International Bloggers and Internet Control Hal Roberts, Ethan Zuckerman, Jillian York, Robert Faris, and John Palfrey
Total Page:16
File Type:pdf, Size:1020Kb
Load more
Recommended publications
-
What Is Threat Hunting?
$whoami ◎ Apurv Singh Gautam (@ASG_Sc0rpi0n) ◎ Security Researcher, Threat Intel/Hunting ◎ Cybersecurity @ Georgia Tech ◎ Prior: Research Intern at ICSI, UC Berkeley ◎ Hobbies ◎ Contributing to the security community ◎ Gaming/Streaming (Rainbow 6 Siege) ◎ Hiking, Lockpicking ◎ Social ◎ Twitter - @ASG_Sc0rpi0n ◎ Website – https://apurvsinghgautam.me 2 Agenda ◎ Introduction to the Dark Web ◎ Why hunting on the Dark Web? ◎ Methods to hunt on the Dark Web ◎ Can the Dark Web hunting be automated? ◎ Overall Picture ◎ OpSec? What’s that? ◎ Conclusion 3 Clear Web? Deep Web? Dark Web? 5 Image Source: UC San Diego Library Accessing the Dark Web ◎ Tor /I2P/ZeroNet ◎ .onion domains/.i2p domains ◎ Traffic through relays Image Sources: Hotspot Shield, Tor Project, I2P Project, ZeroNet 6 What’s all the Hype? ◎ Hype ○ Vast and mysterious part of the Internet ○ Place for cybercriminals only ○ Illegal to access the Dark Web ◎ Reality ○ Few reachable onion domains ○ Uptime isn’t ideal ○ Useful for free expression in few countries ○ Popular sites like Facebook, NYTimes, etc. ○ Legal to access the Dark Web 7 Relevant site types? ◎ General Markets ◎ PII & PHI ◎ Credit Cards ◎ Digital identities ◎ Information Trading ◎ Remote Access ◎ Personal Documents ◎ Electronic Wallets ◎ Insider Threats Image Source: Intsights 8 Sites Examples 9 Cost of products? ◎ SSN - $1 ◎ Fake FB with 15 friends - $1 ◎ DDoS Service - $7/hr ◎ Rent a Hacker - $12/hr ◎ Credit Card - $20+ ◎ Mobile Malware - $150 ◎ Bank Details - $1000+ ◎ Exploits or 0-days - $150,000+ ◎ Critical databases - $300,000+ 10 Product Examples 11 Image Source: Digital Shadows 12 Image Source: Digital Shadows 13 What is Threat Hunting? ◎ Practice of proactively searching for cyber threats ◎ Hypothesis-based approach ◎ Uses advanced analytics and machine learning investigations ◎ Proactive and iterative search 15 Why So Serious (Eh! Important)? ◎ Hacker forums, darknet markets, dump shops, etc. -
Internet Filtering: the Politics and Mechanisms of Control
2 Internet Filtering: The Politics and Mechanisms of Control Jonathan Zittrain and John Palfrey It seems hard to believe that a free, online encyclopedia that anyone can edit at any time could matter much to anyone. But just as a bee can fly despite its awkward physiognomy, Wikipedia has become wildly popular and enormously influential despite its unusual format. The topics that Wikipedians write about range more broadly than any other encyclopedia known to humankind. It has more than 4.6 million articles comprising more than a billion words in two hundred languages.1 Many Google search queries will lead to a Wikipedia page among the top search results. Articles in Wikipedia cover the Tiananmen Square pro- tests of 1989, the Dalai Lama, the International Tibet Independence Movement, and the Tai- wan independence movement. Appearing both in the English and the Chinese language versions of Wikipedia—each independently written—these articles have been written to speak from what Wikipedia calls a ‘‘neutral point of view.’’2 The Wikipedians’ point of view on some topics probably does not seem so neutral to the Chinese authorities. Wikipedia has grown so influential, in fact, that it has attracted the attention of China’s cen- sors at least three times between 2004 and 2006.3 The blocking and unblocking of Wikipedia in China—as with all other filtering in China, with- out announcement or acknowledgment—might also be grounded in a fear of the communal, critical process that Wikipedia represents. The purpose of Wikipedia is ‘‘to create and distrib- ute a multilingual free encyclopedia of the highest quality to every single person on the planet in their own language,’’4 and the means of creating it is through engagement of the public at large to contribute what it knows and to debate in earnest where beliefs differ, offering sources and arguments in quasiacademic style. -
An Investigation Into the Security and Privacy of Ios VPN Applications
