F30 · Topic 5.6
Privacy and safe computing decisions
1. Predict first
A password is stolen through a fake email page. Which most directly reduces a password-only login risk: MFA or merely encrypting stored route history? Explain.
Change it · step through · explain
Change an input, predict what will happen, then advance one step. Read why the state changes, reset and experiment. This fixed teaching model does not save progress or award XP.
Ready · Make a prediction
- Input 1phishingWaiting
- Input 2mfaWaiting
Ready to experiment
Why: Predict the first change, then advance one step.
Try this: Keep the threat fixed and compare safeguards. Which mechanism directly addresses it?
2. Build your procedure
For phishing, lost device, interception and unnecessary data retention, choose a relevant safeguard and write a remaining-risk sentence. Include a data-minimisation decision for the app.
Use AP CSP pseudocode, a language you know, or precise plain language. Your code is not executed here. Use the classroom assignment to save your response.
3. Check boundaries
| Input | Expected | Why this case |
|---|---|---|
| phishing; mfa | Mitigates stolen-password-only login; factor/session theft remains | Match the protection mechanism to the threat. |
| interception; transport-encryption | Protects content in transit; endpoints remain in scope | Encryption has a defined boundary. |
| data-leak; minimise | Reduces exposed unnecessary data; does not eliminate all risk | Less collection can reduce consequences. |
4. Explain and reflect
Why can removing a name column fail to anonymise a precise location history?
Model limits: Closed fictional threat/safeguard scenarios, not a live security audit or a request for credentials, locations or personal data.