becoming jack flack: real life cloak and dagger
DESCRIPTION
Are you on too many social networking sites? Have all of your exes found you on Facebook Are you worried the NSA is watching you? (They are!) If the fuzz came looking, how easy it would be for them to find you? We bring you this abridged guide to becoming (and staying) anonymous. Privacy is your right, anonymity is your path, and we will be your guide. We address anonymity at three progressively comprehensive levels – whether you just want to CLOAK your tracks, go undercover at the DAGGER level, or go completely off the grid and be a HERMIT. In this 50 minute session, arcon (Adam Bregenzer) and dr.kaos (Taylor Banks) explore some of the issues, challenges, and sacrifices you will encounter. After this talk, if you don’t cut up your credit cards, we will!TRANSCRIPT
The privacy and dignity of our citizens [are] being whittled away by sometimes imperceptible steps. Taken individually, each step may be of little consequence. But when viewed as a whole, there begins to emerge a society quite unlike any we have seen –– a society in which government may intrude into the secret regions of a [person’s] life.
- Justice William O. Douglas
1
Jack FlackBecoming Jack Flack
Taylor Banks kaos.theory Adam Bregenzer
Real Life Cloak & Dagger
2
JACK FDISCLAIMER
• IANAL - Consult an attorney!• This presentation should not be taken as advice.• Make your own moral and ethical decisions• We’re both from USA• Our only qualification is curiosity• We live on the grid. For now…
3
JACK FWhy be Anonymous?
“The right to be let alone is indeed the beginning of all freedom” - Justice William O. Douglas
• Everyone has the right to privacy • Anonymous ≠ law-breaker!• Requires intellect, desire,
diligence, and dedication
4
JACK FWho is Jack Flack?
• Cloak • Minimally anonymous• The NSA watches you
• Dagger• Moderately anonymous • More difficult• Potentially illegal• The NSA can find you
• Hermit• “Off the grid”• Completely invisible• Up to you who finds you
(but the NSA still knows where you are... )
5
JACK FJack Flack 101
• Must develop new habits, gets easier over time
• Be discreet when talking to others• Say as little as possible• Identity awareness• Use social engineering
• Look around!• Situational awareness• Look for and avoid
surveillance• Blend in, do not stand out• Ongoing process
6
JACK FGetting Started In Real Life
• Cancel all subscriptions• Forward mail to a
secondary address• Third-party
• Expunge legal and credit histories
• Place locks on credit files• Shred everything
7
JACK FGetting Started Online
• Eliminate online profiles• Friendster, MySpace,
Facebook, et. al.• godelete.com• yapzapp.com
• Clean up search history• Nothing in the cloud
• Host your own• Encrypt everything
• Everything in the cloud• Host nothing• Encrypt everything
• Format and reinstall8
CLOAKPart 1: Cloak
9
CloakBecoming Anonymous
• Make up a new name• FakeNameGenerator.com
• Alternative ID• Disposable email addresses
• Mailinator• Guerillamail• Gli.ph• Gmail, Hotmail, Yahoo
• Mail box rentals• Mailboxes, Etc.• Scanned mail service
10
Cloak• Single room occupancy
• Cash rent• Long-term sublet• Shared utilities
• Unregistered RV• Commune
• Kibbutz• Nudist colony• Don’t drink the Kool-
Aid!
Shelter
11
CloakMaking Money
• Jobs that pay cash• The world's oldest
profession• Day labor• Service industry• Graphics and web
design
• Jobs that pay cash• The world's oldest
profession• Day labor• Service industry• Graphics and web
design• Porn!
12
Cloak• Use Cash
• Money orders• Gift cards, use as CCs
• Classifieds, cash auctions• Check cashing services• Cryptocurrency
• Bitcoin• LTC, FTC, et. al.
