Add Human Number with airSlate SignNow

Add human number

a security for drinking water because I come out of a background as a water commissioner for 13 years in Massachusetts my day job is is doing IT tech support and so on in my non day job that would be nice to turn into a day job as a security research quote unquote I was a former lobbyist for environmental agency and environmental group I've been giving talks at here and at Def Con black hat and this year I was on the road this is my seventh talk this year god help me speaking yeah spoke on drinking water infrastructure security at three locations a wireless water meter at two locations a talk I gave originally at Def Con in black cat last year and I gave an earlier version of this talk at thought con in Chicago but this is the much improved version and I've written some articles based upon Mary water department experience in the journal the doing the water works association and my black hat white paper on wireless water meters actually the part of it that was on general drinking water security was published in the book weapons of mass destruction and terrorism second edition which came out earlier this year which is used as a textbook at University of Lowell and I think also at West Point so I'm trying to I'm developing my expertise in writing on these matters so this talk actually came out of my research originally I was talking to someone earlier i gave a talk at Def Con in 2010 on general drinking water infrastructure security and that led to my talk last year on wireless water meter security or lack thereof and hack ability of wireless water meters when they become prevalent and that led to this talk which is sort of a further fine-grained way of finding out how you use water in your home and other activities in your home so the outline basically is I have to mention i did some research on the telescreen now I look for a picture from the original show this is sort of an eye a inside joke to the prisoner it's patrick mcgoohan playing a former secret agent for those who don't know who when he resigns he's sort of kidnapped and brought to the village which is this beautiful little town in an island or somewhere no one really knows where it is and it's like a gilded cage it's beautiful everyone's dressed nicely this Pleasant activities but this 24-hour around the clock total surveillance just like right now in the US and but his I tried to find a photo of this but this artist was the only thing they had it so so for his private residence quote unquote it says private which of course it isn't because they can see in here everything he does and everything you know in everything he you know and everyone else so that was sort of just the inside joke number 6 i'm not a number i'm a free man et cetera so before i get to infrastructure mediated sensing the actual topic of the talk i wanted to give some brief introduction and privacy and i'll warn you that that sort of sort of take over because there's a lot of other talks that might be going to more detail over the threats to privacy these days but i'm going to hit a couple key things to look at outside the home what privacy do we have and what threats there are and then i'll talk about this technology which is inside the home so the telescreen this is from the movie wars peace freedom is slavery ignorance is strength as you may know from the book and the movie the telescreen is a two-way video that it really explained in the book what the technology was it didn't really matter work which you can see everything in winston Smith's home but he found this little corner whereas far where he thought they couldn't see him in here him he found out later course that they of course saw everything he was doing so the telescreen has been developed Apple has a patent for it I won't read every slide of course I mean why is that different than a video screen on a laptop with a with a camera well it's the real video screen so they've got the the view the viewable you know that the video receiver is integrated in with the the output so so you don't know there's a camera with these and my understanding is that sharp is coming out with some that are similar to that as well so i couldn't find information that Apple was actually coming out with it we know that Apple TV might be coming I don't know whether it's this same thing so the point is that app you know from george orwell sort of coming up with it as without trying to design it or actually say it would happen it was a device in the book it's it's something that is on its way if it's not here already so privacy is under attack so here's number six being chased by Rover so in the village where there's cameras everywhere in microphones everywhere whenever you do something that you're not supposed to Rover appears out of nowhere and they don't explain what rover is but it's as big it's a weather balloon but it has a life of its own it's is it alive or is it I mean what is it or is it in charge then it's mother's you and you wake up in a real jail cell and God knows you know then they really start to work on you so and there's another element again there's a lot of talks at this conference about privacy so I'm glad to add to that total weight of a discussion on it I'm going to hit some things and the high points before I get to the main topic of the talk but who was watching who isn't watching is a good question so I just threw out this new speak definition of course in the Newspeak dictionary there would be no word privacy the last one number five but it's interesting you read privacy disclosures on some websites and it some of them there's some some of them actually say that it includes collecting data on you or that you're agreeing that data will be collected so the definition of privacy that institutions and businesses are coming up with is certainly could be different than what most people think of it cameras now I was in Chicago forethought con a few months ago and I didn't see