August 2023 SWCSF Meeting

• August 7, 2023
• Gateway Community College

Schedule

• 6:00 - 6:30pm: Networking and Food
• 6:30 - 6:40pm: Meeting Start and Announcements
• 6:40 - 7:00pm: Cyber Threat Updates by Erik Graham
• 7:10 - 8:00pm: Pegasus & the Phantom Menace It Left Behind by Christina Eichelkraut
• 8:10 - 8:45pm: Android Privacy Tips by Elio Grieco
• 8:45 - 9:00pm: Wrap Up and Networking

Topic 1: Pegasus & the Phantom Menace It Left Behind

The U.S. Government recently banned the use of Pegasus, surveillance software developed by the Israeli firm NSO. The decision came on the heels of the discovery that 50 U.S. Government officials were surveilled by the no-click spyware.

However, the global cybersurveillance industry continues to thrive, often being used to attack journalists, lawyers, human rights advocates and dissidents of autocratic regimes. Yet it is also used to effectively break up child trafficking rings, capture drug lords and prevent large-scale terrorist attacks.

This conversation will discuss what Pegasus is, where it came from and how it influences major geopolitical outcomes. We’ll briefly touch on what is at stake in a world where private privacy interests increasingly conflict with the modern methods used for legitimate intelligence gathering efforts. And, we’ll examine how the blurring the lines between the private and public sectors particularly lends itself to abuse. Finally, we’ll cover what is being done by the U.S. and other countries.

Further Reading

• Scientific American, “What is Pegasus? How Surveillance Spyware Invades Phones,” August 9, 2021
• Wall Street Journal, “Biden Restricts Use of Commercial Hacking Tools by U.S. Agencies,” March 27, 2023
• New York Times, “How Spy Tech Firms Let Governments See Everything on a Smartphone,” digital publication on 9/2/2016
• Columbia Journalism Review, “The Hacker,” The Authoritarianism Issue
• New York Times, “How Mexico Became the Biggest User of the World’s Most Notorious Spy Tool,” April 18, 2023
• Foreign Affairs, “The Autocrat in Your iPhone,” January/February 2023, by Ronald J. Deibert, founder of Citizen Lab
• Haaretz, “What Did the FBI Really Want NSO’s Pegasus For?” Feb. 6, 2022
• Amnesty.org, “The Pegasus Project: One year on, spyware crisis continues after failure to clamp down on surveillance industry,” July 18, 2022
• Council on Foreign Relations, cfr.org, “How Israel’s Pegasus Spyware Stoked the Surveillance Debate,” March 8, 2022
• The Pegasus Project, The Guardian, ongoing.
• New York Times, “A Front Company and a Fake Identity: How the U.S. Came to Use Spyware It Was Trying to Kill,” April 2, 2023 (updated April 10)
• ACLU Newsletter, “Five Things to Know About NSA Mass Surveillance and the Coming Fight in Congress,” April 11, 2023
• New York Times, “Who Paid for a Mysterious Spy Tool? The F.B.I., an F.B.I. Inquiry Found,” July 31, 2023

Topic 2: Android Privacy Tips

While the fight against military grade spyware is long and slow, there are some relatively simple steps that can be taken to improve your privacy and harden your Android phone against more modest threats.

Why aren’t we covering Apple? Well, Apple does not allow modification of their devices via either hardware or software. If you have an Apple device, you are limited to the hardening and security mitigations that they have provided.

We’ll cover what you can protect and the limits of said protection for:

• network traffic
• location data
• eavesdropping (visual and auditory)
• Android permissions
• permissions that are more dangerous than they seem e.g. the accelerometer
• a few side channels

As well as more permanent solutions:

• physical blocking
• privacy front-ends
• chaffing (data pools)
• open source hardware and software to prevent or slow enshittification
• legislative solutions and their limits

Location

For this meeting, we are back in Room SO1330 of the South Building at GateWay Community College, Washington Campus. Details below. Schedule

Attend Virtually

Zoom meeting starts at: 6:15 PM MST (Arizona time)

Join the Zoom Meeting via computer

Meeting ID: 944 8607 3474

Passcode: 292977

Attend in Person

Room SO1330 of the South Building at GateWay Community College, Washington Campus.

108 N 40th St, Phoenix, AZ 85034

Map link to the Exact Location

Parking Map

Map of campus and parking options at Gateway Community College with SWCSF and the ACSL highlighted.

South Building Map

Floorplan with room SO1330 highlighted for the South Building at Gateway Community College

Food

Free pizza and soft drinks will be provided by TEC. If you have other preferences, Speedy Street Tacos is within walking distance, just past the East parking lot. There are also a few other restaurants within a short drive of the college.

About

SouthWest CyberSecurity Forum, a TEC initiative, is the longest running cybersecurity meetup in Arizona that brings together cybersecurity professionals and those exploring a future career in cybersecurity. The regular monthly sessions examine both current and emerging cyber threats, explore new security technologies and allow cybersecurity professionals to share experiences with their peers.