Princess of Persia

Life is unpredictable...It doesnt announce itself...It just happens...You cant control what happens...You can only live it...One moment at a time...And smile...For the moment...

Wednesday, January 24, 2024

How To Build A "Burner Device" For DEF CON In One Easy Step

TL;DR: Don't build a burner device. Probably this is not the risk you are looking for.

Introduction

Every year before DEF CON people starts to give advice to attendees to bring "burner devices" to DEF CON. Some people also start to create long lists on how to build burner devices, especially laptops. But the deeper we look into the topic, the more confusing it gets. Why are we doing this? Why are we recommending this? Are we focusing on the right things?

What is a "burner device" used for?

For starters, the whole "burner device" concept is totally misunderstood, even within the ITSEC community. A "burner device" is used for non-attribution. You know, for example, you are a spy and you don't want the country where you live to know that you are communicating with someone else. I believe this is not the situation for most attendees at DEF CON. More info about the meaning of "burner" https://twitter.com/Viss/status/877400669669306369

Burner phone means it has a throwaway SIM card with a throwaway phone, used for one specific operation only. You don't use the "burner device" to log in to your e-mail account or to VPN to your work or home.
But let's forget this word misuse issue for a moment, and focus on the real problem.

The bad advice

The Internet is full of articles focusing on the wrong things, especially when it comes to "burner devices". Like how to build a burner laptop, without explaining why you need it or how to use it.
The problem with this approach is that people end up "burning" (lame wordplay, sorry) significant resources for building a secure "burner device". But people are not educated about how they should use these devices.

The threats

I believe the followings are some real threats which are higher when you travel:
1. The laptop getting lost or stolen.
2. The laptop getting inspected/copied at the border.

These two risks have nothing to do with DEF CON, this is true for every travel.

Some other risks which are usually mentioned when it comes to "burner devices" and DEF CON:
3. Device getting owned via physical access while in a hotel room.
4. Network traffic Man-in-the-middle attacked. Your password displayed on a Wall of Sheep. Or having fun with Shellshock with DHCP. Information leak of NTLM hashes or similar.
5. Pwning the device via some nasty things like WiFi/TCP/Bluetooth/LTE/3G/GSM stack. These are unicorn attacks.

6. Pwning your device by pwning a service on your device. Like leaving your upload.php file in the root folder you use at CTFs and Nginx is set to autostart. The author of this article cannot comment on this incident whether it happened in real life or is just an imaginary example. 

How to mitigate these risks? 

Laptop getting stolen/lost/inspected at the border?
1. Bring a cheap, empty device with you. Or set up a fake OS/fake account to log in if you really need your day-to-day laptop. This dummy account should not decrypt the real files in the real account.

Device getting owned while in a hotel room with physical access

1. Don't bring any device with you.
2. If you bring any, make it tamper-resistant. How to do that depends on your enemy, but you can start by using nail glitter and Full Disk Encryption. Tools like Do Not Disturb help. It also helps if your OS supports suspending DMA devices before the user logs in.
3. If you can't make the device tamper-resistant, use a device that has a good defense against physical attackers, like iOS.
4. Probably you are not that important anyway that anyone will spend time and resources on you. If they do, probably you will only make your life miserable with all the hardening, but still, get pwned.

Network traffic Man-in-the-middle attacked

1. Don't bring any device with you.
2. Use services that are protected against MiTM. Like TLS.
3. Update your OS to the latest and greatest versions. Not everyone at DEF CON has a 0dayz worth of 100K USD, and even the ones who have won't waste it on you. 
4. Use fail-safe VPN. Unfortunately, not many people talk about this or have proper solutions for the most popular operating systems.
5. For specific attacks like Responder, disable LLMNR, NBT-NS, WPAD, and IPv6 and use a non-work account on the machine. If you don't have the privileges to do so on your machine, you probably should not bring this device with you. Or ask your local IT to disable these services and set up a new account for you.

Pwning the device via some nasty thing like WiFi/TCP/Bluetooth/LTE/3G/GSM stack

1. Don't bring any device with you.
2. If you bring any, do not use this device to log in to work, personal email, social media, etc.
3. Don't worry, these things don't happen very often. 

Pwning your device by pwning a service on your device

Just set up a firewall profile where all services are hidden from the outside. You rarely need any service accessible on your device at a hacker conference.

Conclusion

If you are still so afraid to go there, just don't go there. Watch the talks at home. But how is the hotel WiFi at a random place different from a hacker conference? Turns out, it is not much different, so you better spend time and resources on hardening your daily work devices for 365 days, instead of building a "burner device".

You probably need a "burner device" if you are a spy for a foreign government. Or you are the head of a criminal organization. Otherwise, you don't need a burner device. Maybe you need to bring a cheap replacement device.