An Investigation Into the Security and Privacy of iOS VPN Applications Jack Wilson Division of Cybersecurity School of Design and Informatics Abertay University, Dundee A thesis submitted for the degree of Bachelor of Science with Honours in Ethical Hacking 1st May 2018 Word Count: 11,448 Abstract Due to the increasing number of recommendations for people to use VPN’s for privacy reasons, more app developers are creating VPN apps and publishing them on the Apple App Store and Google Play Store. In this ‘gold rush’, apps are being developed quickly and, in turn, not being developed with security fully in mind. This paper investigated a selection of free VPN applications available on the Apple App Store (for iOS devices) and test the apps for security and privacy. This includes testing for any traffic being transmitted over plain HTTP, DNS leakage and transmission of personally-identifiable information (such as phone number, IMEI 1, email address, MAC address) and evaluating the security of the tunnelling protocol used by the VPN. The testing methodology involved installing free VPN apps on a test device (an iPhone 6 running iOS 11), simulating network traffic for a pre-defined period of time and capturing the traffic (either through ARP spoofing, or through a proxy program such as Burpsuite). This allows for all traffic to be analysed to check for anything being sent without encryption. Other issues that often cause de-anonymisation with VPN applications such as DNS leakage can be tested using websites such as dnsleaktest.com. The research found several common security issues with the VPN applications that were tested, with a large majority of the applications tested failing to implement HTTPS. -
User Guide Contents
USER GUIDE CONTENTS What's new 4 About Magnet OUTRIDER 5 Getting started with Magnet OUTRIDER 6 System requirements 6 Use Magnet OUTRIDER on a dongle 6 Use a trial license of Magnet OUTRIDER 6 Understanding changes made to the system 7 Detecting Bitlocker encrypted drives 8 Scanning a target 9 Scan a computer 9 Encryption screening 9 Scan an external drive 10 Scan a folder 10 Configuring scan options 11 Locate files and apps settings 11 Collect artifacts and scan browser history settings 13 CSAM Detection Technology settings 14 Scan options 15 Reporting options 16 Miscellaneous options 16 Adding keywords and NCMEC report data to a search 17 Import a keyword list or NCMEC report data 17 View a keyword list or NCMEC report data 17 Export a keyword list or NCMEC report data 18 Reviewing scan results 19 Mark a CRC CSAM hit as a false positive 19 Starting a new scan 20 Supported application categories 20 Viewing and exporting scan reports 22 View scan reports 22 Navigating your scan report folder 22 Contents of scan reports 23 View and export an error list 23 Exporting filename keyword hits and CRC CSAM hits 25 Export filename keyword hits or CRC CSAM hits 25 Export a list of saved hits 25 Updating Magnet OUTRIDER 27 Update Magnet OUTRIDER manually 27 Automatically check for updates 27 User Guide WHAT'S NEW VERSION DESCRIPTION 2.1.0 l Updated Configuring scan options with information about scanning connected networks, new supported operating system artifacts, and customizing case and report locations. 2.0.0 l Updated Reviewing scan results with information about new supported apps. -
Peer-To-Peer Protocol and Application Detection Support
Peer-to-Peer Protocol and Application Detection Support This appendix lists all the protocols and applications currently supported by Cisco ASR 5500 ADC. • Supported Protocols and Applications, page 1 Supported Protocols and Applications This section lists all the supported P2P protocols, sub-protocols, and the applications using these protocols. Important Please note that various client versions are supported for the protocols. The client versions listed in the table below are the latest supported version(s). Important Please note that the release version in the Supported from Release column has changed for protocols/applications that are new since the ADC plugin release in August 2015. This will now be the ADC Plugin Build number in the x.xxx.xxx format. The previous releases were versioned as 1.1 (ADC plugin release for December 2012 ), 1.2 (ADC plugin release for April 2013), and so on for consecutive releases. New in this Release This section lists the supported P2P protocols, sub-protocols and applications introduced in the ADC Plugin release for December 1, 2017. ADC Administration Guide, StarOS Release 21.6 1 Peer-to-Peer Protocol and Application Detection Support New in this Release Protocol / Client Client Version Group Classification Supported from Application Release 6play 6play (Android) 4.4.1 Streaming Streaming-video ADC Plugin 2.19.895 Unclassified 6play (iOS) 4.4.1 6play — (Windows) BFM TV BFM TV 3.0.9 Streaming Streaming-video ADC Plugin 2.19.895 (Android) Unclassified BFM TV (iOS) 5.0.7 BFM — TV(Windows) Clash Royale -
