Yush @cyber-d0g - Tumblr Blog

Time management hmm

I’ve admittedly done pretty badly adjusting to this concept of doing blog posts:( With heavy time demands from my other course/extracurricular commitments, blogging has been something that I have not prioritised, and that is entirely my fault. I have, however made consistent notes of the my security tutorials, And in order to not spam my blog I’ll post links to the pages where I have placed my notes:

Tutorial 1

Tutorial 2

Tutorial 3

Tutorial 4

Tutorial 5

Tutorial 6

Ultimately, I’ve realised too late just how important consistent blogging is for developing effective time management skills as well as recording progress of learning. I think this will be one of the biggest things I’ll take out of this course.

How much do we really value our privacy?

So I work in the printing department of a well-known retail company. This means that I come across my fair share of people's personal documents in every shift. It always makes me wonder just how much people value the privacy and security of their own personal businesses when I get a customer who brings in a particularly confidential document to print/scan/copy. During my shift yesterday, I printed/scanned multiple confidential documents for lawyers, one set of divorce papers and a domestic violence file report; I've even printed my third-grade teacher's divorce papers during a shift last year.

Often I'll get documents blatantly displaying the words "confidential" stamped across the header, yet our company has no policy to decline to handle any personal files (unless they include nudity or inappropriate content); so the customer is completely printing at their own risk. I wonder quietly, "Why not just buy your own printer and do it yourself?". To respect their privacy, I try not to pay attention to the document's contents and focus on listening to their requests, but with our computers pointed towards the customer and the screen visible to the people waiting in the queue, no amount of requests from the customer to "delete the document from [our] computer afterward, because it's confidential" stops these people from viewing the information.

The printers at my work are also complete arseholes. We experience frequent jams and when we remove the paper jam, the page reprints, however, the jammed paper will often still be fairly readable. Now, when this happens, we're meant to shred the page if it contains personal documents, but what happens if a shitty employee forgets to do this or does not dispose of the page appropriately. I understand that we're a printing department and that it's our job to print documents and handle personal data responsibly, and we do have measures to ensure that a customer's data is handled safely; we even have self-serve printing stations if they don't want strangers handling their documents. However, it baffles me when a customer comes in saying "I need to print some extremely personal information" but does not mind it being handled/viewed by a 20year old stranger (me) and cannot be bothered learning how to use the self-serve machines (a very trivial task that would take a toddler 5mins to learn).

SA: Fungi Business

There are numerous software and applications that allow attackers to exploit wireless networks. With absolutely no experience with hacking before (or a Linux environment, lol I guess it's time to start) I installed Kali Linux onto my desktop and decided to play around with it a little.

I guess the easiest place to start would be using Wireshark, and doing some ethical packet analysing. I'd heard in the past that Kali Linux was a distribution used for pen-testing, and upon further research, found that it contains over 600 pen-testing programs such as Aircrack-ng and Wireshark; software that detect and analyse network packets.

For my introduction to Wireshark, I decided to capture my own network's traffic while I accessed an insecure website on my browser. I found some super old http sites, one about fungi (lovely). I then stopped the traffic and filtered the 'http' protocol.

I found that I could view the JPEG/PNG requests underneath the 'GET' calls for the images. And when I highlighted the JPEG File Interchange Format in the second window, and exported the packet bytes as jpegs, I could get the images themselves (see below).

As a result, I collected a great variety of images of fungi :)) Obviously this is super amateur level stuff, but it's been extremely interesting seeing just how easy it is to intercept and download unencrypted data travelling through wireless networks.

SA: Wireless Network Attacks

Some common wireless threats include:

Rogue Access Points

Man-in-the-middle attacks

Denial of Service

"Evil Twin"

Man in the middle attack

When a third party intercepts communications between two participants, instead of data being shared directly between server and client, the link is broken by another element. The uninvited hijacker then presents their own version of a site to display to you, adding in their own messages

Public wifi users in particular are vulnerable, since your data is unencrypted; just getting into your emails gives hackers access to your usernames, passwords and private messages.

