Your SlideShare is downloading. ×
CartoDrop: secure mapping and reporting over Tor
Upcoming SlideShare
Loading in...5
×

Thanks for flagging this SlideShare!

Oops! An error has occurred.

×

Saving this for later?

Get the SlideShare app to save on your phone or tablet. Read anywhere, anytime - even offline.

Text the download link to your phone

Standard text messaging rates apply

CartoDrop: secure mapping and reporting over Tor

203
views

Published on

How can we make OpenStreetMap more secure for users everywhere? And could we make a secure reporting tool for mappers? Ignite talk at SOTMUS 2014 DC

How can we make OpenStreetMap more secure for users everywhere? And could we make a secure reporting tool for mappers? Ignite talk at SOTMUS 2014 DC

Published in: Internet, Technology

0 Comments
0 Likes
Statistics
Notes
  • Be the first to comment

  • Be the first to like this

No Downloads
Views
Total Views
203
On Slideshare
0
From Embeds
0
Number of Embeds
1
Actions
Shares
0
Downloads
4
Comments
0
Likes
0
Embeds 0
No embeds

Report content
Flagged as inappropriate Flag as inappropriate
Flag as inappropriate

Select your reason for flagging this presentation as inappropriate.

Cancel
No notes for slide

Transcript

  • 1. CartoDrop
 mapping and reporting over Tor ! Nick Doiron - @mapmeld
  • 2. My background: maps
  • 3. Carto and Crypto At first glance, very different fields Six months in, still different
 ¯_(ツ)_/¯
  • 4. Who needs crypto?
  • 5. Not just NSA and USA NSA gets capabilities through contractors Software is resold to many countries Government-run ISPs
  • 6. With maps like these… Human rights violations Poaching and pollution Systemic bribery Political uncertainty Voter suppression Disease outbreaks
  • 7. HTTPS? HTTPS reveals you and your domain size of downloaded tiles can’t read messages… … unless someone gives up the key (ever)
  • 8. build on Uncensorable Twitter
 
 
 
 only protects distributor Decentralize?
  • 9. What does work?
  • 10. Sounds tricky…? Looks like Firefox Orbot for Android
  • 11. Disclaimer Do use public WiFi Don’t sign into your account Don’t do illegal stuff Don’t allow JavaScript
  • 12. -> SecureDropDemo.org <- ! Designed for journalists, already on FirstLook and WildLeaks
  • 13. Good and bad news JavaScript? NO APIs NO Secure passwords YES PGP encryption YES Air gap docs YES
  • 14. Maps break SecureDrop! Journalist needs to look up each coordinate: without a visual without software (can’t install on Tails) without the web
  • 15. Can we build crypto?
  • 16. Building CartoDrop OSM + NaturalEarth Mapnik Python Messages stay encrypted Source’s identity stays protected
  • 17. The <way/> forward
  • 18. Speak Freely @mapmeld
 on Twitter & Keybase