Everyone's Guide to Bypassing Internet Censorship
EVERYONE’S GUIDE TO BY-PASSING INTERNET CENSORSHIP FOR CITIZENS WORLDWIDE A CIVISEC PROJECT The Citizen Lab The University of Toronto September, 2007 cover illustration by Jane Gowan Glossary page 4 Introduction page 5 Choosing Circumvention page 8 User self-assessment Provider self-assessment Technology page 17 Web-based Circumvention Systems Tunneling Software Anonymous Communications Systems Tricks of the trade page 28 Things to remember page 29 Further reading page 29 Circumvention Technologies Circumvention technologies are any tools, software, or methods used to bypass Inter- net filtering. These can range from complex computer programs to relatively simple manual steps, such as accessing a banned website stored on a search engine’s cache, instead of trying to access it directly. Circumvention Providers Circumvention providers install software on a computer in a non-filtered location and make connections to this computer available to those who access the Internet from a censored location. Circumvention providers can range from large commercial organi- zations offering circumvention services for a fee to individuals providing circumven- tion services for free. Circumvention Users Circumvention users are individuals who use circumvention technologies to bypass Internet content filtering. 4 Internet censorship, or content filtering, has become a major global problem. Whereas once it was assumed that states could not control Internet communications, according to research by the OpenNet Initiative (http://opennet.net) more than 25 countries now engage in Internet censorship practices. Those with the most pervasive filtering policies have been found to routinely block access to human rights organi- zations, news, blogs, and web services that challenge the status quo or are deemed threatening or undesirable. -
Best VPN Services in 2017 (Speed, Cost & Usability Reviews)
10/8/2017 Best VPN Services in 2017 (Speed, Cost & Usability Reviews) Best VPN Services VPN Reviews & In-Depth Comparisons Brad Smith Sep 18, 2017 With the help of John & Andrey (https://thebestvpn.com/contact-us/), we’ve put together a list of best VPNs. We compared their download/upload speed, support, usability, cost, servers, countries and features. We also analyzed their TOS to see if they keep logs or not and whether they allow P2P and work with Netflix. here’s a link to the spreadsheet (https://docs.google.com/spreadsheets/d/11IZdVCBjVvbdaKx2HKz2hKB4F Z_l8nRJXXubX4FaQj4/) You want to start using a VPN, but don’t know which software/service to use? In this page, we’ve reviewed 30+ most popular VPN services (on going process). In order to find out which are best VPNs, we spent some time on research and speed testing: 1. Installed 30+ VPN software on our personal devices, such as Windows, Mac, Android and iOS and compared their usability. 2. Performed Download/Upload speed tests on speedtest.net to see which had best performing servers. 3. Double checked if they work with Netflix and allow P2P. 4. Read their TOS to verify if they keep logs or not. 5. Compared security (encryption and protocols). That means we’ve dug through a large number of privacy policies (on logging), checked their features, speed, customer support and usability. If you know a good VPN provider that is not listed here, please contact us and we’ll test it out as soon as possible. 5 Best VPNs for Online Privacy and Security Here are the top 5 VPN services of 2017 after our research, analysis, monitoring, testing, and verifying. -
The Price of an Andover Education: Cut 16 Students from the Intelligent Or Capable You Previous 87 One-On-One Are.” Appointments
