keynote the grugq opsec for russians
Post on 19-Oct-2014
3.540 views
DESCRIPTION
TRANSCRIPT
![Page 1: Keynote the grugq opsec for russians](https://reader034.vdocuments.net/reader034/viewer/2022042507/5443a95db1af9f740a8b45fb/html5/thumbnails/1.jpg)
OPSEC for hackers: because jail is for
РУССКИХ
Monday, November 19, 12
![Page 2: Keynote the grugq opsec for russians](https://reader034.vdocuments.net/reader034/viewer/2022042507/5443a95db1af9f740a8b45fb/html5/thumbnails/2.jpg)
Overview
• Intro to OPSEC
• Methodology
• lulzsec: lessons learned
• Techniques
• Technology
• Conclusion
Monday, November 19, 12
![Page 3: Keynote the grugq opsec for russians](https://reader034.vdocuments.net/reader034/viewer/2022042507/5443a95db1af9f740a8b45fb/html5/thumbnails/3.jpg)
Avon: You only got to fuck up once… Be a little slow, be a little late, just once. How you ain’t gonna never be slow? Never be late? You can’t plan for that. Thats life.
Monday, November 19, 12
![Page 4: Keynote the grugq opsec for russians](https://reader034.vdocuments.net/reader034/viewer/2022042507/5443a95db1af9f740a8b45fb/html5/thumbnails/4.jpg)
Intro to OPSEC
Monday, November 19, 12
![Page 5: Keynote the grugq opsec for russians](https://reader034.vdocuments.net/reader034/viewer/2022042507/5443a95db1af9f740a8b45fb/html5/thumbnails/5.jpg)
WTF is it?
Monday, November 19, 12
![Page 6: Keynote the grugq opsec for russians](https://reader034.vdocuments.net/reader034/viewer/2022042507/5443a95db1af9f740a8b45fb/html5/thumbnails/6.jpg)
OPSEC in a nutshell
• Keep your mouth shut
• Guard secrets
• Need to know
• Never let anyone get into position to blackmail you
Monday, November 19, 12
![Page 7: Keynote the grugq opsec for russians](https://reader034.vdocuments.net/reader034/viewer/2022042507/5443a95db1af9f740a8b45fb/html5/thumbnails/7.jpg)
STFU
Monday, November 19, 12
![Page 8: Keynote the grugq opsec for russians](https://reader034.vdocuments.net/reader034/viewer/2022042507/5443a95db1af9f740a8b45fb/html5/thumbnails/8.jpg)
Monday, November 19, 12
![Page 9: Keynote the grugq opsec for russians](https://reader034.vdocuments.net/reader034/viewer/2022042507/5443a95db1af9f740a8b45fb/html5/thumbnails/9.jpg)
Monday, November 19, 12
![Page 10: Keynote the grugq opsec for russians](https://reader034.vdocuments.net/reader034/viewer/2022042507/5443a95db1af9f740a8b45fb/html5/thumbnails/10.jpg)
Monday, November 19, 12
![Page 11: Keynote the grugq opsec for russians](https://reader034.vdocuments.net/reader034/viewer/2022042507/5443a95db1af9f740a8b45fb/html5/thumbnails/11.jpg)
Methodology
Monday, November 19, 12
![Page 12: Keynote the grugq opsec for russians](https://reader034.vdocuments.net/reader034/viewer/2022042507/5443a95db1af9f740a8b45fb/html5/thumbnails/12.jpg)
• put the plumbing in first
• create a cover (new persona)
• work on the legend (history, background, supporting evidence for the persona)
• Create sub-aliases
• NEVER CONTAMINATE
Monday, November 19, 12
![Page 13: Keynote the grugq opsec for russians](https://reader034.vdocuments.net/reader034/viewer/2022042507/5443a95db1af9f740a8b45fb/html5/thumbnails/13.jpg)
The 10 Hack Commandments
FREEDOM FIGHTING
Monday, November 19, 12
![Page 14: Keynote the grugq opsec for russians](https://reader034.vdocuments.net/reader034/viewer/2022042507/5443a95db1af9f740a8b45fb/html5/thumbnails/14.jpg)
• Rule 1: Never reveal your operational details
• Rule 2: Never reveal your plans
• Rule 3: Never trust anyone
• Rule 4: Never confuse recreation and hacking
• Rule 5: Never operate from your own house
FREEDOM FIGHTING
Monday, November 19, 12
![Page 15: Keynote the grugq opsec for russians](https://reader034.vdocuments.net/reader034/viewer/2022042507/5443a95db1af9f740a8b45fb/html5/thumbnails/15.jpg)
• Rule 6: Be proactively paranoid, it doesn’t work retroactively
• Rule 7: Keep personal life and hacking separated
• Rule 8: Keep your personal environment contraband free
• Rule 9: Don’t attract attention
• Rule 10: Don't give anyone power over you
FREEDOM FIGHTING
Monday, November 19, 12
![Page 16: Keynote the grugq opsec for russians](https://reader034.vdocuments.net/reader034/viewer/2022042507/5443a95db1af9f740a8b45fb/html5/thumbnails/16.jpg)
Why do you need OPSEC?