lots of cameras but according to a study by ACLU they have 10,000 or they're working on getting 10,000 that it would be wall-to-wall all through the city and the objective is a cover city from one end to the other so that's 0 so above that this is a generic picture I found the Internet of surveillance cameras and this is one of the cameras at the in the village a number I'm going to be pop the village references to be popping in and out here it's my favorite sort of analogy to I mean we all live in the village right so there's many other cities that are covering a camera's wall to wall and you can't go almost anywhere without a surveillance camera around a 7-eleven or a school or institution or a police station and you're in private facilities and there's a camera and so you see so in probably in popular movies you see a lot of places where they hack into the camera and they find you and they can follow you around which probably could happen but but the point is all this visual information is being collected and some of them may right over the information or not store it but some of them may drones no this is this is really something so I'm looking at outside your home what's the threats to privacy so there's a lot of activity coming out on the web about drones that there are number of facilities being conceptualized in the u.s. proposed for drone bases and it could either be these big drones or these baby drones and some really small ones are coming out that are like fireflies that are hard to see and then the US Army has blimps of course so anything aerial and some hackers have developed their own versions being presented black cat and Def Con last year but there's a possibility so a lot of governments and local law enforcement can can apply to use drones and they have to get clearance on the FAA but drones are becoming more pervasive your car so I believe there's a bill in Congress I don't know if it's passed to require black boxes like in an airplane to be in your car and a lot of cars still have them have them now there's the National so that records data on where you travel how fast you're going things like that which is very useful in an accident investigation so be useful to know if the car you're driving has a box the National vehicle locator service keeps a database of pictures of license plates so that when the government or the DEA or the or the FBI is looking for someone that's one one of the sources they can tap into to to try to locate someone GPS locators I think it was a circuit court decision which may or may not be nationwide but there was a decision saying you can't be placed in without a permit don't worry they'll find it try to find a way around that and personal ads and geolocation like in Minority Report I was going to do a theme of what movie will be in but it's hard to say they all sort of overlap but in my already port he's walking through with the fake ice from from the from the after he had his eyes replaced and they're responding to the retinal scan and they're giving him personalized ads based upon who who the eyes usually used to belong to and those are under development immersive labs embeds cameras and displays and there are some retail locations now that are have networks where they they find your cell phone they get your mac address and they can link it to who you are and then give you personalized ads based upon a database of where you've been in in your shopping and french billboards I'm told call your cell phone so I'm not trying to get in-depth a lot of these things that but the point is there's a lot of things chipping away it's for the government it's marketers trying to sell you something it's it's all of the above secret code in color printers I just had to mention this I learned about this by watching me Mikal hi Conan Hickman in the TED Talks he said in you know for example in 1980s during the Cold War eastern Germany every owner of a type of red had to register it so that the government could find out you know and then give a sample so if he wrote something critical the government or something they didn't like they could find out who typed it well the eff and I think Marsha Hoffman's here I know if she's here now but eff is here has done a study where they tried to document the secret codes that are now in laser printers or many laser printers so that the government can do the same thing now now maybe not to suppress free speech of course why would they do that but if they want to identify word document came from it's possible with these secret codes that are in like light colored yellow or green or something you can't obviously see so check the eff website for documentation on some of the codes that been able to decode so Miko and his talk he was surprised said people should know about this he surprised how many people don't know this and I didn't know it so I figured I'd throw it in because that's a serious invasion of privacy you type something up you print it out you make copies and somebody either the government someone else who knows the code can figure out which machine it was and maybe track it back to you so it's it's there's really no end to this sort of chipping away at doing something privately warrantless he's dropping again I won't read everything but it's a you know started with Bush and Obama has been keeping keeping it going but don't worry as long as you're not a terrorist you have nothing to worry about so it's only international they sure it's only international and they won't listen to anyone who's only not talking about something with a foreign foreign address but we should all should be worried because again it's it's thousands or millions of phone calls and data that's being collected people with cell phones so again there's it's ourselves so there's people everywhere are taking a picture or a video Google glasses if they take off that's a picture right there what's the threat there well it's again it's developing data so you walk around Google