GCSE Computer Science - Topic 5

Environmental impact of digital device manufacture

Extraction of non-renewable raw materials (copper, palladium) and highly toxic elements (arsenic), leading to landscape scarring, habitat destruction, and water pollution.

Environmental hazards of e-waste in landfills

Leaching of toxic substances (lead, mercury, cobalt) into soil and water supplies, causing environmental contamination, fires, and health issues for nearby communities.

Benefits of responsible e-waste recycling

Prevents chemical leakage and landfill fires, enables the recovery of valuable scarce metals, reduces the demand for new mining, and allows plastic casings to be reused.

Planned obsolescence

A design policy of producing consumer goods that rapidly become obsolete or unusable, forcing replacements through frequent design changes, stopping spare parts, or using non-durable materials.

Causes of short replacement cycles for digital devices

Embedded batteries, glued/soldered components that hinder repair, expensive spare parts, limited software/security update lifespan, and consumer fashion trends.

Methods to reduce personal digital device energy consumption

Lowering screen brightness, enabling auto-sleep mode, switching off unused wireless functions (Wi-Fi, Bluetooth, GPS), closing background apps, and disconnecting idle peripherals.

Positive environmental applications of digital technology

Intelligent traffic management systems that reduce vehicle idling, sensor-driven smart lighting that turns off when unneeded, and environmental monitoring for conservation and anti-poaching.

Digital footprint definition and impact

The trail of personal data left behind when using the internet; enables user experience personalisation and convenience, but risks privacy invasion, targeted discrimination, and civil liberty concerns.

Principles of the Data Protection Act 2018 (DPA)

Requires personal data processing to be: 1) Lawful, fair & transparent, 2) Purpose limited, 3) Data minimised, 4) Accurate, 5) Storage limited, 6) Secure, 7) Accountable.

Data subject rights under DPA 2018

Rights to be informed about data collection, access held data, correct inaccuracies, erase data, restrict or object to processing, reuse data, and complain to the Information Commissioner (ICO).

Offences under the Computer Misuse Act 1990

1) Unauthorised access to computer material. 2) Unauthorised access with intent to commit further offences. 3) Unauthorised acts with intent to impair the operation of a computer or damage/destroy data.

Privacy and Electronic Communications Regulations 2003 (PECR)

Legislation governing electronic marketing, cookies, and privacy, requiring websites to inform users about data collection via cookies and obtain their explicit consent.

Cookie definition and primary function

A small text file downloaded onto a user's device by a website to recognise the device, store user preferences, and track browsing session activity.

Narrow AI versus Machine Learning

Narrow AI is built to perform a specific, limited task (e.g., spam filters, facial recognition). Machine learning is a subset of AI where algorithms analyze real-time data to find rules/patterns and improve performance.

Causes of algorithmic bias in AI systems

Occurs when the training dataset used to train the AI is itself biased, or when design flaws in the algorithm exaggerate prejudice, leading to unfair or discriminatory automated decisions.

Parties accountable for AI errors and failures

Algorithm creators (code logic errors), training data suppliers (biased or incomplete datasets), or system operators/users (failing to exercise judgment or overriding safety alerts).

Copyright protection scope and duration

Automatically protects the original expression of an idea (source code, books, images, music) without registration or fee; grants exclusive distribution rights for 70 years after the creator's death.

Patent protection scope and conditions

Protects new inventions and technical functionality; requires formal application demonstrating the invention is novel and unique; gives exclusive rights to make/sell the invention for 20 years.

Open source software versus proprietary software

Open source software includes a license allowing anyone to view, modify, and redistribute the source code. Proprietary software is owned by a developer/company; source code is compiled and protected by law.

Malware definitions: Virus, Worm, and Trojan

Virus: Inserts into another program and runs when executed. Worm: Self-replicating program that spreads across networks without human action. Trojan: Disguises as legitimate software to open a backdoor.

Malware definitions: Ransomware and Keylogger

Ransomware: Encrypts files on a hard drive and demands payment for the decryption key. Keylogger: Records keystrokes to extract sensitive credentials, passwords, and personal details.

Technical vulnerabilities in digital systems

Unpatched software flaws, out-of-date anti-malware signatures, open network ports exposed to port scanning, default administrator passwords, and unconfigured hardware security holes.

Denial of Service (DoS) attack and botnets

An attack that floods a server or network with excessive traffic to crash it. Distributed DoS (DDoS) uses an Internet of Things (IoT) botnet (compromised webcams, smart devices) to flood the target.

Social engineering techniques: Phishing and Pretexting

Phishing: Mass emails sent from fake reputable sources with links to fraudulent credential-harvesting sites. Pretexting: Creating a fake emergency scenario to panic victims into revealing sensitive data.

Social engineering techniques: Baiting, Quid Pro Quo, and Shoulder Surfing

Baiting: Free software downloads or left USB drives containing malware. Quid Pro Quo: Offering a service/upgrade in exchange for login details. Shoulder Surfing: Directly watching someone type PINs/passwords.

Symmetric encryption versus Asymmetric encryption

Symmetric encryption uses a single shared secret key for both encryption and decryption. Asymmetric encryption uses a public key to encrypt data and a separate private key to decrypt data.

Firewall function in network security

Hardware or software that inspects incoming and outgoing network traffic against predefined security rules (rulesets) and blocks unauthorized or suspicious traffic.

Anti-malware software operation

Scans system files against a database of known malware signatures, identifies suspicious malicious code, and quarantines or removes infected files to prevent execution.

RAID and backup recovery procedures

RAID (Redundant Array of Independent Disks) mirrors data across multiple hard drives for real-time fault tolerance. Backups store duplicate data offsite to allow recovery if original files are lost or damaged.

Acceptable Use Policy (AUP)

A set of explicit rules and guidelines defined by an organization that users must agree to follow when accessing network infrastructure, devices, and digital services.