shoulder surfing 2.0 old school techniques made easy ekoparty 2013
TRANSCRIPT
![Page 1: Shoulder Surfing 2.0 Old school techniques made easy ekoparty 2013](https://reader036.vdocument.in/reader036/viewer/2022062519/5665b4731a28abb57c918d54/html5/thumbnails/1.jpg)
Shoulder Surfing 2.0
Old school techniques made easy
ekoparty 2013
![Page 2: Shoulder Surfing 2.0 Old school techniques made easy ekoparty 2013](https://reader036.vdocument.in/reader036/viewer/2022062519/5665b4731a28abb57c918d54/html5/thumbnails/2.jpg)
¿Y este quién es?
SeguriNerd
Vegetariano
Montañista
Maratonista Fede Pacheco
@FedeQuark
![Page 3: Shoulder Surfing 2.0 Old school techniques made easy ekoparty 2013](https://reader036.vdocument.in/reader036/viewer/2022062519/5665b4731a28abb57c918d54/html5/thumbnails/3.jpg)
![Page 4: Shoulder Surfing 2.0 Old school techniques made easy ekoparty 2013](https://reader036.vdocument.in/reader036/viewer/2022062519/5665b4731a28abb57c918d54/html5/thumbnails/4.jpg)
![Page 5: Shoulder Surfing 2.0 Old school techniques made easy ekoparty 2013](https://reader036.vdocument.in/reader036/viewer/2022062519/5665b4731a28abb57c918d54/html5/thumbnails/5.jpg)
![Page 6: Shoulder Surfing 2.0 Old school techniques made easy ekoparty 2013](https://reader036.vdocument.in/reader036/viewer/2022062519/5665b4731a28abb57c918d54/html5/thumbnails/6.jpg)
Passwords, passwords everywhere
• Primer factor de autenticación
• Repetidos entre servicios
• Poco cambiados
• Débiles
![Page 7: Shoulder Surfing 2.0 Old school techniques made easy ekoparty 2013](https://reader036.vdocument.in/reader036/viewer/2022062519/5665b4731a28abb57c918d54/html5/thumbnails/7.jpg)
Password Guessing
• Network Sniffing• SW/HW Keylogging• Login Bruteforcing• Rainbow Tables• Fake Login• Ingeniería Social• Shoulder Surfing
![Page 8: Shoulder Surfing 2.0 Old school techniques made easy ekoparty 2013](https://reader036.vdocument.in/reader036/viewer/2022062519/5665b4731a28abb57c918d54/html5/thumbnails/8.jpg)
Shoulder Surfing
• aka “Mirar por encima del hombro”
• aka “Pispear”
• aka “Asomar el cogote”
• aka “¿Qué mirás, gil?”
![Page 9: Shoulder Surfing 2.0 Old school techniques made easy ekoparty 2013](https://reader036.vdocument.in/reader036/viewer/2022062519/5665b4731a28abb57c918d54/html5/thumbnails/9.jpg)
Ojito
• Angulo de lectura– 90° +/- 30° Vertical– 90° +/- 40° Horizontal
• Distancia focal de lectura– 38 - 63 cm– Max: 1 m (Arial 12)
![Page 10: Shoulder Surfing 2.0 Old school techniques made easy ekoparty 2013](https://reader036.vdocument.in/reader036/viewer/2022062519/5665b4731a28abb57c918d54/html5/thumbnails/10.jpg)
Tipeando soy de madera
• Promedio de tipeo– 33 ppm (transcripción)– 19 ppm (composición)
• Velocidades– Profesional: 50-80 ppm– 2-dedos: 27-37 ppm
![Page 11: Shoulder Surfing 2.0 Old school techniques made easy ekoparty 2013](https://reader036.vdocument.in/reader036/viewer/2022062519/5665b4731a28abb57c918d54/html5/thumbnails/11.jpg)
Los años pasaron, pero…
• La gente aun tipea sus pwds delante de otros
• Si nadie los mira directamente, no sospechan
![Page 12: Shoulder Surfing 2.0 Old school techniques made easy ekoparty 2013](https://reader036.vdocument.in/reader036/viewer/2022062519/5665b4731a28abb57c918d54/html5/thumbnails/12.jpg)
Shoulder Surfing 2.0
![Page 13: Shoulder Surfing 2.0 Old school techniques made easy ekoparty 2013](https://reader036.vdocument.in/reader036/viewer/2022062519/5665b4731a28abb57c918d54/html5/thumbnails/13.jpg)
iPhone de un amigo
Espejito pedorroUña comida
Camarita
![Page 14: Shoulder Surfing 2.0 Old school techniques made easy ekoparty 2013](https://reader036.vdocument.in/reader036/viewer/2022062519/5665b4731a28abb57c918d54/html5/thumbnails/14.jpg)
Si sos moooy top
![Page 15: Shoulder Surfing 2.0 Old school techniques made easy ekoparty 2013](https://reader036.vdocument.in/reader036/viewer/2022062519/5665b4731a28abb57c918d54/html5/thumbnails/15.jpg)
Veo veo…
Nada raro¿Que onda esto?