Prevention: Server authentication

Rogue Access Points/Ad-Hoc Networks:

Devices often try to auto connect to the access point emitting the strongest signal. These attacks involve 'fooling' legitimate devices into associating to a rogue access point which is within close range of the existing WLAN. Attackers can capture and intercept confidential data going through the rogue access point for an extended period of time (works better if the attacker can gain access to a physical port on a company network and hook the access point into this port).

Prevention: Install WIPS (Wireless Intrusion Prevention System) to monitor the radio spectrums of unauthorised APs and take actions accordingly).

Evil Twin access points:

A rogue access point can easily advertise the same SSID (network name) as that of a legitimate one. Users can be tricked into connecting to a malicious network.

Denial of Service

Limiting access to services. Attackers can send a large amount of traffic at a specific target, so wireless networks are easily prone to these attacks because their signals can be interfered with through a number of techniques.

There are two main frequency bands for WLANs: 2.4GHz and 5GHz. The 2.4GHz band can be interfered by something as simple as a microwave oven or a competing access point on the same channel.

Packet Sniffing

A device transmits a data packet across an unencrypted network, which can then be read by software like Wireshark (free). Wireshark is a handy tool for analysing web traffic, including finding cybercriminals and vulnerabilities that need patching.

Hackers can scan through the abundance of data and extract personal things like passwords.

Packet sniffing is actually not illegal if the terms of use that public wifi logins display doesn't mention anything about not being allowed to packet sniff. David Maimon, Assistant Professor at the University of Maryland, investigated the dangers of using public wifi:

"When we started we had to get approval and the legal team in Maryland checked whether it’s okay to sniff and couldn’t find any law preventing you from sniffing. Banners before you log in to public Wi-fI, where you agree terms of use, sometimes specifically mention you’re not allowed to sniff and that makes it illegal, but if there’s no banner then it’s not illegal at all.

Prevention: rely on strong encryption, use VPNs

SA: Security Concerns

Wireless networks are easier to exploit than wired networks. Businesses and individuals can be put at serious risk if Wi-Fi is taken for granted and security is neglected. Recently, there's been a massive rise in public wifi, and this has consequently led to an increase in cyberattacks on users accessing unsecured wireless networks.

Public Wi-Fi: an overview

In 2010, it was estimated that there were about 750 000 hotspots worldwide, and this number has been growing exponentially since. Public wi-fi hotspots pose a serious threat t your personal data:

Almost anyone can set up a malicious hotspot that can record unencrypted data being sent through the channel.

Attackers can access your personal info by eavesdropping on a legitimate wi-fi hotspot

How do you know if a network is not secure?

If a network or hotspot does not require a password, then the data is not being encrypted.

For hotspots requiring a password, there are three different kinds of protection

Wired Equivalent Privacy (WEP): the oldest and least secure technology (assume data is not secure)

Wi-fi protected access (WPA) offers some level of protection (becoming outdated)

WPA2 offers highest degree of security

How to know if your data is encrypted?

Look for the 'https' at the start of the web address; sometimes this will only be at the login page, so check for the 'https' at the start of each web address you visit. If networks don't require a WPA or WPA2 password, then your data is probably not secure.

SA: Wireless Networks

Wireless networks have been one of the most significant technological developments of the modern age; it has impacted almost every aspect of our lives and are a HUGE convenience as it offers convenience, high-speed communication and connectivity. Wireless Local Area Networks (WLAN) operate using radio frequency (RF) technology, involving RF currents propagating through space.

To access a wireless network, you need to be within the transmission radius of an access point (AP). These points act as an amplifier for your network and broadcast a wireless signal that computers can tune into through a wireless network adapter. APs eventually link back to a wired network at some point; so APs serve as a link to the resources available on a wired network e.g. internet connection.

