1 00:00:03,360 --> 00:00:07,820 Hi everyone, as Monkey mentioned I've been here before. I think this is my 2 00:00:07,820 --> 00:00:13,360 fifth time presenting here at DEF CON and I'm pretty excited to be back. I'm 3 00:00:13,360 --> 00:00:16,200 getting to see some friends I haven't seen in a long time. It's been about 4 00:00:16,200 --> 00:00:21,320 eight years since I've been to DEF CON but I've been coming since 1999, if you 5 00:00:21,320 --> 00:00:26,620 can figure out then how old I am, which it was a long time ago. But I continue 6 00:00:26,620 --> 00:00:29,880 coming back because I really love this crowd and I love the skill set you all 7 00:00:29,880 --> 00:00:33,940 have because I know the kind of amazing work you do and I'm going to talk to you 8 00:00:33,940 --> 00:00:39,060 about some stuff we're doing at UC Berkeley and also with a fantastic 9 00:00:39,060 --> 00:00:44,480 nonprofit. So before I start the slides, I met Austin at SchmooCon and he got up 10 00:00:44,480 --> 00:00:48,700 and gave this really great presentation. I'm not lying, it was good and it 11 00:00:48,700 --> 00:00:52,620 was enough to say, well I want to volunteer for him, for his nonprofit, what 12 00:00:52,620 --> 00:00:56,180 he's doing. So he's combating human trafficking using skill sets that you 13 00:00:56,180 --> 00:00:59,800 all have. Intel analysts, if you're a red 14 00:00:59,800 --> 00:01:03,760 team type of person, the way that you solve problems we know is extraordinary 15 00:01:04,440 --> 00:01:08,880 and we'd like to talk to you about some stuff that we do, both at UC Berkeley and 16 00:01:08,880 --> 00:01:13,860 his nonprofit. So let me get started. Yes, we're going to be talking about 17 00:01:13,860 --> 00:01:19,280 subverting authoritarian regimes and getting to some of the organizers of 18 00:01:19,280 --> 00:01:24,180 human trafficking and some of the organizers of, I'll show you, we have 19 00:01:24,180 --> 00:01:28,900 some interesting clients we've had at UC Berkeley's Citizen Clinic. Now a lot of 20 00:01:28,900 --> 00:01:29,780 you might have heard about Citizen Clinic. It's an organization that's been 21 00:01:29,800 --> 00:01:34,020 involved in citizen lab up in Toronto. We are different at UC Berkeley. What we do 22 00:01:34,020 --> 00:01:36,840 is we take, I'll go through the slides and I'll show you a little bit more about 23 00:01:36,840 --> 00:01:40,980 it, but we take nonprofits that are high risk and I'll explain to you what 24 00:01:40,980 --> 00:01:44,860 that means. And when I took over the class about three years ago, I kind of 25 00:01:44,860 --> 00:01:49,560 upped the high high risk that we take. I'm not sure Berkeley's always happy 26 00:01:49,560 --> 00:01:54,960 about that in a sense, but we have done some work for very brave nonprofits to 27 00:01:54,960 --> 00:01:58,180 help the directors and the volunteers continue to do the work that they do. 28 00:01:58,860 --> 00:01:59,780 Because for most of the time, we've had a lot of non-profit organizations that are 29 00:01:59,780 --> 00:02:00,520 doing what they're doing. It's been great. The fact that most of our nonprofits, 30 00:02:00,780 --> 00:02:05,300 security is not their thing. It is ours. So we step in and kind of take that burden 31 00:02:05,300 --> 00:02:08,540 off of them so they can get back to doing stuff that matters and make big 32 00:02:08,540 --> 00:02:13,640 changes. So this is me. Last time I was up here on the stage, I was talking about 33 00:02:13,640 --> 00:02:18,500 hacking industrial control systems. In fact, Dora the SCADA Explorer is here in 34 00:02:18,500 --> 00:02:24,840 the audience today. And so we did some SCADA hacking. But I do mostly 35 00:02:24,840 --> 00:02:29,540 car hacking work. In fact, my day job, I work for Berkeley as a part-time 36 00:02:29,780 --> 00:02:34,340 contractor. I do contract work, sometimes for automobile manufacturers, sometimes for the U.S. 37 00:02:34,340 --> 00:02:41,760 government. I do car hacking. And I started doing a lot of that here at DEF CON. And so, Austin, 38 00:02:41,960 --> 00:02:45,680 do you want to come up and talk about your background? No? Okay. Well, this is Austin. 39 00:02:46,520 --> 00:02:51,700 Awesome Austin. There we go. We can call him that for the weekend. But he started this nonprofit 40 00:02:52,070 --> 00:02:57,880 and I cared so much about what I heard. I'm like, I can volunteer for this too. I have time to do 41 00:02:57,880 --> 00:03:03,200 this. And I was glad to. So, what is civil cyber defense? It's the first bit of the title in our 42 00:03:03,200 --> 00:03:09,300 very long title that we have here at DEF CON. And this is what it is. And this term was actually 43 00:03:09,300 --> 00:03:16,120 coined by Craig Newmark. Craig Newmark, he started Craigslist. And Craig has been giving 44 00:03:17,300 --> 00:03:22,620 donations to organizations, nonprofits, such as the Center for Long-Term Cybersecurity at Berkeley. 45 00:03:22,940 --> 00:03:27,780 They fund my class and he funds them. There are other places 46 00:03:27,880 --> 00:03:34,400 around the country. I'm going to reference another one that he funds, which is in New York. It's 47 00:03:34,400 --> 00:03:38,040 Columbia School of Journalism, White Institute. And I'll tell you about a case that they have 48 00:03:38,040 --> 00:03:41,820 going on that's tangentially related to something I'm going to tell you about that we saw too. 49 00:03:42,360 --> 00:03:46,520 So, as I mentioned, Citizen Clinic is different than Citizen Lab. We don't do forensics. But when 50 00:03:46,520 --> 00:03:49,420 we do find stuff that's interesting, and I'll show you something in here that is, 51 00:03:50,000 --> 00:03:56,020 we give them a call. But we are looking for people to volunteer, and I'll get to that too, 52 00:03:56,100 --> 00:03:57,740 that have that type of 53 00:03:58,180 --> 00:04:02,120 background. So, what we do is we do defense for these organizations. 54 00:04:03,860 --> 00:04:07,860 So, this is how it goes. So, if you were a student at UC Berkeley, and some of you are in here, 55 00:04:07,960 --> 00:04:14,100 and I know you are, that have taken my class, I teach two there. One is Chris Hufnagel's class, 56 00:04:14,240 --> 00:04:17,960 and he is here today as well. And that's an introduction to cybersecurity. And this is in 57 00:04:17,960 --> 00:04:22,300 the MICS program at UC Berkeley. And it's a graduate program for cybersecurity, and it's 58 00:04:22,300 --> 00:04:26,700 all remote. So, I'm from the DC area, and I've only been to Berkeley's campus once in three years. 