Era el espejito, bitches!
![Page 16: Shoulder Surfing 2.0 Old school techniques made easy ekoparty 2013](https://reader036.vdocument.in/reader036/viewer/2022062519/5665b4731a28abb57c918d54/html5/thumbnails/16.jpg)
SS2.0 in a nutshell
1. Pararse cerca del que esté escribiendo su pwd
2. Apuntar con un espejito apoyado en la camara
3. Grabar un video mientras tipea
4. Procesarlo y analizarlo Aca ocurre la magia
5. Deducir el password
![Page 17: Shoulder Surfing 2.0 Old school techniques made easy ekoparty 2013](https://reader036.vdocument.in/reader036/viewer/2022062519/5665b4731a28abb57c918d54/html5/thumbnails/17.jpg)
3 aproximaciones 3
1. Procesar imágenes independientes
2. Procesar video directamente
3. Procesamiento automatizado
![Page 18: Shoulder Surfing 2.0 Old school techniques made easy ekoparty 2013](https://reader036.vdocument.in/reader036/viewer/2022062519/5665b4731a28abb57c918d54/html5/thumbnails/18.jpg)
1: Procesamiento independiente
• Extracción de cuadros– ffmpeg
• Batch Processing– IrfanView
• Análisis– A ojímetro
![Page 19: Shoulder Surfing 2.0 Old school techniques made easy ekoparty 2013](https://reader036.vdocument.in/reader036/viewer/2022062519/5665b4731a28abb57c918d54/html5/thumbnails/19.jpg)
Extracción de cuadros
![Page 20: Shoulder Surfing 2.0 Old school techniques made easy ekoparty 2013](https://reader036.vdocument.in/reader036/viewer/2022062519/5665b4731a28abb57c918d54/html5/thumbnails/20.jpg)
Rotación y espejado
Rotado
Espejado
Original
![Page 21: Shoulder Surfing 2.0 Old school techniques made easy ekoparty 2013](https://reader036.vdocument.in/reader036/viewer/2022062519/5665b4731a28abb57c918d54/html5/thumbnails/21.jpg)
Batch Processing
![Page 22: Shoulder Surfing 2.0 Old school techniques made easy ekoparty 2013](https://reader036.vdocument.in/reader036/viewer/2022062519/5665b4731a28abb57c918d54/html5/thumbnails/22.jpg)
Análisis básico
• Identificar imágenes de cada tecleo
• Separarlas
• Identificar caracter
• Repetir hasta el final
![Page 23: Shoulder Surfing 2.0 Old school techniques made easy ekoparty 2013](https://reader036.vdocument.in/reader036/viewer/2022062519/5665b4731a28abb57c918d54/html5/thumbnails/23.jpg)
Case Study
• iPhone 5 (HD 1080)
• Tipeo normal
• Luz interior
![Page 24: Shoulder Surfing 2.0 Old school techniques made easy ekoparty 2013](https://reader036.vdocument.in/reader036/viewer/2022062519/5665b4731a28abb57c918d54/html5/thumbnails/24.jpg)
![Page 25: Shoulder Surfing 2.0 Old school techniques made easy ekoparty 2013](https://reader036.vdocument.in/reader036/viewer/2022062519/5665b4731a28abb57c918d54/html5/thumbnails/25.jpg)
Q W E R T Y U I O P
A S D F G H J K L Ñ
Z X C V B N M , . -
![Page 26: Shoulder Surfing 2.0 Old school techniques made easy ekoparty 2013](https://reader036.vdocument.in/reader036/viewer/2022062519/5665b4731a28abb57c918d54/html5/thumbnails/26.jpg)
Q W E R T Y U I O P
A S D F G H J K L Ñ
Z X C V B N M , . -
![Page 27: Shoulder Surfing 2.0 Old school techniques made easy ekoparty 2013](https://reader036.vdocument.in/reader036/viewer/2022062519/5665b4731a28abb57c918d54/html5/thumbnails/27.jpg)
Tips
• Superponer un teclado transparente
• Detenerse en 2 momentos clave– El anterior– El siguiente
• Considerar los Shift/Alt
![Page 28: Shoulder Surfing 2.0 Old school techniques made easy ekoparty 2013](https://reader036.vdocument.in/reader036/viewer/2022062519/5665b4731a28abb57c918d54/html5/thumbnails/28.jpg)
¿Solo sacaste algunas?