Related posts


  1. Hacking App
  2. Ethical Hacker Tools
  3. Wifi Hacker Tools For Windows
  4. Hacking App
  5. Hacker Tools Mac
  6. Pentest Tools Online
  7. Hacker Tools Github
  8. Best Hacking Tools 2020
  9. Black Hat Hacker Tools
  10. Hacker Search Tools
  11. Pentest Tools Github
  12. Tools Used For Hacking
  13. Termux Hacking Tools 2019
  14. New Hacker Tools
  15. Easy Hack Tools
  16. Black Hat Hacker Tools
  17. Hacker Tools For Windows
  18. Wifi Hacker Tools For Windows
  19. Hacking Tools Github
  20. Nsa Hack Tools
  21. Hacker Security Tools
  22. Pentest Tools For Windows
  23. Nsa Hacker Tools
  24. Pentest Tools For Android
  25. Hacking Tools For Windows Free Download
  26. Pentest Tools Url Fuzzer
  27. Hackers Toolbox
  28. Best Hacking Tools 2020
  29. Hack Tools For Ubuntu
  30. Ethical Hacker Tools
  31. Hack Tools For Games
  32. Hacking Tools Download
  33. Hacker Tools Online
  34. New Hack Tools
  35. Hack Tools Mac
  36. Pentest Reporting Tools
  37. Hacker Security Tools
  38. Hack Website Online Tool
  39. Hack App
  40. Nsa Hack Tools Download
  41. Hack Website Online Tool
  42. Hacker Hardware Tools
  43. Hacker Tools For Mac
  44. Hacker Tools Apk Download
  45. How To Hack
  46. Pentest Tools Free
  47. Pentest Tools
  48. Hack And Tools
  49. Hacker Tools Hardware
  50. Top Pentest Tools
  51. Hacker Tools For Ios
  52. Hacking Tools Mac
  53. Pentest Tools Android
  54. Hack Tools
  55. Pentest Tools Subdomain
  56. Hack Tools
  57. Wifi Hacker Tools For Windows
  58. Hacker Tools For Windows
  59. Hacker
  60. Termux Hacking Tools 2019
  61. Hack Tools 2019
  62. Hacker Tools Free Download
  63. Hacking Tools Download
  64. Hacking Tools Software
  65. Growth Hacker Tools
  66. Hack Tools Mac
  67. Hacker Search Tools
  68. Install Pentest Tools Ubuntu
  69. Hacking Tools Kit
  70. Pentest Tools Windows
  71. Free Pentest Tools For Windows
  72. Hack Tools
  73. Hacking Tools Free Download
  74. Pentest Tools
  75. Hacker Tools 2020
  76. Wifi Hacker Tools For Windows
  77. How To Hack
  78. Hacker Tools List
  79. Tools Used For Hacking
  80. Pentest Tools Alternative
  81. Hack Tools Pc
  82. Hacking App
  83. Pentest Tools Apk
  84. Hack Tools For Pc
  85. Hacker Tools For Mac
  86. Pentest Tools Port Scanner
  87. Hack Tools For Games
  88. Best Hacking Tools 2019
  89. Hacking Tools For Windows
  90. Pentest Tools List
  91. Nsa Hack Tools
  92. Pentest Tools Online
  93. Hacker Tools For Mac
  94. Hack Tools For Mac
  95. Hacker Tools Software
  96. Tools For Hacker
  97. Growth Hacker Tools
  98. Pentest Tools Github
  99. Hacker Tools Online
  100. Tools 4 Hack
  101. Hacking Tools For Mac
  102. Tools 4 Hack
  103. What Is Hacking Tools
  104. Hack Tools For Windows
  105. Hack Tool Apk No Root
  106. Best Pentesting Tools 2018
  107. Ethical Hacker Tools
  108. World No 1 Hacker Software
  109. Hacker Tools For Windows
  110. Hack Tools Github
  111. Termux Hacking Tools 2019
  112. Pentest Tools Bluekeep
  113. Underground Hacker Sites
  114. Hacking Tools
  115. Hacking Tools For Games
  116. Android Hack Tools Github
  117. Hack Tools Pc
  118. Pentest Tools Online
  119. Easy Hack Tools
  120. Hacker Tools Free
  121. Nsa Hack Tools Download
  122. Hacker Search Tools
  123. Black Hat Hacker Tools
  124. Pentest Tools List
  125. Hacking Tools Github
  126. Pentest Tools Download
  127. Hacking Tools Github
  128. Pentest Tools Find Subdomains
  129. Hack Tools 2019
  130. Computer Hacker
  131. Hacking Tools Windows 10
  132. Wifi Hacker Tools For Windows
  133. Hacker
  134. Hacker Techniques Tools And Incident Handling
  135. Pentest Tools List
  136. Pentest Tools Nmap
  137. How To Make Hacking Tools
  138. Game Hacking
  139. New Hack Tools
  140. Hackers Toolbox
  141. Pentest Tools Android
  142. Pentest Tools Online
  143. Hacker Tools Hardware
  144. Nsa Hacker Tools
  145. Hacking Tools Download
  146. Pentest Tools Website
  147. Hacking Tools Mac
  148. Hack Tools
  149. Pentest Tools For Ubuntu
  150. Pentest Tools Website
  151. Hack Tools 2019
  152. Hack Tools Online
  153. Hacker Tools Apk Download
  154. Hacker Tools
  155. Hacker Security Tools
  156. Free Pentest Tools For Windows
  157. Pentest Tools For Windows
  158. Hacking Tools Hardware
  159. Kik Hack Tools
  160. Hack App
  161. Pentest Tools Online
  162. Hacker Tools List
  163. Hacker Tools Apk Download
  164. Pentest Tools Online
  165. Hackrf Tools
  166. Hack Tools

0 Comments:

Post a Comment

Subscribe to Post Comments [Atom]

<< Home