glasses and it's developing a database at Google which of course remembers everything they have servers going back to the beginning of Google that record everything that you know and every search you've ever done any anything that anyone's ever done on their pages so it adds to that total database that of course is very useful to marketers and maybe maybe other ladies and I ran into an interesting web page that sort of joked or maybe it's not a joke saying hey the government really succeeded in getting people to voluntary disclose what they're doing which is what a lot of people do on Facebook Twitter Linkedin myspace I don't know if that's still around but a lot of people I think mostly teenagers and high school students just tell people everything they're doing and then they're shocked they're shocked that people are you know talking about what they do and Jeff Fox from consumer reports of here they did a story on earlier this year it is also a threat though even if you're not on Facebook people can talk about what you're doing on facebook and information about you can still leak out so and of course Facebook is monetized that into the billions and and so it's a useful tool with with this millions of points of data being collected for marketers and God knows who else so there's so it's ourselves Pogo you know we've seen the enemy and it's ourselves and of course I just saw this a couple days ago so airports invasion of privacy is we enter you know to get on a flight there are new laser scanners which 50 meters away can see everything ten million times faster and 1 million times more sensitive than a current available system and you don't have to be in line it can of course they're talking about it for airports but why not anywhere else you know so that's the headline from gizmodo so the stories in gizmodo i'll give credit to the Jenaya Jenaya the photonics pico second programmable laser scanner can look at you and fine so sorry right at the bottom there to jeanette Jenaya Jenaya so this is not this is not intended to be a thorough discussion of erosion of privacy outside the home but it's it covered it covered some major issues that i've seen so far so the big question is do the walls of a home protect privacy anymore so Chris Desmond a master's thesis candidate looking at some he was a law school in Canada I believe looked at this question and had in this great quote the walls that have maintained the privacy of a man's affairs for thousands of years have been made obsolete by his technological advances so wasn't that long ago that you know you're inside your home and you're safe from privacy from being snooped on of course that's a real class home I don't know if anybody lives in it but it's the conceptual design by an Italian design team so some of the well-known technologies is Tempest attack outside the home can read the electronic signature of electronic emissions from a monitor these from a CRT I presume also from an LCD but i'm not sure and and there's a way to read what you're typing on the on the monitor TV viewing can be revealed by a smart electric meter there was a paper that came out in germany last year where they can correlate sort of the timing of when they know that the TV's on and they can detect the channel you just match that up with the schedule and you can find out what someone's watching electric meter signals it was a talk at Def Con last year I think David Kennedy on how through the electric meter just again reading the fluctuations in electric use you can determine what's going on inside the house from electric activity that comes close to what I'll be talking about in the bulk of the talk of course tapping and eavesdropping on computers is no no mystery and your internet activity but we're going going to it another level in this talk on that so then of course a smart grid so I gave a talk last year actually early this year twice and last year at black cat and DEF CON on smart water meters wireless water meters and when I did the research I didn't realize at the beginning that the major concern would be privacy so right now your water department presumably has mechanical meter in most places the u.s. that is read quarterly because they have to pay someone to go out knock on the door go down the basement read the meter use of about seven percent of us homes have have smart meters that go beyond that that are well wireless meters anyway that send a signal out and the advantage of sending a signal out or having a received from someone driving by the home or received at a central facility for billing is that you can change the frequency since you don't have to pay for people to go out and read the meters you can you can you can check on the frequency of water use every hour every day every five minutes which is very useful to the water department to determine leaks to determine people are using water when they're not supposed to but it also gives you a very fine grained detailed information of water use that you can use to determine what's going on in the home so this is just one piece for my talk on wireless water meters where from a online newspaper called the carry Watchmen from Cary North Carolina that the right to be concerned about the information our private lives at the Town South wave of the collect from the accra star am I water meter system is implemented and they give a quote from a technology futurist and keynote speaker at a conference they can tell when you take a shower or when take them and this is just from the water meter I'll get into techniques that are even more useful than that defining of what you're doing I gave my wireless wanted me to talk in Madison Wisconsin yesterday and after I gave the talk I talked to some people from the University of Wisconsin where I gave the talk in the city where I found out that the city of Madison Wisconsin just bought a wall just signed a contract to install you know tens of thousands of wireless water meters throughout the city and like