Wikileaks and the Problem of Anonymity: a Network Control Perspective Rita Zajacz, University of Iowa
Total Page:16
File Type:pdf, Size:1020Kb
Load more
Recommended publications
-
Arxiv:1907.07120V1 [Cs.CY] 16 Jul 2019 1 Introduction That China Hindered Access to I2P by Poisoning DNS Resolu- Tions of the I2P Homepage and Three Reseed Servers
Measuring I2P Censorship at a Global Scale Nguyen Phong Hoang Sadie Doreen Michalis Polychronakis Stony Brook University The Invisible Internet Project Stony Brook University Abstract required flexibility for conducting fine-grained measurements on demand. We demonstrate these benefits by conducting an The prevalence of Internet censorship has prompted the in-depth investigation of the extent to which the I2P (invis- creation of several measurement platforms for monitoring ible Internet project) anonymity network is blocked across filtering activities. An important challenge faced by these different countries. platforms revolves around the trade-off between depth of mea- Due to the prevalence of Internet censorship and online surement and breadth of coverage. In this paper, we present surveillance in recent years [7, 34, 62], many pro-privacy and an opportunistic censorship measurement infrastructure built censorship circumvention tools, such as proxy servers, virtual on top of a network of distributed VPN servers run by vol- private networks (VPN), and anonymity networks have been unteers, which we used to measure the extent to which the developed. Among these tools, Tor [23] (based on onion rout- I2P anonymity network is blocked around the world. This ing [39,71]) and I2P [85] (based on garlic routing [24,25,33]) infrastructure provides us with not only numerous and ge- are widely used by privacy-conscious and censored users, as ographically diverse vantage points, but also the ability to they provide a higher level of privacy and anonymity [42]. conduct in-depth measurements across all levels of the net- In response, censors often hinder access to these services work stack. -
Hacking the Web
Hacking the Web (C) 2009-2020 Arun Viswanathan Ellis Horowitz Marco Papa 1 Table of Contents } General Introduction } Authentication Attacks } Client-Side Attacks } Injection Attacks } Recent Attacks } Privacy Tools 2 (C) 2009-2020 Arun Viswanathan Ellis Horowitz Marco Papa Why secure the Web? } The Web has evolved into an ubiquitous entity providing a rich and common platform for connecting people and doing business. } BUT, the Web also offers a cheap, effective, convenient and anonymous platform for crime. } To get an idea, the Web has been used for the following types of criminal activities (source: The Web Hacking Incidents Database (WHID) http://projects.webappsec.org/w/page/13246995/Web-Hacking-Incident-Database) } Chaos (Attack on Russian nuclear power websites amid accident rumors (5Jan09) } Deceit (SAMY XSS Worm – Nov 2005) } Extortion (David Aireys domain hijacked due to a CSRF (cross site request forgery) flaw in Gmail – 30Dec2007) } Identity Theft (XSS on Yahoo! Hot jobs – Oct 2008) } Information Warfare (Israeli Gaza War - Jan 2009 / Balkan Wars – Apr 2008 ) } Monetary Loss (eBay fraud using XSS) } Physical Pain (Hackers post on epilepsy forum causes migraines and seizures – May 2008) } Political Defacements (Hacker changes news release on Sheriffs website – Jul 2008) (Obama, Oreilly and Britneys Twitter accounts hacked and malicious comments posted – Jan 09) } Chinese Gaming sites hacked (Dec. 2011) 3 Copyright(C) 2009 (c) -20092020- 2019Arun Arun Viswanathan Viswanathan Ellis HorowitzEllis Horowitz Marco Marco Papa Papa -
Sample Iis Publication Page
https://doi.org/10.48009/1_iis_2012_133-143 Issues in Information Systems Volume 13, Issue 1, pp. 133-143, 2012 HACKERS GONE WILD: THE 2011 SPRING BREAK OF LULZSEC Stan Pendergrass, Robert Morris University, [email protected] ABSTRACT Computer hackers, like the group known as Anonymous, have made themselves more and more relevant to our modern life. As we create and expand more and more data within our interconnected electronic universe, the threat that they bring to its fragile structure grows as well. However Anonymous is not the only group of hackers/activists or hacktivists that have made their presence known. LulzSec was a group that wreaked havoc with information systems in 2011. This will be a case study examination of their activities so that a better understanding of five aspects can be obtained: the Timeline of activities, the Targets of attack, the Tactics the group used, the makeup of the Team and a category which will be referred to as The Twist for reasons which will be made clear at the end of the paper. Keywords: LulzSec, Hackers, Security, AntiSec, Anonymous, Sabu INTRODUCTION Information systems lie at the heart of our modern existence. We deal with them when we work, when we play and when we relax; texting, checking email, posting on Facebook, Tweeting, gaming, conducting e-commerce and e- banking have become so commonplace as to be nearly invisible in modern life. Yet, within each of these electronic interactions lies the danger that the perceived line of security and privacy might be breached and our most important information and secrets might be revealed and exploited. -
Tor and Circumvention: Lessons Learned
