Death of Anonymous Travel
Sherri Davidoff explores death of anonymous travel at DEF CON 17, examining rfid and practical defenses.
Summary
Architecture and Background
Death of Anonymous Travel Sherri Davidoff Philosecurity Worldwide, people who use cars, buses, trains, and carry cell phones are tracked in increasingly centralized corporate and government databases. This capability is still in its infancy, and has been facilitated by payment systems which are linked to identification and refer to centralized electronic databases. Mass tracking and surveillance capabilities have arisen organically, often as side effects of new technologies, and are being increasingly leveraged by government and law enforcement in the name of national security.
Vulnerability Analysis
For security purposes, the public is generally not provided with detailed information about the management and use of mass surveillance systems. As a result, relatively small groups are able to track and control the movements of average citizens around the world, every minute of every day. These systems are opaque, not well documented, publicized or regulated.
Exploitation and Demonstrations
The purpose of this presentation is to: * Collate and disseminate information about current known travel monitoring practices; * Discuss technical and social solutions for maintaining personal privacy and the freedom to assemble; * Encourage greater transparency and public control over data collection and use. The presentation will include a Touch-and-Feel Fare Collection table, where attendees can browse the speaker's historical collection of automobile, coach, subway, telephone, and airline fares/tokens/passes. Attendees are welcome to non-destructively analyze electronic devices with magstripe/RFID readers and other tools.
Remediation and Defensive Strategies
Sherri Davidoff is a professional security consultant, researcher and writer. She conducts penetration tests, network assessments and forensics for a wide variety of industries, including financial, health care, manufacturing, academic, and government institutions. She has conducted extensive research on privacy and the effects of technology on anonymous travel and communications, and she is the co-author of SANS 558: Network Forensics. Sherri publishes weekly articles on Philosecurity.org For copies of the slides and additional materials please see the DEF CON 17 Archive here:
Related talks
Main Stage·43 min
Paul Ziegler
Paul Ziegler details paul Sebastian Ziegler: Multiplatform malware within the.
Main Stage·38 min
Trevor Stevado · Sam Haskins
Demonstrates long-distance relay attacks against ISO 14443A and HID SEOS contactless credentials, unlocking a physical door in Ottawa from a stage in Las Vegas.
Main Stage·36 min
Christopher Wade
Demonstrates NFC tag-side attacks that manipulate reader-side applications via malformed tag responses and relay injection.