59 00:04:27,880 --> 00:04:32,000 So, this is a really good program for cybersecurity, and it's a lot of fun. And the other class I teach 60 00:04:32,000 --> 00:04:37,360 is the one I'm talking about here too. I take two clients per semester for Citizen Clinic, and I 61 00:04:37,360 --> 00:04:43,140 only like to take 14 students into my class. And I do not just pick cybersecurity background 62 00:04:43,140 --> 00:04:48,940 students from the MICS program, which is the master's program for cybersecurity. We have, 63 00:04:48,960 --> 00:04:57,860 we've had journalists. We've had statisticians. We've had people from the Information Sciences school, because sometimes we have a lot of data to go through, and that's nice. 64 00:04:57,880 --> 00:04:58,840 and they're really good at doing that, 65 00:04:58,960 --> 00:05:00,860 maybe even more so than some of us in cybersecurity. 66 00:05:02,000 --> 00:05:05,080 So I take students from all across the university 67 00:05:05,080 --> 00:05:06,840 and not just graduate students. 68 00:05:07,100 --> 00:05:09,080 I have about one or two undergraduate students 69 00:05:09,080 --> 00:05:11,280 I let into my class every semester too. 70 00:05:11,780 --> 00:05:13,520 So what I do is I break the class in half, 71 00:05:13,720 --> 00:05:15,520 seven on one team, seven on the other. 72 00:05:15,660 --> 00:05:17,920 Some students of mine, maybe they have a security clearance 73 00:05:17,920 --> 00:05:21,180 and my high, high risk client is a little bit too much. 74 00:05:21,380 --> 00:05:22,680 It would be a lot of work for them 75 00:05:22,680 --> 00:05:25,600 to do reporting and stuff, so they choose the lower risk. 76 00:05:25,600 --> 00:05:29,380 But still, a client that has had a need, 77 00:05:29,460 --> 00:05:32,120 they have faced threats, and that is a client 78 00:05:32,120 --> 00:05:35,220 usually is domestic, so it's someone in California perhaps, 79 00:05:35,540 --> 00:05:38,660 has a non-profit, and it's for many different topics. 80 00:05:38,940 --> 00:05:41,400 And we choose one domestic and international. 81 00:05:42,040 --> 00:05:43,960 And so the first six weeks of the class, 82 00:05:44,200 --> 00:05:46,500 because I have students who don't do cybersecurity, 83 00:05:46,880 --> 00:05:49,220 they don't know what Tor is, things like that. 84 00:05:49,360 --> 00:05:52,200 We love Google, and I'm gonna tell you why I love Google 85 00:05:52,200 --> 00:05:55,220 in a few slides next, but we got them off 86 00:05:55,220 --> 00:05:57,020 of Google for doing searches for clients, 87 00:05:57,180 --> 00:05:58,840 because we teach them how to hide online. 88 00:05:59,140 --> 00:06:01,700 It's very important for the protection of our clients, 89 00:06:01,780 --> 00:06:03,020 and also for their safety. 90 00:06:03,360 --> 00:06:07,400 So I teach the first six weeks, and I put them 91 00:06:07,400 --> 00:06:10,820 into sort of a crash course, is here's how you hide online, 92 00:06:11,060 --> 00:06:14,660 and you cannot, please do not, I usually say do not 93 00:06:15,200 --> 00:06:18,480 make one mistake one time, your alias is gonna be blown 94 00:06:18,480 --> 00:06:21,320 if you just hop onto Google and start doing some research. 95 00:06:21,660 --> 00:06:24,740 So with all of our clients, it's not quite this high risk, 96 00:06:24,740 --> 00:06:26,360 but I want these students to know what it's like, 97 00:06:26,420 --> 00:06:29,060 in case they ever do take some jobs where you do have to work 98 00:06:29,060 --> 00:06:30,220 in the dark web using aliases. 99 00:06:30,600 --> 00:06:32,960 None of the clients know the names of my students, 100 00:06:33,100 --> 00:06:34,620 and they don't know what they look like either. 101 00:06:35,000 --> 00:06:37,360 And we don't use Zoom, so we do for our classes, 102 00:06:37,400 --> 00:06:38,700 but not for meeting with the clients. 103 00:06:39,020 --> 00:06:40,740 The reason for that is we're assuming that most 104 00:06:40,740 --> 00:06:42,200 of our clients have already been compromised. 105 00:06:42,760 --> 00:06:44,940 So we're making sure the students protect themselves, 106 00:06:45,420 --> 00:06:47,380 because you see, some of the clients we take are, 107 00:06:48,080 --> 00:06:49,460 they're taking on organized crime, 108 00:06:49,600 --> 00:06:52,740 and they're taking on governments that are adversarial 109 00:06:53,160 --> 00:06:54,220 to democratic interests. 110 00:06:54,220 --> 00:06:56,820 So first six weeks they do that, 111 00:06:56,840 --> 00:06:58,800 the second six weeks, I run it like a company. 112 00:06:58,980 --> 00:07:02,980 So I'm the CEO, I will manage every bit of the project 113 00:07:02,980 --> 00:07:04,600 they do, I'm not gonna micromanage, 114 00:07:04,720 --> 00:07:07,320 but I do watch to see if they're making recommendations, 115 00:07:07,520 --> 00:07:09,640 because ultimately, when that final report goes out, 116 00:07:10,180 --> 00:07:11,560 it's a representation of me, 117 00:07:11,640 --> 00:07:13,320 my professional license is in Berkeley. 118 00:07:13,640 --> 00:07:16,060 So the second six weeks, they meet with the client, 119 00:07:16,220 --> 00:07:17,760 and it's like running a company, 120 00:07:17,880 --> 00:07:19,620 and we put out a work product at the end. 121 00:07:20,740 --> 00:07:23,320 So as I mentioned, we use high security procedures. 122 00:07:24,220 --> 00:07:26,660 I've done this kind of work in the past with research, 123 00:07:26,840 --> 00:07:30,120 I've worked for a lot of companies where I got to teach 124 00:07:30,120 --> 00:07:31,040 students how to use a VPN. 125 00:07:31,560 --> 00:07:35,200 And I'll show you the tools that we use in another slide, 126 00:07:35,680 --> 00:07:37,460 but that's one of the basic things, 127 00:07:37,540 --> 00:07:38,540 is teaching them how to do that. 128 00:07:39,280 --> 00:07:41,720 And as many, most of the tools we use, 129 00:07:41,800 --> 00:07:44,640 because we do have a modest budget as well, 130 00:07:45,140 --> 00:07:46,640 we're a 501c3 as well, 131 00:07:46,660 --> 00:07:48,220 at the Center for Long-Term Cybersecurity, 132 00:07:48,320 --> 00:07:50,440 so sometimes the super expensive awesome tools 133 00:07:50,440 --> 00:07:53,640 you all use for the companies, and develop for the companies 134 00:07:53,640 --> 00:07:54,200 you work for. 135 00:07:54,640 --> 00:07:55,540 We can't quite afford. 136 00:07:55,780 --> 00:07:57,500 So we do the best with what we have. 137 00:07:57,660 --> 00:08:00,220 So I gave this presentation a couple of days ago, 138 00:08:00,260 --> 00:08:00,940 and someone came up and said, 139 00:08:01,000 --> 00:08:01,900 why are you using that VPN? 140 00:08:02,180 --> 00:08:04,520 And I'm like, it's what we can afford right now, 141 00:08:04,640 --> 00:08:06,380 and it's the best we can do with what we have. 142 00:08:06,440 --> 00:08:08,060 And this is the kind of mindset the students, 143 00:08:08,240 --> 00:08:09,540 some of them come from big companies, 144 00:08:09,660 --> 00:08:12,720 some of them are at C levels for big cybersecurity companies 145 00:08:12,720 --> 00:08:14,080 coming to get their master's degrees. 