Stationary section mostly ready
There's some stuff to augment; mainly, IoT like smart TVs. * slides.org (Stationary): Mostly ready. * sapsf.bib (insecam): Change entry date to match screenshot. * images/insecam-ss.png: insecam.org screenshot. * images/tp/remote-list: Add ACLU tracked paper title page image. * images/tp/SHA256SUM: Include hash of new image.master
parent
4a30b85b20
commit
e3d8a282e7
Binary file not shown.
After Width: | Height: | Size: 235 KiB |
|
@ -6,6 +6,7 @@ ca51e8ba23a87140b1f2cf573d4761df888d7f939947823c695004ce5d3f31f7 replicant.png
|
|||
4b0050a377af1fcd72f14863408eef44d40e7ba6fe31e2121ec7c3a51781a752 alpr-capture.png
|
||||
31597ba3731e6eccf2e68ae8b91ad25b2e6e4685814e723333d9ea1d2579b635 alpr-pips.png
|
||||
e7029f70524f420ef32044aeae8280434d5b03ddbab4e90188409a93597c0726 sf-cameras.jpg
|
||||
67483c5d78b168782b787765284937b8a269ae6d87d4effbb58f4a7d603d8997 aclu-tracked.jpg
|
||||
9edddcac31bbb09e4ba9f6fea5d36e5298ec65ce88d4c015121fc27edd466947 silverpush-logo.png
|
||||
cfda12117815c35bfc51266d9e8227b1645dcd5ffe054c4ae9922e75595f09b9 ga-dashboard.png
|
||||
d905d3b378daea4c002c873a4ad8192246959cb6df6fb470e29ade9f2b2354c9 piwik-dashboard.png
|
||||
|
|
|
@ -6,6 +6,7 @@ alpr-mounted.png https://web.archive.org/web/20170318173251/https://www.eff.org/
|
|||
alpr-capture.png https://web.archive.org/web/20170318173346/https://www.eff.org/files/2015/10/20/paxton_captures.png
|
||||
alpr-pips.png https://web.archive.org/web/20170318173427/https://www.eff.org/files/2015/10/15/pipscam9_redacted.png
|
||||
sf-cameras.jpg https://web.archive.org/web/20170318173846/https://cbssanfran.files.wordpress.com/2015/09/san_francisco_surveillance_cameras_092315.jpg
|
||||
aclu-tracked.jpg https://web.archive.org/web/20170320025735/https://www.aclu.org/sites/default/files/styles/content_area_full_width/public/field_media_media_image/web15-feature-alpr-report-580x535.jpg?itok=n_JYZGN5 -crop 410x535+170+0
|
||||
silverpush-logo.png https://web.archive.org/web/20160623032522/http://1.bp.blogspot.com/-r9WGkxWE3RI/Vk9wK_RisSI/AAAAAAAAAy0/ZydFsogCrnc/s640/silverpush.png
|
||||
ga-dashboard.png https://web.archive.org/web/20170315055350/https://www.google.com/analytics/images/analytics/features/hero_1x.png -crop 580x370+115+35
|
||||
piwik-dashboard.png https://web.archive.org/web/20170310025254/https://piwik.org/wp-content/themes/piwik/assets/img/piwiklaptop.png -crop 730x520+225+85
|
||||
|
|
|
@ -264,7 +264,7 @@
|
|||
@online{insecam,
|
||||
title = {Insecam - World biggest online cameras directory},
|
||||
url = {http://insecam.org},
|
||||
urldate = {2017-03-12},
|
||||
urldate = {2017-03-19},
|
||||
annotation = {Load the HTTP (non-HTTPS) site, otherwise mixed content is
|
||||
blocked and thumbnails will not work.}
|
||||
}
|
||||
|
|
147
slides.org
147
slides.org
|
@ -519,20 +519,21 @@ So even with Replicant,
|
|||
|
||||
|
||||
|
||||
** REVIEWED Stationary [0/6]
|
||||
*** REVIEWED Introduction [0/1] :B_ignoreheading:
|
||||
** AUGMENT Stationary [5/5]
|
||||
*** READY Introduction [1/1] :B_ignoreheading:
|
||||
:PROPERTIES:
|
||||
:BEAMER_env: ignoreheading
|
||||
:END:
|
||||
**** REVIEWED Introduction :B_fullframe:
|
||||
**** READY Introduction :B_fullframe:
|
||||
:PROPERTIES:
|
||||
:DURATION: 00:00:15
|
||||
:BEAMER_env: fullframe
|
||||
:END:
|
||||
|
||||
#+BEGIN_QUOTE
|
||||
``If you've got nothing to hide, you've got nothing to
|
||||
fear.''\cite{rosen:naked,solove:nothing-to-hide,metro:goebbels}
|
||||
\large
|
||||
``If you've got nothing to hide, you've got nothing
|
||||
to\nbsp{}fear.''\cite{rosen:naked,solove:nothing-to-hide,metro:goebbels}
|
||||
#+END_QUOTE
|
||||
|
||||
#+BEGIN_COMMENT
|
||||
|
@ -545,8 +546,8 @@ There's certain things that are nearly impossible to avoid.
