CS 3710

Introduction to Cybersecurity

Aaron Bloomfield (aaron@virginia.edu)
@github | ↑ |

Daily Announcements

Modern OSI Model

In retrospect, I shouldn't have used each layer of the OSI model as one of my horcruxes.

xkcd # 2105

Lecture 17: Thu, Oct 23rd

Office hours are ongoing, all listed on the Canvas landing page
- Prof. Bloomfield’s office hours are Mondays 11-12, Tuesdays 1-2, and Thursdays 2-3 in Rice 402
- TA office hours are all in Rice 442 and are Mondays 5-7 (Varun), Tuesdays 5-7 (Fiona), Wednesday 11-1 (Eddie), and Thursdays 12:30-2:30 (Matt)
- TA pictures linked to from the Canvas landing page
Midterm last week, was graded and returned; regrades open for a week or so
Homeworks
- HW 7: SQL/XSS/CSRF is due Sunday
- HW 8, on cryptocurrency, will be out after today
Readings:
- Due Thursday, October 30th: Listen to NPR’s Planet Monday podcast episode 908: I Am Not A Robot
Most past HWs graded in Gradescope; regrades only open for a limited amount of time
Everybody has to sign the Ethics Honor Pledge; the link is on the Canvas landing page
Today we will work through cryptocurrency

Hacking

The dump also contains a list of millions of prime factors, a 0-day Tamagotchi exploit, and a technique for getting gcc and bash to execute arbitrary code.

xkcd # 1808

Lecture 16: Tue, Oct 21st

Office hours are ongoing, all listed on the Canvas landing page
- Prof. Bloomfield’s office hours are Mondays 11-12, Tuesdays 1-2, and Thursdays 2-3 in Rice 402
- TA office hours are all in Rice 442 and are Mondays 5-7 (Varun), Tuesdays 5-7 (Fiona), Wednesday 11-1 (Eddie), and Thursdays 12:30-2:30 (Matt)
- TA pictures linked to from the Canvas landing page
Midterm last week, was graded and returned; regrades open for a week or so
Homeworks
- HW 5: Networks was due yesterday
- HW 6: Fuzzing was due yesterday
- HW 7: SQL/XSS/CSRF is due Sunday
Readings:
- Due Thursday, October 30th: Listen to NPR’s Planet Monday podcast episode 908: I Am Not A Robot
Most past HWs graded in Gradescope; regrades only open for a limited amount of time
Everybody has to sign the Ethics Honor Pledge; the link is on the Canvas landing page
Today we will finish anonymity and start on cryptocurrency

CIA

It was their main recruiting poster, hung nearly ten feet up a wall! This means the hackers have LADDER technology! Are we headed for a future where everyone has to pay $50 for one of those locked plexiglass poster covers? More after the break ...

xkcd # 932

Lecture 15: Thu, Oct 16th

Office hours are ongoing, all listed on the Canvas landing page
- Prof. Bloomfield’s office hours are Mondays 11-12, Tuesdays 1-2, and Thursdays 2-3 in Rice 402
- TA office hours are all in Rice 442 and are Mondays 5-7 (Varun), Tuesdays 5-7 (Fiona), Wednesday 11-1 (Eddie), and Thursdays 12:30-2:30 (Matt)
- TA pictures linked to from the Canvas landing page
Midterm last week, was graded and returned
- Average was a 36.8/48 (76.7%)
- We’ll go over it today, then regrades will be opened
Homeworks
- HW 5: Networks is due today
- HW 6: Fuzzing is due… today?
- HW 7: SQL/XSS/CSRF (not yet ready) will be due next Thursday, Oct 23
Readings: none currently assigned
Most past HWs graded in Gradescope; regrades only open for a limited amount of time
Everybody has to sign the Ethics Honor Pledge; the link is on the Canvas landing page
Today we will finish SQL, XSS, & CSRF and start on anonymity

Encryption

WARNING: PEOPLE NAMED EVE ARE PROHIBITED FROM INSTALLING THIS APP!

xkcd # 2691

Lecture 14: Tue, Oct 9th

Office hours are ongoing, all listed on the Canvas landing page
- Prof. Bloomfield’s office hours are Mondays 11-12, Tuesdays 1-2, and Thursdays 2-3 in Rice 402
- TA office hours are all in Rice 442 and are Mondays 5-7 (Varun), Tuesdays 5-7 (Fiona), Wednesday 11-1 (Eddie), and Thursdays 12:30-2:30 (Matt)
  - Note the Fri 11-1 has now moved to Wed 11-1
- No TA OH next Monday or Tuesday because of fall break
- I will not have OH today
- TA pictures linked to from the Canvas landing page
Midterm last week; we hopefully will have it graded by Thursday
- Currently 80% graded; we hope to have it back before Tuesday (SEAS drop date)
Homeworks
- HW 5: Networks is due today
- HW 6: Fuzzing is due next Thursday (Oct 16)
- HW 7: SQL/XSS/CSRF (not yet ready) will be due Oct 23
Readings: none currently assigned
Most past HWs graded in Gradescope; regrades only open for a limited amount of time
Everybody has to sign the Ethics Honor Pledge; the link is on the Canvas landing page
Today we will start on SQL, XSS, & CSRF