146 00:08:14,720 --> 00:08:16,240 They feel a little uncomfortable at first, 147 00:08:16,300 --> 00:08:17,960 but if you're gonna do work for a non-profit, 148 00:08:18,080 --> 00:08:20,600 one of the things that's respectful for us to do is say, 149 00:08:20,680 --> 00:08:21,340 hey, what's your budget? 150 00:08:21,440 --> 00:08:22,420 And we need to work within that, 151 00:08:22,480 --> 00:08:24,200 and we do at Citizen Clinic at work. 152 00:08:24,220 --> 00:08:25,420 So we have a budget too. 153 00:08:26,340 --> 00:08:27,980 So I have strict NDAs. 154 00:08:27,980 --> 00:08:29,080 If my students break any of them, 155 00:08:29,160 --> 00:08:30,300 I just kick them out of the class. 156 00:08:31,200 --> 00:08:32,740 My students who are here from Berkeley today 157 00:08:32,740 --> 00:08:34,280 can attest to this, that the first class, 158 00:08:34,380 --> 00:08:35,940 I kind of scared them a little bit with the NDA 159 00:08:36,500 --> 00:08:37,560 because I wrote it. 160 00:08:38,520 --> 00:08:40,520 And it's pretty important to make sure 161 00:08:40,520 --> 00:08:41,880 that we protect, again, the client. 162 00:08:42,100 --> 00:08:44,140 Not all clients are like Austin's non-profit. 163 00:08:44,440 --> 00:08:47,360 Many don't want ever to be known that Berkeley helped them. 164 00:08:47,820 --> 00:08:49,460 Again, it's another vulnerability to know 165 00:08:49,460 --> 00:08:52,120 where the researchers or the cyber defense came from. 166 00:08:52,220 --> 00:08:54,040 So some clients don't want, 167 00:08:54,040 --> 00:08:55,560 to be associated with Berkeley. 168 00:08:55,840 --> 00:08:58,060 So students can't ever talk about that. 169 00:08:58,160 --> 00:09:00,560 They can say, we had a non-profit we worked with 170 00:09:00,560 --> 00:09:01,920 in El Salvador. 171 00:09:02,400 --> 00:09:03,800 Great, let's keep it broad. 172 00:09:03,980 --> 00:09:05,900 So we don't want them being identified 173 00:09:05,900 --> 00:09:06,700 if they don't want to. 174 00:09:06,880 --> 00:09:07,680 And here's why. 175 00:09:08,820 --> 00:09:10,740 So I get a call in the middle of the night, 176 00:09:10,840 --> 00:09:12,780 and someone went from my class, 177 00:09:12,940 --> 00:09:15,080 I give out my phone number for emergency purposes, 178 00:09:15,280 --> 00:09:17,920 and they're like, hey, our client just said 179 00:09:17,920 --> 00:09:19,700 they have Pegasus on their phones. 180 00:09:20,220 --> 00:09:21,820 And I'm like, no way. 181 00:09:21,980 --> 00:09:23,840 For a non-profit this size, 182 00:09:24,040 --> 00:09:25,080 they don't have a big budget. 183 00:09:25,660 --> 00:09:26,640 That can't be right. 184 00:09:26,840 --> 00:09:27,800 Who'd you hear it from? 185 00:09:27,880 --> 00:09:28,580 The non-profit. 186 00:09:28,680 --> 00:09:30,320 And they said, who'd the non-profit hear it from? 187 00:09:30,400 --> 00:09:30,980 Well, from Apple. 188 00:09:31,440 --> 00:09:33,520 I'm like, okay, let's take a look at those emails. 189 00:09:33,680 --> 00:09:34,580 And in fact, it was legit. 190 00:09:35,260 --> 00:09:36,480 This was surprising to see, 191 00:09:36,560 --> 00:09:38,120 because for those of you who don't know what Pegasus is, 192 00:09:38,280 --> 00:09:40,260 it's a very expensive surveillance tool. 193 00:09:40,620 --> 00:09:43,560 And it's supposed to only operate on phones 194 00:09:43,560 --> 00:09:47,160 and that are not with a plus one, like US country code. 195 00:09:47,720 --> 00:09:48,820 I won't comment on that, 196 00:09:48,900 --> 00:09:51,800 but it's interesting to see this on our non-profits, 197 00:09:51,800 --> 00:09:55,460 the director's phones, and it was kind of concerning. 198 00:09:55,920 --> 00:09:58,340 So we did what we could to preserve the evidence 199 00:09:58,340 --> 00:10:00,520 in case there was a very future case coming up. 200 00:10:00,580 --> 00:10:02,640 So my students got to learn about that chain of custody. 201 00:10:03,400 --> 00:10:05,260 So it was an interesting experience, 202 00:10:05,360 --> 00:10:07,220 but it was kind of eye-opening to the students. 203 00:10:07,300 --> 00:10:10,700 Like, if we'd blown our alias, if our image had been shown, 204 00:10:11,200 --> 00:10:13,060 yeah, you guys would all be in Pegasus. 205 00:10:13,400 --> 00:10:14,660 And I know I was. 206 00:10:14,720 --> 00:10:16,360 I'm up here talking about work I do. 207 00:10:16,480 --> 00:10:18,860 It's just part of the job, but not for my students. 208 00:10:18,960 --> 00:10:20,360 So they were protected. 209 00:10:20,360 --> 00:10:25,340 But there is a similar lawsuit that we did not, 210 00:10:25,420 --> 00:10:28,260 Berkeley did not join this lawsuit, 211 00:10:28,380 --> 00:10:30,220 but it is against NSO Group. 212 00:10:30,480 --> 00:10:31,580 There are a couple going on. 213 00:10:31,660 --> 00:10:33,220 I believe Apple has one against NSO, 214 00:10:33,750 --> 00:10:38,540 and also Columbia University's Knights Institute, 215 00:10:38,860 --> 00:10:41,000 also funded by Craig Maynard, by the way, 216 00:10:41,060 --> 00:10:42,560 put some grant money there. 217 00:10:42,680 --> 00:10:44,560 They are pursuing this against NSO. 218 00:10:45,460 --> 00:10:47,980 They're a journalist from El Faro. 219 00:10:48,080 --> 00:10:50,260 Around the same time that our client 220 00:10:50,360 --> 00:10:55,200 in El Salvador got this infection, so did the journalists. 221 00:10:55,480 --> 00:10:58,460 And what our client did is they were helping people 222 00:10:58,460 --> 00:11:01,160 escape organized crime in El Salvador. 223 00:11:01,420 --> 00:11:03,700 So they were helping them migrate out of the country 224 00:11:03,700 --> 00:11:05,480 or hide in the country in safe houses. 225 00:11:05,900 --> 00:11:08,660 So you can see how it was pretty serious 226 00:11:08,660 --> 00:11:09,740 when we heard about this, 227 00:11:09,860 --> 00:11:11,920 because the kind of work we do at Citizen Clinic, 228 00:11:12,180 --> 00:11:13,780 people's lives are on the line. 229 00:11:14,000 --> 00:11:15,920 And let me show you, there's another example I have 230 00:11:15,920 --> 00:11:17,820 for some of the clients we've had 231 00:11:17,820 --> 00:11:20,040 without naming who they are, but again, I take, 232 00:11:20,040 --> 00:11:21,100 I take students from all of these. 233 00:11:21,160 --> 00:11:22,660 I haven't yet had one from Law and Berkeley, 234 00:11:22,760 --> 00:11:25,200 but I'm hoping, and I would love any attorneys 235 00:11:25,200 --> 00:11:27,740 in the audience to come help me with some of that work 236 00:11:27,740 --> 00:11:28,620 if you're able to volunteer. 237 00:11:28,900 --> 00:11:31,060 I'll talk to more about the volunteering in a minute. 