sex, lies and instant messenger
DESCRIPTION
Adultery is one of the oldest of human preoccupations, but the modern world of social networking and instant messaging is ill-suited to discreet and deniable infidelities. In this talk we will describe what can go wrong with your intra-affair communications, how to avoid such mistakes, and what lessons can be learned.TRANSCRIPT
![Page 1: Sex, Lies and Instant Messenger](https://reader034.vdocuments.net/reader034/viewer/2022042714/5569fd7bd8b42a5d758b4bf9/html5/thumbnails/1.jpg)
sex, lies and instant messenger @alecmuffett
this slide intentionally left blank
1
![Page 2: Sex, Lies and Instant Messenger](https://reader034.vdocuments.net/reader034/viewer/2022042714/5569fd7bd8b42a5d758b4bf9/html5/thumbnails/2.jpg)
sex, lies and instant messenger @alecmuffett
sex, lies, & instant-messenger@alecmuffett
www.alecmuffett.com
green lane securitywww.greenlanesecurity.com
2
![Page 3: Sex, Lies and Instant Messenger](https://reader034.vdocuments.net/reader034/viewer/2022042714/5569fd7bd8b42a5d758b4bf9/html5/thumbnails/3.jpg)
sex, lies and instant messenger @alecmuffett
disclaimer
3
![Page 4: Sex, Lies and Instant Messenger](https://reader034.vdocuments.net/reader034/viewer/2022042714/5569fd7bd8b42a5d758b4bf9/html5/thumbnails/4.jpg)
sex, lies and instant messenger @alecmuffett
by following these rules you mayor may not get away with an affair...
4
![Page 5: Sex, Lies and Instant Messenger](https://reader034.vdocuments.net/reader034/viewer/2022042714/5569fd7bd8b42a5d758b4bf9/html5/thumbnails/5.jpg)
sex, lies and instant messenger @alecmuffett
...but there are amusing mistakeswhich you can/should avoid
5
![Page 6: Sex, Lies and Instant Messenger](https://reader034.vdocuments.net/reader034/viewer/2022042714/5569fd7bd8b42a5d758b4bf9/html5/thumbnails/6.jpg)
sex, lies and instant messenger @alecmuffett
DON’T
6
![Page 7: Sex, Lies and Instant Messenger](https://reader034.vdocuments.net/reader034/viewer/2022042714/5569fd7bd8b42a5d758b4bf9/html5/thumbnails/7.jpg)
sex, lies and instant messenger @alecmuffett
do not use secrets as passwords
7
![Page 8: Sex, Lies and Instant Messenger](https://reader034.vdocuments.net/reader034/viewer/2022042714/5569fd7bd8b42a5d758b4bf9/html5/thumbnails/8.jpg)
sex, lies and instant messenger @alecmuffett
my history• Crack
• First “smart” password cracker• 1991..96• http://tinyurl.com/2jnzpy
•CrackLib• password checking library
• 1994..now
8
![Page 9: Sex, Lies and Instant Messenger](https://reader034.vdocuments.net/reader034/viewer/2022042714/5569fd7bd8b42a5d758b4bf9/html5/thumbnails/9.jpg)
sex, lies and instant messenger @alecmuffett
issuepasswords are secret, but...
9
![Page 10: Sex, Lies and Instant Messenger](https://reader034.vdocuments.net/reader034/viewer/2022042714/5569fd7bd8b42a5d758b4bf9/html5/thumbnails/10.jpg)
sex, lies and instant messenger @alecmuffett
issuesecrets make bad passwords
10
![Page 11: Sex, Lies and Instant Messenger](https://reader034.vdocuments.net/reader034/viewer/2022042714/5569fd7bd8b42a5d758b4bf9/html5/thumbnails/11.jpg)
sex, lies and instant messenger @alecmuffett
passwordsguessable
11
![Page 12: Sex, Lies and Instant Messenger](https://reader034.vdocuments.net/reader034/viewer/2022042714/5569fd7bd8b42a5d758b4bf9/html5/thumbnails/12.jpg)
sex, lies and instant messenger @alecmuffett
passwordsbrute-forceable
12
![Page 13: Sex, Lies and Instant Messenger](https://reader034.vdocuments.net/reader034/viewer/2022042714/5569fd7bd8b42a5d758b4bf9/html5/thumbnails/13.jpg)
sex, lies and instant messenger @alecmuffett
passwordsreveal stuff you don't want revealed
13
![Page 14: Sex, Lies and Instant Messenger](https://reader034.vdocuments.net/reader034/viewer/2022042714/5569fd7bd8b42a5d758b4bf9/html5/thumbnails/14.jpg)
sex, lies and instant messenger @alecmuffett
your passwordreveals something about you?
