"Oh Sh*t!"....Your Digital Bug-out Bag - Tim Reid

all righty two questions to start off with who here backs up their phone Android computer okay all right decent who of those that raise your hand who would follow me into the kitchen with your phone and your computer and uh wet your phone or computer down and feel confident you want to lose any data No Hands one hand awesome all right all right so that's a little bit of what I'm gonna I'm here to talk to you about today personal digital continuity how to survive a single point of failure well you know you may have I'm sorry how does fund without a single point of failure a point of senior failure see I'm confusing myself here

um basically you don't want your Digital Life to be dependent upon one single thing failure you've got to have a backup now they say a picture is a thousand words and I'm supposed to give you maybe not quite a thousand words today but just in your mind think about what did Defcon you got done with Defcon you got done with the the boot camp your faucet job too in Vegas so you're going to go hiking out on Mount Charleston in Nevada beautiful countryside getting a few hours to get up here you have an amazing time with your backpack on your trip over Rock and you break your ankle and then your cell phone died what are you gonna do

how do you get the helicopter up there to get you now well and Hiking backpacking Outdoors we have something called the 10 Essentials or the dwell Essentials and I won't go into a lot of detail on that although catch me afterwards if you want to talk but that is kind of the framework that is kind of the uh philosophy that I'm going to hopefully uh encourage you to think about in your Digital Life now people people think about well you know I'm going to go ahead and prepare for this how prepared am I going to be um I personally have worked with a few organizations where they literally prepared for cbrn events chemical biological radiological nuclear events

what happens in the financial Network networks go down Etc this stock is not going to prepare you for that I don't want that responsibility but I also bring this thought this up to tell you it is fun to table to to to uh table and think tank and uh and pretend oh well you know if this breaks I'm going to go and fix this and if that breaks I'm going to go and fix this and unless you know it because you'll spend all day long think about what how many different things could break that you have to fix to recover and recruit and repair maybe you don't get anything done I have a note here apparently the second

uh second sign sometimes causes people problem problems they ask me what does it say so just let you know see how the homesick and then this is hopefully that helps you so are you still breathing I'm still breathing which by the way I'm sorry I'm having a lot of uh right sinus stuff so please holler if I need to speak up or anything but this is going to be our Baseline uh prerequisite if you're not breathing I'm not your problem you're not my problem you're somebody else's problem again you don't have to plan for this you don't have to plan for the eventuality that um somebody else has to pick up your job or your Digital Life at the end of your

life you can put it on in a box that somebody else can think about it all you have to think about is what are you going to do to ensure your continuity your security your comfort uh the other thing that I the reason I bring up are you breathing is I don't want to deal with medical devices in today's environment if you have a CGM or a glucose bump or something else a lot of times they will tie into the rest of your Digital Life digital accounts and whatnot um I'm also going to back off from that and say talk to your medical provider talk to your device provider let them deal with that but today we're going to

talk about assets risks remediation and documentation to go ahead and help you build a personal digital continuity plan so first of all we're going to identify some Services some key compete capabilities and as we go through these I want you to kind of remember what is what are the things that are important to you what do you want to have to maintain your normal uh so first of all we talk about communication social networking and all that good stuff next most important is probably banking for a lot of people where's the money and then we also want to talk about utilities file management and other other authentication are a little bit more nerdy but in my opinion they're actually

maybe even higher priority than some of these other items um some of us that like to do home automation other internet of things that might be important and then work from home wfh can you ensure if your primary Network goes down can you ensure that you can report to your manager and say hey please I'm still employ me and then entertainment uh this is something that a lot of younger folks um I don't think they really rock all that much and um entertainment is not all streaming maybe the entertainment is a band that you like that no longer is around or a video of someone that uh you you know it's original unique you can't

go back onto iTunes and re-download it if you were to suffer a hard drive failure next we're going to talk what are some you know individual risks what are some general Community risks again we're not going to worry about the the nukes because if somebody were to drop a nuke on to Kansas City um again you're not breathing any longer so it's not my problem uh tornadoes power outage Network outage um transportation outage is an interesting thing because again if you're supposed to show up to work and you have a transportation outage and then that was because your your Tesla caught fire and your photos in there how you're going to reach out to your

employer and say hey I've had a personal emergency I need to get uh you know a new car and a new phone so um and then what we also I talked about briefly about damage to laptop and your mobile mobile Computing device hardly anybody here was comfortable with going and dumping their phone or the computer into the kitchen sink so I would identify that as a risk because rain happens children happen they like to dump things on there maybe that beer that you got set next to your laptop you knock over your price on your keyboard all things you can think of thank you very much and then as we've identified our capability is what we need to to

