FBI turning to private sector to hack phones, exploit unknown security holes

FBI turning to private sector for 'zeroday' spyware to hack suspects

Thanks to the NSA PRISM revelations we’ve all lost our innocence about government cyber-spying, but how far down that rabbit-hole has law-enforcement gone? Revelations from the Def Con hacking conference in Las Vegas show that such tactics are old hat for another US anti-crime department: the FBI. For instance, one ex-official said that the bureau’s analysts (shown above) can routinely turn on the microphones in laptops and Android devices to record conversations without a person’s knowledge. On top of such in-house expertise, a private sector cottage industry has sprung up around cyber surveillance, marketing programs that can also hack handheld devices and PCs. One company even markets “zero day” bugging software that exploits unknown security holes — meaning crime lords can’t just patch their browsers to avoid detection.

[Image credit: Wikimedia Commons]

Filed under: ,

Comments

Source: WSJ

The FBI Can Remotely Activate Microphones in Android Phones to Record Conversations

The FBI Can Remotely Activate Microphones in Android Phones to Record Conversations

The WSJ is reporting that the FBI uses super slick hacker tactics and tools to spy on people. It can get pretty dirty. Like, according to a former US official, the ability to "remotely activate the microphones in phones running Google’s Android software to record conversations" dirty.

Read more…

    

NSA surveillance scandal: Snowden flees airport, disappears into Russia

NSA surveillance scandal: Snowden flees airport, disappears into Russia

Edward Snowden—the former NSA contractor who revealed so much about the U.S. government’s system to spy on Americans without warrantshas escaped into Russia. Snowden had been trapped in Moscow’s Sheremetyevo airport for 39 days. According to Reuters, the 30-year-old American left by taxi and is now in a safe undisclosed location.

Read more…

    

Huawei tells ex-CIA director, UK government to ‘put up or shut up’ about spying claims

Huawei rebuffs spying claims of ExCIA director, UK government

Though Huawei seems to spend just about as much time denying spying claims as it does building handsets and telecom equipment, it’s just taken that rhetoric up a notch. The company’s vice president, William Plummer, just demanded the US and UK “shut up” about such allegations unless they can prove them. That’s in response to a recent statement from former CIA head Michael Hayden, who accused the company of sharing “extensive knowledge of the foreign telecommunications systems” it worked on with the Chinese government. UK watchdogs also piled on, saying they would conduct a review of Huawei’s new Cyber Security Evaluation Center over a lack of information about its links to the Chinese government. The beleaguered outfit responded that “these tired, unsubstantiated, defamatory remarks are sad distractions from real-world concerns related to espionage, industrial and otherwise.” Those remarks show that Huawei’s hit a whole new level of frustration, but given recent White House accusations against China, it’s not likely to get any better.

Filed under: ,

Comments

Source: Bloomberg, BBC

Why Doesn’t Skype Protect You Against Eavesdropping?

Why Doesn't Skype Protect You Against Eavesdropping?

Skype has long claimed to be "end-to-end encrypted", an architectural category that suggests conversations over the service would be difficult or impossible to eavesdrop upon, even given control of users’ Internet connections. But Skype’s 2005 independent security review admits a caveat to this protection: "defeat of the security mechanisms at the Skype Central Server" could facilitate a "man-in-the-middle attack" (see section 3.4.1). Essentially, the Skype service plays the role of a certificate authority for its users and, like other certificate authorities, could facilitate eavesdropping by giving out the wrong keys.

Read more…

    

The Technology You Need to Protect Against Mass Surveillance

The Technology You Need to Protect Against Mass Surveillance

In the past several weeks, EFF has received many requests for advice about privacy tools that provide technological shields against mass surveillance. We’ve been interested for many years in software tools that help people protect their own privacy; we’ve defended your right to develop and use cryptographic software, we’ve supported the development of the Tor software, and written privacy software of our own. This article looks at some of the available tools to blunt the effects of mass surveillance.

Read more…

    

The Government Uses License Plate Scanners to Track Your Every Move

The Government Uses License Plate Scanners to Track Your Every Move

Automatic license plate readers are the most widespread location tracking technology you’ve probably never heard of. Mounted on patrol cars or stationary objects like bridges, they snap photos of every passing car, recording their plate numbers, times, and locations. At first the captured plate data was used just to check against lists of cars law enforcement hoped to locate for various reasons (to act on arrest warrants, find stolen cars, etc.). But increasingly, all of this data is being fed into massive databases that contain the location information of many millions of innocent Americans stretching back for months or even years.

Read more…

    

Pixar-Inspired Animation Explains the NSA Perfectly

The NSA is creepy as hell. Luckily, the Internet found a way to make the whole spying-on-you clusterdiddle fun with a poignant animation that channels the playful Pixar Lamp of yore. Adorbz.

Read more…

    

Spy on Your Own Email to See Exactly What the NSA Has on You

By now, we US citizens are all very very aware that our metadata is being harvested by "the man." It’s not the actual email or phone calls, but metadata still matters. And if you’ve wondered what it looks like, MIT’s Immersion project can help you out. The service that lets you snoop on your email metadata just like a government agency.

Read more…

    

New PRISM Insight: Real-Time Monitoring, 100,000 Surveillance Targets

New PRISM Insight: Real-Time Monitoring, 100,000 Surveillance TargetsThe Washington Post has unearthed more slides describing the US government’s PRISM surveillance program—and they help confirm the extent of the operation.

Read more…