[Crypto-chi] [ssh] Cryptoparty at SSH on December 5 from 2-4pm

Jason Scovel jason.scovel at gmail.com
Tue Nov 24 13:36:51 UTC 2015


Shit, dog walking has destroyed my spelling.  I meant seize.

I won't be at the cryptoparty, but I believe Volatility is a good tool for
hyper meticulous hard drive and RAM inspection.

On Nov 23, 2015 10:54 PM, "Nicholas Rutzen" <rutzennick at gmail.com> wrote:

> I am planning on wiping my hard drive anyway, I dont use it for anything
> important.  If I hold off and bring it to the cryptoparty, would anyone be
> interested in seeing what they can find?
>
> On Mon, Nov 23, 2015 at 7:58 PM, eviljoel <eviljoel at linux.com> wrote:
>
>> Hey Nicholas,
>>
>> If your computer is prompting you to enter something into iCloud, there
>> is a good chance that malicious code is already installed on your
>> system. I would consider reinstalling your OS or at least run a virus
>> checker.
>>
>> When your computer slows down, it is probably the guy trying to de-auth
>> you from the Starbucks network. I doubt a VPN will protect you from that
>> attack.
>>
>> Maybe try eating lunch at a different location and see if the attacker
>> follows you?
>>
>> To get around this attack, maybe use your phone for Internet? You might
>> even be able to use your phone as a Wifi firewall of sorts.
>>
>> Good luck,
>> eviljoel
>>
>> On 11/23/2015 12:37 PM, Nicholas Rutzen wrote:
>> > I am having an issue related to cryptography and general information
>> > security; I figure this is a good forum to seek help.
>> >
>> > Every day I eat lunch at the same place, I use the Google Starbucks wifi
>> > and read or watch educational videos, nothing particularly sensitive.
>> > In the past 2 months, there have been 3 man in the middle attacks on
>> > this network that I have observed.  It starts with the wifi getting
>> > slower and slower until it is unuseable, then suddenly all of the ssl
>> > certs are invalid and google.com <http://google.com> reroutes to Google
>> > Cameroun or whatever odd domain that kinda looks like Google but isnt.
>> >
>> > They have been getting progressively better too, with the first one
>> > failing all certs, the second redirecting to odd domains and downloading
>> > a proxy script on connection, and the third I simply disconnected right
>> > away cause my computer is starting to repeatedly ask me for my icloud
>> > password (for my gmail account, I have never used icloud).
>> > The strange behaviour only started after the second attack and script
>> > download.  How do I stop this person?  I can route my traffic through
>> > vpns and encrypt but I doubt others in the shop even realize what is
>> > happening.  Any suggestions?
>> >
>> > On Nov 22, 2015 11:30 PM, "Mason Donahue" <masond at gmail.com
>> > <mailto:masond at gmail.com>> wrote:
>> >
>> >     That's totally on me for forgetting that, despite explicitly noting
>> >     that date in the last few meeting minutes. If we think it'll be a
>> >     problem we can totally reschedule for another day, or we can try
>> >     holding the rare Double Event.
>> >
>> >     --Mason
>> >
>> >     Sent from a mobile device.
>> >
>> >     On Nov 22, 2015, at 9:06 PM, Dmitriy Vysotskiy
>> >     <conspiracyx at gmail.com <mailto:conspiracyx at gmail.com>> wrote:
>> >
>> >>     Just so you know, this event
>> >>     <https://www.facebook.com/events/945014585561263/> is going on the
>> >>     same day and we are sorta kinda part of it.
>> >>
>> >>     On Sun, Nov 22, 2015 at 8:38 PM redshiftzero <jen at redshiftzero.com
>> >>     <mailto:jen at redshiftzero.com>> wrote:
>> >>
>> >>         Hey all,
>> >>
>> >>         We’ll be having a Cryptoparty at SSH next month. Hope you can
>> >>         make it!
>> >>
>> >>         When:
>> >>         5 December 2015 (Saturday) at 2-4pm
>> >>
>> >>         Where:
>> >>
>> >>         South Side Hackerspace: Chicago
>> >>         1048 W. 37th St., Suite 105
>> >>
>> >>         What:
>> >>
>> >>         Cryptoparties are free, public events to equip individuals
>> >>         with the
>> >>         knowledge and tools to secure their data and communications.
>> >>
>> >>         This time we'll be:
>> >>
>> >>         * Watching a new short video produced by the Internet Society
>> on
>> >>         Encryption, Backdoors and Privacy. We'll then discuss the
>> >>         current debate
>> >>         on encryption backdoors as a group.
>> >>         * Helping out with setting up OTR and Signal for secure
>> >>         messaging, Tor
>> >>         for anonymous web browsing, and PGP for email encryption. Come
>> >>         with
>> >>         questions!
>> >>
>> >>         Bring: Your laptops, your smartphones, snacks, drinks, and
>> >>         friends.
>> >>
>> >>         RSVP on meetup.com <http://meetup.com> (optional):
>> >>         http://www.meetup.com/sshchicago/events/226942291/
>> >>
>> >>         Note: the South Side Hackerspace: Chicago has moved!
>> >>
>> >>         Follow us on Twitter: @CryptopartyChi
>> >>         All are welcome!
>> >>
>> >>         Best,
>> >>
>> >>         Jen
>> >>
>> >>         --
>> >>         You received this message because you are subscribed to the
>> >>         Google Groups "South side hackerspace" group.
>> >>         To unsubscribe from this group and stop receiving emails from
>> >>         it, send an email to
>> >>         southsidehackers+unsubscribe at googlegroups.com
>> >>         <mailto:southsidehackers%2Bunsubscribe at googlegroups.com>.
>> >>         For more options, visit https://groups.google.com/d/optout.
>> >>
>> >>     --
>> >>     You received this message because you are subscribed to the Google
>> >>     Groups "South side hackerspace" group.
>> >>     To unsubscribe from this group and stop receiving emails from it,
>> >>     send an email to southsidehackers+unsubscribe at googlegroups.com
>> >>     <mailto:southsidehackers+unsubscribe at googlegroups.com>.
>> >>     For more options, visit https://groups.google.com/d/optout.
>> >
>> >     _______________________________________________
>> >     cryptoparty-chi mailing list
>> >     cryptoparty-chi at groups.sshchicago.org
>> >     <mailto:cryptoparty-chi at groups.sshchicago.org>
>> >     http://groups.sshchicago.org/listinfo/cryptoparty-chi
>> >
>> >
>> >
>> > _______________________________________________
>> > cryptoparty-chi mailing list
>> > cryptoparty-chi at groups.sshchicago.org
>> > http://groups.sshchicago.org/listinfo/cryptoparty-chi
>> >
>>
>> --
>> Let me teach you encrypted e-mail. eviljoel's PGP fingerprint:
>> A2BE 2D12 24D1 67CA 8830  DDE7 DFB3 676B 196D 6430
>>
>>
>> _______________________________________________
>> cryptoparty-chi mailing list
>> cryptoparty-chi at groups.sshchicago.org
>> http://groups.sshchicago.org/listinfo/cryptoparty-chi
>>
>>
>
> _______________________________________________
> cryptoparty-chi mailing list
> cryptoparty-chi at groups.sshchicago.org
> http://groups.sshchicago.org/listinfo/cryptoparty-chi
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://groups.sshchicago.org/pipermail/cryptoparty-chi/attachments/20151124/056bfff8/attachment.html>


More information about the cryptoparty-chi mailing list