Googling: I'm Feeling (un)Lucky
Greg Conti details greg Conti: Googling: I'm Feeling (un)Lucky Abstract: Birth, School, Work, Death.
Summary
Architecture and Background
Greg Conti: Googling: I'm Feeling (un)Lucky Abstract: Birth, School, Work, Death. Imagine every web search you've ever done placed on a timeline of your life. Is there anything on that list you wouldn't want your mother (or employer) to know about?
Vulnerability Analysis
How about the aggregate web searches of your entire company? What if they fell into the hands of a competitor? Recent trends indicate that we can no longer rely on the privacy policies of individual web companies to keep this information private.
Exploitation and Demonstrations
In this talk, we'll examine the many ways we disclose information in return for free web services as well as how effective you think your privacy countermeasures are. This session won't be a monolog, but an active discussion on the problem of web-based information disclosure. As part of the talk, I'm releasing a program that will extract web searches from your Firefox browser's cache to show you what you've been disclosing.
Remediation and Defensive Strategies
Bio: Greg Conti is an Assistant Professor of Computer Science at the United States Military Academy. He holds a PhD in Computer Science from Georgia Tech and a Bachelor of Science in Computer Science from the United States Military Academy. His areas of expertise include network security, information visualization and information warfare. His work can be found at The Evolving Art of Fuzzing
Related talks
Main Stage·51 min
Chris Paget
Chris Paget details chris Paget: US-VISIT: Raping Personal Privacy Since 2004 Abstract: In 2004, the Department of Homeland Security began the deployment of US-VISIT.
Main Stage·32 min
Gadi Evron
Gadi Evron explores dns abuse infrastructure and games at DEF CON 14, examining anonymous-os and practical defenses.
Main Stage·49 min
Peter Gutmann
Peter Gutmann explores phishing tips and techniques: tackle, rigging, and how & when to phish at DEF CON 14, examining anonymous-os and practical defenses.


