[Music]
all right so this talk is how to look
good ball being PA FSB and uh as my
father to present with me because uh it
turns out it's a family tradition uh but
for the record it's more like Forest G
be very clear we were never cool guys
just uh bunch of bunch of dudes walking
around strange
places disclaimer it's not about how to
be James Bond this is just how look like
that so first of all what does looking
good
mean for those of you that love your
Molly your 511 tactical your all that
cool guy stuff yeah you know Euro style
right Tulie like you got to dress you
got to act business travel normal person
the more Molly you have the more likely
you're going to get
flagged all right like this gentleman
right
here olive green all drab just streams
urra it is what it
is uh it's all good right you're in
Wisconsin it's fine if you're in
Wisconsin what you we your uh orange
hunting hat maybe a quick trip shirt
right go to Farm and Fleet go to brewers
brewers head Packers jersey probably
good to go right so think of that same
way you can spot somebody from Illinois
you can spot somebody they can spot you
all right the other thing is is like
what does looking good mean it means
don't you play the stupid games you win
stupid prizes okay if you tear down the
propaganda poster in a certain country
they might detain you they don't like
that like at the end of the
day it's not it's not
America so what are the problems we have
right um we got two one we land we
scream USA the other part is that as
cyber stre professionals we travel and a
lot of customs and borders protection
they like to uh they can collect your
data CU remember they don't have to let
you in they can detain you attention
staff and all guests in the Wisconsin
Center will the owner of a pensy truck
with an Indiana plate
286 any have a flashback to trck with
286 3
443 your truck needs to be moved
immediately off the dock or it will be
towed in 15
minutes that timing
was yeah
like never mind
uh like Oklahoma City the World Trade
Center for the first
time um but here's the thing uh they can
search your stuff right like it happens
so we're going to talk about what to do
to mitigate those risks but
understanding that like they don't have
to let you in if you don't want to give
them their passw find people like well
just don't give them the password well
okay how much Justice can you
afford you choose all
right and the other thing you got to
understand is that you're now leaving
Footprints it's not just physical
Footprints but you're leaving a digital
Trail everywhere you go right so we got
to we got to walk through
that okay my turn um this
is
because I'm the only guy at the time but
if I was talking toine
officials Street the time and I'll tell
you what in
many particular European countries a
white shirt dark
slack Co
what I'm trying to do is not be
distinctive that be better known as Urus
oos coris or grizzly bear can run about
35
mph for sustain distance the same old
cannot should be him I'm trying to do is
get you to look less tasty the person
so same skills you apply I know a lot of
times uh we hear the debate on whether
Defcon or hacker conference you to shut
off a phone turn off all the things are
they really going to waste their oday on
that the reason why I I try to follow
that is not necessarily because I'm
worse that worried someone's going to
use their OD day on me but you got to
train how you fight when you are
traveling traveling secure is
uncomfortable it's inconvenient so you
have to get used to it if that makes
sense so using those opportunities so
you know how to make it work for what
you do all right um and the other thing
to understand like when I was in mova I
was teaching Urban combat I used to
dress like a marel man so dad likes to
blend in me I made it easy for the three
different groups that were following me
to call it in if I got jumped I made it
very easy for people tailing me cuz I
was like hey I'm just going to I'm going
to be me right I'm not going to be super
spy
I'm going to try to blend in or I'm
going to try to stick out cuz I already
I already do let's face it unless I'm in
Poland I don't look like a like I can
pull it off in Poland but France too big
for
French all right the authors it's me and
my
dad credentials we've been in countries
that I mean I lived in West Germany I
remember the Wall came down been places
that you know countries don't exist
anymore so been around a little bit uh
and I'm still at
there okay my turn I just uh checked on
the uh internet and there are over
200,000 low circuit TVs in Moscow at
least
146,000 our street cameras in 2019 they
led a contract to do facial recognition
for most
of you're on
town now the principles talking about
you can read the travels of Marco Polo
and find the same principles and use the
ones from cyber security that ties in
very nicely as Rob saying um this will
apply not only to C intelligent
services but uh The Helpful people that
you will find in some countries that um
quite honestly may be part of criminal
group terrorist group or in some other
way wish to make a
profit all right where is prevention
that picture was taken in my hotel room
in keev in November before uh everything
kicked off so if you're a Marriott
person like me I was very disappointed