Many people (aka me) get confused between access points and routers. Routers connect multiple networks together and connect computers on those networks to the internet. So they analyse data being sent across a network and choose the best route for the data to travel. Routers provide the bandwidth of the wireless network, while access points extend this bandwidth so that the network can support and be accessed by numerous devices.

The benefits:

Wireless technologies have been widely successful because of how massively convenient they are; network resources can be accessed from any location within a wireless network's coverage are. They are easy to set up, can be expanded, usually implement robust security protections and, due to reduced wiring expenses, they cost less to operate.

Security concerns:

Despite the benefits, since anyone within range of a wireless network can gain access, wireless networks are potentially more vulnerable to attacks. Wi-Fi Protected Access (WPA) is a family of technologies created to protect information being transmitted across wireless networks.

#SA1

WEEK 5 CASE STUDY: DRIVERLESS CARS

Last week's case study involved a sort of role play scenario where we were to imagine that we were the CSO of a large corporation called Giggle, who were experimenting with driverless electronic cars in which navigation and driving were controlled by a computer.

We were to prepare a brief which was to be presented to the top executives of the company; this brief was to highlight the assets of the company, the main risks, the mitigations, and our recommendation on whether the company should proceed with this project.

In the mindset of the company, the main assets were obviously going to be those that were in the company's best interests, that is:

Reputation

Stock value and investors of Giggle

Employees

The computer/driverless software

Research data

The cars themselves

Risks:

Faults or vulnerabilities in the software that put the safety of the driver at risk - 0days

Corporate espionage: I'm assuming "huge corporation" indicates that this company would have many competitors/enemies

The level of impact an incident/company scandal would cause on the company's reputation and stock value - this would be something we could only predict and attempt to minimise unless it actually happened

Mitigations

Data encryption

Extensive testing of the model

Gather data from vehicle accidents by non-driverless cars vs driverless

Pen-testing

Get the best engineers to design the computers and the vehicles; (i.e. only hire UNSW graduates)

During the class discussion some great points were raised about methods of mitigating the risks, such as

Limiting the hardware/software to only get it to do what it needs to do (if you only do what you need to do then there's less chance of fking up your car and your company).

Add an override feature in case the driverless mode has any faults.

The latter point was raised by Jazz a couple weeks ago as well, in relation to the Boeing 737 scandal. I did some research into this because I found it fascinating. Basically, earlier this year Boeing announced an update to their 737 plane model, involving a larger engine design. Due to the larger engine, in order to prevent the side effect of the plane's nose pointing too high, Boeing installed software that automatically stabilised the plane if the plane flew at too high of an angle. However due to minimal effort to update training modules for pilots, many experienced the issue of the plane nosing down making it difficult for the planes to gain altitude; multiple crashes occurred as a result of this. This short video provides some good details on this:

https://www.youtube.com/watch?v=H2tuKiiznsY

As for driverless cars, I'd say go for it. I mean, we've become well-immersed in the digital age now, driverless cars will inevitably transform our roads in the near-future. So why not do it, and do it properly before other competing companies beat Giggle to their own game.

#comp6441 #case study

SOMETHING AWESOME PROPOSAL

CONCEPT: Wireless Networks and Devices

Beginning with extremely minimal knowledge on the workings behind wireless networks and devices, I'd like to conduct an investigation on how they work and analyse their security risks. With the increasing usage of wireless internet and devices, WiFi hotspots have risen significantly. So it seems extremely useful and interesting to research the security vulnerabilities of wireless devices and public Wi-Fi hotspots in particular, and hopefully with the help of Jazz (course tutor), learn how to ethically hack them.

GOALS:

1. Learn how to think like a security engineer:

Gain an understanding of the vulnerabilities of Wi-Fi networks and public unsecured hotspots.

