Fulfills Step 3 of GSUSA Cadette Cybersecurity Safeguards badge requirements.
Info Needed for badge requirements: Metadata is information about a file, such as when a photo was taken, where it was taken, or the type of camera used. It’s like a digital “tag” that describes the file. It makes it easier to organize and find files or helps photographers protect their work with copyright information. Hackers can use metadata, like the time, location, or device information from files and photos, to harm users. For example, metadata in a photo might reveal where it was taken, allowing hackers to track your location. They can also use this information to figure out what device you’re using and look for ways to attack it. How to Protect Metadata? Turn off Location Services on your phone to avoid sharing where photos were taken. Remove personal information from file properties before sharing files. Be mindful of what files you share and who you share them with.
Items Needed
- VTK Sample Photos with Metadata by GSUSA (one image with “metadata” on back per scout)
- Envelope (one per scout)
- Pen or pencil (one per scout)
Instructions
- Each scout selects a mock photo with metadata and places it inside an envelope.
- On the envelope, write the receiver (i.e. the scout sitting to their right) and include the date and time sent on the back of the envelope.
- Scouts give it to the name of the receiver. Each scout should have someone else’s mock photo.
- Scouts examine the metadata on the back of the photo and the delivery details on the envelope. Discuss what a hacker might learn about the sender from the metadata.
Leader’s Correct Answer: Scouts should conclude that metadata, such as location, time, and device details, can reveal personal information about the sender. Hackers might use this information to learn where the photo was taken, identify the sender’s habits, or determine vulnerabilities based on the device used. This emphasizes the importance of limiting metadata exposure by disabling location services or removing metadata before sharing files.