BSidesAugusta 2014 Tim Fowler - When Zombies take to the Airwaves

all right all right we're going to get started again so this next gentleman Tim Fowler comes to us all the way from Asheville North Carolina it's going to be presenting uh when zombies take to the airwaves on wireless uh wireless security he's got some awesome Wi-Fi cards um that he's going to be giving away perfect Wireless penetration test so you guys uh get come up some good questions and join me in welcoming Tim [Applause] power how many of you are in this talk because it says zom all right you're going be really disappointed no uh so I'm talk about uh when Z pi to the otherways a little bit about who I am my name is bower I'm an

IT security consultant out of Asheville North Carolina with a company called Mountain you can find me on Twitter at Rubik's um that's me a little more about me I'm Christian um proud member of Western North Carolina infos uh big open source Advocate I have been thoroughly enjoying this uh conference because everybody is talking about open source tools giving back publishing your code awesome keep it up uh love Linux absolutely love it more specifically um Wi-Fi that's kind of my forte I I spent a lot of time playing with different Wireless things um my first ever uh shell access I got was because I was able to compromise a wireless network that was really really cool for me and it's been downhill since

then um something I'm really really proud of on a personal note is uh I back in March um I decided that I was going to try to take control of my health and and everything so I officially crossed the 60 lb threshold that I've lost since March um and in the EV infoset Community we all celebrate people's success so that is something I'm seriously proud of and I'm going to keep working next year I'll be a topick so because I'd like to be around a really long time to do stupid talk on why this talk anybody got anybody got an idea why we're going to do this talk why not that's I because zombies zombies who said that

yeah we'll get you this zombies we get to talk about zombies this is also got the green um that's the whole premise of this talk is dealing with zombies anytime I get a chance to talk about something really really non-traditional I'm going to take advantage of it especially if I can tie it into a security uh topic but specifically we're going to be looking at how can we possibly use wireless technology 802.11 to save the city and a post-apocalyptic zombie infestation this is going to be fun it's going to hopefully be uh somewhat uh uh gainful information so we've got a scenario here that we're going to kind of play out we're going to be in Augusta

geordan thought that'd be pretty convenient since we're all here uh everybody in the Stream is actually participating in this presentation right now so we are uh we are the governing body over austa uh we are made up of firefighters uh police officers county or city administrators mayor everything we are to get support infrastructure for the entire city and it is our job uh in the next 40 something minutes to try to save austa from an opinion on infestation and we're going to use that we're going use wireless to do this uh few unfortunate situations internet cellular pretty much useless uh in a postal situation we don't have that stuff luckily our our fine city folks have

worked to get us power so we we do have power but the biggest threat that's facing our studio right now zombies they're coming from Atlanta from the CDC um which is funny because I'm actually going to do uh this presentation again in Atlanta which is just absolutely perfect uh with the CDC so here's the pretense for this thing we have humans and all of the humans we carry cell phones we carry laptops we carry tablets we carry these all these devices that are keeping us connected all the time well what happens when one of those become the human beings becomes infected we now have zombies with cell phones which for the most part zombies can't really use cell phones they can't

update Twitter they can't update Facebook unfor that going to be cool if they could um but for the for for the pretense that we we're dealing with really dumb zombies um if we any zombies experts in here if so we can argue about it afterwards and we'll both be wrong so don't worry about it I I will argue my point they can't use smartphones but we can use their smartphones and we can use them against them but we also can use the human being smartphones to help defend and protect the city and we're going to look at three primary points that we're going to head on today the first one's going to be information gathering information is

one of the most critical things in any kind of situation uh being able to make a decision you have to have proper information you have to have proper data sources otherwise it's just good luck um we're going to look at Trends and forecasting how we use the information that we gather we're going to make predictions based off that and lastly and it's probably really the most important in my opinion is going to be communication and the communication is a result of the information the trends and the forecasts that we make as a as a as a group then we have to communicate that to the masses and then we have to start the whole process again we have to start

