Security Workshops - Revision history

Nguenthe at 19:55, 8 October 2013

2013-10-08T19:55:03Z

← Older revision		Revision as of 14:55, 8 October 2013
Line 57:		Line 57:
	And remember kids, '''''educational-use only'''''		And remember kids, '''''educational-use only'''''

	=Hand Outs		=Hand Outs=

			TOR? ahh!

	=WPIRG cross promotion=		=WPIRG cross promotion=

Nguenthe at 19:42, 8 October 2013

2013-10-08T19:42:35Z

← Older revision		Revision as of 14:42, 8 October 2013
Line 1:		Line 1:
	In light of the orwellian nightmare we've built ourselves into, now is a good time for the CSClub to pick up the slack it usually picks and teach people how to be safe out there.		In light of the orwellian nightmare we've built ourselves into, now is a good time for the CSClub to pick up the slack it usually picks and teach people how to be safe out there.

	=Topics~~, and slides~~=		=Topics=


Line 56:		Line 56:

	And remember kids, '''''educational-use only'''''		And remember kids, '''''educational-use only'''''

			=Hand Outs

	=WPIRG cross promotion=		=WPIRG cross promotion=
Line 62:		Line 64:
	* [https://cs.uwaterloo.ca/~iang/ Ian Goldberg] (sharvey)		* [https://cs.uwaterloo.ca/~iang/ Ian Goldberg] (sharvey)
	* [http://www.michaelgeist.ca/tags/privacy Michael Geist]		* [http://www.michaelgeist.ca/tags/privacy Michael Geist]
			* RiseUp.net (WPIRG has direct contacts with them)
	* ????
			* Someone from WikiLeaks (we have direct contacts with them)
			* [http://www.qpirgconcordia.org/?page_id=9#ats Anarchist Tech Support] (latter group seems dormant)
	* Terry Labach (this sort of thing is, actually, directly within his job description)		* Terry Labach (this sort of thing is, actually, directly within his job description)
	* [http://thoughtcrime.org Marlie Moxinspike]		* [http://thoughtcrime.org Marlie Moxinspike]

Yd2dong at 15:01, 26 September 2013

2013-09-26T15:01:28Z

← Older revision		Revision as of 10:01, 26 September 2013
Line 22:		Line 22:
	* ?????? on ''SSH''		* ?????? on ''SSH''
	* [mailto:stephen.palmateer@gmail.com Stephen Palmateer] of KWLUG on ''Tor'' (vs i2p vs Freenet vs /r/darknet?)		* [mailto:stephen.palmateer@gmail.com Stephen Palmateer] of KWLUG on ''Tor'' (vs i2p vs Freenet vs /r/darknet?)
	* yd2dong on ''Tunnelling and VPNs'' -- he's done original research on this area, would discuss censorship techniques (for example, DPI filters), how to defeat them, and significant additional hurdles for anti-censorship compared to simply protecting against eavesdropping (~~IOW,~~ ~~TLS~~ is ~~not~~ ~~enough~~).		* yd2dong on ''Tunnelling, Mix Networks, and VPNs'' -- he's done original research on this area, would discuss censorship techniques (for example, DPI filters), how to defeat them, and significant additional hurdles for anti-censorship compared to simply protecting against eavesdropping. (live demos of blocking from China)
	* ?????? on ''Your Wifi Network is Insecure'' (cover: aircrack-ng and reaver. maybe nmap and metasploit)		* ?????? on ''Your Wifi Network is Insecure'' (cover: aircrack-ng and reaver. maybe nmap and metasploit)
	* [mailto:silver@callysto.com Sean Howard] on ''How your ISP owns you'' (UW grad, ex Watsfic president, currently working for sentex.ca, knows details of Bell's network infrastructure and where the chokepoints are)		* [mailto:silver@callysto.com Sean Howard] on ''How your ISP owns you'' (UW grad, ex Watsfic president, currently working for sentex.ca, knows details of Bell's network infrastructure and where the chokepoints are)

Nguenthe: forgive me, i suck, sjcglads

2013-09-23T17:50:23Z

forgive me, i suck, sjcglads

← Older revision		Revision as of 12:50, 23 September 2013
Line 26:		Line 26:
	* [mailto:silver@callysto.com Sean Howard] on ''How your ISP owns you'' (UW grad, ex Watsfic president, currently working for sentex.ca, knows details of Bell's network infrastructure and where the chokepoints are)		* [mailto:silver@callysto.com Sean Howard] on ''How your ISP owns you'' (UW grad, ex Watsfic president, currently working for sentex.ca, knows details of Bell's network infrastructure and where the chokepoints are)
	* [http://cybersecurityinstitute.ca/ The Canadian Cybersecurity Institute] on ''Social Exploits'' (this person is via Sean Howard. Seems legit.)		* [http://cybersecurityinstitute.ca/ The Canadian Cybersecurity Institute] on ''Social Exploits'' (this person is via Sean Howard. Seems legit.)
	* nablack and ~~m4farrel~~ with a security demo + open ended question session		* nablack and sjcglads with a security demo + open ended question session
	* ~~m4farrel~~ on ''Secrets of a DDoS''		* sjcglads on ''Secrets of a DDoS''
	* wlritchi on ''Reversing SBeam and pnwing ur phone''		* wlritchi on ''Reversing SBeam and pnwing ur phone''
	* mtrberzi on ''GPG, Keyservers, and You'' and with a keysigning party to boot		* mtrberzi on ''GPG, Keyservers, and You'' and with a keysigning party to boot