Tor and circumvention: Lessons learned Nick Mathewson The Tor Project https://torproject.org/ 1 What is Tor? Online anonymity 1) open source software, 2) network, 3) protocol Community of researchers, developers, users, and relay operators Funding from US DoD, Electronic Frontier Foundation, Voice of America, Google, NLnet, Human Rights Watch, NSF, US State Dept, SIDA, ... 2 The Tor Project, Inc. 501(c)(3) non-profit organization dedicated to the research and development of tools for online anonymity and privacy Not secretly evil. 3 Estimated ~250,000? daily Tor users 4 Anonymity in what sense? “Attacker can’t learn who is talking to whom.” Bob Alice Alice Anonymity network Bob Alice Bob 5 Threat model: what can the attacker do? Alice Anonymity network Bob watch Alice! watch (or be!) Bob! Control part of the network! 6 Anonymity isn't cryptography: Cryptography just protects contents. “Hi, Bob!” “Hi, Bob!” Alice <gibberish> attacker Bob 7 Anonymity isn't just wishful thinking... “You can't prove it was me!” “Promise you won't look!” “Promise you won't remember!” “Promise you won't tell!” “I didn't write my name on it!” “Isn't the Internet already anonymous?” 8 Anonymity serves different interests for different user groups. Anonymity “It's privacy!” Private citizens 9 Anonymity serves different interests for different user groups. Anonymity Businesses “It's network security!” “It's privacy!” Private citizens 10 Anonymity serves different interests for different user groups. “It's traffic-analysis resistance!” Governments Anonymity Businesses “It's network security!” “It's privacy!” Private citizens 11 Anonymity serves different interests for different user groups. -
JULIAN ASSANGE: When Google Met Wikileaks
JULIAN ASSANGE JULIAN +OR Books Email Images Behind Google’s image as the over-friendly giant of global tech when.google.met.wikileaks.org Nobody wants to acknowledge that Google has grown big and bad. But it has. Schmidt’s tenure as CEO saw Google integrate with the shadiest of US power structures as it expanded into a geographically invasive megacorporation... Google is watching you when.google.met.wikileaks.org As Google enlarges its industrial surveillance cone to cover the majority of the world’s / WikiLeaks population... Google was accepting NSA money to the tune of... WHEN GOOGLE MET WIKILEAKS GOOGLE WHEN When Google Met WikiLeaks Google spends more on Washington lobbying than leading military contractors when.google.met.wikileaks.org WikiLeaks Search I’m Feeling Evil Google entered the lobbying rankings above military aerospace giant Lockheed Martin, with a total of $18.2 million spent in 2012. Boeing and Northrop Grumman also came below the tech… Transcript of secret meeting between Julian Assange and Google’s Eric Schmidt... wikileaks.org/Transcript-Meeting-Assange-Schmidt.html Assange: We wouldn’t mind a leak from Google, which would be, I think, probably all the Patriot Act requests... Schmidt: Which would be [whispers] illegal... Assange: Tell your general counsel to argue... Eric Schmidt and the State Department-Google nexus when.google.met.wikileaks.org It was at this point that I realized that Eric Schmidt might not have been an emissary of Google alone... the delegation was one part Google, three parts US foreign-policy establishment... We called the State Department front desk and told them that Julian Assange wanted to have a conversation with Hillary Clinton... -
Stratfor: “US Aims to Prevent a German-Russian Alliance”
Stratfor: “US aims to prevent a German-Russian alliance” By Eric Zuesse Region: Europe, Russia and FSU Global Research, March 18, 2015 Theme: Intelligence, US NATO War Agenda Deutsche Wirtschafts Nachrichten The head of the private intelligence agency Stratfor has for the first time publicly said that the US government considers to be its overriding strategic objective the prevention of a German-Russian alliance. Blocking that alliance is the only way to prevent an alternative world power capable of challenging extension of the American position of being the world’s lone superpower. [In this video, he says that the U.S. will fail in that overriding objective; German technology and capital will combine with Russian natural resources and “land-power,” to produce a truly bipolar world: U.S. v. Eurasia. So: he sees the U.S. strategy as being to block that, by weakening both Germany and Russia. That strategy would explain what Obama is doing in Ukraine, and the sanctions that are hurting both Russia and Germany, but Friedman thinks that nothing can work.] Background: The American political scientist George Friedman is chief of intelligence think tank “Stratfor Global Intelligence”, which he founded in 1996. The headquarters of Stratfor is located in Texas. Stratfor advises 4,000 companies, individuals and governments around the world, reports the New York Times. These include Bank of America, the US State Department, Apple, Microsoft and Lockheed Martin, Monsanto and Cisco, on security issues. In December 2011 there was a hacker attack on the computer system of Stratfor. Then 90,000 names, addresses, credit card numbers, passwords Stratfor clients were published. -
November 15, 2011 Hon. Patrick Leahy, Chairman Hon. Chuck