238 00:11:31,780 --> 00:11:35,740 But okay, so I also am intending this video, perhaps, 239 00:11:35,800 --> 00:11:37,120 will be watched by some people 240 00:11:37,120 --> 00:11:38,640 that are gonna start clinics in the future. 241 00:11:39,060 --> 00:11:41,780 And some universities, you do it all. 242 00:11:41,900 --> 00:11:44,060 Okay, so if you are the instructor for this, 243 00:11:44,120 --> 00:11:46,760 you are starting up a company with contracts, insurance, 244 00:11:47,120 --> 00:11:49,920 all that stuff that isn't as fun, but is super important. 245 00:11:49,920 --> 00:11:52,700 You also need to know stuff about PCI DSS. 246 00:11:52,800 --> 00:11:53,960 These are things that we've come across. 247 00:11:54,160 --> 00:11:55,240 I won't read through all this, 248 00:11:55,340 --> 00:11:58,260 but you need to also keep an eye on all of this, 249 00:11:58,380 --> 00:11:59,620 like you're managing the company, 250 00:11:59,820 --> 00:12:01,940 you're helping clients from the past 251 00:12:01,940 --> 00:12:04,780 that you've, that have worked with the Citizen Clinic. 252 00:12:05,060 --> 00:12:07,880 I do that, I keep contact with clients in the past, 253 00:12:07,980 --> 00:12:08,680 like how are you doing? 254 00:12:08,820 --> 00:12:10,760 Have you had any, any incidences? 255 00:12:11,740 --> 00:12:13,080 Managing the clients that are current, 256 00:12:13,200 --> 00:12:15,120 and then looking to get new clients for the future. 257 00:12:15,440 --> 00:12:16,640 Part of what I'm up here doing, too, 258 00:12:16,720 --> 00:12:18,880 is if they're nonprofits that are high risk 259 00:12:18,880 --> 00:12:19,680 and would like some help, 260 00:12:19,760 --> 00:12:23,020 contact us at Citizen Clinic at UC Berkeley. 261 00:12:23,340 --> 00:12:25,560 So you're managing all the students. 262 00:12:25,960 --> 00:12:27,260 Sometimes they don't all get along, 263 00:12:27,480 --> 00:12:29,120 so you're trying to do an HR stuff as well, 264 00:12:29,220 --> 00:12:31,060 but language translation is a big thing. 265 00:12:31,160 --> 00:12:32,420 When we put out a final work product, 266 00:12:32,500 --> 00:12:33,280 if it's all in English, 267 00:12:33,460 --> 00:12:35,320 that's not gonna be so useful for clients 268 00:12:35,820 --> 00:12:39,320 that need it, for example, in Cambodian, in the camera. 269 00:12:39,700 --> 00:12:42,120 So these are some of the things that you gotta manage. 270 00:12:42,240 --> 00:12:45,080 So you run a company with 100% turnover every four months. 271 00:12:45,340 --> 00:12:47,880 So it's a lot of fun, it's a lot of work. 272 00:12:47,880 --> 00:12:50,640 It is not at all like teaching another university class, 273 00:12:50,800 --> 00:12:52,060 but it is so rewarding. 274 00:12:52,420 --> 00:12:54,080 That's why I'm up here talking about it, 275 00:12:54,100 --> 00:12:56,580 that, I mean, I've taught in the university setting 276 00:12:56,580 --> 00:12:59,120 for 19 years, and I've never had a class this exciting, 277 00:12:59,200 --> 00:13:01,680 this dynamic, and it takes us many hours. 278 00:13:02,020 --> 00:13:03,660 There's some weeks where I spend 20 hours 279 00:13:03,660 --> 00:13:05,640 on Citizen Clinic work, but I love it. 280 00:13:05,820 --> 00:13:07,900 So here's some of the tools we use, 281 00:13:08,080 --> 00:13:09,760 and I know you're not gonna see this 282 00:13:09,760 --> 00:13:10,880 in the back in particular. 283 00:13:11,120 --> 00:13:12,500 I try to get as much in here. 284 00:13:12,580 --> 00:13:14,160 I was asking my students, like, am I forgetting anything? 285 00:13:14,720 --> 00:13:16,740 This is just the start of a list 286 00:13:16,740 --> 00:13:18,760 that we don't really, didn't really have a list, 287 00:13:18,820 --> 00:13:19,520 and we put it all together. 288 00:13:19,960 --> 00:13:22,520 But we do all kinds of research online, too, 289 00:13:22,580 --> 00:13:23,220 as you can imagine. 290 00:13:24,660 --> 00:13:26,940 We also make sure that if the students are communicating, 291 00:13:27,000 --> 00:13:27,940 we use stuff like Signal. 292 00:13:28,160 --> 00:13:29,780 Like, you know, we're not a big fan of WhatsApp, 293 00:13:30,020 --> 00:13:32,200 but, you know, we tell our clients that, too. 294 00:13:32,260 --> 00:13:32,860 Please use Signal. 295 00:13:33,020 --> 00:13:34,400 So these are some of the recommendations. 296 00:13:34,740 --> 00:13:36,360 And if you're thinking the recommendations we give 297 00:13:36,360 --> 00:13:38,620 for our clients are super technical, they're not. 298 00:13:38,820 --> 00:13:40,980 This is stuff that, the term is kind of, 299 00:13:41,060 --> 00:13:43,240 I don't really love this term, but it's cyber hygiene. 300 00:13:43,740 --> 00:13:44,700 It's basic stuff. 301 00:13:45,000 --> 00:13:46,120 Use it password safe. 302 00:13:46,740 --> 00:13:48,480 This is some of the consulting we have to do. 303 00:13:48,580 --> 00:13:49,900 Others gets a lot more technical, 304 00:13:50,080 --> 00:13:52,080 such as actually taking a look at, for example, 305 00:13:52,180 --> 00:13:53,660 what's on people's phones, you know, 306 00:13:53,660 --> 00:13:54,600 if their phones have been compromised. 307 00:13:55,380 --> 00:13:57,780 But generally, a lot of the work we do is very general. 308 00:13:57,980 --> 00:13:59,800 And teaching the students this stuff, too, 309 00:13:59,820 --> 00:14:01,340 in particular ones that are not in cybersecurity, 310 00:14:01,520 --> 00:14:02,420 is very important. 311 00:14:03,360 --> 00:14:05,140 Here's just some of the clients that we've had, 312 00:14:05,220 --> 00:14:06,280 and I'm gonna go through this really quickly. 313 00:14:07,060 --> 00:14:09,480 Some of the interesting ones that were really important 314 00:14:09,480 --> 00:14:11,500 to me that I really enjoyed working with is 315 00:14:11,900 --> 00:14:14,000 there were migrants coming over on boats from Africa 316 00:14:14,500 --> 00:14:16,420 and the Middle East, and they were landing in Greece. 317 00:14:16,740 --> 00:14:18,560 And they were put into migrant tent cities. 318 00:14:19,140 --> 00:14:21,820 And in particular, women and children 319 00:14:21,820 --> 00:14:23,240 that have gone through that process, 320 00:14:23,660 --> 00:14:26,120 a lot of them were survivors of sexual assault. 321 00:14:26,280 --> 00:14:28,620 And there was a healthcare provider, 322 00:14:28,920 --> 00:14:30,700 both psychological care and healthcare, 323 00:14:30,900 --> 00:14:34,740 in the migrant tent city in Greece. 324 00:14:35,000 --> 00:14:37,940 The problem was, is that there were American psychologists 325 00:14:38,260 --> 00:14:40,280 volunteering, using their own laptops, 326 00:14:40,640 --> 00:14:42,780 and that was medical information 327 00:14:42,780 --> 00:14:44,800 that was being collected by some physicians. 