use a Meshtastic device (under $100, no name association) for encrypted communication. ▶ 25:31

What is the advantage of an LLC over a trust for property privacy? Both work; the key is removing your name from public record. Ensure the entity is far enough removed from your identity. ▶ 27:25

Does having less data flag you and cause more suspicion? Possible, especially at border crossings, but Jacquot had no data to confirm. ▶ 28:21

Are there companies that help with data removal? Yes, several services automate removal from data brokers and people finders. ▶ 29:08

Notable Quotes

All human beings have three lives: public, private, and secret Meghan “CarpeDiemT3ch” Jacquot · ▶ 04:14

it’s totally safe to just search yourself Meghan “CarpeDiemT3ch” Jacquot · ▶ 07:33

Key Takeaways

  • Map your digital footprint first with free OSINT tools.
  • Obfuscate by removing data, adding disinformation, and using canary tokens.
  • Threat model every conference – rank risks and iterate decisions.

About the Speaker(s)

Meghan Jacquot is a Cybersecurity Engineer focusing on offensive security, risk, and resilience. She volunteers with DEF CON as a SOC GOON, Diana Initiative, and OWASP. She mentors new speakers and leads the DC Book Club.