INC - Internal Network Communication Instant Messenger für LANs.
Sex, Lies & Instant Messenger v3
-
Upload
alecmuffett -
Category
Technology
-
view
518 -
download
3
description
Transcript of Sex, Lies & Instant Messenger v3
![Page 1: Sex, Lies & Instant Messenger v3](https://reader033.fdocuments.in/reader033/viewer/2022050919/547a5b6ab37959822b8b494f/html5/thumbnails/1.jpg)
sex, lies and instant messenger @alecmuffett
sex, lies, & instant-messenger
@alecmuffettwww.alecmuffett.com
green lane securitywww.greenlanesecurity.com
v3.0
![Page 2: Sex, Lies & Instant Messenger v3](https://reader033.fdocuments.in/reader033/viewer/2022050919/547a5b6ab37959822b8b494f/html5/thumbnails/2.jpg)
sex, lies and instant messenger @alecmuffett
What should come of this?
![Page 3: Sex, Lies & Instant Messenger v3](https://reader033.fdocuments.in/reader033/viewer/2022050919/547a5b6ab37959822b8b494f/html5/thumbnails/3.jpg)
sex, lies and instant messenger @alecmuffett
When using the Webfor private communication...
![Page 4: Sex, Lies & Instant Messenger v3](https://reader033.fdocuments.in/reader033/viewer/2022050919/547a5b6ab37959822b8b494f/html5/thumbnails/4.jpg)
sex, lies and instant messenger @alecmuffett
be aware1) what can go wrong unexpectedly?
![Page 5: Sex, Lies & Instant Messenger v3](https://reader033.fdocuments.in/reader033/viewer/2022050919/547a5b6ab37959822b8b494f/html5/thumbnails/5.jpg)
sex, lies and instant messenger @alecmuffett
be aware2) what risks you protecting against?
![Page 6: Sex, Lies & Instant Messenger v3](https://reader033.fdocuments.in/reader033/viewer/2022050919/547a5b6ab37959822b8b494f/html5/thumbnails/6.jpg)
sex, lies and instant messenger @alecmuffett
be aware3) what must you do/not do?
![Page 7: Sex, Lies & Instant Messenger v3](https://reader033.fdocuments.in/reader033/viewer/2022050919/547a5b6ab37959822b8b494f/html5/thumbnails/7.jpg)
sex, lies and instant messenger @alecmuffett
Goal“Keep control of your data.”
![Page 8: Sex, Lies & Instant Messenger v3](https://reader033.fdocuments.in/reader033/viewer/2022050919/547a5b6ab37959822b8b494f/html5/thumbnails/8.jpg)
sex, lies and instant messenger @alecmuffett
disclaimer (1)Almost all examples appearing in this work
are fictitious. Any resemblance to real events or to real persons, living or dead,
is probably coincidental.
![Page 9: Sex, Lies & Instant Messenger v3](https://reader033.fdocuments.in/reader033/viewer/2022050919/547a5b6ab37959822b8b494f/html5/thumbnails/9.jpg)
sex, lies and instant messenger @alecmuffett
disclaimer (2)Advice given here is necessarily
incomplete; information security is a huge discipline and a full set of risks cannot be
conveyed in 30 minutes.
![Page 10: Sex, Lies & Instant Messenger v3](https://reader033.fdocuments.in/reader033/viewer/2022050919/547a5b6ab37959822b8b494f/html5/thumbnails/10.jpg)
sex, lies and instant messenger @alecmuffett
1) what can go wrong unexpectedly?
![Page 11: Sex, Lies & Instant Messenger v3](https://reader033.fdocuments.in/reader033/viewer/2022050919/547a5b6ab37959822b8b494f/html5/thumbnails/11.jpg)
sex, lies and instant messenger @alecmuffett
passwords!
![Page 12: Sex, Lies & Instant Messenger v3](https://reader033.fdocuments.in/reader033/viewer/2022050919/547a5b6ab37959822b8b494f/html5/thumbnails/12.jpg)
sex, lies and instant messenger @alecmuffett
do not use secrets as passwords!
![Page 13: Sex, Lies & Instant Messenger v3](https://reader033.fdocuments.in/reader033/viewer/2022050919/547a5b6ab37959822b8b494f/html5/thumbnails/13.jpg)
sex, lies and instant messenger @alecmuffett
my history• Crack
• First “smart” password cracker• 1991..96
• http://tinyurl.com/2jnzpy
• CrackLib• password checking library
• 1994..now
![Page 14: Sex, Lies & Instant Messenger v3](https://reader033.fdocuments.in/reader033/viewer/2022050919/547a5b6ab37959822b8b494f/html5/thumbnails/14.jpg)
sex, lies and instant messenger @alecmuffett
issuepasswords are secret, but...
![Page 15: Sex, Lies & Instant Messenger v3](https://reader033.fdocuments.in/reader033/viewer/2022050919/547a5b6ab37959822b8b494f/html5/thumbnails/15.jpg)
sex, lies and instant messenger @alecmuffett
issue...secrets make bad passwords
![Page 16: Sex, Lies & Instant Messenger v3](https://reader033.fdocuments.in/reader033/viewer/2022050919/547a5b6ab37959822b8b494f/html5/thumbnails/16.jpg)
sex, lies and instant messenger @alecmuffett
passwordsguessable
![Page 17: Sex, Lies & Instant Messenger v3](https://reader033.fdocuments.in/reader033/viewer/2022050919/547a5b6ab37959822b8b494f/html5/thumbnails/17.jpg)
sex, lies and instant messenger @alecmuffett
000000 1 1111 11111 111111 11111111 112233 123 123123 123321 1234 12345 123456 1234567 12345678 123456789 123abc 123qwe 1q2w3e 1q2w3e4r 222222 55555 654321 666666 7777 7777777 a aaaaaa abc123 adidas admin amanda andrew angel angel1 angels anthony apple asdf asdfasdf asdfgh ashley asshole austin baby bailey
banana bandit baseball batman benjamin biteme blabla blahblah blessed blessing blink182 bubbles buster canada cassie charlie cheese chelsea chicken chris christ church cocacola compaq computer cookie cool corvette creative dakota dallas daniel danielle david destiny dexter diamond digital dragon eminem
emmanuel enter faith flower foobar football football1 forever forum freedom friend friends fuckoff fuckyou fuckyou1 gateway genesis george ginger god google grace green guitar hahaha hallo hannah happy hardcore harley heaven hello hello1 helpme hockey hope hotdog hunter ilovegod iloveyou iloveyou! iloveyou1 iloveyou2 internet james jasmine jason jasper jennifer jessica jesus jesus1 john john316 jordan jordan23 joseph joshua junior justin killer kitten knight letmein london looking love lovely loving lucky maggie master matrix matthew maverick maxwell
merlin michael michelle mickey microsoft mike monkey mother muffin mustang mylove myspace1 nathan nicole nintendo none nothing onelove online orange pass passw0rd password password1 peace peaches peanut pepper phpbb pokemon poop power praise prayer prince princess purple qazwsx qwert qwerty qwerty1 rachel rainbow red123 richard robert rotimi samantha sammy samuel saved scooby scooter secret shadow shalom silver single slayer smokey snoopy soccer soccer1 sparky spirit startrek starwars stella summer sunshine superman taylor test testing testtest thomas thunder tigger trinity trustno1 victory viper welcome whatever william
winner wisdom zxcvbnm
250 top passwords - http://goo.gl/xPCq
![Page 18: Sex, Lies & Instant Messenger v3](https://reader033.fdocuments.in/reader033/viewer/2022050919/547a5b6ab37959822b8b494f/html5/thumbnails/18.jpg)
sex, lies and instant messenger @alecmuffett
“You’ll never guess my password,it’s in Klingon!”