gathering information how is our Communications work were they affected are people doing what we ask them to do are they not doing that which then creates a cyc uh thing the so the first one's going to be information gathering and uh one of the key things with information gathering uh from a wireless perspective is that we have to kind of change one of our uh thought processes and it's really really simple so in most Wireless environments we'll take we'll say let's say there's a mesh Network a Citywide mesh Network in Augusta which Augusta should really work on uh just look what they're doing in Austin you'll see the benefits of it but we're going to assume that we have that today um so

you have all of these access points that are talking to each other simultaneously stuff and they're providing network resources and internet well as we said earlier we don't have internet anymore so for the most part the access points are pretty much useless at this point unless we change this one concept and instead of a wireless access we turn it into a wireless sensor and specifically we're looking at sensor sensor is nothing more than a device to to measure some physical property record something data something we use sensors all the time we got temperature sensors weather sensors sensors for just about everything we got physical activity sensors that yell at you if you haven't moved in 30 minutes and stuff like that

you know fitbits and stuff we use sensors every day for various things but when we can use access points and we can use existing Wireless infrastructure and as a means to actually gather information instead of just we're going to provide service to you uh in this case internet access no we're actually you're going to be the service providers for us and we're going to use this to actually collect this information so what we've got up here are uh any any people use like UniFi uh ubiquity products and stuff uh anybody so ubiquity is Wireless uh infrastructure manufacturer they make access points and things like that we've got a couple of snapshots of uh some of their data um uh

interfaces here uh web consoles and you can't see a lot of it's uh grayed out for specific reasons and stuff but in these things we have things like mac addresses which are for all of purpose unique to every single device uh my Mac address is me your your Mac address is you well if I'm able to see a MAC address does anybody just right off hand what can I do with a Mac address in the backfur I I can see the manufacturer um anything else smooth it I can smooth it if I if I you know if I want to uh I do a lot of Wireless assessment and that's one of my favorite things like hey you're a

legitimate client not anymore um and so we have that ability but the thing about it is the MAC address of our devices for all intents and purposes that is the identifier of that device it's what determines what that device is and because they're unique it's e easily for able to distinguish uh your device from my device but from that because we have a unique data point now I can use that unique data point and and watch as things happen I can watch as it moves uh from access point to access point I can look at specifically the kind of data that's coming out of it to see you know are somebody Act is this Mac address in

active use real simple what is the bandwidth and in the on the far right side these are actually bandwidth uses uh for each of these map addresses hey this person is using you know they use like four Megs of of data this one's not really doing anything it's just sitting there we have all of this data this is basically what I classify as Wireless metadata that for the most part we don't use I mean I will you from a from a defense standpoint I use map addresses and all to filter them out block access uh map addresses things like that so I use it you know to try to keep my network clean and stuff like that but

for the most part we don't actually use all the information that's provided to us um and but in the zombie apocalypse that we're facing in week can actually use this information in so many different ways um this any Cisco wireless system people here I I haven't dealt a lot with Cisco wi so this is a really cool map this is this is a combination overlay with got heat Maps U but specifically all these little call outs that you see these are unique identifiers Mac addresses and where they exist within this light within this building well guess what happens when that Mac address moves when you walk from one side of the room to the other

associ it moves I can see that in real time so the the premise here is that in the zombie apocalypse we're all going to be carrying these devices I'm going to be able to we collectively actually we're going to be able to look into this all these sensors that we have we're going to go all right we can see a bunch of people here we can see a bunch of people there there's nobody over here and so and we're going to be able to look at these population density the first the first thing out of G we're going to get a snapshot of where our uh where our population is because we we don't have to rely on them to actually

connect to this network uh one of the beautiful things about wireless devices is that we're all the time probing for networks and so as long as I can capture a probe I have your your Mac address then I I can track that even if you're not connected to my network and you walk over here your your device is is looking like Hey where's Bob's home network is it here is it here is it here I can see that data we can capture that we can then put it into a system that allows us to actually analyze going all right we're seeing lots of we've got a huge populace right here very dense and then we've got almost nobody here we've got a

few people over here and then in a few minutes we can take another snapshot of the entire system and go well we're starting to see movement these five devices they're now on this a a points which so they may be a block or two over and Stu so we're starting to be able to just use these unique identifiers to actually start to quantitatively build out a real what's really happening we're able to actually see movement um it's it's a core man's GPS system is what it really is um but it actually works really really well and and so um and and and not only can we look at like population density and stuff and the movement um but now so

