SlideShare a Scribd company logo
PUBLIC//NSI//ORNCON//YESFORN
By Ron Williams & Hyun Seo
TAKE BACK CONTROL IN
A POST-SNOWDEN WORLD
PUBLIC//NSI//ORNCON//YESFORN
The content and tools mentioned in this workshop are for educational purposes only.
We do not endorse or promote any specific products or tools.
Any opinions expressed are our own and are not intended
to reflect the views of our employer.
PUBLIC//NSI//ORNCON//YESFORN
Ron Williams
Architect, IBM Security
Hyun Seo
Designer, IBM Security
PUBLIC//NSI//ORNCON//YESFORN
Our mission...
PUBLIC//NSI//ORNCON//YESFORN
Security
Being free from danger and/or threat.
PUBLIC//NSI//ORNCON//YESFORN
Anonymity
Without any name acknowledged,
as that of author, contributor, or the like.
PUBLIC//NSI//ORNCON//YESFORN
Privacy
Being free from unwanted or undue intrusion or
disturbance in one’s life or affairs.
PUBLIC//NSI//ORNCON//YESFORN
We are not deliberately hiding anything when we
seek out private places for reflection or conversation.
We keep private journals, sing in the privacy of the
shower, and write letters to secret lovers and then
burn them. Privacy is a basic human need.
“
Bruce Schneier, Schneier on Security
”
PUBLIC//NSI//ORNCON//YESFORN
PUBLIC//NSI//ORNCON//YESFORN
Government, Personal,
Commercial, Criminal.
PUBLIC//NSI//ORNCON//YESFORN
Anytime you share information, you lose control over it.
PUBLIC//NSI//ORNCON//YESFORN
Legitimate* and illegitimate surveillance.
Employer, government (local, state, federal) agencies, criminals.
*Within the bounds of existing law.
PUBLIC//NSI//ORNCON//YESFORN
Automated surveillance techniques are not perfect.
Profiles (of employees, citizens) are developed from incomplete data.
PUBLIC//NSI//ORNCON//YESFORN
Government
Surveillance
PUBLIC//NSI//ORNCON//YESFORN
If I’m not doing anything wrong,
why should I care about government surveillance?
PUBLIC//NSI//ORNCON//YESFORN
December 7th, 1941
PUBLIC//NSI//ORNCON//YESFORN
“NATIONAL SECURITY”
PUBLIC//NSI//ORNCON//YESFORN
PUBLIC//NSI//ORNCON//YESFORN
Lavabit
PUBLIC//NSI//ORNCON//YESFORN
The government is constrained by law.
PUBLIC//NSI//ORNCON//YESFORN
The government is constrained by law. Today.
PUBLIC//NSI//ORNCON//YESFORN
PUBLIC//NSI//ORNCON//YESFORN
Commercial
Surveillance
PUBLIC//NSI//ORNCON//YESFORN
If you’re not paying for the product, you’re the product.
PUBLIC//NSI//ORNCON//YESFORN
Commercial
Social Media
Aggregation &
Analysis of User Data
Monetization of Analysis
Product Services
User market data
Retail optimization
Who
What
Why
PUBLIC//NSI//ORNCON//YESFORN
Employee
Browser activity
Information access and usage
Compliance monitoring
Social Media usage
Phone voice monitoring
Employee Monitoring
Who
What
Why Business Security
PUBLIC//NSI//ORNCON//YESFORN
Crime as a Service
PUBLIC//NSI//ORNCON//YESFORN
BOT-NET
OPERATOR
MALWARE
AUTHORS
VULNERABILITY
RESEARCHERS
BOT-NET
cCommerce
sales &
marketing
service catalog
advertising
finance
counter-surveillance
Services
ddos
spam
bot-net C&C
malware delivery
key logging
surveillance
credential theft
espionage
CaaS CONSUMER
PUBLIC//NSI//ORNCON//YESFORN
Reducing your
digital footprint
PUBLIC//NSI//ORNCON//YESFORN
Three can keep a secret, if two are dead.
“Benjamin Franklin
”
PUBLIC//NSI//ORNCON//YESFORN
Android
Email
Voice & SMS
IM
Mail Services
S/MIME, PGP
Signal
ChatSecure
ProtonMail, Tutanota, GhostMail
PUBLIC//NSI//ORNCON//YESFORN
iOS
Email
Voice & SMS
IM
Mail Services
S/MIME
Facetime, iMessage, Signal
iMessage
ProtonMail, Tutanota, GhostMail
PUBLIC//NSI//ORNCON//YESFORN
Traditional PC’s
Text & Files
IM
Mail Services
S/MIME, PGP
Off-the-record XMPP Protocol
ProtonMail, Tutanota, GhostMail
PUBLIC//NSI//ORNCON//YESFORN
Network
Router
Software
VPN
Passphrase
DNS
Don’t rent your router
Install an open source firmware
OpenVPN
Strong passphrase, disable “WPS”
OpenNIC, FreeDNS
PUBLIC//NSI//ORNCON//YESFORN
Digital Hygiene
PUBLIC//NSI//ORNCON//YESFORN
PUBLIC//NSI//ORNCON//YESFORN
Android
Device
Search
Browser
VPN
Other
Disable Backup, Turn off Location, Info Collection, and radios
DuckDuckGo, Disconnect.Me
ORFox & ORBot, Firefox
Anonymous VPN
Try to be “Google Play”-free
PUBLIC//NSI//ORNCON//YESFORN
iOS
Device
Search
Browser
VPN
Disable iCloud Backup, Turn off Location, Info Collection, and radios
DuckDuckGo, Disconnect.Me
Safari, Firefox
Anonymous VPN
PUBLIC//NSI//ORNCON//YESFORN
Traditional PC’s
Device
Search
Browser
VPN
Disable cloud backup, turn off location, Info Collection, and radios
DuckDuckGo, Disconnect.Me
Safari, Firefox, Chromium
Anonymous VPN
PUBLIC//NSI//ORNCON//YESFORN
Citizenfour & No Place To Hide
privacytools.io
PUBLIC//NSI//ORNCON//YESFORN
Thank you!
https://www.linkedin.com/in/rbwilliams https://www.linkedin.com/in/hyunseo
hi@hyun.ioron.williams@us.ibm.com
PUBLIC//NSI//ORNCON//YESFORN
http://pastebin.com/byUPX6Wm
Additional Information