![Page 19: Sex, Lies & Instant Messenger v3](https://reader033.fdocuments.in/reader033/viewer/2022050919/547a5b6ab37959822b8b494f/html5/thumbnails/19.jpg)
sex, lies and instant messenger @alecmuffett
![Page 20: Sex, Lies & Instant Messenger v3](https://reader033.fdocuments.in/reader033/viewer/2022050919/547a5b6ab37959822b8b494f/html5/thumbnails/20.jpg)
sex, lies and instant messenger @alecmuffett
passwordsbrute-forceable
![Page 21: Sex, Lies & Instant Messenger v3](https://reader033.fdocuments.in/reader033/viewer/2022050919/547a5b6ab37959822b8b494f/html5/thumbnails/21.jpg)
sex, lies and instant messenger @alecmuffett
from: AAAA
![Page 22: Sex, Lies & Instant Messenger v3](https://reader033.fdocuments.in/reader033/viewer/2022050919/547a5b6ab37959822b8b494f/html5/thumbnails/22.jpg)
sex, lies and instant messenger @alecmuffett
to: zzzzzzzzzzzz
![Page 23: Sex, Lies & Instant Messenger v3](https://reader033.fdocuments.in/reader033/viewer/2022050919/547a5b6ab37959822b8b494f/html5/thumbnails/23.jpg)
sex, lies and instant messenger @alecmuffett
via:t5gn9LF$*RJ#
![Page 24: Sex, Lies & Instant Messenger v3](https://reader033.fdocuments.in/reader033/viewer/2022050919/547a5b6ab37959822b8b494f/html5/thumbnails/24.jpg)
sex, lies and instant messenger @alecmuffett
more than 1,000,000 guesses/second!
![Page 25: Sex, Lies & Instant Messenger v3](https://reader033.fdocuments.in/reader033/viewer/2022050919/547a5b6ab37959822b8b494f/html5/thumbnails/25.jpg)
sex, lies and instant messenger @alecmuffett
sometimes more than9 billion guesses/second
![Page 26: Sex, Lies & Instant Messenger v3](https://reader033.fdocuments.in/reader033/viewer/2022050919/547a5b6ab37959822b8b494f/html5/thumbnails/26.jpg)
sex, lies and instant messenger @alecmuffett
google:
imhoff password cracking
hashcat performance
![Page 27: Sex, Lies & Instant Messenger v3](https://reader033.fdocuments.in/reader033/viewer/2022050919/547a5b6ab37959822b8b494f/html5/thumbnails/27.jpg)
sex, lies and instant messenger @alecmuffett
however...
![Page 28: Sex, Lies & Instant Messenger v3](https://reader033.fdocuments.in/reader033/viewer/2022050919/547a5b6ab37959822b8b494f/html5/thumbnails/28.jpg)
sex, lies and instant messenger @alecmuffett
passworda window into your mind?
![Page 29: Sex, Lies & Instant Messenger v3](https://reader033.fdocuments.in/reader033/viewer/2022050919/547a5b6ab37959822b8b494f/html5/thumbnails/29.jpg)
sex, lies and instant messenger @alecmuffett
passwordreveals something about you?
![Page 30: Sex, Lies & Instant Messenger v3](https://reader033.fdocuments.in/reader033/viewer/2022050919/547a5b6ab37959822b8b494f/html5/thumbnails/30.jpg)
sex, lies and instant messenger @alecmuffett
passwordreflects your tastes?
![Page 31: Sex, Lies & Instant Messenger v3](https://reader033.fdocuments.in/reader033/viewer/2022050919/547a5b6ab37959822b8b494f/html5/thumbnails/31.jpg)
sex, lies and instant messenger @alecmuffett
passwordis known to your spouse?
![Page 32: Sex, Lies & Instant Messenger v3](https://reader033.fdocuments.in/reader033/viewer/2022050919/547a5b6ab37959822b8b494f/html5/thumbnails/32.jpg)
sex, lies and instant messenger @alecmuffett
also• reuse = self-incrimination
• ...which is bad...• ...more later...
![Page 33: Sex, Lies & Instant Messenger v3](https://reader033.fdocuments.in/reader033/viewer/2022050919/547a5b6ab37959822b8b494f/html5/thumbnails/33.jpg)
sex, lies and instant messenger @alecmuffett
basic password discipline• use a password management tool
• use 12/more random characters• use different passwords at each website
• never reuse passwords• never share passwords• change annually/more often
• change when someone discovers one!
![Page 34: Sex, Lies & Instant Messenger v3](https://reader033.fdocuments.in/reader033/viewer/2022050919/547a5b6ab37959822b8b494f/html5/thumbnails/34.jpg)
sex, lies and instant messenger @alecmuffett
next: instant messenger!
![Page 35: Sex, Lies & Instant Messenger v3](https://reader033.fdocuments.in/reader033/viewer/2022050919/547a5b6ab37959822b8b494f/html5/thumbnails/35.jpg)
sex, lies and instant messenger @alecmuffett
do not Skype IM with your lover!