that I've never received a gas mask as
an amenity um that's where you know you
stay in the best
places literally for some reason I
thought it was a haird dryer was like in
a black bag which I don't know why I was
picking that up but uh that
happened all
right
so first of all understand you make a
great uh Ransom right so there's places
that because I was a Marine Corp
infantry officer in former life uh had a
top SEC security clearance and now I do
cyber security first of all I was never
a cool guy I don't know who shot JFK
like I don't have anything cool about I
was a dumb grunt
but on paper I look cooler than I am
right so I understand that so there's
certain places my son wants to go to
Russia some reason I'm like hey Dad can
go but he will leave
right if you're in this conference your
LinkedIn resume I don't care if you
delete it tomorrow there's called the
you know the way back machine they can
find it is going to make you look
perhaps cooler than you are right we own
this industry We Make Up titles because
it's Tuesday so like it is what it is
but understanding stuff right so uh if
you if you're trying to go to Russia you
recently got a passport stamp in the
Ukraine going be isue I used to have two
passports and you can do this as a US
citizen you don't even have to be uh
Department of Defense you know places
that if you go at Israel now they'll now
put a little sticky note in there to
stamp for you instead but an Israeli
stamp will be a problem if you try to go
to Lebanon right you go to Egypt some of
these other countries they're going to
ask you hey this interesting it may not
let you in right so understand that you
can have two passports uh if you are
doing that type of travel if you're a
chosen hacker you're probably already
well aware of this um those who don't
get that joke whatever um the other
thing is like when you're going through
so I turn off face ID and Biometrics
because that way they can't hold it up
to my face they actually have to ask me
for my pin right
um and understand you may become more
important somay so when you're thinking
about your travel now some of you
younger folks uh they'll have that
information for later so be prepared
right and then think about this as
you're going as you're about to do your
travel what type of access do you need
how much do you like do you need the
admin creds while you're on this trip do
you need all this data on your machine
do you need to have your phone or do you
just need a phone number for people to
contact you pick up a burner talk a
little more about
that all right again my turn now if your
travel
[Music]
bag
[Music]
um please travel
life tell my
[Music]
da
about chall
um I used to travel C backpack which was
great when I
was but
St these things can really help you out
um this size
[Music]
bag
thank
you now you guys profession
deal all the
time
knowled you do that first of all the
smart travel
program
best
[Music]
only send
words
words what's going on in that
[Music]
maybees make
sure
it will pay off in
your your world so you'll notice there's
a transition my slides have nothing on
it because it's my company and I don't
want to be associated with stuff I'm
saying in here uh so he's he's khaki on
beige uh my are things that are not
labeled so check in plan right that's
one of the key things you need to have
this the question is how long are you
going to be detained before we know
you've been detained
right and this isn't big brother
watching this is like you take a picture
of your lunch or your dinner every day
and send it via
telegram WhatsApp signal well talk about
signal in a second but just a record
like every time you signal in a foreign
country you're all s in an American flag
cuz nobody really uses that outside the
US just throwing it out there maybe want
your traffic to blend in um or use mys
space no one's checking that
um and the next question you got to ask
when you're going on your travel looking
good what data is okay to be share with
customers Board of protection so this is
why I wiped phone so I can just give the
password I don't care you know I'm in
the when I was in the Ukraine and
depends on the Threat Level right
Western Europe yes and no you go to
Dubai uh they have some very interesting
rules on batteries and they will use
those to get you to turn on your machine
and then potentially take your machine
um especially if you work for the
government government contractor if you
deal with
itar this is why like for a day job I do
compliance sex ASD cever I know um for
all of you pent testers out there I'm a
cool one uh but itar compliance cui all
those things that are coming out that
are getting pushed down this is why this
is relevant is like you have this data
you have Executives that do what they
want because that's what they do
and having that education do you need
this data on your machine to do that job
while you're on that trip because if it
does get taken you have to report that
right Nar is a great way to wind up in
prison it's the only compliance standard
out there that put you in jail um it's
fine I
really figure out and write down you
would do in
the with
somebody cod cod two places
everybody I love Swift no one's going to
no wayi is picking that up on
me
[Music]
t
but