Monday, November 19, 12
![Page 17: Keynote the grugq opsec for russians](https://reader034.vdocuments.net/reader034/viewer/2022042507/5443a95db1af9f740a8b45fb/html5/thumbnails/17.jpg)
ProTip: Cover the webcam on your laptop.
Monday, November 19, 12
![Page 18: Keynote the grugq opsec for russians](https://reader034.vdocuments.net/reader034/viewer/2022042507/5443a95db1af9f740a8b45fb/html5/thumbnails/18.jpg)
It hurts to get fucked
Monday, November 19, 12
![Page 19: Keynote the grugq opsec for russians](https://reader034.vdocuments.net/reader034/viewer/2022042507/5443a95db1af9f740a8b45fb/html5/thumbnails/19.jpg)
No one is going to go to jail for you.
Monday, November 19, 12
![Page 20: Keynote the grugq opsec for russians](https://reader034.vdocuments.net/reader034/viewer/2022042507/5443a95db1af9f740a8b45fb/html5/thumbnails/20.jpg)
Monday, November 19, 12
![Page 21: Keynote the grugq opsec for russians](https://reader034.vdocuments.net/reader034/viewer/2022042507/5443a95db1af9f740a8b45fb/html5/thumbnails/21.jpg)
Your friends will betray you.
Monday, November 19, 12
![Page 22: Keynote the grugq opsec for russians](https://reader034.vdocuments.net/reader034/viewer/2022042507/5443a95db1af9f740a8b45fb/html5/thumbnails/22.jpg)
#lulzsec:lessons learned
Monday, November 19, 12
![Page 23: Keynote the grugq opsec for russians](https://reader034.vdocuments.net/reader034/viewer/2022042507/5443a95db1af9f740a8b45fb/html5/thumbnails/23.jpg)
Monday, November 19, 12
![Page 24: Keynote the grugq opsec for russians](https://reader034.vdocuments.net/reader034/viewer/2022042507/5443a95db1af9f740a8b45fb/html5/thumbnails/24.jpg)
Violation
Never trust anyone
Monday, November 19, 12
![Page 25: Keynote the grugq opsec for russians](https://reader034.vdocuments.net/reader034/viewer/2022042507/5443a95db1af9f740a8b45fb/html5/thumbnails/25.jpg)
ProTip: Don’t use your personal Facebook account to send defacement code to your friendsFREEDOM FIGHTERS
Monday, November 19, 12
![Page 26: Keynote the grugq opsec for russians](https://reader034.vdocuments.net/reader034/viewer/2022042507/5443a95db1af9f740a8b45fb/html5/thumbnails/26.jpg)
ProTip: Don’t use your real first name as your username
Monday, November 19, 12
![Page 27: Keynote the grugq opsec for russians](https://reader034.vdocuments.net/reader034/viewer/2022042507/5443a95db1af9f740a8b45fb/html5/thumbnails/27.jpg)
Violation
Don’t contaminate
Monday, November 19, 12
![Page 28: Keynote the grugq opsec for russians](https://reader034.vdocuments.net/reader034/viewer/2022042507/5443a95db1af9f740a8b45fb/html5/thumbnails/28.jpg)
Monday, November 19, 12
![Page 29: Keynote the grugq opsec for russians](https://reader034.vdocuments.net/reader034/viewer/2022042507/5443a95db1af9f740a8b45fb/html5/thumbnails/29.jpg)
Violation
Don’t contaminate
Monday, November 19, 12
![Page 30: Keynote the grugq opsec for russians](https://reader034.vdocuments.net/reader034/viewer/2022042507/5443a95db1af9f740a8b45fb/html5/thumbnails/30.jpg)
Monday, November 19, 12
