“Trusting the InterWeb”

1. Rits is the premier independent provider of information security consulting and professional services in Ireland. Rits Computer forensics is a private owned computer forensics laboratory. RitsPondera offers the most comprehensive solution for the disposal of IT assets in a “secure” and ethical manner. PrivateFile encryption suite helps you encrypt sensitive documents & email attachments in compliance with Data Protection legislation. Rits Praesidium offers proprietory physical security solutions

2. “Trusting the InterWeb” • A primer on losing your identity in cyberspace Sean Reynolds, CEO Rits Group 2052 Citywest Business Park Co. Dublin Phone +353-1-6420500 Email: sean.reynolds@ritsgroup.com

3. On the internet nobody knows you’re a dog

4. Agenda • Trojan • EULA • Big Boys Too • Phishing • Case Study • More Big Boys

5. One of the best Trojan’s around Only $69

7. End User License Agreement (ELUA) Free Screen Saver Looks cute – fish can’t be evil!

8. Agreement is 6,500 words long

9. Oh! -We will install more software

10. You may be exposed to offensive material!

11. It is insecure

12. Oh! We collect information about your PC

13. You are not allowed to monitor what we do

14. Freeze License Agreement? • Delivery of AdvertisingBy downloading YourScreen or the Freeze Materials, End User hereby grants permission to Freeze to deliver to End User's computer, via YourScreen or the Freeze Materials, and to display to End User, promotional information, advertisements, and offers for third party products or services (collectively, "Advertising") ….. • 2.Installation of Bundled Third Party SoftwareEnd User may have the option to install certain third party software at the time …. • 3.Additional FunctionalityThe Freeze Materials may include optional enhanced functionality. For example, End User may opt to make http://my.freeze.com End User's default home page or to have YourScreen manage your computer's screensavers or wallpaper. Such enhanced functionality may change End User's default browser settings, screensaver settings, and/or wallpaper settings. The "Help" section, at http://www.freeze.com/help/customersupport.aspx, provides instructions for changing your default home page, uninstalling YourScreen, and other instructions related to Freeze Materials and your personal computer. • 4.ModificationsEnd User agrees that Freeze may, in its sole discretion, access End User's computer, and/or cause YourScreen to contact Freeze servers, in order to provide additional or modified functionality, updates, enhancements and upgrades to the Freeze Materials (collectively "Modifications"). Freeze may uninstall or otherwise remove from End User's computer the Freeze Materials at any time with or without prior notice to End User. • Use of Personally Identifiable InformationFreeze may monitor, record, collect, use, and distribute for any lawful purpose information provided or generated by End User's use of the Freeze Materials. Without limiting the foregoing, End User hereby authorizes Freeze to collect, store, use, and distribute End User's personally identifiable information in accordance with the terms of Freeze's Privacy Policy, which is available at http://www.freeze.com/Policies/Privacy.aspx ("Privacy Policy"). End User's obligations under this Agreement are in no way conditioned upon Freeze's compliance with the terms of the Privacy Policy.

15. Unexpected network traffic when screensaver activates

16. Well I don’t have to worry because I would never download such a thing? For the skeptics among you

17. Offences: Sony BMGhas engaged indeceptive practices, unlawful methods of competition and/or unfair actsas defined by Civ. Code Section 1770, to the detriment of Plaintiffs and the Class. Plaintiffs and members of the Class have suffered harm as a proximate result of the violations of law and wrongful conduct of Defendant alleged herein.-- In violation of Civil Code section 1770(5), Sony has represented that its CDs have characteristics, uses or benefits which they do not have. In violation of Civil Code section 1770(a)(9),Sony has advertised its CDs with intent not to sell them as advertised. In violation of Civil Code section 1770(a)(14)Sony has represented that the purchse and/or use of its XCP and MediaMax CDs confers or involves rights, remedies, or obligations which it does not have or involve, orwhich are prohibited by law. In violation of Civil Code section 1770(a)(19),Sony has inserted several unconscionable provisions into the end-user license agreementthat accompannies the XCP and MediaMax CDs. The list rea\lly does go on and on… Would you trust Sony?

18. You can trust Microsoft? • Microsoft acquires spyware firm, changes antispyware app to ignore its products • Microsoft recently acquired a spyware company called Claria (known for its spyware product, Gator). • They have since updated Windows’ antispyware app so that it advises users to ignore Gator spyware. • Source www.edbott.com

19. Don not expect common sense from providers

25. Click anywhere

26. Case Study Invading someone’s Privacy via the ‘Net’

28. Lets look closer at that machine

29. Hmmm… a photo?

30. So two downloads give me!

31. And now for the movie…. No, really… the actual movie…..….

32. Vodafone Greece

41. Any Questions ? Sean Reynolds, CEO Rits Group 2052 Citywest Business Park Co. Dublin Phone +353-1-6420500 Email: sean.reynolds@ritsgroup.com