Metadata – Encrypted Messages

Info Needed for Cadette badge requirements: Metadata is information about a file, such as when a photo was taken, where it was taken, or the type of camera used. It’s like a digital “tag” that describes the file. It makes it easier to organize and find files or helps photographers protect their work with copyright information. Hackers can use metadata, like the time, location, or device information from files and photos, to harm users. For example, metadata in a photo might reveal where it was taken, allowing hackers to track your location. They can also use this information to figure out what device you’re using and look for ways to attack it. How to Protect Metadata? Turn off Location Services on your phone to avoid sharing where photos were taken. Remove personal information from file properties before sharing files. Be mindful of what files you share and who you share them with.

Info Needed for the Senior badge requirements: Codes help share information quickly and discreetly, like those used by law enforcement or healthcare. However, they can be risky if easy to guess or overheard. Apps solve this with encryption, which turns messages into unreadable codes only accessible to authorized people. This keeps conversations safe while remaining simple for users, balancing security with usability. Law enforcement and healthcare use them to communicate important messages without causing alarm. Simple ones like Pig Latin aren’t effective because many people understand them. When creating a code, it should be easy to use but hard to crack. Cybersecurity experts follow the same idea when designing programs that are simple for users but protected from hackers.

Items Needed

  • VTK Cryptogram Key by GSUSA (one strip per scout)
  • Envelope (one per scout)
  • Pen or pencil (one per scout)

Instructions

  1. Each scout writes a secret message using the Cryptogram Key to encrypt it. Place the encrypted message inside an envelope and seal it.
  2. On the front of the envelope, write the name of the scout to their right as the recipient. Write the time the message is sent on the back of the envelope.
  3. Scouts give the envelopes to the assigned recipient.
  4. Using the Cryptogram Key, each scout decodes the message they receive.
  5. Scouts discuss whether the metadata (name of sender and time sent) provides clues about the sender.

Leader’s Correct Answer: Scouts should conclude that metadata, such as sender names or timestamps, is not encrypted and can be accessed by others. While this metadata itself doesn’t reveal the encrypted message, it gives clues that could allow someone to track communication patterns or sender identity. They should also understand that the encryption (or codes) made it harder to determine the actual information in the message, adding an extra layer of protection to the communication.