![Page 31: Keynote the grugq opsec for russians](https://reader034.vdocuments.net/reader034/viewer/2022042507/5443a95db1af9f740a8b45fb/html5/thumbnails/31.jpg)
Violation
Keep personal life and hacking separateFREEDOM FIGHTING
Monday, November 19, 12
![Page 32: Keynote the grugq opsec for russians](https://reader034.vdocuments.net/reader034/viewer/2022042507/5443a95db1af9f740a8b45fb/html5/thumbnails/32.jpg)
ProTip: Don’t connect to your target directly from your home IP address
Monday, November 19, 12
![Page 33: Keynote the grugq opsec for russians](https://reader034.vdocuments.net/reader034/viewer/2022042507/5443a95db1af9f740a8b45fb/html5/thumbnails/33.jpg)
Violation
Never operate from your home
Monday, November 19, 12
![Page 34: Keynote the grugq opsec for russians](https://reader034.vdocuments.net/reader034/viewer/2022042507/5443a95db1af9f740a8b45fb/html5/thumbnails/34.jpg)
Monday, November 19, 12
![Page 35: Keynote the grugq opsec for russians](https://reader034.vdocuments.net/reader034/viewer/2022042507/5443a95db1af9f740a8b45fb/html5/thumbnails/35.jpg)
Violation
Never operate from your home
Monday, November 19, 12
![Page 36: Keynote the grugq opsec for russians](https://reader034.vdocuments.net/reader034/viewer/2022042507/5443a95db1af9f740a8b45fb/html5/thumbnails/36.jpg)
Monday, November 19, 12
![Page 37: Keynote the grugq opsec for russians](https://reader034.vdocuments.net/reader034/viewer/2022042507/5443a95db1af9f740a8b45fb/html5/thumbnails/37.jpg)
Violation
Don’t reveal operational details
Monday, November 19, 12
![Page 38: Keynote the grugq opsec for russians](https://reader034.vdocuments.net/reader034/viewer/2022042507/5443a95db1af9f740a8b45fb/html5/thumbnails/38.jpg)
Monday, November 19, 12
![Page 39: Keynote the grugq opsec for russians](https://reader034.vdocuments.net/reader034/viewer/2022042507/5443a95db1af9f740a8b45fb/html5/thumbnails/39.jpg)
Monday, November 19, 12
![Page 40: Keynote the grugq opsec for russians](https://reader034.vdocuments.net/reader034/viewer/2022042507/5443a95db1af9f740a8b45fb/html5/thumbnails/40.jpg)
Monday, November 19, 12
![Page 41: Keynote the grugq opsec for russians](https://reader034.vdocuments.net/reader034/viewer/2022042507/5443a95db1af9f740a8b45fb/html5/thumbnails/41.jpg)
Violation
Don’t reveal operational details
Monday, November 19, 12
![Page 42: Keynote the grugq opsec for russians](https://reader034.vdocuments.net/reader034/viewer/2022042507/5443a95db1af9f740a8b45fb/html5/thumbnails/42.jpg)
Monday, November 19, 12
![Page 43: Keynote the grugq opsec for russians](https://reader034.vdocuments.net/reader034/viewer/2022042507/5443a95db1af9f740a8b45fb/html5/thumbnails/43.jpg)
Monday, November 19, 12
![Page 44: Keynote the grugq opsec for russians](https://reader034.vdocuments.net/reader034/viewer/2022042507/5443a95db1af9f740a8b45fb/html5/thumbnails/44.jpg)
Violation
Be paranoid
Monday, November 19, 12
![Page 45: Keynote the grugq opsec for russians](https://reader034.vdocuments.net/reader034/viewer/2022042507/5443a95db1af9f740a8b45fb/html5/thumbnails/45.jpg)
