-
8/13/2019 Jacob Appelbaum - To Protect and Infect: The Militarization of the Internet - 30c3 (Slide Presentation)
1/76
To Protect And InfectThe Militarization of the Internet
(Part Two; in three acts)
The 30c3 December 30th
, 0!3"acob A##elba$m (%ioerror)
-
8/13/2019 Jacob Appelbaum - To Protect and Infect: The Militarization of the Internet - 30c3 (Slide Presentation)
2/76
Act I
-
8/13/2019 Jacob Appelbaum - To Protect and Infect: The Militarization of the Internet - 30c3 (Slide Presentation)
3/76
(&ow end) cor#orate s#'in
ommercial hardware sol$tions are rather borin
*orensics hardware li+e the Mo$se "iler
-ow disabled in s'stemd (.)
Power insertion attac+s
/ot#l$ seiz$res
e'stro+e recorders
larel' lame
*in*isher, /ac+inTeam, 12P-
-
8/13/2019 Jacob Appelbaum - To Protect and Infect: The Militarization of the Internet - 30c3 (Slide Presentation)
4/76
4afael is a 5o$rnalistfrom Anola, whoe6#osed corr$#tion
in the o7ernment8
-
8/13/2019 Jacob Appelbaum - To Protect and Infect: The Militarization of the Internet - 30c3 (Slide Presentation)
5/76
Anola Attac+
Disco7ered at 9slo *reedom *or$m
&amest 9: bac+door e7er
:creenca#t$re
$rl
:lee#
2ns$s#ectin < => of screenshots in the home director'
Infrastr$ct$re connected with 9#eration /ano7er
A##in :ec$rit'
ode sined
A##le re7o+ed the sinin #ermissions in a reasonable time frame
-
8/13/2019 Jacob Appelbaum - To Protect and Infect: The Militarization of the Internet - 30c3 (Slide Presentation)
6/76
In :$mmer 0!3 4afael was arrested, thenreleased and faced !! criminal chares for his
wor+ e6#osin corr$#tion8
-
8/13/2019 Jacob Appelbaum - To Protect and Infect: The Militarization of the Internet - 30c3 (Slide Presentation)
7/76
The' do harm to ood #eo#le and the' wa7e awa' their contrib$tion to increasi
total amo$nt of h$man s$fferin in the w
These $'s aren?t im#ressi7e
-
8/13/2019 Jacob Appelbaum - To Protect and Infect: The Militarization of the Internet - 30c3 (Slide Presentation)
8/76
-
8/13/2019 Jacob Appelbaum - To Protect and Infect: The Militarization of the Internet - 30c3 (Slide Presentation)
9/76
Act II
-
8/13/2019 Jacob Appelbaum - To Protect and Infect: The Militarization of the Internet - 30c3 (Slide Presentation)
10/76
Meta@#oint non@attrib$table to -:A
Meta@#oint Totals$r7eillance B control in
Intellience aenc' sol$tions
-
8/13/2019 Jacob Appelbaum - To Protect and Infect: The Militarization of the Internet - 30c3 (Slide Presentation)
11/76
The >i Pict$re Planetar' :trateic :$r7eillance and888 6#loitation :'stems Passi7e sensors ollect (T24M9I&) Acti7e attac+s Infect (T24>I-, C*I4, etc) ait, what abo$t ProtectE. M$lti@#wn. >lac+hats $sed to +ee# 'o$r bo6 $#dated 888 these $'s ste# on each other?s toes
9#erations Flose Access 9#erationsF and F9
-
8/13/2019 Jacob Appelbaum - To Protect and Infect: The Militarization of the Internet - 30c3 (Slide Presentation)
12/76
-
8/13/2019 Jacob Appelbaum - To Protect and Infect: The Militarization of the Internet - 30c3 (Slide Presentation)
13/76
/ow do the' do itE
Dranet s$r7eillance Data retention H! 'ears at least, incl$din content. Tas+in, e6#loitation
C2A-T2M T/94J and how each sol$tries to meet this oal Man@9n@The@:ide as C2A-T2M I-:4 P4I:M, F$#streamG and man' other #ro
-
8/13/2019 Jacob Appelbaum - To Protect and Infect: The Militarization of the Internet - 30c3 (Slide Presentation)
14/76
-
8/13/2019 Jacob Appelbaum - To Protect and Infect: The Militarization of the Internet - 30c3 (Slide Presentation)
15/76
FThe'?ll ne7er find me.G
Dream on Data 4etention is an im#ortantotal s$r7eillance and the anal'sis is s$cc
aainst $s all8
Data totalitarianism or #$t another wtotalitarianism
-
8/13/2019 Jacob Appelbaum - To Protect and Infect: The Militarization of the Internet - 30c3 (Slide Presentation)
16/76
T24M9I&
Dee# Pac+et Ins#ection
(Passi7e dranet s$r7eillance senso
-
8/13/2019 Jacob Appelbaum - To Protect and Infect: The Militarization of the Internet - 30c3 (Slide Presentation)
17/76
T24>I-
Dee# Pac+et In5ection
-
8/13/2019 Jacob Appelbaum - To Protect and Infect: The Militarization of the Internet - 30c3 (Slide Presentation)
18/76
C*I4
T24M9I& and T24>I- combined wadditional infrastr$ct$re that the' co@o#t t
#wnae of ro$ters and other o#eratio
-
8/13/2019 Jacob Appelbaum - To Protect and Infect: The Militarization of the Internet - 30c3 (Slide Presentation)
19/76
MA4I-A
-
8/13/2019 Jacob Appelbaum - To Protect and Infect: The Militarization of the Internet - 30c3 (Slide Presentation)
20/76
*rom wireta##in towhole lifes$r7eil
6am#le one =erman hancellor Mer(e re7ealed this o#eration in Der :#ie
6am#le two Political and reliio$s ?$nta
taretin for some set of websites
6am#le three three ho#s awa'E 2h(That's you!)