More Related Content

Viewers also liked

Databases: Backup and Recovery
Databases: Backup and RecoveryDatabases: Backup and Recovery
Databases: Backup and Recovery
Damian T. Gordon
 
Snowden creates new headache Arise Roby
Snowden creates new headache   Arise RobySnowden creates new headache   Arise Roby
Snowden creates new headache Arise Roby
Arise Roby
 
Bus snowden presentation
Bus snowden presentationBus snowden presentation
Bus snowden presentation
CJW78755
 
Assange & Snowden
Assange & SnowdenAssange & Snowden
Assange & Snowden
Pearlyn Low
 
How to Program
How to ProgramHow to Program
How to Program
Damian T. Gordon
 
Software Testing 3/5
Software Testing 3/5Software Testing 3/5
Software Testing 3/5
Damian T. Gordon
 
The Post Snowden World One Year Later: What Has Changed?
The Post Snowden World One Year Later: What Has Changed?The Post Snowden World One Year Later: What Has Changed?
The Post Snowden World One Year Later: What Has Changed?
Christian Dawson
 
Alumni from snowden
Alumni from snowdenAlumni from snowden
Alumni from snowden
NEOA
 
Edward joseph snowden
Edward joseph snowdenEdward joseph snowden
Edward joseph snowden
Celina Anctil
 
Privacy post-Snowden
Privacy post-SnowdenPrivacy post-Snowden
Privacy post-Snowden
blogzilla
 
Keeping your files safe in the post-Snowden era with SXFS
Keeping your files safe in the post-Snowden era with SXFSKeeping your files safe in the post-Snowden era with SXFS
Keeping your files safe in the post-Snowden era with SXFS
Robert Wojciechowski
 
From Orwell to Snowden
From Orwell to SnowdenFrom Orwell to Snowden
From Orwell to Snowden
Francesco Giarola
 
Reigning in the Data (FOSSCON 2014) - Ephemeral Messaging and Privacy In Post...
Reigning in the Data (FOSSCON 2014) - Ephemeral Messaging and Privacy In Post...Reigning in the Data (FOSSCON 2014) - Ephemeral Messaging and Privacy In Post...
Reigning in the Data (FOSSCON 2014) - Ephemeral Messaging and Privacy In Post...
Andrew Schwabe
 
Ireland during WWII - in the 6 Hats style
Ireland during WWII - in the 6 Hats styleIreland during WWII - in the 6 Hats style
Ireland during WWII - in the 6 Hats style
Damian T. Gordon
 
Software Testing 2/5
Software Testing 2/5Software Testing 2/5
Software Testing 2/5
Damian T. Gordon
 
Databases: Denormalisation
Databases: DenormalisationDatabases: Denormalisation
Databases: Denormalisation
Damian T. Gordon
 