Virus (10:30:18 PM): don't start accusing me of [being an informant] - especially after you disappeared and came back offering to pay me for shit - that's fed tacticsVirus (10:30:31 PM): and then your buddy, topiary, who lives in the most random placeVirus (10:30:36 PM): who's docs weren't even publicVirus (10:30:38 PM): gets ownedSabu (10:32:29 PM): offering to pay you for shit?Virus (10:32:55 PM): yeah, you offered me money for "dox"Virus (10:33:39 PM): only informants offer up cash for shit -- you gave yourself up with that one
Monday, November 19, 12
![Page 46: Keynote the grugq opsec for russians](https://reader034.vdocuments.net/reader034/viewer/2022042507/5443a95db1af9f740a8b45fb/html5/thumbnails/46.jpg)
HAPPY ENDING
Virus is still free
Monday, November 19, 12
![Page 47: Keynote the grugq opsec for russians](https://reader034.vdocuments.net/reader034/viewer/2022042507/5443a95db1af9f740a8b45fb/html5/thumbnails/47.jpg)
Monday, November 19, 12
![Page 48: Keynote the grugq opsec for russians](https://reader034.vdocuments.net/reader034/viewer/2022042507/5443a95db1af9f740a8b45fb/html5/thumbnails/48.jpg)
Violation
Never contaminate
Monday, November 19, 12
![Page 49: Keynote the grugq opsec for russians](https://reader034.vdocuments.net/reader034/viewer/2022042507/5443a95db1af9f740a8b45fb/html5/thumbnails/49.jpg)
Monday, November 19, 12
![Page 50: Keynote the grugq opsec for russians](https://reader034.vdocuments.net/reader034/viewer/2022042507/5443a95db1af9f740a8b45fb/html5/thumbnails/50.jpg)
Bonus: w0rmerMonday, November 19, 12
![Page 51: Keynote the grugq opsec for russians](https://reader034.vdocuments.net/reader034/viewer/2022042507/5443a95db1af9f740a8b45fb/html5/thumbnails/51.jpg)
Monday, November 19, 12
![Page 52: Keynote the grugq opsec for russians](https://reader034.vdocuments.net/reader034/viewer/2022042507/5443a95db1af9f740a8b45fb/html5/thumbnails/52.jpg)
Monday, November 19, 12
![Page 53: Keynote the grugq opsec for russians](https://reader034.vdocuments.net/reader034/viewer/2022042507/5443a95db1af9f740a8b45fb/html5/thumbnails/53.jpg)
Monday, November 19, 12
![Page 54: Keynote the grugq opsec for russians](https://reader034.vdocuments.net/reader034/viewer/2022042507/5443a95db1af9f740a8b45fb/html5/thumbnails/54.jpg)
Techniques
Monday, November 19, 12
![Page 55: Keynote the grugq opsec for russians](https://reader034.vdocuments.net/reader034/viewer/2022042507/5443a95db1af9f740a8b45fb/html5/thumbnails/55.jpg)
Plumbing
Monday, November 19, 12
![Page 56: Keynote the grugq opsec for russians](https://reader034.vdocuments.net/reader034/viewer/2022042507/5443a95db1af9f740a8b45fb/html5/thumbnails/56.jpg)
It is boring.
Monday, November 19, 12
![Page 57: Keynote the grugq opsec for russians](https://reader034.vdocuments.net/reader034/viewer/2022042507/5443a95db1af9f740a8b45fb/html5/thumbnails/57.jpg)
You’ll know it worked if nothing happens.
Monday, November 19, 12
![Page 58: Keynote the grugq opsec for russians](https://reader034.vdocuments.net/reader034/viewer/2022042507/5443a95db1af9f740a8b45fb/html5/thumbnails/58.jpg)
Put it in place first.
