jacob appelbaum - to protect and infect: the militarization of the internet - 30c3 (slide...

8/13/2019 Jacob Appelbaum - To Protect and Infect: The Militarization of the Internet - 30c3 (Slide Presentation)

1/76

To Protect And InfectThe Militarization of the Internet

(Part Two; in three acts)

The 30c3 December 30th

, 0!3"acob A##elba$m (%ioerror)


2/76

Act I


3/76

(&ow end) cor#orate s#'in

ommercial hardware sol$tions are rather borin

*orensics hardware li+e the Mo$se "iler

-ow disabled in s'stemd (.)

Power insertion attac+s

/ot#l$ seiz$res

e'stro+e recorders

larel' lame

*in*isher, /ac+inTeam, 12P-


4/76

4afael is a 5o$rnalistfrom Anola, whoe6#osed corr$#tion

in the o7ernment8


5/76

Anola Attac+

Disco7ered at 9slo *reedom *or$m

&amest 9: bac+door e7er

:creenca#t$re

$rl

:lee#

2ns$s#ectin < => of screenshots in the home director'

Infrastr$ct$re connected with 9#eration /ano7er

A##in :ec$rit'

ode sined

A##le re7o+ed the sinin #ermissions in a reasonable time frame


6/76

In :$mmer 0!3 4afael was arrested, thenreleased and faced !! criminal chares for his

wor+ e6#osin corr$#tion8


7/76

The' do harm to ood #eo#le and the' wa7e awa' their contrib$tion to increasi

total amo$nt of h$man s$fferin in the w

These $'s aren?t im#ressi7e


8/76


9/76

Act II


10/76

Meta@#oint non@attrib$table to -:A

Meta@#oint Totals$r7eillance B control in

Intellience aenc' sol$tions


11/76

The >i Pict$re Planetar' :trateic :$r7eillance and888 6#loitation :'stems Passi7e sensors ollect (T24M9I&) Acti7e attac+s Infect (T24>I-, C*I4, etc) ait, what abo$t ProtectE. M$lti@#wn. >lac+hats $sed to +ee# 'o$r bo6 $#dated 888 these $'s ste# on each other?s toes

9#erations Flose Access 9#erationsF and F9


12/76


13/76

/ow do the' do itE

Dranet s$r7eillance Data retention H! 'ears at least, incl$din content. Tas+in, e6#loitation

C2A-T2M T/94J and how each sol$tries to meet this oal Man@9n@The@:ide as C2A-T2M I-:4 P4I:M, F$#streamG and man' other #ro


14/76


15/76

FThe'?ll ne7er find me.G

Dream on Data 4etention is an im#ortantotal s$r7eillance and the anal'sis is s$cc

aainst $s all8

Data totalitarianism or #$t another wtotalitarianism


16/76

T24M9I&

Dee# Pac+et Ins#ection

(Passi7e dranet s$r7eillance senso


17/76

T24>I-

Dee# Pac+et In5ection


18/76

C*I4

T24M9I& and T24>I- combined wadditional infrastr$ct$re that the' co@o#t t

#wnae of ro$ters and other o#eratio


19/76

MA4I-A


20/76

*rom wireta##in towhole lifes$r7eil

6am#le one =erman hancellor Mer(e re7ealed this o#eration in Der :#ie

6am#le two Political and reliio$s ?$nta

taretin for some set of websites

6am#le three three ho#s awa'E 2h(That's you!)


21/76

This is the militarizationof the inte

e are $nder a +ind of martial law

This strate' is $nderminin the internet direct attem#t to +ee# it insec$re

e are #ersonall' and sociall' left 7$lnerand acti7el' e6#loited, literall'

This is bein done in o$r names with o$r mone' and witho$t o$r consent; $s$all' wthe +nowlede of o$r re#resentati7es.

