A hospital's EHR (Electronic Health Records) system is attacked with ransomware. Medical staff can't access patient records. ICU patients need medication adjustments. The attacker demands $5 million. What should the hospital prioritize, and what does this scenario demonstrate about technology's role in critical systems?

Immediately activate paper-based backup procedures (every hospital should have them), isolate infected systems to stop spread, notify law enforcement, contact cybersecurity incident response firm, and evaluate whether backups allow recovery without paying — this demonstrates that digital systems now carry life-or-death consequences Pay the ransom immediately — patient lives are worth $5 million and speed is critical Disconnect all hospital systems from power and restart everything — this removes malware Continue treating patients normally using the infected system — ransomware doesn't affect clinical data

A social media platform's algorithm is amplifying content that triggers outrage, leading to increased political polarization and offline violence. The company says it's 'just showing people what they engage with.' What technology concepts are at play here?

Algorithmic amplification, filter bubbles, engagement optimization, surveillance capitalism, and platform accountability — the algorithm is working as designed but causing societal harm the company profits from This is purely a free speech issue — technology has no responsibility for what people say Only misinformation is the problem — the algorithm itself is neutral The solution is to educate users about filter bubbles — platforms bear no responsibility

You build a free app that becomes popular with 10 million users. You need to generate revenue. An advertising company offers to pay you well to share detailed user data. What considerations should guide your decision?

Your privacy policy (did you promise not to sell data?), user expectations (what did they agree to?), data minimization (should you have collected this much?), consent requirements (GDPR, CCPA), and your own ethical values about turning users into products Just take the money — all apps monetize user data and users implicitly accept this Only sell anonymized data — if names are removed, there are no ethical concerns Check if competitors do this — if they do, it must be acceptable industry practice

Your school wants to install AI-powered cameras that track student attention levels and facial expressions to 'improve learning.' As an informed student, what questions should you ask?

Who owns and can access the data? How long is it retained? Has the AI been validated for accuracy across all student demographics? What happens to students flagged as 'inattentive'? Was student and parent consent obtained? Just accept it — schools have the right to monitor students for educational improvement Only ask if it will work — effectiveness is the only relevant question for educational technology Ask whether the cameras can see out into the hallway — that's the main privacy concern

Which combination of personal security practices provides the strongest protection for a typical person?

Password manager (unique passwords everywhere) + MFA on all important accounts + regular software updates + skepticism about unexpected emails and links + regular offline backups Expensive antivirus software + a VPN + private browsing mode at all times Only using Apple products + avoiding public Wi-Fi + not having social media accounts Changing your password every month + never saving passwords in browsers + using different email addresses for different sites

A news article claims: 'Scientists Prove AI Has Achieved Human-Level Intelligence.' How would a Tech Detective evaluate this claim?

Skeptically: check the actual research (not just the headline), understand what 'human-level intelligence' specifically means in the study, look for independent expert analysis, and consider who benefits from this claim being believed Accept it — scientific studies are always reliable and journalists accurately report them Reject it — AI can never achieve human-level intelligence, so any such claim is false Share it widely — impressive scientific breakthroughs should be celebrated and spread

What does it mean to 'advocate for responsible technology' as a young person?

Choosing privacy-respecting products, holding companies and platforms accountable for harms, supporting organizations working on digital rights, and using your future career — whatever it is — to consider technology's impact on people Only engineers can advocate for responsible technology — it requires deep technical knowledge Advocacy means boycotting all technology companies until they meet your standards Young people don't have influence over technology — wait until you're an adult and in a position of power

Which statement best describes the relationship between technology and society?

Technology and society co-evolve — technology shapes society (enabling new behaviors, creating new risks), and society shapes technology (through laws, norms, markets, and individual choices) Technology is neutral — its impact depends entirely on how individuals choose to use it Technology determines society — once a technology exists, its social impact is inevitable Society fully controls technology — governments and markets always shape it toward good outcomes

Congratulations — you've completed all 10 levels of Tech Detective! What is the spirit of a Tech Detective?

Curiosity + skepticism + evidence + action — asking how things work, questioning claims, finding evidence, and using knowledge to make better decisions and contribute to a more secure and equitable digital world Memorizing all technical terms and security protocols so you can answer any question Trusting no one and assuming all technology is dangerous until proven otherwise Becoming a professional hacker to find and exploit vulnerabilities for companies

What single action can you take today to immediately improve your cybersecurity?

Enable multi-factor authentication on your email account — your email is the master key to all your other accounts (password resets go there) and protecting it has the highest single impact Delete all your social media accounts — they are the biggest cybersecurity risk Install the most expensive antivirus software available Change all your passwords to longer versions of what you already use