Learn how to recognise when personal data has been breached via the usage of these networks, and;

Know what to do in these situations

2. Achieve an understanding of the vulnerabilities and exploits surrounding wireless networks and devices.

3. Gain a practical experience of real-life network and device hacking.

ACTIONABLES:

1. Research and blog about the following topics on wireless networks and devices

How they work

Security vulnerabilities

Methods used by hackers to hack devices and network users

Software and distributions used to exploit wireless networks and devices e.g. WireShark, Kali Linux.

Methods to manage security threats on oneself/user

2. Conduct bi-weekly research of public Wi-Fi hacking case studies.

3. Practical component: Learn how to hack. If I can find an ethical way, I'd like to hack someone on a public Wi-Fi network; otherwise, I'll focus on exploiting devices e.g. a wireless printer.

MARKING CRITERIA

HD:

Many insightful blog posts about progress and analysis.

Completion of all actionables and detailed evidence of research/progress on blog.

Detailed report of practical component with thorough discussion of methods, challenges and evidence of any software used/code written.

DN:

Insightful blog posts about progress and analysis.

Completion and detailed report of all actionables.

Report of practical component with discussion of findings.

CR:

Consistent standard level blog posts about progress.

Completion and detailed report of at least four topics from actionable #1, and completion of all other actionables.

Standard report of practical component findings.

PS:

Some blog posts about progress and analysis.

Completion of one actionable with evidence.

Evidence of significant time dedicated to project.

FL:

Unsatisfactory blogs

No actionables completed.

#somethingawesome #proposal #6441

Facebook introduces cryptocurrency

Yesterday, Facebook debuted an ambitious plan to release its own cryptocurrency in 2020, Libra, with the aim of making financial services easier and more accessible than traditional banking. From next year, users will be able to purchase Libra and store it in a digital wallet called Calibra, available on messenger and WhatsApp.

Now Facebook doesn't exactly have the best reputation with managing privacy. In a plea for trust, David Marcus, Head of Facebook's Calibra has assured that there will be a separation of data, acknowledging "[people] don't want their financial data comingled with their social data.. Facebook Inc will not have access to financial data inside Calibra." Accounts will be managed by a Libra blockchain and will be pseudonymous - not anonymous or shielded. Public and private keys will be implemented where customers use the public key as a shareable destination address for money, while the private key can be used to validate transactions.

The big question is, will this project work? Sure digital currency is inevitable and evolving, however Libra users will be required to place a lot of trust on Facebook's security measures to protect their data. The concept of integrating this digital wallet with messenger and whatsApp will require data-sharing. Facebook has assured that no financial data from Calibra will be shared without customer consent (except in cases involving criminal activity or product performance). Hmm I'd say this is going to take a lot of convincing for people to get on board.

Substitution Ciphers

I've been passing my time on https://cryptograms.puzzlebaron.com the past week practicing the substitution ciphers on this website. It's been quite fun actually, and the temporary ego-boost every time I solve one with only minimal usage of hints is heaps satisfying.

I started out terribly, averaging at a solve time of 10-15 times longer than the length of the general public's average time - a consistent achievement worth applauding. Currently I'm solving it relatively close to the average time which is promising, although what I'm doing better - I don't really know.

I did start off in the early days by doing a whole lot of frequency analysis - ETAOIN SHRDLU. But I realised that it wasn’t very reliable, so while I do use it sometimes (e.g. to guess "E"), I've settled upon a YOLO method which seems to be working more efficiently. I think by forcing myself to do word puzzles my vocabulary has also expanded which also speeds things up.

I shall continue to do these, my end goal is to be able to solve each puzzle at an average time of 60seconds so stay tuned.

Something Awesome??

I’ve currently got two main ideas for my something awesome project. Having zero background in hacking, I don’t know how this is gonna go but eh, doesn’t hurt to try.

1. Analyse the security risks posed by Public Wifi, investigate the various hacking methods used and learn how to hack somebody using public wifi.

2. Do some research on malware and write my own virus.

Why are we so shit at risk management?