14
![Page 15: Sex, Lies and Instant Messenger](https://reader034.vdocuments.net/reader034/viewer/2022042714/5569fd7bd8b42a5d758b4bf9/html5/thumbnails/15.jpg)
sex, lies and instant messenger @alecmuffett
your passwordreflects your tastes?
15
![Page 16: Sex, Lies and Instant Messenger](https://reader034.vdocuments.net/reader034/viewer/2022042714/5569fd7bd8b42a5d758b4bf9/html5/thumbnails/16.jpg)
sex, lies and instant messenger @alecmuffett
your passwordis known to your spouse?
16
![Page 17: Sex, Lies and Instant Messenger](https://reader034.vdocuments.net/reader034/viewer/2022042714/5569fd7bd8b42a5d758b4bf9/html5/thumbnails/17.jpg)
sex, lies and instant messenger @alecmuffett
password reuse=self-incrimination(which is bad)
17
![Page 18: Sex, Lies and Instant Messenger](https://reader034.vdocuments.net/reader034/viewer/2022042714/5569fd7bd8b42a5d758b4bf9/html5/thumbnails/18.jpg)
sex, lies and instant messenger @alecmuffett
do not Skype
18
![Page 19: Sex, Lies and Instant Messenger](https://reader034.vdocuments.net/reader034/viewer/2022042714/5569fd7bd8b42a5d758b4bf9/html5/thumbnails/19.jpg)
sex, lies and instant messenger @alecmuffett
Skype• “peer to peer” architecture
• robust, replicated, flexible• excellent security
• ...unless you’re up against the USA• ...or China• ...and maybe the UK
19
![Page 20: Sex, Lies and Instant Messenger](https://reader034.vdocuments.net/reader034/viewer/2022042714/5569fd7bd8b42a5d758b4bf9/html5/thumbnails/20.jpg)
sex, lies and instant messenger @alecmuffett
virtually impossible to expungea recent conversation
20
![Page 21: Sex, Lies and Instant Messenger](https://reader034.vdocuments.net/reader034/viewer/2022042714/5569fd7bd8b42a5d758b4bf9/html5/thumbnails/21.jpg)
sex, lies and instant messenger @alecmuffett
brute-force Skype deletionmakes things worse
messages resurrect from the dead
21
![Page 22: Sex, Lies and Instant Messenger](https://reader034.vdocuments.net/reader034/viewer/2022042714/5569fd7bd8b42a5d758b4bf9/html5/thumbnails/22.jpg)
sex, lies and instant messenger @alecmuffett
losing control of information is not good
22
![Page 23: Sex, Lies and Instant Messenger](https://reader034.vdocuments.net/reader034/viewer/2022042714/5569fd7bd8b42a5d758b4bf9/html5/thumbnails/23.jpg)
sex, lies and instant messenger @alecmuffett
do not XMPP/Jabber• Google chat,
• some Facebook chat• other systems
23
![Page 24: Sex, Lies and Instant Messenger](https://reader034.vdocuments.net/reader034/viewer/2022042714/5569fd7bd8b42a5d758b4bf9/html5/thumbnails/24.jpg)
sex, lies and instant messenger @alecmuffett
do not XMPP/Jabber• Initial message is “multicast”
• to all logged-in instances• eg: “hello sexy”
• ...arrives on the Home PC• ...when you are at work
24
![Page 25: Sex, Lies and Instant Messenger](https://reader034.vdocuments.net/reader034/viewer/2022042714/5569fd7bd8b42a5d758b4bf9/html5/thumbnails/25.jpg)
sex, lies and instant messenger @alecmuffett
-
25
![Page 26: Sex, Lies and Instant Messenger](https://reader034.vdocuments.net/reader034/viewer/2022042714/5569fd7bd8b42a5d758b4bf9/html5/thumbnails/26.jpg)
sex, lies and instant messenger @alecmuffett
do not Twitter
26
![Page 27: Sex, Lies and Instant Messenger](https://reader034.vdocuments.net/reader034/viewer/2022042714/5569fd7bd8b42a5d758b4bf9/html5/thumbnails/27.jpg)
sex, lies and instant messenger @alecmuffett
do not Twittertoo many risks
27
![Page 28: Sex, Lies and Instant Messenger](https://reader034.vdocuments.net/reader034/viewer/2022042714/5569fd7bd8b42a5d758b4bf9/html5/thumbnails/28.jpg)
sex, lies and instant messenger @alecmuffett
D alice can i have you for dinner?
28
![Page 29: Sex, Lies and Instant Messenger](https://reader034.vdocuments.net/reader034/viewer/2022042714/5569fd7bd8b42a5d758b4bf9/html5/thumbnails/29.jpg)
sex, lies and instant messenger @alecmuffett
@alice can i have you for dinner?