![Page 36: Sex, Lies & Instant Messenger v3](https://reader033.fdocuments.in/reader033/viewer/2022050919/547a5b6ab37959822b8b494f/html5/thumbnails/36.jpg)
sex, lies and instant messenger @alecmuffett
Skype• peer to peer architecture
• robust, replicated, flexible• excellent security
• ...unless you’re up against the USA• ...or China• ...or maybe the UK
![Page 37: Sex, Lies & Instant Messenger v3](https://reader033.fdocuments.in/reader033/viewer/2022050919/547a5b6ab37959822b8b494f/html5/thumbnails/37.jpg)
sex, lies and instant messenger @alecmuffett
virtually impossible to expungea recent conversation
![Page 38: Sex, Lies & Instant Messenger v3](https://reader033.fdocuments.in/reader033/viewer/2022050919/547a5b6ab37959822b8b494f/html5/thumbnails/38.jpg)
sex, lies and instant messenger @alecmuffett
deletion can make things worsemessages resurrect from the dead!
![Page 39: Sex, Lies & Instant Messenger v3](https://reader033.fdocuments.in/reader033/viewer/2022050919/547a5b6ab37959822b8b494f/html5/thumbnails/39.jpg)
sex, lies and instant messenger @alecmuffett
(zombie data is not good)
![Page 40: Sex, Lies & Instant Messenger v3](https://reader033.fdocuments.in/reader033/viewer/2022050919/547a5b6ab37959822b8b494f/html5/thumbnails/40.jpg)
sex, lies and instant messenger @alecmuffett
Avoid XMPP with a lover...• Also called Jabber Protocol• Implementations:
• GoogleChat• Some Facebook chat• Other systems
![Page 41: Sex, Lies & Instant Messenger v3](https://reader033.fdocuments.in/reader033/viewer/2022050919/547a5b6ab37959822b8b494f/html5/thumbnails/41.jpg)
sex, lies and instant messenger @alecmuffett
XMPP• Initial message is multicast
• sent to all logged-in instances• eg: “hello sexy”
• ...also arrives on the home PC• ...whilst you are at work
![Page 42: Sex, Lies & Instant Messenger v3](https://reader033.fdocuments.in/reader033/viewer/2022050919/547a5b6ab37959822b8b494f/html5/thumbnails/42.jpg)
sex, lies and instant messenger @alecmuffett
Other IM systems?• Not really wise...
• AIM now multicast• YIM likewise
• Go for something simple• Avoid specialist IM-client software• Use web-based systems
![Page 43: Sex, Lies & Instant Messenger v3](https://reader033.fdocuments.in/reader033/viewer/2022050919/547a5b6ab37959822b8b494f/html5/thumbnails/43.jpg)
sex, lies and instant messenger @alecmuffett
next: social media!
![Page 44: Sex, Lies & Instant Messenger v3](https://reader033.fdocuments.in/reader033/viewer/2022050919/547a5b6ab37959822b8b494f/html5/thumbnails/44.jpg)
sex, lies and instant messenger @alecmuffett
do not Twitter with your lover!
![Page 45: Sex, Lies & Instant Messenger v3](https://reader033.fdocuments.in/reader033/viewer/2022050919/547a5b6ab37959822b8b494f/html5/thumbnails/45.jpg)
sex, lies and instant messenger @alecmuffett
typos of doom!
![Page 46: Sex, Lies & Instant Messenger v3](https://reader033.fdocuments.in/reader033/viewer/2022050919/547a5b6ab37959822b8b494f/html5/thumbnails/46.jpg)
sex, lies and instant messenger @alecmuffett
D alice can i have you for dinner?
![Page 47: Sex, Lies & Instant Messenger v3](https://reader033.fdocuments.in/reader033/viewer/2022050919/547a5b6ab37959822b8b494f/html5/thumbnails/47.jpg)
sex, lies and instant messenger @alecmuffett
@alice can i have you for dinner?
![Page 48: Sex, Lies & Instant Messenger v3](https://reader033.fdocuments.in/reader033/viewer/2022050919/547a5b6ab37959822b8b494f/html5/thumbnails/48.jpg)
sex, lies and instant messenger @alecmuffett
...and, worse...
![Page 49: Sex, Lies & Instant Messenger v3](https://reader033.fdocuments.in/reader033/viewer/2022050919/547a5b6ab37959822b8b494f/html5/thumbnails/49.jpg)
sex, lies and instant messenger @alecmuffett
D bob Nude! http://twitpic.com/b0gu5
![Page 50: Sex, Lies & Instant Messenger v3](https://reader033.fdocuments.in/reader033/viewer/2022050919/547a5b6ab37959822b8b494f/html5/thumbnails/50.jpg)
sex, lies and instant messenger @alecmuffett
Twitter App Risks• Third-party apps get access to DMs
• Twitter clients...• Web Apps...
• Proliferation of data is unwise• more backups• more caches• more access
![Page 51: Sex, Lies & Instant Messenger v3](https://reader033.fdocuments.in/reader033/viewer/2022050919/547a5b6ab37959822b8b494f/html5/thumbnails/51.jpg)
sex, lies and instant messenger @alecmuffett
do not Facebook your lover!
![Page 52: Sex, Lies & Instant Messenger v3](https://reader033.fdocuments.in/reader033/viewer/2022050919/547a5b6ab37959822b8b494f/html5/thumbnails/52.jpg)
sex, lies and instant messenger @alecmuffett
too easy to get wrong
![Page 53: Sex, Lies & Instant Messenger v3](https://reader033.fdocuments.in/reader033/viewer/2022050919/547a5b6ab37959822b8b494f/html5/thumbnails/53.jpg)
sex, lies and instant messenger @alecmuffett
Dropping Hints
homepage displays with whom you communicate frequently
![Page 54: Sex, Lies & Instant Messenger v3](https://reader033.fdocuments.in/reader033/viewer/2022050919/547a5b6ab37959822b8b494f/html5/thumbnails/54.jpg)
sex, lies and instant messenger @alecmuffett
“Transitive trust”friends-of-friends may not be friends
![Page 55: Sex, Lies & Instant Messenger v3](https://reader033.fdocuments.in/reader033/viewer/2022050919/547a5b6ab37959822b8b494f/html5/thumbnails/55.jpg)
sex, lies and instant messenger @alecmuffett
Tommy Jordan!
