Tuesday, 23 January 2024

How To Build A "Burner Device" For DEF CON In One Easy Step

TL;DR: Don't build a burner device. Probably this is not the risk you are looking for.

Introduction

Every year before DEF CON people starts to give advice to attendees to bring "burner devices" to DEF CON. Some people also start to create long lists on how to build burner devices, especially laptops. But the deeper we look into the topic, the more confusing it gets. Why are we doing this? Why are we recommending this? Are we focusing on the right things?

What is a "burner device" used for?

For starters, the whole "burner device" concept is totally misunderstood, even within the ITSEC community. A "burner device" is used for non-attribution. You know, for example, you are a spy and you don't want the country where you live to know that you are communicating with someone else. I believe this is not the situation for most attendees at DEF CON. More info about the meaning of "burner" https://twitter.com/Viss/status/877400669669306369

Burner phone means it has a throwaway SIM card with a throwaway phone, used for one specific operation only. You don't use the "burner device" to log in to your e-mail account or to VPN to your work or home.
But let's forget this word misuse issue for a moment, and focus on the real problem.

The bad advice

The Internet is full of articles focusing on the wrong things, especially when it comes to "burner devices". Like how to build a burner laptop, without explaining why you need it or how to use it.
The problem with this approach is that people end up "burning" (lame wordplay, sorry) significant resources for building a secure "burner device". But people are not educated about how they should use these devices.

The threats

I believe the followings are some real threats which are higher when you travel:
1. The laptop getting lost or stolen.
2. The laptop getting inspected/copied at the border.

These two risks have nothing to do with DEF CON, this is true for every travel.

Some other risks which are usually mentioned when it comes to "burner devices" and DEF CON:
3. Device getting owned via physical access while in a hotel room.
4. Network traffic Man-in-the-middle attacked. Your password displayed on a Wall of Sheep. Or having fun with Shellshock with DHCP. Information leak of NTLM hashes or similar.
5. Pwning the device via some nasty things like WiFi/TCP/Bluetooth/LTE/3G/GSM stack. These are unicorn attacks.

6. Pwning your device by pwning a service on your device. Like leaving your upload.php file in the root folder you use at CTFs and Nginx is set to autostart. The author of this article cannot comment on this incident whether it happened in real life or is just an imaginary example. 

How to mitigate these risks? 

Laptop getting stolen/lost/inspected at the border?
1. Bring a cheap, empty device with you. Or set up a fake OS/fake account to log in if you really need your day-to-day laptop. This dummy account should not decrypt the real files in the real account.

Device getting owned while in a hotel room with physical access

1. Don't bring any device with you.
2. If you bring any, make it tamper-resistant. How to do that depends on your enemy, but you can start by using nail glitter and Full Disk Encryption. Tools like Do Not Disturb help. It also helps if your OS supports suspending DMA devices before the user logs in.
3. If you can't make the device tamper-resistant, use a device that has a good defense against physical attackers, like iOS.
4. Probably you are not that important anyway that anyone will spend time and resources on you. If they do, probably you will only make your life miserable with all the hardening, but still, get pwned.

Network traffic Man-in-the-middle attacked

1. Don't bring any device with you.
2. Use services that are protected against MiTM. Like TLS.
3. Update your OS to the latest and greatest versions. Not everyone at DEF CON has a 0dayz worth of 100K USD, and even the ones who have won't waste it on you. 
4. Use fail-safe VPN. Unfortunately, not many people talk about this or have proper solutions for the most popular operating systems.
5. For specific attacks like Responder, disable LLMNR, NBT-NS, WPAD, and IPv6 and use a non-work account on the machine. If you don't have the privileges to do so on your machine, you probably should not bring this device with you. Or ask your local IT to disable these services and set up a new account for you.

Pwning the device via some nasty thing like WiFi/TCP/Bluetooth/LTE/3G/GSM stack

1. Don't bring any device with you.
2. If you bring any, do not use this device to log in to work, personal email, social media, etc.
3. Don't worry, these things don't happen very often. 

Pwning your device by pwning a service on your device

Just set up a firewall profile where all services are hidden from the outside. You rarely need any service accessible on your device at a hacker conference.

Conclusion

If you are still so afraid to go there, just don't go there. Watch the talks at home. But how is the hotel WiFi at a random place different from a hacker conference? Turns out, it is not much different, so you better spend time and resources on hardening your daily work devices for 365 days, instead of building a "burner device".

