A Pattern Language for Salvaging the 4th Amendment; BarCamp Philly 2013

Post on 23-Jan-2015

206 views 0 download

description

A Pattern Language for Salvaging the 4th Amendment; BarCamp Philly 2013

transcript

A Pattern Language for Salvaging the 4th

AmendmentJoe Raimondo

BarCamp Philly November 9, 2013

The right of the people to be secure in their persons, houses, papers, and effects, against unreasonable searches and seizures, shall not be violated, and no Warrants shall issue, but upon probable cause, supported by Oath or affirmation, and particularly describing the place to be searched, and the persons or things to be seized.

So There Is This

"If you have something that you don't want anyone to know, maybe you shouldn't be doing it in the first place…But if you really need that kind of privacy, the reality is that search engines, including Google, do retain this information for some time...We're all subject, in the United States, to the Patriot Act. It is possible that that information could be made available to the authorities.“

~ Google Chairman Eric Schmidt

Welcome to the new world of info freedom

"As soon as you assume you're being watched, those who would watch you have already won.“

~John Perry Barlow

Who’s watching whom?

Personal Organizational

Patterns for security

Lessig Yochai Benkler David Weinberger Zeynep Tufekci

“Snowden is what we know. If he could walk out so easily, how do we know someone didn't pay $$$ for data to a Xnowden who's still in Hawaii?” @zeynep

Berkman Center @ Harvard

- Password- Vaults & crypts

- 2 key validation- Always when using phone

- Internet search agent-email alert- Yahoo & Google

- Go all open source- Duckduckgo.com

- Local company- Anonymous (to a point) search

5 Beginner Patterns

PGP Tor Air-gapping – computer never on Internet Software defined radio/darknet Go all open source

5 Intermediate Patterns

See previous Physical security Industrial/foreign espionage

◦ More than you think

Organizational Patterns

Set up your own darknet◦ For the experience of it

Get into the NAP! ◦ Get the darkmesh in the cloudbone

root@netsec - /r/netsec Break the duopoly

◦ It is proving demonstrably dangerous to the US economy

Patterns for Activism