We talked and demoed stuff for about 2.5 hours:
Byron did some phenomenal demoing of Qubes OS especially showing off how all of the VMs interact together, and we did some testing with quarantining USBs -> https://www.qubes-os.org/
Justin and Jay from Crash were nice enough to demonstrate and confirm that EXIF data especially geolocation is stripped from photos taken from within Signal (it doesn’t work if you take a photo with the normal camera and send it with signal)
We had some rambling conversations about FB and GDPR (https://en.wikipedia.org/wiki/General_Data_Protection_Regulation), what VPNs block (ISPs sniffing) and data expiration / retention standards (we need more data retention controls and explicit times up front from data controllers!) https://www.sidley.com/-/media/publications/cslp-september-2016-1516.pdf
Some rambling conversations about data forensics in images and audio -> https://gizmodo.com/facebook-knows-how-to-track-you-using-the-dust-on-your-1821030620 http://www.bbc.com/news/science-environment-20629671
How to cross the USA border and what you can and can’t say (thanks Lee for the link), go watch this talk! https://media.ccc.de/v/34c3-9086-protecting_your_privacy_at_the_border
Byron had a setup where we could search for our old usernames and account names and see if we had been pwned, similar to https://haveibeenpwned.com/ (turns out I have been!!! [panic])