bringing security and privacy to where the wild things...

39

Click here to load reader

Upload: vandieu

Post on 16-Apr-2018

213 views

Category:

Documents


1 download

TRANSCRIPT

Page 1: Bringing Security and Privacy to Where the Wild Things Areconference.hitb.org/hitbsecconf2015ams/wp-content/uploads/2014/12/...'NSA-Proof' Email ProtonMail Launching Mobile App - Forbes

Bringing Security and Privacy to Where the Wild Things Are

Runa A. Sandvik // @runasand

Page 2: Bringing Security and Privacy to Where the Wild Things Areconference.hitb.org/hitbsecconf2015ams/wp-content/uploads/2014/12/...'NSA-Proof' Email ProtonMail Launching Mobile App - Forbes

About me

• From Oslo, Norway

• Tested pens in London, UK

• Worked for The Tor Project

• And Freedom of the Press Foundation

• Currently freelancing

Things you knew and things you didn’t

Page 3: Bringing Security and Privacy to Where the Wild Things Areconference.hitb.org/hitbsecconf2015ams/wp-content/uploads/2014/12/...'NSA-Proof' Email ProtonMail Launching Mobile App - Forbes

What does this have to do with IoT and mobile?

Page 4: Bringing Security and Privacy to Where the Wild Things Areconference.hitb.org/hitbsecconf2015ams/wp-content/uploads/2014/12/...'NSA-Proof' Email ProtonMail Launching Mobile App - Forbes

Back in 2010From the WSJ

Page 5: Bringing Security and Privacy to Where the Wild Things Areconference.hitb.org/hitbsecconf2015ams/wp-content/uploads/2014/12/...'NSA-Proof' Email ProtonMail Launching Mobile App - Forbes

Two years later

Page 6: Bringing Security and Privacy to Where the Wild Things Areconference.hitb.org/hitbsecconf2015ams/wp-content/uploads/2014/12/...'NSA-Proof' Email ProtonMail Launching Mobile App - Forbes

Just the other day

Page 7: Bringing Security and Privacy to Where the Wild Things Areconference.hitb.org/hitbsecconf2015ams/wp-content/uploads/2014/12/...'NSA-Proof' Email ProtonMail Launching Mobile App - Forbes

Something to keep in mind

Page 8: Bringing Security and Privacy to Where the Wild Things Areconference.hitb.org/hitbsecconf2015ams/wp-content/uploads/2014/12/...'NSA-Proof' Email ProtonMail Launching Mobile App - Forbes

So why do we do it?

Page 9: Bringing Security and Privacy to Where the Wild Things Areconference.hitb.org/hitbsecconf2015ams/wp-content/uploads/2014/12/...'NSA-Proof' Email ProtonMail Launching Mobile App - Forbes

Innovation

Page 10: Bringing Security and Privacy to Where the Wild Things Areconference.hitb.org/hitbsecconf2015ams/wp-content/uploads/2014/12/...'NSA-Proof' Email ProtonMail Launching Mobile App - Forbes

And money too

Page 11: Bringing Security and Privacy to Where the Wild Things Areconference.hitb.org/hitbsecconf2015ams/wp-content/uploads/2014/12/...'NSA-Proof' Email ProtonMail Launching Mobile App - Forbes

Managing expectations

Page 12: Bringing Security and Privacy to Where the Wild Things Areconference.hitb.org/hitbsecconf2015ams/wp-content/uploads/2014/12/...'NSA-Proof' Email ProtonMail Launching Mobile App - Forbes

Creating that baseline

Page 13: Bringing Security and Privacy to Where the Wild Things Areconference.hitb.org/hitbsecconf2015ams/wp-content/uploads/2014/12/...'NSA-Proof' Email ProtonMail Launching Mobile App - Forbes

And building on it

Page 14: Bringing Security and Privacy to Where the Wild Things Areconference.hitb.org/hitbsecconf2015ams/wp-content/uploads/2014/12/...'NSA-Proof' Email ProtonMail Launching Mobile App - Forbes

Dear journalists

Page 15: Bringing Security and Privacy to Where the Wild Things Areconference.hitb.org/hitbsecconf2015ams/wp-content/uploads/2014/12/...'NSA-Proof' Email ProtonMail Launching Mobile App - Forbes

Dear hackers

Page 16: Bringing Security and Privacy to Where the Wild Things Areconference.hitb.org/hitbsecconf2015ams/wp-content/uploads/2014/12/...'NSA-Proof' Email ProtonMail Launching Mobile App - Forbes

We can do better

Page 17: Bringing Security and Privacy to Where the Wild Things Areconference.hitb.org/hitbsecconf2015ams/wp-content/uploads/2014/12/...'NSA-Proof' Email ProtonMail Launching Mobile App - Forbes

Security versus privacy

Page 18: Bringing Security and Privacy to Where the Wild Things Areconference.hitb.org/hitbsecconf2015ams/wp-content/uploads/2014/12/...'NSA-Proof' Email ProtonMail Launching Mobile App - Forbes

While in London

Page 19: Bringing Security and Privacy to Where the Wild Things Areconference.hitb.org/hitbsecconf2015ams/wp-content/uploads/2014/12/...'NSA-Proof' Email ProtonMail Launching Mobile App - Forbes