most of them they're not encrypted they use something called frequency-hopping spread spectrum which you know he's thought of his encryption which came out of World War two it's a but its obscurity so every packet is sent out with a different frequency that presumably only the sender and the receiver know the trouble is that's not really encryption and there are fairly easy ways to break that but in any event whether or not the water department is going to be sinister and use the information somehow based upon what you do at your home I don't think as a former water Commissioner I I really doubt that a lot of them going to do that unless is some personal thing going on and some someone in the water department wants to get it someone who based upon the data the trouble is that data is created and it lives forever and where is it going to go so privacy is the biggest question you see out there mostly for the smart grid for electricity for gas and for water okay here we go infrastructure mediated single point sensing I like having a long technical term infrastructure sensing is my shorthand for it so it's the use of existing home infrastructure so this is a way without having to chip you put a chip on you or or or a transmitter or a microphone or have cameras in the home find out what you're doing in the home and I'll get into why anybody would want to do that in a good sense it can accurately determine human activity so eliminate the need for sensors or chips work with other sensory devices and methods this is not the same thing as a smart home which we've been reading about in science fiction for many years but still hasn't come to fruition and I read an article in the smart home a while ago when the main reason maybe people why do people why would you need it though there are applications out there that are similar to the smart home where you have a home area network where you can have central control over appliances which is good for you know controlling electricity use if you want to lower your electric bill so most this these devices in this research comes primarily out of the ubiquitous computing research lab you become at the University of Washington it's called pervasive computing or ubiquitous computing ubiquitous means everywhere these are not in production yet but there's a lot of research and a number of papers on the web about this so sustainability to reduce use of natural resources like water gap natural gas fossil fuels for the most part that power electricity and used for health sensing and so these are some of the purposes that they proposed for it so hydro sense this is how I got into it and looking at wireless water meters read about Hydra sense and this is very technically this is very sophisticated but very simple so so you want to find out what so with this device let me back up with this device you it's very simple small device that doesn't cost much you attach it to any piece of plumbing in the house and after being calibrated it has a little wireless transceiver on it I have to being calibrated it can tell which fixture was turned on or off in any particular time and how much water was used and you can develop a very precise database of water use so toilet faucet shower tub kitchen I mean everywhere and and it uses something called poi cells law but which I won't read but these graphs give you the idea of how it works is that the the open event when you when you I know from my experience in in water you know when you open or close a valve you create a water hammer which creates a sound or in a vibration and so this reads it in a can tell the difference between an open and a closed so screw on device mr. change in pressure and sent to wireless and there are so there's look it's battery-powered but there's a but they're really been working on it and there's one that actually powers itself from the water going the vibration of the water going to the pipe so there there's there's a lot of development of work going in this these are not in production yet none of the ones I'm talking about now or in production yet but they may and I'll talk about why gasps sense so this is attached to where the gas enters the house uh and it uses sound so it so it listens to the sound of the gas the natural gas entering the house excuse for hot water heating stove furnace fireplace clothes dryers so things don't most of those don't use water so that covers some different bases so there are a couple studies that I quoted from here so calibrated by turning gas appliances on or off and recording the sounds so it's not that these are can be put in surreptitiously and suddenly figure these things out although I'm sure someone could figure that out but at this point you have to put it on so this it's still being studied you put it on you do the calibration and you can do the same thing that you with Hydra sense you can determine what's been turned on or off and how much gas is used so so that so the successes that helps provide a complete picture of whole homes human activity you know what you're doing in the house along with the water use new eco feedback device tell Peters monitor and perhaps reduce their natural gas usage so that's a beneficial use right to reduce newster natural gas you get the same benefit out of the natural gas but you're using lesson you're paying less so that's good right electro sense so so the switch mode power supplies which are most appliances emits a high-frequency electromagnetic pulse and it has a signature specific to a device and it defects it but electricity is easy in that sense because so that can so that's everything else in the house is electrical location sensing and this is just a part of the picture so they can there are devices you can put it if you get a air conditioning system HVAC system in the house or building and most houses may not have that in New England anywhere I liver in the eastern US but maybe other parts of the country do and of course apartments condos government