YouTube Video:Facebook Parenting: For the troubled teen
![Page 56: Sex, Lies & Instant Messenger v3](https://reader033.fdocuments.in/reader033/viewer/2022050919/547a5b6ab37959822b8b494f/html5/thumbnails/56.jpg)
sex, lies and instant messenger @alecmuffett
Facebook Software EcologyFacebook is not really Facebook
![Page 57: Sex, Lies & Instant Messenger v3](https://reader033.fdocuments.in/reader033/viewer/2022050919/547a5b6ab37959822b8b494f/html5/thumbnails/57.jpg)
sex, lies and instant messenger @alecmuffett
Analogyif you want to be private,
don’t throw your diaryinto a pub full of gossips and journalists
![Page 58: Sex, Lies & Instant Messenger v3](https://reader033.fdocuments.in/reader033/viewer/2022050919/547a5b6ab37959822b8b494f/html5/thumbnails/58.jpg)
sex, lies and instant messenger @alecmuffett
next: phones!
![Page 59: Sex, Lies & Instant Messenger v3](https://reader033.fdocuments.in/reader033/viewer/2022050919/547a5b6ab37959822b8b494f/html5/thumbnails/59.jpg)
sex, lies and instant messenger @alecmuffett
do not smartphone with your lover!
![Page 60: Sex, Lies & Instant Messenger v3](https://reader033.fdocuments.in/reader033/viewer/2022050919/547a5b6ab37959822b8b494f/html5/thumbnails/60.jpg)
sex, lies and instant messenger @alecmuffett
massive comedy potential
![Page 61: Sex, Lies & Instant Messenger v3](https://reader033.fdocuments.in/reader033/viewer/2022050919/547a5b6ab37959822b8b494f/html5/thumbnails/61.jpg)
sex, lies and instant messenger @alecmuffett
iPhone screenlock
![Page 62: Sex, Lies & Instant Messenger v3](https://reader033.fdocuments.in/reader033/viewer/2022050919/547a5b6ab37959822b8b494f/html5/thumbnails/62.jpg)
sex, lies and instant messenger @alecmuffett
applications which pop-upalerts above the screenlock
![Page 63: Sex, Lies & Instant Messenger v3](https://reader033.fdocuments.in/reader033/viewer/2022050919/547a5b6ab37959822b8b494f/html5/thumbnails/63.jpg)
sex, lies and instant messenger @alecmuffett
Locked?
![Page 64: Sex, Lies & Instant Messenger v3](https://reader033.fdocuments.in/reader033/viewer/2022050919/547a5b6ab37959822b8b494f/html5/thumbnails/64.jpg)
sex, lies and instant messenger @alecmuffett
punchline:
![Page 65: Sex, Lies & Instant Messenger v3](https://reader033.fdocuments.in/reader033/viewer/2022050919/547a5b6ab37959822b8b494f/html5/thumbnails/65.jpg)
sex, lies and instant messenger @alecmuffett
Don’t combine this with Skype
![Page 66: Sex, Lies & Instant Messenger v3](https://reader033.fdocuments.in/reader033/viewer/2022050919/547a5b6ab37959822b8b494f/html5/thumbnails/66.jpg)
sex, lies and instant messenger @alecmuffett
do not go gaming with your lover!
![Page 67: Sex, Lies & Instant Messenger v3](https://reader033.fdocuments.in/reader033/viewer/2022050919/547a5b6ab37959822b8b494f/html5/thumbnails/67.jpg)
sex, lies and instant messenger @alecmuffett
MMORPGs• EQ• SecondLife• EVE Online• Warhammer• WoW
• etc...
![Page 68: Sex, Lies & Instant Messenger v3](https://reader033.fdocuments.in/reader033/viewer/2022050919/547a5b6ab37959822b8b494f/html5/thumbnails/68.jpg)
sex, lies and instant messenger @alecmuffett
held to lower standard than IM
![Page 69: Sex, Lies & Instant Messenger v3](https://reader033.fdocuments.in/reader033/viewer/2022050919/547a5b6ab37959822b8b494f/html5/thumbnails/69.jpg)
sex, lies and instant messenger @alecmuffett
heavily-integrated software• game• webcam• voice
• third party stuff• Ventrillo• Mumble• ...
![Page 70: Sex, Lies & Instant Messenger v3](https://reader033.fdocuments.in/reader033/viewer/2022050919/547a5b6ab37959822b8b494f/html5/thumbnails/70.jpg)
sex, lies and instant messenger @alecmuffett
game logs• logfiles are...
• comprehensive• disparate• spattered all over the hard drive
• ...and therefore hard to remove
![Page 71: Sex, Lies & Instant Messenger v3](https://reader033.fdocuments.in/reader033/viewer/2022050919/547a5b6ab37959822b8b494f/html5/thumbnails/71.jpg)
sex, lies and instant messenger @alecmuffett
next...
![Page 72: Sex, Lies & Instant Messenger v3](https://reader033.fdocuments.in/reader033/viewer/2022050919/547a5b6ab37959822b8b494f/html5/thumbnails/72.jpg)
sex, lies and instant messenger @alecmuffett
Geolocation can hurt you!
![Page 73: Sex, Lies & Instant Messenger v3](https://reader033.fdocuments.in/reader033/viewer/2022050919/547a5b6ab37959822b8b494f/html5/thumbnails/73.jpg)
sex, lies and instant messenger @alecmuffett
avoid sharing geolocation• Foursquare, Twitter, etc
• “...but your Twitter messages saidthat you were in Essex?”
![Page 74: Sex, Lies & Instant Messenger v3](https://reader033.fdocuments.in/reader033/viewer/2022050919/547a5b6ab37959822b8b494f/html5/thumbnails/74.jpg)
sex, lies and instant messenger @alecmuffett
Do you have an in-car GPS?...and do you know how to wipe it?
