Transcript of The Accidental Abyss Kelly FitzGerald Manager, Product Security Cutting Edge 2012-13, Mountain View...
- Slide 1
- The Accidental Abyss Kelly FitzGerald Manager, Product Security
Cutting Edge 2012-13, Mountain View 111
- Slide 2
- Begin At The Beginning Kelly FitzGerald @Symantec Since 2003
Worked on: Consumer, Enterprise and Product Security Spend a lot of
time at hacker conferences and hacker drinkups Manage internal pen
test personal Facilitator for the Cryptography Review Board Serious
Nerd Cutting Edge 2012-13 2
- Slide 3
- How The Idea For The Talk Was Born Cutting Edge 2012-13 3
- Slide 4
- Smart, Selfless, Lady Cutting Edge 2012-13 4
- Slide 5
- 5 LIAR
- Slide 6
- Too Cool For School Cutting Edge 2012-13 6
- Slide 7
- 7 Still Lying
- Slide 8
- Cutting Edge 2012-13 8
- Slide 9
- Bob Smith: Cheap Guy Cutting Edge 2012-13 9
- Slide 10
- Why Is This Guy Cheap Cutting Edge 2012-13 10
- Slide 11
- A Smart Man Keeps a Secret Budget Cutting Edge 2012-13 11
- Slide 12
- All Your Base Belong to Me Cutting Edge 2012-13 12 Social
Security #s Bank Account Numbers Employee ID
- Slide 13
- Better Learning Through Television Cutting Edge 2012-13 13
College Preparatory School Graduated Last Class as of 2011
- Slide 14
- Weve got his Social Security Number.. What can we do illegally?
What information do we learn legally? AAA-GG-SSSS Area you are in
when you filed it All 3 Social Security Numbers are allotted to
California. When do you get it? Born Before 1986, you got it around
14 Born Between 1986-1990 you get it by 5 Post 1990 you get it at
birth Cutting Edge 2012-13 14
- Slide 15
- Oh Hey, Isnt Your Social 549-Uhhhhh.. Silly Me!
545-XX-XXXX545-XX-XXXX - California 546-XX-XXXX - California
602-XX-XXXX - California 603-XX-XXXX - California 604-XX-XXXX -
California 605-XX-XXXX - California 606-XX-XXXX - California
607-XX-XXXX - California 608-XX-XXXX - California 609-XX-XXXX -
California 610-XX-XXXX - California 611-XX-XXXX - California
612-XX-XXXX - California 613-XX-XXXX - California 614-XX-XXXX -
California 615-XX-XXXX - California 616-XX-XXXX - California
617-XX-XXXX - California 618-XX-XXXX - California 619-XX-XXXX -
California 620-XX-XXXX - California 621-XX-XXXX - California
622-XX-XXXX - California 623-XX-XXXX - California 624-XX-XXXX -
California 625-XX-XXXX - California 626-XX-XXXX - California
546-XX-XXXX 602-XX-XXXX 603-XX-XXXX 604-XX-XXXX 605-XX-XXXX
606-XX-XXXX 607-XX-XXXX 608-XX-XXXX 609-XX-XXXX 610-XX-XXXX
611-XX-XXXX 612-XX-XXXX 613-XX-XXXX 614-XX-XXXX 615-XX-XXXX
616-XX-XXXX 617-XX-XXXX 618-XX-XXXX 619-XX-XXXX 620-XX-XXXX
621-XX-XXXX 622-XX-XXXX 623-XX-XXXX 624-XX-XXXX 625-XX-XXXX
626-XX-XXXX Cutting Edge 2012-13 15 547-XX-XXXX547-XX-XXXX -
California 548-XX-XXXX - California 549-XX-XXXX - California
550-XX-XXXX - California 551-XX-XXXX - California 552-XX-XXXX -
California 553-XX-XXXX - California 554-XX-XXXX - California
555-XX-XXXX - California 556-XX-XXXX - California 557-XX-XXXX -
California 558-XX-XXXX - California 559-XX-XXXX - California
560-XX-XXXX - California 561-XX-XXXX - California 562-XX-XXXX -
California 563-XX-XXXX - California 564-XX-XXXX - California
565-XX-XXXX - California 566-XX-XXXX - California 567-XX-XXXX -
California 568-XX-XXXX - California 569-XX-XXXX - California
570-XX-XXXX - California 571-XX-XXXX - California 572-XX-XXXX -
California 573-XX-XXXX - California 548-XX-XXXX 549-XX-XXXX
550-XX-XXXX 551-XX-XXXX 552-XX-XXXX 553-XX-XXXX 554-XX-XXXX
555-XX-XXXX 556-XX-XXXX 557-XX-XXXX 558-XX-XXXX 559-XX-XXXX
560-XX-XXXX 561-XX-XXXX 562-XX-XXXX 563-XX-XXXX 564-XX-XXXX
565-XX-XXXX 566-XX-XXXX 567-XX-XXXX 568-XX-XXXX 569-XX-XXXX
570-XX-XXXX 571-XX-XXXX 572-XX-XXXX 573-XX-XXXX
- Slide 16
- What Do We Know At 14 Bob was living in CA(since it appears he
is born before 1986) Both of his children were living in CA when
they got their cards They still live in Oakland, California(as per
the show) He ran the School Hes frugal Cutting Edge 2012-13 16
- Slide 17
- Spokeo, Spokeo Cutting Edge 2012-13 17
- Slide 18
- What Do Credit Cards and Car Salesman Think? Cutting Edge
2012-13 18
- Slide 19
- Reconaissance Get the email, Get the gold. Single Signon helps
my recond If you can get their main non-work email you can probably
puzzle out all of their other accounts(facebook, amazon) Spokeo
revealed Bobs as Bob7@gmail.comBob7@gmail.com On the internet he is
Bob7 everywhere Cutting Edge 2012-13 19
- Slide 20
- Cutting Edge 2012-13 20 Pandora: What kind of stuff is he
into?
