Live data from Hacker News

COMSEC: Beyond Encryption [pdf]

grugq.github.io

11–20 of 54 posts

Re: COMSEC: Beyond Encryption [pdf]

#11
post #10

FWIW this is the talk that got them (Ben Nagy and The Grugq) thrown out of Kiwicon ( http://kiwicon.org/ ) for being transphobic, sexist and otherwise disrespectful to women and trans people. See http://geekfeminism.wikia.com/wiki/Kiwicon_2014_expulsion IMO it was justified, but guess you had to be there.

[deleted]

Or maybe he's just a jerk who can't learn from experience?

Re: COMSEC: Beyond Encryption [pdf]

#12
post #7

Earlier quoted context omitted.

What I find interesting is that no matter how hard I google, I can't find this joke anywhere. Heard this story before and to this day curiosity is killing me.

The ad-lib appears to be included in the provided PDF.

Hmm, "ad-lib" -- given that slide, what did they plan to say? Anyway, it's interesting to me that the pics of mostly-naked men and ASCII Goatse hardly get mentioned, overshadowed by a verbal remark. Maybe the con has changed its policy in response, but did they preview the slide deck?

Re: COMSEC: Beyond Encryption [pdf]

#13
According to the Pond docs:

> What a global, passive adversary (one who can observe all Internet traffic) can achieve:

> A GPA can learn who is using Pond and where their home servers are located.

It's probably a great piece of software, but how exactly does it fit into the theme of cover over concealment? At its current level of popularity, simply using Pond, without a proxy at least, paints a giant target on you in the eyes of such an adversary. GPG and Tor, for all their faults, do not have this property.

Re: COMSEC: Beyond Encryption [pdf]

#14
post #13

According to the Pond docs: > What a global, passive adversary (one who can observe all Internet traffic) can achieve: > A GPA can learn who is using Pond and where their home servers are located. It's probably a great piece of software, but how exactly does it fit into the theme of cover over concealment? At its current level of popularity, simply using Pond, without a proxy at least, paints a giant target on you in…

Pond works through Tor, and Pond servers are hidden services. I consider that using Tor makes me a target, so I go through at least three VPN services.

Re: COMSEC: Beyond Encryption [pdf]

#16
post #9

Earlier quoted context omitted.

What I find interesting is that no matter how hard I google, I can't find this joke anywhere. Heard this story before and to this day curiosity is killing me.

It's on page 30 of the PDF that the HN submission links to.

More cogent is the comment on page 17: "I wanted to remind people about Eldo Kim here ( the Harvard bomb threat hoax ). He had pretty good Concealment ( was using Tor ) but had no cover to explain WHY he was using Tor at that time, and then gave it up under questioning."

Re: COMSEC: Beyond Encryption [pdf]

#18
post #7

Earlier quoted context omitted.

The ad-lib appears to be included in the provided PDF.

Hmm, "ad-lib" -- given that slide, what did they plan to say? Anyway, it's interesting to me that the pics of mostly-naked men and ASCII Goatse hardly get mentioned, overshadowed by a verbal remark. Maybe the con has changed its policy in response, but did they preview the slide deck?

I don't know of any security conferences that preview slides. original research is presented regularly which means your hard work might leak by conference organizers who can't keep their mouths shut.

Alsp, many speakers are working on their slides and talk minutes before going on. These talks get finished notoriously late

Re: COMSEC: Beyond Encryption [pdf]

#19
post #3

Also relevant, and by the same author: http://www.slideshare.net/grugq/opsec-for-hackers

I don't get why he says "VPN connection to TOR => GOTOJAIL".

How is it OK that your ISP sees you connecting to Tor, but dangerous if your VPN provider does? Or is this about some other issue?

Re: COMSEC: Beyond Encryption [pdf]

#20
post #7

Earlier quoted context omitted.

What I find interesting is that no matter how hard I google, I can't find this joke anywhere. Heard this story before and to this day curiosity is killing me.

The ad-lib appears to be included in the provided PDF.

And is pretty much a statement of fact.

"Sticking out like a white guy in a Mayan village" would probably have been non notable so I don't follow how it's offensive by switching the subjects.

Post reply on HN