SPORTS RELATED PHYSICAL THERAPY Ashley Madison 9/14 Sports Related Physical Therapy.
In The Wake of Ashley Madison - JRS Systems LLC · In The Wake of Ashley Madison information...
Transcript of In The Wake of Ashley Madison - JRS Systems LLC · In The Wake of Ashley Madison information...
![Page 1: In The Wake of Ashley Madison - JRS Systems LLC · In The Wake of Ashley Madison information security lessons (hopefully) learned This presentation is licensed under a Creative Commons](https://reader034.fdocuments.us/reader034/viewer/2022043023/5f3ed7c9643f956eea1d5bc3/html5/thumbnails/1.jpg)
In The Wake of Ashley Madisoninformation security lessons (hopefully) learned
This presentation is licensed under a Creative Commons Attribution-NonCommercial-ShareAlike 3.0 Unported License.(C) 2015 [email protected]
Jim SalterMercenary Sysadmin,Small Business Owner
Today's slides can be found at:
http://openoid.net/presentations/
![Page 2: In The Wake of Ashley Madison - JRS Systems LLC · In The Wake of Ashley Madison information security lessons (hopefully) learned This presentation is licensed under a Creative Commons](https://reader034.fdocuments.us/reader034/viewer/2022043023/5f3ed7c9643f956eea1d5bc3/html5/thumbnails/2.jpg)
The promise of Ashley Madison
![Page 3: In The Wake of Ashley Madison - JRS Systems LLC · In The Wake of Ashley Madison information security lessons (hopefully) learned This presentation is licensed under a Creative Commons](https://reader034.fdocuments.us/reader034/viewer/2022043023/5f3ed7c9643f956eea1d5bc3/html5/thumbnails/3.jpg)
The reality of Ashley Madison
![Page 4: In The Wake of Ashley Madison - JRS Systems LLC · In The Wake of Ashley Madison information security lessons (hopefully) learned This presentation is licensed under a Creative Commons](https://reader034.fdocuments.us/reader034/viewer/2022043023/5f3ed7c9643f956eea1d5bc3/html5/thumbnails/4.jpg)
This talk is not about ethics in adultery.
(or in video game journalism)
![Page 5: In The Wake of Ashley Madison - JRS Systems LLC · In The Wake of Ashley Madison information security lessons (hopefully) learned This presentation is licensed under a Creative Commons](https://reader034.fdocuments.us/reader034/viewer/2022043023/5f3ed7c9643f956eea1d5bc3/html5/thumbnails/5.jpg)
I will never knowingly “out” anyone.
![Page 6: In The Wake of Ashley Madison - JRS Systems LLC · In The Wake of Ashley Madison information security lessons (hopefully) learned This presentation is licensed under a Creative Commons](https://reader034.fdocuments.us/reader034/viewer/2022043023/5f3ed7c9643f956eea1d5bc3/html5/thumbnails/6.jpg)
How'd I get involved?
![Page 7: In The Wake of Ashley Madison - JRS Systems LLC · In The Wake of Ashley Madison information security lessons (hopefully) learned This presentation is licensed under a Creative Commons](https://reader034.fdocuments.us/reader034/viewer/2022043023/5f3ed7c9643f956eea1d5bc3/html5/thumbnails/7.jpg)
SC / GA citizens spent > $9.96M on Ashley Madison, 2008-2015.US top spender: >$130KGA top spender: > $30KSC top spender: > $11K
1,127 SC/GA citizensspent >= $1K !
![Page 8: In The Wake of Ashley Madison - JRS Systems LLC · In The Wake of Ashley Madison information security lessons (hopefully) learned This presentation is licensed under a Creative Commons](https://reader034.fdocuments.us/reader034/viewer/2022043023/5f3ed7c9643f956eea1d5bc3/html5/thumbnails/8.jpg)
13,038 SC / 30,647 GA citizens spent money on Ashley Madison.
That's about 3 out of every thousand people in either
state.
![Page 9: In The Wake of Ashley Madison - JRS Systems LLC · In The Wake of Ashley Madison information security lessons (hopefully) learned This presentation is licensed under a Creative Commons](https://reader034.fdocuments.us/reader034/viewer/2022043023/5f3ed7c9643f956eea1d5bc3/html5/thumbnails/9.jpg)
About 92.5% of them were men.
That's about 5.1 out of every thousand men in SC or GA.
![Page 10: In The Wake of Ashley Madison - JRS Systems LLC · In The Wake of Ashley Madison information security lessons (hopefully) learned This presentation is licensed under a Creative Commons](https://reader034.fdocuments.us/reader034/viewer/2022043023/5f3ed7c9643f956eea1d5bc3/html5/thumbnails/10.jpg)
About 75% of them were men age 25-55.
That's about 1.1 out of every hundred men in SC or GA,
age 25-55.