we've got Mac addresses we can see where they're where they were located we can see where they're located now but now if we take and add that to let's see who's let's see if anybody's using their cell phones because what's going to happen when uh somebody gets infected and they're now a zombie what's going to happen to their cell phone they're not going to be using it anymore well what does that do all the data Flatline you're still going to have data because all of our all of these email applications messaging applications all of this remember we do not have cellular so they're going to be trying to find our device is going to be trying to get some

form of communication out you're going to start seeing little spikes of of of traffic but they're going to be very consistent probably 15 or 10 15 or 60 Minute intervals it's going to become really really easy to determine hey this guy was was trying to do something he was just he was trying to do something on his phone and now he's not two hours later it's continued to Baseline guess what Bob's not very healthy anymore he's a zombie and so what we can do is so now we have unique identifiers we have uh we're able to see the population density we're able to see the population flows as as their migration and movement um and now we're

actually able to look at the data usage going not only can I determine fairly accurately how many what the zombie population of this subset is but as well as the human population that we just in that small scenario we gain so much Vital Information that can help us make decisions because if we have uh a large populace over here but there's nobody over here I mean there's no zombies There's no nothing where would we try to get people to navigate to we want them to go to safety and we can see this snapshot going we have safe zones within our cities that we can then try to get people to uh to safety this is one of my favorite uh uh

that we've got this is a a map that a gentleman named Brendan o Conor did he did his haulk at black hat I believe black hat last year dealing with creepy doll and F bombs um I encourage you to look that up what this is is so he he simply has sensor is a Raspberry Pi Bas sensor with a couple of wireless adapters and stuff and all he did put it on a bicycle with battery pack and he rode down the street every single one of these points are unique devices that he found on the network or just not on the network but just over the air nobody connected to him or anything like that he was just

able to grab this simply outa so he's on he's on a mobile um uh sensor what if these sensors are stationary and the targets are moving you can easily see is if you're walking through this through the the the visibility of these access points for sensors we're going to pick you up we're we see these movements and this is a real world example here of where we were actually able to track human beings and each of these are tied to a specific device if you've got multiple devices on you you know anybody here have to carry two cell phones to work and then your personal yeah now I've got two pieces of information where I can truly track you because there's

commonalities between those devices um yeah so this is a little bit about uh the the DIY stalker boxes these are this is creepy doll fbom like I said I highly encourage you to look at this uh for about $500 you can create a censor network of 10 nodes to do exactly what I'm talking about to to be able to capture this information to put it in a form that you can actually assess this make assumptions uh try things out um it's I mean it's a really nefarious way of tracking somebody thus far it's legal because it is over 2.4 GHz it's ISM B there's no license there's no regulations on it um probably won't be

very happy if you get caught doing this but it is technically legal um so uh anybody remember Snoopy drone uh the guys at sense post I think uh 2012 Decon they uh created this drone that was doing the same thing they uh they created a the snooby framework um that it captures all of this data that it's looking for Mac addresses it goes it further as looking for like SSID probes which means I it's personal identifiable information if I have your Mac address and I find a couple of ssids that you are broadcasting then I have the ability to pinpoint your Geo your primary geolocation so even if you're not from Augusta but you're here I can

figure out what fairly good accuracy where you live based off those ssids and some public databases and stuff and they were just harvesting this information directly out of the airway uh Trend forecasting is is really where we get so we have a lot of data we've got zombies moving like crazy there the the whole purpose of a zombie is to feed and survive I think we can agree on that so we're able to look at uh make predictions of migration um typically I I I believe in my research of watching zombie land and World War Z and Walking Dead and Shan of the dead and stuff legitimate research for this so U especially when you watch the you

know the director's cut it get you know so many others um they they typically hoard and and they move in hordes uh and so it's not very rarely dealing with one so you can look at it very much like uh animal migrations they're they have unique paths and stuff and there once you can kind of hone in on their signature in this case their devices and things we can start to predict where they're going well obviously uh they probably going to go where the most people are because it's the easiest and stuff so but I understand that going like hey they're headed to I don't I don't know much aboutus it's forgiv so they're headed