|
|||
This quote. We'll get back to it.
|
||||
#+END_COMMENT
|
||||
|
||||
*** REVIEWED Surveillance Cameras [0/6]
|
||||
**** REVIEWED Unavoidable Surveillance
|
||||
*** READY Surveillance Cameras (CCTV) [5/5]
|
||||
**** READY Unavoidable Surveillance
|
||||
:PROPERTIES:
|
||||
:DURATION: 00:00:10
|
||||
:END:
|
||||
|
@ -567,7 +568,7 @@ Traffic cameras.
|
|||
Cameras on streets to deter crime.
|
||||
#+END_COMMENT
|
||||
|
||||
**** REVIEWED Private Cameras in Plain View; Tinerloin, SF
|
||||
**** READY Private Cameras in Plain View; Tinerloin, SF
|
||||
:PROPERTIES:
|
||||
:DURATION: 00:00:30
|
||||
:END:
|
||||
|
@ -581,7 +582,7 @@ Cameras on streets to deter crime.
|
|||
#+BEGIN_QUOTE
|
||||
``The idea that you can sort of meet in a public place and quietly have a
|
||||
conversation that we’re sort of accustomed to from spy movies, that is
|
||||
really not realistic anymore,'' ---Nadia Kayyali, EFF
|
||||
really not realistic anymore,'' ---Nadia Kayyali, EFF\cite{cbs:sf-smile}
|
||||
#+END_QUOTE
|
||||
|
||||
#+BEGIN_COMMENT
|
||||
|
@ -589,7 +590,7 @@ This is a map of private surveillance cameras in plain view around SF's
|
|||
Tenderloin neighborhood.
|
||||
Obviously your city or town might be different.
|
||||
Could be worse, even.
|
||||
And again, these are just the ones that the DA's office found in
|
||||
And these are just the ones that the DA's office found in
|
||||
/plain view/!
|
||||
|
||||
According to them,
|
||||
|
@ -601,9 +602,9 @@ Alright, so a bunch of private entities have you on camera;
|
|||
#+END_COMMENT
|
||||
|
||||
|
||||
**** REVIEWED Access to Data
|
||||
**** READY Access to Data
|
||||
:PROPERTIES:
|
||||
:DURATION: 00:01
|
||||
:DURATION: 00:00:45
|
||||
:END:
|
||||
|
||||
- <1-> Data can be obtained with a warrant or subpoena
|
||||
|
@ -639,7 +640,7 @@ The best form of privacy is to avoid having the data be collected to begin
|
|||
#+END_COMMENT
|
||||
|
||||
|
||||
**** REVIEWED Domain Awareness System (Intro) :B_fullframe:
|
||||
**** READY Domain Awareness System (Intro) :B_fullframe:
|
||||
:PROPERTIES:
|
||||
:DURATION: 00:00:30
|
||||
:BEAMER_env: fullframe
|
||||
|
@ -648,10 +649,11 @@ The best form of privacy is to avoid having the data be collected to begin
|
|||
#+BEGIN_CENTER
|
||||
#+BEGIN_LATEX
|
||||
\only<1>{What if all those cameras---including private---were connected?}
|
||||
\only<2>{NYPD---Domain Awareness System\incite{nyc:pspg}}
|
||||
\only<2>{\Huge NYPD\par Domain Awareness System\incite{nyc:pspg}}
|
||||
\only<3>{
|
||||
#+END_LATEX
|
||||
#+BEGIN_QUOTE
|
||||
\large
|
||||
Although NYPD documents indicate that the system is specifically designed
|
||||
for anti-terrorism operations, any incidental data it collects ``for a
|
||||
legitimate law enforcement or public safety purpose'' by DAS can be
|
||||
|
@ -668,14 +670,14 @@ Let's talk about the NYPD's Domain Awareness System.