29
![Page 30: Sex, Lies and Instant Messenger](https://reader034.vdocuments.net/reader034/viewer/2022042714/5569fd7bd8b42a5d758b4bf9/html5/thumbnails/30.jpg)
sex, lies and instant messenger @alecmuffett
...and, worse...
30
![Page 31: Sex, Lies and Instant Messenger](https://reader034.vdocuments.net/reader034/viewer/2022042714/5569fd7bd8b42a5d758b4bf9/html5/thumbnails/31.jpg)
sex, lies and instant messenger @alecmuffett
D bob Nude! http://twitpic.com/b0gu5
31
![Page 32: Sex, Lies and Instant Messenger](https://reader034.vdocuments.net/reader034/viewer/2022042714/5569fd7bd8b42a5d758b4bf9/html5/thumbnails/32.jpg)
sex, lies and instant messenger @alecmuffett
Twitter App Risks• Apps can get access to DMs
• Twitpic? Flickr? Yfrog?• Is that really wise?
32
![Page 33: Sex, Lies and Instant Messenger](https://reader034.vdocuments.net/reader034/viewer/2022042714/5569fd7bd8b42a5d758b4bf9/html5/thumbnails/33.jpg)
sex, lies and instant messenger @alecmuffett
do not Facebook
33
![Page 34: Sex, Lies and Instant Messenger](https://reader034.vdocuments.net/reader034/viewer/2022042714/5569fd7bd8b42a5d758b4bf9/html5/thumbnails/34.jpg)
sex, lies and instant messenger @alecmuffett
too easy to get wrong
34
![Page 35: Sex, Lies and Instant Messenger](https://reader034.vdocuments.net/reader034/viewer/2022042714/5569fd7bd8b42a5d758b4bf9/html5/thumbnails/35.jpg)
sex, lies and instant messenger @alecmuffett
friends-of-friends != friends
35
![Page 36: Sex, Lies and Instant Messenger](https://reader034.vdocuments.net/reader034/viewer/2022042714/5569fd7bd8b42a5d758b4bf9/html5/thumbnails/36.jpg)
sex, lies and instant messenger @alecmuffett
Homepage displays whom you communicate with frequently
36
![Page 37: Sex, Lies and Instant Messenger](https://reader034.vdocuments.net/reader034/viewer/2022042714/5569fd7bd8b42a5d758b4bf9/html5/thumbnails/37.jpg)
sex, lies and instant messenger @alecmuffett
Your own Facebook account istoo rich a software ecosystemto viably trust it with secrets
37
![Page 38: Sex, Lies and Instant Messenger](https://reader034.vdocuments.net/reader034/viewer/2022042714/5569fd7bd8b42a5d758b4bf9/html5/thumbnails/38.jpg)
sex, lies and instant messenger @alecmuffett
beware Google
38
![Page 39: Sex, Lies and Instant Messenger](https://reader034.vdocuments.net/reader034/viewer/2022042714/5569fd7bd8b42a5d758b4bf9/html5/thumbnails/39.jpg)
sex, lies and instant messenger @alecmuffett
do not use Google services / your normal Google account
• Mail = heavily stored / indexed• Chat = Mail• Chrome Bookmarks = Docs• Toolbar = Docs• Android = Google Everything
39
![Page 40: Sex, Lies and Instant Messenger](https://reader034.vdocuments.net/reader034/viewer/2022042714/5569fd7bd8b42a5d758b4bf9/html5/thumbnails/40.jpg)
sex, lies and instant messenger @alecmuffett
do not smartphone
40
![Page 41: Sex, Lies and Instant Messenger](https://reader034.vdocuments.net/reader034/viewer/2022042714/5569fd7bd8b42a5d758b4bf9/html5/thumbnails/41.jpg)
sex, lies and instant messenger @alecmuffett
massive comedy potential
41
![Page 42: Sex, Lies and Instant Messenger](https://reader034.vdocuments.net/reader034/viewer/2022042714/5569fd7bd8b42a5d758b4bf9/html5/thumbnails/42.jpg)
sex, lies and instant messenger @alecmuffett
iPhone screenlock
42
![Page 43: Sex, Lies and Instant Messenger](https://reader034.vdocuments.net/reader034/viewer/2022042714/5569fd7bd8b42a5d758b4bf9/html5/thumbnails/43.jpg)
sex, lies and instant messenger @alecmuffett
applications which pop-upalerts above the screenlock
43
![Page 44: Sex, Lies and Instant Messenger](https://reader034.vdocuments.net/reader034/viewer/2022042714/5569fd7bd8b42a5d758b4bf9/html5/thumbnails/44.jpg)
sex, lies and instant messenger @alecmuffett
Locked?