328 00:14:45,260 --> 00:14:46,260 It was not, 329 00:14:46,260 --> 00:14:47,660 it was not being protected as it needed to. 330 00:14:47,780 --> 00:14:50,640 So we had to do some HIPAA and GDPR, 331 00:14:50,700 --> 00:14:52,360 because it touched some servers in Europe as well. 332 00:14:52,580 --> 00:14:55,680 So that was a very interesting client that we had with that. 333 00:14:56,160 --> 00:14:57,320 There are others in here. 334 00:14:57,800 --> 00:14:59,780 Have you ever, if you work in physical security, 335 00:14:59,980 --> 00:15:01,240 have you ever had to secure a tent? 336 00:15:01,880 --> 00:15:02,460 We did. 337 00:15:02,840 --> 00:15:05,160 So one of our clients had a tent in Tijuana. 338 00:15:05,720 --> 00:15:08,040 And one of the last weeks we were working with them, 339 00:15:08,060 --> 00:15:09,180 they called me up and they said, 340 00:15:09,300 --> 00:15:12,440 we just found GPS tracking units on our vehicles. 341 00:15:12,760 --> 00:15:15,400 And these are two women who are American attorneys 342 00:15:16,260 --> 00:15:18,900 who are down there taking business from the coyotes, 343 00:15:19,080 --> 00:15:19,700 and from, 344 00:15:19,760 --> 00:15:21,500 which means also from organized crime. 345 00:15:21,740 --> 00:15:24,260 And they're helping people through the legal migration process. 346 00:15:24,880 --> 00:15:26,220 Really amazing work they were doing. 347 00:15:26,480 --> 00:15:27,900 Someone wanted to know where they lived 348 00:15:27,900 --> 00:15:30,580 and where they went after working in the tent in Tijuana. 349 00:15:31,020 --> 00:15:34,960 So we helped to try to figure out, 350 00:15:34,980 --> 00:15:36,420 track where that GPS came from. 351 00:15:36,620 --> 00:15:38,120 We didn't have a lot of time to do that. 352 00:15:38,200 --> 00:15:39,820 We had pictures of it and that's about it. 353 00:15:39,960 --> 00:15:42,400 But we were securing how their documents were stored, 354 00:15:42,500 --> 00:15:43,720 because some of that was HIPAA too. 355 00:15:44,040 --> 00:15:46,120 They were also taking records. 356 00:15:46,120 --> 00:15:48,540 Medical records from in particular women and children 357 00:15:48,540 --> 00:15:50,460 that were victims of sexual assault 358 00:15:50,460 --> 00:15:52,600 as part of their migration process to the border. 359 00:15:52,900 --> 00:15:56,720 And that is being used to create some of their case files 360 00:15:56,720 --> 00:15:58,580 for the refugee status. 361 00:15:59,000 --> 00:16:00,940 So we were doing all kinds of stuff 362 00:16:00,940 --> 00:16:01,960 that's not just cybersecurity. 363 00:16:02,420 --> 00:16:04,880 I think you see now why I accept a broad variety 364 00:16:04,880 --> 00:16:05,920 of students from the university. 365 00:16:07,100 --> 00:16:08,540 So here's some examples. 366 00:16:08,620 --> 00:16:10,260 We recently had one also in Cambodia. 367 00:16:10,600 --> 00:16:12,940 They are an organization that are working 368 00:16:12,940 --> 00:16:15,980 for democratic government, if you know a lot about 369 00:16:16,120 --> 00:16:16,820 Cambodia's history. 370 00:16:16,960 --> 00:16:18,900 They've had an authoritarian regime for a long time. 371 00:16:19,260 --> 00:16:22,000 And just as we were finishing up with them, 372 00:16:22,120 --> 00:16:25,140 they said that someone in their organization, not a director, 373 00:16:25,240 --> 00:16:26,680 but one of their volunteers had been arrested. 374 00:16:26,980 --> 00:16:29,200 And this is difficult to hear, because it's 375 00:16:29,200 --> 00:16:30,620 nothing we can help with. 376 00:16:30,780 --> 00:16:34,000 But we knew that someone who had been on some of the meetings 377 00:16:34,520 --> 00:16:38,100 was being held in detention, because he was not 378 00:16:38,100 --> 00:16:39,340 supporting the current president. 379 00:16:39,720 --> 00:16:43,080 So again, the work we do is hard. 380 00:16:43,420 --> 00:16:44,680 It's very exciting. 381 00:16:44,820 --> 00:16:46,100 And I guess that's why we're here. 382 00:16:46,120 --> 00:16:47,200 And I guess I mentioned, I love it. 383 00:16:47,240 --> 00:16:49,080 If you do this kind of work, you're going to love it, too. 384 00:16:49,420 --> 00:16:52,000 Let me tell you about some opportunities that you can do. 385 00:16:52,260 --> 00:16:53,340 Are you here from academia? 386 00:16:53,700 --> 00:16:55,240 If you are, come find me at this conference, 387 00:16:55,340 --> 00:16:56,180 because I want to talk to you. 388 00:16:56,640 --> 00:16:59,320 There is a grant process that's out there. 389 00:16:59,540 --> 00:17:02,960 And Google has a very generous fund. 390 00:17:03,740 --> 00:17:05,200 And I'll tell you about what that is. 391 00:17:05,300 --> 00:17:06,060 But here it is. 392 00:17:06,140 --> 00:17:06,940 Actually, it's on this slide. 393 00:17:08,140 --> 00:17:10,300 About $1 million is going to be given 394 00:17:10,300 --> 00:17:13,700 to clinics that go through an application process. 395 00:17:13,840 --> 00:17:15,940 And I think about maybe half a dozen, 396 00:17:15,940 --> 00:17:17,800 or no, actually, it's more like a dozen, 397 00:17:17,880 --> 00:17:20,140 are going to be chosen to receive this grant. 398 00:17:20,360 --> 00:17:22,940 But you've got to be a university to apply for these grants, 399 00:17:23,020 --> 00:17:23,300 I believe. 400 00:17:24,240 --> 00:17:27,020 And the Consortium for Cybersecurity Clinics 401 00:17:27,020 --> 00:17:28,960 at UC Berkeley is sort of organizing this process. 402 00:17:29,220 --> 00:17:30,400 But the grant comes from Google. 403 00:17:30,500 --> 00:17:31,800 So we are very appreciative of that. 404 00:17:32,260 --> 00:17:33,900 That is also, some of that funding 405 00:17:33,900 --> 00:17:35,040 is going to come to Citizen Clinics, 406 00:17:35,060 --> 00:17:36,360 so we can buy some more tools. 407 00:17:37,440 --> 00:17:39,020 And it's wonderful. 408 00:17:39,660 --> 00:17:41,960 These are the clinics that exist in the United States right now. 409 00:17:42,540 --> 00:17:43,820 Not that many yet, right? 410 00:17:43,900 --> 00:17:45,840 I feel like we can do better. 411 00:17:45,920 --> 00:17:46,600 We can get some more. 412 00:17:46,700 --> 00:17:48,000 So let's do that. 413 00:17:48,560 --> 00:17:53,040 If you want to start a clinic, contact me here. 414 00:17:53,260 --> 00:17:55,020 And I know this is a large URL, and I 415 00:17:55,020 --> 00:17:56,280 realize you can't click on it online 416 00:17:56,280 --> 00:17:57,760 because you have a PDF. 417 00:17:58,100 --> 00:18:00,220 But I have a form that you can fill out, 418 00:18:00,280 --> 00:18:02,940 and I'll get you to who you need to talk to in the consortium 419 00:18:02,940 --> 00:18:05,080 that we have at Berkeley if you want to start one. 420 00:18:05,300 --> 00:18:07,520 And now let me introduce Austin to come talk 421 00:18:07,520 --> 00:18:10,280 about his nonprofit and why they're 422 00:18:10,280 --> 00:18:12,640 going to be our client at Citizen Clinic in the fall. 423 00:18:12,820 --> 00:18:13,620 Come on up, Austin. 