![Page 75: Sex, Lies & Instant Messenger v3](https://reader033.fdocuments.in/reader033/viewer/2022050919/547a5b6ab37959822b8b494f/html5/thumbnails/75.jpg)
sex, lies and instant messenger @alecmuffett
next, an obvious thing that’s often missed:
![Page 76: Sex, Lies & Instant Messenger v3](https://reader033.fdocuments.in/reader033/viewer/2022050919/547a5b6ab37959822b8b494f/html5/thumbnails/76.jpg)
sex, lies and instant messenger @alecmuffett
do not send porny naked picturesof yourselves, to each other
![Page 77: Sex, Lies & Instant Messenger v3](https://reader033.fdocuments.in/reader033/viewer/2022050919/547a5b6ab37959822b8b494f/html5/thumbnails/77.jpg)
sex, lies and instant messenger @alecmuffett
homebrew porn• webcam temporary copy
• potentially restorable
![Page 78: Sex, Lies & Instant Messenger v3](https://reader033.fdocuments.in/reader033/viewer/2022050919/547a5b6ab37959822b8b494f/html5/thumbnails/78.jpg)
sex, lies and instant messenger @alecmuffett
homebrew porn• desktop copy
• backup/time machine copy• image-management tool copy
![Page 79: Sex, Lies & Instant Messenger v3](https://reader033.fdocuments.in/reader033/viewer/2022050919/547a5b6ab37959822b8b494f/html5/thumbnails/79.jpg)
sex, lies and instant messenger @alecmuffett
homebrew porn• IM server copy
• or: duplicate Skype transfers• plus: transfer logs
![Page 80: Sex, Lies & Instant Messenger v3](https://reader033.fdocuments.in/reader033/viewer/2022050919/547a5b6ab37959822b8b494f/html5/thumbnails/80.jpg)
sex, lies and instant messenger @alecmuffett
homebrew porn• remote copies
• remote backup/time machine• remote image-management tool
![Page 81: Sex, Lies & Instant Messenger v3](https://reader033.fdocuments.in/reader033/viewer/2022050919/547a5b6ab37959822b8b494f/html5/thumbnails/81.jpg)
sex, lies and instant messenger @alecmuffett
homebrew porn• Took it with iPhone?
• backed up to iTunes• backed up to iCloud?
![Page 82: Sex, Lies & Instant Messenger v3](https://reader033.fdocuments.in/reader033/viewer/2022050919/547a5b6ab37959822b8b494f/html5/thumbnails/82.jpg)
sex, lies and instant messenger @alecmuffett
homebrew porn• boyfriend’s archive copies
• ...for sharing when you break up
![Page 83: Sex, Lies & Instant Messenger v3](https://reader033.fdocuments.in/reader033/viewer/2022050919/547a5b6ab37959822b8b494f/html5/thumbnails/83.jpg)
sex, lies and instant messenger @alecmuffett
do not use the family computer
![Page 84: Sex, Lies & Instant Messenger v3](https://reader033.fdocuments.in/reader033/viewer/2022050919/547a5b6ab37959822b8b494f/html5/thumbnails/84.jpg)
sex, lies and instant messenger @alecmuffett
there’s a reason it’s calleda family computer
![Page 85: Sex, Lies & Instant Messenger v3](https://reader033.fdocuments.in/reader033/viewer/2022050919/547a5b6ab37959822b8b494f/html5/thumbnails/85.jpg)
sex, lies and instant messenger @alecmuffett
do not use work-related hardware
![Page 86: Sex, Lies & Instant Messenger v3](https://reader033.fdocuments.in/reader033/viewer/2022050919/547a5b6ab37959822b8b494f/html5/thumbnails/86.jpg)
sex, lies and instant messenger @alecmuffett
work hardware• not your machine
• thus: “not your data”• may be taken from you
• eg: bankruptcy, fired, updated• old hardware auctioned
• automated backups?• network access logged?
![Page 87: Sex, Lies & Instant Messenger v3](https://reader033.fdocuments.in/reader033/viewer/2022050919/547a5b6ab37959822b8b494f/html5/thumbnails/87.jpg)
sex, lies and instant messenger @alecmuffett
summary
![Page 88: Sex, Lies & Instant Messenger v3](https://reader033.fdocuments.in/reader033/viewer/2022050919/547a5b6ab37959822b8b494f/html5/thumbnails/88.jpg)
sex, lies and instant messenger @alecmuffett
If you are going to live a double lifethen please do it right.
![Page 89: Sex, Lies & Instant Messenger v3](https://reader033.fdocuments.in/reader033/viewer/2022050919/547a5b6ab37959822b8b494f/html5/thumbnails/89.jpg)
sex, lies and instant messenger @alecmuffett
2) what risks are you protecting against?
![Page 90: Sex, Lies & Instant Messenger v3](https://reader033.fdocuments.in/reader033/viewer/2022050919/547a5b6ab37959822b8b494f/html5/thumbnails/90.jpg)
sex, lies and instant messenger @alecmuffett
(apart from spouses and lawyers)
![Page 91: Sex, Lies & Instant Messenger v3](https://reader033.fdocuments.in/reader033/viewer/2022050919/547a5b6ab37959822b8b494f/html5/thumbnails/91.jpg)
sex, lies and instant messenger @alecmuffett
recreational computer forensics!
![Page 92: Sex, Lies & Instant Messenger v3](https://reader033.fdocuments.in/reader033/viewer/2022050919/547a5b6ab37959822b8b494f/html5/thumbnails/92.jpg)
sex, lies and instant messenger @alecmuffett
for teh lulz!
![Page 93: Sex, Lies & Instant Messenger v3](https://reader033.fdocuments.in/reader033/viewer/2022050919/547a5b6ab37959822b8b494f/html5/thumbnails/93.jpg)
sex, lies and instant messenger @alecmuffett
Things Geeks Do• Enumerate all possible URLs:•tinyurl•bit.ly•is.gd•t.co
• ...and save the good ones
![Page 94: Sex, Lies & Instant Messenger v3](https://reader033.fdocuments.in/reader033/viewer/2022050919/547a5b6ab37959822b8b494f/html5/thumbnails/94.jpg)
sex, lies and instant messenger @alecmuffett
Things Geeks Do• Trawl...