No Prob! ==> El cerebro se arregla con el 70%
AG_ANT_ L_ EK_P_ _TY 2__3
L_RG_ V_ _A _L SH_U_DE_S_RFI_G _.0
VI_A L_ P_PA
![Page 29: Shoulder Surfing 2.0 Old school techniques made easy ekoparty 2013](https://reader036.vdocument.in/reader036/viewer/2022062519/5665b4731a28abb57c918d54/html5/thumbnails/29.jpg)
2: Procesar video directamente
• Software de análisis de videos– Kinovea (Open Source)
![Page 30: Shoulder Surfing 2.0 Old school techniques made easy ekoparty 2013](https://reader036.vdocument.in/reader036/viewer/2022062519/5665b4731a28abb57c918d54/html5/thumbnails/30.jpg)
![Page 31: Shoulder Surfing 2.0 Old school techniques made easy ekoparty 2013](https://reader036.vdocument.in/reader036/viewer/2022062519/5665b4731a28abb57c918d54/html5/thumbnails/31.jpg)
![Page 32: Shoulder Surfing 2.0 Old school techniques made easy ekoparty 2013](https://reader036.vdocument.in/reader036/viewer/2022062519/5665b4731a28abb57c918d54/html5/thumbnails/32.jpg)
![Page 33: Shoulder Surfing 2.0 Old school techniques made easy ekoparty 2013](https://reader036.vdocument.in/reader036/viewer/2022062519/5665b4731a28abb57c918d54/html5/thumbnails/33.jpg)
![Page 34: Shoulder Surfing 2.0 Old school techniques made easy ekoparty 2013](https://reader036.vdocument.in/reader036/viewer/2022062519/5665b4731a28abb57c918d54/html5/thumbnails/34.jpg)
![Page 35: Shoulder Surfing 2.0 Old school techniques made easy ekoparty 2013](https://reader036.vdocument.in/reader036/viewer/2022062519/5665b4731a28abb57c918d54/html5/thumbnails/35.jpg)
![Page 36: Shoulder Surfing 2.0 Old school techniques made easy ekoparty 2013](https://reader036.vdocument.in/reader036/viewer/2022062519/5665b4731a28abb57c918d54/html5/thumbnails/36.jpg)
![Page 37: Shoulder Surfing 2.0 Old school techniques made easy ekoparty 2013](https://reader036.vdocument.in/reader036/viewer/2022062519/5665b4731a28abb57c918d54/html5/thumbnails/37.jpg)
![Page 38: Shoulder Surfing 2.0 Old school techniques made easy ekoparty 2013](https://reader036.vdocument.in/reader036/viewer/2022062519/5665b4731a28abb57c918d54/html5/thumbnails/38.jpg)
![Page 39: Shoulder Surfing 2.0 Old school techniques made easy ekoparty 2013](https://reader036.vdocument.in/reader036/viewer/2022062519/5665b4731a28abb57c918d54/html5/thumbnails/39.jpg)
3: Procesamiento automatizado 3D Modeling
• Mano• Teclado
Motion estimation• 3D over 2D
Physics Engine• Movimientos definidos• Detección de colisiones
Un script en Python que solucione todo…
![Page 40: Shoulder Surfing 2.0 Old school techniques made easy ekoparty 2013](https://reader036.vdocument.in/reader036/viewer/2022062519/5665b4731a28abb57c918d54/html5/thumbnails/40.jpg)
En fin…
• Viejas Técnicas + Nuevas Tecnologías = Cool
• Practicar Shouldersurfing Clásico y 2.0
• Más aplicaciones– Celulares, cerraduras electrónicas, etc.
![Page 41: Shoulder Surfing 2.0 Old school techniques made easy ekoparty 2013](https://reader036.vdocument.in/reader036/viewer/2022062519/5665b4731a28abb57c918d54/html5/thumbnails/41.jpg)
![Page 42: Shoulder Surfing 2.0 Old school techniques made easy ekoparty 2013](https://reader036.vdocument.in/reader036/viewer/2022062519/5665b4731a28abb57c918d54/html5/thumbnails/42.jpg)
¡Gracias!
Fede Pacheco (@FedeQuark)