[Crypto-chi] [ssh] Cryptoparty at SSH on December 5 from 2-4pm

Tue Nov 24 01:58:01 UTC 2015

Hey Nicholas,

If your computer is prompting you to enter something into iCloud, there
is a good chance that malicious code is already installed on your
system. I would consider reinstalling your OS or at least run a virus
checker.

When your computer slows down, it is probably the guy trying to de-auth
you from the Starbucks network. I doubt a VPN will protect you from that
attack.

Maybe try eating lunch at a different location and see if the attacker
follows you?

To get around this attack, maybe use your phone for Internet? You might
even be able to use your phone as a Wifi firewall of sorts.

Good luck,
eviljoel

On 11/23/2015 12:37 PM, Nicholas Rutzen wrote:
> I am having an issue related to cryptography and general information
> security; I figure this is a good forum to seek help. 
> 
> Every day I eat lunch at the same place, I use the Google Starbucks wifi
> and read or watch educational videos, nothing particularly sensitive. 
> In the past 2 months, there have been 3 man in the middle attacks on
> this network that I have observed.  It starts with the wifi getting
> slower and slower until it is unuseable, then suddenly all of the ssl
> certs are invalid and google.com <http://google.com> reroutes to Google
> Cameroun or whatever odd domain that kinda looks like Google but isnt. 
> 
> They have been getting progressively better too, with the first one
> failing all certs, the second redirecting to odd domains and downloading
> a proxy script on connection, and the third I simply disconnected right
> away cause my computer is starting to repeatedly ask me for my icloud
> password (for my gmail account, I have never used icloud). 
> The strange behaviour only started after the second attack and script
> download.  How do I stop this person?  I can route my traffic through
> vpns and encrypt but I doubt others in the shop even realize what is
> happening.  Any suggestions?
> 
> On Nov 22, 2015 11:30 PM, "Mason Donahue" <masond at gmail.com
> <mailto:masond at gmail.com>> wrote:
> 
>     That's totally on me for forgetting that, despite explicitly noting
>     that date in the last few meeting minutes. If we think it'll be a
>     problem we can totally reschedule for another day, or we can try
>     holding the rare Double Event.
> 
>     --Mason
> 
>     Sent from a mobile device.
> 
>     On Nov 22, 2015, at 9:06 PM, Dmitriy Vysotskiy
>     <conspiracyx at gmail.com <mailto:conspiracyx at gmail.com>> wrote:
> 
>>     Just so you know, this event
>>     <https://www.facebook.com/events/945014585561263/> is going on the
>>     same day and we are sorta kinda part of it.
>>
>>     On Sun, Nov 22, 2015 at 8:38 PM redshiftzero <jen at redshiftzero.com
>>     <mailto:jen at redshiftzero.com>> wrote:
>>
>>         Hey all,
>>
>>         We’ll be having a Cryptoparty at SSH next month. Hope you can
>>         make it!
>>
>>         When:
>>         5 December 2015 (Saturday) at 2-4pm
>>
>>         Where:
>>
>>         South Side Hackerspace: Chicago
>>         1048 W. 37th St., Suite 105
>>
>>         What:
>>
>>         Cryptoparties are free, public events to equip individuals
>>         with the
>>         knowledge and tools to secure their data and communications.
>>
>>         This time we'll be:
>>
>>         * Watching a new short video produced by the Internet Society on
>>         Encryption, Backdoors and Privacy. We'll then discuss the
>>         current debate
>>         on encryption backdoors as a group.
>>         * Helping out with setting up OTR and Signal for secure
>>         messaging, Tor
>>         for anonymous web browsing, and PGP for email encryption. Come
>>         with
>>         questions!
>>
>>         Bring: Your laptops, your smartphones, snacks, drinks, and
>>         friends.
>>
>>         RSVP on meetup.com <http://meetup.com> (optional):
>>         http://www.meetup.com/sshchicago/events/226942291/
>>
>>         Note: the South Side Hackerspace: Chicago has moved!
>>
>>         Follow us on Twitter: @CryptopartyChi
>>         All are welcome!
>>
>>         Best,
>>
>>         Jen
>>
>>         --
>>         You received this message because you are subscribed to the
>>         Google Groups "South side hackerspace" group.
>>         To unsubscribe from this group and stop receiving emails from
>>         it, send an email to
>>         southsidehackers+unsubscribe at googlegroups.com
>>         <mailto:southsidehackers%2Bunsubscribe at googlegroups.com>.
>>         For more options, visit https://groups.google.com/d/optout.
>>
>>     -- 
>>     You received this message because you are subscribed to the Google
>>     Groups "South side hackerspace" group.
>>     To unsubscribe from this group and stop receiving emails from it,
>>     send an email to southsidehackers+unsubscribe at googlegroups.com
>>     <mailto:southsidehackers+unsubscribe at googlegroups.com>.
>>     For more options, visit https://groups.google.com/d/optout.
> 
>     _______________________________________________
>     cryptoparty-chi mailing list
>     cryptoparty-chi at groups.sshchicago.org
>     <mailto:cryptoparty-chi at groups.sshchicago.org>
>     http://groups.sshchicago.org/listinfo/cryptoparty-chi
> 
> 
> 
> _______________________________________________
> cryptoparty-chi mailing list
> cryptoparty-chi at groups.sshchicago.org
> http://groups.sshchicago.org/listinfo/cryptoparty-chi
> 

-- 
Let me teach you encrypted e-mail. eviljoel's PGP fingerprint:
A2BE 2D12 24D1 67CA 8830  DDE7 DFB3 676B 196D 6430

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 819 bytes
Desc: OpenPGP digital signature
URL: <http://groups.sshchicago.org/pipermail/cryptoparty-chi/attachments/20151123/f86d1c18/attachment.sig>