Software Testing 1/5
Software Testing 1/5Software Testing 1/5
Software Testing 1/5
Damian T. Gordon
 
Digital Citizenship and Surveillance Society: UK State-Media-Citizen Relation...
Digital Citizenship and Surveillance Society: UK State-Media-Citizen Relation...Digital Citizenship and Surveillance Society: UK State-Media-Citizen Relation...
Digital Citizenship and Surveillance Society: UK State-Media-Citizen Relation...
Karin Wahl-Jorgensen
 
Python: Access Control
Python: Access ControlPython: Access Control
Python: Access Control
Damian T. Gordon
 

Viewers also liked (19)

Databases: Backup and Recovery
Databases: Backup and RecoveryDatabases: Backup and Recovery
Databases: Backup and Recovery
 
Snowden creates new headache Arise Roby
Snowden creates new headache   Arise RobySnowden creates new headache   Arise Roby
Snowden creates new headache Arise Roby
 
Bus snowden presentation
Bus snowden presentationBus snowden presentation
Bus snowden presentation
 
Assange & Snowden
Assange & SnowdenAssange & Snowden
Assange & Snowden
 
How to Program
How to ProgramHow to Program
How to Program
 
Software Testing 3/5
Software Testing 3/5Software Testing 3/5
Software Testing 3/5
 
The Post Snowden World One Year Later: What Has Changed?
The Post Snowden World One Year Later: What Has Changed?The Post Snowden World One Year Later: What Has Changed?
The Post Snowden World One Year Later: What Has Changed?
 
Alumni from snowden
Alumni from snowdenAlumni from snowden
Alumni from snowden
 
Edward joseph snowden
Edward joseph snowdenEdward joseph snowden
Edward joseph snowden
 
Privacy post-Snowden
Privacy post-SnowdenPrivacy post-Snowden
Privacy post-Snowden
 
Keeping your files safe in the post-Snowden era with SXFS
Keeping your files safe in the post-Snowden era with SXFSKeeping your files safe in the post-Snowden era with SXFS
Keeping your files safe in the post-Snowden era with SXFS
 
From Orwell to Snowden
From Orwell to SnowdenFrom Orwell to Snowden
From Orwell to Snowden
 
Reigning in the Data (FOSSCON 2014) - Ephemeral Messaging and Privacy In Post...
Reigning in the Data (FOSSCON 2014) - Ephemeral Messaging and Privacy In Post...Reigning in the Data (FOSSCON 2014) - Ephemeral Messaging and Privacy In Post...
Reigning in the Data (FOSSCON 2014) - Ephemeral Messaging and Privacy In Post...
 
Ireland during WWII - in the 6 Hats style
Ireland during WWII - in the 6 Hats styleIreland during WWII - in the 6 Hats style
Ireland during WWII - in the 6 Hats style
 
Software Testing 2/5
Software Testing 2/5Software Testing 2/5
Software Testing 2/5
 
Databases: Denormalisation
Databases: DenormalisationDatabases: Denormalisation
Databases: Denormalisation
 
Software Testing 1/5
Software Testing 1/5Software Testing 1/5
Software Testing 1/5
 
Digital Citizenship and Surveillance Society: UK State-Media-Citizen Relation...
Digital Citizenship and Surveillance Society: UK State-Media-Citizen Relation...Digital Citizenship and Surveillance Society: UK State-Media-Citizen Relation...
Digital Citizenship and Surveillance Society: UK State-Media-Citizen Relation...
 
Python: Access Control
Python: Access ControlPython: Access Control
Python: Access Control
 

Recently uploaded

原版定制美国纽约州立大学奥尔巴尼分校毕业证学位证书原版一模一样
原版定制美国纽约州立大学奥尔巴尼分校毕业证学位证书原版一模一样原版定制美国纽约州立大学奥尔巴尼分校毕业证学位证书原版一模一样
原版定制美国纽约州立大学奥尔巴尼分校毕业证学位证书原版一模一样
mz5nrf0n
 
fiscal year variant fiscal year variant.
fiscal year variant fiscal year variant.fiscal year variant fiscal year variant.
fiscal year variant fiscal year variant.
AnkitaPandya11
 
How Can Hiring A Mobile App Development Company Help Your Business Grow?
How Can Hiring A Mobile App Development Company Help Your Business Grow?How Can Hiring A Mobile App Development Company Help Your Business Grow?
How Can Hiring A Mobile App Development Company Help Your Business Grow?
ToXSL Technologies
 
E-commerce Development Services- Hornet Dynamics
E-commerce Development Services- Hornet DynamicsE-commerce Development Services- Hornet Dynamics
E-commerce Development Services- Hornet Dynamics
Hornet Dynamics
 