Nguenthe at 14:41, 23 September 2013

2013-09-23T14:41:00Z

← Older revision		Revision as of 09:41, 23 September 2013
Line 25:		Line 25:
	* ?????? on ''Your Wifi Network is Insecure'' (cover: aircrack-ng and reaver. maybe nmap and metasploit)		* ?????? on ''Your Wifi Network is Insecure'' (cover: aircrack-ng and reaver. maybe nmap and metasploit)
	* [mailto:silver@callysto.com Sean Howard] on ''How your ISP owns you'' (UW grad, ex Watsfic president, currently working for sentex.ca, knows details of Bell's network infrastructure and where the chokepoints are)		* [mailto:silver@callysto.com Sean Howard] on ''How your ISP owns you'' (UW grad, ex Watsfic president, currently working for sentex.ca, knows details of Bell's network infrastructure and where the chokepoints are)
			* [http://cybersecurityinstitute.ca/ The Canadian Cybersecurity Institute] on ''Social Exploits'' (this person is via Sean Howard. Seems legit.)
	* nablack and m4farrel with a security demo + open ended question session		* nablack and m4farrel with a security demo + open ended question session
	* m4farrel on ''Secrets of a DDoS''		* m4farrel on ''Secrets of a DDoS''

Nguenthe at 21:37, 22 September 2013

2013-09-22T21:37:18Z

← Older revision		Revision as of 16:37, 22 September 2013
Line 64:		Line 64:
	* Terry Labach (this sort of thing is, actually, directly within his job description)		* Terry Labach (this sort of thing is, actually, directly within his job description)
	* [http://thoughtcrime.org Marlie Moxinspike]		* [http://thoughtcrime.org Marlie Moxinspike]
			* UofT Citizen Lab People

	=Related work and Telling Evidence=		=Related work and Telling Evidence=
Line 71:		Line 72:

	[https://www.encrypteverything.ca/ Pirate Party's EncryptEverything]		[https://www.encrypteverything.ca/ Pirate Party's EncryptEverything]

			https://citizenlab.org/ @ UofT

	[http://cm.bell-labs.com/who/ken/trust.html Ken Thompson - Reflections on Trusting Trust]		[http://cm.bell-labs.com/who/ken/trust.html Ken Thompson - Reflections on Trusting Trust]

Nguenthe at 19:04, 22 September 2013

2013-09-22T19:04:29Z

← Older revision		Revision as of 14:04, 22 September 2013
Line 13:		Line 13:

	* sharvey on ''Why Should You Care About Security and Privacy''		* sharvey on ''Why Should You Care About Security and Privacy''
	* ?????? on ''Snowden Roundup'' (sharvey might be able to get some people from CrySP to discuss this; perhaps a panel followed by a Q&A?)		* ?????? on ''Storytime: Snowden Roundup'' (sharvey might be able to get some people from CrySP to discuss this; perhaps a panel followed by a Q&A?)
			* ?????? on ''Storytime: [http://en.wikipedia.org/wiki/Weev Weev]''
			* ?????? on ''Storytime: Kevin Mitnick''
	* nguenthe on ''[http://www.cypherpunks.ca/otr OTR]'' -- or IanG if we can get him!		* nguenthe on ''[http://www.cypherpunks.ca/otr OTR]'' -- or IanG if we can get him!
	* ?????? on ''Time Machines'' (Google-hacking, pleaserobme.com, etc)		* ?????? on ''Time Machines'' (Google-hacking, pleaserobme.com, etc)