this really
this whatever Reon what
I and maybe I want to
take
now somebody gets gets my
[Music]
wall all right you understand my
childhood we've been doing
anti-terrorism before with
school all right comms so you got any
veterans in here you all right so you're
Arabic if you speak it you sound like
you're from
Baghdad I found that out the hard
way I can tell you I pretend I'm
Canadian CU nobody hates Canada for some
reason used to call it Northern Montana
but that's when I pretend it's actually
its own country uh but like you're
Arabic you at least me I speak I sound
like I'm from backd so I throw that out
there communication trying to blend in
but it's also this big white dude speak
Arabic H right next thing is signal
traffic so what I always recommend is
use the blend use what they're using in
that country in the Ukraine telegram is
super hot India WhatsApp is super
popular right a lot of Western Europe
they love the WhatsApp again signal I
don't know the only people I've know in
Europe that use signal are us prior US
military I'm just throwing that out
there what it's worth
right um
talk about burner phones so when you buy
one pay cash if nothing else Co was
great for buying burner phones because
you got to wear a mask at the same time
um when you turn it
on turn it on right next to your other
phone they don't carry it with your
other phone you've defeated the bur you
you're continuing to reduce the uh
usefulness of that burn on if you well
you burned You'
beenn
it's crazy right maybe a faay back for
your uh for this phone too it's
crazy I'm not judging
you don't turn it on at home that's the
thing it's like when you when you buy
these things like people buy them and
then they compromise themselves in the
first 10 minutes of getting them so like
think about where you're going to do it
but under you can also think about the
purpose of burn phone too so there's a
difference between you're trying to not
be traed or or you're just trying to
have a basically a dum phone while
you're on on trip so you don't
necessarily need to go all out of your
way if you're not trying to be super spy
but at the same
time you know if you practice it do it
right you'll get in those better habits
that does take it's not instantaneous
okay that's one thing you got to
understand like when you're trying to
travel secure it is inconvenient you
have to work through that ings all
right else I got here uh same skill us
RFID Shields vpns those are fun of
course it's just who you're sharing your
Logs with understand that I don't care
if it's proton if it's whatever they are
uh especially ones the YouTubers like to
push out those are probably the least
ones I would use but uh you know proton
maybe you're still sharing with USA you
never know um and if you don't need to
connect to financial transaction don't
right so go with that Chromebook go with
what you need to go do your thing and
come back and if you're permanently
going to be over there that's a
different set of protocols right but ask
yourself do I need that access to when I
create a separate account that I can
just do what I need to do and leave
right especially if you're in security
here means some of you probably have
Global admin commiss you are running as
glal admin on a daily basis but I'm not
here to judge um this is why we all stay
in
business hotels to international hotels
great part or one of the sad parts is
they get bombed occasionally the good
part is they're prepared for bom
C you need to understand that when
you're going into see India Egypt Jordan
for sure I had to go to midal detectors
just to get to check in usually have a
pretty good standoff difference distance
because they've been bombed before it
happens right um I when I go to Cairo I
stay near the airport I don't stay
downtown near tuck Square because well
if you saw what happened in 2014 you
would uh understand uh when you used to
travel to Eastern Europe
back in the Soviet times they had they
had babushkas they had basically
everyone was employed in the USSR old
ladies that sat on every floor at the
special foreign tourist hotel that would
monitor your comings and
goings now they've automated that it's
the cleaning cart a lot of the places
I've been I've noticed the cleaning cart
doesn't seem to leave my
hallway don't know
why think about that they've automated
they are tracking you coming and going
like that especially the ones in the
part your key in to get your lights to
turn on bring a spare key so at least
that's one L
tracking
um zip TI your bags don't stay where the
protests happen if protests are going on
I was in Frankfurt and there was
something about Snowden and like German
was not as good as it was but I knew
that like I didn't need to be a part of
that as an American one way or the other
it wasn't going to work out for me
um I understand there's cameras and mics
in your room now you can be like I got a
buddy of mine who unplugs alarm clock
and takes the TV and turns it around
every every single Hotel it goes
to that's an option other options are
just understand like you're not going to
if there's a camera you're probably that
all right um some of you might if you're
high speed ninas but you got the one
that you
found there probably still one
more honey