Google search your soul. www.phillipian.net Veritas Super Omnia Vol. CXXXVI, No. 29 January 31, 2014 Phillips Academy Academic Skills Center Shifts Focus as Student Demand Increases that approach the ASC By RANI IYER with learning disabilities have Attention Deficit Every year, the Aca- Disorders (ADD) or anxi- demic Skills Center (ASC) ety disorders, which can opens its doors to help cause distraction, lack of new students manage the organization and lack of whirlwind of commit- priorities—all major aca- ments at Andover and the demic skills. school’s demanding aca- “We probably weren’t demic workload. Due to a taking [concussions] seri- recent rise in the number ously enough until recent of reported concussions years. There was the law- and learning disabilities, suit against the National however, the ASC has Football League that was been forced to forgo ap- settled in the defendant’s pointments with students favor… I think more kids who seek academic assis- who had concussions who tance to prioritize those weren’t treated in the past with learning and tempo- are now being treated, rary disabilities. which is a good thing,” The number of stu- said Davison. “The stig- dents requiring disability ma that may have once accommodations in a full persisted around having year has grown from 33 in a disability I think has J. WOLFE/THE PHILLIPIAN the 2011-2012 school year lifted greatly. People are Michael Kim ’14 and Sam Zager ’15 of the Bobcats dodgeball team celebrate after advancing to the quarter finals. to 51 students in the 2012- much more accepting and 2013 school year. -
The Power and Perils of Technology
The Parents League OF NEW YORK Review 2015 Essential Articles on Parenting and Education ARTICLE REPRINT THIS ARTICLE FIRST APPEARED IN THE 2015 EDITION OF THE PARENTS LEAGUE REVIEW © 2015 PARENTS LEAGUE OF NEW YORK • (212) 737-7385 • WWW.PARENTSLEAGUE.ORG The Power and Perils of its manifold temptations and other challenges. Parents did every- thing they could to enable their children to become well-adjusted, Technology confident, happy people as they launched into the world as adults. In the digital age, these questions remain at the core of what we JOHN PALFREY worry about as parents. The essential nature of the challenge doesn’t Head of School, Phillips Academy, Andover change. What’s different in the From the child's digital age is that there’s anoth- perspective, there is no er aspect to the problem. Our Raising and educating children was hard enough as it was. The "online life" and "offline kids’ lives are mediated by tech- addition of a new variable to the equation seems a bit unfair. nology much, though not all, Our children’s use of technology, which seems to change by the life." There's just life. of the time. Our children are month if not by the week, is like adding a whole series of new living partly in a digital envi- variables. The equations that have gotten harder have to do with ronment and partly in a face-to-face environment. social and emotional growth, concerns about getting into schools Our job as parents and as teachers is to help children make or obtaining a first job, and how to optimize technology use for good choices in their digital life, just as they must in the analog academic development. -
Digital Authoritarianism and the Global Threat to Free Speech Hearing
DIGITAL AUTHORITARIANISM AND THE GLOBAL THREAT TO FREE SPEECH HEARING BEFORE THE CONGRESSIONAL-EXECUTIVE COMMISSION ON CHINA ONE HUNDRED FIFTEENTH CONGRESS SECOND SESSION APRIL 26, 2018 Printed for the use of the Congressional-Executive Commission on China ( Available at www.cecc.gov or www.govinfo.gov U.S. GOVERNMENT PUBLISHING OFFICE 30–233 PDF WASHINGTON : 2018 VerDate Nov 24 2008 12:25 Dec 16, 2018 Jkt 081003 PO 00000 Frm 00001 Fmt 5011 Sfmt 5011 C:\USERS\DSHERMAN1\DESKTOP\VONITA TEST.TXT DAVID CONGRESSIONAL-EXECUTIVE COMMISSION ON CHINA LEGISLATIVE BRANCH COMMISSIONERS Senate House MARCO RUBIO, Florida, Chairman CHRIS SMITH, New Jersey, Cochairman TOM COTTON, Arkansas ROBERT PITTENGER, North Carolina STEVE DAINES, Montana RANDY HULTGREN, Illinois JAMES LANKFORD, Oklahoma MARCY KAPTUR, Ohio TODD YOUNG, Indiana TIM WALZ, Minnesota DIANNE FEINSTEIN, California TED LIEU, California JEFF MERKLEY, Oregon GARY PETERS, Michigan ANGUS KING, Maine EXECUTIVE BRANCH COMMISSIONERS Not yet appointed ELYSE B. ANDERSON, Staff Director PAUL B. PROTIC, Deputy Staff Director (ii) VerDate Nov 24 2008 12:25 Dec 16, 2018 Jkt 081003 PO 00000 Frm 00002 Fmt 0486 Sfmt 0486 C:\USERS\DSHERMAN1\DESKTOP\VONITA TEST.TXT DAVID C O N T E N T S STATEMENTS Page Opening Statement of Hon. Marco Rubio, a U.S. Senator from Florida; Chair- man, Congressional-Executive Commission on China ...................................... 