It Awareness Raspberry Pi Shellshock Heartbleed Internet of Everything

7/23/2019 It Awareness Raspberry Pi Shellshock Heartbleed Internet of Everything

http://slidepdf.com/reader/full/it-awareness-raspberry-pi-shellshock-heartbleed-internet-of-everything 1/10

- Mrunal - http://mrunal.org -

[GS3] IT-awareness: Raspberry Pi, Shellshock, Heartbleed, Internet-o-!"erythin#, $acebook Saetycheck % &ore

Posted By Mrunal On 08/11/2014 @ 8:00 pm In Technology !" #omments

1$ Prologue

2$ Security: Heartbleed bug

!$ Security: Bash / Shellshock bug

4$ Security: IoE-Internet of Everything

"$ Security: Vishing- Voice Phishing

%$ Security: C!"

&$ Chi#: $as#berry Pi

8$ Chi#: Syste% on Chi# &SoC'

'$ Soc(Service: )acebook*s Internet +rones

10$ Soc(Service: )acebook Safety Check ,##

11$Soc(Service: oogle I"I,

12$ Soc(Service: Saransh tool by CBSE

Prolo#'e

• #ollect(on o) IT related top(cs )rom *ept$ to +o, -ee.1 (n (ndu$

•

ele,ance: Ma(ns *! 3areness (n the )(eld o) IT$

• I 5el(e,e ma6(mum 7au.aat o) any o) these top(cs 9 100 ords uest(on$ ence

not go(ng ,ery deep$

Sec'rity: Heartbleed b'#

http://mrunal.org/2014/11/gs3-it-awareness-raspberry-pi-shellshock-heartbleed-internet-of-everything.html/print/#comments_controls

http://mrunal.org/2014/11/gs3-it-awareness-raspberry-pi-shellshock-heartbleed-internet-of-everything.html/print/#1
























http://mrunal.org/2014/11/gs3-it-awareness-raspberry-pi-shellshock-heartbleed-internet-of-everything.html/print/#comments_controls



eart5leed 5ug Mechan(sm

• When? eported (n 3pr(l 2014

• Open**;: Open *ecure *oc.ets ;ayer (s a secur(ty standard encrypt(ng

commun(cat(ons 5eteen user and ser,er$

• Open**; sends 7s(gnal )rom user computer to se,er< at regular (nter,al< to

ensure that ser,er (s onl(ne$ Th(s mechan(sm (s called 7eart5eat$

• But there as a cod(ngm(sta.e (n (t$ ac.er could send a 7mal(c(ous heart5eat=s(gnal> to ser,er< and ser,er ould responds 5ac. 5y send(ng h(m yourusername< passord and other sens(t(,e (n)ormat(on$

• ence called 7heart5leed 5ug$

• Solution : ser,ers need to patch the(r open**; system and users need to change

the(r passords$

• Danger level: eart5leed 5ug cons(dered less dangerous than *hellshoc. 5ug<

5ecause (t allos hac.ers to only ?spy on the data trans)er 5eteen user andser,er$5ut he cannot control the users system$



Sec'rity: (ash ) Shellshock b'#

• When? eported (n *eptem5er 2014

• ;(nu6< 3ndro(d and MacO* are An(6 5ased operat(ng systems$

•Bash (s a shellcommand so)tare (n An(6 computers and ser,ers$

• As(ng a secur(ty ,ulnera5(l(ty (n th(s so)tare< hac.er can control ent(re system$

• Solution: #ompan(es ha,e released so)tare patches 5ut e6perts 5el(e,e theyre

(ncomplete$

Why Shellshock more dangerous than Heartbleed?

• oesnt reu(re pro)ess(onal hac.(ng e6pert(se$ C,en a 7scr(pt.(dd(e can copy

paste a )e codes and hac. the system ,(a (nternet$

• 3ny (nternet connected de,(ce (s ,ulnera5le e,en the l(nu6 system used (n cars<

cameras< andro(d phones< (phones and e,en the asp5erry P($

• As(ng ear5leed< hac.er could only 7spy on your computer 5ut he couldnot

7control your system$ But shellshoc. perm(ts 5oth spy(ng and systemcontrol$ *o<hac.er can e,en comm(t 7)(rst onl(ne murder ,(a 7(nternet o) e,eryth(ng$

Sec'rity: Io!-Internet o !"erythin#

• 3t present< -e are l(,(ng (n 7Internet o) Th(ngs$ But ''D o) the th(ngs are not

connected to Internet$

• #I*#O research pred(cts 5y 2020< ell e,ol,e to ne6t stage7Internet o)

e,eryth(ng =IoC>$

• IoC concept: As(ng m(cro sensors and (nternet< e,eryday o5Eects (ll 5ecome

connected and (ntell(gent$

• For e6ample l(ghts< 3(rcond(t(ons< doorloc.s< eara5le heart mon(tors that are

controlled ,(a (nternet$

But hackers can misuse such technology

2007Ex-US Vice President Dick Cheney asked doctors to disale !"ireless# $acility in his

%acemaker& 'e $eared terrorists could hack and sto% the %ace-maker to assassinate him&