traps look at the end of the day I hate
to say this uh for the ladies out there
I don't want to sound sexist but guys
are much more prone to this and the
ladies are um I used to tell my Marines
we were flying over to different
countries we did not suddenly get more
attractive on the
plane like if beautiful women don't come
up to you in downtown Milwaukee on a
regular basis and throw themselves at
you that didn't change when you landed
someplace else I know for some of you
you be like man they like me here yeah
uhhuh so understanding that
um and understand that like that's why
those cameras are in there so that they
can use that
recording uh for
later
right all
right okay I've already talked about the
rest
parents I have
attend
my
[Music]
sorry just had a moment there like
really yeah okay I thought
so
but like I said
I
[Music]
be
in
[Music]
okay he also used to get confused as the
leader of the group he'd be in the suit
his boss being in
jeans thought he was the Spy or were
they disappointed um dress in appearance
cargo shorts love them big
fan but it's how to spot an American 101
like
yeah I still like them uh but here's
what so dad likes dress in a suit me I
buy local if I really want to blend in
i' go for a thrift shop so then they're
even used your shoes will
matter I don't care how European the
manufacturer is go buy the shoes in
Europe that's or wherever you're at your
shoes will indicate where you're from
100% and people like for some reason
others pick up on that way faster than
we
do um if you're traveling as a group you
government types instead of dressing
like a bunch like a platoon going on a
mission go get yourself some cool
jerseys make yourself a rugby team or if
you're prior military maybe it's a bad
mitt team because we're a little bit
softer around the side but like whatever
it is you got to do like make that group
look give it give it something else
right instead of like ring high and
tights with terrible tan
lines
we
and your friends probably reporting on
you um just understand that it is what
it is give them something cool to report
on o so where do I where where do you
get your open source intelligence from
so this I got one here this is why it's
definitely not on the page uh if you
want to know what Mafia groups are
working in that area or criminal groups
if you go to an escort site you see what
languages the ladies
speak that's an indicator it's all you
need to
know you see Italian they probably
Romanian um that gives you an idea of
what you might be dealing with what
underground groups are Opera in that
area get a map it's really fun when you
land in Helsinki and it says St
Petersburg 256 km away good part is
oops the
uh the fins are going to be great alll
Cado right but
um there you go actually you
got
there
is
en
Big
Friendly they will take you to the
best guarantee they'll
always get a cut I know from personal
experience in some different places that
they'll
get so you don't need to tell why
as their
particular merch now if you are
in
particular
two
gentl
up 15 seconds
it's mys were very
embarrassing the two
womenas
yank
show
[Music]
Packer stand not HA
stand you want to talk about travel
suitcase World Mar
Reds oh yeah I got
[Music]
team
in the US I used to was in the Marine
Corp I bring logs of State Side copen to
Iraq and Afghanistan I could get
whatever I want I could probably
[Music]
got
[Music]
care support
[Music]
Juni what you deal with cber security
all the
[Music]
time
[Music]
thank
screwed it
up
okayif to make contact Amer bus I don't
know who to call give me
a I
apprciate let me give you
100s
app
all
right so one of the things I didn't
cover I want to talk about real quick is
keeping your your laptops phones on you
at all times right they don't go in the
trunk they don't get left in the hotel
room you feel like you really need to I
used to hide them in the
ceiling
like or bring over the laptop it's it's
encrypted but guess what it doesn't have
in some countries you can't even roll
with that but make sure it's got nothing
on it right and that means when you're
using that stuff you can't log in
to
Gmail right you got to think through
that piece right but again keep it with
you at all the times all right cuz like
he'll just get stolen it happens all
right some quick stories so don't dress
like an Russian escort when you're in uh
the Middle
East
um it is what it is we all can visualize
that and we can move on right uh for
ladies Capri no no uh make sure you have
like at least to sleeve I always when I
was with my wife I'd tell her hey keep a
scarf with you at any time and like
don't me wrong like she is a strong
woman she's a pediatrician like I'm
really just a trophy husband to be
honest with you um it's participation
trophy but it's still a trophy
uh it's like I may I tell you to put on
the scarf this is the one time I need
you to shut up and color like please
okay and like understand that that's not
trying to be sexist it's I've been in
the Middle East if I say put it on I
just need you to just do this and she's
still gotten a fight in the middle of
the night with so many people
um
uh Istanbul so erdogan fascinating guy
very careful what you say keep us
politics it's get to ask hey how do you
feel about stuff but you don't want to