Monday, November 19, 12
![Page 59: Keynote the grugq opsec for russians](https://reader034.vdocuments.net/reader034/viewer/2022042507/5443a95db1af9f740a8b45fb/html5/thumbnails/59.jpg)
Paranoia doesn’t work retroactively
Monday, November 19, 12
![Page 60: Keynote the grugq opsec for russians](https://reader034.vdocuments.net/reader034/viewer/2022042507/5443a95db1af9f740a8b45fb/html5/thumbnails/60.jpg)
Personas
Monday, November 19, 12
![Page 61: Keynote the grugq opsec for russians](https://reader034.vdocuments.net/reader034/viewer/2022042507/5443a95db1af9f740a8b45fb/html5/thumbnails/61.jpg)
Spiros: He knows my name, but my name is not my name. And you... to them you're only "The Greek."The Greek: And, of course, I'm not even Greek.
Monday, November 19, 12
![Page 62: Keynote the grugq opsec for russians](https://reader034.vdocuments.net/reader034/viewer/2022042507/5443a95db1af9f740a8b45fb/html5/thumbnails/62.jpg)
Problem: You are you.
Monday, November 19, 12
![Page 63: Keynote the grugq opsec for russians](https://reader034.vdocuments.net/reader034/viewer/2022042507/5443a95db1af9f740a8b45fb/html5/thumbnails/63.jpg)
Monday, November 19, 12
![Page 64: Keynote the grugq opsec for russians](https://reader034.vdocuments.net/reader034/viewer/2022042507/5443a95db1af9f740a8b45fb/html5/thumbnails/64.jpg)
Solution: Be someone else.
Monday, November 19, 12
![Page 65: Keynote the grugq opsec for russians](https://reader034.vdocuments.net/reader034/viewer/2022042507/5443a95db1af9f740a8b45fb/html5/thumbnails/65.jpg)
Monday, November 19, 12
![Page 66: Keynote the grugq opsec for russians](https://reader034.vdocuments.net/reader034/viewer/2022042507/5443a95db1af9f740a8b45fb/html5/thumbnails/66.jpg)
Personas
• Danger to personas is contamination
• Contact between personas (covers) contaminates both
• Keep cover identities isolated from each other
Monday, November 19, 12
![Page 67: Keynote the grugq opsec for russians](https://reader034.vdocuments.net/reader034/viewer/2022042507/5443a95db1af9f740a8b45fb/html5/thumbnails/67.jpg)
Layered defense
Monday, November 19, 12
![Page 68: Keynote the grugq opsec for russians](https://reader034.vdocuments.net/reader034/viewer/2022042507/5443a95db1af9f740a8b45fb/html5/thumbnails/68.jpg)
• Fail safe technological solution
• TOR all the things!
• Back stop persona
• Primary cover alias as first identity
• Secondary cover aliases (eg. handles)
Monday, November 19, 12
![Page 69: Keynote the grugq opsec for russians](https://reader034.vdocuments.net/reader034/viewer/2022042507/5443a95db1af9f740a8b45fb/html5/thumbnails/69.jpg)
Profiling data
Monday, November 19, 12
![Page 70: Keynote the grugq opsec for russians](https://reader034.vdocuments.net/reader034/viewer/2022042507/5443a95db1af9f740a8b45fb/html5/thumbnails/70.jpg)
• Location revealing information
• Weather
• Time
• Political events
• Profiling data
Pitfalls
Monday, November 19, 12
![Page 71: Keynote the grugq opsec for russians](https://reader034.vdocuments.net/reader034/viewer/2022042507/5443a95db1af9f740a8b45fb/html5/thumbnails/71.jpg)
Practice
Amateurs practice until they get it right
Professionals practice until they can’t get it wrong
Monday, November 19, 12
![Page 72: Keynote the grugq opsec for russians](https://reader034.vdocuments.net/reader034/viewer/2022042507/5443a95db1af9f740a8b45fb/html5/thumbnails/72.jpg)
Stringer: What you doing?Shamrock: Robert's Rules says we got to have minutes of the meeting. These the minutes.Stringer: Nigga, is you taking notes on a criminal fucking conspiracy?