facilities private facilities have them as well so a single sensor just can detect these disruption and airflow 75 to 80 percent accurate can determine where that you know one or two people where they're going what their activities are in the house smart floors that's an easier way to do it so the pressure sensors in a grid in the house and you can calibrate it so you know who's walking and who where they're walking and and and you get a database of exactly what's going on there powerline positioning this this means you have to have something on you like a chip or or a microphone or something so the so so you've got water gas electric location so they can find out what you're doing in the house and again these aren't I'm not saying this is done surreptitiously someone's installing it so that you knowing it that would be very hard in most of these but that's not what the idea is so the the acronym is a dl activities of daily life so who went where who did what behavioral information so this is a try to find some more examples of this but this is the best one so so you get a pattern from these different sensors and this pattern says out there having breakfast so it looks at what this I think is primarily water but you get water and gas and location there in the kitchen the kitchen faucets on the stove you know there's enough water to put tea in the kettle or make make make coffee so they're having breakfast there's a different pattern for for dinner might be similar different pattern for going to bed different that different pattern for other things you're doing so you don't have the location sensors they can find out from the water and gas electricity what rooms people are doing things in and the more senses you add the more information you get behavioral information health status that's one of the beneficial uses in and correlate with other information so there are a lot of studies on this is a massive studies where actually the research is trying to find out now so if we put all these sensors in there run it a couple problems like running out of electrical outlets for some of them that need need power on their own you run into electrical interference from ones that use frequencies so their work in that out though don't worry they're working that out and in so it can be easier and simpler to build a house or a condo or a government facility where they can track everything you're doing I mean why not okay so health monitoring in the home elderly in assisted living facilities those are two sort of similar things so looking at water use mobility you can get health indications and there's a lot of fine-grained analysis but been done for many years that elderly home elderly in assisted living facilities where you know there's an aide in the home or visits the home or there were cameras which is intrusive so we so this is a way of doing it without cameras so you can see a reduction in mobility the toilet isn't used as much they're not drawing water they're not doing something that's a health issue that's the easy one to figure out there are many others that years of assisted living research can correlate with some of these things to look at health so that's a good thing so you have an assisted living facility instead of paying for an aide to be in each with the person all the time or visit us you probably want to visit once in a while you can set these things up and set it up on the computer and you know have a flag go off if certain things happen so that's that's a positive intent of it resource and water conservation so it can help people who want to conserve resources water gas electricity because they can get fine grained information on their use so if they want to reduce our electric bill they can get a report daily weekly monthly annually whatever to say okay you this is your bill this is what you used during this time and so you voluntarily this is the positive so far you can voluntarily say oh yeah I don't really need to use that as much i'll reduce that and the world the bill save money same thing with water don't relieve the foot you know don't leave the faucet running take a shot take a bath instead of a shower or use a you know there's there's also it's a little rules you can follow and this is a way of helping you follow those rules to achieve micro sustainability meaning for your little home to be sustainable in terms of conserving natural resources and improve their lives so what's wrong is improving your life right home health monitoring so there's a lot of stuff on this that's not what I'm talking about specifically but there's where medical sensors embedded medical sensors that's a whole nother talk they can't be hacked right of course they can there's a lot of research and that as well on hacking pacemakers and implantable defibrillators because their wireless and they're not encrypted in most cases but again so there's a lot of vital sign monitoring motion analysis i mentioned earlier parkinson's disease is one application where you can look at mobility or actions and correlate it with you know health early detection enhance first responder prove life quality so there's a lot of good research on this coming out of the we're home research initiative and georgia tech they have like a model home set up where they experiment with these things and again the intent is positive in terms of how do we make home health monitoring so someone isn't put into a home but they're in their home but how do you set these things up so that someone you know that they contract from outside can keep track of these things and get on top of something so if they fall on the floor or the zay there's an episode this information can get electronically sent to the to the caregiver or the monitor and respond so there's a whole bunch of technology in addition to what i'm talking about that that works on this in this field as well so assisted livings i've mentioned a few times alarm net university of virginia smart medical home a