|
|||
|
||||
It was designed in part from the usual unjustifiable and irrational response
|
||||
to terrorism threats after 9/11.
|
||||
But any ``incidental data'' can be used by law enforcement.
|
||||
Yeah, sounds familiar; business as usual.
|
||||
But any data this system collects for ``legtimate'' law enforcement or
|
||||
public safety purposes can be used against you.
|
||||
#+END_COMMENT
|
||||
|
||||
|
||||
**** REVIEWED Domain Awareness System
|
||||
**** READY Domain Awareness System
|
||||
:PROPERTIES:
|
||||
:DURATION: 00:01
|
||||
:DURATION: 00:01:15
|
||||
:END:
|
||||
|
||||
- <1-> Partnership between the NYPD and Microsoft at a cost of $230M
|
||||
|
@ -696,7 +698,7 @@ The Domain Awareness System is a partnership between Microsoft and the NYPD.
|
|||
It's mammoth.
|
||||
It's pretty amazing---it's like science fiction.
|
||||
But I care about privacy,
|
||||
so instead I'm going to use adjectives like ``Orwellian''.
|
||||
so instead I'm going to use adjectives like ``Orwellian'' and ``Kafkaesque''.
|
||||
|
||||
It contains over six thousand security cameras,
|
||||
over two-thirds of which are private closed-circuit cameras.
|
||||
|
@ -725,29 +727,39 @@ In fact,
|
|||
#+END_COMMENT
|
||||
|
||||
|
||||
*** REVIEWED Driver Surveillance
|
||||
**** REVIEWED Automated License Plate Readers (ALPRs)
|
||||
*** READY Driver Surveillance [3/3]
|
||||
**** READY Automated License Plate Readers (ALPRs)
|
||||
:PROPERTIES:
|
||||
:DURATION: 00:00:30
|
||||
:END:
|
||||
|
||||
***** Images
|
||||
:PROPERTIES:
|
||||
:BEAMER_col: 0.50
|
||||
:END:
|
||||
|
||||
#+BEGIN_CENTER
|
||||
#+BEAMER: \only<1>{
|
||||
#+ATTR_LATEX: :height 1.5in
|
||||
[[./images/tp/alpr-mounted.png]]\incite{eff:alpr}
|
||||
[[./images/tp/alpr-mounted.png]]\par\incite{eff:alpr}
|
||||
#+BEAMER: }
|
||||
#+BEAMER: \only<2>{
|
||||
#+ATTR_LATEX: :height 1.5in
|
||||
[[./images/tp/alpr-capture.png]]\incite{eff:alpr}
|
||||
[[./images/tp/alpr-capture.png]]\par\incite{eff:alpr}
|
||||
#+BEAMER: }
|
||||
#+BEAMER: \only<3>{
|
||||
#+ATTR_LATEX: :height 2in
|
||||
[[./images/tp/aclu-tracked.jpg]]\par\incite{aclu:tracked}
|
||||
#+BEAMER: }
|
||||
#+END_CENTER
|
||||
|
||||
***** Summary
|
||||
:PROPERTIES:
|
||||
:BEAMER_col: 0.50
|
||||
:END:
|
||||
- Scan passing cars' license plates\cite{aclu:tracked,eff:alpr}
|
||||
- Produce alphanumeric representation with timestamp and photograph
|
||||
- Produce alphanumeric representation with timestamp and photograph
|
||||
|
||||
#+BEGIN_COMMENT
|
||||
So before we leave the topic of government surveillance for a little bit,
|
||||
I want to talk about a couple issues related to driver surveillance.
|
||||
I want to talk about a couple issues related to driver surveillance.
|
||||
These things are a widespread, nasty threat to privacy,
|
||||
and they don't need a sophisticated Domain Awareness System to deploy.