1 Statement of Hon. Christopher Smith, a U.S. Representative from New Jer- sey; Cochairman, Congressional-Executive Commission on China .................. 4 Cook, Sarah, Senior Research Analyst for East Asia and Editor, China Media Bulletin, Freedom House ..................................................................................... 6 Hamilton, Clive, Professor of Public Ethics, Charles Sturt University (Aus- tralia) and author, ‘‘Silent Invasion: China’s Influence in Australia’’ ............ -
Telex | Anticensorship in the Network Infrastructure
Telex | Anticensorship in the Network Infrastructure Eric Wustrow Scott Wolchok Ian Goldberg* J. Alex Halderman University of Michigan *University of Waterloo Background | Internet Censorship No censorship Some censorship Country under surveillance from Reports Without Borders Most heavily censored nations 2 Background | Network-based Censorship Government censors Block websites containing “offensive” content Commonly employ blacklist approach Observed techniques IP blocking, DNS blackholes, forged RST packets Popular countermeasures Mostly proxy based — Tor, Freenet, Ultrasurf, … Problem: Cat-and-mouse game Need to communicate proxy addresses to users but not to censors, or else they’ll be blocked too! 3 Our Approach | Telex Operates in the network infrastructure Components placed at ISP between the censor's network and non -blocked portions of the Internet. We call this end-to-middle proxying Focuses on avoiding detection by the censor Complements anonymity systems such as Tor Employs a form of deep-packet inspection Turns common censor technology on its head Has no secrets to communicate to users in advance Relies instead on public -key steganography Provides state-level response to state censorship We envision government incentives for ISPs 4 Telex | Threat Model Censor … controls client’s network, but not external network … blocks according to a blacklist … allows HTTPS connections to non-blocked sites 5 Telex | Overview 6 Telex | Overview 7 Telex | Overview 8 Telex | Overview 9 Telex | Overview 10 Telex | Overview 11 Details | Telex-TLS Handshake 1. Client starts TLS connection to NotBlocked.com TLS ClientHello[nonce= ] .com ked c c NotBlo 2. Station recognizes using private key, but Censor can’t tell from normal random nonce 12 Details | Telex-TLS Handshake 3. -
VPN Report 2020
VPN Report 2020 www.av-comparatives.org Independent Tests of Anti-Virus Software VPN - Virtual Private Network 35 VPN services put to test LANGUAGE : ENGLISH LAST REVISION : 20 TH MAY 2020 WWW.AV-COMPARATIVES.ORG 1 VPN Report 2020 www.av-comparatives.org Contents Introduction 4 What is a VPN? 4 Why use a VPN? 4 Vague Privacy 5 Potential Risks 5 The Relevance of No-Logs Policies 6 Using VPNs to Spoof Geolocation 6 Test Procedure 7 Lab Setup 7 Test Methodology 7 Leak Test 7 Kill-Switch Test 8 Performance Test 8 Tested Products 9 Additional Product Information 10 Consolidations & Collaborations 10 Supported Protocols 11 Logging 12 Payment Information 14 Test Results 17 Leak & Kill-Switch Tests 17 Performance Test 19 Download speed 20 Upload speed 21 Latency 22 Performance Overview 24 Discussion 25 General Security Observations 25 Test Results 25 Logging & Privacy Policies 26 Further Recommendations 27 2 VPN Report 2020 www.av-comparatives.org Individual VPN Product Reviews 28 Avast SecureLine VPN 29 AVG Secure VPN 31 Avira Phantom VPN 33 Bitdefender VPN 35 BullGuard VPN 37 CyberGhost VPN 39 ExpressVPN 41 F-Secure Freedome 43 hide.me VPN 45 HMA VPN 47 Hotspot Shield 49 IPVanish 51 Ivacy 53 Kaspersky Secure Connection 55 McAfee Safe Connect 57 mySteganos Online Shield VPN 59 Norton Secure VPN 63 Panda Dome VPN 65 Private Internet Access 67 Private Tunnel 69 PrivateVPN 71 ProtonVPN 73 PureVPN 75 SaferVPN 77 StrongVPN 79 Surfshark 81 TorGuard 83 Trust.Zone VPN 85 TunnelBear 87 VPNSecure 89 VPN Unlimited 91 VyprVPN 93 Windscribe 95 ZenMate VPN 97 Copyright and Disclaimer 99 3 VPN Report 2020 www.av-comparatives.org Introduction The aim of this test is to compare VPN services for consumers in a real-world environment by assessing their security and privacy features, along with download speed, upload speed, and latency.