-
8/13/2019 Jacob Appelbaum - To Protect and Infect: The Militarization of the Internet - 30c3 (Slide Presentation)
21/76
This is the militarizationof the inte
e are $nder a +ind of martial law
This strate' is $nderminin the internet direct attem#t to +ee# it insec$re
e are #ersonall' and sociall' left 7$lnerand acti7el' e6#loited, literall'
This is bein done in o$r names with o$r mone' and witho$t o$r consent; $s$all' wthe +nowlede of o$r re#resentati7es.
Those who +now $s$all' do not act$all'
$nderstand. (e Members of the 2: on
-
8/13/2019 Jacob Appelbaum - To Protect and Infect: The Militarization of the Internet - 30c3 (Slide Presentation)
22/76
Acti7e e6#loitation of tarets with *9
:elector s$r7eillance leads to e6#loitation C2A-T2MT/94J
:A:9-DM9T/ (:M9T/) C2A-T2M-ATI9-
1A&IDAT94, 9MM9-D4 C2A-T2M>9T C2A-T2M9PP4
Thin+ FThe =reat *irewall of hinaG Ahem, FThe =reat *irewall of arthG
C2A-T2MI-:4T Thin+ Man@on@the@side
-
8/13/2019 Jacob Appelbaum - To Protect and Infect: The Militarization of the Internet - 30c3 (Slide Presentation)
23/76
TA9 infrastr$ct$re
*irst the' find the taret, then the' redire C2A-T2MI-:4T and *9AID :er7er?s li+e to #retend that the'?re A#achser7ers
Im#lemented in P'thon, easil' finer#rint A few *9AID 24&s are #$blic Pa' attention to the b$s in theirim#lementation
-
8/13/2019 Jacob Appelbaum - To Protect and Infect: The Militarization of the Internet - 30c3 (Slide Presentation)
24/76
hen the -:A can?t do it the' brin in
And bo' oh bo' do the' lo7e Jahoo
-
8/13/2019 Jacob Appelbaum - To Protect and Infect: The Militarization of the Internet - 30c3 (Slide Presentation)
25/76
-
8/13/2019 Jacob Appelbaum - To Protect and Infect: The Militarization of the Internet - 30c3 (Slide Presentation)
26/76
4 i h d d i
-
8/13/2019 Jacob Appelbaum - To Protect and Infect: The Militarization of the Internet - 30c3 (Slide Presentation)
27/76
4e@#$r#osin hardware and im#ersoninfrastr$ct$re
4e@#$r#osin $n$sed i*i hardwarell base stations
-
8/13/2019 Jacob Appelbaum - To Protect and Infect: The Militarization of the Internet - 30c3 (Slide Presentation)
28/76
-
8/13/2019 Jacob Appelbaum - To Protect and Infect: The Militarization of the Internet - 30c3 (Slide Presentation)
29/76
-
8/13/2019 Jacob Appelbaum - To Protect and Infect: The Militarization of the Internet - 30c3 (Slide Presentation)
30/76
-
8/13/2019 Jacob Appelbaum - To Protect and Infect: The Militarization of the Internet - 30c3 (Slide Presentation)
31/76
-
8/13/2019 Jacob Appelbaum - To Protect and Infect: The Militarization of the Internet - 30c3 (Slide Presentation)
32/76
(software) FIm#lantsG 1A&IDAT94, 9MM9-D4, 9&JMP22-ITD 4A, :T2-T and man' mamore
ith #a'loads for 'o$888 K>AD>I9: :MM iPhone 4o$ters ("$ni#er, /$awei, isco, etc) :IM cards (remote, local)
/ard dri7e firmware
-
8/13/2019 Jacob Appelbaum - To Protect and Infect: The Militarization of the Internet - 30c3 (Slide Presentation)
33/76
-
8/13/2019 Jacob Appelbaum - To Protect and Infect: The Militarization of the Internet - 30c3 (Slide Presentation)
34/76
-
8/13/2019 Jacob Appelbaum - To Protect and Infect: The Militarization of the Internet - 30c3 (Slide Presentation)
35/76
-
8/13/2019 Jacob Appelbaum - To Protect and Infect: The Militarization of the Internet - 30c3 (Slide Presentation)
36/76
&oo+in for -:A malwareE