we're home georgia tech again so they're looking at so this is more intrusive stuff but again sort of along the same idea so you've got something on on the person so it can check their heart beat their blood pressure but in addition to the other infrastructure mediated technologies gives you a richer picture of what the activity is to help protect the health of the person so resource conservation so reduce unnecessary use of scarce resources reduce environmental emissions reduce the carbon footprint all that good stuff the term is micro sustainability so again detail information on your water use you can review that yourself voluntarily and reduce your use so if your municipality or your state has water conservation requirements or recommendations it helps you follow that same thing for natural gas and electric use and so there are papers written about this cistus iffy and goals life improvement goals so improve health fitness so again if you have these in your home and you could so instead of writing that down what's your activities are which is a good way of feedback for yourself you can this will give you you know how often did you open the refrigerator how much is use the water if you have the floor sensors or the HVAC sensors you can you can check your movements in the house so I can capture all of an info make use of the information by tracking performance and there's a whole school of thought research on MN I'm terrible in pronunciation for some reason today meme meme sensory architecture where it further develops the data that's collected through these infrastructure mediated sensing to do the tracking so what can go wrong nothing right I mean that's the favorite hacker question so when I research these things I look at you know like most of you well this is what they intend it to be four but you know when is when is something ever use just for what's intended so you have data leakage and but also I think that the problem is less that the government god forbid is going to require some of these things from say water conservation which would be the biggest application but it might be your landlord or your next landlord or the condo association or you know who says so they're under pressure well I'll get to that so the wireless sensors sensors could be hacked collected surreptitiously it increases the reach of surveillance into the home the the evidence could be falsified could it be used in a criminal case could it be inaccurate maybe it's not falsified it's just wrong but so someone acts upon it so this is a laundry list of some things that could go wrong so let's look at them will the data leak out no of course not I started to catalog this and it's just the list is just too long and it had every day you read about more laptops being left at airports with health data or 50,000 Social Security numbers someone hacks a database and gets passwords new user names that happens every day credit card numbers health information and I read somewhere that thieves will pay ten times more for stolen health information that for credit cards I don't know why maybe someone here knows why but that's that's the information to be able to find credit cards actually aren't worth that much because they're there the theft is detected and they and they're closed they're closed out pretty quickly apparently when you get it you get a social security number well that's that's a fake identity that's identity theft which is rampant nope a tube which is now acquired by logged me in as an online database now that's a good thing where people accumulate the data from monitoring various things from from building monitoring systems from wireless data so I'm not saying it's a bad thing but again here's more and more data of this type that's on the internet that builds a pattern builds a database of things so it's an iphone app which you know could be hacked so so there's more and more information I try to look up how much information is there in the world and it keeps increasing exponentially or more and how much information on personal behavior is there in the world and that's increasing exponentially so that's a whole nother talk right there because these technologies in pachu and people monitoring themselves for good purposes and these health monitoring data probably never goes away and as it accumulates it it creates problems perhaps in the future for how is this data going to be used like team ganic database that Google has on all of us of course the government could get it very easily from whoever the second or third party is that gets the information or if they sell the information so data data leaks out it's it's a rule electrochem I just read about so for the Internet of Things that's another topic is another word for what we're talking about so the Internet of Things or everything especially with ipv6 taking off finally everything's gonna have an IP address and get it be on the internet almost automatically so you can control it or monitor it from anywhere with your iPhone or yours or your Android or whatever so this is another way of putting it on the internet and you can save resources so you can with with electric amp or many other applications like this and their ads now on TV and in the media for monitoring your home through your smartphone which is a great idea you know so but that data gets gets created so it's not as much that someone's going to hack into your smartphone and and control your home or check your video without you knowing it which of course will occur but on top of that all this data is being collected and and and and accumulated so this is from this is all quoted from their web page and it's just another way of you know a database being created from these type of devices and on am I trying to I'm not saying I'm being in the type of devices that use infrastructure mediated sensing a lot of people use different terms for similar things so the Internet of Things is ubiquitous ubiquitous computing pervasive computing