Questions: Digital Identity Management

Question 1

You use the username 'griffindev' for your professional GitHub, your gaming forum, and a political discussion board. What is the primary risk of this choice?

• A. Your accounts are more vulnerable to being hacked because the same username is easier to guess
• B. Anyone can easily link your professional identity to your gaming activity and political opinions, collapsing context separation
• C. Platform terms of service typically prohibit using the same username across multiple sites
• D. Your email address becomes exposed because the username can be used to look up registration records

Answer: (B)

Username consistency across platforms enables cross-linking. An employer who finds 'griffindev' on GitHub will also find the gaming forum posts and political discussion board under the same name, collapsing the separation between professional, personal, and private spheres. The security risk of being hacked is a separate concern not primarily caused by username reuse. The risk being described here is identity aggregation — the ability to build a composite profile by linking accounts.

Question 2

You delete an embarrassing social media post. Which statement most accurately describes what happened to that content?

• A. It is permanently removed from the internet
• B. It is removed from the platform's public feed but retained in their servers for 30 days
• C. It is removed from the platform but may persist in screenshots, cached versions, and web archives
• D. It is removed if no one had shared or screenshotted it before the deletion

Answer: (C)

Deleting a post removes it from the platform's public display, but it does not erase it from the internet. Screenshots can be taken at any time before deletion. Search engines and archiving services (like the Wayback Machine) may have cached or archived the content independently. Other users may have shared, quoted, or reposted it. The key misconception is treating 'deleted from the platform' as equivalent to 'gone from the internet' — these are very different things.

Question 3

'I have very little to hide' is a valid reason not to manage your digital identity.

• T. True
• F. False

Answer: False

Digital identity management is not about concealing wrongdoing. It is about controlling which version of yourself is presented in different professional and personal contexts. Even someone with nothing to hide benefits from ensuring professional contacts see professional content, not unrelated personal opinions or gaming activity. The 'nothing to hide' framing conflates privacy with secrecy, when the actual concern is context-appropriate self-presentation and the ability to participate differently in different social spheres.

Question 4

Deleting unused online accounts reduces your exposure to data breaches even if those accounts have strong privacy settings.

• T. True
• F. False

Answer: True

Privacy settings control what strangers can see through the platform's interface, but they do not protect your data if the platform itself is breached. An unused account on a forgotten platform still contains whatever personal information you provided when you signed up — email address, name, possibly a password you reuse elsewhere. When that platform suffers a breach, that information is exposed regardless of your privacy settings. Deletion removes the data from that exposure surface entirely.

Question 5

Why is using a pseudonym not sufficient to guarantee anonymity online? What specific behaviors undermine a pseudonym's protective function?

Model answer: A pseudonym fails when it becomes linkable to your real identity through other signals. Three common failure modes: (1) reusing the same pseudonym across platforms — anyone who finds it in one place can find it in others and build a composite profile; (2) sharing identifying details under the pseudonym — location, profession, distinctive life events, or personal stories that match your real identity; (3) consistent IP address or device fingerprint — technical metadata can link accounts even when usernames differ. Anonymity requires consistent separation of all identifying signals, not just the name.

This is the key practical lesson: a pseudonym is only one layer of identity, and identity can be reconstructed from many layers simultaneously. Security researchers call this re-identification: even without a name, a combination of attributes (neighborhood, employer, writing style, timeline of events) can uniquely identify a person. A pseudonym that shares any of these signals across contexts provides much weaker protection than users typically assume — and the more you use a pseudonym, the more data accumulates for potential re-identification.