44
![Page 45: Sex, Lies and Instant Messenger](https://reader034.vdocuments.net/reader034/viewer/2022042714/5569fd7bd8b42a5d758b4bf9/html5/thumbnails/45.jpg)
sex, lies and instant messenger @alecmuffett
...and the punchline is...
45
![Page 46: Sex, Lies and Instant Messenger](https://reader034.vdocuments.net/reader034/viewer/2022042714/5569fd7bd8b42a5d758b4bf9/html5/thumbnails/46.jpg)
sex, lies and instant messenger @alecmuffett
don’t combine this with Skype
46
![Page 47: Sex, Lies and Instant Messenger](https://reader034.vdocuments.net/reader034/viewer/2022042714/5569fd7bd8b42a5d758b4bf9/html5/thumbnails/47.jpg)
sex, lies and instant messenger @alecmuffett
iPhone• All backed up by iTunes:
• SMS• call logs• geolocation (see recent press)
• ...possibly with password
47
![Page 48: Sex, Lies and Instant Messenger](https://reader034.vdocuments.net/reader034/viewer/2022042714/5569fd7bd8b42a5d758b4bf9/html5/thumbnails/48.jpg)
sex, lies and instant messenger @alecmuffett
Android• basically ditto
• ...but backed up on Google
48
![Page 49: Sex, Lies and Instant Messenger](https://reader034.vdocuments.net/reader034/viewer/2022042714/5569fd7bd8b42a5d758b4bf9/html5/thumbnails/49.jpg)
sex, lies and instant messenger @alecmuffett
Smartphone Apps• backed up on network
• or on iTunes• same story as elsewhere
49
![Page 50: Sex, Lies and Instant Messenger](https://reader034.vdocuments.net/reader034/viewer/2022042714/5569fd7bd8b42a5d758b4bf9/html5/thumbnails/50.jpg)
sex, lies and instant messenger @alecmuffett
the problem is with data getting out of your control
50
![Page 51: Sex, Lies and Instant Messenger](https://reader034.vdocuments.net/reader034/viewer/2022042714/5569fd7bd8b42a5d758b4bf9/html5/thumbnails/51.jpg)
sex, lies and instant messenger @alecmuffett
Geolocation
51
![Page 52: Sex, Lies and Instant Messenger](https://reader034.vdocuments.net/reader034/viewer/2022042714/5569fd7bd8b42a5d758b4bf9/html5/thumbnails/52.jpg)
sex, lies and instant messenger @alecmuffett
avoid sharing geolocation• Foursquare, Twitter, etc
• “...but your Twitter messages said that you were in Essex?”
• Do you have an in-car GPS?• Learn to wipe that, too
• Does your spouse expect GPS?• Oops.
52
![Page 53: Sex, Lies and Instant Messenger](https://reader034.vdocuments.net/reader034/viewer/2022042714/5569fd7bd8b42a5d758b4bf9/html5/thumbnails/53.jpg)
sex, lies and instant messenger @alecmuffett
do not MMORPG
53
![Page 54: Sex, Lies and Instant Messenger](https://reader034.vdocuments.net/reader034/viewer/2022042714/5569fd7bd8b42a5d758b4bf9/html5/thumbnails/54.jpg)
sex, lies and instant messenger @alecmuffett
MMORPG• WoW• SecondLife• EQ• EVE Online
54
![Page 55: Sex, Lies and Instant Messenger](https://reader034.vdocuments.net/reader034/viewer/2022042714/5569fd7bd8b42a5d758b4bf9/html5/thumbnails/55.jpg)
sex, lies and instant messenger @alecmuffett
held to lower standard than IM
55
![Page 56: Sex, Lies and Instant Messenger](https://reader034.vdocuments.net/reader034/viewer/2022042714/5569fd7bd8b42a5d758b4bf9/html5/thumbnails/56.jpg)
sex, lies and instant messenger @alecmuffett
heavily-integrated software• game• voice• webcam• other third party stuff
56
![Page 57: Sex, Lies and Instant Messenger](https://reader034.vdocuments.net/reader034/viewer/2022042714/5569fd7bd8b42a5d758b4bf9/html5/thumbnails/57.jpg)
sex, lies and instant messenger @alecmuffett
game logs• comprehensive• intricate• messy
• ...therefore hard to clean up
57
![Page 58: Sex, Lies and Instant Messenger](https://reader034.vdocuments.net/reader034/viewer/2022042714/5569fd7bd8b42a5d758b4bf9/html5/thumbnails/58.jpg)
sex, lies and instant messenger @alecmuffett
Most important...
