SpycraftKeepingYourSourcesPrivate.pptVIP

* * * * * * * * Spycraft: Keeping your sources private Steve Doig Cronkite School of Journalism Arizona State University Why spycraft for reporters? Need to keep identity of confidential sources secret from subpoena. Need to keep identity of confidential whistleblowers secret from corporations. Need to travel in places where governments detain journalists. What I’ll cover Keeping internet searches private Making and receiving untraceable calls Keeping email private Encryption/decryption programs Keeping your computer clean Tricking keyloggers Private internet searching AOL debacle: 36 million search terms of 650,000 users (/) Subpoenas to your IT department or IP provider Alternative: : No IP addresses kept, search terms deleted within 48 hours A Anonymous Surfing ($30) Keeping identity private in calls #31# blocks your Caller ID on Vodafone But doesn’t work on texts! “Spoof” your Caller ID with SpoofCard () or other spoofing services -- $10/60 minutes SpoofCard does international calls Spoofcard also does voice changing! Cellphone cautions GIS-equipped cellphones track your location Cellphones also track location by cell tower triangulation Cellphones and wireless phones can be heard by scanners Cellphones can be bugged Pre-paid cell phones No-contract cell phones: Buy with cash, and replenish with cash Easy in Europe with SIM cards and topping up Voice over Internet Protocol (VoIP) Internet voice calls Beware “man in the middle” attacks Skype encrypts voice/video data stream But there may be a back door… Zfone with VoIP clients like Google Talk and Gizmo5 Keeping identity private in email Use free “throwaway” email addresses from Yahoo, etc. A: Nyms software creates throwaway email addresses that will forward to your real address Smuggling your text and pictures Use micro SD cards 2GB Cryptography Avoid simple ciphers, one-time pads, etc. Public-key cryptography is best Pretty Good Privacy: Email encryption Disk encryption Instant-message encryption Deskto