20()*+ct

• EU,s cyercrime centre says $irst online murder can ha%%en y 20() end&

•

aster internet* cloud com%uting* gadgets that store your time and location in$ormation-all these things "ill hel% in %er$ect murder&



• Directly: ,(a hac.(ng Pacema.ers< (nsul(n pumps< hosp(tal ,ent(lators etc$

• ndirectly: ,(a spy(ng on your personal data or )ram(ng you )or a

cy5ercr(me9Ge6tort(on 9Gsu(c(de$

Sec'rity: *ishin#- *oice Phishin#

• When? o(ng on s(nce a long t(me 5ut (ndu column (n Oct 2014$

• H(sh(ng means Ho(ce Ph(sh(ng$ In ph(sh(ng: youre m(sd(rected to a )a.e 5an.

e5s(te$ In H(sh(ng: youre m(sd(rected to a )a.e helpl(ne$ Modus Operand( (s)ollo(ng:

• Fraudster o5ta(ns your pro)(le p(cture< date o) 5(rth< educat(on< res(dent(al

(n)ormat(on )rom your soc(al med(a pro)(le$

• e call you cla(m(ng 7Im )rom 5an.$ I need to ,er()y your deta(ls$ e ment(onsyour oB< educat(on etc$ to ga(n trust$

• Then he says 7there (s a secur(ty pro5lem< your account (s deact(,ated 5ecause o)

unauthor(ed transact(on< please call the call th(s 6y emergency num5er$

• But he has created a )a.e helpl(ne num5er< (th automated ,o(ce messages$

#ustomer 5el(e,es (t to 5e authent(c 5an. helpl(nes< and g(,es cred(t card PI+<#HHJ net5an.(ng username< passord etc$

• 3nother tr(c. he says you,e on (phone 5ut need to trans)er 6y sum to 6y

account as cour(er charges$

Sec'rity: +.

• #on)(nement (th Or(g(n -e5 ;a5els =#O-;> launched (n 2014< Octo5er$

• -or.s (th Mo(llas F(re)o6 oogles #hrome e5 5rosers$

!es but "hat#s its $unction?

• +oadays< e5s(te aggregate content )rom mult(ple s(tes and d(splay (n)ormat(on$

For e6ample< a 5logpage (th em5edded youtu5e ,(deo and p(casa/)l(c.rsl(desho$

• ac.ers des(gn such (nnocent loo.(ng e5pages (th mal(c(ous Ka,a*cr(pt code

h(dden (n them$

• #O-; con)(nes the Ka,a*cr(pt only to the g(,en 5roser ta5 and pre,ents

mal(c(ous codes )rom (n)ormat(on to unauthor(sed th(rd party e5s(te$

+hip: Raspberry Pi



asp5erry P( compuer

.hen/his de1ice launched in 20(2 ut making ne"s again in 'indu Se%temer 20()& henceim%ortant&

.ho/ U ased 3as%erry Pi $oundation&

.hat/

• 4 credit-card si5ed chi%&

• .eighs less than 60 grams&

• Plug it in your V* attach a keyoard and it can do e1erything that a deskto% PC can

do- "ork on s%readsheet* "ord-%ressing* %lay 'D 1ideos u%to Blueray

CPU

• 700 8h5 CPU chi% similar to moile %hones&

• Doesn,t re9uire se%arate CPU-heat$an or 4ir-conditioned en1ironment like a regular

PC&

• 'ence energy consum%tion 1ery lo"&

8ax 6(2 8B



348

Storage : to ;2<B SD cards&

+S

• cannot run 8icroso$t .indo"s or 4ndroid +%erating system ecause o$ lo" memory&

• can linux ased o%erating systems such as Pidora and 3as%ian&

Cost

• 26-;6= de%ending on model&

• )0 lakh %ieces sold so $ar

• Theyre Plann(ng to add touchscreen to (t ne6t year to ma.e a d(rt cheap ta5let$

• -(ll help 5r(ng(ng don d(g(tal d(,(de (n *outh 3s(an and 3)r(can countr(es$

• ;ot more can 5e r(tten a5out (ts potent(al uses< 5ut ma6$ au.aat o) such gadget

top(c (s 100 ords$ For that< a5o,e content su))(c(ent$

+hip: Syste& on +hip /So+0

.hen/ Been in ne"s since 20(0-((& But again a%%eared in 'indu >o1 20()& 'ence im%ortant&

.ho/ D3D+- De$ence 3esearch ? De1elo%ment +rganisation

.hat/

• miniaturised emedded com%uter on a chi%&

•or missiles* drones* air%lanes and shi%s&

%urpose

• 3t present< m(ss(les ha,e on5oard computer =OB#>$

• -(th separate components l(.e #PA< memory< IOde,(ces e(ght(ng L4" .(los$

• Together< they launch and gu(de the m(ss(le toards (ts d(rect(on$

+o< O com5(ned all those components (nto a s(ngle ch(p called 7*ystem on #h(p=*o#>$ &ene$its o$ So'?

