The Perfectly Legitimate Project

Grant Dobbe and Brendan O'Connor
ThotCon 0x5, April 25, 2014

When we can't use the Internet anymore---either because it's gone, or because we can't trust it---how can we share our cat GIFs, tear gas remedies, or recipes for Roasted Rodent Ratatouille? The Perfectly Legitimate Project creates a decentralized, Internet-optional system of sharing data among a group of nodes without relying on easy-to-locate mesh networks. PLP uses whatever’s available to move heavily-encrypted payloads around, including short-range wireless communications (on license-free VHF, UHF, ZigBee, or WiFi), sneakernet, or tasty (and nutritious!) carrier pigeons.

Transcript

1. The Perfectly
   Legitimate Project
   If we didn’t call it Perfectly
   Legitimate, people might
   think it was nefarious.
   Grant Dobbe, BeSparq LLC! ! ! ! ! ! ! grant@dobbe.us!
   Brendan O’Connor, Malice Afterthought, Inc.! ! ! brendan@maliceafterthought.com!
   ThotCon 0x5!
   April 25, 2014
   

   View Slide

2. The Situation
   The Intention
   The Software
   The Hardware
   The Demos
   The Next Steps
   

   View Slide

3. Major Threats to the Internet
   ❖ Backhoes!
   ❖ Fronthoes!
   ❖ Oppressive regimes!
   ❖ Turkey!
   ❖ Syria!
   ❖ Egypt!
   ❖ Gay rights in Uganda!
   ❖ Political dissidents in
   the US!
   ❖ David Cameron
   

   View Slide

4. If the NSA is your
   adversary….
   "Harold?" "Yep." "We're
   fucked." "Yep."
   

   View Slide

5. Post-Apocalypse
   

   View Slide

6. Hostile Terrain
   

   View Slide

7. Traditional Proposed Solution 1:
   “The Internet interprets censorship
   as damage, and routes around it.”
   

   View Slide

8. Traditional Proposed
   Solution 2: Mesh All The
   Things!
   

   View Slide

9. View Slide

10. The Situation
    The Intention
    The Software
    The Hardware
    The Demos
    The Next Steps
    

    View Slide

11. Five Goals of PLP
    $
    

    View Slide

12. Goal 1: No Reliance
    on Internet
    

    View Slide

13. Goal 2: No Long-
    Range Wireless
    

    View Slide

14. Goal 3: Cheap and
    Flexible
    $
    

    View Slide

15. Goal 4:
    Cryptographically Sound
    

    View Slide

16. Goal 5: User-
    Friendly
    

    View Slide

17. Existing: Commotion/
    Byzantium
    $
    

    View Slide

18. Existing: CrytoCat/
    TextSecure
    

    View Slide

19. Existing: Southern
    Appalachian Space Agency
    

    View Slide

20. Existing: Major DTN
    Implementations
    $
    

    View Slide

21. Existing: Tor
    Browser Bundle
    

    View Slide

22. Existing: OLPC
    Mesh $
    

    View Slide

23. Existing: Ham Radio $
    

    View Slide

24. Existing: Winlink
    2000
    

    View Slide

25. Exsting: Anonymous
    (Lulz) AirChat
    https://github.com/lulzlabs/
    AirChat/
    Warning!
    

    View Slide

26. The Situation
    The Intention
    The Software
    The Hardware
    The Demos
    The Next Steps
    

    View Slide

27. Problems in Information Transfer
    ❖ Replication (Everyone has the data)!
    ❖ (De)duplication (Everyone has one copy of the data)!
    ❖ Linearity (Everyone has the data in the same order)!
    ❖ Integrity (Everyone has the right data)
    

    View Slide

28. Git Bundle
    $
    

    View Slide

29. Basic Workflow
    ❖ write all the code, hack all the things!
    ❖ $ git bundle create bundlename desiredbranch!
    ❖ copy bundle file to $SOMETHING (USB stick, burned CD, send as
    email attachment, whatever)!
    ❖ copy bundle to target machine, !
    ❖ $ git clone bundlename reponame OR!
    ❖ $ git remote create -f bundlename remote-name OR!
    ❖ $ git remote update remote-name!
    ❖ do a git pull like you normally would
    $
    

    View Slide

30. Node Organization
    

    View Slide

31. Cell Organization
    

    View Slide

32. Let’s Talk About
    Encryption.
    

    View Slide

33. “I want them to remain
    secret for as long as men
    are capable of evil.”
    Cryptonomicon, by Neal
    Stephenson
    

