1. Detecting & Defending Against State-Actor SurveillanceRobert R @iamlei

2. Intro whoami uid=1(robert)groups=(speaker,advocate,researcher,IVU)@iamlei 3. Breakdown I have only 20 minutes ... Hardware bugs Software bugs Wifi monitoring Cell phone bugs/monitoring Conclusions 4. Surveillance Skymall leaks 5. Hardware Bugs Retro ReflectorsSURLYSPAWN LOUDAUTO RAGEMASTER TAWDRYYARD 6. Hardware Bugs RF Bug Prevention 7. Hardware Bugs RF Bug Prevention 8. Hardware Bugs RF Bug Detection HackRF or Any Radio Frequency Monitor 9. Hardware Bugs Data Exfiltration COTTONMOUTH I, II, IIIHOWLERMONKEYGINSUFIREWALK 10. Persistent Compromise GODSURGE HEAD/HALLUX WATER SCHOOL/SIERRA/STUCCO MONTANA JETPLOW FEED/GOURMET/SOUFFLE TROUGH 11. Detecting Persistent Compromise Devices 12. Detecting Persistent Compromise Devices 13. Software Exploits SWAP IRATEMONK WISTFULTOLL DEITYBOUNCE 14. BIOS/Firmware/CF Card Hacked?Re-Flash Devices 15. Wifi Devices SPARROWNIGHTSTAND 16. Cell Phone Bugs Base Stations CYCLONE CROSSBEAM, EBSR, ENTOURAGE, NEBULA, TYPHOIntelligence GENESIS, WATERWICH, CANDYGRAM 17. Cell Phone Bugs 18. Conclusions Bugs are detectable Many are based on attacks covered in Hacker consHard evidence is better than Hearsay I want to hear from the first person who finds one!Tin-Foil hats are not stylish 19. Further Reading & Sources Michael Ossmann (ossmann.blogspot.com)Bruce Shneier (www.schneier.com)http://leaksource.files.wordpress.comhttp://PrivacyTechJournal.com Harass me on twitter: @iamlei