Data Broken Part 2: The Current Solutions

Detection and Sousveillance

How can we watch the watchers?

• Intercepting and examining traffic with mitmproxy - an interactive HTTPS proxy

Fighting Back

• Stop giving your data to the brokers, use open source
• Distributed systems, local first, and offline first
• Ad Blockers
• Data chaffing
• Legal Remedies
  • Demand that government offices do not collect, share or sell your data with brokers. Ideally make it a felony.
  • GDRR/CCPA
  • Expand HIPPA to medical data in general
• Stop using non-cryptographic identities for authentication

Organizations and Talks

Conferences

• CCC | Startseite
• DEF CON® Hacking Conference Home
• CactusCon

Organizations

• OONI: Open Observatory of Network Interference | OONI
• Wehe: Check Your ISP for Net Neutrality Violations
• Who Targets Me
• Exodus Privacy
• The Markup: Blacklight
• The Markup: Privacy

Lookup Tools and Sites

• WiGLE: Wireless Network Mapping
• rfparty: a new way to see wireless
  • rfparty-xyz: its like a tricorder, for your wireless world.
  • rfparty-mobile
• MAC Address Vendor Lookup
• Oui Lookup

Talks

• Defcon 31 snoop unto them, as they snoop unto us | blog.dataparty
• DEF CON 31 - Snoop On To Them, As They Snoop On To Us - Alan Meekins - YouTube
• RegretsReporter

Tools

Security Hardening Guides

• macOS-Security-and-Privacy-Guide: Guide to securing and improving privacy on macOS
• awesome-security-hardening: A collection of awesome security hardening guides, tools and other resources

Ad Blockers

Research Papers

• The Future of Ad Blocking: An Analytical Framework and New Techniques
• ad-blocking: Prototypes of ad blocking techniques proposed in the “Future of Ad Blocking” paper

Web Extensions

• uBlock Origin
• NoScript Security Suite

DNS based blocking

• Pi-hole – Network-wide Ad Blocking
• I thought PiHole was kinda bad so I made my own | Spans’ Blog
• singularity: a Pi-hole Alternative

Egress firewalls

Desktop

• Little Snitch: Network Monitor and Application Firewall for macOS
• Objective-See: LuLu (source): LuLu is the free, shared-source macOS firewall that aims to block unknown
• opensnitch: OpenSnitch is a GNU/Linux interactive application firewall inspired by Little Snitch.
• Safing Portmaster (source): Free and open-source privacy suite that puts you back in charge of your computer

Android

• NetGuard (source): A simple way to block access to the internet per app
• afwall: AFWall+ (Android Firewall +) - iptables based firewall for Android (requires root)

More Open Source Little Snitch Alternatives

ASNs

CLI Tools

• asn: ASN / RPKI validity / BGP stats / IPv4v6 / Prefix / URL / ASPath / Organization / IP reputation / IP geolocation / IP fingerprinting / Network recon / lookup API server / Web traceroute server
• asn-tools
• asnmap: Go CLI and Library for quickly mapping organization network ranges using ASN information.

Online Tools

• BGPView
• bgp.tools
• RouteViews: University of Oregon RouteViews Project
• Tools to explore BGP
• dnspeep: spy on the DNS queries your computer is making
• Looking Glass

Data Chaffing

Chaffing and winnowing is a cryptographic technique to achieve confidentiality without using encryption when sending data over an insecure channel. The name is derived from agriculture: after grain has been harvested and threshed, it remains mixed together with inedible fibrous chaff. The chaff and grain are then separated by winnowing, and the chaff is discarded.

Research Papers

• Chaffing and Winnowing: Confidentiality without Encryption: The original
• Crowds: Anonymity for Web Transactions

Ad Nauseam

• AdNauseam: As online advertising becomes ever more ubiquitous and unsanctioned, AdNauseam works to complete the cycle by automating ad clicks universally and blindly on behalf of its users. Built atop uBlock Origin, AdNauseam quietly clicks on every blocked ad, registering a visit on ad networks’ databases. As the collected data gathered shows an omnivorous click-stream, user tracking, targeting and surveillance become futile.
• Engineering Privacy and Protest: a Case Study of AdNauseam