Carnivore Goes Wireless
GMontag writes: "The Washington Post Tech Section is running this story FBI's 'Carnivore' Might Target Wireless Text. Apparently, since the industry can't provide big brothering to the satisfaction of the FBI the FBI will will do it *for* them. This is a collector's item too, with no mention in article of DCS1000 being used to "save" children!"
wireless transmission can be monitored by anyone, not just the F.B.I.
The Kruger Dunning explains most post on
What part of "subject to court order" don't you understand?
Sometimes I think there are people who seriously think we should completely ban law enforcement because there might be some miniscule possibility of abuse.
Sometimes it's best to just let stupid people be stupid.
Here's a point I have been meaning to make for awhile. My uncle does computer fraud investigations for the FBI. Yes, that's right - he's a fed. I brought up this topic to him at our last family function. What most people don't realize is that Carnivore is actually going to be less restrictive than old procedures. If the FBI or one if it's investigators wants to subpeona email know what they do? They take the whole server. They take all the email and just route through until they find what they want. The point is they take it all and have access to anyone and everyone who went through that box. With Carnivore they can pick out who they are looking for through standard procedures and as long as you are not a fedral criminal you have nothing to worry about. Frankly, if that helps stop bombs from going off at olympic games and helps track down illegal malitias, hate groups, etc. then Im all for it!
Have a Happy.
Not to say I wouldn't use it, but I wouldn't consider it secure without some open-source software encryption package running on top of it.
150 Opening BINARY mode data connection for slashdot.sig (129323052 bytes).
This seems a little suspicious to me - from what I've heard, most of the wireless providers are well on their way to providing the federally-mandated wiretapping access. They can't be very far off from completing the technical setup that is involved. It seems like the Feds are useing the missed deadline (which really was an artificial deadline anyway) as a convenient excuse to expand their wiretapping powers. It's not like there were crimes that just had to be wiretapped on September 30; as long as the wireless carriers get things rolled out reasonably soon I don't see how the government could legitimately complain.
And yes, anyone can tap wireless, but the issue is what can be used in court. If the government is sucking in more information, then there's more of a chance that a bad judge somewhere can be found who will let unrelated intercepted information into evidence.
Of course, since you have no privacy right on a land-line phone either, maybe Carnivore isn't such a big deal either :)
Your right to not believe: Americans United for Separation of Church and
One day, I asked my friends about carnivore.
Carnivore is a very simple system - TCPDump, a filter, and a sort utility. It is a black box administered from remote, setup at their office.
The filter is setup to only record a handfull of things - a) email communications to or from a suspect as specified in a warrant or b) packets to or from a certain IP address designated by the warrant.
It does not capture and save every packet going across the wire - that would be illegal.
Let me say that again, as it bears repeating - It does not capture and save every packet going across the wire.
Yes, in a TCPDump, all packets are going to be pulled that hit the network interface, but the filter will only save the packets that meet a certain criteria.
They developed this with the WHOLE IDEA of making DAMN sure they stay within the confines of their warrants - because otherwise, they are breaking the law. Also, they would have to go through 100's of GB of data if they captured EVERY packet at a standard ISP. At an ISP like mindspring, the amount of data captured would be unfathomable.
The computer guys actually know how to set the thing up properly, so you don't have to rely on the standard Liberal Arts/Criminal Justice major FBI agent to understand what he or she is doing. All the agent might do is drop the big black box off at an ISP, plug in the power cable and network cable, and walk out.
Don't get me wrong - I personally don't like the FBI or its agents. I've had run-ins with them in the past, and the ones I met I didn't like. The guys who deal with this AREN'T agents... they are computer geeks, like you and me. They read /., the game, they program in Perl and other ub3r-1337 h4x0r languages. They know what they are doing, AND they do EVERYTHING in their power to make sure ONLY those communications that they NEED and are supposed to HAVE get captured.
quis custodiet ipsos custodes - Juvenal
While it is true that this is just another hysterical /. story in which the poster saw a headline and just put it up without reading the article...
... it represents an "actuall violation of privacy". I would not ban law enforcement because of this, I just want law enforcement to play fair. How would you like to play Cops & Robbers where the cops get to have unfair advantages like not having to play by the rules they are supposed to be enforcing? That's no fun, that's cheating! Criminals are people too, stop taking away all their fun.
I think Carnivore is alot larger than a "miniscule possibility of abuse"
The FBI has already got a Wireless Carnivore. It only effects CPIP right now, but it's a disturbing start.