towards the mall I you zombies at the mall that'd be fine um but that that could be a I mean zombies don't know but there's some there's some basic instinctual things that's going to happen you got to treat them pretty much like animal instincts and stuff they're probably going to do a pack mentality when and so we go after a bunch of people the the big fat people like myself were were screwed because y'all are going to run and I'm still going to be left behind and I'm going to get attacked and the zombies are going to be happy and it's all that stuff but if we're able to properly forecast and make these predictions based off the

population based off the movement uh based off the data Trend and stuff then we can actually go hey we can actually start to step up our G we're not just going dear austo we're sorry good luck we can go we've got a plan we're going to we're going to try to the same stuff um what we've got up here it's several different U migration and prediction forecast we've got in the bottom right anybody recognize that what that that one is hurricanes hurricane predictions for 2013 with percentage of going hey guess what this is pro this is where they're going to go they were wrong but at least they made predictions and and St weatherman I

mean is it kind of snow 5050 again September so it's probably not s but I can say the 50% chance of s I'll be right 100% of the time um so predictions predictions are you know but at least we have some data to make these predictions off of we can model things um the uh the top right anybody guess what that one is for an adapter yes yes seismic I'll get you I get you this this is seismic prediction well how how how they come up with this seismic prediction they collect the data they go hey we got a bunch of seers seismic sensors and uh and they collect this data over time and go hey

this is most likely The Hot Zone and and so we're able to use the same thing to a to create forecasting and stuff uh we have migration up here these are uh some kind of rare bird from Asia it just looks like a cool one um but but in the top left the bottom right is just birds in general and the types of birds and stuff well all this stuff is is is uh data over time and that that's one of the problems that we're going to have in in the zombie infestation we have to get the data fast and we have to be able to act on it fast you know eight hours into the zombie

apocalypse I I think I read some research you research into the zombies that like 30% of the population will at that point been infected within 8 hours and and in a given Urban environment stuff that's crazy so we got to be able to act fast and stuff which is which takes me to another point with this Wireless stuff uh up until this point we've been assuming that we've been do we started doing this at patient zero when in reality we've probably been doing this for years we probably had these data sensors Wireless sensors I mean access points cat cataloging all this data looking at the Baseline traffics being able to F follow movement and stuff because if we

had done that it would be really easy to make these predictions whereas if we're doing it just right now day one or zero we're we're making a lot of guesses in stuff this is the really really big thing that everything up to this point in the zombie apocalypse um scenario we've got it all culminates into this one topic communication so we have data we know where they're at we know where they're moving uh we can predict how fast they're moving for the most part you know just divide by the time it takes from from access point access point the distance traveled and there we've got some quantitative data there what good does that do us if we cannot

communicate we don't have cell phones the internet's basically broken so what do we do how do how do we solve this problem guess what we can use wireless it helps a lot um specifically any ham video guys here okay you guys in a post-apocalyptic situation will be my best friends okay I love you guys um and we all should and there there's several reasons because H radio guys they're just they're for the most part they're absolutely awesome but I mean for the most part H H radio is was designed for emergency situations like that's their bread and butter and stuff these guys are going to have communication systems that are allow going to allow us to talk first of all

we're going to be a I mean we said Airways so I'm not just using ADH they're going to be able to actually talk they're actually going to be able to give uh audio instructions vocal instructions to people you know like turn on you know the radio and like hey run I mean it's pretty simple but run we just run go uh go here go there and stuffff so the hand radio guys are going to be really really important especially um early on because they have a huge advantage over just traditional Wireless Systems because I can go this far with my C they can go this far they can reach a lot of masses and and things like that

so and they get really cool antenna R like this for like because I'm not hand licensed I can't hook an alpha adapter to this oh it's it's I need to get my uh license just to do that so and the reason I want to do this is uh uh they're able to operate on the 802.11 Spectrum channels 1 through six so this is a two 2.4 GHz Spectrum um they can they can operate that which is awesome because now we have an overlap of systems so we got the ham radio guys that are able to talk over like n 900 mehz and all these other different channels and stuff but now they can actually use our