Monday, November 19, 12
![Page 73: Keynote the grugq opsec for russians](https://reader034.vdocuments.net/reader034/viewer/2022042507/5443a95db1af9f740a8b45fb/html5/thumbnails/73.jpg)
No logs. No crime.
Monday, November 19, 12
![Page 74: Keynote the grugq opsec for russians](https://reader034.vdocuments.net/reader034/viewer/2022042507/5443a95db1af9f740a8b45fb/html5/thumbnails/74.jpg)
Staying AnonymousMonday, November 19, 12
![Page 75: Keynote the grugq opsec for russians](https://reader034.vdocuments.net/reader034/viewer/2022042507/5443a95db1af9f740a8b45fb/html5/thumbnails/75.jpg)
Personal info is profiling info
Monday, November 19, 12
![Page 76: Keynote the grugq opsec for russians](https://reader034.vdocuments.net/reader034/viewer/2022042507/5443a95db1af9f740a8b45fb/html5/thumbnails/76.jpg)
Anti-Profiling Guidelines
• Do not include personal information in your nick and screen name.
• Do not discuss personal information in the chat, where you are from...
Monday, November 19, 12
![Page 77: Keynote the grugq opsec for russians](https://reader034.vdocuments.net/reader034/viewer/2022042507/5443a95db1af9f740a8b45fb/html5/thumbnails/77.jpg)
Anti-Profiling Guidelines
• Do not mention identifying details, e.g. your gender, tattoos, piercings or physical capacities
• Do not mention your profession, hobbies, involvement in political/activist groups
Monday, November 19, 12
![Page 78: Keynote the grugq opsec for russians](https://reader034.vdocuments.net/reader034/viewer/2022042507/5443a95db1af9f740a8b45fb/html5/thumbnails/78.jpg)
Anti-Location Profiling Guidelines
• Do not use special characters on your keyboard unique to your language
• Do not keep regular hours / habits (this can reveal your timezone, geographic locale)
• Do not discuss the environment, e.g. weather, political activities, etc
• Don’t talk about the weather!
Monday, November 19, 12
![Page 79: Keynote the grugq opsec for russians](https://reader034.vdocuments.net/reader034/viewer/2022042507/5443a95db1af9f740a8b45fb/html5/thumbnails/79.jpg)
Anti Contamination Guidelines
• Do not use Twitter and Facebook
• Never post links to Facebook images.
• Do not post informations to the regular internet while you are anonymous in IRC.
Monday, November 19, 12
![Page 80: Keynote the grugq opsec for russians](https://reader034.vdocuments.net/reader034/viewer/2022042507/5443a95db1af9f740a8b45fb/html5/thumbnails/80.jpg)
Monday, November 19, 12
![Page 81: Keynote the grugq opsec for russians](https://reader034.vdocuments.net/reader034/viewer/2022042507/5443a95db1af9f740a8b45fb/html5/thumbnails/81.jpg)
Hackers are no longer the apex predator
FREEDOM FIGHTERS
Monday, November 19, 12
![Page 82: Keynote the grugq opsec for russians](https://reader034.vdocuments.net/reader034/viewer/2022042507/5443a95db1af9f740a8b45fb/html5/thumbnails/82.jpg)
That position has been ceded to LEO
*Law Enforcement Officials
*
Monday, November 19, 12
![Page 83: Keynote the grugq opsec for russians](https://reader034.vdocuments.net/reader034/viewer/2022042507/5443a95db1af9f740a8b45fb/html5/thumbnails/83.jpg)
Technology
Monday, November 19, 12
![Page 84: Keynote the grugq opsec for russians](https://reader034.vdocuments.net/reader034/viewer/2022042507/5443a95db1af9f740a8b45fb/html5/thumbnails/84.jpg)
• Operations Platform
• Console for accessing your staging box
• Staging Platform / Launch Pad
• Box with attack tools
• Bounces
• Reach your target objectives without leaving a trail
Monday, November 19, 12
![Page 85: Keynote the grugq opsec for russians](https://reader034.vdocuments.net/reader034/viewer/2022042507/5443a95db1af9f740a8b45fb/html5/thumbnails/85.jpg)
Operations Platform
Monday, November 19, 12
![Page 86: Keynote the grugq opsec for russians](https://reader034.vdocuments.net/reader034/viewer/2022042507/5443a95db1af9f740a8b45fb/html5/thumbnails/86.jpg)
• Essentially a modern VT100
• Provides access to operational resources
• Non incriminating, ideally dual use, device
• RaspberryPi, AllWinner miniPC, etc.