everything's becoming wireless with an IP address being on the internet and many of them track what what you do in your home or what you do anywhere else and it's going to be hard to escape from that if it isn't already and of course under sista I try to look up the recent this is a big lot of news about this earlier in the year and I try to find the latest and as far as i know it's it stills passed by the House Obama's people saying that Obama's will sign it if it passes the Senate but maybe eff can explain what's going on the Senate I couldn't find the latest information but the biggest problem for what we're talking about notwithstanding any other provision of law which is a very broad term meaning you can do it companies may share information including the federal government so like in the wireless wireless cat wiretapping the the telcos were just giving information to the federal government well any any of these entities that collect this type of information can just give it to the federal government on request without you knowing about it you don't need a search warrant you don't need a subpoena you don't need a wiretap you don't need a phys m'a secret court it's just out there so that's another way that information this information will leak out so Google could be watching I'm sorry is watching so so it gets worse so Google is right on top of this of course they're there they're in the cutting edge so they're talking about actually getting a state of themselves surprise surprise I mean the Google never has enough data so they want a home activity recognition I'm reading this I'm saying this sounds familiar that's what we're talking about to track people's activities through home network interactions so they're talking about the home area network where you electric electric you your electric appliances well I think that's what they're talking about among other things your home area network is where electric appliances or networked and you've got a central control center that you can access to your smartphone most likely where you can turn things on or off remotely or in your home which is very useful but of course it's wireless it's on the internet so Google wants it what do they can do with that information they're going to just do it to protect you right so to remind you to take medication so they know what medication you're taking well that's not that's good that's very helpful courage them act more safely remember I robot you know the Three Laws of Robotics so they're going to help you act more safely so going to prevent you from doing things that could hurt you that's a good thing right what I recommend changes in behavior I'm not liking this very much so far so using upnp n discovery protocol which is fairly Universal creates instant stable and operational so there this is still under development i guess but don't worry they got the money they'll figure out how to do it so this is independent of what i was talking about this but could be integrated with it very easily so his I'm stealing stuff from one of their one of their webpages or discussion about this something about this leaked out and then Google someone from google denied it but then they there's a paper where they talk about it SQL database well those can't be hacked uses event notification technology report status of control variable status common home network devices like computers phones and tvs game consoles but getting cept include other types of sensors then i cut off i stop stop quoting it so yeah google with their google glasses and your google web page and your google gmail and everything google so the that ups the ante a little i think and fats attack okay so let's say for the infrastructure mediated sensing and this comes from the same researchers at university of washington right let's say they encrypt it they know that's a privacy issue okay i'm not saying they don't know that they know there's a privacy issue so they're working on encrypting it so one of the researchers said well what if what if is encrypted can you still find out what's going on in the house and the answer is yeah us so a fingerprint and timing based snooping attack type of side channel attack so you don't need to read the transmissions from the individual infrastructure sensing devices you just have to know when the signals come out so they say so they put motion sensors so the basic research and without actually reading the signals they were still able to return the attitude is it activities of daily life such as sleeping bathroom and kitchen visits bathroom activities kitchen activities and high level health information it's very sophisticated so you don't have to read the signal you don't have to decode it you just have to know when the signal occurred and where that came from so you have to look at the fingerprint you have to know what motion sensor or device it came from so let me look at ok how do we protect against that which is good so it's nice research being done on this and that they're looking at the attack and the defense the question will be when these things actually go in production will these hat well they have these are not so the protection is signal signal attenuators so you send the signal out not when the activity occurs but some random time after that random delays or attenuate as you reduce the I'm sorry that's when you reduce the how far the signal goes periodic transmissions so you don't say you time it so instead of sending the signal when the activity occurs you you time it's so every 15 minutes or every 20 minutes or whatever it goes out so you can't use the fats attack to correlate the timing of it with the activity fingerprint masking again I don't know if you know it's a UN NP identifier I know if the mac address some other you have to you have to know what device is coming from obviously so you you you you you mask it somehow or you put in fake transmissions so the good news is these people aren't evil who are coming up with