Tag: cybersecurity

These Boots Are Made For Owning

Leave a comment

In which SexyCyborg, a badass female hacker, designs 3D printed shoes that can break into computers and more.

From handguns to entire office buildings, 3D printing allows anyone, anywhere to design and build powerful engineering feats. Coders especially have utilized 3D printing in ways I’m a fan of, and one of these artists is Chinese hacker SexyCyborg, who created a pair of gravity defying shoes to give her a leg up in the pen testing field.

Penetration testing is like the chaotic good of hacking, wherein a hacker doesn’t just sell her independently researched exploit to the highest bidder from anywhere in the world. Many large organizations with vast data and IoT to protect will offer “bounties” for lone good guy hackers and private cyber security firms alike to compete for: if you can break into their systems, with proof, and show them how to nix the holes, they’ll thank you handsomely. The Pentagon once brought in a team of 1,400 individuals to find security vulnerabilities on their systems, and some were rewarded up to $15,000 each.

SexyCyborg is one of the many young people taking advantage of the opportunities in this industry. Working as an independent pen tester, she decided to get inventive with her method of sneaking tools onto a site. The more seemingly innocuous, the better. This led her to 3D print what she has dubbed her “Wu Ying” heels. “Wu Ying,” which means “shadowless,” is a name she derived from Chinese folk hero/martial artist Wong Fei Hung and his infamous “shadowless kick.”

On her Imgur, SexyCyborg details the build of the shoes and shares her blueprints so that other Printers can try them on for size. The block wedges holding her up would appear to be solid, but they’re hollowed out inside to fit a very specific set of tools. Each shoe’s removable portion works like a drawer. The coolest part? Even with all of that gear loaded, they’re lightweight enough for her to walk with ease. She says that she can stand on them without the heels in.

Wu_Ying_Shoe-Left-Size8_preview_featured

What she’s got inside:  an OpenWRT TL-MR10U wireless router, a USB keystroke recorder, a set of lock picks, and a retractable Ethernet cable. That small, harmless-looking router runs a software called Wispi, with which, as SexyCyborg states, “you can fake being a friendly/known WiFi access point and setup a fake login page to capture passwords.”

In a Q&A with vice.com, she explains why she specifically chose women’s shoes for her project. “Since most women’s clothing do not have pockets, if we lose our handbags or they get stolen, it’s really a huge problem. Shoes have a lot of unused space that’s not taken advantage of.”

Imagine your stashing phone, credit cards, and keys in the safety of your wedges the next time you’re out at a bar but don’t want to carry a purse but also don’t want someone reaching in for the valuables on your person when you slip them into the waistband of your pocket-less jeans for a second to hold your beer. (This happened to me. @ Mickey’s in WeHo, I love you, but your clientele is shady as fuck.) SexyCyborg also suggests using these shoes to store devices like LibraryBox, on which you can take ebooks, movies, music and more on-the-go.

On what it’s like to be a woman in her sometimes male dominated field, and on some of the backlash she received when her female-centric product went viral, she has some friendly words. The disclaimer at the end of her “Wu Ying” Imgur thread makes reference to one of the first times the Internet found her in a big way: Reddit, in true Reddit fashion, made some of the highest voted comments on her heel thread about her rack and whether or not they were fake, complete with edgy lines about “penetration” and what she was really distracting with. She doesn’t care.

“A lot of the doubt associated with my projects is a bit like people thinking about trees being cut down by burly men with axes,” she told Vice, “while dismissing the idea of a women cutting down trees because they are unaware that chainsaws have been invented.” Chainsaw away, sis.

“I have more ideas for 3D printable projects for young women that I’d like to do. It’s a good learning platform and I’d like to come up with a reason for girls to take an interest in it.”

True to her word, SexyCyborg has released her source files for free so that anyone can print shoes just as badass.

Hello, world.

Leave a comment

Have you ever wondered how much of you there is on the Internet? I have. My fellow millennials and I live in an age where employers use Facebook in hiring decisions, tweets can lead to violent protest, nothing you do online ever really gets deleted, and games like Pokémon Go connect us in virtual real-time the way we’d only dreamed was possible (or at least I’d always dreamed, as a lifelong Pokemon fanboy).

It’s always been hard to imagine my life without the Internet, personally. I grew up living at a desk with my dad’s clunky IBM desktop on it. In 2003, in the good old fifth grade, I was using Windows XP to run America Online, which I had to do via dial-up, which meant that only one person in the house could use the phone or Internet at a time, which, as you can imagine, was first-world exhausting. By 2006 I was using Internet Explorer on Windows Vista, writing several Myspace, Xanga, and other dumb teenage angst blogs that I hope have faded into obscurity (but let’s be real, they haven’t) and torrenting with LimeWire (RIP).

Back then, creating HTML blog themes and finding obscure workarounds to download things for free taught me an important, now-lifelong lesson: no matter what censorship comes, the Internet truly belongs to everyone. But something that belongs to everyone can be edited and thus destroyed by anyone, and these days, it is: by some of the lovely humans out there who enjoy coding malware.

The thing that’s always fascinated me most about computers are their viruses. I’ll never forget the day I learned as a kid that Bonzi Buddy, a now well-known case of malware, was not a helpful search tool but was in fact a crime someone committed (and really f#cking annoying, too; if you had one you understand). I’m not glad cyber theft and crime exist, but it’s also humbling to know that a fifteen year old kid from the Netherlands with no name or money could hypothetically write a program powerful enough to shut down a government. I like the fact that online, there are no class boundaries. Code is the great equalizer.

I think it’s because of this that cybersecurity is a such fast-growing field of computer science. We spend 11 hours a day online and nearly 3 billion of us use a smartphone, taking up a virtual space that we now have to watch over. Sometimes our spaces are used to launch large-scale DDoS attacks without our knowledge, our video calls surveilled by governments and pervs. This website lets you view insecure webcam streams worldwide and god knows how many female celebrities (and females in general) have been hacked for nudes.

Humans must come up with complex cyberlaws and corresponding programs that determine, for example, whether or not the NSA should massively collect data and exploits, or where jurisdiction should be held when a criminal technically comes from nowhere, or what should be done about the environmental impact of tech on the Earth.

But where do the majority of us, and our iPhones with Instagrams of cat memes, fall into the grand scheme? What about the fun of it, the Snapchats and subreddits and vines (RIP)? Personally, I embrace our robot overlords – because at the end of the day, humans were behind them – and I appreciate the f#ck out of them being able to do things like drive by themselves, run like a cheetah, and dance in choreographed teams.

I started studying computers, hacking, cyber crime, robots, and social media trends about a year ago for hobby’s sake. Along the way here, I want to document what’s happening with surveillance technology in the U.S.: when the Internet is in our homes, watches, cars, and heart and baby monitors, is it always a good thing? Is there really too much information? This is a conversation I see happening all around me. I can’t wait to share more about what I’ve learned from the people having it.

It’s good housekeeping to take care of your digital house too.

– L