• Sugar daddy
Using Money
13
Cloak• Public
• Buses & trains• Metro
• Cabs &gGypsy cabs• Greyhound• Carpool / rideshare• Vehicles w/o registration
• Bicycles• 50cc scooters
Transportation
14
CloakTracking
• Disable GPS devices• Disable bluetooth• Turn off when not in use• RFID tags
• RFID zapper• Use a shielded wallet
• Harden computers and smart phones
• ObscuraCam• Remote wipe - Tasker
15
Cloak• Telecom
• Don’t use IOS• Pay phones, burners• RedPhone• SilentCircle• TextSecure• Guardian project
• Internet• Use email lightly• IRC / Usenet• BitMessage
• Encryption• OTR, PGP / GPG
Communications
16
CloakOnline
• Public kiosks, local wifi• Use a Live CD• Use tor + privoxy• Enable safe browsing• Anonymous searching
• startpage• googlesharing• customize google
17
CloakOnline
• Proxies• proxychain• rmccurdy.com
• MyPrivateProxy.net• VPN
• AirVPN• CryptoHippie• Perfect Privacy
• Networks• tor• I2P• FreeNet
18
DAGGERPart 2: Dagger
19
DaggerBecoming Anonymous
• Change your name• New driver's license• New SSN, if possible• Form an LLC
• Adds a layer of protection
• Not impenetrable• Disposable email
addresses• Mailinator, Guerillamail,
Gli.ph• Gmail, Hotmail, Yahoo
for your corporation
20
Dagger• Weekly rentals• Houseboats• Travel continuously
• Couch surfing• Hostels• Shelters• Public parks• Squatting
Shelter
21
DaggerSocial Interaction
• Use disguises in public• No long term communities• Use a proxy• Avoid people• Avoid all social networking• Avoid all publicity
22
Dagger• Cash jobs ala Cloak• Use your corporation
• OK to create tracks• Short term B2B• Affiliate marketing
• Confidence schemes
Making Money
23
Dagger• Paypal corporate• Money orders• Cashier's checks
• Offshore accounts• Trade in debt• Tony’s
Using Money
24
Dagger• Travel in disguise
• Wear hats and glasses• Pre-determine camera
locations• Avoid frequent mass-transit• Unregistered vehicles
• Boats, scooters, etc.• Unregistered car, RV
• "Throw away" cars• Rental car
Transportation
25
DaggerTracking
• NO GPS• Disable cell phone when
possible• Disable wifi, bluetooth, *G• Beware of misc electronic
devices• Protect against RFID tags• Tinfoil hat
26
DaggerCommunications
• Telecom• Phreaking• Voice over IP• Hosted VoIP• BYO VoIP
• Internet• Usenet, IRC+OTR
• Encryption• Zfone• OTR• Steganography
27
DaggerOnline
• Getting online• Hotel lobbies,
restaurants, free wifi• Prepaid SIMs for data• Netbook + encrypted
SSD, USB• Use tor, proxies• Anonymous searching • Anonymous remailers
• Host Your Own• Data scrub drives often• Strong destruction plan
28
DaggerOnline
• Encrypted Data• Tarsnap• TrueCrypt• WDE, VPS
• LeastAuthority• JungleDisk• SpiderOak• CrashPlan
29
HERMITPart 3: Hermit
30
Hermit• No ID, in the event of
apprehension• Alter fingerprints• Cut up all cards• Cancel all services• Sell registered properties• Terminate all contracts• Distance yourself from
family and friends• Fake your own death
Becoming Anonymous
31
HermitShelter
32
Hermit• Cash jobs ala Cloak• Panhandle• Hook• Street performer / carnie
• Fortune telling• Music• Dancing
• Don’t work!
Making Money
33
Hermit• Cash• Bartering
• Flea markets• Classifieds• Freecycle
• Self-Sustainment• Grow your own• Alternative energy• Make your own goods
Using Money
34
Hermit• Travel
• Walk• Bicycle• Hitchhike• Greyhound• Stowaway
• Don’t Travel
Transportation
35
HermitCommunications
• Telecom• Payphones• Burners
• Internet• Infrequently
• Encryption• OTR• Steganography
36
HermitOnline
• Getting online• public kiosks• Use tor, proxies• Anonymous searching
• Everything in the cloud• portable tor• portable firefox w/
plugins• portable truecrypt
• Avoid!
37
JACK FThe Rules
• 1st rule:• 2nd rule: • 3rd rule:• 4th rule:• 5th rule:
• 6th rule:• 7th rule:• 8th rule:
Do not be your identityDO NOT be your identity Get rid of your paper trailUse cashConstantly improve your situational awarenessBlend inEncrypt everythingPay your taxes! ;)
38
JACK FThanks!
Beth and Peterrmccurdy
phreakmonkeyHacker Halted
Those who came before us!
“My ideas are way out of line with current trends, and I see no particular point in staying around and being obnoxious.”- Justice William O. Douglas
http://kaos.to/jackflack39