cryptoparty: introduction by olexii markovets

124
Oleksiy Markovets [email protected] 3BCB 8D01 FFBA EBD3 AE08 79B8 C043 4EE6 0726 02B1

Upload: pivorak-meetup

Post on 21-Mar-2017

35 views

Category:

Software


0 download

TRANSCRIPT

Oleksiy Markovets

[email protected] 8D01 FFBA EBD3 AE0879B8 C043 4EE6 0726 02B1

Software developer

a bit of paranoiac

a person a little bit concerned with privacy

CryptoParty: Introduction

aka

Filling a gap between real talks

Part1:What’s CryptoParty?

It’s all about spreading knowledge,

and having fun

public and free to attend

commercially non-aligned

global and decentralized

Practical skills over theory

Basic crypto tools to masses

Part2: Why would one care?

“I’m boring person, doing boring stuff”

“I have nothing to hide”

“Why would anyone try to hack me?”

Right...

Would you disclose your FB password to a stranger?

Crypto is fun

Recall ciphers you made up in school

Military grade toys, this time

msg protected against NSA (aka surveillance bastards)

Impress your GF by being cool Hacker

Party is fun

Call your friends

Order pizza

Grab some beer

Meet new friends

Watch classic movie about Cyberspace

Like “Hackers”...

… the old one, from 1995 ...

… with young Angelina Jolie ...

(she was damn hot in her 20s)

Now getting serious

No privacy meansNo free speech

No free speech meansNo freedom

“Will never happen in my country”

“Not in 21st century”

Turkey blocks* twitter/facebook/signal/etc

China and The Great Firewall

Russia and Roskomnadzor

North Korea goes without saying

Corporate Surveillance

Private data used in targeted marketing

Another reason to care

Edward Snowden

aka

Citizenfour

aka

The whistle blower

Big brother is actually watching you

So if you are activist ...

… fighting for freedom of Tibet ...

… or maybe a journalist ...

… especially if you are journalist.

Last but not least

When you need to protect your privacy ...

it’s already too late to learn

Part 3: Common topics

[PGP/GPG]

aka

E-mail encryption suit

aka

Your entry point to privacy

Built in 1991, uncrackable till now

[Tor]

aka

TheDarkWeb

aka

The Anonymity Network

When you need to beat censorship

[Bitcoin]

aka

Crypto currency of the dark web

aka

What you pay for illegal services

Independent currency of future

[OTR]

aka

Encryption for instance messaging

aka

PGP with Blackjack

Forward secrecy

Deniable authentication

[Tails]

aka

All you need to go underground

Boot with USB stick, leave no trace

Stateless* - no persistent spyware

Pretty good integrity

All the toys included

Probably easiest way to start with Tor

Encrypted persistent storage

Perfect cold storage for your

Master gpg key

Bitcoin savings

Airgap mode

[Passwords]

aka

Stop doing stupid things

Check Top of most common passwords

password, 123456, qwerty, dragon, baseball, sex, letmein, football, shadow, tigger, fuck, batman, ... - are not passwords

Don’t use same password for all services

Try generated passwords and use managers

Part 4: Where to start?

https://cryptoparty.in

read “The CryptoParty Handbook”

read How-Tos

Learn why mass surveillance a problem

Educate yourself

Find help on mailing lists

Find nearest CryptoParty to visit

Find friends

Find place with Wi-Fi

Invite friends

Throw a Party

Drop me an email

AND FINALLY

Party like it’s 1984

and make surveillance bastards cry