communic our uh device communication Spectrum as well so now we can set up stuff like IRC can broadcast people can can actually connect to our to our sensor Network and we'd actually be able to give them instructions they'd be able to give real time feedback um sorry guy I'm going to send you out in the field good luck we're going to stay here you're going to go out the field and you're going to report back you're going to be able to utilize some of this stuff uh overhand radio specifically the 802 11 those first six channels so that we can actually set up additional communication means so we can start having actually rebuilding the infrastructure while

we're doing this so we can actually have uh our citizens stuff start reporting back into imagine if if as a uh citizen if you just pulled up your cell phone and you open up the browser and it automatically just took you to a web page that had instructions we can do that easily with this infrastructure that has actually survived it will most likely survive the post octic situation because hamradio guys are a little weird and they're protective of their stuff and they they fear emps and all this Stu so they're going to be our best friends I make friends with it make friends with h r um I make friends with h radio guys because

of this uh this you probably can't read it but this is a little excerpt from Wikipedia uh specifically uh dealing with the SEC regulations on 802.11g in terms of the hand radio people and if you can read the very very last line it said the maximum allowable output power is500 watts do anybody realize how much 1500 watts is you can Reach Out And Touch Somebody but I can't I'm still in I'm still in the regulated 2.4 GHz the the 802.11 spectrum because I don't have that license I can't do the 1500 watt yeah yeah Che but it's still fun you last that's all um as a as a as a consumer is just a normal person there there's a lot of

variables that go into what we can do but for the most part we're fairly limited to about one watt Max and that depends on the antenna size and the transmission size generally we're going to be a half wi so the the the uh cards that we've given out they're really awesome the alpha cards because they will do uh a 41 watt but you have to travel to the legally use that so just change your country code um and it will unlock it will unlock the transmission power and you can go all the way to 30 on which cool but so let's assume that we're using one watt maximum or 1500 watt I want to go with the 1500 watts uh

this going to be awesome so uh hand radio guys they're they're going to be our best friends they're going to be able to help us get Communications to the masses both through uh through radio U Transmissions um but as well we can actually use it to transmit data because there again data is the most important thing that we can get right now is the more information the more data that we can capture in real time the better decisions we can make the better Communications we have and it starts this whole cycle again so anybody familiar with risk architecture uh reduced instruction set Computing uh arm arm arm processors are risk um I came up with the new one it's called

list and it has nothing to do with computer architecture um but it just it worked out perfectly uh limited instruction set communication so the idea is that we have a small window of in which we can communicate instructions and uh and so how being able to do this effectively everybody pull out your cell phones or devices don't worry I'm not hacking I'm not hacking if you if you're willing to turn on your wireless and just do a scam what you're going to what you're going to find hopefully the guy's closest to me is you're going to start to see something interesting in your sside us damn huh why are you still here so people are finding

okay seriously zombies run run run so so people are seeing okay what this is is uh this is this is one of my favorite Wireless attacks if you if you want to call it that it's using the ndk uh application which is phenomenal um and I don't know why my formatting is all screwed up but uh basically I'm able to broadcast instructions up to 32 characters I think uh per line as much as I want to it didn't this is and every single person that's in the vicinity of my wireless adapter here um can see this which is absolutely awesome because when you're running I'm not going to run because I got the mic and I'm just not

going to run um because if you can see that it just says you have to outrun me um that's all you got to do just outrun me you be safe um when you're running and stuff like not be checking websites and stuff like that you it's really easy to go all right go north take third streak go this is really really interesting way that we can communicate that most people don't think about I I cannot take responsibility for this the uh the guy that gave me U the idea for this was Darren kitchen um back when they were doing the occupi Wall Street and stuff he had the occup pineapple which is part of the Wi-Fi pineapple that didn't give

away later and it was way that you he was basically broadcasting in political statements over ssids how cool is that stuff but then I got to think like this is actually a really really easy Communication in it because it works on every single device Mac Linux Windows Apple uh iPhone Android doesn't matter it's system agnostic I can get you data and so if I if I put put quantifiers in going like all right I don't want you to run before you go north you know it you're able to easily decide from going all right this is how I can follow these instructions guess what zombies can't read so we now have we have a Silent

