<div dir="ltr">I am planning on wiping my hard drive anyway, I dont use it for anything important. If I hold off and bring it to the cryptoparty, would anyone be interested in seeing what they can find?</div><div class="gmail_extra"><br><div class="gmail_quote">On Mon, Nov 23, 2015 at 7:58 PM, eviljoel <span dir="ltr"><<a href="mailto:eviljoel@linux.com" target="_blank">eviljoel@linux.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Hey Nicholas,<br>
<br>
If your computer is prompting you to enter something into iCloud, there<br>
is a good chance that malicious code is already installed on your<br>
system. I would consider reinstalling your OS or at least run a virus<br>
checker.<br>
<br>
When your computer slows down, it is probably the guy trying to de-auth<br>
you from the Starbucks network. I doubt a VPN will protect you from that<br>
attack.<br>
<br>
Maybe try eating lunch at a different location and see if the attacker<br>
follows you?<br>
<br>
To get around this attack, maybe use your phone for Internet? You might<br>
even be able to use your phone as a Wifi firewall of sorts.<br>
<br>
Good luck,<br>
eviljoel<br>
<span class=""><br>
On 11/23/2015 12:37 PM, Nicholas Rutzen wrote:<br>
> I am having an issue related to cryptography and general information<br>
> security; I figure this is a good forum to seek help.<br>
><br>
> Every day I eat lunch at the same place, I use the Google Starbucks wifi<br>
> and read or watch educational videos, nothing particularly sensitive.<br>
> In the past 2 months, there have been 3 man in the middle attacks on<br>
> this network that I have observed. It starts with the wifi getting<br>
> slower and slower until it is unuseable, then suddenly all of the ssl<br>
</span>> certs are invalid and <a href="http://google.com" rel="noreferrer" target="_blank">google.com</a> <<a href="http://google.com" rel="noreferrer" target="_blank">http://google.com</a>> reroutes to Google<br>
<span class="">> Cameroun or whatever odd domain that kinda looks like Google but isnt.<br>
><br>
> They have been getting progressively better too, with the first one<br>
> failing all certs, the second redirecting to odd domains and downloading<br>
> a proxy script on connection, and the third I simply disconnected right<br>
> away cause my computer is starting to repeatedly ask me for my icloud<br>
> password (for my gmail account, I have never used icloud).<br>
> The strange behaviour only started after the second attack and script<br>
> download. How do I stop this person? I can route my traffic through<br>
> vpns and encrypt but I doubt others in the shop even realize what is<br>
> happening. Any suggestions?<br>
><br>
> On Nov 22, 2015 11:30 PM, "Mason Donahue" <<a href="mailto:masond@gmail.com">masond@gmail.com</a><br>
</span><span class="">> <mailto:<a href="mailto:masond@gmail.com">masond@gmail.com</a>>> wrote:<br>
><br>
> That's totally on me for forgetting that, despite explicitly noting<br>
> that date in the last few meeting minutes. If we think it'll be a<br>
> problem we can totally reschedule for another day, or we can try<br>
> holding the rare Double Event.<br>
><br>
> --Mason<br>
><br>
> Sent from a mobile device.<br>
><br>
> On Nov 22, 2015, at 9:06 PM, Dmitriy Vysotskiy<br>
</span><span class="">> <<a href="mailto:conspiracyx@gmail.com">conspiracyx@gmail.com</a> <mailto:<a href="mailto:conspiracyx@gmail.com">conspiracyx@gmail.com</a>>> wrote:<br>
><br>
>> Just so you know, this event<br>
</span>>> <<a href="https://www.facebook.com/events/945014585561263/" rel="noreferrer" target="_blank">https://www.facebook.com/events/945014585561263/</a>> is going on the<br>
<span class="">>> same day and we are sorta kinda part of it.<br>
>><br>
>> On Sun, Nov 22, 2015 at 8:38 PM redshiftzero <<a href="mailto:jen@redshiftzero.com">jen@redshiftzero.com</a><br>
</span><div><div class="h5">>> <mailto:<a href="mailto:jen@redshiftzero.com">jen@redshiftzero.com</a>>> wrote:<br>
>><br>
>> Hey all,<br>
>><br>
>> We’ll be having a Cryptoparty at SSH next month. Hope you can<br>
>> make it!<br>
>><br>
>> When:<br>
>> 5 December 2015 (Saturday) at 2-4pm<br>
>><br>