|
||||
|
||||
|
@ -765,7 +777,7 @@ The ACLU has an excellent report on it,
|
|||
#+END_COMMENT
|
||||
|
||||
|
||||
**** REVIEWED Automatic Toll Readers
|
||||
**** READY Automatic Toll Readers
|
||||
:PROPERTIES:
|
||||
:DURATION: 00:00:30
|
||||
:END:
|
||||
|
@ -773,7 +785,7 @@ The ACLU has an excellent report on it,
|
|||
- <1-> In the North-East we have E-ZPass (RFID)\cite{w:ezpass}
|
||||
- <1-> Golden Gate Bridge requires FasTrack or plate-based
|
||||
- <2-> /But/ they provide an option for an anonymous FasTrack account
|
||||
using cash\cite{goldengate:anon}
|
||||
using cash\cite{goldengate:anon}
|
||||
- <2-> (Granted, you're still captured by an ALPR)
|
||||
- <3-> Routinely used by law enforcement\cite{baynews:fastack-data}
|
||||
- <4-> They're not very secure,
|
||||
|
@ -799,7 +811,7 @@ And they have their security issues;
|
|||
#+END_COMMENT
|
||||
|
||||
|
||||
**** REVIEWED Akin To GPS Tracking
|
||||
**** READY Akin To GPS Tracking
|
||||
:PROPERTIES:
|
||||
:DURATION: 00:00:30
|
||||
:END:
|
||||
|
@ -826,20 +838,21 @@ But it's a useful comparison against precedent.
|
|||
#+END_COMMENT
|
||||
|
||||
|
||||
*** REVIEWED Internet of Things [0/7]
|
||||
**** REVIEWED Internet-Connected Cameras
|
||||
*** AUGMENT Internet of Things [7/7]
|
||||
**** READY Internet-Connected Cameras :B_fullframe:
|
||||
:PROPERTIES:
|
||||
:DURATION: 00:00:45
|
||||
:DURATION: 00:00:35
|
||||
:BEAMER_env: fullframe
|
||||
:END:
|
||||
|
||||
#+BEGIN_CENTER
|
||||
#+BEAMER: \only<1>{Cameras used to be only physically accessible}
|
||||
\Huge
|
||||
#+BEAMER: \only<1>{Cameras used to need physical access}
|
||||
#+BEAMER: \only<2>{Today\ldots not always so much}
|
||||
#+END_CENTER
|
||||
|
||||
#+BEGIN_COMMENT
|
||||
In the past, these cameras were "closed-circuit"---
|
||||
they were on their own segregated network.
|
||||
In the past, these cameras were on their own segregated networks.
|
||||
You'd _have_ to subpoena the owner or get a warrant,
|
||||
or otherwise physically take the tape.
|
||||
|
||||
|
@ -849,20 +862,20 @@ It might be intentional---to view the camera remotely or on a device---or it
|
|||
may just be how the camera is set up by default.
|
||||
|
||||
Well...
|
||||
Let's expand our pool of cameras a bit.
|
||||
Because it's not just businesses that use Internet-connected cameras.
|
||||
They're also popular among individuals for personal/home use.
|
||||
Home security systems.
|
||||
It's not just businesses that use Internet-connected cameras.
|
||||
They're also popular among individuals for personal/home use so that they
|
||||
can view them on their smart phones and elsewhere.
|
||||
Like home security systems.
|
||||
Baby monitors.
|
||||
#+END_COMMENT
|
||||
|
||||
**** REVIEWED The ``S'' In IoT Stands For ``Security''
|
||||
**** READY The ``S'' In IoT Stands For ``Security''
|
||||
:PROPERTIES:
|
||||
:DURATION: 00:01
|
||||
:DURATION: 00:00:50
|
||||
:END:
|
||||
|
||||
- <1-> Shodan---IoT search engine\cite{shodan}
|
||||
- <2-> You'll also find other interesting things. Secure your databases.
|
||||
- <2-> You'll also find other things. Secure your databases.
|
||||
\cite{krebs:mongodb}
|
||||
- <2-> Can search for specific devices
|
||||
- <2-> If you are vulnerable, someone will find you
|
||||
|
@ -895,15 +908,32 @@ Followed by "Cams", "Netcam", and "default password".
