Slashdot Mirror


Network Associates Buys "Better Carnivore"

ShaunC writes "CNet is reporting that Network Associates has just purchased a software company called Traxess, whose main product - DragNet - supposedly makes Carnivore look like a toy. DragNet is capable of monitoring everything from email to web, FTP sessions to IMs, even print jobs and VOIP conversations; sorting the protocols and logging it all to disk at gigabit speeds. One NAI exec envisions "the government using it to investigate employees and hackers." NAI has also issued a press release about DragNet."

12 of 243 comments (clear)

  1. Neat. by Wakko+Warner · · Score: 3, Insightful

    I will continue not caring as I use my SSH sessions with impunity.

    - A.P.

    --
    "Remember when the U.S. had a drug problem, and then we declared a War On Drugs, and now you can't buy drugs anymore?"
  2. Okay, this is a no-brainer, but... by StupidKatz · · Score: 5, Insightful

    Encrypt your traffic!

    They might see that it is SMTP traffic, but they can't see what you wrote. They might see it's web traffic, but they can't see exactly what it is. They might see an ssh session, but they can't sniff your root password. (Thanks to sftp, they can't grab your password there, either!)

    Since some protocol headers can't very well be encrypted, there's no good reason to try running services on alternate ports; maybe now I can finally get my friends to install PGP (or similar) on their machines.

    1. Re:Okay, this is a no-brainer, but... by dfn5 · · Score: 3, Insightful

      The problem with encrypting HTTP is that SSL requires one IP address for every VirtualHost. If we suddenly turned off HTTP on all of our VirtualHosts (something I am in favour of) then we would reallize we ran out of IPs. The solution simply is to switch to IPv6, like now.

      --
      -- Thou hast strayed far from the path of the Avatar.
    2. Re:Okay, this is a no-brainer, but... by mustangsal · · Score: 3, Insightful

      Since back in the day...

      Never write an email that you would mind the world reading. An old addage that holds true...

      My accountant actually asked me to email him my figures for the year.... Umm no

      --
      1+2+1+1 || 1+2+2+1
    3. Re:Okay, this is a no-brainer, but... by pesc · · Score: 5, Insightful

      Sorry, but encryption really does not solve the problem. It helps (a teeny weeny bit), but if you think you are safe just because you use encryption, think again.

      They might see that it is SMTP traffic, but they can't see what you wrote

      Yes, they can see that you are mailing newjobs@careerpath.com, sales@cybersex.com and tipping off anonymoustips@big.newspaper.com, but they can't see what you actually wrote.

      They might see it's web traffic, but they can't see exactly what it is
      They can see that you frequent www.goatse.cx, but they can't see what you saw. They may have to go there themselves...

      They might see an ssh session, but they can't sniff your root password
      They can see that you ssh to our.competitor.com and eevil.haxors.md, but can't see what you are doing. Time to target some other surveillance techniques on you!

      Yeah, you are leaving them completely in the dark by using super-duper cant-ever-crack-this 128-bit encryption...

      --

      )9TSS
  3. Comment removed by account_deleted · · Score: 4, Insightful

    Comment removed based on user account deletion

  4. Good thing NA has this, and not the FBI by streak · · Score: 1, Insightful

    Well there is one positive thing to this story, the fact that a private sector company got a hold of this software before the govt. did.
    At this in this case, NA will be somewhat hesitant to allow the government to use this technology (the FBI could even turn it against NA!) to invade the privacy of citizens, whereas as we saw with Carnivore, the FBI pretty much gave us the answer "we have this technology and we are going to use it, too bad!"

  5. it can't see by Apreche · · Score: 2, Insightful

    the whole internet. While it's obviously no good that something like this exists, I'm not too worried. Sure RIT (the college I'm at) could install one of these systems and see what I do, but there is no way that anyone can watch the whole internet. And as other have said, encryption is nice. VNC is encrypted too.

    --
    The GeekNights podcast is going strong. Listen!
  6. Don't fear the technology, fear those who use it by dh003i · · Score: 5, Insightful

    The technology itself is fine, and potentially beneficial, if properly and very narrowly used. It could accomplish a lot of good. But any good it could accomplish would be obliterated by the vast rights violations that would take place if it was mis-used.

    In other words, this technology should be controlled by courts, which would grant access to government agencies to use it (i.e., by giving a temporary pass for limited purposes) for very specific and targetted purposes, when warranted by probable cause or reasonable suspicion.

    But if we fear this kind of technology and want to outlaw it off-hand, declaring the technology evil, then we're no better than the RIAA/MPAA, who want to ban technologies (DVD-R(W), DVD-RAM, CD-RW, CD-R, P2P, etc) simply because they *can* be used for illegal purposes.

  7. Re:This looks like big trouble brewing. by scherrey · · Score: 3, Insightful

    FYI - There are no such things as civil liberties. The U.S. Constitution never mentions them. The ACLU, for example, believes in only the ones they think we should have and makes up some that could not otherwise exist. Statists like to call them that so that they can be taken away or sold - after all, they only exist through civil (government) fiat.

    There are only human rights. When people tread on them they are acting less than human. They are undeniable, inalienable, and exist regardless of your race, citizenship, or religion. The U.S. Constitution is the only one that recognizes this and which does not claim to grant such rights. Alas, it's been long since abandoned and now we are reduced to discussing "civil rights".

    When you lose the language, you lose the ability to defend the things it used to represent. Stop using the language of the enemy and insist that they recognize and respect your human rights and individual liberties. Live up to your personal responsibilities.

  8. Re:Torn by SirSlud · · Score: 3, Insightful

    > glad that things are moving in a direction so that criminals can be caught quicker (or even before the act)

    Have you ever heard of the cliff metaphor when discussing technology as solutions to problems?

    This town had a cliff. Kids kept falling off the cliff, so they put an ambulance and a few nurses at the bottom. So, people got less careful around the cliff, and more folks fell off. So they added more ambulances and more medical staff. A small group of people in the town wanted to put some signs up at the top of the cliff saying, "Do not approach the cliff. In doing so, you are at your own risk," and conducting some classes around the town on how the cliff is not to be triffled with. But they were ignored. More ambulances, more nurses, more technology were added. Soon, everybody in the town was falling off the cliff. Nobody could act in a responsible manner, since the technological barriers were in place to prevent real-world (tm) tragedy.

    This is the real problem. In placing all our eggs in the technology basket, we might be better at catching criminals, but we're doing very little to try and resolve the problem of why people are criminals in the first place. If you ask me which is the smarter society, the one that treats the symptoms, or the one thay tolerates symptoms to deal with cause of the problem, I'll take the society that can exercise tolerance and sacrifice for the overall good of the future. Unfortunately, the cliff story above is particularly blasphemous to the lifeblood of the american economy, the entrepeneur, although it would be music to the ears of all the folks getting BA's in psychology and sociology. Think about it .. placing more emphasis on the analysis of why people do these things could save millions of BA grads from Starbucks and Footlocker jobs, and prevent the american economy from becoming 100% service/retail/maintenance based in the future.

    --
    "Old man yells at systemd"
  9. Turnabout is fair play by ArcSecond · · Score: 4, Insightful

    Okay, if the cops get to watch us all the time with cameras, why don't they let us watch too? Why not put the closed circuit feed onto the net, or cable tv? I mean, have you ever put a camera on a cop before? I have. They aren't exactly happy about it, and you can argue all you like, but they have intimidation down to a science. But if they can watch us, why can't we watch them?

    --

    I've got a bad attitude and karma to burn. Go ahead. Mod me down.