- Slide 21
- Cutting Edge 2012-13 21
- Slide 22
- Bob Smith Major PII leak through a TV Show I just used boring
info Name, Job, Location I constructed a detailed dossier of: What
music he likes Where he lives His Facebook page His preferences in
general Cutting Edge 2012-13 22
- Slide 23
- Masterclass Cutting Edge 2012-13 23
- Slide 24
- Where to Use These Skills? Cutting Edge 2012-13 24
- Slide 25
- Goal 1: Get Primary Social Email/Handle What you usually know
about your target Name Rough Idea of Age Rough Idea of Location
Cutting Edge 2012-13 25
- Slide 26
- Go Facebook Yourself Cutting Edge 2012-13 26
- Slide 27
- Youre Timeline Summary Cutting Edge 2012-13 27
- Slide 28
- Bing.com/social Cutting Edge 2012-13 28
- Slide 29
- Cutting Edge 2012-13 29
- Slide 30
- OpenStatusSearch.com Cutting Edge 2012-13 30
- Slide 31
- Wolfram Alpha Self-Analytics: WolframAlpha.com Cutting Edge
2012-13 31
- Slide 32
- Information is Power FB chooses which posts to show you in your
feed based on a variety of factors. Someone commenting regularly
will stay in your feed Someone gazing at your page regularly and
expanding your posts also seems to get them to have increased play
in your feed. Anybody notice anything else? Cutting Edge 2012-13
32
- Slide 33
- Tips for Looking at Strangers Hunt for non-friends to your
hearts content. They likely will never know. Profile pictures are
generally unlocked. Pictures frequently unlocked. Friends lists are
also frequently unlocked Family Spouse Friends Look at the
backgrounds in photos. Surroundings, books, reflections in glass,
computer monitors. Cutting Edge 2012-13 33
- Slide 34
- Date Smarter Cutting Edge 2012-13 34
- Slide 35
- Oh Jeff! Change Up The Headshots Cutting Edge 2012-13 35
- Slide 36
- A Man With Some Fame! Cutting Edge 2012-13 36
- Slide 37
- TinEye and Google Googles Cutting Edge 2012-13 37
- Slide 38
- Google Googles Cutting Edge 2012-13 38
- Slide 39
- Ohhh Watch Out!! TrueDater.com Cutting Edge 2012-13 39
- Slide 40
- DefinatelyNotKelly Cutting Edge 2012-13 40
- Slide 41
- Cutting Edge 2012-13 41
- Slide 42
- LinkedIn: Interesting, But Not Very Anonymous Most people dont
pay LinkedIn memberships($20-$75/month) If you are logged out you
can only look at 1-2 profiles before LinkedIn cuts you off. As an
anonymous unpaid member, you arent so anonymous. You arent able to
see who looked at your profile You Show up as Someone Cutting Edge
2012-13 42
- Slide 43
- Targeted Gifts and Great Conversations Cutting Edge 2012-13
43
- Slide 44
- To Thy Own Frenemy Be True Cutting Edge 2012-13 44
- Slide 45
- Not So Friendly Skies Cutting Edge 2012-13 45
- Slide 46
- Flying is Private, Right? Cutting Edge 2012-13 46
- Slide 47
- United Upgrade List Cutting Edge 2012-13 47
- Slide 48
- I Can See You: Planefinder Cutting Edge 2012-13 48
- Slide 49
- The Dark Side: Not illegal, but it might not feel right.
Cutting Edge 2012-13 49
- Slide 50
- Zillow; Trulia; Spokeo; Blockshopper Cutting Edge 2012-13
50
- Slide 51
- Mugshots: Book Em Dano Cutting Edge 2012-13 51
- Slide 52
- Finding Criminals Can Be Tough Cutting Edge 2012-13 52
- Slide 53
- San Bernardino Criminal Search Cutting Edge 2012-13 53
- Slide 54
- Megans Law: Offender Lite App Cutting Edge 2012-13 54
- Slide 55
- SearchDiggity: Free Tool From Stach and Liu Cutting Edge
2012-13 55
- Slide 56
- Should All This Information Be Accessible Cutting Edge 2012-13
56 Should what you do at 16 still be with you at 40? The generation
that is about to graduate grew up with the internet since 4 or 5.
Would you want to justify your purchases and posts from 20 years
ago?
- Slide 57
- What Can I do? Do sensitive things on other accounts Dont use
Oauth for touchy situations Remove yourself from Spokeo
Periodically Google yourself Track old accounts and delete ones
Cutting Edge 2012-13 57
- Slide 58
- Questions ??? Cutting Edge 2012-13 58