58
![Page 59: Sex, Lies and Instant Messenger](https://reader034.vdocuments.net/reader034/viewer/2022042714/5569fd7bd8b42a5d758b4bf9/html5/thumbnails/59.jpg)
sex, lies and instant messenger @alecmuffett
do not send porny pictures to each other
59
![Page 60: Sex, Lies and Instant Messenger](https://reader034.vdocuments.net/reader034/viewer/2022042714/5569fd7bd8b42a5d758b4bf9/html5/thumbnails/60.jpg)
sex, lies and instant messenger @alecmuffett
do not use the shared family computer
60
![Page 61: Sex, Lies and Instant Messenger](https://reader034.vdocuments.net/reader034/viewer/2022042714/5569fd7bd8b42a5d758b4bf9/html5/thumbnails/61.jpg)
sex, lies and instant messenger @alecmuffett
do not use work-related hardware
61
![Page 62: Sex, Lies and Instant Messenger](https://reader034.vdocuments.net/reader034/viewer/2022042714/5569fd7bd8b42a5d758b4bf9/html5/thumbnails/62.jpg)
sex, lies and instant messenger @alecmuffett
work hardware• not your machine
• not your data?• automated backups• network access logged• may be taken from you
• eg: bankruptcy, fired, updated• old hardware auctioned
62
![Page 63: Sex, Lies and Instant Messenger](https://reader034.vdocuments.net/reader034/viewer/2022042714/5569fd7bd8b42a5d758b4bf9/html5/thumbnails/63.jpg)
sex, lies and instant messenger @alecmuffett
and...
63
![Page 64: Sex, Lies and Instant Messenger](https://reader034.vdocuments.net/reader034/viewer/2022042714/5569fd7bd8b42a5d758b4bf9/html5/thumbnails/64.jpg)
sex, lies and instant messenger @alecmuffett
do not post an accurate description of yourself
• including grammatical quirks• to a swingers/fetish website
• in the public members index• where Google can cache it
• bookmarking it• on the family computer
• with photos
64
![Page 65: Sex, Lies and Instant Messenger](https://reader034.vdocuments.net/reader034/viewer/2022042714/5569fd7bd8b42a5d758b4bf9/html5/thumbnails/65.jpg)
sex, lies and instant messenger @alecmuffett
Why?
65
![Page 66: Sex, Lies and Instant Messenger](https://reader034.vdocuments.net/reader034/viewer/2022042714/5569fd7bd8b42a5d758b4bf9/html5/thumbnails/66.jpg)
sex, lies and instant messenger @alecmuffett
Things Geeks Do• Enumerate all possible URLs:
• tinyurl.com• bit.ly• is.gd• t.co
• ...and save the good ones
66
![Page 67: Sex, Lies and Instant Messenger](https://reader034.vdocuments.net/reader034/viewer/2022042714/5569fd7bd8b42a5d758b4bf9/html5/thumbnails/67.jpg)
sex, lies and instant messenger @alecmuffett
Things Geeks Do• Trawl...
• Picasa• Twitpic• Yfrog
• etc...
• ...to much the same ends
67
![Page 68: Sex, Lies and Instant Messenger](https://reader034.vdocuments.net/reader034/viewer/2022042714/5569fd7bd8b42a5d758b4bf9/html5/thumbnails/68.jpg)
sex, lies and instant messenger @alecmuffett
Things Geeks Do• buy hardware from Ebay
• “undelete” files • desktops• laptops• printers• storage
• hard disks• thumb drives
68
![Page 69: Sex, Lies and Instant Messenger](https://reader034.vdocuments.net/reader034/viewer/2022042714/5569fd7bd8b42a5d758b4bf9/html5/thumbnails/69.jpg)
sex, lies and instant messenger @alecmuffett
Things Geeks Do• buy phones from Ebay
• restore deleted SMS• retrieve e-mail passwords
69
![Page 70: Sex, Lies and Instant Messenger](https://reader034.vdocuments.net/reader034/viewer/2022042714/5569fd7bd8b42a5d758b4bf9/html5/thumbnails/70.jpg)
sex, lies and instant messenger @alecmuffett
recreational computer forensics for teh lulz
70
![Page 71: Sex, Lies and Instant Messenger](https://reader034.vdocuments.net/reader034/viewer/2022042714/5569fd7bd8b42a5d758b4bf9/html5/thumbnails/71.jpg)
sex, lies and instant messenger @alecmuffett
What to do!