• Process(ng speed (ncreased 5y %& t(mes$

• "0D cheaper (n cost$

• ardly 200 gms e(ght$ Means more space )or )uel and arheads$

• educed poer consumpt(on$

• -(ll 5e used (n 3stra m(ss(le =3(r to 3(r>< TeEas< M(g2' and *u!0 MI$



• *o# (s not a completely ne (n,ent(on$ A*3< Israel< #h(na already ha,e such

ch(ps$ But th(s one (s (nd(genously de,eloped (n Ind(a9 Eust l(.e +(r5hay e got7e6per(ence 5u(ld(ng< (ll help (n )uture (n,ent(ons< (ll ma.e us sel)rel(ant$

Soc1Ser"ice: $acebook2s Internet rones

•

Today only 1/!rd o) orld populat(on has (nternet connect(,(ty$

• Mar. Nuc.er5erg and (nternet$org a(m to pro,(de a))orda5le (nternet to rema(n(ng

2/!rd o) orld populat(on$

• They plan to launch Internetcarry(ng solarpoered drones 5y 201"$

• Theyll 5eam (reless (nternet us(ng laser$ Thus those drones (ll act as ?()(

hotspots$

• *(e: 5(g as Boe(ng &4& commerc(al a(rcra)t$

'hallenges in regulation:

• These drones (ll ha,e to )ly a5o,e eather at %"<000 )eet$ But no (nternat(onal

regulat(ons e6(st )or that range$

• Present rule (s 7One p(lot per plane$ +eed ne rules to perm(t 1 =ground 5ased>

p(lot/operator to manage mult(ple drones$

'ompetition $rom google:

• oogle already acu(red T(tan 3erospace start company ma.(ng such solar

poered drones$ Face5oo. had to 5uy another Br(t(sh company$

• oogle already or.(ng on 7ProEect ;oon to g(,e net connect(,(ty ,(a 5alloons (n

stratosphere$ 3lthough )ace5oo. 5rags that drones tougher and longlast(ng than5allons$

Soc1Ser"ice: $acebook Saety +heck 4pp



Face5oo. *a)ety app )or (saster Management

• 2011: Kapan Tsunam(< Face5oo. had created a separate message 5oard to help

Kapanese mem5ers tell the(r )r(ends theyre o.$

• 2014< Oct: Based on that model< Face5oo. launched the 7*a)ety chec. app

• ur(ng an earthua.e and other d(sasters< user can t(c. 7Im o. or Im not (n thearea$ Aser can also mar. h(s )r(ends as ?sa)e$

• (s )r(ends (ll 5e not()(ed< so they can stop orry(ng$

• -(ll 5ene)(t )ace5oo.s 1$! 5(ll(on users

• -(ll or. e,en on 5as(c phones (n th(rd orld countr(es$

Soc1Ser"ice: Goo#le I.I4

.hen/ >o1 20()

.hat/ @ndian Aanguage @nternet alliance @A@4

.ho/ <oogle* CD4C* >DV* >et"ork ( ? other content %ro1iders&

+ecti1e/

• Ser1e digital content in local language- "esites* a%%s* 1ideos and logs&

• o ;00 million @ndians

• DeadlineF 20(7

But hy



• L200 m(ll(on Ind(ans .no Cngl(sh$

• " m(ll(on net users added e,ery months< Most o) them ,(a mo5(le de,(ces and

dont .no Cngl(sh$

• oogle has (mplemented ,o(ce search (n (nd(< and launched a

e5s(te< ...(hindi.eb(co%< to help users get (nd( e5pages$

Soc1Ser"ice: Saransh tool by +(S!

*aransh #B*C tool )or #lass' to 12school student per)ormance

• #B*C: central 5oard o) secondary educat(on$

• *(nce 200' they ere conduct(ng to tests on class ' to 12 students$

o #ont(nuous and #omprehens(,e e,aluat(on =##C>

o Pro5lem *ol,(ng 3ssessments =P*3>$

• +o those stat(st(cs loaded (nto #B*Cs Onl(ne tool 7*aransh$ =2014< +o,em5er>

• 3t present< only teachers g(,en username and passords$ ;ater )ac(l(ty (ll 5e

g(,en to parents as ell$ *o they can chec. per)ormance o) the(r .(ds and e,endec(de h(ch school (s 5etter )or adm(ss(on$

• *chools can compare per)ormance o) the(r students at state< reg(onal and all Ind(a

le,el$ 3nd ma.e correct(,e steps accord(ngly$

http://www.hindiweb.com/

http://www.hindiweb.com/



3rt(cle pr(nted )rom Mrunal: http://mrunal.org

A; to art(cle: http://mrunal.org/()*+/**/gs,-it-a"areness-raspberry-pi-shellshock-heartbleed-internet-o$-everything.html

#l(c. here to pr(nt$

#opyr(ght Q 2014 Mrunal$ 3ll r(ghts reser,ed$

http://mrunal.org/2014/11/gs3-it-awareness-raspberry-pi-shellshock-heartbleed-internet-of-everything.html/print/#Print

http://mrunal.org/2014/11/gs3-it-awareness-raspberry-pi-shellshock-heartbleed-internet-of-everything.html/print/#Print

Documents

It Awareness Raspberry Pi Shellshock Heartbleed Internet of Everything