|
|||
#+END_COMMENT
|
||||
|
||||
|
||||
**** REVIEWED Who's Watching?
|
||||
**** READY Who's Watching?
|
||||
:PROPERTIES:
|
||||
:DURATION: 00:00:15
|
||||
:DURATION: 00:00:20
|
||||
:END:
|
||||
|
||||
***** Screenshot
|
||||
:PROPERTIES:
|
||||
:BEAMER_col: 0.30
|
||||
:END:
|
||||
|
||||
#+BEGIN_CENTER
|
||||
#+ATTR_LATEX: :height 2.25in
|
||||
[[./images/insecam-ss.png]]\par\incite{insecam}
|
||||
#+END_CENTER
|
||||
|
||||
|
||||
***** Summary
|
||||
:PROPERTIES:
|
||||
:BEAMER_col: 0.70
|
||||
:END:
|
||||
|
||||
- Insecam is a directory of Internet-connected surveillance
|
||||
cameras\cite{insecam}
|
||||
- Live video feeds (browser connects directly to cameras)
|
||||
|
||||
|
||||
#+BEGIN_COMMENT
|
||||
But Shodan isn't the only thing out there.
|
||||
Anyone heard of Insecam?
|
||||
|
@ -916,10 +946,10 @@ I can tell you personally that you feel like a scumbag looking at the site.
|
|||
#+END_COMMENT
|
||||
|
||||
|
||||
**** REVIEWED Insecam Example 1 :B_fullframe:
|
||||
**** READY Insecam Example 1 :B_fullframe:
|
||||
:PROPERTIES:
|
||||
:BEAMER_env: fullframe
|
||||
:DURATION: 00:00:30
|
||||
:DURATION: 00:00:40
|
||||
:END:
|
||||
|
||||
#+BEGIN_CENTER
|
||||
|
@ -957,10 +987,10 @@ Somewhat cool, even.
|
|||
Let's get a little more personal.
|
||||
#+END_COMMENT
|
||||
|
||||
**** REVIEWED Example 2 :B_fullframe:
|
||||
**** READY Example 2 :B_fullframe:
|
||||
:PROPERTIES:
|
||||
:BEAMER_env: fullframe
|
||||
:DURATION: 00:01
|
||||
:DURATION: 00:01:00
|
||||
:END:
|
||||
|
||||
#+BEGIN_CENTER
|
||||
|
@ -1002,14 +1032,14 @@ These people are unaware.
|
|||
And these manufactuers set them up for this.
|
||||
|
||||
Even if you can't find a camera on this site,
|
||||
Shodan might have indexed it
|
||||
Shodan might have indexed it;
|
||||
just connect.
|
||||
#+END_COMMENT
|
||||
|
||||
|
||||
**** REVIEWED ALPRs Wide Open
|
||||
**** READY ALPRs Wide Open
|
||||
:PROPERTIES:
|
||||
:DURATION: 00:00:15
|
||||
:DURATION: 00:00:20
|
||||
:END:
|
||||
|
||||
#+BEGIN_CENTER
|
||||
|
@ -1035,9 +1065,9 @@ In both cases,
|
|||
#+END_COMMENT
|
||||
|
||||
|
||||
**** REVIEWED Biometrics
|
||||
**** READY Biometrics
|
||||
:PROPERTIES:
|
||||
:DURATION: 00:00:45
|
||||
:DURATION: 00:01:00
|
||||
:END:
|
||||
|
||||
- <1-> Humans no longer need to scour video
|
||||
|
@ -1070,7 +1100,7 @@ Don't have a face?
|
|||
You can also be identified by your gait.
|
||||
No gait?
|
||||
Facebook famously got even creepier by saying it could recognize people by
|
||||
their dress, posture, and hair, without seeing their face.
|
||||
their dress, posture, and hair, without even seeing their face.
|
||||
|
||||
Your fingerprints and iris data can even be extracted from high-resolution
|
||||
photos;
|
||||
|
@ -1081,8 +1111,8 @@ We'll come back to it.
|
|||
#+END_COMMENT
|
||||
|
||||
|
||||
*** REVIEWED Social Media [0/1]
|
||||
**** REVIEWED Collateral Damage
|
||||
*** READY Social Media [1/1]
|
||||
**** READY Collateral Damage
|
||||
:PROPERTIES:
|
||||
:DURATION: 00:00:45
|
||||
:END:
|
||||
|
@ -1112,6 +1142,7 @@ What they're actually doing is inflicting collateral damage.
|
|||
If I'm off in the background when you take a picture of your friends in the
|
||||
foreground,
|
||||
I'm still in the photo.
|
||||
Just something to consider when taking photos of others..
|
||||
#+END_COMMENT
|
||||
|
||||
|
||||
|
|
Loading…
Reference in New Issue