Le cycle des données | Vincent Dusserre & Stéphane Fondjou | TEDxSaintEtienne

Quick Overview

Stéphane Fondjou (24) and Vincent Dusserre (19), founders of a cybersecurity company, share the story of how they exploited systemic weaknesses in data collection practices, particularly those involving the French employment website France Travail, to prove how easily personal data is compromised, ultimately advocating for increased digital literacy and better data protection practices.

Key Points: Stéphane Fondjou (24) and Vincent Dusserre (19) co-founded a cybersecurity company focused on raising awareness about data leaks and cybersecurity. The speakers recount a specific phishing campaign targeting users of France Travail (the French employment website) by using illegally obtained data. They successfully used data like names, dates of birth, postal codes, and gender to create convincing fake profiles and obtain the victim's professional email address. The phishing attack involved sending a link to a fake loyalty program sign-up page for a supermarket, which mirrored the real site, leading to data capture. The data harvested (including personal and professional emails) was then sold on the dark web, illustrating the real-world value of seemingly innocuous personal information. The presentation emphasizes the need to apply ecological principles, specifically the '3 Rs' (Reduce, Reuse, Recycle), to digital data to minimize our digital footprint and combat data over-collection. The speakers challenge the audience to reflect on how much personal data they willingly surrender, even for minor benefits like loyalty points.

Context: The presentation is given by two young entrepreneurs, Stéphane Fondjou and Vincent Dusserre, at a TEDxSaintEtienne event. They introduce themselves and immediately dive into a real-world anecdote about data vulnerability, using the French public employment service, France Travail, as a case study. Their core message revolves around the concept of digital ecology and the dangers of over-collecting personal data, which, once leaked, can be weaponized for sophisticated cyberattacks like phishing.