be talking about things in that country
okay um because you can compromise your
friends people you know and Jordan they
love the king don't talk bad about the
king cuz they like the king and they're
actually they
do uh Eastern Europe all right so mdova
had a great time uh I would go out every
night I would have the the front desk
girls write down a couple phrases I'd
practice them all night so I can really
work on the language it's big thing try
to learn some of the language uh so you
don't sound like a complete idiot um but
at the same time you know when I was
walking around malova and being shadowed
by different people uh this is before
Bluetooth was such a big thing now
they're just going to Shad your
Bluetooth you are not likely to pick up
that shadow just it's why like no one
here is trying to train you how to be a
spy and it's doing a c surveillance
inection route SDR cuz guess what you
probably aren't going to see it now
someone wants to make a talk on doing
that with tracking it with Bluetooth
that'd be a great talk um don't play by
you're not that cool right remember that
you're not that cool
[Music]
um make me your life thisal and don't
take anything be careful what you take
thumb drive stuff like that obviously
it's bad all right more shorts India I
want to do a skiing in the mes I was
told I would make a very nice hostage
there um India is very conservative in
certain areas they will have you sign a
thing on the hotel you will not bring up
anything any woman is not
is uh not your wife period so be aware
of that uh it's not really a big deal
for me but you know
uh don't talk bad about the king either
I was in Thailand I had to fly out of
the military air handed my passport off
to some dude in the middle of the night
with 50 bot in it next morning there's
some Marine who's got my passport I
don't know how just happens but having
his exit stamps right if you're leaving
in a strange way think through that of
how you're going in and how you're going
out uh Tanzania Namibia and South
America we'll talk about that real quick
uh anyone know what L Venus is so the
faulin islands right if you're for us uh
for the British people here that's you
know set of islands off the coast of uh
Argentina they're still pissed off about
that war from 19 in the 1980s they're
still pissed a lot of their van a lot of
their bosses all say l m Venus they
remember all right be aware of what
you're saying and understand that
like not everybody that's why I pretend
to be
Canadian all right so travel sop so uh
if you want the formal one you shoot me
an email I'll give you my email address
at the end uh that you can use the full
template for just put the subject line
uh travel so in it that way I don't add
you to like our newsletter or something
okay I'm not trying to fish you I just
didn't get a chance to upload the thing
um but what you want to have is think
about like your days out right 90 days
160 days 30 days check-in plan data
access departure wipe here's some
questions I like to ask people to get
them to make the right decision feel
free to steal those pictures go ahead uh
and I'll leave this up at the end if you
want to take pictures again if you
missed it if you're at the wrong angle
uh having people decide when they're
going to check in what are they going to
communicate with what's your secondary
in India they shut down mobile internet
sometimes or they'll block Facebook or
they'll block this so you need to have
thought through what's going to get
through that's why Myspace might be an
alternative you never know
um and I can tell you in Germany do not
like telegram
um it's hard to have a telegram call
there data wor data worth the risk of
being breached so I need access to the
following SAS apps I need admin
permissions and why for this
trip and I'm taking itar data like if
you have people kind of have to answer
these questions it'll be much easier to
give them a loaner laptop on their trip
if but you got to sometimes have them
come to the same conclusion that you
have that hey you're going to India not
India so China right China you got to
use WeChat for everything you don't have
a choice like you're not you're not
getting very far it's burn a phone you
know be prepared for that burn a laptop
I my business partner spent six months
at uh Sony when they got popped we
burned his laptop but he got
um like some you just give you something
give a disposable asset we can go
away
[Music]
okay
[Music]
these are
other
here these are
all
Di and she
is she car she
so
she and she some Co things like
[Music]
that
[Music]
will same same type of thing there are
many
other and I
all right and one other tip don't turn
on your phone when you're going through
customs if the Germans look can hide the
MC catcher in the ceiling like you don't
know what that
is like basically imagine mobile fake
mobile hotspot download your data
everyone turns on the phone when they
land International uh Customs areas
throughout the world they are collecting
disclaimer again we're not spies we
didn't teach you tradecraft we taught
you how to not be stupid and don't be a
spy you're not that cool there's a
special school for that this is not
it and remember provide your
skills for questions any questions and
also it's got my email address rob.