&oo+ for sam#les that im#lement 4L anemit encr'#ted 2DP traffic8
-
8/13/2019 Jacob Appelbaum - To Protect and Infect: The Militarization of the Internet - 30c3 (Slide Presentation)
37/76
-
8/13/2019 Jacob Appelbaum - To Protect and Infect: The Militarization of the Internet - 30c3 (Slide Presentation)
38/76
i9:
The -:A claims in their C2A-T2MT/doc$ments that e7er' attem#t to im#lant
always succeed8
WTFE
-
8/13/2019 Jacob Appelbaum - To Protect and Infect: The Militarization of the Internet - 30c3 (Slide Presentation)
39/76
-
8/13/2019 Jacob Appelbaum - To Protect and Infect: The Militarization of the Internet - 30c3 (Slide Presentation)
40/76
-
8/13/2019 Jacob Appelbaum - To Protect and Infect: The Militarization of the Internet - 30c3 (Slide Presentation)
41/76
-
8/13/2019 Jacob Appelbaum - To Protect and Infect: The Militarization of the Internet - 30c3 (Slide Presentation)
42/76
-
8/13/2019 Jacob Appelbaum - To Protect and Infect: The Militarization of the Internet - 30c3 (Slide Presentation)
43/76
I t di ti
-
8/13/2019 Jacob Appelbaum - To Protect and Infect: The Militarization of the Internet - 30c3 (Slide Presentation)
44/76
Interdiction
:o@called Foff@net? o#erations incl$de tamwith 'o$r hardware while it is bein shi#
The' call this #rocess FInterdiction4emember Don?t foret to chec+ your
/ d i l t
-
8/13/2019 Jacob Appelbaum - To Protect and Infect: The Militarization of the Internet - 30c3 (Slide Presentation)
45/76
/ardware im#lants
/ardware interdiction is $sed to attac+ PI@>2: ic b$s "TA= (with #ersistence) Modification of cell#hone hardware Modified 2:> cable and 2:> #orts Modified networ+ cards &ots of interestin c$stom hardware
-
8/13/2019 Jacob Appelbaum - To Protect and Infect: The Militarization of the Internet - 30c3 (Slide Presentation)
46/76
-
8/13/2019 Jacob Appelbaum - To Protect and Infect: The Militarization of the Internet - 30c3 (Slide Presentation)
47/76
-
8/13/2019 Jacob Appelbaum - To Protect and Infect: The Militarization of the Internet - 30c3 (Slide Presentation)
48/76
:abotae of 2: com#anies
-
8/13/2019 Jacob Appelbaum - To Protect and Infect: The Militarization of the Internet - 30c3 (Slide Presentation)
49/76
:abotae of 2: com#anies
Do 'o$ notice the common theme of sabocom#aniesE
2: President 9bama?s own ad7isors reiss$ed a re#ort ad7isin aainst this stra
-
8/13/2019 Jacob Appelbaum - To Protect and Infect: The Militarization of the Internet - 30c3 (Slide Presentation)
50/76
-
8/13/2019 Jacob Appelbaum - To Protect and Infect: The Militarization of the Internet - 30c3 (Slide Presentation)
51/76
-
8/13/2019 Jacob Appelbaum - To Protect and Infect: The Militarization of the Internet - 30c3 (Slide Presentation)
52/76
-
8/13/2019 Jacob Appelbaum - To Protect and Infect: The Militarization of the Internet - 30c3 (Slide Presentation)
53/76
-
8/13/2019 Jacob Appelbaum - To Protect and Infect: The Militarization of the Internet - 30c3 (Slide Presentation)
54/76
9TT9-M92T/@II is chea# too
-
8/13/2019 Jacob Appelbaum - To Protect and Infect: The Militarization of the Internet - 30c3 (Slide Presentation)
55/76
9TT9-M92T/ II is chea# too
888$nless 'o$ co$nt the cost to o$r libe
-
8/13/2019 Jacob Appelbaum - To Protect and Infect: The Militarization of the Internet - 30c3 (Slide Presentation)
56/76
-