![Page 11: In The Wake of Ashley Madison - JRS Systems LLC · In The Wake of Ashley Madison information security lessons (hopefully) learned This presentation is licensed under a Creative Commons](https://reader034.fdocuments.us/reader034/viewer/2022043023/5f3ed7c9643f956eea1d5bc3/html5/thumbnails/11.jpg)
It's worse in cities.%males 25-55 paid, SC/GA cities >80k pop:
(city population data taken from http://www.suburbanstats.org)
Roswell GA: 3.3%Atlanta GA: 2.4%
Columbia SC: 2.2%Charleston SC: 1.8%
Augusta GA: 1.8%Athens GA: 0.8%
N. Charleston SC: 0.5%
![Page 12: In The Wake of Ashley Madison - JRS Systems LLC · In The Wake of Ashley Madison information security lessons (hopefully) learned This presentation is licensed under a Creative Commons](https://reader034.fdocuments.us/reader034/viewer/2022043023/5f3ed7c9643f956eea1d5bc3/html5/thumbnails/12.jpg)
“Bedroom” communities?%males 25-55 paid, SC/GA towns >10k pop:
(city population data taken from http://www.suburbanstats.org)
Buford GA: 14.8%Suwanee GA: 13.4%
Marietta GA: 11.5%Lawrenceville GA: 11.5%
Fort Mill SC: 10.2%Woodstock GA: 10.0%
Acworth GA: 9.8%Loganvilla GA: 9.7%Alpharetta GA: 9.7%
Canton GA: 8.9%
![Page 13: In The Wake of Ashley Madison - JRS Systems LLC · In The Wake of Ashley Madison information security lessons (hopefully) learned This presentation is licensed under a Creative Commons](https://reader034.fdocuments.us/reader034/viewer/2022043023/5f3ed7c9643f956eea1d5bc3/html5/thumbnails/13.jpg)
I am NOT making this up.File under “hilarious anomaly”.
This would imply 62.3% of males 25-55...
me@locutus:~/amdumps/work$ perl bypop.pl CUMMING
PERCAP, CITY, MEMBERS, POPULATION17.3%, CUMMING, 938, 5430
![Page 14: In The Wake of Ashley Madison - JRS Systems LLC · In The Wake of Ashley Madison information security lessons (hopefully) learned This presentation is licensed under a Creative Commons](https://reader034.fdocuments.us/reader034/viewer/2022043023/5f3ed7c9643f956eea1d5bc3/html5/thumbnails/14.jpg)
Every network will eventually fall.
SONY, Apple, AOL, Target, Gawker, IRS,
SC DoR, Twitter...
![Page 15: In The Wake of Ashley Madison - JRS Systems LLC · In The Wake of Ashley Madison information security lessons (hopefully) learned This presentation is licensed under a Creative Commons](https://reader034.fdocuments.us/reader034/viewer/2022043023/5f3ed7c9643f956eea1d5bc3/html5/thumbnails/15.jpg)
What made theAshley Madison breach special?
RISK.
![Page 16: In The Wake of Ashley Madison - JRS Systems LLC · In The Wake of Ashley Madison information security lessons (hopefully) learned This presentation is licensed under a Creative Commons](https://reader034.fdocuments.us/reader034/viewer/2022043023/5f3ed7c9643f956eea1d5bc3/html5/thumbnails/16.jpg)
Speaking of “risk”:let's talk about
netblocks.
Army Research OfficeNetRange: 132.193.0.0 - 132.193.255.255CIDR: 132.193.0.0/16NetName: ARO-NETNetHandle: NET-132-193-0-0-1Parent: NET132 (NET-132-0-0-0-0)NetType: Direct Assignment
![Page 17: In The Wake of Ashley Madison - JRS Systems LLC · In The Wake of Ashley Madison information security lessons (hopefully) learned This presentation is licensed under a Creative Commons](https://reader034.fdocuments.us/reader034/viewer/2022043023/5f3ed7c9643f956eea1d5bc3/html5/thumbnails/17.jpg)
Today's vocabulary word:
pivot
![Page 18: In The Wake of Ashley Madison - JRS Systems LLC · In The Wake of Ashley Madison information security lessons (hopefully) learned This presentation is licensed under a Creative Commons](https://reader034.fdocuments.us/reader034/viewer/2022043023/5f3ed7c9643f956eea1d5bc3/html5/thumbnails/18.jpg)
In a nutshell:
all sites will fall
think about exposure
where can theattacker go next?
![Page 19: In The Wake of Ashley Madison - JRS Systems LLC · In The Wake of Ashley Madison information security lessons (hopefully) learned This presentation is licensed under a Creative Commons](https://reader034.fdocuments.us/reader034/viewer/2022043023/5f3ed7c9643f956eea1d5bc3/html5/thumbnails/19.jpg)
Questions? Comments?
Angry denunciations?