Monday, November 19, 12
![Page 87: Keynote the grugq opsec for russians](https://reader034.vdocuments.net/reader034/viewer/2022042507/5443a95db1af9f740a8b45fb/html5/thumbnails/87.jpg)
+
+ =
Monday, November 19, 12
![Page 88: Keynote the grugq opsec for russians](https://reader034.vdocuments.net/reader034/viewer/2022042507/5443a95db1af9f740a8b45fb/html5/thumbnails/88.jpg)
Operations Box
Monday, November 19, 12
![Page 89: Keynote the grugq opsec for russians](https://reader034.vdocuments.net/reader034/viewer/2022042507/5443a95db1af9f740a8b45fb/html5/thumbnails/89.jpg)
Staging Platform
Monday, November 19, 12
![Page 90: Keynote the grugq opsec for russians](https://reader034.vdocuments.net/reader034/viewer/2022042507/5443a95db1af9f740a8b45fb/html5/thumbnails/90.jpg)
• Jump box
• The first stop from the operations platform
• Not used directly for attacks, this is $HOME
• Storage for logs, data and tools
Monday, November 19, 12
![Page 91: Keynote the grugq opsec for russians](https://reader034.vdocuments.net/reader034/viewer/2022042507/5443a95db1af9f740a8b45fb/html5/thumbnails/91.jpg)
Launch Pad
Monday, November 19, 12
![Page 92: Keynote the grugq opsec for russians](https://reader034.vdocuments.net/reader034/viewer/2022042507/5443a95db1af9f740a8b45fb/html5/thumbnails/92.jpg)
• Used for launching attacks
• Disposable
• Maybe in China?
Monday, November 19, 12
![Page 93: Keynote the grugq opsec for russians](https://reader034.vdocuments.net/reader034/viewer/2022042507/5443a95db1af9f740a8b45fb/html5/thumbnails/93.jpg)
>_
$HOME lp
Monday, November 19, 12
![Page 94: Keynote the grugq opsec for russians](https://reader034.vdocuments.net/reader034/viewer/2022042507/5443a95db1af9f740a8b45fb/html5/thumbnails/94.jpg)
Bounces
Monday, November 19, 12
![Page 95: Keynote the grugq opsec for russians](https://reader034.vdocuments.net/reader034/viewer/2022042507/5443a95db1af9f740a8b45fb/html5/thumbnails/95.jpg)
VPNs vs. TOR
• VPNs provide privacy
• TOR provides anonymity
• Confuse the two at your peril
Monday, November 19, 12
![Page 96: Keynote the grugq opsec for russians](https://reader034.vdocuments.net/reader034/viewer/2022042507/5443a95db1af9f740a8b45fb/html5/thumbnails/96.jpg)
• TOR connection to a VPN => OK
• VPN connection to TOR => GOTO JAIL
Monday, November 19, 12
![Page 97: Keynote the grugq opsec for russians](https://reader034.vdocuments.net/reader034/viewer/2022042507/5443a95db1af9f740a8b45fb/html5/thumbnails/97.jpg)
On VPNs
• Only safe currency is Bitcoins
• “Because they come from nothing”
• Purchase only over TOR
• http://torrentfreak.com/which-vpn-providers-really-take-anonymity-seriously-111007/
Monday, November 19, 12
![Page 98: Keynote the grugq opsec for russians](https://reader034.vdocuments.net/reader034/viewer/2022042507/5443a95db1af9f740a8b45fb/html5/thumbnails/98.jpg)
On Bitcoins
• Bitcoins are anonymous, not private
• They can be traced
• Unique, uncontaminated, wallet per cover
• Use mixers to sanitize BTC
Monday, November 19, 12
