CS 3710

Introduction to Cybersecurity

Aaron Bloomfield (aaron@virginia.edu)
@github | ↑ |

Daily Announcements

How Hacking Works

If only somebody had warned them that the world would roll them like this.

xkcd # 2176

Lecture 13: Thu, June 5th

Office hours are M-F 9:30-10:20, or by appointment
Items due soon
- Due yesterday: HW 5: SQL/XSS/CSRF; how did it go?
- Due today, Thursday, June 6th: Listen to NPR’s Planet Monday podcast episode 908: I Am Not A Robot
- Due early next week: HW 6: Cryptocurrency (it’s ready, but due date not yet set)
- The last homework, on Forensics, will be due the day of the final (next Saturday)
The midterm was last Friday, May 30th; regrades open until the end of this week
Gradescope submissions are open, and everything should be configured correctly
Today we will finish cryptocurrency and start on anonymity

Blockchain

xkcd # 2267

Lecture 12: Wed, June 4th

Office hours are M-F 9:30-10:20, or by appointment
Items due soon
- Due Wednesday, June 4th, by midnight: HW 5: SQL/XSS/CSRF
- Due Thursday, June 6th: Listen to NPR’s Planet Monday podcast episode 908: I Am Not A Robot
- Due next week: HW ???
The midterm was last Friday, May 30th; regrades open until the end of this week
Gradescope submissions are open, and everything should be configured correctly
Today we will start on cryptocurrency

Hacking

The dump also contains a list of millions of prime factors, a 0-day Tamagotchi exploit, and a technique for getting gcc and bash to execute arbitrary code.

xkcd # 1808

Lecture 11: Tue, June 3rd

Office hours are M-F 9:30-10:20, or by appointment
Items due soon
- Due Wednesday, June 4th, by midnight: HW 5: SQL/XSS/CSRF
- Due Thursday, June 6th: Listen to NPR’s Planet Monday podcast episode 908: I Am Not A Robot
- Due next week: HW ???
The midterm was last Friday, May 30th; regrades open until the end of this week
Gradescope submissions are open, and everything should be configured correctly
Today we will finish web security, then onto cryptocurrency

Encryption

WARNING: PEOPLE NAMED EVE ARE PROHIBITED FROM INSTALLING THIS APP!

xkcd # 2691

Lecture 10: Mon, June 2nd

Office hours are M-F 9:30-10:20, or by appointment
Items due soon
- Due yesterday (Sunday), by midnight: HW 4: Fuzzing
- Due Wednesday, June 4th, by midnight: HW 5: SQL/XSS/CSRF
- Due Thursday, June 6th: Listen to NPR’s Planet Monday podcast episode 908: I Am Not A Robot
The midterm was last Friday, May 30th, at the start of class; how did it go?
Gradescope submissions are open, and everything should be configured correctly
Today we will detour into SQL/XSS/CSRF and then finish web security

PGP

If you want to be extra safe, check that there's a big block of jumbled characters at the bottom.

xkcd # 1181

Lecture 8: Thu, May 29th

Office hours are M-F 9:30-10:20, or by appointment
Items due soon
- Due today by the start of class: watch Last Week Tonight with John Oliver: Data Brokers; it’s free on Youtube (possibly with a few ads)
- Due Saturday, May 31st, by midnight: HW 4: Fuzzing
The midterm is this Friday, May 30th, at the start of class
- Old miterms are in the repo on the exams page
Gradescope submissions are open, and everything should be configured correctly
- Fuzzing will open up later today
- Due next Wednesday: SQL/XSS/CSRF (not yet ready)
Today we will finish web security
- Then onto SQL/XSS/CSRF

Authorization

Before you say anything, no, I know not to leave my computer sitting out logged in to all my accounts. I have it set up so after a few minutes of inactivity it automatically switches to my brother's.

xkcd # 1200

Lecture 7: Wed, May 28th

Office hours are M-F 9:30-10:20, or by appointment
Items due soon
- Due yesterday: HW 3: RSA; how did it go?
- Due tomorrow, Thursday, May 29th by the start of class: watch Last Week Tonight with John Oliver: Data Brokers; it’s free on Youtube (possibly with a few ads)
- Due Saturday, May 31st, by midnight: HW 4: Fuzzing
The midterm is Friday, May 30th, at the start of class
- Old miterms are in the repo on the exams page
Gradescope submissions are open, and everything should be configured correctly
Today we will finish with networks and start web security

Bag Check

A laptop battery contains roughly the stored energy of a hand grenade, and if shorted it ... hey! You can't arrest me if I prove your rules inconsistent!