PGP

If you want to be extra safe, check that there's a big block of jumbled characters at the bottom.

xkcd # 1181

Lecture 13: Tue, Oct 7th

Office hours are ongoing, all listed on the Canvas landing page
- Prof. Bloomfield’s office hours are Mondays 11-12, Tuesdays 1-2, and Thursdays 2-3 in Rice 402
- TA office hours are all in Rice 442 and are Mondays 5-7 (Varun), Tuesdays 5-7 (Fiona), Wednesday 11-1 (Eddie), and Thursdays 12:30-2:30 (Matt)
  - Note the Fri 11-1 has now moved to Wed 11-1
- No OH next Monday or Tuesday because of fall break
- TA pictures linked to from the Canvas landing page
Midterm last week; we hopefully will have it graded by Thursday
- Currently 80% graded
Homeworks
- HW 5: Networks is due Thursday
- Next HW will Fuzzing (due 10/16) then SQL/XSS/CSRF (due 10/23)
Readings: none currently assigned
Most past HWs graded in Gradescope; regrades only open for a limited amount of time
Everybody has to sign the Ethics Honor Pledge; the link is on the Canvas landing page
Today we will finish with policy and then start on SQL, XSS, & CSRF

Code Talkers

As far as I can tell, Navajo doesn't have a common word for 'zero'. do-neh-lini means 'neutral'.

xkcd # 257

Lecture 11: Tue, Sep 30th

Office hours are ongoing, all listed on the Canvas landing page
- Prof. Bloomfield’s office hours are Mondays 11-12, Tuesdays 1-2, and Thursdays 2-3 in Rice 402
- TA office hours are all in Rice 442 and are Mondays 5-7 (Varun), Tuesdays 5-7 (Fiona), Wednesday 11-1 (Eddie), and Thursdays 12:30-2:30 (Matt)
  - Note the Fri 11-1 has now moved to Wed 11-1
  - TA pictures linked to from the Canvas landing page
Midterm is this week week!
- Past exams can be found on the past exams page
Homeworks
- HW 4: Hashing was due last week – how was it?
- Next HW will be Networks (to be posted soon), then Fuzzing
Readings:
- Due last week: watch Last Week Tonight with John Oliver: Data Brokers (25:09 long)
Most things are graded (paranoia, ethics, rsa), but we are working to ensure that the extensions and late penalties are computed properly before returning them. Expect them all within a week.
Everybody has to sign the Ethics Honor Pledge; the link is on the Canvas landing page
Today we will finish with web security and then return to policy

Authorization

Before you say anything, no, I know not to leave my computer sitting out logged in to all my accounts. I have it set up so after a few minutes of inactivity it automatically switches to my brother's.

xkcd # 1200

Lecture 10: Thu, Sep 25th

Office hours are ongoing, all listed on the Canvas landing page
- Prof. Bloomfield’s office hours are Mondays 11-12, Tuesdays 1-2, and Thursdays 2-3 in Rice 402
- TA office hours are all in Rice 442 and are Mondays 5-7 (Varun), Tuesdays 5-7 (Fiona), Wednesday 11-1 (Eddie), and Thursdays 12:30-2:30 (Matt)
  - Note the Fri 11-1 has now moved to Wed 11-1
  - TA pictures linked to from the Canvas landing page
Homeworks
- HW 4: Hashing is due tonight
- Next HW will be Networks (to be posted soon), then Fuzzing
Readings:
- Due today: watch Last Week Tonight with John Oliver: Data Brokers (25:09 long)
Most things are graded (paranoia, ethics, rsa), but we are working to ensure that the extensions and late penalties are computed properly before returning them. Expect them all within a week.
Midterm is, um, next week!
- Past exams can be found on the past exams page
Everybody has to sign the Ethics Honor Pledge; the link is on the Canvas landing page
Today we will continue with web security
- We’ll come back to policy later

Trolley Problem

For $5 I promise not to orchestrate this situation, and for $25 I promise not to take further advantage of this ability to create incentives.