maintain normalcy our risks we want to prioritize that because you know if it's uh something that you only access every six months is a really a lot of work do you want to spend the time and money to protect it we identify risk uh priorities and cyber security quite a bit um but have you ever sat down and figure out your priorities on your own personal risks I like to look at of course money first um might have any concern for my comfort and then also what's my long-term harm to my comfort and our reputation like if I lose access to a social network I may lose personal business contacts that I've been trying to reach out to

him through another message they may simply ignore me because they don't know that new number or that new screen name or something else so I've lost for reputation at that point and then also if you need to look at how hard is it to repair maybe it's really easy to protect that's super expensive to repair and so we need to pump the priority up on that and the thing that it's probably absolutely most important to me is how hard it is it to replace again I can go to iTunes and redownload um the the song is your body would say uh a picture of my grandma I'm not ever going to get that back I

don't have the opportunity of taking more pictures of Grandma so that probably is going to be for Me Maybe for you as well the very most important thing

so after that after all that then we prioritize we want to determine our recovery plan and it is left very intentionally non-technical because what works for you is not going to work for other people and then you also have to determine how much money and time you're going to spend on this maybe you want to spin up a Amazon uh work desk vdi to have a backup computer that's pretty expensive if you run it for a while maybe it's cheaper just to go to Walmart and pick a 300 laptop if you're uh original laptop burners um so you also are going to want to think about how quickly um you need to restore recover um maybe it's something that can take

six months maybe it's something that if you're an initial capability of taking a receiving calls down uh goes down maybe you need to go to Sprint or T-Mobile that very next day and pick up a new phone um writing it down so not only are we going to write down a backup plan which seems kind of recursive but I can't tell you even the people that have a backup plan it's like uh I'll think about it one of these days they cannot pull out the sheet and document it to me or they can but it then got burnt out of the house so how the heck are you going to back the or restore things if you

don't not if you don't have your your original backup plan date to go to um I'll again re-emphasize perfect as the enemy of good uh if you spend 20 hours thinking about one situation and how you're going to recover from uh nuclear kitty cats from Mars maybe you'll never employ a Dropbox account to head to back on the very basic items that you need and then also you've got to practice it because they're getting a backup plan unpractice is on a true backup plan a backup that you can in office store or never tried to restore is a income so a couple quick examples um again the most basic item that everybody could do walking out today is

if your your phone or your uh Community telecommunications service does not already offer an automated uh backup camera roll backup go ahead and enable that Dropbox I haven't used Dropbox on all this week for a long time um but it used to be that you could get 50 Megs from them or 50 gigs from them for free I think um if not I'm sure it's almost probably worth tossing 50 bucks out of my year to do some basic backup and to re-emphasize to really just hopefully inspire people I like to ask people when I'm talking about this who must you talk about in past tense because again you can go get the song of the day off of iTunes but if you have a

favorite pet that you have photos of that pet has passed you're not going to have photos that you can remake for me my my grandmother my mother I unfortunately don't have the opportunity of Ever Getting photos again so I am going to protect these photos almost you know my life

not only do I have a DropBox which honestly I haven't access for a while I have a complete backup of my land uh everything as far as desktop computer laptop and computer um uh different accessories on the on the land I'll go into a Synology Nash I like Synology I won't tell you that you can't use anything else but I do like Synology I like all the services that it offers and that Synology then goes and gets pushed up to Blackman back Blaze um I will be improving this this year um I have a body that lives on the opposite side of town I'm going to buy a secondary Synology not only will then my

original Synology at my apartment pushed to the cloud it will push across town to my body and that way say a tornado hits my apartment I can drive over to my buddies and pick up my backup hats okay I don't even have to worry about black police the other thing that a lot of people don't think about it in today's world is authentication issues how quickly you can walk yourself out of your own accounts say you have a regular Samsung phone maybe it caught a fire maybe it's I think that might be the normal operation mode of those follows I hate Samsung um you know it's burnt pop is wet and burnt and crushed where's your two Factor

where's your passwords if you use a password to save

so the way that I personally back up my authentication is I have registered multiple multiple UB Keys again don't mean to be uh vendor specific but you be key is the bomb uh I register for multiple multiple UB keys for my account set required two-factor authentication uh if for some reason they don't like you the key or it's a little bit more [Music] um precise I use a Nitro key Pro which is offered by a German corporation a a public like an organization I'm forgetting exactly how they're classified but they're like a charitable technical organization that allows me to not only store keys on there crypto keys on there it also has some cryptographic media storage in it as well so I can

push my two-factor seeds and then also password manager anything else that I want a local equipment encryption on I can keep that and log out back I can score a second coffee with my sister Etc and uh those were my topics my talk do we have any questions your conversation did I make any sense awesome well I want to say thank you to the uh you guys for your kind patients and then also please let me encourage you to thank uh have you thank the vendors and any folks that you're seeing the vests are because without them we would not have a local security conference to come to thank you