• Picasa• Twitpic• Yfrog
• ...to much the same ends
![Page 95: Sex, Lies & Instant Messenger v3](https://reader033.fdocuments.in/reader033/viewer/2022050919/547a5b6ab37959822b8b494f/html5/thumbnails/95.jpg)
sex, lies and instant messenger @alecmuffett
Things Geeks Do• buy hardware from Ebay
• undelete data files • desktops• laptops• printers (!)• storage
• hard disks• thumb drives• SD cards
![Page 96: Sex, Lies & Instant Messenger v3](https://reader033.fdocuments.in/reader033/viewer/2022050919/547a5b6ab37959822b8b494f/html5/thumbnails/96.jpg)
sex, lies and instant messenger @alecmuffett
Things Geeks Do• buy phones from Ebay
• restore deleted SMS• retrieve e-mail passwords
![Page 97: Sex, Lies & Instant Messenger v3](https://reader033.fdocuments.in/reader033/viewer/2022050919/547a5b6ab37959822b8b494f/html5/thumbnails/97.jpg)
sex, lies and instant messenger @alecmuffett
Find hardware in the street...
![Page 98: Sex, Lies & Instant Messenger v3](https://reader033.fdocuments.in/reader033/viewer/2022050919/547a5b6ab37959822b8b494f/html5/thumbnails/98.jpg)
sex, lies and instant messenger @alecmuffett
...investigate it...
![Page 99: Sex, Lies & Instant Messenger v3](https://reader033.fdocuments.in/reader033/viewer/2022050919/547a5b6ab37959822b8b494f/html5/thumbnails/99.jpg)
sex, lies and instant messenger @alecmuffett
...discover secrets.
![Page 100: Sex, Lies & Instant Messenger v3](https://reader033.fdocuments.in/reader033/viewer/2022050919/547a5b6ab37959822b8b494f/html5/thumbnails/100.jpg)
sex, lies and instant messenger @alecmuffett
Your challenge is to make that hard
![Page 101: Sex, Lies & Instant Messenger v3](https://reader033.fdocuments.in/reader033/viewer/2022050919/547a5b6ab37959822b8b494f/html5/thumbnails/101.jpg)
sex, lies and instant messenger @alecmuffett
3) what must you do/not do?
![Page 102: Sex, Lies & Instant Messenger v3](https://reader033.fdocuments.in/reader033/viewer/2022050919/547a5b6ab37959822b8b494f/html5/thumbnails/102.jpg)
sex, lies and instant messenger @alecmuffett
do use separate identities,do not link identities!
![Page 103: Sex, Lies & Instant Messenger v3](https://reader033.fdocuments.in/reader033/viewer/2022050919/547a5b6ab37959822b8b494f/html5/thumbnails/103.jpg)
sex, lies and instant messenger @alecmuffett
create a disposable identity,start with an e-mail address
![Page 104: Sex, Lies & Instant Messenger v3](https://reader033.fdocuments.in/reader033/viewer/2022050919/547a5b6ab37959822b8b494f/html5/thumbnails/104.jpg)
sex, lies and instant messenger @alecmuffett
use a fake, boring, common pseudonym
• good• edward wilson• carole smith
• bad• sexxxy4UinBasingstoke• anything else that’s unique
![Page 105: Sex, Lies & Instant Messenger v3](https://reader033.fdocuments.in/reader033/viewer/2022050919/547a5b6ab37959822b8b494f/html5/thumbnails/105.jpg)
sex, lies and instant messenger @alecmuffett
is this legal?• probably breaking terms of service
• is it criminal to lie?• maybe...
![Page 106: Sex, Lies & Instant Messenger v3](https://reader033.fdocuments.in/reader033/viewer/2022050919/547a5b6ab37959822b8b494f/html5/thumbnails/106.jpg)
sex, lies and instant messenger @alecmuffett
idea:Use a disposable Gmail accountto set up a fake Yahoo account
or vice-versa.
![Page 107: Sex, Lies & Instant Messenger v3](https://reader033.fdocuments.in/reader033/viewer/2022050919/547a5b6ab37959822b8b494f/html5/thumbnails/107.jpg)
sex, lies and instant messenger @alecmuffett
do not bookmark your secret identity
![Page 108: Sex, Lies & Instant Messenger v3](https://reader033.fdocuments.in/reader033/viewer/2022050919/547a5b6ab37959822b8b494f/html5/thumbnails/108.jpg)
sex, lies and instant messenger @alecmuffett
do use a random password• never used before• never use anywhere else• keep the password in your brain
![Page 109: Sex, Lies & Instant Messenger v3](https://reader033.fdocuments.in/reader033/viewer/2022050919/547a5b6ab37959822b8b494f/html5/thumbnails/109.jpg)
sex, lies and instant messenger @alecmuffett
do not store the secret identity passwordin your normal password manager!
![Page 110: Sex, Lies & Instant Messenger v3](https://reader033.fdocuments.in/reader033/viewer/2022050919/547a5b6ab37959822b8b494f/html5/thumbnails/110.jpg)
sex, lies and instant messenger @alecmuffett
do minimise data proliferation,do not leave footprints!
![Page 111: Sex, Lies & Instant Messenger v3](https://reader033.fdocuments.in/reader033/viewer/2022050919/547a5b6ab37959822b8b494f/html5/thumbnails/111.jpg)
sex, lies and instant messenger @alecmuffett
do not access your secret identityfrom your normal phone
![Page 112: Sex, Lies & Instant Messenger v3](https://reader033.fdocuments.in/reader033/viewer/2022050919/547a5b6ab37959822b8b494f/html5/thumbnails/112.jpg)
sex, lies and instant messenger @alecmuffett
iPhone• All backed up by iTunes:
• SMS• call logs• geolocation (see recent press)
• ...possibly password protected• You’re using a different password, yes?