things they are trying to do it for beneficial reasons they are thinking about some of the negative uses of it this of course doesn't protect you against the fact that the data is actually collected anyway and it's in a database somewhere by their company or another company and the data can still be X will trade did or stolen or given to the government or taken by the government but if this at least protects you from someone snooping from outside the house if they put these in place but who would want this information so this I adapted this from a discussion on electric smart meters and I won't go through the whole thing not all of these apply I couldn't give a story for each of these but of course utility so I'm talking about smart meter but a lot of this still applies so you so you got so so for water conservation what if the company that sells water conservation devices or electric conservation or natural gas conservation they get the database and they figure out that here's a list of people in this city who aren't complying with the conservation requirements or that they know want to conserve gas or electricity use or water more and they get a database and they so they send them a marketing email or mailing if they still use snail mail law enforcers again there have been some cases where water use has been the FBI goes to the water utility and finds out excess of water use and says she may be there maybe they're growing marijuana or maybe they're cooking meth because they also high electric use so this gives you more fine-grained information what if you think someone's holding someone hostage or kidnapping that's a good thing but you can so you can get information of mere how many people are in the house by looking at the water use electric used etc so there's a whole bunch of potential uses that I couldn't think of but it's probably in here somewhere and since these devices aren't in the market yet it's hard to see I don't have any examples of actually happening but the bad news is is that this information is collected even if we can't think right now how it could be used badly don't worry somebody will okay so a bad way and i'm in favor i used to work for environmental agencies and environmental groups so water conservation is a good thing in general because even if you have plenty of water quote unquote in you municipality it's not going to last forever especially with population and business increasing so water conversation is a good thing however should we make people do it well a lot of sometimes you have to make people do it you have to have a law how do you enforce the law it's very hard so some examples are San Francisco la architects there's a LEED certification I don't remember the acronym stands for but we're a building is is energy and environmentally efficient and and and conservation wise so what if the building it's it's it's now we're regular part of putting in a building is these water meter wat Hydra sense and electro sends and so on what if they're added the building codes because it's now a community or priority to reduce use I think the biggest threat would be probably that especially in California which is under strict requirements to reduce water use twenty percent by 2020 which is very hard to do once you've eliminated watering lawns if you can and easy things it looks like a natural for me that California would require municipalities to meet the requirement in Miss appellate ease to meet it would say okay landlord condo owner building superintendents you have to require your tenants to put these things in so you can monitor the water use and then slap their hands or require them to do things to meet the requirement I think that's sort of the most likely the way this will be applied but again these aren't on the market yet so we'll see it for us better living okay my favorite movie for this is of course demolition man of course and there was a law passed in middle Massachusetts to prohibit public swearing now they don't have these handy little devices that listen to you and give you a fine and it's very what yes that's right so that's a very useful device for us Sylvester there so without reading and running out of time now so I read all this but so there are regulations out there that look at they get intrusive to what you do in your home to protect people and this could be a way of doing that use a law enforcement okay Minority Report pre-crime well obviously we're not going to have precogs doing this but the FBI is looking at using big data to look at activity outside the home but maybe they can use it inside the home you put the data together and you can figure out things that may or may not be accurate for example target there's a big story out well there was that I caught target has figured out a way Target stores that sell things when a woman is pregnant based upon if they buy if she buys a few things they know before she does her husband anyway that she's pregnant and it was accurate at least in one case which was created the story that's the only example I know of where you could put all this data together and suddenly boom so I'm sure the FBI is get get data crackers working on that right now I'm going to end very quickly here I apologize let's see conclusions okay there's number six again it's the beginning of the show and there's Tom Cruise of course so there are benefits from these I'm not saying that they're not but like anything else how you know what could go wrong and there are serious privacy issues that could result and security again if somebody knows what's going your home and you don't know they're doing it they could take advantage of that and it's a privacy Richter scale it's not really a 9.5 because it's not here yet the utility manufacturer belkin it bought the Hydra sent so that may be coming on the market soon and finally I don't think we're going to get 1984 but we'll we'll be like the prisoner with cameras and and monitors everywhere be seeing you thank you you