Keynote Address
Where
Talks
CactusCon 9
Duration
46 min
Explains how the EFF's Threat Lab studies surveillance malware and why security workers should push back on stalkerware.
Summary
Eva Galperin, director of cybersecurity at the Electronic Frontier Foundation, opens by explaining what the EFF does and why digital civil liberties now shape everyday life. She describes the organization's mix of tools: impact litigation, a coders' rights program that advises security researchers, international advocacy, grassroots activism, and a technical team that builds privacy tooling such as HTTPS Everywhere and certificate transparency work.
The middle of the talk focuses on the EFF's Threat Lab, a small group that studies surveillance and targeted malware used against journalists, activists and dissidents. She argues that such threats were long ignored because they lacked commercial appeal and were less sophisticated than the nation-state campaigns that security vendors liked to publicize. She points to projects that map police surveillance purchases, research on cell site simulators, and a campaign against government facial recognition.
She closes with stalkerware and domestic abuse, describing the flood of requests she received after offering to help survivors check their devices. Most cases turned out to need account lockdown rather than forensics, which led her to push antivirus vendors to treat stalkerware as unwanted software and to urge companies to make it easier for users to see and revoke access. Her takeaway for attendees is that no formal permission is needed to start research: pick a community, learn where it is underserved, consult a lawyer, and publish.
Related talks
Talks·56 min
Joseph Cox
Traces how police compromised criminal encrypted phone networks, from Encom and EncroChat to the ANOM sting and Sky.
Track 3·57 min
Matt Edmonson
Shows how breach dumps and infostealer logs can be searched and used to answer investigative and defensive questions.
Talks
Walks through a continually growing collection of crimeware research notes.