xkcd # 1455

Lecture 9: Tue, Sep 23rd

Office hours are ongoing, all listed on the Canvas landing page
- Prof. Bloomfield’s office hours are Mondays 11-12, Tuesdays 1-2, and Thursdays 2-3 in Rice 402
- TA office hours are all in Rice 442 and are Mondays 5-7 (Varun), Tuesdays 5-7 (Fiona), Wednesday 11-1 (Eddie), and Thursdays 12:30-2:30 (Matt)
  - Note the Fri 11-1 has now moved to Wed 11-1
  - TA pictures linked to from the Canvas landing page
Homeworks
- HW 3: RSA was due last week – how was it?
- HW 4: Hashing is out, and due this Thursday
Readings:
- Due this Thu, Sep 25th: watch Last Week Tonight with John Oliver: Data Brokers (25:09 long)
Everybody has to sign the Ethics Honor Pledge; the link is on the Canvas landing page
Today we will finish networks and start web security
- We’ll come back to policy later

How Hacking Works

If only somebody had warned them that the world would roll them like this.

xkcd # 2176

Lecture 8: Thu, Sep 18th

Office hours are ongoing, all listed on the Canvas landing page
- Prof. Bloomfield’s office hours are Mondays 11-12, Tuesdays 1-2, and Thursdays 2-3 in Rice 402
- TA office hours are all in Rice 442 and are Mondays 5-7 (Varun), Tuesdays 5-7 (Fiona), Thursdays 12:30-2:30 (Matt), and Fridays 11-1 (Eddie)
  - TA pictures linked to from the Canvas landing page
Homeworks
- HW 3: RSA is due this Thursday, Sep 18th, by midnight
  - Submission on Gradescope is open
  - This is not the easiest assignment, so please do not wait until the last minute to start it!
- HW 4: Hashing will be ready later today (I’ll post on Piazza when)
Readings:
- Due next Thu, Sep 25th: watch Last Week Tonight with John Oliver: Data Brokers (25:09 long)
Everybody has to sign the Ethics Honor Pledge; the link is on the Canvas landing page
Today we will continue with networks, then on to web security
- We’ll come back to policy later

Bag Check

A laptop battery contains roughly the stored energy of a hand grenade, and if shorted it ... hey! You can't arrest me if I prove your rules inconsistent!

xkcd # 651

Lecture 7: Tue, Sep 16th

Office hours are ongoing, all listed on the Canvas landing page
- Prof. Bloomfield’s office hours are Mondays 11-12, Tuesdays 1-2, and Thursdays 2-3 in Rice 402
- TA office hours are all in Rice 442 and are Mondays 5-7 (Varun), Tuesdays 5-7 (Fiona), Thursdays 12:30-2:30 (Matt), and Fridays 11-1 (Eddie)
  - TA pictures linked to from the Canvas landing page
Homeworks
- HW 3: RSA is due this Thursday, Sep 18th, by midnight
  - Submission on Gradescope is open
  - This is not the easiest assignment, so please do not wait until the last minute to start it!
- The next HW (on hashing) will be out Thursday
Readings:
- Due next Thu, Sep 25th: watch Last Week Tonight with John Oliver: Data Brokers (25:09 long)
Everybody has to sign the Ethics Honor Pledge; the link is on the Canvas landing page
Today we will finish with encryption
- Next up: networks
- We’ll come back to policy later

Smart Home Security

If they're getting valuable enough stuff from you, at least the organized crime folks have an incentive to issue regular updates to keep the appliance working after the manufacturer discontinues support.

xkcd # 1966

Lecture 6: Thu, Sep 11th

Office hours have started, all listed on the Canvas landing page
- Prof. Bloomfield’s office hours are Mondays 11-12, Tuesdays 1-2, and Thursdays 2-3 in Rice 402
- TA office hours are all in Rice 442 and are Mondays 5-7 (Varun), Tuesdays 5-7 (Fiona), Thursdays 12:30-2:30 (Matt), and Fridays 11-1 (Eddie)
  - TA pictures linked to from the Canvas landing page
Homeworks
- Homework due today (Thu, Sep 11th), by midnight: HW 2: Ethics
  - You have to follow the formatting guidelines described therein!
  - The extension system is linked to from the Canvas landing page
  - Extensions can be submitted up to 3 days after the (original) due date
- HW 3: RSA is out, and due next Thursday (Sep 18th) by midnight
  - Submission on Gradescope will open up three days (72 hours) before it is due
  - This is not the easiest assignment, so please do not wait until the last minute to start it!
Readings: none currently assigned
Everybody has to sign the Ethics Honor Pledge; the link is on the Canvas landing page
Today we will continue with encryption
- We’ll come back to policy later

Cyberintelligence

We had gathered that raw information, but had yet to put it all together.

