RightsCon Tunis 2019

Innovation for HR's Organizations: Automation of Digital Security (Fundación Acceso)

The session will be a summary of about an 18 months of work and development of automate tools for needs in Central American human rights organizations to increase digital security, privacy and better practices in their daily work. We want to show the needs, the approach to find a suitable solution, the challenges during all this process, our current stage and our next steps. The digital security automation module system is collection of scripts that create in an easy way tech savvy solutions of Human Rights Organizations. The system is provide the following solutions: A self hosted cloud system over the TOR network, a wifi proxy that logs and geo locate every network connection a device make to the internet in order to find infected device with non regular malware, a massive USB storage devices encryption script, a real time local network vulnerability scanner, a time framed tech support remote tool over TOR network.

Speakers: Tanya Lockwood and David Oliva

User Empowered Security Tools for Defend Against Device Seizure and Network Surveillance (Noc Labs LLC)

Speakers: Shaan Bhagat and Loc Nguyen

We will start the session with a brief overview of the current operations security landscape and the tools in use. From there we'll dive into our first tool, Loc, which takes a new device-driven approach to secure an individual's data. Individuals today carry with them a multitude of devices on their person. From an attacker perspective, the simplest measure would be to go after the weakest device. Loc leverages the user’s numerous devices and their inherent secure hardware to implement a distributed vault framework and greatly increases an attacker’s effort for exploitation. We will demo a working instance of the tool and show how it can be used in a variety of situations. Next, we will demo our other tool called Noc. Noc makes it easy for individuals to set up their own, private VPN via existing PaaS offerings via a remarkably easy to use interface. In a landscape of plentiful VPN offerings, users place heavy trust on unverifiable services. Noc aims to empower users to bootstrap ephemeral VPN environments to be used on-demand. Likewise, with this ownership, users can gain insight into their device’s traffic and introspect their device’s communications and further detect external network interference.

A Safe Space to Fail: Gamifying Human Rights Monitoring & Security Training (Benetech & OSCE Office for Democratic Institutions and Human Rights)

Speakers: Rachel Bernstein and David Mark  

Training should be fun. It could also be more effective, efficient, and inclusive. Benetech, in partnership with the OSCE's Office of Democratic Institutions and Human Rights (ODIHR), is developing a game designed to teach security and monitoring principles and techniques to human rights defenders. This session will provide a demonstration of the game we have developed so far, as well as a brief discussion of future plans.