![Page 113: Sex, Lies & Instant Messenger v3](https://reader033.fdocuments.in/reader033/viewer/2022050919/547a5b6ab37959822b8b494f/html5/thumbnails/113.jpg)
sex, lies and instant messenger @alecmuffett
Android• basically ditto
• ...but backed up on Google instead
![Page 114: Sex, Lies & Instant Messenger v3](https://reader033.fdocuments.in/reader033/viewer/2022050919/547a5b6ab37959822b8b494f/html5/thumbnails/114.jpg)
sex, lies and instant messenger @alecmuffett
Do not access your secret identityusing your normal laptop “login”
![Page 115: Sex, Lies & Instant Messenger v3](https://reader033.fdocuments.in/reader033/viewer/2022050919/547a5b6ab37959822b8b494f/html5/thumbnails/115.jpg)
sex, lies and instant messenger @alecmuffett
avoid intermingled filestore
put no pseudonym filesamongst personal files
![Page 116: Sex, Lies & Instant Messenger v3](https://reader033.fdocuments.in/reader033/viewer/2022050919/547a5b6ab37959822b8b494f/html5/thumbnails/116.jpg)
sex, lies and instant messenger @alecmuffett
set up different “users”• keep sensitive files in one place
• ...hopefully• ...mostly• ...except for logs
![Page 117: Sex, Lies & Instant Messenger v3](https://reader033.fdocuments.in/reader033/viewer/2022050919/547a5b6ab37959822b8b494f/html5/thumbnails/117.jpg)
sex, lies and instant messenger @alecmuffett
set up encrypted hard disks
resistant to post-Ebay forensics;do this prior to any usage
![Page 118: Sex, Lies & Instant Messenger v3](https://reader033.fdocuments.in/reader033/viewer/2022050919/547a5b6ab37959822b8b494f/html5/thumbnails/118.jpg)
sex, lies and instant messenger @alecmuffett
use browsers which supportprivate browsing modes, and
which delete cookies/history on exit
![Page 119: Sex, Lies & Instant Messenger v3](https://reader033.fdocuments.in/reader033/viewer/2022050919/547a5b6ab37959822b8b494f/html5/thumbnails/119.jpg)
sex, lies and instant messenger @alecmuffett
Example workflow:
![Page 120: Sex, Lies & Instant Messenger v3](https://reader033.fdocuments.in/reader033/viewer/2022050919/547a5b6ab37959822b8b494f/html5/thumbnails/120.jpg)
sex, lies and instant messenger @alecmuffett
Chrome
“day-to-day”
![Page 121: Sex, Lies & Instant Messenger v3](https://reader033.fdocuments.in/reader033/viewer/2022050919/547a5b6ab37959822b8b494f/html5/thumbnails/121.jpg)
sex, lies and instant messenger @alecmuffett
Safari• Guests and visitors• Logging into a website without
logging-out of Facebook first
![Page 122: Sex, Lies & Instant Messenger v3](https://reader033.fdocuments.in/reader033/viewer/2022050919/547a5b6ab37959822b8b494f/html5/thumbnails/122.jpg)
sex, lies and instant messenger @alecmuffett
Firefox• Ideal for...
• porn• shagging• dubious e-mail links• security malware research
![Page 123: Sex, Lies & Instant Messenger v3](https://reader033.fdocuments.in/reader033/viewer/2022050919/547a5b6ab37959822b8b494f/html5/thumbnails/123.jpg)
sex, lies and instant messenger @alecmuffett
technical reference
![Page 124: Sex, Lies & Instant Messenger v3](https://reader033.fdocuments.in/reader033/viewer/2022050919/547a5b6ab37959822b8b494f/html5/thumbnails/124.jpg)
sex, lies and instant messenger @alecmuffett
browser settings (1)• clear cookies on exit• clear history on exit• don't accept 3rd-party cookies• block popups
![Page 125: Sex, Lies & Instant Messenger v3](https://reader033.fdocuments.in/reader033/viewer/2022050919/547a5b6ab37959822b8b494f/html5/thumbnails/125.jpg)
sex, lies and instant messenger @alecmuffett
browser settings (2)• don't save form input• don't save history• switch off autosuggest• set to private browser mode
• ...permanently, if possible• else auto/delete cookies on exit
![Page 126: Sex, Lies & Instant Messenger v3](https://reader033.fdocuments.in/reader033/viewer/2022050919/547a5b6ab37959822b8b494f/html5/thumbnails/126.jpg)
sex, lies and instant messenger @alecmuffett
plugins / similar• Flash Player
• Visit the security settings panel• purge Flash cookies and sites• set Flash db size to zero
• HTML5 settings• set HTML5 db size to zero• watch for other/new issues
![Page 127: Sex, Lies & Instant Messenger v3](https://reader033.fdocuments.in/reader033/viewer/2022050919/547a5b6ab37959822b8b494f/html5/thumbnails/127.jpg)
sex, lies and instant messenger @alecmuffett
Firefox extensions• Tor
• better: Tor Browser Bundle
•SSL Everywhere•NoScript•RequestPolicy•AdBlock Plus•Ghostery
![Page 128: Sex, Lies & Instant Messenger v3](https://reader033.fdocuments.in/reader033/viewer/2022050919/547a5b6ab37959822b8b494f/html5/thumbnails/128.jpg)
sex, lies and instant messenger @alecmuffett
Adium / Pidgin for IM• use OTR encryption
• not the same as OTR in GoogleChat!• solves the point-to-point chat issue
• beware local logfiles
![Page 129: Sex, Lies & Instant Messenger v3](https://reader033.fdocuments.in/reader033/viewer/2022050919/547a5b6ab37959822b8b494f/html5/thumbnails/129.jpg)
sex, lies and instant messenger @alecmuffett
remember:
![Page 130: Sex, Lies & Instant Messenger v3](https://reader033.fdocuments.in/reader033/viewer/2022050919/547a5b6ab37959822b8b494f/html5/thumbnails/130.jpg)
sex, lies and instant messenger @alecmuffett
all this also applies to your phone
![Page 131: Sex, Lies & Instant Messenger v3](https://reader033.fdocuments.in/reader033/viewer/2022050919/547a5b6ab37959822b8b494f/html5/thumbnails/131.jpg)
sex, lies and instant messenger @alecmuffett
speaking of phones...
![Page 132: Sex, Lies & Instant Messenger v3](https://reader033.fdocuments.in/reader033/viewer/2022050919/547a5b6ab37959822b8b494f/html5/thumbnails/132.jpg)
sex, lies and instant messenger @alecmuffett
use a PAYG dumbphone• pay cash (where possible)• top-up with cash• enable PIN lock• avoid ...