KuberTENes Birthday Bash Guadalajara - Introducción a Argo CD
KuberTENes Birthday Bash Guadalajara - Introducción a Argo CDKuberTENes Birthday Bash Guadalajara - Introducción a Argo CD
KuberTENes Birthday Bash Guadalajara - Introducción a Argo CD
rodomar2
 
Fundamentals of Programming and Language Processors
Fundamentals of Programming and Language ProcessorsFundamentals of Programming and Language Processors
Fundamentals of Programming and Language Processors
Rakesh Kumar R
 
Preparing Non - Technical Founders for Engaging a Tech Agency
Preparing Non - Technical Founders for Engaging  a  Tech AgencyPreparing Non - Technical Founders for Engaging  a  Tech Agency
Preparing Non - Technical Founders for Engaging a Tech Agency
ISH Technologies
 
一比一原版(UMN毕业证)明尼苏达大学毕业证如何办理
一比一原版(UMN毕业证)明尼苏达大学毕业证如何办理一比一原版(UMN毕业证)明尼苏达大学毕业证如何办理
一比一原版(UMN毕业证)明尼苏达大学毕业证如何办理
dakas1
 
How to write a program in any programming language
How to write a program in any programming languageHow to write a program in any programming language
How to write a program in any programming language
Rakesh Kumar R
 
Oracle 23c New Features For DBAs and Developers.pptx
Oracle 23c New Features For DBAs and Developers.pptxOracle 23c New Features For DBAs and Developers.pptx
Oracle 23c New Features For DBAs and Developers.pptx
Remote DBA Services
 
Energy consumption of Database Management - Florina Jonuzi
Energy consumption of Database Management - Florina JonuziEnergy consumption of Database Management - Florina Jonuzi
Energy consumption of Database Management - Florina Jonuzi
Green Software Development
 
What next after learning python programming basics
What next after learning python programming basicsWhat next after learning python programming basics
What next after learning python programming basics
Rakesh Kumar R
 
Project Management: The Role of Project Dashboards.pdf
Project Management: The Role of Project Dashboards.pdfProject Management: The Role of Project Dashboards.pdf
Project Management: The Role of Project Dashboards.pdf
Karya Keeper
 
ALGIT - Assembly Line for Green IT - Numbers, Data, Facts
ALGIT - Assembly Line for Green IT - Numbers, Data, FactsALGIT - Assembly Line for Green IT - Numbers, Data, Facts
ALGIT - Assembly Line for Green IT - Numbers, Data, Facts
Green Software Development
 
如何办理(hull学位证书)英国赫尔大学毕业证硕士文凭原版一模一样
如何办理(hull学位证书)英国赫尔大学毕业证硕士文凭原版一模一样如何办理(hull学位证书)英国赫尔大学毕业证硕士文凭原版一模一样
如何办理(hull学位证书)英国赫尔大学毕业证硕士文凭原版一模一样
gapen1
 
Enums On Steroids - let's look at sealed classes !
Enums On Steroids - let's look at sealed classes !Enums On Steroids - let's look at sealed classes !
Enums On Steroids - let's look at sealed classes !
Marcin Chrost
 
Mobile App Development Company In Noida | Drona Infotech
Mobile App Development Company In Noida | Drona InfotechMobile App Development Company In Noida | Drona Infotech
Mobile App Development Company In Noida | Drona Infotech
Drona Infotech
 
UI5con 2024 - Bring Your Own Design System
UI5con 2024 - Bring Your Own Design SystemUI5con 2024 - Bring Your Own Design System
UI5con 2024 - Bring Your Own Design System
Peter Muessig
 
SQL Accounting Software Brochure Malaysia
SQL Accounting Software Brochure MalaysiaSQL Accounting Software Brochure Malaysia
SQL Accounting Software Brochure Malaysia
GohKiangHock
 
Everything You Need to Know About X-Sign: The eSign Functionality of XfilesPr...
Everything You Need to Know About X-Sign: The eSign Functionality of XfilesPr...Everything You Need to Know About X-Sign: The eSign Functionality of XfilesPr...
Everything You Need to Know About X-Sign: The eSign Functionality of XfilesPr...
XfilesPro
 

Recently uploaded (20)

原版定制美国纽约州立大学奥尔巴尼分校毕业证学位证书原版一模一样
原版定制美国纽约州立大学奥尔巴尼分校毕业证学位证书原版一模一样原版定制美国纽约州立大学奥尔巴尼分校毕业证学位证书原版一模一样
原版定制美国纽约州立大学奥尔巴尼分校毕业证学位证书原版一模一样
 
fiscal year variant fiscal year variant.
fiscal year variant fiscal year variant.fiscal year variant fiscal year variant.
fiscal year variant fiscal year variant.
 
