Pedro's Good Privacy

Transcript

1. Pedro's Good Privacy @paparom3o
2. Disclaimer: • I am NOT an expert • These are my (common sense) personal opinions • (Given the choice) NEVER trust any piece of software with your life
3. The Problem
5. The Cause
6. Confidential information transmitted in clear text over insecure channels
8. • Don’t be lulled into a false sense of security by: https:// • Communication via these channels is NOT peer-to-peer • These channels have memory
10. Don't trust 3rd parties with your confidential information! (if you can do anything about it)
11. How do we make things a bit harder for the people in black hats?
12. “Low Tech” Solutions
13. Don’t send the information in plain text! • LibreOffice: password protected ODF or PDF • Encrypted archive: zip -e
14. But how do I share the password?
16. Split password over (at least) 2 distinct channels batterystaple correcthorse
17. The Easier Solutions
18. Cryptocat • Free and Open Source • Developed by encryption professionals to make privacy accessible to everyone • Everything is encrypted before it leaves your computer • Extension for major browsers and native on MacOS X and iPhone • Chat and file transfer (offline)
19. Alternatives? • XMPP + OTR (Off-the-Record Messaging) • ChatSecure • Adium • Jitsi • ...
20. Open Whisper Systems Signal Private Messenger • Private Text Messages • Private Voice Calls • Free and Open Source Peer Reviewed ⇒ • Project Leader: Moxie Marlinspike • Available for Android and iOS
21. The “Big Guns” Solution
22. Public Key Cryptography
23. Pretty Good Privacy • ~25 years old • Phil Zimmerman • OpenPGP
24. Arch Linux > pacman -S gnupg Ubuntu > apt-get install gnupg MacOS X / Homebrew > brew install gnupg • The OpenPGP free software implementation • Cross platform support • Mozilla Thunderbird: Enigmail • MacOS X: GPGTools • Windows: gpg4win
25. • https://keybase.io • Make public key cryptography (GnuPG) easy • Solve the problem of identity spoofing • Web of trust based on social media • Private Beta: invitation only
26. Yubikey 4 • FIDO U2F (2FA on Gmail, GitHub, Dropbox) • RSA 4096 for OpenPGP
27. The Result
29. Holiday Extras is Hiring! http://bit.ly/1HhTirG