424 00:18:18,100 --> 00:18:18,860 Good morning. 425 00:18:21,160 --> 00:18:25,900 So Tiffany didn't mention that I absolutely hate public speaking. 426 00:18:26,120 --> 00:18:28,960 And at Black Hat, there was these nice bright lights. 427 00:18:29,000 --> 00:18:30,620 I couldn't see anybody but the first row, 428 00:18:30,700 --> 00:18:32,140 and there's a lot of you in here. 429 00:18:32,300 --> 00:18:33,860 So thanks for coming. 430 00:18:35,000 --> 00:18:38,040 All right, so I started this organization back in January. 431 00:18:38,260 --> 00:18:40,060 I've been in the business for about 10 years. 432 00:18:42,600 --> 00:18:44,720 An operation that we had last year 433 00:18:44,720 --> 00:18:50,300 was we rescued 83 girls from Dominican Republic 434 00:18:50,300 --> 00:18:51,820 that were Venezuelan and Colombian. 435 00:18:51,900 --> 00:18:54,660 That sounds really great, but in reality, 436 00:18:54,780 --> 00:18:57,160 83 girls just gets replaced within a matter of weeks. 437 00:18:57,320 --> 00:18:59,940 The bad guys figure out our TTPs or our tactics 438 00:18:59,940 --> 00:19:01,800 and techniques of how we found them, 439 00:19:01,820 --> 00:19:03,060 and they just adjust fire and move. 440 00:19:03,360 --> 00:19:05,280 So just the whole cycle starts over. 441 00:19:05,640 --> 00:19:08,200 So I said, we've got to do better as an industry. 442 00:19:09,140 --> 00:19:13,540 A to Z, this industry is not doing what it should be doing. 443 00:19:13,700 --> 00:19:13,860 Right? 444 00:19:13,960 --> 00:19:14,120 Right. 445 00:19:14,120 --> 00:19:15,660 And law enforcement and the government 446 00:19:15,660 --> 00:19:17,220 are really handcuffed. 447 00:19:17,340 --> 00:19:19,160 They don't have the resources and the funding. 448 00:19:19,320 --> 00:19:22,420 So nonprofits are really stepping in and kind of offering 449 00:19:22,420 --> 00:19:24,880 some of what to local law enforcement 450 00:19:24,880 --> 00:19:27,660 and international law enforcement organizations 451 00:19:28,320 --> 00:19:29,320 what they don't have. 452 00:19:29,600 --> 00:19:30,700 Sorry, somebody's calling me. 453 00:19:32,100 --> 00:19:35,280 So this is our mission is to identify, map, and disrupt 454 00:19:35,280 --> 00:19:38,080 transnational human trafficking networks with a nexus 455 00:19:38,080 --> 00:19:38,960 to the United States. 456 00:19:39,280 --> 00:19:42,360 And the reason that we want a nexus to the United States 457 00:19:42,360 --> 00:19:44,100 is because a lot of these countries, 458 00:19:44,100 --> 00:19:46,300 you can't get some sort of prosecution 459 00:19:46,300 --> 00:19:48,880 or some sort of civil action against the bad guys. 460 00:19:49,060 --> 00:19:49,160 Right? 461 00:19:49,320 --> 00:19:51,620 So we try to draw that back to the United States 462 00:19:51,620 --> 00:19:54,460 so that law enforcement or prosecutor's office 463 00:19:54,460 --> 00:19:57,520 or international organizations like the UN 464 00:19:57,520 --> 00:19:59,900 or the Organization of American States 465 00:19:59,900 --> 00:20:01,640 can take some sort of sanctioned action 466 00:20:01,640 --> 00:20:03,600 against people that are trafficking human beings. 467 00:20:05,300 --> 00:20:06,620 These are some of our partners. 468 00:20:06,820 --> 00:20:08,840 Some important ones to point out there, Skull Games. 469 00:20:09,060 --> 00:20:10,660 They are doing fantastic work. 470 00:20:10,800 --> 00:20:13,940 It's a group of former special operations guys. 471 00:20:14,100 --> 00:20:17,540 That just kind of gamified hunting traffickers. 472 00:20:17,740 --> 00:20:17,920 Right? 473 00:20:18,180 --> 00:20:20,840 And the next game is in October. 474 00:20:21,540 --> 00:20:23,980 So I definitely recommend you guys go and check out 475 00:20:23,980 --> 00:20:24,460 what they're doing. 476 00:20:24,700 --> 00:20:25,840 Another one is Collective Liberty. 477 00:20:26,160 --> 00:20:28,280 And then all of these folks here have, 478 00:20:28,360 --> 00:20:30,520 you see Berkeley's up there, all of these folks 479 00:20:30,520 --> 00:20:37,280 here have done something to support us or give us tools. 480 00:20:37,420 --> 00:20:40,080 Or Hackers for Charity, this guy in the front row 481 00:20:40,080 --> 00:20:43,800 here with the blue shirt, he's from Hackers for Charity. 482 00:20:43,800 --> 00:20:46,540 My organization would not exist without him. 483 00:20:46,760 --> 00:20:49,320 So definitely come see them over at the vendor section. 484 00:20:49,920 --> 00:20:50,820 They're near the pineapple. 485 00:20:52,440 --> 00:20:54,560 This is the fastest growing global crime. 486 00:20:54,880 --> 00:20:55,380 Right? 487 00:20:56,100 --> 00:20:58,040 It has bypassed arms trafficking. 488 00:20:59,200 --> 00:21:03,060 It has bypassed, I would say there's probably enough 489 00:21:03,060 --> 00:21:04,920 to say that it's bypassed drugs at this point, 490 00:21:05,040 --> 00:21:06,040 narcotics trafficking. 491 00:21:06,900 --> 00:21:11,860 But you know, all the data out there is guesses at best. 492 00:21:12,040 --> 00:21:12,460 Right? 493 00:21:12,460 --> 00:21:14,640 There's nobody, you know, these bad guys, 494 00:21:14,760 --> 00:21:18,200 they're not submitting 990s or annual reports 495 00:21:18,200 --> 00:21:19,280 that we can pull up online. 496 00:21:19,520 --> 00:21:21,340 But I think the evidence exists. 497 00:21:21,660 --> 00:21:23,400 And this is some of the numbers, right? 498 00:21:24,080 --> 00:21:27,600 28 million victims in the category of labor trafficking, 499 00:21:27,740 --> 00:21:30,700 which covers organ harvesting, sex trafficking, 500 00:21:30,900 --> 00:21:32,220 so on and so forth, right? 501 00:21:33,880 --> 00:21:36,080 12% growth since 2016. 502 00:21:36,320 --> 00:21:39,720 That is about the equivalent of the entire population of DC 503 00:21:39,720 --> 00:21:41,260 has been enslaved. 504 00:21:41,440 --> 00:21:42,440 And that is the right thing to do. 505 00:21:42,440 --> 00:21:43,260 The right term to use. 506 00:21:43,400 --> 00:21:46,100 They've been enslaved since 2016, right? 507 00:21:46,180 --> 00:21:48,660 And that's just growing larger and larger every single year. 508 00:21:51,240 --> 00:21:52,440 So this is our strategy. 509 00:21:52,640 --> 00:21:54,480 We identify, map, and disrupt. 510 00:21:55,320 --> 00:21:58,380 We look at patterns in a specific area, 511 00:21:58,540 --> 00:21:59,560 whatever that may be. 512 00:22:00,440 --> 00:22:02,880 And I'll talk about one of our operations in a minute. 513 00:22:02,980 --> 00:22:05,340 But we look at all the data points. 514 00:22:05,440 --> 00:22:06,360 We try to put them together. 