According to the Australian Bureau of Statistics, there were 160,909 deaths in Australia in 2017. Of these, 18,590 deaths resulted from Ischaemic heart disease, 1,318 were caused by land transport accidents; only 3 deaths were due to terrorism. So why the hell are we more willing to devote our resources towards preventing low probability events such as terrorist attacks, compared to events that are significantly more likely to occur?

Richard made quite a good comment about humans being generally bad at assessing the dangers of low probability risks. He’s pretty spot on. Unfortunately there exists a zero-risk bias - the tendency to try and completely eliminate one specific risk despite there being more beneficial alternative risk management options. In other words, we prefer a complete reduction in the risk of dying in a terrorist attack rather than a partial reduction in something more probable (e.g. a car accident).

I myself am guilty of sharing this biased mindset; if I were given the option yesterday to lessen the risk of a possible terrorist attack occurring versus lessening the risk of a car accident occurring on Princes Highway near where I live, I would truthfully lean towards the first option (although traffic on the way to uni would be a bitch). It can be agreed upon that the media does play a significant role in shaping our perceptions of risks. Due to the extreme and widescale global disruption caused by high-impact low-probability events (HILP), the extensive coverage by the media as well as the public pressure on government and political institutions to take action, instil a sense of urgency within communities to sacrifice extensive aid and resources towards the prevention of similar events from occurring in the future.

The aftermath of the recent Notre-Dame fire saw donations of over €1 billion being raised for the Cathedral's restoration project (a heckin large amount of money, oh boy), sparking global outrage due to the immensity of resources being invested in this one project. Now this may not be an example of trying to prevent a high-impact risk, but it demonstrates societal tendency to invest excessive time and effort towards one particular event/risk if it poses a risk to our values or sentiments. But this isn’t what we should be doing.

Humans do anything they can to prevent one event that poses a threat of wiping out a significant number of us, rather than working to prevent multiple more probable events that will only effect smaller groups of people (which in the long run will still add up to the deaths of a significant number of us). Sure there is always the global catastrophic risk of an event occurring that may possibly lead to our extinction, but how likely is it that an asteroid will hit the earth and wipe us out tomorrow? I think Richard's lecture today really put my mind into perspective and made me see just how shit we are at allocating resources to manage risks.

#comp6441 #risk #security

When in Europe

Hello and welcome to my first blog post. I guess I'm a bit late to the game; could blame it on trimesters, or the fact that I missed first week of term to be in Europe, or I could just admit that I've managed my time poorly. Nevertheless, expect more consistent content from now on (hopefully).

Europe was great by the way, thanks for wondering. Only slight bump in the road was the fact my dad's card got cloned and his accounts frozen while we were in Paris. Mum being the overly worried stressball that she is decided to freeze her accounts as well in case dad's mysterious hacker decided to target hers (not sure how likely) which left us with a rapidly declining wad of cash and the increasing reliance on my savings to fund our spendings during the trip, leaving me impressively broke by the end - yay! (it's all happy days now, they've payed me back).

Inconveniently, I found out AFTER I came back to Australia that France currently has the highest fraud rate in Europe by a significant margin, and has held this position for some time. The beginning of this decade saw the introduction of EMV (Europay, Mastercard and Visa) - a payment scheme based on authentication methods often called Chip and PIN/Chip and Signature cards. Whilst the UK saw a decline in fraud losses following the introduction of EMV, France only saw a continual increase. Martin Warwick, a fraud consultant at the financial analyst company FICO explained the following; "Any successful reduction in fraud, like that driven by Chip and Pin, typically results in criminals changing their modus operandi to find a different weak spot…Fraud is like a balloon - if you squeeze it out of one scheme, or one country, it bulges somewhere else". Some very optimistic words from our boy here, Martin.

I want to do some further research into how credit card frauds have evolved and why they have continued to rise despite new technological advancements, such as fraud-fighting AI developments. Hopefully once I get a better understanding of how these happen, I'll have a more wholesome experience next time I'm in France.

#comp6441 #security engineering

Trending Blogs

Recently Viewed Blogs

Yush