Those who +now $s$all' do not act$all'

$nderstand. (e Members of the 2: on


22/76

Acti7e e6#loitation of tarets with *9

:elector s$r7eillance leads to e6#loitation C2A-T2MT/94J

:A:9-DM9T/ (:M9T/) C2A-T2M-ATI9-

1A&IDAT94, 9MM9-D4 C2A-T2M>9T C2A-T2M9PP4

Thin+ FThe =reat *irewall of hinaG Ahem, FThe =reat *irewall of arthG

C2A-T2MI-:4T Thin+ Man@on@the@side


23/76

TA9 infrastr$ct$re

*irst the' find the taret, then the' redire C2A-T2MI-:4T and *9AID :er7er?s li+e to #retend that the'?re A#achser7ers

Im#lemented in P'thon, easil' finer#rint A few *9AID 24&s are #$blic Pa' attention to the b$s in theirim#lementation


24/76

hen the -:A can?t do it the' brin in

And bo' oh bo' do the' lo7e Jahoo


25/76


26/76

4 i h d d i


27/76

4e@#$r#osin hardware and im#ersoninfrastr$ct$re

4e@#$r#osin $n$sed i*i hardwarell base stations


28/76


29/76


30/76


31/76


32/76

(software) FIm#lantsG 1A&IDAT94, 9MM9-D4, 9&JMP22-ITD 4A, :T2-T and man' mamore

ith #a'loads for 'o$888 K>AD>I9: :MM iPhone 4o$ters ("$ni#er, /$awei, isco, etc) :IM cards (remote, local)

/ard dri7e firmware


33/76


34/76


35/76


36/76

&oo+in for -:A malwareE

&oo+ for sam#les that im#lement 4L anemit encr'#ted 2DP traffic8


37/76


38/76

i9:

The -:A claims in their C2A-T2MT/doc$ments that e7er' attem#t to im#lant

always succeed8

WTFE


39/76


40/76


41/76


42/76


43/76

I t di ti


44/76

Interdiction

:o@called Foff@net? o#erations incl$de tamwith 'o$r hardware while it is bein shi#

The' call this #rocess FInterdiction4emember Don?t foret to chec+ your

/ d i l t


45/76

/ardware im#lants

/ardware interdiction is $sed to attac+ PI@>2: ic b$s "TA= (with #ersistence) Modification of cell#hone hardware Modified 2:> cable and 2:> #orts Modified networ+ cards &ots of interestin c$stom hardware


46/76


47/76


48/76

:abotae of 2: com#anies


49/76

:abotae of 2: com#anies

Do 'o$ notice the common theme of sabocom#aniesE

2: President 9bama?s own ad7isors reiss$ed a re#ort ad7isin aainst this stra


50/76


51/76


52/76


53/76


54/76

9TT9-M92T/@II is chea# too


55/76

9TT9-M92T/ II is chea# too

888$nless 'o$ co$nt the cost to o$r libe


56/76


57/76


58/76


59/76


60/76


61/76


62/76

hew, it?s all st$ff we tho$ht888


63/76

,

/a, 5$st +iddin.

:#ecialized Phili# 8 Dic+ ins#ired niht


64/76

# # #

ontin$o$s a7e enerators

888beamin into #eo#le /$h, no data on h$man safet' for these t hat ha##ened to /$o e6actl'E @)

4oom b$s

Data e6filtration 7ia acti7e radar 1ideo e6filtration 7ia added hardware wit e'board retro@reflector data e6filtration &ocation trac+in of tarets (+ill ?em wdro


65/76


66/76


67/76


68/76


69/76


70/76


71/76


72/76

/a##' -ew Jear.

Than+s for 'o$r material s$##ort.

A d MNll M h


73/76

And' MNller@Ma$hn

ric /older ("r)

m#eror Ale6ander "$lian Assane

&a$ra Poitras

Marcel, "$dith, hristian, /oler, "or and others De

2: President 9bama The bra7e #eo#le who came forward to tell $s their s

s#eciall' o$r anon'mo$s s$##orters, than+ 'o$.


74/76

e enco$rae 'o$ to 7isit Der :#ieel 9nline6tensi7e co7erae in nlish and =erm


75/76

Than+ 'o$.C$estionsE

Resistance isn't futile, it's the new mode of particip


76/76

Act IIIE @ It?s $# to 'o$&ea+ more doc$ment

jacob appelbaum - to protect and infect: the militarization of the internet - 30c3 (slide...

Documents