detecting and defending against state actor surveillance
Talkat AppSec California 2014 · on Tuesday, 2014-01-28· at 10:30· Track 1, Annenberg Community Beach House, East Pacific Coast Highway·
summary
Claims link the SkyMall leaks to concrete implants and rogue networks and offers tests not theory: use a HackRF software-defined radio to spot RF exfiltration and verify it by unplugging the suspected cable; inspect for a JTAG header implant or added dongles on motherboards; reflash or pull and compare firmware images to detect compromised BIOS or drive firmware; run a Tower Canary–style check for sudden new GSM base stations to catch rogue cell towers.
AI-written summary · about
chapters (15)
- 0:00Detecting & Defending Against State-Actor Surveillance
- 0:26Intro
- 0:41Breakdown
- 1:00Surveillance Skymall leaks
- 1:52Retro Reflectors
- 2:42RF Bug Prevention
- 4:00RF Bug Detection
- 5:23Data Exfiltration
- 7:36Detecting Persistent Compromise Devices
- 8:52Software Exploits
- 9:14BIOS/Firmware/CF Card Hacked?
- 9:55Wifi Devices
- 10:43Cell Phone Bugs
- 13:39Conclusions
- 15:56Further Reading & Sources
related talks
39mHack the Sky: Exploring Satellite Vulnerabilities and Cyber Threats
24mEnhancing Physical Perimeter Defense Using SDR
48mSATCOM Terminals: Hacking by Air, Sea, and Land
44m The Nation State Actor Ate My Homework!
49mWhen Hardware Gets Pwned Mechanics Of Detection, Response And Recovery
44mLTE And IMSI Catchers: Then And Now
44mBreaking the Security of Physical Devices
01h 02mSecurity for Humans: Privacy and Coercion Resistant Design