515 00:22:06,520 --> 00:22:08,500 And we find those trends and those patterns. 516 00:22:09,640 --> 00:22:12,100 Once we've identified that there is some type of network, 517 00:22:12,100 --> 00:22:13,300 we try to map it end-to-end. 518 00:22:13,600 --> 00:22:16,040 And then we work with a separate team 519 00:22:16,040 --> 00:22:18,320 to come up with strategies to disrupt it. 520 00:22:18,420 --> 00:22:23,360 So there's an old Carver method of quantifying and disrupting. 521 00:22:24,400 --> 00:22:25,760 That's what we try to use. 522 00:22:27,860 --> 00:22:33,500 These are some of our metrics of how we identify success. 523 00:22:34,080 --> 00:22:37,120 You're going to go to a ton of the websites 524 00:22:37,120 --> 00:22:38,200 out there for organizations. 525 00:22:38,500 --> 00:22:41,140 And they say, oh, we saved 10 billion people this year. 526 00:22:41,580 --> 00:22:42,020 Right? 527 00:22:42,020 --> 00:22:42,880 We rescued blah, blah, blah. 528 00:22:43,320 --> 00:22:45,360 You're never going to see that clicker on my website 529 00:22:45,360 --> 00:22:47,460 because I think it just kind of re-victimizes victims. 530 00:22:48,020 --> 00:22:50,680 We don't work with law enforcement that arrest prostitutes. 531 00:22:51,860 --> 00:22:55,980 I just don't think that it's productive to arrest. 532 00:22:56,140 --> 00:22:58,460 It's kind of like putting a bunch of drug addicts in prison. 533 00:22:58,760 --> 00:22:59,720 Doesn't really make sense. 534 00:23:00,600 --> 00:23:06,100 But we look at how many target packages 535 00:23:06,100 --> 00:23:07,440 have we sent over to law enforcement? 536 00:23:07,640 --> 00:23:08,880 How many networks have we mapped? 537 00:23:09,320 --> 00:23:11,620 How many victims have we identified and pushed 538 00:23:11,620 --> 00:23:13,980 into programs that will help them get out of this lifestyle? 539 00:23:14,460 --> 00:23:16,400 And then arrest and prosecutions. 540 00:23:18,400 --> 00:23:20,340 So these are two of our projects. 541 00:23:20,560 --> 00:23:24,000 Operation West Keg, which is kind of a larger project. 542 00:23:24,060 --> 00:23:25,220 And then we have smaller projects underneath. 543 00:23:25,720 --> 00:23:28,660 That's essentially looking at networks operating 544 00:23:28,660 --> 00:23:32,440 within the state of Texas that have a nexus to somewhere 545 00:23:33,140 --> 00:23:36,340 outside of Texas, whether it be internationally or not. 546 00:23:37,420 --> 00:23:41,060 Ideally, we want to map from Houston down to Peru 547 00:23:41,060 --> 00:23:44,920 and Guatemala and find where those networks are. 548 00:23:45,140 --> 00:23:49,780 Because if you can't shut down the organizations themselves, 549 00:23:50,080 --> 00:23:52,560 the next best thing is to shut down the supply networks. 550 00:23:53,460 --> 00:23:55,000 And then Project Key. 551 00:23:55,700 --> 00:23:57,900 Actually, Project Key is this guy right here 552 00:23:57,900 --> 00:23:59,080 with the camera waving. 553 00:23:59,420 --> 00:24:02,800 He came up with a great idea that he's one of our analysts. 554 00:24:03,040 --> 00:24:07,360 He came up with a great idea of giving the word out 555 00:24:07,360 --> 00:24:08,160 about sextortion. 556 00:24:08,360 --> 00:24:10,660 And if people aren't familiar with what 557 00:24:10,660 --> 00:24:11,040 sextortion is. 558 00:24:11,880 --> 00:24:16,040 It's one of the biggest issues that our teenagers are dealing 559 00:24:16,040 --> 00:24:16,960 with in the United States. 560 00:24:17,600 --> 00:24:19,680 They're using, over social media, they'll 561 00:24:19,680 --> 00:24:21,400 be using the lover boy tactics. 562 00:24:22,680 --> 00:24:26,300 And most of the time, it's just a sock puppet account 563 00:24:26,300 --> 00:24:30,160 that they're getting young girls and young boys 564 00:24:30,160 --> 00:24:32,220 fall in love with this anonymous person. 565 00:24:33,040 --> 00:24:37,760 And then getting them to send sexual photos of them naked. 566 00:24:37,900 --> 00:24:39,900 And then extorting them for them. 567 00:24:40,540 --> 00:24:44,200 I think as of today, there's been like 12 kids 568 00:24:44,200 --> 00:24:45,520 that have killed themselves over this. 569 00:24:45,740 --> 00:24:47,220 So it's a really big issue. 570 00:24:47,600 --> 00:24:50,240 And go to the website and take a look at both of these 571 00:24:50,240 --> 00:24:52,240 if you're interested in more information on this. 572 00:24:52,360 --> 00:24:55,200 This is Houston for Operation West Keg. 573 00:24:55,640 --> 00:25:01,840 We looked at everything from Yelp data to just everything. 574 00:25:02,000 --> 00:25:02,960 And made a heat map. 575 00:25:03,220 --> 00:25:05,180 And this is what we're looking at now 576 00:25:05,180 --> 00:25:06,940 of all these commercial industries 577 00:25:07,300 --> 00:25:09,480 or these commercial enterprises that 578 00:25:09,480 --> 00:25:10,700 are networked together. 579 00:25:10,860 --> 00:25:13,340 Whether it be money laundering or a variety 580 00:25:13,340 --> 00:25:14,240 of any other issues. 581 00:25:16,800 --> 00:25:18,320 I think that was quicker than last time. 582 00:25:19,080 --> 00:25:19,440 Sorry. 583 00:25:19,780 --> 00:25:21,300 So I'm going to hand it back over to Tiffany. 584 00:25:21,500 --> 00:25:23,380 And she's going to tell you about one thing. 585 00:25:23,440 --> 00:25:24,480 This email is not working. 586 00:25:24,640 --> 00:25:26,260 So just Austin at Traverse Project. 587 00:25:26,660 --> 00:25:27,880 Just take my last name out of it. 588 00:25:28,220 --> 00:25:28,580 Yeah. 589 00:25:28,920 --> 00:25:29,760 That was my mistake. 590 00:25:30,000 --> 00:25:33,160 So I can pick them, right? 591 00:25:33,240 --> 00:25:34,960 So this is one of the nonprofits I was like, 592 00:25:35,080 --> 00:25:38,700 I want to show the type of clients we have at UC Berkeley. 593 00:25:39,480 --> 00:25:40,060 It's called the Citizen Clinic. 594 00:25:40,240 --> 00:25:42,980 And we're so excited to work with Austin this fall. 595 00:25:43,340 --> 00:25:45,160 Which brings me to another thing is, 596 00:25:45,240 --> 00:25:46,940 we're here to talk about what you can 597 00:25:46,940 --> 00:25:49,020 do if you want to get involved in these topics 598 00:25:49,020 --> 00:25:51,280 to do some things with your skill set. 599 00:25:51,460 --> 00:25:54,720 So I know many of you work for organizations 600 00:25:54,720 --> 00:25:57,920 where you get one to two weeks off of paid time 601 00:25:57,920 --> 00:25:58,940 off for volunteering. 602 00:26:00,440 --> 00:26:02,880 Citizen Clinic via Center for Long-Term Cybersecurity 603 00:26:02,880 --> 00:26:05,480 is a nonprofit, 501 , and so are they. 604 00:26:05,680 --> 00:26:09,080 So if you have time, they would love to have 605 00:26:09,080 --> 00:26:09,680 some volunteers. 