71
![Page 72: Sex, Lies and Instant Messenger](https://reader034.vdocuments.net/reader034/viewer/2022042714/5569fd7bd8b42a5d758b4bf9/html5/thumbnails/72.jpg)
sex, lies and instant messenger @alecmuffett
create a disposable identity
72
![Page 73: Sex, Lies and Instant Messenger](https://reader034.vdocuments.net/reader034/viewer/2022042714/5569fd7bd8b42a5d758b4bf9/html5/thumbnails/73.jpg)
sex, lies and instant messenger @alecmuffett
use a fake, boring, common pseudonym• good
• edward wilson• carole smith
• bad• sexxxy4uinwokingham• anything that’s unique
73
![Page 74: Sex, Lies and Instant Messenger](https://reader034.vdocuments.net/reader034/viewer/2022042714/5569fd7bd8b42a5d758b4bf9/html5/thumbnails/74.jpg)
sex, lies and instant messenger @alecmuffett
legal?• You’re probably breaking
contractual “terms of service”• Is it criminal to lie?
• maybe?
74
![Page 75: Sex, Lies and Instant Messenger](https://reader034.vdocuments.net/reader034/viewer/2022042714/5569fd7bd8b42a5d758b4bf9/html5/thumbnails/75.jpg)
sex, lies and instant messenger @alecmuffett
avoid linkingreal/fake identities
• use a random password• never used before• never use anywhere else
75
![Page 76: Sex, Lies and Instant Messenger](https://reader034.vdocuments.net/reader034/viewer/2022042714/5569fd7bd8b42a5d758b4bf9/html5/thumbnails/76.jpg)
sex, lies and instant messenger @alecmuffett
avoid intermingled filestore• set up different “users”
• keep sensitive files in one place• ...hopefully• ...mostly• ...except for logs
76
![Page 77: Sex, Lies and Instant Messenger](https://reader034.vdocuments.net/reader034/viewer/2022042714/5569fd7bd8b42a5d758b4bf9/html5/thumbnails/77.jpg)
sex, lies and instant messenger @alecmuffett
cryptography• try to get encrypted swap
• avoid sleep/hibernation• try to get full disk encryption
• at least encrypted home directory• bundled with OSX• avoid “master keys”
77
![Page 78: Sex, Lies and Instant Messenger](https://reader034.vdocuments.net/reader034/viewer/2022042714/5569fd7bd8b42a5d758b4bf9/html5/thumbnails/78.jpg)
sex, lies and instant messenger @alecmuffett
use a secure browser• do not use your daily browser
78
![Page 79: Sex, Lies and Instant Messenger](https://reader034.vdocuments.net/reader034/viewer/2022042714/5569fd7bd8b42a5d758b4bf9/html5/thumbnails/79.jpg)
sex, lies and instant messenger @alecmuffett
example workflow
79
![Page 80: Sex, Lies and Instant Messenger](https://reader034.vdocuments.net/reader034/viewer/2022042714/5569fd7bd8b42a5d758b4bf9/html5/thumbnails/80.jpg)
sex, lies and instant messenger @alecmuffett
Chrome“day-to-day”
80
![Page 81: Sex, Lies and Instant Messenger](https://reader034.vdocuments.net/reader034/viewer/2022042714/5569fd7bd8b42a5d758b4bf9/html5/thumbnails/81.jpg)
sex, lies and instant messenger @alecmuffett
Safari• Guests and visitors• Logging into a website without
logging-out of Facebook first
81
![Page 82: Sex, Lies and Instant Messenger](https://reader034.vdocuments.net/reader034/viewer/2022042714/5569fd7bd8b42a5d758b4bf9/html5/thumbnails/82.jpg)
sex, lies and instant messenger @alecmuffett
Firefox• Ideal for...