    View Slide

34. Daniel J. Bernstein’s
    NaCl (Salt) Library
    

    View Slide

35. Libsodium
    

    View Slide

36. Also a bit of TLS… But we’re huge jerks about it,
    so winning. Qualys says we
    get an A.
    

    View Slide

37. The SQUIRREL
    Message Format
    No endorsement by
    attrition.org.
    

    View Slide

38. SQUIRREL
    Cryptography
    

    View Slide

39. Disruption-Tolerant
    Networking
    Because everything is cooler
    IN SPACE!
    

    View Slide

40. LibNATASHA:
    Message Trafficker
    Network Able to Transmit Amid Severly
    Hostile Activity
    

    View Slide

41. Gollum These tears we cry!
    are falling rain
    

    View Slide

42. The Situation
    The Intention
    The Software
    The Hardware
    The Demos
    The Next Steps
    

    View Slide

43. XBee: A Love Song $
    

    View Slide

44. Ham Radio It’ll get out OK.
    $
    

    View Slide

45. WiFi
    

    View Slide

46. USB
    $
    

    View Slide

47. F-BOMB Falling/Ballistically-launched
    Object that Makes Backdoors
    $
    

    View Slide

48. BORIS
    It’s got more antennas.!
    Than what?!
    …it just has more antennas.
    $
    

    View Slide

49. BINDER
    Book of Increasingly
    Numinous Dread, also
    ElectRonics.!
    !
    It’s not full of women.
    $
    

    View Slide

50. View Slide

51. View Slide

52. View Slide

53. $
    

    View Slide

54. The Situation
    The Intention
    The Software
    The Hardware
    The Demos
    The Next Steps
    

    View Slide

55. View Slide

56. View Slide

57. The Next Steps
    ❖ Route All The Things!
    ❖ Transfer Receipts / Chain of Custody!
    ❖ HTML5 Storage
    $
    

    View Slide

58. Questions?
    http://github.com/grantdobbe/
    libnatasha!
    !
    grant@dobbe.us!
    brendan@maliceafterthought.com
    

    View Slide

59. "10A_0026ps" by Hardleers -- https://www.flickr.com/photos/hardleers/4248072679!
    "Total OPSEC." by Greg Palmer -- https://www.flickr.com/photos/gregpalmer/8559713721!
    "SASA" by Travis Goodspeed -- https://www.flickr.com/photos/travisgoodspeed/8591171748/"Whoops, sorry physics." by oh2fnx --
    http://www.reddit.com/r/softwaregore/comments/1zsmtc/whoops_sorry_physics/!
    "Pink Backhoe" by NCDOTcommunications -- https://www.flickr.com/photos/ncdot/5961007102!
    "New Photos of the NSA and Other Top Intelligence Agencies Revealed for First Time" by The Intercept / Trevor Paglen -- https://
    firstlook.org/theintercept/article/2014/02/10/new-photos-of-nsa-and-others/!
    "Turkey finally lifts Twitter ban, but YouTube is still blocked" by Chris Velazco / Engadget -- http://www.engadget.com/2014/04/03/
    turkey-finally-lifts-twitter-ban/!
    "Hacker Images" by Katy Levinson et al -- http://blog.katylevinson.com/hacker-images/!
    "Bird Photography Outtakes" by Ingrid Taylar -- https://www.flickr.com/photos/taylar/7040115831!
    ""Harold?" "Yep." "We're fucked." "Yep."" by farte_butte -- http://www.reddit.com/r/funny/comments/149lfi/
    harold_yep_were_fucked_yep/!
    "Pigs in Space" -- http://muppet.wikia.com/wiki/Pigs_in_Space!
    "Broken Plug" by Beatrice Murch -- https://www.flickr.com/photos/blmurch/3260913031!
    "Quad Yagi" by Directive Systems -- http://www.directivesystems.com!
    "Netflix Is the Real Winner if the Supreme Court Sides With Aereo" by Issie Lapowsky / Wired -- http://www.wired.com/2014/04/aereo-
    supreme-court/!
    "True Bugs Wait" by Natalie Silvanovich -- http://natashenka.ca/posters/!
    "Dan Bernstein 27C3.jpg" by Alexander Klink -- http://en.wikipedia.org/wiki/File:Dan_Bernstein_27C3.jpg!
    "Salt Mine, Nemocon, Colombia" by Pedro Szekely -- https://www.flickr.com/photos/pedrosz/5743986824!
    "Lazlo the Squirrel" by Jericho -- http://attrition.org!
    "Enigmas" by Robert Malmgren -- http://en.wikipedia.org/wiki/File:Enigmas.jpg!
    "Oar end bundle" by Andrew King -- https://www.flickr.com/photos/watt_dabney/2562330928!
    "Natasha (regal pose)" by Jim H. -- https://www.flickr.com/photos/greyloch/9398511258!
    Xbee Images by Digi -- http://www.digi.com/xbee!
    "Ham radio station" by Richard Topalovich -- https://www.flickr.com/photos/richiepooh/251504898!
    "USB Superposition" by EskimoNoise -- http://www.reddit.com/r/pcmasterrace/comments/226duc/usb_superposition/!
    "Moose showing tongue" by kuhnmi -- https://www.flickr.com/photos/31176607@N05/11934293913!
    Picture of Gollum from the Lord of the Rings movies.!
    "Prayers are always heard, maybe a bit delayed, but are always heard." by Sundaram Ramaswamy -- https://www.flickr.com/photos/
    legends2k/4503611728!
    "Bokeh Grinders" by Nick Harris -- https://www.flickr.com/photos/nickharris1/6002178212!
    "Bicycle detour sign" by Richard Drdul -- https://www.flickr.com/photos/drdul/6950357953!
    "OLPC, Wikimania Taipei" by ᘮဌ -- https://www.flickr.com/photos/mayatsai/1007285822!
    "If your Enemy Has ADF and a Missile...." by MemeGenerator.net -- http://memegenerator.net/instance/48883544!
    "IMGP5365.JPG" by Jeffrey Schwartz -- https://www.flickr.com/photos/jeffschwartz/79700013!
    NASA and Lego Mindstorms by Mr. Lane the Science Guy -- http://www.mrlanethescienceguy.com/FLL_Blog/Entries/
    2012/11/18_NASA_and_Lego_Mindstorms.html!
    "I bought a new hoe" by Ishikawa Ken -- https://www.flickr.com/photos/chidorian/2343146500!
    "Grise Fiord's 'hwy 111'" by Mike Beauregard -- https://www.flickr.com/photos/31856336@N03/6887730732
    

    View Slide