You probably need a "burner device" if you are a spy for a foreign government. Or you are the head of a criminal organization. Otherwise, you don't need a burner device. Maybe you need to bring a cheap replacement device.
Read more
  1. Hacking Tools For Mac
  2. Pentest Tools Review
  3. Hacker Tools Apk
  4. Pentest Tools Github
  5. Easy Hack Tools
  6. Pentest Tools Find Subdomains
  7. Hacker Security Tools
  8. Android Hack Tools Github
  9. Pentest Recon Tools
  10. Hacking Tools Hardware
  11. Hack Tools For Games
  12. Pentest Tools Bluekeep
  13. Pentest Tools Website Vulnerability
  14. Hacking Tools Download
  15. Beginner Hacker Tools
  16. Pentest Tools For Mac
  17. Physical Pentest Tools
  18. What Are Hacking Tools
  19. How To Hack
  20. World No 1 Hacker Software
  21. Hacker Tools Mac
  22. Hacking Tools For Windows Free Download
  23. Pentest Tools Android
  24. Hacking Tools
  25. Hacking Tools Kit
  26. Hak5 Tools
  27. Hacker Tools Hardware
  28. World No 1 Hacker Software
  29. Hack Tool Apk
  30. Hack Tools Online
  31. Hacker Hardware Tools
  32. Tools Used For Hacking
  33. Install Pentest Tools Ubuntu
  34. Hacker Tools For Mac
  35. Black Hat Hacker Tools
  36. Hack Tools Download
  37. Hacker Tools 2020
  38. Hack Tools For Pc
  39. Pentest Tools Website
  40. Pentest Tools Linux
  41. Pentest Tools Apk
  42. Pentest Tools Bluekeep
  43. Pentest Tools Port Scanner
  44. Black Hat Hacker Tools
  45. Hack Tools
  46. Hacks And Tools
  47. Hack Tools
  48. Hack Tools 2019
  49. Hacker Search Tools
  50. Hack Tool Apk
  51. Tools Used For Hacking
  52. Hacker Tools For Windows
  53. Nsa Hack Tools
  54. Easy Hack Tools
  55. Hacking Tools 2019
  56. Kik Hack Tools
  57. Hacking Tools Mac
  58. Hack Tools
  59. Hack Tools Github
  60. Pentest Tools Android
  61. Hacking Tools Pc
  62. How To Make Hacking Tools
  63. Hacking Tools Github
  64. Hack Tools For Windows
  65. Hacker Tools Windows
  66. Pentest Tools Online
  67. Hacking Tools Software
  68. Hacker Tools Linux
  69. Pentest Tools Bluekeep
  70. Pentest Tools Kali Linux
  71. Hack Tools For Mac
  72. Hacker Tools For Ios
  73. Pentest Tools Windows
  74. Wifi Hacker Tools For Windows
  75. Pentest Tools Port Scanner
  76. Pentest Tools For Android
  77. Hackers Toolbox
  78. Hack App
  79. Hacking Tools For Windows 7
  80. Hacker Tools Windows
  81. Pentest Tools Bluekeep
  82. Hack Tools For Ubuntu
  83. Blackhat Hacker Tools
  84. Nsa Hacker Tools
  85. Pentest Tools For Ubuntu
  86. Hacking Tools For Games
  87. Pentest Tools Url Fuzzer
  88. Nsa Hacker Tools
  89. Tools For Hacker
  90. Hacker Tools Software
  91. Hacker Techniques Tools And Incident Handling
  92. Hacking Tools For Beginners
  93. Wifi Hacker Tools For Windows
  94. Pentest Recon Tools
  95. Beginner Hacker Tools
  96. Growth Hacker Tools
  97. Usb Pentest Tools
  98. Hacking Tools Pc
  99. Hacking Tools Pc
  100. Pentest Tools Linux
  101. Hacker Tools Software
  102. Nsa Hack Tools
  103. Hack Apps
  104. Hacker Tools For Mac
  105. Hack Website Online Tool
  106. Pentest Tools Url Fuzzer
  107. Hack And Tools
  108. Pentest Tools Find Subdomains
  109. Hack And Tools
  110. Hacking Tools Pc
  111. Hacking Tools Github
  112. Hacking Tools Kit
  113. Pentest Tools Android
  114. Pentest Tools Website
  115. Hacker Tool Kit
  116. Hacking Tools Windows 10
  117. New Hack Tools
  118. Hack Tools For Windows
  119. Bluetooth Hacking Tools Kali
  120. Hack Tools For Games
  121. Black Hat Hacker Tools
  122. Pentest Tools Linux
  123. Hacker Tools Free Download
  124. Hack Tools
  125. Free Pentest Tools For Windows
  126. Pentest Tools Tcp Port Scanner
  127. Hacking Tools For Windows 7
  128. Usb Pentest Tools
  129. Hack Tools
  130. Hacking Tools Pc
  131. Hacker Tools Mac
  132. Hack Tools For Games
  133. Pentest Tools For Ubuntu
  134. Pentest Tools Review
  135. Game Hacking
  136. Hacker Tools Free Download
  137. Hacking Tools Software
  138. Hacker Tools
  139. Pentest Tools Download
  140. Hacker Tools Windows
  141. What Is Hacking Tools
  142. Pentest Tools Linux
  143. Pentest Tools Free
  144. Hacker Tools Apk
  145. Hacking Tools Name
  146. Pentest Box Tools Download
  147. Hack Tools
  148. Pentest Tools Github
  149. Pentest Tools Kali Linux
  150. Hacking Apps
  151. Pentest Tools For Android
  152. Hacker Tools Software
  153. Pentest Tools Windows
  154. Hack Tools For Pc
  155. Pentest Tools For Windows

No comments:

Post a Comment