Security for Humans: Privacy and Coercion Resistant Design
summary
Citizen Lab and First Look Media research lists concrete compromises: commercial spyware FinFisher and Hacking Team implants including a mobile spy call microphone, Blue Coat filtering appliances found in Syria and Iran, a network injector rack (~$1M) that grafts implants into downloads, and the finding that 21 of 25 top news organizations face state-sponsored targeting. Reports publish hashes, domains and code snippets, trace the Belgacom compromise by the Five Eyes, and frame a taxonomy (Eve/Mallory/human ops) to design systems for legal and extralegal coercion.
AI-written summary · about
chapters (6)
- 0:00Start
- 4:57Corrosion Resistant Design
- 32:56Threat Modeling
- 35:50The Network Injector
- 39:08You Actually Care a Lot about the Stability of Your Code Right like Implants Generally Hook in a Very Low Level in the Operating System You Need To Not Be Crashing and Blue Screening Stuff All the Time Right like You Know if People People Start Getting You Know Core Dumps and Blue Screens and that Sort of Thing Then this Isn't Very Good and in Fact as I Said before if a Target Is Interesting It's Likely To Be Targeted by More than One People So Maybe You Want Your Back Door To Be So Stable that It Has To Operate with the Kernel Code of the Russians at the Same Time Let's Also Been Maliciously Inserted into Running Kernel of this Machine So this Is Actually a Really Difficult Problem When You Think about It
- 57:19They Said Look this Skype Was this Encrypted Peer-to-Peer Protocol no Way We Wouldn't Know How To Tap this if We Tried There Was an Internal Nsa Project Called Project Chess Basically 24 Scape To Be Redesigned in Order To Make It Tap a Ball of Which of Course since Has Been Bought by Microsoft That Is Actually Now Very Much So because all of the Actual Servers That Control It It's No Longer Truly Peer-to-Peer So All the Communication Goes through Microsoft Servers any Data Is Interesting I Love this One World of Spy Craft so the Nsa and Cia Spied an Online Games the Gchq Which as You Know Britain's Nsa Has a Vigorous Effort To Exploit Game and Virtual Environments and Produce Exploitation Modules an Xbox Live in World of Warcraft
related talks
01h 23mRound-table, Government hacking in different national contexts and strategies ...
46mCan Cyber Mercenaries and Human...
32mUsing Geopolitical Conflicts for Threat Hunting
58mSocial Engineering: Hacking Humans
56mCybersecurity & Privacy From The Global Lens
01h 15mSurveillance And Criminal Law.
42mPrivacy, Crime, National Security, Human Rights & You in the Middle
55mSocial Engineering Overview-How To Prevent Your Co. from Getting Hacked