FoxNews: Feds Beef up Big Brother

Dr. J

New member
from http://www.foxnews.com/national/081600/pedophile_riley.sml

<BLOCKQUOTE><font size="1" face="Verdana, Arial">quote:</font><HR>
Feds Enlist Cyber Pervert
To Write Snooping Software

Wednesday, August 16, 2000 By Patrick Riley
Federal investigators were so eager to beef up their Big Brother presence online that they had a convicted cybersex offender develop spy software for them in exchange for a reduced sentence.

Patrick Naughton, a former InfoSeek executive netted last year in a federal sting for arranging sex with a minor, last week received nine months of home detention six months after a plea bargain set him to work crafting original surveillance programs.

One of the five programs enables a computer to be searched from a remote location. The other tools help investigators engage in so-called "chat logging," "Internet Protocol number capturing," "image matching," and "steganography detection," according to a court document obtained by FOXNews.com. The document was first released in response to a request by the San Jose Mercury News.

Further details of the espionage programs remained under court seal. Thom Mrozek, a spokesman for the U.S. Attorney's office in Los Angeles, refused to elaborate except to say the software will provide "substantial assistance" to investigators.

"Patrick Naughton provided technical expertise for the government which we hope will be very helpful in our continuing efforts to protect children from pedophiles and other aggressors on the Internet," Mrozek told FOXNews.com.

Naughton, known as a Web pioneer since leading the development of the programming language Java, made online contact with an undercover officer posing as a 13-year-old girl and agreed to meet "her" last September on a pier in Santa Monica, California.

When Naughton showed up he was arrested and indicted on three charges: interstate travel for the purpose of having sex with a minor, use of the Internet to entice a minor, and possession of child pornography.

Enlisting criminals to help catch their own kind in exchange for lighter punishment is commonplace, Mrozek said. But he admits asking a convict to design programs that do the same thing is something new.

"It's the first time to my knowledge," Mrozek said. He wouldn't rule out doing it again.

News of these criminally master-minded snoop tools comes amid the continuing controversy over the FBI's revelation that it has a program called "Carnivore" to sort through all e-mail traveling through a specific Internet service provider in order to target a criminal suspect's mail.

Still steaming over Carnivore's potential for abuse, both privacy rights activists and members of the Internet underground are concerned about the new tools not because they're being used to catch potential pedophiles, but because they're secret and might also be used to snoop on non-criminals, said Stanton McCandlish of the Electronic Freedom Foundation.

"Until we actually see the software, we can't be sure what it's doing," he said.

Among Naughton's mysterious new programs, none is causing more speculation than what the court document referred to as "image matching," McCandlish said. "I've heard eight different theories about what that could refer to, but one of the common ones is face-recognition technology."

He said while some of what Naughton apparently has devised sounds like already existing technology, the applications may have new twists. The remote-searching software, for instance, might entail "a non-detectable version of [the already available snoopers] Satan or Back Orifice."

He also guesses that the chat monitoring and IP number tracing programs every computer has a unique Internet Protocol number could be to help investigators get a lock on a suspect's location. And software that detects "steganography" would ostensibly break the cryptographic technique of hiding data within other data or images.

Naughton declined to talk about his work, but said unlike Carnivore, his programs target individual suspects without first sifting through the mail of non-suspects.

"This is more targeted," he told the Mercury News. "They'll catch more people breaking the law. I don't think anyone who is remotely innocent will be swept up in this."
[/quote]
 
Yeah, they'll just use that stuff for busting pedophiles, not thought criminals.

And William Clinton is a good and honorable man.
 
Can some one tell me what the additional security risks of using a cable modem are, as I now have?

The lesson to be learned is: Don't ever say anything over the 'puter you don't want the gov't to know and possibly publish.
 
Futo, any connection goes through an ISP. If someone is specifically targetting you, they WILL get your information on whatever they want, unless you use very very strong encryption on everything.

That said, the process of packet snooping is extremely hard to institute on any sort of large scale. Diseecting even a couple hours worth of packets could take days or even weeks, and the cost to do it makes it impractical. If the FBI really wanted to spy on you, it would be easier in most cases to stick a hidden camera in your house than to monitor your traffic.

Over a cable modem, your biggest threat is other users who want to practice their hacking skills by breaking into your system and looking through your stuff, and possibly even destroying data.
 
I wonder what would happen if they field tested this thing on the White House computer system?

TILT, TILT, TILT !!!
 
<BLOCKQUOTE><font size="1" face="Verdana, Arial">quote:</font><HR>That said, the process of packet snooping is extremely hard to institute on any sort of large scale. Diseecting even a couple hours worth of packets could take days or even weeks, and the cost to do it makes it impractical. If the FBI really wanted to spy on you, it would be easier in most cases to stick a hidden camera in your house than to monitor your traffic.[/quote]

Hate to burst your bubble, but... <mmphffgggph>

<slap>

"I can neither confirm nor deny the existence or operation of any network(s) or computing system(s) that may or may not have the capability and/or capacity to monitor and/or record and/or decrypt and/or analyze one or more packet transmissions between systems that may or may not be either foreign or domestic."

I shall leave you with two thoughts:

(1) The National Security Agency has never been listed as a line item on any US budget. Ever.

(2) Beowulf (distributed/parallel processing LINUX, freely available to all and sundry) is positively frightening. It is also insignificant compared to computing assets available elsewhere.

Been there, done that... and I have no illusions regarding the safety or sanctity of my electronic emissions.
 
Futo,

If you don't already have it you can use zone alarm. It's a good free firewall that blocks both incomming and outgoing information by forcing permission. It will also give you the IP address of the person attempting to snoop on your computer.
 
<BLOCKQUOTE><font size="1" face="Verdana, Arial">quote:</font><HR>Originally posted by Futo Inu:
Can some one tell me what the additional security risks of using a cable modem are, as I now have?

The lesson to be learned is: Don't ever say anything over the 'puter you don't want the gov't to know and possibly publish.
[/quote]

Major risks you are up against are from script-kiddies or other newbie/moderate hackers. I suggest you get a computer to act as a server to handle all your incoming/outgoing traffic (if you can afford it.)

Something as simple as a Pentium machine would be fine. I use a P166 w/64mb RAM and two PCI networking cards. I would suggest installing a distribution of Linux and then using IPChains to MASQ your traffic in/out using a good firewall script. But then again, I live with two other guys and a total of 5 machines routed behind the cable modem. I seriously doubt you have that kind of configuration or need it. Bottom line is, is that without any type of firewalling on your machine (as I would assume you are using Windows 9x/NT) that you are very susceptiable to an attack. You need to look into this ASAP. Chances that you will be compromised is slim.. but if you are, you may never know it until its ultimately a pain in the arse and some legal trouble.

If you don't already know, goto Cable Modem Help for some good information concerning your cable modem. Everything you need to know can just about be found on this site.

Feel free to Email me if you have any specific questions.

Oh, and welcome to the "big time!" You'll never go back... EVER.


oooohhhhh... and I forgot to mention.

If you're worried about people sniffin' packets from your connection, then you're just about out of luck. Anyone at the ISP (within reason) can monitor Internet traffic to and from your site. However, once it leaves the ISP then you have a little bit more control. If you wish to discuss sensitive matters.. especially over Email, I suggest you look into implementing some sort of encryption. You might want to check out Pretty Good Privacy (PGP) for the most common data encryption.

------------------
God, Guns and Guts made this country a great country!

oberkommando sez:
"We lost the first and third and now they are after the Second!(no pun intended)"

[This message has been edited by KaMaKaZe (edited August 23, 2000).]
 
Back
Top