![Page 99: Keynote the grugq opsec for russians](https://reader034.vdocuments.net/reader034/viewer/2022042507/5443a95db1af9f740a8b45fb/html5/thumbnails/99.jpg)
Monday, November 19, 12
![Page 100: Keynote the grugq opsec for russians](https://reader034.vdocuments.net/reader034/viewer/2022042507/5443a95db1af9f740a8b45fb/html5/thumbnails/100.jpg)
Fail closed
Monday, November 19, 12
![Page 101: Keynote the grugq opsec for russians](https://reader034.vdocuments.net/reader034/viewer/2022042507/5443a95db1af9f740a8b45fb/html5/thumbnails/101.jpg)
PORTALPersonal Onion Router To Assure Liberty
Monday, November 19, 12
![Page 102: Keynote the grugq opsec for russians](https://reader034.vdocuments.net/reader034/viewer/2022042507/5443a95db1af9f740a8b45fb/html5/thumbnails/102.jpg)
Monday, November 19, 12
![Page 103: Keynote the grugq opsec for russians](https://reader034.vdocuments.net/reader034/viewer/2022042507/5443a95db1af9f740a8b45fb/html5/thumbnails/103.jpg)
PORTAL
• Router ensuring all traffic is transparently sent over TOR
• Reduce the ability to make mistakes
• Use mobile uplink
• Mobility (go to a coffee shop)
• Reduce risk of wifi monitoring
Monday, November 19, 12
![Page 104: Keynote the grugq opsec for russians](https://reader034.vdocuments.net/reader034/viewer/2022042507/5443a95db1af9f740a8b45fb/html5/thumbnails/104.jpg)
PORTAL
• Uses tricks to get additional storage space on /
Monday, November 19, 12
![Page 105: Keynote the grugq opsec for russians](https://reader034.vdocuments.net/reader034/viewer/2022042507/5443a95db1af9f740a8b45fb/html5/thumbnails/105.jpg)
Hardware
• TP-LINK AR71xx personal routers
• MR-11U
• MR-3040
• MR-3020
• WR-703N
Monday, November 19, 12
![Page 106: Keynote the grugq opsec for russians](https://reader034.vdocuments.net/reader034/viewer/2022042507/5443a95db1af9f740a8b45fb/html5/thumbnails/106.jpg)
MR-3040 & MR-11U
• Battery powered
• Approx. 4-5 hrs per charge
• USB for 3G modem
Monday, November 19, 12
![Page 107: Keynote the grugq opsec for russians](https://reader034.vdocuments.net/reader034/viewer/2022042507/5443a95db1af9f740a8b45fb/html5/thumbnails/107.jpg)
http://grugq.github.com/portal
Monday, November 19, 12
![Page 108: Keynote the grugq opsec for russians](https://reader034.vdocuments.net/reader034/viewer/2022042507/5443a95db1af9f740a8b45fb/html5/thumbnails/108.jpg)
Conclusion
Monday, November 19, 12
![Page 109: Keynote the grugq opsec for russians](https://reader034.vdocuments.net/reader034/viewer/2022042507/5443a95db1af9f740a8b45fb/html5/thumbnails/109.jpg)
STFU
Monday, November 19, 12
![Page 110: Keynote the grugq opsec for russians](https://reader034.vdocuments.net/reader034/viewer/2022042507/5443a95db1af9f740a8b45fb/html5/thumbnails/110.jpg)
Monday, November 19, 12
![Page 111: Keynote the grugq opsec for russians](https://reader034.vdocuments.net/reader034/viewer/2022042507/5443a95db1af9f740a8b45fb/html5/thumbnails/111.jpg)
If you hack, don’t speakIf you speak, don’t writeIf you write, don’t signIf you sign, don’t be surprised
Monday, November 19, 12