606 00:26:09,980 --> 00:26:11,960 They're looking for volunteers that perhaps 607 00:26:11,960 --> 00:26:13,220 have Intel analyst skills. 608 00:26:13,520 --> 00:26:17,040 Well, actually, anyone who's interested in helping out, 609 00:26:17,080 --> 00:26:18,900 even if you're in marketing or sales, 610 00:26:19,200 --> 00:26:20,640 getting word out about what they do 611 00:26:20,640 --> 00:26:21,940 is what they're looking for. 612 00:26:22,500 --> 00:26:24,780 At UC Berkeley, for Citizen Clinic, 613 00:26:25,540 --> 00:26:28,300 we're looking for subject matter experts. 614 00:26:28,440 --> 00:26:30,560 Can you come and guest lecture for our class? 615 00:26:30,840 --> 00:26:31,760 Can you volunteer? 616 00:26:32,120 --> 00:26:33,900 You may not know the name of the client, 617 00:26:34,000 --> 00:26:37,360 depending on how the client wants the NDAs to be created. 618 00:26:37,780 --> 00:26:38,880 But you don't know. 619 00:26:38,880 --> 00:26:40,420 We know that if we pick them, they're awesome, 620 00:26:40,500 --> 00:26:41,760 like Austin's nonprofit. 621 00:26:42,340 --> 00:26:44,460 But they may not want you to know their identity. 622 00:26:44,700 --> 00:26:46,480 But they do have some problems that some of you 623 00:26:46,480 --> 00:26:47,740 have the skill sets to solve. 624 00:26:48,040 --> 00:26:50,960 So we'd very much like to have some volunteers. 625 00:26:51,260 --> 00:26:54,680 So if you're interested, you can contact us here 626 00:26:54,680 --> 00:26:55,700 at Citizen Clinic as well. 627 00:26:56,040 --> 00:26:57,760 And we're creating a list. 628 00:26:57,960 --> 00:26:59,260 So I'm going to send you a Google form. 629 00:26:59,380 --> 00:27:00,900 And on the Google form, there's going 630 00:27:00,900 --> 00:27:02,560 to be some information about what would you like to do, 631 00:27:02,720 --> 00:27:04,420 how much time do you have to volunteer, 632 00:27:04,720 --> 00:27:06,160 do you want to come guest lecture. 633 00:27:06,820 --> 00:27:08,680 So I'm going to tell you just a brief story. 634 00:27:08,680 --> 00:27:11,400 I was at Black Hat with Austin doing the same presentation 635 00:27:12,040 --> 00:27:13,560 two, a couple days ago. 636 00:27:13,980 --> 00:27:17,060 And after the presentations, someone came up to us. 637 00:27:17,180 --> 00:27:19,800 And he said, he might be here today. 638 00:27:20,060 --> 00:27:21,460 I'm not going to name him. 639 00:27:21,560 --> 00:27:24,600 But he said, I helped write Pegasus. 640 00:27:25,200 --> 00:27:26,960 And I'm like, oh, OK. 641 00:27:28,460 --> 00:27:30,000 Thank you for coming to our talk. 642 00:27:30,140 --> 00:27:31,280 I wasn't quite sure what to say. 643 00:27:31,380 --> 00:27:33,680 And he said, I'd like to help volunteer. 644 00:27:34,020 --> 00:27:38,200 I'd like to talk to your students about how Pegasus was 645 00:27:38,200 --> 00:27:38,440 created. 646 00:27:38,620 --> 00:27:39,760 This is obviously public knowledge. 647 00:27:39,860 --> 00:27:41,480 Now, how the exploits were written. 648 00:27:41,900 --> 00:27:45,120 And I'd like to volunteer my time 649 00:27:45,120 --> 00:27:48,100 to do some work for the clients that you have at Citizen 650 00:27:48,100 --> 00:27:48,460 Clinic. 651 00:27:48,940 --> 00:27:51,020 Hearing that was one of these things like, man, 652 00:27:51,020 --> 00:27:52,240 all those long hours. 653 00:27:52,520 --> 00:27:54,300 And our classes, for me, on the East Coast, 654 00:27:54,420 --> 00:27:56,840 classes around West Coast time go to midnight for me. 655 00:27:57,020 --> 00:27:59,360 After working all day and I do classes all night, 656 00:27:59,520 --> 00:28:01,920 it was like one of these things that if I 657 00:28:01,920 --> 00:28:04,400 had one of the developers for Pegasus coming to volunteer, 658 00:28:04,620 --> 00:28:06,280 I'm like, that's great. 659 00:28:06,280 --> 00:28:10,380 I feel like it's my work, my work has been done in a way. 660 00:28:10,900 --> 00:28:13,960 So you don't have to be a creator of Pegasus 661 00:28:13,960 --> 00:28:15,140 to come volunteer for us. 662 00:28:15,320 --> 00:28:17,480 But it's one of these things that if you have specialties, 663 00:28:17,520 --> 00:28:21,540 again, if you're an attorney, if you do compliance, 664 00:28:21,880 --> 00:28:26,400 you do PCI DSS, really, we're looking for a broad range. 665 00:28:26,540 --> 00:28:30,340 Because when we step into a client meeting, 666 00:28:31,040 --> 00:28:33,340 I don't know a lot about what the problems are 667 00:28:33,340 --> 00:28:34,500 until we start taking a look. 668 00:28:35,120 --> 00:28:36,260 Network engineers are a lot of them. 669 00:28:36,260 --> 00:28:38,560 They're always useful because we do see some stuff like that. 670 00:28:38,740 --> 00:28:41,020 If you're like a master with Google Suites 671 00:28:41,020 --> 00:28:42,300 and how to lock all this stuff down. 672 00:28:42,680 --> 00:28:45,120 I got someone from Apple come up to me at the last talk 673 00:28:45,120 --> 00:28:46,820 and they're like, we can do a presentation 674 00:28:46,820 --> 00:28:49,560 on if they have an iPhone, how we can enhance privacy. 675 00:28:49,940 --> 00:28:50,880 I'm like, great. 676 00:28:51,480 --> 00:28:53,520 Because I don't know all of this stuff. 677 00:28:53,720 --> 00:28:56,600 It's hard to, I mean, you can imagine how much it is. 678 00:28:56,720 --> 00:28:58,920 And we would love to have some volunteers 679 00:28:59,540 --> 00:29:00,840 to assist us with this. 680 00:29:01,220 --> 00:29:03,840 And with that, let me just say that we're really 681 00:29:03,840 --> 00:29:06,180 glad to be here talking to you here at DEF CON. 682 00:29:06,180 --> 00:29:07,260 And here, come on up. 683 00:29:07,300 --> 00:29:10,520 So if you want to reach out to us, please do. 684 00:29:10,720 --> 00:29:13,140 And we appreciate your interest in coming 685 00:29:13,140 --> 00:29:16,160 to hear about the work at UC Berkeley Citizen Clinic 686 00:29:16,640 --> 00:29:17,680 and with Traverse Project. 687 00:29:18,020 --> 00:29:19,160 Is there anything else you want to close with? 688 00:29:19,400 --> 00:29:21,440 If anybody has any questions, just come and find us. 689 00:29:21,720 --> 00:29:23,700 I'll be at the Hackers for Charity booth. 690 00:29:24,940 --> 00:29:27,060 And we'll be here if anybody wants to come talk. 691 00:29:27,320 --> 00:29:29,020 And if you are a student at UC Berkeley 692 00:29:29,020 --> 00:29:31,200 and have taken my class, I have challenge coins for you. 693 00:29:31,280 --> 00:29:32,100 You have earned them. 694 00:29:32,320 --> 00:29:35,220 And I have like 20, but you have earned those. 695 00:29:35,340 --> 00:29:36,160 So come up and talk to us. 696 00:29:36,180 --> 00:29:37,200 Talk to me, and I'll give those to you. 697 00:29:37,720 --> 00:29:38,040 All right. 698 00:29:38,080 --> 00:29:38,360 Thank you.