Heh...
This attitude never ceases to amaze me.
Once upon a time, when I was sixteen years old and driving home from my girlfriend's house one evening, I was pulled over by a police officer in what could be called the bad side of the town. Although North Amarillo is still a fairly nice neighborhood, it does have a slightly higher crime rate and lower property values than the south side.
Thinking to my self... 'I wonder why I've been pulled over?' I remained calm because I had done nothing. What could I possibly have to fear from a uniformed law enforcement officer when I hadn't done anything wrong.
Said officer pulled me from the car at gunpoint and shoved my face into the asphalt... the gun pressed into the base of my skull... while he cuffed me and frisked me. He threw me into the back of his patrol car and then illegally searched my car.
I learned later that he did all this because there had been reports of a 'drive by shooting' in my girlfriend's neighborhood. My car matched the description, so in the cop's mind I was a dangerous unknown... dangerous enough to hold a gun to my head. He felt he had 'probable cause' to search my car for firearms based on an anonymous 911 call.
An attourney later told me candidly that I had very little chance to win a court case because the policeman released me after searching my car and the judges were all highly sympathetic to the police.
Now, what lessons should we all learn from this?
1. American criminal and police law is not designed to protect innocence. It's designed to punish the criminal.
2. Police will do their best to uphold that law out of honor, duty, hate, fear, or any other of a hundred positive or negative reasons.
3. Police don't care about innocents who get hurt or get their civil rights violated, so long as *they* aren't hurt and *their* jobs don't become any harder. There's a reason we have the term 'Police State'
4. Power breeds corruption. Any given law enforcement agency may have a policy against abuse, but almost all law enforcement officers will abuse their power in one way or the other.
I'm not the only one who things these things. There's a reason we have the fourth amendment, after all.
The next Slashdot story will be ready soon, but subscribers can beat the rush and slashdot the links early!
"If you're not a criminal you have nothing to worry about" - famous last words. See this story.
Learn the rules so you know how to break them properly.
www.teslabox.com
Okay, how many of us, if we were inclined to do something illegal and talk about it or plan it via e-mail, would send messages Carnivore can see anyway? I don't think the criminals are that stupid, at least not those Carnivore puports to be searching for. I would also think the FBI would brag about any collars they made, in part, because of Carnivore. So where are all the terrorists they've captured?
I think that Carnivore is another attempt at monitoring where a scare tactic was used to get it implemented. It doesn't work on those it's intended to work on, but works fine for those that should not be monitored.
"Do you have any idea how strict the regulations are regarding intelligence collection and dissemination? Do a little research and you'll find out that someone working for the government can go to jail for a very long time for collecting information illegally"
Sort of like the Detroit police department? While what you say is technically true (a) the perp would have to be discovered (b) the crime would have to be reported (very unlikely due to the "code of silence" in all tight-knit professions (c) management would have to take action {see (b)} (d) the action would have to be prosecuted.
I do see the need for law enforcement, and I do respect the job that most law enforcement officers carry out.
Unfortunately, the power inherent in law enforcement is so, well, powerful, that when it is abused the results are very bad for the victim. And I am afraid there are quite a lot of documented abuses (Richard Nixon, J. Edgar Hoover, and the IRS anyone?).
Ahem... actually, I did read the article. What portion of it do you *assume* that I missed?
BTW, the title that I submitted was "DCS100 aka Carnivour goes wireless!"
"The Washington Post Tech Section is running this story FBI's 'Carnivore'
Might Target Wireless Text.
Humm... can't be that part...
Apparently, since the industry can't provide big brothering to the satisfaction of the FBI the FBI will will do it *for* them.
Was not a quote from the article, it alludes to the industry itself saying that it can not meet a 30 Sept. deadline for providing eavesdropping services to the FBI.
This is a collector's item too,
with no mention in article of DCS1000 being used to "save" children!"
Perhaps you saw a "save the children" refrence that I am still missing?
Eve Fairbanks says I drive a hybrid!LOL
I mean, hello!? Carnivore saves furry little kittens. The real question is; why do Slashdotters endorse the virtual torture and murder of innocent little replicas of a baby kittens??
Could scan? Could? It hasn't already? They say this like it's an option that can be turned on or off.
I love the smell of Karma in the morning
I wouldn't mention this except that some might not get it, but the subject above is sarcasm.
Seriously. Why should it make me feel better that the people who are using this system understand technology? What difference does that make, exactly? As far as I'm concerned, that just makes them more capable of committing abuse.