xkcd # 1573

Lecture 5: Tue, Sep 9th

Office hours have started, all listed on the Canvas landing page
- Prof. Bloomfield’s office hours are Mondays 11-12, Tuesdays 1-2, and Thursdays 2-3 in Rice 402
- TA office hours are all in Rice 442 and are Mondays 5-7 (Varun), Tuesdays 5-7 (Fiona), Thursdays 12:30-2:30 (Matt), and Fridays 11-1 (Eddie)
  - TA pictures linked to from the Canvas landing page
Homeworks
- Homework due this Thursday, September 11th, by midnight: HW 2: Ethics
  - You have to follow the formatting guidelines described therein!
  - The extension system is linked to from the Canvas landing page
  - Extensions can be submitted up to 3 days after the (original) due date
- HW 3: RSA will be out today or tomorrow
  - We will go over it at the end of lecture today
  - Submission on Gradescope will open up three days (72 hours) before it is due
  - This is not the easiest assignment, so please do not wait until the last minute to start it!
Readings: none currently assigned
Everybody has to sign the Ethics Honor Pledge; the link is on the Canvas landing page
Today we will continue with encryption
- We’ll come back to policy later

Password Strength

To anyone who understands information theory and security and is in an infuriating argument with someone who does not (possibly involving mixed case), I sincerely apologize.

xkcd # 936

Lecture 4: Thu, Sep 4th

Office hours have started, all listed on the Canvas landing page
- Prof. Bloomfield’s office hours are Mondays 11-12, Tuesdays 1-2, and Thursdays 2-3 in Rice 402
- TA office hours are all in Rice 442 and are Mondays 5-7 (Varun), Tuesdays 5-7 (Fiona), Thursdays 12:30-2:30 (Matt), and Fridays 11-1 (Eddie)
  - TA pictures linked to from the Canvas landing page
Homeworks
- Homework due today (Thursday, September 4th) by midnight: HW 1: Rational Paranoia
  - You have to follow the formatting guidelines described therein!
  - The extension system is linked to from the Canvas landing page
  - Extensions can be submitted up to 3 days after the (original) due date
- HW 2: Ethics is out, and due next Thursday (September 11th)
  - Submission on Gradescope will open up three days (72 hours) before it is due
Readings
- Due today, Thursday, September 4th: ACM Code of Ethics, Reflections on Trusting Trust, Morris Worm Wikipedia page
Everybody has to sign the Ethics Honor Pledge; the link is on the Canvas landing page
Today we will start on encryption
- We’ll come back to policy later

Security Advice

Never give your password or bank account number to anyone who doesn't have a blue check mark next to their name.

xkcd # 1820

Lecture 3: Tue, Sep 2nd

Office hours start this week
- Prof. Bloomfield’s office hours are Mondays 11-12, Tuesdays 1-2, and Thursdays 2-3 in Rice 402
- TA office hours are …
  - TA pictures linked to from the Canvas landing page
- This is all on the Canvas landing page
Homeworks
- Homework due this Thursday (September 4th) by midnight: HW 1: Rational Paranoia
  - You have to follow the formatting guidelines described therein!
  - You will likely want to wait until we finish the security mindset slide set slide set
  - Submission on Gradescope will open up three days (72 hours) before it is due
- The second homework, out later this week, will be on Ethics, due next Thursday (Sep 11th)
  - It’s ready, but we need to go through the ethics slide set first
Readings
- Due this Thursday, September 4th: ACM Code of Ethics, Reflections on Trusting Trust, Morris Worm Wikipedia page
Everybody has to sign the Ethics Honor Pledge; the link is on the Canvas landing page
Today we will continue with terminology slide set, then onto ethics

Security Question

Let's invite him to a party and play 'I never'. Okay, I never hid any bodies SOUTH of Main Street. ... he's taking a drink!

xkcd # 565

Lecture 2: Thu, Aug 28th

Office hours start next week
- All are currently TBA; the times will be posted this weekend, but the locations may not be ready until Monday
- This all will be on the Canvas landing page
Homeworks
- Homework due next Thursday (September 4th) by midnight: HW 1: Rational Paranoia
  - You have to follow the formatting guidelines described therein!
  - You will likely want to wait until we finish the security mindset slide set slide set
  - Submission on Gradescope will open up three days (72 hours) before it is due
- The second homework will be on Ethics, due the following Thursday (Sep 11th)
  - It’s ready, but we need to go through the ethics slide set first
Readings
- Due next Thursday, September 4th: ACM Code of Ethics, Reflections on Trusting Trust, Morris Worm Wikipedia page
Everybody has to sign the Ethics Honor Pledge; the link is on the Canvas landing page
Today we will continue with the security mindset slide set, starting on 5.1
- Next up: the terminology slide set, then ethics