Black Hat USA 2013 - OPSEC failures of spies
Black Hat3 HN recommenders · 2016–2019
54K views · talk · evergreen · Uploaded 2013-12-04
Journalist Matthew Cole's Black Hat 2013 talk on the CIA's operational security failures in the 2003 Milan kidnapping. Phone and location metadata exposed the team and led to arrest warrants.
Recommended as a non-technical, concrete case study of how metadata and phone records expose covert operations.
51:32Behind the Scenes of iOS Security
Black Hat
12:01Why Electronic Voting Is Still A Bad Idea
Tom Scott
51:22USENIX Security '18-Q: Why Do Keynote Speakers Keep Suggesting That Improving Security Is Possible?
USENIX
42:50Defcon 18 Changing threats to privacy Moxie Marlinspike Part
killab66661
59:2328c3: The Science of Insecurity
28c3
1:29:11This Is What Winning Looks Like (Full Length)
VICE
7:26This Video Is Sponsored By ███ VPN
Tom Scott
7:49America Keeps Rejecting an ID Card It Already Has
CGP Grey
5 comments from Hacker News
Longer video (25 minutes) of a talk from BlackHat 2013, about how metadata was used to expose an illegal(?) 2003 CIA operation carried out in Italy. It's by a non-tech journalist, so it's also largely non-technical and provides a very interesting overview of what metadata can expose. [VIDEO]
Both the SIM and the phone's serial number are available to the network. An analyst looking to correlate your activities can do so trivially. In fact, this is how Italian investigators were able to prove the link between a CIA cell and the American embassy. No one used the same SIM to talk to both groups, but they did use the same phone. [VIDEO]
Your phone's location can be silently triangulated based on what cellphone towers can see your phone and the strength of the signal to them. This is being done and you can buy the data from LocationSmart. This was discussed on HN a few weeks ago [0]. This data was used in Italy to catch CIA agents after they extrajudicially extradited (so to speak) a terrorist[1] in 2003 [VIDEO] . The whole talk is worth watching. The cost of storing this forever is negligible and going down. The government would be foolish or (in my opinion irrationally) principled not to hold on to this for the next 1,000 years. [0] [LINK] [1] [LINK]
Going to be hard and would be ineffective. For one, America still has several military bases in Germany alone e.g. Ramstein, which was used by the CIA in the Milan kidnapping [0][1]. [0] [LINK] [1] Black Hat talk: [VIDEO]
It also seems like phones have their own tracking ids that they report, it's not just the sim card. There was a great talk about some of this from black hat; how the CIA renditioned Abu Omar out of Italy and how they were found out: [VIDEO]