Communication System here that they have no ability to to do anything here and so and there's a lot of different applications to this but this is specifically U this could be really really bad now I don't in reality know how many people's going to actually open their SSID list actually I know a lot of them are because guess what these are open networks how many people have your phone set to automatically uh show open networks if you do this is going to pop up in your face well we're in fos we like security we like operational security so we probably don't have that let's take it outside and see how many people get the same

list automatically this is going to help communicate to the masses and it's really really fun like to be able to do this but what's really cool is because if we have a a network of these things we can put different instruction sets as ssids on each of these different access points so if we've got this uh this grid and we want to get everybody up into the top right corner we can systematically change the ssids of these access points to point everybody that direction that's kind of cool with me I I I give one away that this stuff is even possible uh so ultimately what here in this wi-fi system we've got Communications and uh information

Gatherings Trend forecasting and this is just a the think the more information the better predictions the better communication the better Communications the more information that we can gather better predictions we can make which results in other Communications this is really cool this is the way that we can uh effectively use low cost technology that's the thing it's like why I I specifically went with wires in this because everybody has it what do it cost us to do this stuff everything that I've talked about can be done for free if you have laptop you can do this forer now you can't do it on that scale which you can still you can still do it the problem

is zombies really do exist now we're going to get to reality so I do believe in zombies uh but not to liveing Dead uh but literally The Walking Dead uh these are cell phone zombies these are data zombies these are the people that we face every single day that walk around like this all of this stuff they never take their eyes off the cell phones they're always tweeting they're always texting they're always on Facebook always checking their emails things like that the reality is we have a bunch of Walking Dead people that they're they're constantly communicating and things like that but they don't understand the implications of what they're actually doing uh the kind of

information that they're publicizing to the world and because of that what we're actually starting to see is that our fishal scenario is not farfetch it's not at all in fact it's real um everything that we discussed today is happening in the real world today um and I can tell you with 100% accuracy that is because I'm but not just me but the fact that I can do it means that anybody else can do it specifically municipalities governments large corporations they have this is a this is a this is the wild west is a 802 11 because I can now start tracking people legally I don't have to get I don't have to get a a tracking

warrant or whatever I don't have to put a GPS tracker in your vehicle if I control if I control enough access points or our sensors you're going to you're going to track yourself for me and there's in some senses there's not a lot that we can do about wireless surveillance which is one of the creest concepts to me to know that it's it's not GPS it's not you know private investigator hiding in the bushes with monoculars know it's like we're actually giving this data every single day every time we turn on our devices and stuff we're allowing somebody to actually be able to track us and what they do with that information that's up to

them data mining this is the big one retail stores they love these things they love being able to track uh best by recently it's not recently but they they had there was an issue where they were actually using the access points in their stores you track people's movements in the stores to figure out where they were visiting what sections of the store how long they were spending time there well that data has Direct Value that data is financial value to them because they're able to go hey this this section our homegood section or whatever we're just not making money what can we do and stuff so then they make these predictions they make these Changs they communicate new things to

the clientele and all of a sudden sales go off amazing was just a little bit of data that was coming out of smartphones so data mining is a really really big one say but more specifically it's Trend forecasting we're able to predict not only uh the type of uh shopping habits that you have how long you're going to sit uh spend in the store I can tell you when you're going to come back to the store I can tell you where you know which coffee shop did you like to visit because you're broadcasting that SSID and it's Unique to you know Second Street in Augusta it's the only one in the world guess what you visit that

coffee shop it's really easy to extrapolate from basic information that we're provide you of our devices this comprehensive profile of all of your activities and things and I'm not the only one that kind of finds this interesting um there's some major major companies anybody heard of uh ukl I I had not heard of this company until I started doing this research and actually one of my good friends uh Michael James uh he one of his blogs that he sent me actually pointed me to this specific company and I loved it because of so of wording that they actually use on their website is just absolutely horrifically terrifying for me and it puts the biggest smile on my

face uh U shows how your customers shop U senses how smartphones flow through the space and how long they stay and how often they return that's pretty explicit doesn't doesn't there's not much uh gray area there as to what they're doing they're tracking us um and what's really crazy is they're tracking this with cheap off the-shelf devices um and they're doing it for low cost they're using open source tools to do this stuff and they're making tons and tons of money doing this they're using our data our movements our activities to control the zombie Gord we're old going the zombies where the where the ones that they're actually trying to to monitor when we take to the