Nguenthe at 18:35, 22 September 2013

2013-09-22T18:35:18Z

← Older revision		Revision as of 13:35, 22 September 2013
Line 37:		Line 37:
	* Sapphyre?		* Sapphyre?
	* Hatguy!		* Hatguy!
	* ?????? on ''Passwords'' (touch on [http://xkcd.com/936/ security proofs], hashapass/pwdhash, alternatives to passwords (biometrics, one time pads, challenge-response, ssh keys), NOT SHARING YOUR DAMN PASSWORDS ACROSS SITES (cite: the ps3 attack, the linkedin attack, the ....) and how to use jacktheripper/[http://hashcat.net/hashcat/ hashcat])		* ?????? on ''Passwords'' (touch on [http://xkcd.com/936/ security proofs], hashapass/pwdhash, alternatives to passwords (biometrics, one time pads, challenge-response, ssh keys), NOT SHARING YOUR DAMN PASSWORDS ACROSS SITES (cite: the ps3 attack, the [linkedin attack], the [http://techcrunch.com/2009/12/14/rockyou-hack-security-myspace-facebook-passwords/ rockyou attack] ([http://www.tomshardware.com/news/imperva-rockyou-most-common-passwords,9486.html super] [http://reusablesec.blogspot.ca/2010/01/more-analysis-of-rockyou-password-list.html interesting] [http://blog.jimmyr.com/Password_analysis_of_databases_that_were_hacked_28_2009.php analysis], myspace's hack, FaithWriters, purerave.com's attempt at better security that made it worse, the ....) and how to use jacktheripper/[http://hashcat.net/hashcat/ hashcat])
	* ?????? on ''Browser Fingerprinting''		* ?????? on ''Browser Fingerprinting''
	* ?????? on ''Filesystem Forensics and the Dangers of Log-Structured Data Storage'' (live demo!) (zablache maybe)		* ?????? on ''Filesystem Forensics and the Dangers of Log-Structured Data Storage'' (live demo!) (zablache maybe)

Nguenthe: yd2dong has signed up

2013-09-22T18:20:50Z

yd2dong has signed up

← Older revision		Revision as of 13:20, 22 September 2013
Line 14:		Line 14:
	* sharvey on ''Why Should You Care About Security and Privacy''		* sharvey on ''Why Should You Care About Security and Privacy''
	* ?????? on ''Snowden Roundup'' (sharvey might be able to get some people from CrySP to discuss this; perhaps a panel followed by a Q&A?)		* ?????? on ''Snowden Roundup'' (sharvey might be able to get some people from CrySP to discuss this; perhaps a panel followed by a Q&A?)
		⚫	* nguenthe on ''[http://www.cypherpunks.ca/otr OTR]'' -- or IanG if we can get him!
	* yd2dong on ''Traffic Mixing''
	* ?????? on ''Time Machines'' (Google-hacking, pleaserobme.com, etc)		* ?????? on ''Time Machines'' (Google-hacking, pleaserobme.com, etc)
	* ?????? on ''Security Proofs: How Many Joules does the NSA Have?''		* ?????? on ''Security Proofs: How Many Joules does the NSA Have?''
	* ?????? on ''Full Disk Encryption'' (zablache maybe)		* ?????? on ''Full Disk Encryption'' (zablache maybe)
	* ?????? on ''SSH''		* ?????? on ''SSH''
	* ?????? on ''Tunnelling and VPNs''
⚫	* ?????? on ''Your Wifi Network is Insecure'' (cover: aircrack-ng and reaver. maybe nmap and metasploit)
	* [mailto:stephen.palmateer@gmail.com Stephen Palmateer] of KWLUG on ''Tor'' (vs i2p vs Freenet vs /r/darknet?)		* [mailto:stephen.palmateer@gmail.com Stephen Palmateer] of KWLUG on ''Tor'' (vs i2p vs Freenet vs /r/darknet?)
			* yd2dong on ''Tunnelling and VPNs'' -- he's done original research on this area, would discuss censorship techniques (for example, DPI filters), how to defeat them, and significant additional hurdles for anti-censorship compared to simply protecting against eavesdropping (IOW, TLS is not enough).
		⚫	* ?????? on ''Your Wifi Network is Insecure'' (cover: aircrack-ng and reaver. maybe nmap and metasploit)
	* [mailto:silver@callysto.com Sean Howard] on ''How your ISP owns you'' (UW grad, ex Watsfic president, currently working for sentex.ca, knows details of Bell's network infrastructure and where the chokepoints are)		* [mailto:silver@callysto.com Sean Howard] on ''How your ISP owns you'' (UW grad, ex Watsfic president, currently working for sentex.ca, knows details of Bell's network infrastructure and where the chokepoints are)
⚫	* nguenthe on ''[http://www.cypherpunks.ca/otr OTR]'' -- or IanG if we can get him!
	* nablack and m4farrel with a security demo + open ended question session		* nablack and m4farrel with a security demo + open ended question session
	* m4farrel on ''Secrets of a DDoS''		* m4farrel on ''Secrets of a DDoS''

Nguenthe at 07:04, 22 September 2013

2013-09-22T07:04:09Z

← Older revision		Revision as of 02:04, 22 September 2013
Line 73:		Line 73:
	[http://cm.bell-labs.com/who/ken/trust.html Ken Thompson - Reflections on Trusting Trust]		[http://cm.bell-labs.com/who/ken/trust.html Ken Thompson - Reflections on Trusting Trust]


			http://www.jbonneau.com/publications.html

	====Evidence====		====Evidence====