Carson s SEC hit me up you
got
what so you remember like now you're now
you're being weird right so what they
have a problem with is removable
batteries right so that's going to be an
issue and they also have how much uh
what do you want to call it um like your
battery packs how much battery pack you
can
bring okay
so they're like I wouldn't take it
that's just now you flagged yourself in
a new way if that makes sense like
travel normal but have your stuff wiped
or prepared to be breached does that
make sense cuz that's most that's how
you're going to get through smoothly
without causing more questions good
question what
else any other questions no you guys are
all super spies what you
got what's
that oh haircuts oh cons Scots
yeah
so yeah uh there's not a lot of bald
people and uh so I that's why I get away
with polish with the beard right your
haircut is going to give it off right uh
blue hair it's cool with the hacker
conferences the green hair whatever it
is you know be careful if you are lgbtq
plus which by the way doesn't mean
premium gay that's what I thought it
did uh fun fact
uh I asked one of my gay friends he's
like that's cool but no that's not what
that means um uh uh be careful of your
Rainbow flags and stuff like that all
right not everybody is as uh
understanding in the US like even though
like it's not always great for everyone
at the same time uh you're have a lot
less problems in the US than you do in
other countries okay good question and
haircut so yeah like the Justin Bieber
cut
yeah
yeah they look more like
from that you got to wear if you're
German you got to wear the uh like
salmon colored or like kind of a awful
orange and you'll be very
ger yeah what other
questions
[Music]
nothing so those are paying
fines so you just so I used to carry
money in my in my cowboy boots I was in
like Thailand and sometimes I had a
senior officer with me that got himself
into an adventure and he needed uh
police officer was talking to him and we
paid a fine so you don't call it a bribe
cuz that's
illegal but sometimes you can pay a
fine that's a good
question but you should have cash money
on you it's another thing when you're
traveling like your credit cards will
not will stop working because it's
Tuesday they will have been working and
then they won't okay if you called Chase
and AMX and everybody else it happens
always have some cash money I use the
ATM and I make sure I have it do I say
don't do the conversion here let my bank
do the conversion but pull out cash at
the airport always have cash money
because like in some countries like
you're not going to use a credit card um
but be prepared to be able to get
yourself out of
problem so i p the deit from the ATM
machine in the airport I mean obviously
I check it but like
that I'm not trying to get I'm not
trying to get the best exchange rate I'm
trying to get cash before I leave the
airport CU I need to get a car or a
driver if you're in India get a driver
ahead of time call the hotel if you're I
got a guy in India pick you up in Deli
no problem um but it's good to have a
fixer right so if you don't know
somebody call somebody you that might
have connections but yeah I always have
cash just to pay and obviously you know
about taxes scam I'm not going to get
into all that but well else I would add
one thing on that before we catch gent's
question um you'll get from banks in the
United States or even for ATMs larger
denominations Than You may wish to use
as a tip so you'll probably want to buy
a newspaper or something small um to get
some small
denominations also I depending on the
country uh a stack of $1 midles uh that
you can quickly pull out um can uh ease
that slight tipping you don't want to
give you know somebody uh 20 or 50 uh if
you don't have especially if you're in
Argentina and the inflation like that
the money you got on the beginning of
the week is now worth 20% less at the
end of the week
I just want
to cyber Li all right what are other
questions sorry all right thank you
[Applause]
all