Airways uh this is another one smartphones send out short pings as they search for Wi-Fi networks nearby these pings include the phone's MAC address a unique string of letters and numbers signal strength and nonpersonal identifiable information that's a lie if because these pings that they're talking about are probe request either to a specific SSID or now they've started going to broadcast but I can deter if you broadcast or uh send a pro request for Tim's home network that's personal identifiable information okay now what can I do with that that may be a different question but the fact matter that gives me one just little bit of information that I may be able to use later uh against you

and there's nothing keeping these companies from doing the same thing because they're collecting nonpersonal identifiable information yeah they may actually be but the next guy may not be uh this this is my favorite infographic that they have and you can just look at it this is their whole process they they look at how how you know frequent you visit uh how you know pass by location um look at foot traffic versus customer traffic this is huge any anybody work in the retail industry at all if are if you ever my first one of my first jobs is working at Target this information is gold being able to work on your conversions and things like that get your Sals up and

stuff like that this is huge and people are actually doing this iPhone users be honest raise your hand I mean who bought who went and pre-ordered an iPhone 6 or 6 Plus we'll talk later okay so I this is actually a a little bigger deal than most people realize Apple came out when they uh released one of their iOS uh 8 uh previews that they were going to implement a feature that randomizes the Mac addresses when you're scanning for these networks to help mitigate some of this now their implementation is completely broken it doesn't work good try but when you've got when you've got entities such as Apple that's going this is starting to become a problem that

people are actually going you know they're exploiting the fact that we always have these bones to get this information out of us that they're using for seemingly uh legitimate purposes beneficial purposes in terms of growing sales and it helps grow the economy and stuff it's just as easy to go to the other side of the equation um this was cool uh so this is a wireless device eat map from the Boston Marathon uh in 2010 um which this was this was cool for me to go if we there's some company out there that's actually going we want to just we we're looking definitively at the how many people and the population of where people are at in these major

events and things like that I'm going if they're doing it who else is doing it if if a corporation is doing these things hypothetically could there be somebody else that is doing this guess what I don't have to have I don't have to have congress's approval I don't have to have any legislative Authority or anything I can do this for free nobody at this point can stop me and if I can do it everybody else can do it specifically and that's really the the scary thing is while I love Wireless I think inherently it's broken and that we're going to have to work really really hard to fix and try to mitigate a lot of this stuff and

it's only going to get worse as we go through and add more and more and more and more devices I was working on a network assessment just the other day where last year they had about 400 devices this year they have 12200 devic on the network that bring your own devices that's outside of trying to support that God bless their hearts uh this is a this is I mean we're growing I've got cell phon I've got laptop I've got tablets and stuff I mean I've got so many pieces of equipment that that's utilizing Wireless and stuff and it's just it's hemorrhaging this data we've got to figure out a way to to kind of roll back the clock and go we're gonna

take a slightly different about this because it's my theory is it's only going to get worse um because you know everybody was like the NSA uh prism all that stuff I don't have to have a wire tab I don't have to call Google I don't have to do that because here here's the great thing is a service provider you know if I provide you wireless internet through this mesh Network and you accept the terms of service agreement I control that and I can put in there I control this data if you adhere to it so I can sit here and some of the very same things that we got all up and arms about as as

a society as a community the DN are doing I'm we can do for free and if youall want to we'll do it afterwards um it's it's that readily available so this is a real world thing um and this is how I believe that we could actually utilized basic Wireless technology your links's router Pam radios and a few other software applications to actually defend ourselves somewhat in the zombie apocalypse um but also it really iterates that this we're living in this kind of a postive situation where uh we are the we are the data zombies we are the Mindless uh things are just going about our daily lives and these entities have the ability to harvest that data

and ultimately manipulate us um they can do all sorts of things and so as much as I love Wireless at the end I finish every Wireless presentation saying Wireless sucks so uh any questions or comments or thoughts or yes