8/13/2019 Jacob Appelbaum - To Protect and Infect: The Militarization of the Internet - 30c3 (Slide Presentation)
57/76
-
8/13/2019 Jacob Appelbaum - To Protect and Infect: The Militarization of the Internet - 30c3 (Slide Presentation)
58/76
-
8/13/2019 Jacob Appelbaum - To Protect and Infect: The Militarization of the Internet - 30c3 (Slide Presentation)
59/76
-
8/13/2019 Jacob Appelbaum - To Protect and Infect: The Militarization of the Internet - 30c3 (Slide Presentation)
60/76
-
8/13/2019 Jacob Appelbaum - To Protect and Infect: The Militarization of the Internet - 30c3 (Slide Presentation)
61/76
-
8/13/2019 Jacob Appelbaum - To Protect and Infect: The Militarization of the Internet - 30c3 (Slide Presentation)
62/76
hew, it?s all st$ff we tho$ht888
-
8/13/2019 Jacob Appelbaum - To Protect and Infect: The Militarization of the Internet - 30c3 (Slide Presentation)
63/76
,
/a, 5$st +iddin.
:#ecialized Phili# 8 Dic+ ins#ired niht
-
8/13/2019 Jacob Appelbaum - To Protect and Infect: The Militarization of the Internet - 30c3 (Slide Presentation)
64/76
# # #
ontin$o$s a7e enerators
888beamin into #eo#le /$h, no data on h$man safet' for these t hat ha##ened to /$o e6actl'E @)
4oom b$s
Data e6filtration 7ia acti7e radar 1ideo e6filtration 7ia added hardware wit e'board retro@reflector data e6filtration &ocation trac+in of tarets (+ill ?em wdro
-
8/13/2019 Jacob Appelbaum - To Protect and Infect: The Militarization of the Internet - 30c3 (Slide Presentation)
65/76
-
8/13/2019 Jacob Appelbaum - To Protect and Infect: The Militarization of the Internet - 30c3 (Slide Presentation)
66/76
-
8/13/2019 Jacob Appelbaum - To Protect and Infect: The Militarization of the Internet - 30c3 (Slide Presentation)
67/76
-
8/13/2019 Jacob Appelbaum - To Protect and Infect: The Militarization of the Internet - 30c3 (Slide Presentation)
68/76
-
8/13/2019 Jacob Appelbaum - To Protect and Infect: The Militarization of the Internet - 30c3 (Slide Presentation)
69/76
-
8/13/2019 Jacob Appelbaum - To Protect and Infect: The Militarization of the Internet - 30c3 (Slide Presentation)
70/76
-
8/13/2019 Jacob Appelbaum - To Protect and Infect: The Militarization of the Internet - 30c3 (Slide Presentation)
71/76
-
8/13/2019 Jacob Appelbaum - To Protect and Infect: The Militarization of the Internet - 30c3 (Slide Presentation)
72/76
/a##' -ew Jear.
Than+s for 'o$r material s$##ort.
A d MNll M h
-
8/13/2019 Jacob Appelbaum - To Protect and Infect: The Militarization of the Internet - 30c3 (Slide Presentation)
73/76
And' MNller@Ma$hn
ric /older ("r)
m#eror Ale6ander "$lian Assane
&a$ra Poitras
Marcel, "$dith, hristian, /oler, "or and others De
2: President 9bama The bra7e #eo#le who came forward to tell $s their s
s#eciall' o$r anon'mo$s s$##orters, than+ 'o$.
-
8/13/2019 Jacob Appelbaum - To Protect and Infect: The Militarization of the Internet - 30c3 (Slide Presentation)
74/76
e enco$rae 'o$ to 7isit Der :#ieel 9nline6tensi7e co7erae in nlish and =erm
-
8/13/2019 Jacob Appelbaum - To Protect and Infect: The Militarization of the Internet - 30c3 (Slide Presentation)
75/76
Than+ 'o$.C$estionsE
Resistance isn't futile, it's the new mode of particip
-
8/13/2019 Jacob Appelbaum - To Protect and Infect: The Militarization of the Internet - 30c3 (Slide Presentation)
76/76
Act IIIE @ It?s $# to 'o$&ea+ more doc$ment