0x08: Finux - The wrong side of history
Analysts investigate attack surfaces and defenses concerning 0x08: Finux - The wrong side of history.
Summary
### Overview In this non-technical presentation on ethics and politics in technology, the speaker draws extensive parallels between the historical Manhattan Project and contemporary global surveillance programs exposed by Edward Snowden. By examining how fear-driven weaponization, extreme compartmentalization, whistleblowers, and escalating arms races defined the nuclear era, the speaker argues that modern computer scientists and cybersecurity professionals occupy a role analogous to the theoretical physicists of the 1940s. The talk warns against repeating history and challenges researchers to consider the real-world applications of their work.
### Key Topics - **Historical Parallels in Secrecy and Whistleblowing:** The speaker compares Edward Snowden's revelations of PRISM and global surveillance to Klaus Fuchs, the physicist who leaked nuclear secrets from the Manhattan Project to the Soviet Union out of ideological conviction rather than financial gain. - **Origins Driven by Fear:** Both projects originated from acute fear of adversaries. The Manhattan Project was initiated following Einstein's warning to Roosevelt about German nuclear capabilities, despite subsequent intelligence showing Nazi research was far behind what was feared. - **Compartmentalization and Infrastructure:** A vast apparatus (employing over 110,000 workers at sites like Chicago and Los Alamos under General Leslie Groves) operated with only a fraction of personnel understanding the end product, mirroring large-scale modern defense and intelligence operations. - **The German U-234 Cargo:** The talk recounts the capture of German submarine U-234 en route to Japan, whose cargo of uranium oxide (U-235) was seized by the United States, enriched, and ultimately incorporated into weapons dropped on Japan. - **The Nuclear and Cyber Arms Races:** Oppenheimer opposed the development of thermonuclear weapons engineered by Edward Teller, recognizing they lacked strategic restraint and would trigger an endless escalation. The speaker links this to modern cyber warfare, the stockpile of zero-day vulnerabilities, and state-sponsored offensive intelligence budgets exceeding global defensive spending.
### Technical Details - **Weapons and Implosion Mechanics:** The presentation contrasts the untested "Little Boy" gun-type uranium mechanism with the "Fat Man" implosion device tested at the Trinity site, noting that British expertise with shaped charges from Normandy proved crucial in making the plutonium core implode uniformly. - **Thermal Expansion Mishap at Trinity:** During assembly in the desert, thermal expansion caused the plutonium core to initially not fit inside the device casing until ambient temperatures equalized after several hours. - **Offensive vs. Defensive Spending Disparity:** Drawing on 2014 metrics, the speaker highlights that the U.S. spent approximately $52.6 billion on intelligence (with roughly 80% allocated to contractors), whereas total worldwide cybersecurity defense spending stood at around $40 billion. - **Surveillance and Targeting:** The speaker points to metadata being used operationally (such as drone strikes in Pakistan) and the mass compromise of global cellular networks for SIM card encryption keys as evidence that digital research directly impacts real-world physical security.
### Takeaways - **Research Consequences:** Security researchers must recognize that discovery and tool creation do not happen in a vacuum; capabilities developed for analysis or testing can be repurposed into offensive state weapons. - **Modern McCarthyism:** Parallels are drawn between Cold War-era investigations (including Oppenheimer's revoked clearance) and the modern criminalization or vilification of hackers and transparency activists like Aaron Swartz. - **Ethical Choice in Cybersecurity:** The speaker concludes that practitioners face a definitive ethical crossroads: deciding whether their talents will be dedicated to building intercept and offensive surveillance tools or engineering stronger defense and encryption.
Related talks
SteelCon·59 min
Coverage of Wrong Side of History - finux from the conference program.
SEC-T·20 min
Travis Goodspeed
Travis Goodspeed analyzes 2012 - Lightning Talks - Finux.
Village Interviews·10 min
Cliff Stoll
The DEF CON Video Team sits down for an animated after-hours conversation with astronomer, hacker-hunter, and author Cliff Stoll.