• dubious e-mail links• porn• shagging• security malware research
82
![Page 83: Sex, Lies and Instant Messenger](https://reader034.vdocuments.net/reader034/viewer/2022042714/5569fd7bd8b42a5d758b4bf9/html5/thumbnails/83.jpg)
sex, lies and instant messenger @alecmuffett
browser configuration
83
![Page 84: Sex, Lies and Instant Messenger](https://reader034.vdocuments.net/reader034/viewer/2022042714/5569fd7bd8b42a5d758b4bf9/html5/thumbnails/84.jpg)
sex, lies and instant messenger @alecmuffett
browser settings• clear cookies• clear history• don't accept 3rd-party cookies• block popups
84
![Page 85: Sex, Lies and Instant Messenger](https://reader034.vdocuments.net/reader034/viewer/2022042714/5569fd7bd8b42a5d758b4bf9/html5/thumbnails/85.jpg)
sex, lies and instant messenger @alecmuffett
more browser settings• don't save form input• don't save history• switch off autosuggest• set to private browser mode
• ...permanently, if possible• else auto/delete cookies on exit
85
![Page 86: Sex, Lies and Instant Messenger](https://reader034.vdocuments.net/reader034/viewer/2022042714/5569fd7bd8b42a5d758b4bf9/html5/thumbnails/86.jpg)
sex, lies and instant messenger @alecmuffett
major surgery• SSL Everywhere
• if available for the browser• will cause hassle
• Disable Java• might cause hassle• nb: not JavaScript (see NoScript)
86
![Page 87: Sex, Lies and Instant Messenger](https://reader034.vdocuments.net/reader034/viewer/2022042714/5569fd7bd8b42a5d758b4bf9/html5/thumbnails/87.jpg)
sex, lies and instant messenger @alecmuffett
Firefox extensions• NoScript• AdBlock Plus• Ghostery
• “block all web-bugs” mode• Tor / Torbutton
• or: Tor browser bundle• advanced, but worth it
87
![Page 88: Sex, Lies and Instant Messenger](https://reader034.vdocuments.net/reader034/viewer/2022042714/5569fd7bd8b42a5d758b4bf9/html5/thumbnails/88.jpg)
sex, lies and instant messenger @alecmuffett
Safari plugins• ClickToFlash• ...others?
88
![Page 89: Sex, Lies and Instant Messenger](https://reader034.vdocuments.net/reader034/viewer/2022042714/5569fd7bd8b42a5d758b4bf9/html5/thumbnails/89.jpg)
sex, lies and instant messenger @alecmuffett
Flash• Flash Player
• global security settings panel• purge flash cookies / sites• set flash db size to zero
89
![Page 90: Sex, Lies and Instant Messenger](https://reader034.vdocuments.net/reader034/viewer/2022042714/5569fd7bd8b42a5d758b4bf9/html5/thumbnails/90.jpg)
sex, lies and instant messenger @alecmuffett
HTML5• set HTML5 db size to zero• watch for other/new issues
90
![Page 91: Sex, Lies and Instant Messenger](https://reader034.vdocuments.net/reader034/viewer/2022042714/5569fd7bd8b42a5d758b4bf9/html5/thumbnails/91.jpg)
sex, lies and instant messenger @alecmuffett
this also applies to your phone browser
91
![Page 92: Sex, Lies and Instant Messenger](https://reader034.vdocuments.net/reader034/viewer/2022042714/5569fd7bd8b42a5d758b4bf9/html5/thumbnails/92.jpg)
sex, lies and instant messenger @alecmuffett
do use webmailfrom the secure browser
• use HTTPS/SSL at minimum• use Tor if/when possible
92
![Page 93: Sex, Lies and Instant Messenger](https://reader034.vdocuments.net/reader034/viewer/2022042714/5569fd7bd8b42a5d758b4bf9/html5/thumbnails/93.jpg)
sex, lies and instant messenger @alecmuffett
do not bookmarknor save the password of your secret webmail
93
![Page 94: Sex, Lies and Instant Messenger](https://reader034.vdocuments.net/reader034/viewer/2022042714/5569fd7bd8b42a5d758b4bf9/html5/thumbnails/94.jpg)
sex, lies and instant messenger @alecmuffett
where not to save passwords• not in Keychain.app• not in “1password”• not in browser• not in phone browser• not in phone mail app
94
![Page 95: Sex, Lies and Instant Messenger](https://reader034.vdocuments.net/reader034/viewer/2022042714/5569fd7bd8b42a5d758b4bf9/html5/thumbnails/95.jpg)
sex, lies and instant messenger @alecmuffett
keep it in your brain
95
![Page 96: Sex, Lies and Instant Messenger](https://reader034.vdocuments.net/reader034/viewer/2022042714/5569fd7bd8b42a5d758b4bf9/html5/thumbnails/96.jpg)
sex, lies and instant messenger @alecmuffett
why?• rubber-hose cryptanalysts
• or divorce lawyers• prettymuch the same thing
96
![Page 97: Sex, Lies and Instant Messenger](https://reader034.vdocuments.net/reader034/viewer/2022042714/5569fd7bd8b42a5d758b4bf9/html5/thumbnails/97.jpg)
sex, lies and instant messenger @alecmuffett
Suggestions
97
![Page 98: Sex, Lies and Instant Messenger](https://reader034.vdocuments.net/reader034/viewer/2022042714/5569fd7bd8b42a5d758b4bf9/html5/thumbnails/98.jpg)
sex, lies and instant messenger @alecmuffett
Use a Gmail accountto set up a Yahoo account
98
![Page 99: Sex, Lies and Instant Messenger](https://reader034.vdocuments.net/reader034/viewer/2022042714/5569fd7bd8b42a5d758b4bf9/html5/thumbnails/99.jpg)
sex, lies and instant messenger @alecmuffett
Yahoo for webmail• Less obvious than Google• Less temptingly integrated with
phone
99
![Page 100: Sex, Lies and Instant Messenger](https://reader034.vdocuments.net/reader034/viewer/2022042714/5569fd7bd8b42a5d758b4bf9/html5/thumbnails/100.jpg)
sex, lies and instant messenger @alecmuffett
AIM for IM• can enforce 1 session at a time• remote session disconnect• use “OTR”
100
![Page 101: Sex, Lies and Instant Messenger](https://reader034.vdocuments.net/reader034/viewer/2022042714/5569fd7bd8b42a5d758b4bf9/html5/thumbnails/101.jpg)
sex, lies and instant messenger @alecmuffett
übergeeks• “truecrypt”• “live-cd”• “virtualisation”
101
![Page 102: Sex, Lies and Instant Messenger](https://reader034.vdocuments.net/reader034/viewer/2022042714/5569fd7bd8b42a5d758b4bf9/html5/thumbnails/102.jpg)
sex, lies and instant messenger @alecmuffett
use a PAYG dumbphone• pay cash (where possible)• top-up with cash• enable PIN lock• avoid ...