Data has value

Page 20: Bringing Security and Privacy to Where the Wild Things Areconference.hitb.org/hitbsecconf2015ams/wp-content/uploads/2014/12/...'NSA-Proof' Email ProtonMail Launching Mobile App - Forbes

Yes, really

Page 21: Bringing Security and Privacy to Where the Wild Things Areconference.hitb.org/hitbsecconf2015ams/wp-content/uploads/2014/12/...'NSA-Proof' Email ProtonMail Launching Mobile App - Forbes

Not just $$$

Page 22: Bringing Security and Privacy to Where the Wild Things Areconference.hitb.org/hitbsecconf2015ams/wp-content/uploads/2014/12/...'NSA-Proof' Email ProtonMail Launching Mobile App - Forbes

People will do crazy things

Page 23: Bringing Security and Privacy to Where the Wild Things Areconference.hitb.org/hitbsecconf2015ams/wp-content/uploads/2014/12/...'NSA-Proof' Email ProtonMail Launching Mobile App - Forbes

Rules of the road

Page 24: Bringing Security and Privacy to Where the Wild Things Areconference.hitb.org/hitbsecconf2015ams/wp-content/uploads/2014/12/...'NSA-Proof' Email ProtonMail Launching Mobile App - Forbes

Transparency is key

Page 25: Bringing Security and Privacy to Where the Wild Things Areconference.hitb.org/hitbsecconf2015ams/wp-content/uploads/2014/12/...'NSA-Proof' Email ProtonMail Launching Mobile App - Forbes

When pigs fly

Page 26: Bringing Security and Privacy to Where the Wild Things Areconference.hitb.org/hitbsecconf2015ams/wp-content/uploads/2014/12/...'NSA-Proof' Email ProtonMail Launching Mobile App - Forbes

Better late than never?

Page 27: Bringing Security and Privacy to Where the Wild Things Areconference.hitb.org/hitbsecconf2015ams/wp-content/uploads/2014/12/...'NSA-Proof' Email ProtonMail Launching Mobile App - Forbes

Better late than never?

Page 28: Bringing Security and Privacy to Where the Wild Things Areconference.hitb.org/hitbsecconf2015ams/wp-content/uploads/2014/12/...'NSA-Proof' Email ProtonMail Launching Mobile App - Forbes

All you have to do is ask

Page 29: Bringing Security and Privacy to Where the Wild Things Areconference.hitb.org/hitbsecconf2015ams/wp-content/uploads/2014/12/...'NSA-Proof' Email ProtonMail Launching Mobile App - Forbes

Where do we go from here?

Page 30: Bringing Security and Privacy to Where the Wild Things Areconference.hitb.org/hitbsecconf2015ams/wp-content/uploads/2014/12/...'NSA-Proof' Email ProtonMail Launching Mobile App - Forbes

The real question is…

Page 31: Bringing Security and Privacy to Where the Wild Things Areconference.hitb.org/hitbsecconf2015ams/wp-content/uploads/2014/12/...'NSA-Proof' Email ProtonMail Launching Mobile App - Forbes

How do you educate people?

Page 32: Bringing Security and Privacy to Where the Wild Things Areconference.hitb.org/hitbsecconf2015ams/wp-content/uploads/2014/12/...'NSA-Proof' Email ProtonMail Launching Mobile App - Forbes

No privacy utopia

Page 33: Bringing Security and Privacy to Where the Wild Things Areconference.hitb.org/hitbsecconf2015ams/wp-content/uploads/2014/12/...'NSA-Proof' Email ProtonMail Launching Mobile App - Forbes

We can do what we do best

Page 34: Bringing Security and Privacy to Where the Wild Things Areconference.hitb.org/hitbsecconf2015ams/wp-content/uploads/2014/12/...'NSA-Proof' Email ProtonMail Launching Mobile App - Forbes

Stay classy

Page 35: Bringing Security and Privacy to Where the Wild Things Areconference.hitb.org/hitbsecconf2015ams/wp-content/uploads/2014/12/...'NSA-Proof' Email ProtonMail Launching Mobile App - Forbes

Not everyone will want your help

Page 36: Bringing Security and Privacy to Where the Wild Things Areconference.hitb.org/hitbsecconf2015ams/wp-content/uploads/2014/12/...'NSA-Proof' Email ProtonMail Launching Mobile App - Forbes

Be responsible

Page 37: Bringing Security and Privacy to Where the Wild Things Areconference.hitb.org/hitbsecconf2015ams/wp-content/uploads/2014/12/...'NSA-Proof' Email ProtonMail Launching Mobile App - Forbes

It’s not all about code

Page 38: Bringing Security and Privacy to Where the Wild Things Areconference.hitb.org/hitbsecconf2015ams/wp-content/uploads/2014/12/...'NSA-Proof' Email ProtonMail Launching Mobile App - Forbes
Page 39: Bringing Security and Privacy to Where the Wild Things Areconference.hitb.org/hitbsecconf2015ams/wp-content/uploads/2014/12/...'NSA-Proof' Email ProtonMail Launching Mobile App - Forbes

Thanks! Questions?

Runa A. Sandvik // @runasand