Taking Your Ball and Going Home
Phil Cryer explores taking your ball and going home at DEF CON 19, examining privacy and practical defenses.
Summary
Architecture and Background
Phil Cryer - Taking Your Ball And Going Home; Building Your Own Secure Storage Space That Mirrors Dropbox's Functionality When for-profit companies offer a free app, there is always going to be strings attached. As we have increasingly seen, these strings are often tied to your privacy to enable said third party company to monetize you in some way, but in worse cases your security can be compromised leaving you open to identity theft at best or legal repercussions at worst.
Vulnerability Analysis
One of today's most ubiquitous apps is Dropbox, which operates as a file hosting service that uses "cloud computing" (aka the internet) to enable users to store and share files and folders with others using file synchronization. Sounds harmless enough until you start thinking about how they can do so much for free.
Exploitation and Demonstrations
Learn about the flaws discovered by security researchers that have caused Dropbox to significantly change their terms of service, and about a group building a free, open sourced option for anyone to use to share and protect their data with. Learn, get involved, help and CYA, because for-profit third party companies are not going to do it for you.
Remediation and Defensive Strategies
Phil Cryer (fak3r) is a systems engineer and privacy advocate who has worked on Linux and open source solutions for over 10 years. While balancing security with openness he has lectured globally on ways to open data silos to facilitate scientific discovery, but is equally comfortable talking about sharing any kind of data. His favorite memory from previous DEFCONs was yelling at the screen during a late night screening of Wargames, but locking himself out of his own room at last year's con is a close second. He learns by doing, believes that imagination is more important than knowledge, and like all good IT professionals, has a bachelor degree in fine arts. Twitter: @fak3r
Related talks
Main Stage·51 min
Amber Lyon
Amber Lyon explores anonymous and the online fight for justice at DEF CON 20, examining privacy and practical defenses.
Main Stage·48 min
Chris Sumner · Randall Wald
Chris Sumner and Randall Wald details copy of the slides for this talk are here: Can Twitter Really Help Expose Psychopath Killers' Traits.
Main Stage·37 min
Elie Bursztein · Patrick Samy
Elie Bursztein and Patrick Samy explores fuzzing online games at DEF CON 20, examining privacy and practical defenses.