• paper billing• web integration
102
![Page 103: Sex, Lies and Instant Messenger](https://reader034.vdocuments.net/reader034/viewer/2022042714/5569fd7bd8b42a5d758b4bf9/html5/thumbnails/103.jpg)
sex, lies and instant messenger @alecmuffett
use voice calls
103
![Page 104: Sex, Lies and Instant Messenger](https://reader034.vdocuments.net/reader034/viewer/2022042714/5569fd7bd8b42a5d758b4bf9/html5/thumbnails/104.jpg)
sex, lies and instant messenger @alecmuffett
do not leave voicemails
104
![Page 105: Sex, Lies and Instant Messenger](https://reader034.vdocuments.net/reader034/viewer/2022042714/5569fd7bd8b42a5d758b4bf9/html5/thumbnails/105.jpg)
sex, lies and instant messenger @alecmuffett
dumbphone SMS• lowest common denominator
• phone-to-phone is good• messages still logged on backend
• but overall exposure is less
105
![Page 106: Sex, Lies and Instant Messenger](https://reader034.vdocuments.net/reader034/viewer/2022042714/5569fd7bd8b42a5d758b4bf9/html5/thumbnails/106.jpg)
sex, lies and instant messenger @alecmuffett
wipe your SMS messages regularly
106
![Page 107: Sex, Lies and Instant Messenger](https://reader034.vdocuments.net/reader034/viewer/2022042714/5569fd7bd8b42a5d758b4bf9/html5/thumbnails/107.jpg)
sex, lies and instant messenger @alecmuffett
if you must use smartphone• dont’ link to your real GoogleID• check out....
• WhatsApp• TigerText
107
![Page 108: Sex, Lies and Instant Messenger](https://reader034.vdocuments.net/reader034/viewer/2022042714/5569fd7bd8b42a5d758b4bf9/html5/thumbnails/108.jpg)
sex, lies and instant messenger @alecmuffett
decommission old hardware• computers
• DBAN - Darik’s Boot & Nuke• phones
• Remove SIM• SMS may be on SIM as well as phone• check if “factory reset” works
• if not, drive a car over it repeatedly
108
![Page 109: Sex, Lies and Instant Messenger](https://reader034.vdocuments.net/reader034/viewer/2022042714/5569fd7bd8b42a5d758b4bf9/html5/thumbnails/109.jpg)
sex, lies and instant messenger @alecmuffett
bottom linethe more copies of data existthe harder it is to remove them
& when data escapes from your controlit's available forever
109
![Page 110: Sex, Lies and Instant Messenger](https://reader034.vdocuments.net/reader034/viewer/2022042714/5569fd7bd8b42a5d758b4bf9/html5/thumbnails/110.jpg)
sex, lies and instant messenger @alecmuffett
remember• your lover has the same data
• but may not be taking care of it• educate them gently
• his/her systems will also one day be sold on eBay
110
![Page 111: Sex, Lies and Instant Messenger](https://reader034.vdocuments.net/reader034/viewer/2022042714/5569fd7bd8b42a5d758b4bf9/html5/thumbnails/111.jpg)
sex, lies and instant messenger @alecmuffett
when mistakes happen...clean up calmly, and
do not amplify the mistake
111
![Page 112: Sex, Lies and Instant Messenger](https://reader034.vdocuments.net/reader034/viewer/2022042714/5569fd7bd8b42a5d758b4bf9/html5/thumbnails/112.jpg)
sex, lies and instant messenger @alecmuffett
bonne chance
112