Accountability without accountabilityAccountability without Accountability @willscott ACM IMC 2018...

20
Accountability without accountability A censorship measurement case study @willscott Defcon Ethics Village

Transcript of Accountability without accountabilityAccountability without Accountability @willscott ACM IMC 2018...

Page 1: Accountability without accountabilityAccountability without Accountability @willscott ACM IMC 2018 Oct 31 - Nov 2, 2018 Boston, MA, USA PAM 2018 Home Program Papers Venue Organizer

Accountability without accountability

A censorship measurement case study @willscott

Defcon Ethics Village

Page 2: Accountability without accountabilityAccountability without Accountability @willscott ACM IMC 2018 Oct 31 - Nov 2, 2018 Boston, MA, USA PAM 2018 Home Program Papers Venue Organizer

Bio

● Grad school @ University of Washington

● Postdoc @ University of Michigan

● NextGen Scholar @ CSIS

Page 3: Accountability without accountabilityAccountability without Accountability @willscott ACM IMC 2018 Oct 31 - Nov 2, 2018 Boston, MA, USA PAM 2018 Home Program Papers Venue Organizer

Network Measurement

Page 4: Accountability without accountabilityAccountability without Accountability @willscott ACM IMC 2018 Oct 31 - Nov 2, 2018 Boston, MA, USA PAM 2018 Home Program Papers Venue Organizer

Measuring Censorship

Page 5: Accountability without accountabilityAccountability without Accountability @willscott ACM IMC 2018 Oct 31 - Nov 2, 2018 Boston, MA, USA PAM 2018 Home Program Papers Venue Organizer

Measuring Censorship

Page 6: Accountability without accountabilityAccountability without Accountability @willscott ACM IMC 2018 Oct 31 - Nov 2, 2018 Boston, MA, USA PAM 2018 Home Program Papers Venue Organizer

Ethics

Page 7: Accountability without accountabilityAccountability without Accountability @willscott ACM IMC 2018 Oct 31 - Nov 2, 2018 Boston, MA, USA PAM 2018 Home Program Papers Venue Organizer

Encore

Sigcomm 2015

Page 8: Accountability without accountabilityAccountability without Accountability @willscott ACM IMC 2018 Oct 31 - Nov 2, 2018 Boston, MA, USA PAM 2018 Home Program Papers Venue Organizer

Encore

Sigcomm 2015

Page 9: Accountability without accountabilityAccountability without Accountability @willscott ACM IMC 2018 Oct 31 - Nov 2, 2018 Boston, MA, USA PAM 2018 Home Program Papers Venue Organizer

Encore

Sigcomm 2015

Page 10: Accountability without accountabilityAccountability without Accountability @willscott ACM IMC 2018 Oct 31 - Nov 2, 2018 Boston, MA, USA PAM 2018 Home Program Papers Venue Organizer

Institutional Review Board

Page 11: Accountability without accountabilityAccountability without Accountability @willscott ACM IMC 2018 Oct 31 - Nov 2, 2018 Boston, MA, USA PAM 2018 Home Program Papers Venue Organizer

Encore

Sigcomm 2015

Page 12: Accountability without accountabilityAccountability without Accountability @willscott ACM IMC 2018 Oct 31 - Nov 2, 2018 Boston, MA, USA PAM 2018 Home Program Papers Venue Organizer

Menlo Report

Page 13: Accountability without accountabilityAccountability without Accountability @willscott ACM IMC 2018 Oct 31 - Nov 2, 2018 Boston, MA, USA PAM 2018 Home Program Papers Venue Organizer

Scanning

https://zmap.io/paper.pdf

Page 14: Accountability without accountabilityAccountability without Accountability @willscott ACM IMC 2018 Oct 31 - Nov 2, 2018 Boston, MA, USA PAM 2018 Home Program Papers Venue Organizer

DNS

Satellite '16 (250,000 servers) Iris '17 (8,000 servers)

Page 15: Accountability without accountabilityAccountability without Accountability @willscott ACM IMC 2018 Oct 31 - Nov 2, 2018 Boston, MA, USA PAM 2018 Home Program Papers Venue Organizer

Commercial Scanning

● Shodan.io

● Rapid7

● Censys

Page 16: Accountability without accountabilityAccountability without Accountability @willscott ACM IMC 2018 Oct 31 - Nov 2, 2018 Boston, MA, USA PAM 2018 Home Program Papers Venue Organizer

The Core Ethical Questions

What responsibility comes with our privilege?

How likely is the potential for harm users are exposed to?

How much value is gained by the increased transparency?

Page 17: Accountability without accountabilityAccountability without Accountability @willscott ACM IMC 2018 Oct 31 - Nov 2, 2018 Boston, MA, USA PAM 2018 Home Program Papers Venue Organizer

Ethics

https://arrestedlawyers.org/2018/01/21/ever-changing-evidence-bylock/

Page 18: Accountability without accountabilityAccountability without Accountability @willscott ACM IMC 2018 Oct 31 - Nov 2, 2018 Boston, MA, USA PAM 2018 Home Program Papers Venue Organizer

Today

Echo (USENIX Security '18)

Page 19: Accountability without accountabilityAccountability without Accountability @willscott ACM IMC 2018 Oct 31 - Nov 2, 2018 Boston, MA, USA PAM 2018 Home Program Papers Venue Organizer

Remedies

● Blending in to the "background noise"

● Limiting Netflow records between end-users and sensitive content

● "Sub-prime" repackaging

Page 20: Accountability without accountabilityAccountability without Accountability @willscott ACM IMC 2018 Oct 31 - Nov 2, 2018 Boston, MA, USA PAM 2018 Home Program Papers Venue Organizer

Accountability without Accountability

@willscott