November 15, 2011 Hon. Patrick Leahy, Chairman Hon. Lamar Smith, Chairman Hon. Chuck Grassley, Ranking Hon. John Conyers Jr., Ranking Member Member Senate Judiciary Committee House Judiciary Committee 224 Dirksen Senate Office Building 2138 Rayburn House Office Building US Capitol US Capitol Washington, DC 20002 Washington, DC 20003 Dear Committee Chairmen, On behalf of the undersigned student and youth organizations, we are writing today to express our serious concerns about legislation being considered by the House and Senate in the name of fighting Internet piracy. We oppose, in their current forms, legislation approved by the Senate Judiciary Committee ( S. 968, the Protect IP Act) and legislation introduced by members of the House Judiciary Committee (HR 3261, the Stop Online Piracy Act-SOPA) that, while pursuing the laudable goal of fighting Internet piracy, will curtail the legitimate free flow of information, hurt efforts to promote human rights, create undue censorship of legitimate websites and interfere with the growth of the Internet economy so important to our futures as young people. The Senate bill, while narrowed from earlier versions, contains many objectionable provisions including the DNS Internet blocking system that attacks the very foundation of the Internet address system and according to some will undermine security and the provision that specifically targets "Information Location Tools / Search Engines” that has the potential of crippling the gate ways to the Internet and its wealth of information by forcing the platforms we use to search for information to become censors rather than compasses. The House bill goes even further than its Senate counterpart by including an overly broad definition of an infringing website subject to immediate blocking. -
Tor: the Second-Generation Onion Router (2014 DRAFT V1)
Tor: The Second-Generation Onion Router (2014 DRAFT v1) Roger Dingledine Nick Mathewson Steven Murdoch The Free Haven Project The Free Haven Project Computer Laboratory [email protected] [email protected] University of Cambridge [email protected] Paul Syverson Naval Research Lab [email protected] Abstract Perfect forward secrecy: In the original Onion Routing We present Tor, a circuit-based low-latency anonymous com- design, a single hostile node could record traffic and later munication service. This Onion Routing system addresses compromise successive nodes in the circuit and force them limitations in the earlier design by adding perfect forward se- to decrypt it. Rather than using a single multiply encrypted crecy, congestion control, directory servers, integrity check- data structure (an onion) to lay each circuit, Tor now uses an ing, configurable exit policies, anticensorship features, guard incremental or telescoping path-building design, where the nodes, application- and user-selectable stream isolation, and a initiator negotiates session keys with each successive hop in practical design for location-hidden services via rendezvous the circuit. Once these keys are deleted, subsequently com- points. Tor is deployed on the real-world Internet, requires promised nodes cannot decrypt old traffic. As a side benefit, no special privileges or kernel modifications, requires little onion replay detection is no longer necessary, and the process synchronization or coordination between nodes, and provides of building circuits is more reliable, since the initiator knows a reasonable tradeoff between anonymity, usability, and ef- when a hop fails and can then try extending to a new node. -
"Gover Be Rnment Ma Efore the H Testim Chief of Am W Andated DN
This statement was drafted in connection with a proposed hearing before the House Oversight and Government Reform Committee that would haave examined legislative proposals to block access to websites containing coopyright inffringing materials. The testimony was submitted to the Committee, but thhe hearing was postponed before the testimony could be entered in the record. Testimony of Michael W. Macleod-Ball Chief of Staff/First Amendment Counsel American Civil Liberties Union Washington Legislativve Office On "Government Mandated DNS Blocking and Search Takedowns - Will It End the Internet as We Know It? Before the House Committee on Oversight and Government Reform January 18, 2012 1 Chairman Issa, Ranking Member Cummings, and Members of the Committee: Thank you for holding this hearing and extending to the American Civil Liberties Union the privilege of offering testimony. We oppose current proposals to take down infringing online content through Domain Name Service (DNS) and/or search engine blocking because such mechanisms assuredly will also block lawful non-infringing content. Moreover, current proposals fall short procedurally by failing to provide notice of the takedown to the owners or producers of such lawful content and by failing to provide those parties any opportunity to participate in the proceedings relevant to the restriction. The American Civil Liberties Union (ACLU) is a non-partisan advocacy organization having more than a half million members, countless additional activists and supporters, and 53 affiliates nationwide. We are dedicated to the principles of individual rights, equality, and justice as set forth in the U. S. Constitution. For more than 90 years since its founding, the ACLU has been America’s leading defender of First Amendment free speech principles. -
CONGRESSIONAL RECORD—SENATE, Vol. 158, Pt