sooc yeah so they've been trying to do it for years now yeah so so so no no no so I was in my research of zombies you know it's like that they uh some people believe that they actually do maintain some uh habits of their former host so that is technically a possibility the biggest thing is this is this is where it's really important as a as a society so we would have to be able to act super super fast we have eight hours max to try to eradicate this if everybody's on iPhone for um and four and a half sorry I don't yeah no it's it's a legitimate question and and I mean understand this

is a kind of a far-fetched scenario and that's what makes it fun and we can laugh U but in this in the scenario yeah we would we would be unbelievably under the time crunch uh to be able to make decisions and uh be able to act accordingly and the easiest way to solve that is to have years of Baseline data if we had years of Baseline data the moment we get the call from the CDC going like yeah we accidentally like a zombie fell out of an airplane over Augusta good luck we'll be there in in nine hours uh we have the ability to jump into action knowing that we this is this is what our baselines are and now

we can start looking for deviations away from that and then act accordingly but in reality we're dealing with a very very small window um if we were look you know if you were looking at larger cities and stuff I mean the the the hypothetic is not even even possible to do this um but then again we're dealing with zombies so it really doesn't matter none none of that aspect is real YES possa Network between you know all SM ofcy that everybody their phone Searby devices I see so all it is it is possible yeah you so basically with that you been creating like ad hog Networks and you would have um so the question if nobody heard is

like what about the feasibility of doing like a peer-to peer Network between all the devices and and things and that is definitely possible the problem with that is I've got to be able to communicate to each of the citizens on how to do that now if if if my legislation for the city of Augusta passes where all of the cell phones in the city gets to go through my office and I get to install my own software on them that won't be a problem but otherwise it would be a it would be a logistical issue that any time you where it require an involvement of the citizens to specifically do something other than run um fast uh it's become a

nightmare unless we've made contingencies for that you know if we had if we had this system in place where we actually call zombie education and zombie awareness um which every city should do why not um then then we we could actually probably do that but it is and the other issue that you have is uh a lot of the um smartphone chipsets and stuff like that are very limited in what they do in terms of becoming an access point it's getting getting a lot better because now almost all smartphones support hotspot mode and stuff like that um but it it is a it is feasible but it would be a little bit more difficult it' be much easier as as

a city if we took control of going ahead and generating that kind of mesh Network ourselves because we can use it for legitimate purposes of providing service to our to our uh um population and then when all head breaks lose then we can we can go on offensive with it yes same Wireless issu you're talking about vulnerability being able to also apply cellular networks same thing there okay so I'm not a cellular expert um and I'll never claim to be my experience with cellular is this uh first of all it is very expensive to get into the cellular game to even play around with it up until about the last maybe two and a half three years ago uh we're we

started seeing these um like micro sales from like AT&T and stuff that you could use as like range boosters and Rule areas and stuff that we really didn't have access to the C of the network because these spectrums uh based off my understanding is licensed to these carriers and stuff in order to gain access to that carrier Network I have to pay them to do it um and so so the next question is like well my smartphones on this there's they're specifically designed not to be able to communicate on the network in the way that we would need to to be able to actually utilize that cellular infrastructure um I I really uh so there's one of those things that I that

I'm kind of optimistic for um because I I hope we did it right I completely don't think we did um but until we have the ability the uh to do the research and to actually test the how the set systems are actually working from a security standpoint and stuff it it's kind of the wild west of we don't know if they're my assumption is that they're just completely insecure the same way that 02 out 11 is yes last series did that with theology well see now you have research we see first of all she's an echolocation which was crazy awesome which is actually completely feasible um you could if you could enable all the wireless devices I mean uh uh

microphones and all the cell phones in this room and you were able to actually you know have it a protocol that can interpret that that data it would be really easy to create some kind of a visual representation of the the surrounding Acoustics and stuff which would be cool which is something else you could do it's like you just have everybody just walk around really quietly and and then we can just we can we can sit back in our Command Center and watch the zombie apocalypse take place and Utopia tomorrow um any other questions I don't know where we're at on time so any others so that's Z apocalypse we all die