>> Where:<br>
>><br>
>> South Side Hackerspace: Chicago<br>
>> 1048 W. 37th St., Suite 105<br>
>><br>
>> What:<br>
>><br>
>> Cryptoparties are free, public events to equip individuals<br>
>> with the<br>
>> knowledge and tools to secure their data and communications.<br>
>><br>
>> This time we'll be:<br>
>><br>
>> * Watching a new short video produced by the Internet Society on<br>
>> Encryption, Backdoors and Privacy. We'll then discuss the<br>
>> current debate<br>
>> on encryption backdoors as a group.<br>
>> * Helping out with setting up OTR and Signal for secure<br>
>> messaging, Tor<br>
>> for anonymous web browsing, and PGP for email encryption. Come<br>
>> with<br>
>> questions!<br>
>><br>
>> Bring: Your laptops, your smartphones, snacks, drinks, and<br>
>> friends.<br>
>><br>
</div></div>>> RSVP on <a href="http://meetup.com" rel="noreferrer" target="_blank">meetup.com</a> <<a href="http://meetup.com" rel="noreferrer" target="_blank">http://meetup.com</a>> (optional):<br>
<span class="">>> <a href="http://www.meetup.com/sshchicago/events/226942291/" rel="noreferrer" target="_blank">http://www.meetup.com/sshchicago/events/226942291/</a><br>
>><br>
>> Note: the South Side Hackerspace: Chicago has moved!<br>
>><br>
>> Follow us on Twitter: @CryptopartyChi<br>
>> All are welcome!<br>
>><br>
>> Best,<br>
>><br>
>> Jen<br>
>><br>
>> --<br>
>> You received this message because you are subscribed to the<br>
>> Google Groups "South side hackerspace" group.<br>
>> To unsubscribe from this group and stop receiving emails from<br>
>> it, send an email to<br>
>> <a href="mailto:southsidehackers%2Bunsubscribe@googlegroups.com">southsidehackers+unsubscribe@googlegroups.com</a><br>
</span>>> <mailto:<a href="mailto:southsidehackers%252Bunsubscribe@googlegroups.com">southsidehackers%2Bunsubscribe@googlegroups.com</a>>.<br>
<span class="">>> For more options, visit <a href="https://groups.google.com/d/optout" rel="noreferrer" target="_blank">https://groups.google.com/d/optout</a>.<br>
>><br>
>> --<br>
>> You received this message because you are subscribed to the Google<br>
>> Groups "South side hackerspace" group.<br>
>> To unsubscribe from this group and stop receiving emails from it,<br>
>> send an email to <a href="mailto:southsidehackers%2Bunsubscribe@googlegroups.com">southsidehackers+unsubscribe@googlegroups.com</a><br>
</span>>> <mailto:<a href="mailto:southsidehackers%2Bunsubscribe@googlegroups.com">southsidehackers+unsubscribe@googlegroups.com</a>>.<br>
<span class="">>> For more options, visit <a href="https://groups.google.com/d/optout" rel="noreferrer" target="_blank">https://groups.google.com/d/optout</a>.<br>
><br>
> _______________________________________________<br>
> cryptoparty-chi mailing list<br>
> <a href="mailto:cryptoparty-chi@groups.sshchicago.org">cryptoparty-chi@groups.sshchicago.org</a><br>
</span>> <mailto:<a href="mailto:cryptoparty-chi@groups.sshchicago.org">cryptoparty-chi@groups.sshchicago.org</a>><br>
> <a href="http://groups.sshchicago.org/listinfo/cryptoparty-chi" rel="noreferrer" target="_blank">http://groups.sshchicago.org/listinfo/cryptoparty-chi</a><br>
<div class="HOEnZb"><div class="h5">><br>
><br>
><br>
> _______________________________________________<br>
> cryptoparty-chi mailing list<br>
> <a href="mailto:cryptoparty-chi@groups.sshchicago.org">cryptoparty-chi@groups.sshchicago.org</a><br>
> <a href="http://groups.sshchicago.org/listinfo/cryptoparty-chi" rel="noreferrer" target="_blank">http://groups.sshchicago.org/listinfo/cryptoparty-chi</a><br>
><br>
<br>
</div></div><span class="HOEnZb"><font color="#888888">--<br>
Let me teach you encrypted e-mail. eviljoel's PGP fingerprint:<br>
A2BE 2D12 24D1 67CA 8830 DDE7 DFB3 676B 196D 6430<br>
<br>
</font></span><br>_______________________________________________<br>
cryptoparty-chi mailing list<br>
<a href="mailto:cryptoparty-chi@groups.sshchicago.org">cryptoparty-chi@groups.sshchicago.org</a><br>
<a href="http://groups.sshchicago.org/listinfo/cryptoparty-chi" rel="noreferrer" target="_blank">http://groups.sshchicago.org/listinfo/cryptoparty-chi</a><br>
<br></blockquote></div><br></div>