xkcd # 651

Lecture 6: Tue, May 27th

Office hours are M-F 9:30-10:20, or by appointment
Items due soon
- Due Tuesday, May 27th, by midnight: HW 3: RSA
- Due Thursday, May 29th by the start of class: watch Last Week Tonight with John Oliver: Data Brokers; it’s free on Youtube (possibly with a few ads)
- Due Saturday, May 31st, by midnight: HW 4: Fuzzing
The midterm is Friday, May 30th, at the start of class
- Old miterms are in the repo on the exams page
Gradescope submissions are open, and everything should be configured correctly
Everybody has to sign the Ethics Honor Pledge; the link is on the Canvas landing page
- We are missing 1…
Today we will finish with encryption
- Next up: networks and then web security

Smart Home Security

If they're getting valuable enough stuff from you, at least the organized crime folks have an incentive to issue regular updates to keep the appliance working after the manufacturer discontinues support.

xkcd # 1966

Lecture 5: Fri, May 23rd

Office hours are M-F 9:30-10:20, or by appointment
- But today they are right after class
Items due soon
- Today, Friday, 5/23: HW 2: Ethics
- Tuesday, 5/27: HW 3: RSA; we’ll go over it today
Gradescope submissions are open, and everything should be configured correctly
Everybody has to sign the Ethics Honor Pledge; the link is on the Canvas landing page
Today we will continue with encryption

Trolley Problem

For $5 I promise not to orchestrate this situation, and for $25 I promise not to take further advantage of this ability to create incentives.

xkcd # 1455

Lecture 4: Thu, May 22nd

Office hours are M-F 9:30-10:20, or by appointment
- But not tomorrow: those will be after class, not before
HW 1: Rational Paranoia was due yesterday – how did it go?
Items due soon
- Friday, 5/23: HW 2: Ethics
- Tuesday, 5/27: HW 3: RSA; we’ll go over it today
Gradescope submissions are open, and everything should be configured correctly
Everybody has to sign the Ethics Honor Pledge; the link is on the Canvas landing page
Today we will continue with encryption

Security Advice

Never give your password or bank account number to anyone who doesn't have a blue check mark next to their name.

xkcd # 1820

Lecture 3: Wed, May 21st

Office hours are M-F 9:30-10:20, or by appointment
Items due soon
- Today (Wednesday, 5/21) by the start of class: ACM Code of Ethics, Reflections on Trusting Trust, Morris Worm Wikipedia page
- Today (Wednesday, 5/21) by midnight: HW 1: Rational Paranoia
  - You have to follow the formatting guidelines described therein!
- Friday, 5/23: HW 2: Ethics
- Tuesday, 5/27: HW 3: RSA (not yet ready)
Gradescope submissions are open, and everything should be configured correctly
Everybody has to sign the Ethics Honor Pledge; the link is on the Canvas landing page
Today we will finish with ethics
- We will skip policy for now, and come back to it later
- Next up: encryption

Security Question

Let's invite him to a party and play 'I never'. Okay, I never hid any bodies SOUTH of Main Street. ... he's taking a drink!

xkcd # 565

Lecture 2: Tue, May 20th

Office hours are M-F 9:30-10:20, or by appointment
Items due soon
- Tomorrow (Wednesday, 5/21) by the start of class: ACM Code of Ethics, Reflections on Trusting Trust, Morris Worm Wikipedia page
- Tomorrow (Wednesday, 5/21) by midnight: HW 1: Rational Paranoia
  - You have to follow the formatting guidelines described therein!
  - Submission on Gradescope will open up shortly
- Friday, 5/23: HW 2: Ethics
Everybody has to sign the Ethics Honor Pledge; the link is on the Canvas landing page
Today we will finish with the terminology slide set, then onto ethics
- We may skip policy for now, as we have to get through encryption in time for HW 3

Expected summer term schedule

Week 1 (Mon, 5/19 - Fri, 5/23)
- Due Wed: reading (ACM ethics / Thompson article / Morris worm)
- Due Wed: HW 1 (rational paranoia)
- Due Fri: HW 2 (ethics)
Week 2 (Tue, 5/26 - Fri, 5/30)
- Due Tue: HW 3 (RSA)
- Due Thu: “reading” (Youtube video)
- On Friday: midterm
- Due Sat: HW 4 (fuzzing?)
Week 3 (Mon, 6/2 - Fri, 6/6)
- Due Wed: HW 5 (SQL/XSS/CSRF)
- Due Thu: “reading” (podcast)
Week 4 (Mon, 6/9 - Sat, 6/14)
- Due Mon: HW 6 (cryptocurrency?)
- Due Fri: HW 7 (forensics)
- On Sat: final exam