January 23, 2012 CONGRESSIONAL RECORD—SENATE, Vol. 158, Pt. 1 149 Senate. Senator KIRK is such a decent, Last week, the Congress did what the the U.S. companies that direct traffic, proc- caring, and thoughtful man, and all of American people called for instead of ess payments, serve advertisements and lo- us enjoy working with him in the Sen- what the Washington insiders wanted. cate information online to end their support for the site in question. Copyright and trade- ate on various kinds of bills. Godspeed, That is what I call real change. It was mark owners would be able to follow up Senator KIRK, for a healthy recovery. a grassroots victory for the history those court orders by seeking injunctions We are thinking of you tonight and you books, and, as one commentator said, against payment processors and advertising are in our prayers. I am very glad the now we are in unexplored territory. networks that do not comply. senior Senator from Illinois has re- Here is why. Eight million of 162 mil- Cutting off the financial lifeblood of com- flected the concerns of everybody from lion who visited Wikipedia took action panies dedicated to piracy and counter- feiting makes sense. A similar approach to his home State tonight. to influence their Member of Congress; illegal online gambling has shown that it is f 7 million Americans signed Google’s technically feasible for payment processors petition to block consideration of THE INTERNET to stop directing dollars from U.S. bettors to PIPA; hundreds of thousands of Ameri- gambling sites anywhere in the world. -
One World LED, Pty, LTD
A Request for Legislation Support of Australian Innovation: Submission to Hon. MP Ms. Nicolle Flint September 28, 2020 The Need for Legislation to Protect Australian Innovation A Report to Honourable MP Ms. Nicolle Flint By One World LED, Pty, LTD. September 30, 2020, Updated October 1, 2020 Adelaide, South Australia A Request for Legislation Support of Australian Innovation: Submission to Hon. MP Ms. Nicolle Flint September 28, 2020 Introduction This is One World LED's request for legislation to support the innovation in Australia. There is an urgent need to update the legislation in a highly competitive global technology environment in order to even the playing field for Australian inventors and innovation investors competing against global hi-tech conglomerates that enjoy the support of their respective governments with updated laws. Australia’s IP laws predate the global internet and modern worldwide web technologies and innovations and are of little or no value in protecting Australian innovation and inventors in the international setting. Following is a summary of the proposed legislation: 1. Australia Invents Act - Protect Australian Inventors and Investors. A. Supporting enforcement of IP rights in Australia against conglomerates. B. Supporting Investors claims in Australian courts against global infringement 2. Economic Support for Innovation in Australia - Removing Australian innovation barriers by: A. Government Tenders disqualifying conglomerates that violate Australian IP B. Government Tenders preference for Australian IP in the underlying products and services 3. Transparency in Government Contracts A. Full transparency with Government contracts – Open access to contract information for Australian innovative companies B. Prevention of costs subversion & add-ons - No allowance for hidden charges or overcharging the Australian government without a re-bid C. -
Piracy Versus Privacy: an Analysis of Values Encoded in the Piratebrowser
International Journal of Communication 9(2015), 818–838 1932–8036/20150005 Piracy Versus Privacy: An Analysis of Values Encoded in the PirateBrowser BALÁZS BODÓ University of Amsterdam, Institute for Information Law The Netherlands The PirateBrowser is a Web browser that uses Tor privacy-enhancing technology to circumvent nationally implemented Internet filters blocking access to The Pirate Bay. This article analyzes the possible consequences of a mass influx of copyright pirates into the privacy domain. The article addresses the effects of the uptake of strong privacy technologies by pirates on copyright enforcement and on free speech and privacy technology domains. Also discussed are the norms and values reflected in the specific design choices taken by the developers of the PirateBrowser. Keywords: piracy, privacy, Tor, privacy-enhancing technologies, policy Introduction Tor (The Onion Router), “endorsed by Egyptian activists, WikiLeaks, NSA, GCHQ, Chelsea Manning, Snowden” (Dingledine & Appelbaum, 2013), is a volunteer network of computers that relays Web traffic through itself to provide anonymous, unobserved, and uncensored access to the Internet. It has about 4,000 relays and about 1,000 exit nodes. Tor users connect to the network, and their Web traffic is channeled through the internal relays to reach its final destination through one of the exit nodes. This arrangement makes the identification and surveillance of Tor users difficult. Anonymity is promised by the difficulty of tracing the Web traffic that appears on the exit node back to the individual who initiated the traffic, as long as there is a sufficient number of internal hops in between. Protection from surveillance is granted by the fact that each link in the communication chain is encrypted.