But maybe you're implying that geeks are morally superior beings who would never do anything bad. Which I agcree with. Because no geek has ever done anything like try to lock out competing programs through incompatability, create huge databases tracking customer behavior, or prevent people from exercizing their fair-use rights. Or build nuclear weapons, for that matter. Oh, geeze. There I go being sarcastic again.
It's okay, because it's geeks? Sorry, but I don't buy it for a millisecond. Because I know how this works. Let me ask you a quick question, which I will alert you in advance is to test whether you are a hopelessly naive person with no grasp of human nature:
The geek you speak of is sitting at his Carnivore terminal tracking communications by a suspect when his manager walks up to him and says "We haven't gotten anything from this guy's email yet... Can you expand your search to include these neighbors, aquaintences, and relatives? And this unrelated person we think might be dirty." Does the geek answer:
A) "No, sir. That would be both illegal and immoral"
B) "Yes, sir!"
Hint: The answer is the same as when the geek is at MS and the manager asks "Do you think you can break Samba's compatability in the next release?"
The enemies of Democracy are
Ok...bad joke.
Not really. I think it was funny, and sociallpertinent, especially since I too have a Sony camera and made that connection.
You might as well call the Smith and Wesson 'Peacemaker' a "SWP 45002", and see if it gets quite the same reaction. Better yet, lets call illegal wiretaps "IWS90210's" and see if they get as much attention as they deserve.
Let's call a spy a spy, shall we?
The next Slashdot story will be ready soon, but subscribers can beat the rush and slashdot the links early!
Seriously. Which are you?
In one sentence, you say you hope Carnivore can stop school shootings. In another in the same paragraph, you say you think they'll only search the emails of people for whom they have a warrant.
Do you see the problem? Even if the school shooters were sending out emails with the subject "Re: Upcoming massacre of our peers" (ludicrous in and of itself), the email would never be found because the FBI wouldn't have a warrant for a couple of school kids who as of yet had done nothing wrong! The only way they'd find it was if they were searching _all_ email for keywords. So to get your supposed benefit, they will be looking at your data.
The price we have to pay for safety? No. No. No. I'm sick of explaining. If you want safety, turn your house into a fortress and never let yourself or your kids venture outside. Leave me and my rights alone.
The enemies of Democracy are
Didn't we just hear that wireless security was broken and an exploit published? I'm all for limits on law enforcement, but it's a bit silly if some guy driving by in a car can monitor your network, but the FBI can't...
The issue with carnivore is that it will be put at ISPs on parts of the network where most people can't listen; for this reason it can invade privary, and thus requires a court order (in theory). But wireless networks can be passively sniffed without any government powers, so it's much less of an issue.
I think that any crypto built into hardware sold to consumers will be deeply flawed. So far, this has been true. The crypto is too strong for the casual hobbyist, but easy for the government to crack. You mention 802.11 encryption. Recently, researchers at AT&T implemented a previous theorized attack that allows a notebook computer to penetrate 802.11's WEP (wired equivalent privacy) crypto.
Eventually they will get smart enough to make crypto that isn't obviously flawed. The flaws will only be visible to those in on the secret. This is called 'red threading'. Anyhow, the fundamental problem is that making chips is hard and expensive, and chips are opaque to users. Chip makers are very vulnerable to pressure from government agencies. However, so far I don't think they need much pressure - industry associations keep standardizing on bad, flawed cryptosystems.
I don't understand the tradeoff between bandwidth and encryption that you posit. When you feed cleartext through a block cipher, the result is roughly the same size (rounded up to the block size, typically 8 bytes). If you use a stream cipher like RC4, the encrypted product is the same size as the cleartext. So encryption won't make a 14.4 link any slower.
Maybe you're talking about public key encryption used to establish a session key? I don't think it's enough to really impact your bandwidth.
WAP uses its own encryption. When dealing with most web servers, it's SSL from the server to the WAP gateway, then it's WAP security from the gateway to your client. Oh, you too noticed that it exists unencrypted on the WAP gateway? And this is decent encryption how?
The truth about Scientology, Xenu, and you: Operation Clambake
Are you not aware that the FBI under J Edgar Hoovers 48 years as it's head was practically controlling the federal government of the USA? Mostly through blackmail, but also intimidation and murder.
Hoover spied on everyone and had incriminating files on pretty much every politician that could end their career, which enabled him to rule Washington.
That is not "miniscule" in my book.
Remember that those not aware of history are condemned to repeat it.