How Can Hiring A Mobile App Development Company Help Your Business Grow?
How Can Hiring A Mobile App Development Company Help Your Business Grow?How Can Hiring A Mobile App Development Company Help Your Business Grow?
How Can Hiring A Mobile App Development Company Help Your Business Grow?
 
E-commerce Development Services- Hornet Dynamics
E-commerce Development Services- Hornet DynamicsE-commerce Development Services- Hornet Dynamics
E-commerce Development Services- Hornet Dynamics
 
KuberTENes Birthday Bash Guadalajara - Introducción a Argo CD
KuberTENes Birthday Bash Guadalajara - Introducción a Argo CDKuberTENes Birthday Bash Guadalajara - Introducción a Argo CD
KuberTENes Birthday Bash Guadalajara - Introducción a Argo CD
 
Fundamentals of Programming and Language Processors
Fundamentals of Programming and Language ProcessorsFundamentals of Programming and Language Processors
Fundamentals of Programming and Language Processors
 
Preparing Non - Technical Founders for Engaging a Tech Agency
Preparing Non - Technical Founders for Engaging  a  Tech AgencyPreparing Non - Technical Founders for Engaging  a  Tech Agency
Preparing Non - Technical Founders for Engaging a Tech Agency
 
一比一原版(UMN毕业证)明尼苏达大学毕业证如何办理
一比一原版(UMN毕业证)明尼苏达大学毕业证如何办理一比一原版(UMN毕业证)明尼苏达大学毕业证如何办理
一比一原版(UMN毕业证)明尼苏达大学毕业证如何办理
 
How to write a program in any programming language
How to write a program in any programming languageHow to write a program in any programming language
How to write a program in any programming language
 
Oracle 23c New Features For DBAs and Developers.pptx
Oracle 23c New Features For DBAs and Developers.pptxOracle 23c New Features For DBAs and Developers.pptx
Oracle 23c New Features For DBAs and Developers.pptx
 
Energy consumption of Database Management - Florina Jonuzi
Energy consumption of Database Management - Florina JonuziEnergy consumption of Database Management - Florina Jonuzi
Energy consumption of Database Management - Florina Jonuzi
 
What next after learning python programming basics
What next after learning python programming basicsWhat next after learning python programming basics
What next after learning python programming basics
 
Project Management: The Role of Project Dashboards.pdf
Project Management: The Role of Project Dashboards.pdfProject Management: The Role of Project Dashboards.pdf
Project Management: The Role of Project Dashboards.pdf
 
ALGIT - Assembly Line for Green IT - Numbers, Data, Facts
ALGIT - Assembly Line for Green IT - Numbers, Data, FactsALGIT - Assembly Line for Green IT - Numbers, Data, Facts
ALGIT - Assembly Line for Green IT - Numbers, Data, Facts
 
如何办理(hull学位证书)英国赫尔大学毕业证硕士文凭原版一模一样
如何办理(hull学位证书)英国赫尔大学毕业证硕士文凭原版一模一样如何办理(hull学位证书)英国赫尔大学毕业证硕士文凭原版一模一样
如何办理(hull学位证书)英国赫尔大学毕业证硕士文凭原版一模一样
 
Enums On Steroids - let's look at sealed classes !
Enums On Steroids - let's look at sealed classes !Enums On Steroids - let's look at sealed classes !
Enums On Steroids - let's look at sealed classes !
 
Mobile App Development Company In Noida | Drona Infotech
Mobile App Development Company In Noida | Drona InfotechMobile App Development Company In Noida | Drona Infotech
Mobile App Development Company In Noida | Drona Infotech
 
UI5con 2024 - Bring Your Own Design System
UI5con 2024 - Bring Your Own Design SystemUI5con 2024 - Bring Your Own Design System
UI5con 2024 - Bring Your Own Design System
 
SQL Accounting Software Brochure Malaysia
SQL Accounting Software Brochure MalaysiaSQL Accounting Software Brochure Malaysia
SQL Accounting Software Brochure Malaysia
 
Everything You Need to Know About X-Sign: The eSign Functionality of XfilesPr...
Everything You Need to Know About X-Sign: The eSign Functionality of XfilesPr...Everything You Need to Know About X-Sign: The eSign Functionality of XfilesPr...
Everything You Need to Know About X-Sign: The eSign Functionality of XfilesPr...
 

Take Back Control in a Post-Snowden World