What does shoulder surfing involve?

Shoulder surfing involves an unauthorized person observing a legitimate user to gain access to sensitive information, such as passwords or personal identification numbers. This technique typically occurs in public settings where the unauthorized individual can easily see what the user is entering on their device or what is displayed on their screen. The act of watching over someone's shoulder highlights the vulnerability of users in public spaces, emphasizing the importance of being aware of one's surroundings and taking precautions to protect sensitive information.

The other options, while related to security and privacy, do not accurately define shoulder surfing. Using secure passwords is a method to enhance security but does not directly relate to the act of observation. Accessing data from unsecured networks refers to a different security risk involving data breaches rather than covert observation. Reading aloud sensitive information does not match the nature of shoulder surfing, which relies on visual observation rather than auditory eavesdropping.