you and your phone are huge threats to the net

@alecmuffett

@alecmuffettwww.alecmuffett.com

green lane securitywww.greenlanesecurity.com

www.greenlanesecurity.com

you and your phone area huge threat to the net

@alecmuffett www.greenlanesecurity.com

...but not in the way you may think

1: You

knowledge & memory

example: you & phone numbers

nowadays your phone helps you remember phone numbers

so you can ignore the phonebook

example: you & IP addresses

your computer is not yetbypassing DNS for you

2: Your Phone

(my phone)

samsung galaxy S2

(I used to sysadmin for universitieswhich had less CPU power)

networking

GPRS, 3G, HSDPA/+, Wifi

Mon Jan 9 21:40:05 82.xx.xx.xx Vigor[4294967295] <Info>: DoS smurf Block 31.106.0.240 -> 82.xx.xx.xx PR icmp len 20 84 icmp 0/8

Mon Jan 9 21:40:11 82.xx.xx.xx Vigor[4294967295] <Info>: DoS smurf Block 31.106.0.240 -> 82.xx.xx.xx PR icmp len 20 84 icmp 0/8

Your phone is...

powerful enough to be a server

thoroughly connected

but underutilised.

So what?

threat 1: censorship

domain filtering

UAE, Saudi, Ireland...

DNS domain seizure

newzbin2, dajaz1, ...

threat 2: network isolation

“divided we stand”

restricted ingress & egress= easier control

= simpler censorship

direct communication= disintermediation= harder to block

so why is your phone NAT’ed?

not security,else you need to avoid wifi

your phone is NAT’ed and firewalledinstead for another reason:

“because it’s what peoplecurrently expect”

summary

in three sentences:

“why can’t I ping your phone?”

“you’d do more with full connectivity...”

network access is not the same asnetwork connectivity

until this changes,you and your phone are promoting

inferior methods of network connectivity

ie: you are part of the problem

solutions?

technologies•IPv6

• no more scarcity of addresses• no more argument for NAT

• NAT is not a security mechanism• NAT is not a firewall

“a /48 is big enough for anyone?”*281,474,976,710,656 devices in your home?

technologies•Alternatives to DNS

• several out there• “.p2p” domain project

• also better DNS (i.e. DNSSEC)• Unloved by censors• SOPA would forbid

technologies•Tor

• ignores DNS internally• “.onion” domain

but the real solution

demand change.

you and your phone are huge threats to the net

phone nated

dns domain

youremember phone numbersso

phone area huge threat

better dns

nat nat

yetbypassing dns

pr icmp len

Technology

top threats to cloud computing: deep dive - bsi...

mcafee labs threats report - nanjgel threat... ·...

cyber risk management, technology, & media - welcome to...

top security threats for .net developers

[ppt]threats, vulnerabilities, and risks - old dominion...

realizing the potential of cell-based therapy technology ·...

contents · 1.2 architecture • mars mobile app reputation...

using .net classes in pb.ppt -...

advanced persistent threats (apts) subversive multi-vector...

4th transnational workshop duratinet durati net … ·...

emerging threats in theemerging threats in the battle...

jsssmcshubli.injsssmcshubli.in/.../02/annual-revision-english-std-1.docx ·...

tm the human genome epidemiology network (huge net) muin j....

chapter 6. natural environmental threats supply system...

manageengine.com.mx...eventlog analyzer search avarl*dle...

online safety threats and strategies. what are the threats?...

surviving huge growth by driving huge change

econ 3010 intermediate macroeconomics · u.s.: the...

an emerging threats essay invisible...

supplementary information -...