{"id":12578,"date":"2018-06-14T10:45:17","date_gmt":"2018-06-14T18:45:17","guid":{"rendered":"http:\/\/www.palada.net\/index.php\/2018\/06\/14\/news-6347\/"},"modified":"2018-06-14T10:45:17","modified_gmt":"2018-06-14T18:45:17","slug":"news-6347","status":"publish","type":"post","link":"http:\/\/www.palada.net\/index.php\/2018\/06\/14\/news-6347\/","title":{"rendered":"World Cup 2018: How to Secure Your Devices When Traveling in Russia"},"content":{"rendered":"<p><img decoding=\"async\" src=\"https:\/\/media.wired.com\/photos\/5b21745a2b3a2d7b09334482\/master\/pass\/WorldCupBurnerPhone-973149600-w.jpg\"\/><\/p>\n<p><strong>Credit to Author: Brian Barrett| Date: Thu, 14 Jun 2018 17:44:43 +0000<\/strong><\/p>\n<p><span class=\"lede\">A Russian sports <\/span>official earlier this year <a href=\"https:\/\/footballcitymediacenter.com\/news\/20180214\/974385.html\" target=\"_blank\">estimated<\/a> that as many as 2 million people would flock to the country during <a href=\"https:\/\/www.wired.com\/story\/how-to-watch-the-world-cup-2018\/\">the World Cup<\/a>, the month-long celebration of soccer\u2014or football, fine\u2014that kicks off today in Moscow. If you\u2019re one of them, have fun! But also maybe leave your laptop at home.<\/p>\n<p>Yes, traveling to and between Russia\u2019s 11 World Cup host cities should provide marvels aplenty. But it\u2019s important to remember that Russia, by and large, is a nightmare land of digital debauchery. If you\u2019re a journalist, activist, politician, celebrity, or other high-profile figure, you\u2019re at decent risk of being targeted by surveillance. And even if you\u2019re just a fervent Finland fan, indiscriminate cybercrooks run rampant.<\/p>\n<p class=\"paywall\">That may sound like hyperbole, but it\u2019s also official guidance from the top counterintelligence official in the United States. \u201cAnyone traveling to Russia to attend the World Cup should be clear-eyed about the cyberrisks involved,\u201d William Evanina, director of the National Counterintelligence and Security Center, said in a statement this week. \u201cIf you\u2019re planning on taking a mobile phone, laptop, PDA, or other electronic device with you\u2014make no mistake\u2014any data on those devices (especially your personally identifiable information) may be accessed by the Russian government or cybercriminals.\u201d<\/p>\n<p class=\"paywall\">A little perspective is healthy here. You won\u2019t get hacked the minute you set foot in Moscow, as an <a href=\"https:\/\/www.youtube.com\/watch?v=waEeJJVZ5P8\" target=\"_blank\">NBC report<\/a> prior to the Sochi Olympics in 2014 implied. But things do work, as they say, a little differently over there.<\/p>\n<p class=\"paywall\">\u201cThere\u2019s a baseline level of untargeted cyberattack type stuff that happens in Russia, Ukraine, nearby places,\u201d says Ryan Lackey, founder of ResetSecurity. \u201cThat ambient background level is fairly high, which also is cover for whenever there\u2019s a targeted attack. So you\u2019ve got an increased risk versus a lot of other locations.\u201d<\/p>\n<p class=\"paywall\">Fortunately, some common sense steps should help you navigate the various dangers that might present themselves. And they start before you ever board the plane.<\/p>\n<p>&#x27;I would analogize it to walking down a dark alley in a big city.&#x27;<\/p>\n<p name=\"inset-left\" class=\"inset-left-component__el\">Jake Williams, Rendition Infosec<\/p>\n<p class=\"paywall\">The first rule of traveling to any potentially hostile nation: If there\u2019s a device you don\u2019t absolutely need, you should leave it behind. \u201cTravelers should decide whether they can reduce the amount of digital information that they carry across the border,\u201d leads off the EFF\u2019s \u201cDigital Privacy at the US Border: Protecting the Data On Your Devices,\u201d a guide created in response to <a href=\"https:\/\/www.wired.com\/2017\/02\/guide-getting-past-customs-digital-privacy-intact\/\">increased device searches there<\/a>. The advice applies to Russian borders, as well.<\/p>\n<p class=\"paywall\">For most people, that means ditching your laptop. It\u2019s generally easier to live without one for a stretch of time than a smartphone. They&#x27;re also more likely to house desirable information, especially if it\u2019s your work rig. And it&#x27;s more tempting to use public Wi-Fi with your laptop, which gets to the second-most important piece of advice: Don\u2019t use public Wi-Fi.<\/p>\n<p class=\"paywall\">\u201cPublic Wi-Fi is almost always unencrypted. That means that any eavesdropper, any bystander, can listen in on your communications,\u201d says Jake Williams, founder of Rendition Infosec. Attackers can also use those public connections to pull off a so-called man-in-the-middle attack, in which they redirect your browsing request to a malicious website of their choosing. \u201cFrom that point, via the browser, they can run malware on the machine,\u201d Williams says.