• paper billing• web integration
![Page 133: Sex, Lies & Instant Messenger v3](https://reader033.fdocuments.in/reader033/viewer/2022050919/547a5b6ab37959822b8b494f/html5/thumbnails/133.jpg)
sex, lies and instant messenger @alecmuffett
use voice calls
![Page 134: Sex, Lies & Instant Messenger v3](https://reader033.fdocuments.in/reader033/viewer/2022050919/547a5b6ab37959822b8b494f/html5/thumbnails/134.jpg)
sex, lies and instant messenger @alecmuffett
do not leave voicemails
![Page 135: Sex, Lies & Instant Messenger v3](https://reader033.fdocuments.in/reader033/viewer/2022050919/547a5b6ab37959822b8b494f/html5/thumbnails/135.jpg)
sex, lies and instant messenger @alecmuffett
wipe your SMS messages regularly
![Page 136: Sex, Lies & Instant Messenger v3](https://reader033.fdocuments.in/reader033/viewer/2022050919/547a5b6ab37959822b8b494f/html5/thumbnails/136.jpg)
sex, lies and instant messenger @alecmuffett
dumbphone SMS• lowest common denominator
• messages still logged on backend• but overall exposure is less
![Page 137: Sex, Lies & Instant Messenger v3](https://reader033.fdocuments.in/reader033/viewer/2022050919/547a5b6ab37959822b8b494f/html5/thumbnails/137.jpg)
sex, lies and instant messenger @alecmuffett
if you must use smartphone• do not link this phone to your usual
Google Account
![Page 138: Sex, Lies & Instant Messenger v3](https://reader033.fdocuments.in/reader033/viewer/2022050919/547a5b6ab37959822b8b494f/html5/thumbnails/138.jpg)
sex, lies and instant messenger @alecmuffett
if you must use smartphone• check out:
• WhatsApp• TigerText• ...other SMS replacements
• take time to understand how they work
![Page 139: Sex, Lies & Instant Messenger v3](https://reader033.fdocuments.in/reader033/viewer/2022050919/547a5b6ab37959822b8b494f/html5/thumbnails/139.jpg)
sex, lies and instant messenger @alecmuffett
finally...
![Page 140: Sex, Lies & Instant Messenger v3](https://reader033.fdocuments.in/reader033/viewer/2022050919/547a5b6ab37959822b8b494f/html5/thumbnails/140.jpg)
sex, lies and instant messenger @alecmuffett
decommission old hardware• computers
• DBAN - Darik’s Boot & Nuke• Free suicide pill / CDROM for PCs
• phones• Remove SIM
• SMS may be on SIM as well as phone!• Check whether factory reset actually works
• if not, smash it & drive a car over it repeatedly
![Page 141: Sex, Lies & Instant Messenger v3](https://reader033.fdocuments.in/reader033/viewer/2022050919/547a5b6ab37959822b8b494f/html5/thumbnails/141.jpg)
sex, lies and instant messenger @alecmuffett
bottom lines• the more copies of data exist
• the harder it is to remove them• when data escapes your control
• it's available forever
![Page 142: Sex, Lies & Instant Messenger v3](https://reader033.fdocuments.in/reader033/viewer/2022050919/547a5b6ab37959822b8b494f/html5/thumbnails/142.jpg)
sex, lies and instant messenger @alecmuffett
when mistakes happen...• clean up calmly• do not amplify the mistake
![Page 143: Sex, Lies & Instant Messenger v3](https://reader033.fdocuments.in/reader033/viewer/2022050919/547a5b6ab37959822b8b494f/html5/thumbnails/143.jpg)
sex, lies and instant messenger @alecmuffett
remember• your lover has the same data
• but may not be taking care of it• educate them gently
• his/her systems will also one day be sold on eBay
![Page 144: Sex, Lies & Instant Messenger v3](https://reader033.fdocuments.in/reader033/viewer/2022050919/547a5b6ab37959822b8b494f/html5/thumbnails/144.jpg)
sex, lies and instant messenger @alecmuffett
So why must you actually know all this?
![Page 145: Sex, Lies & Instant Messenger v3](https://reader033.fdocuments.in/reader033/viewer/2022050919/547a5b6ab37959822b8b494f/html5/thumbnails/145.jpg)
sex, lies and instant messenger @alecmuffett
Well...
![Page 146: Sex, Lies & Instant Messenger v3](https://reader033.fdocuments.in/reader033/viewer/2022050919/547a5b6ab37959822b8b494f/html5/thumbnails/146.jpg)
sex, lies and instant messenger @alecmuffett
- shagging
![Page 147: Sex, Lies & Instant Messenger v3](https://reader033.fdocuments.in/reader033/viewer/2022050919/547a5b6ab37959822b8b494f/html5/thumbnails/147.jpg)
sex, lies and instant messenger @alecmuffett
- journalists and sources
![Page 148: Sex, Lies & Instant Messenger v3](https://reader033.fdocuments.in/reader033/viewer/2022050919/547a5b6ab37959822b8b494f/html5/thumbnails/148.jpg)
sex, lies and instant messenger @alecmuffett
- employees and whistleblowers
![Page 149: Sex, Lies & Instant Messenger v3](https://reader033.fdocuments.in/reader033/viewer/2022050919/547a5b6ab37959822b8b494f/html5/thumbnails/149.jpg)
sex, lies and instant messenger @alecmuffett
- activists in repressive regimes
![Page 150: Sex, Lies & Instant Messenger v3](https://reader033.fdocuments.in/reader033/viewer/2022050919/547a5b6ab37959822b8b494f/html5/thumbnails/150.jpg)
sex, lies and instant messenger @alecmuffett
- good data hygiene
![Page 151: Sex, Lies & Instant Messenger v3](https://reader033.fdocuments.in/reader033/viewer/2022050919/547a5b6ab37959822b8b494f/html5/thumbnails/151.jpg)
sex, lies and instant messenger @alecmuffett
- separating work and home data/life
![Page 152: Sex, Lies & Instant Messenger v3](https://reader033.fdocuments.in/reader033/viewer/2022050919/547a5b6ab37959822b8b494f/html5/thumbnails/152.jpg)
sex, lies and instant messenger @alecmuffett
![Page 153: Sex, Lies & Instant Messenger v3](https://reader033.fdocuments.in/reader033/viewer/2022050919/547a5b6ab37959822b8b494f/html5/thumbnails/153.jpg)
sex, lies and instant messenger @alecmuffett
Future
![Page 154: Sex, Lies & Instant Messenger v3](https://reader033.fdocuments.in/reader033/viewer/2022050919/547a5b6ab37959822b8b494f/html5/thumbnails/154.jpg)
sex, lies and instant messenger @alecmuffett
...?
![Page 155: Sex, Lies & Instant Messenger v3](https://reader033.fdocuments.in/reader033/viewer/2022050919/547a5b6ab37959822b8b494f/html5/thumbnails/155.jpg)
sex, lies and instant messenger @alecmuffett
bonne chance