<\/p>\n<p class=\"paywall\">That can and does happen stateside, but again, Russia operates on a whole other level. \u201cThe networks that you connect to while you\u2019re there are going to be much more hostile than the networks you connect to in the US. In the US you can connect your laptop to a hotel network and have a pretty reasonable expectation that nothing bad is going to happen,\u201d Lackey says. \u201cThere\u2019s a lot of cases of networks that are either monitored, or serving traffic, or man-in-the-middling, or anything else over there.\u201d<\/p>\n<p>&#x27;The networks that you connect to while you\u2019re there are going to be much more hostile than the networks you connect to in the US.&#x27;<\/p>\n<p name=\"inset-left\" class=\"inset-left-component__el\">Ryan Lackey, ResetSecurity<\/p>\n<p class=\"paywall\">As for your smartphone, you can pick up a <a href=\"https:\/\/www.wired.com\/2017\/02\/7-great-burner-phones\/\">disposable, prepaid burner<\/a> once you\u2019re situated in Russia if you think you might be specifically targeted. Otherwise, just make sure to keep your mobile device on your person at all times, stay off Wi-Fi, and <a href=\"https:\/\/www.wired.com\/story\/smartphone-security-101\/\">use common sense when browsing<\/a>. Lackey also recommends logging out of any sensitive accounts before you land, and staying logged out until the return trip.<\/p>\n<p class=\"paywall\">Whatever device you bring, <a href=\"https:\/\/www.wired.com\/story\/encrypt-all-of-the-things\/\">enable full-disk encryption wherever possible<\/a>. Modern Android and iPhones provide that feature by default, but make sure you&#x27;re using fingerprint detection and a six-digit PIN. On Macs, you can turn it on using FileVault by going to <strong>System Preferences &gt; Security and Privacy<\/strong>, while Windows PCs can go to the <strong>Start menu<\/strong>, enter <strong>encryption<\/strong>, click <strong>Manage BitLocker<\/strong>, then <strong>Turn on BitLocker<\/strong>.<\/p>\n<p class=\"paywall\">It all might sound a little paranoid. But if you\u2019re a journalist, or work for an NGO, or have even a little bit of celebrity\u2014athletic, political, or otherwise\u2014consider these steps a bare minimum. Even if you\u2019re not, they\u2019re good hygiene. Russia\u2019s myriad cybercriminal gangs care more about your bank account than your notoriety; high-end hotels near the World Cup venues will act as flames for digital-delinquent moths.<\/p>\n<p class=\"paywall\">\u201cI would analogize it to walking down a dark alley in a big city,\u201d Williams says. \u201cObviously there are people who are at a higher risk in that situation, but everyone\u2019s taking an additional risk by taking that route.\u201d<\/p>\n<p class=\"paywall\">So again, enjoy the games! Try the borscht, cheer for Iceland. But also make sure that your devices are buttoned up, so that you can leave with your digital life fully intact.<\/p>\n<p class=\"related-cne-video-component__dek\">Thanks to an assist from Congress, your cable company has the legal right to sell your web-browsing data without your consent. This is how to protect your data from preying eyes.<\/p>\n<p><a href=\"https:\/\/www.wired.com\/story\/world-cup-2018-travel-russia-secure-devices\" target=\"bwo\" >https:\/\/www.wired.com\/category\/security\/feed\/<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p><img decoding=\"async\" src=\"https:\/\/media.wired.com\/photos\/5b21745a2b3a2d7b09334482\/master\/pass\/WorldCupBurnerPhone-973149600-w.jpg\"\/><\/p>\n<p><strong>Credit to Author: Brian Barrett| Date: Thu, 14 Jun 2018 17:44:43 +0000<\/strong><\/p>\n<p>Russia expects as many as 2 million visitors during the 2018 World Cup, most of whom should take extra precautions against the country&#8217;s many cyber risks.<\/p>\n","protected":false},"author":4,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"colormag_page_container_layout":"default_layout","colormag_page_sidebar_layout":"default_layout","footnotes":""},"categories":[10378,10607],"tags":[714],"class_list":["post-12578","post","type-post","status-publish","format-standard","hentry","category-security","category-wired","tag-security"],"_links":{"self":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts\/12578","targetHints":{"allow":["GET"]}}],"collection":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/comments?post=12578"}],"version-history":[{"count":0,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts\/12578\/revisions"}],"wp:attachment":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/media?parent=12578"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/categories?post=12578"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/tags?post=12578"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}