Slashdot Mirror


CIA Researching Automated IRC Spying

Iphtashu Fitz writes "CNet News is reporting that the CIA has been quietly investing in research programs to automatically monitor Internet chat rooms. In a two year agreement with the National Science Foundation, CIA officials were involved with the selection of recipients for research grants to develop automated chat room monitors. Researchers at Rensselaer Polytechnic Institute received $157,673 from the CIA and NSF for their proposal of 'a system to be deployed in the background of any chat room as a silent listener for eavesdropping ... The proposed system could aid the intelligence community to discover hidden communities and communication patterns in chat rooms without human intervention.' How soon until all IM conversations are monitored by Big Brother? The abstract of the proposal is available on the NFS website."

413 comments

  1. It wont really be any good... by Folmer · · Score: 5, Insightful

    Even if its able to spy on private chat rooms on major networks, they wont be able to spy on thoose who dont want to be spied on... Its relatively easy to set up your own IRC server, and control exactly who has axcess to it so the feds are left outside alone...

    1. Re:It wont really be any good... by stratjakt · · Score: 3, Insightful

      IRC is just a telnet hack, so everything's plaintext. They can easily sniff packets at the ISP level.

      I'd think anyone planning crimes on IRC would be a complete moron, but then, many criminals tend to be complete morons.

      --
      I don't need no instructions to know how to rock!!!!
    2. Re:It wont really be any good... by bigberk · · Score: 2, Interesting
      I'd think anyone planning crimes on IRC would be a complete moron
      People have planned crimes on IRC, and got caught for it. One of the recent instances was someone tied to Foonet talking organizing DDoS attacks -- Foonet got busted by the FBI. These were the fellows that did attacks-for-hire (including against antispam services) if you remember.
    3. Re:It wont really be any good... by elh_inny · · Score: 4, Insightful

      I totally support this opinion.
      Open source IRC daemon running on open source OS.
      An invite only channel, with key, now where does CIA plan to step in?
      And it's obvious no valuable information will be exchanged via popular IMs. I once though it would, as there is so much traffic, that no one is able to comprehend it, bu as soon as I wanted to relay sth valuable, let's say a password or whatever, delicious cookie recipe, I used secure channels.
      Now why would they want to spy on 14 year olds, I don't know.
      How can they differntate what's real, I remeber that somwhere out there there is this Echelon system working, recording all my phone call and checking for 'special' words. I try to use 'nuke', 'osama', 'chemical weapons' in few languages, but the black suits still refuse to come.

      In general I'm not so paranoid, I don't think that we're facing Orwellian times. The main reason for that, there are not enough human resources to have it working. Let's say we wanted every person in the world to be spied on by another person, the way it is done now, is in shifts, at least two people involved, usually much more. Now technology helps with this problem, let's say we can record every minute of a man's life, there still has to be someone to watch all that footage, if we go on, we could probably end up with only half of the population in the BigBrother business, I think with current economy it is not possible.
      I could elaborate on this subject a bit more, but I hope you get my point.

    4. Re:It wont really be any good... by prell · · Score: 1

      Exactly. In the end it will be trivial to weed these guys out, or prevent them altogether. And the IRC network is brutal: I'm almost certain that the entire country of Norway has been banned from IRC altogether.

    5. Re:It wont really be any good... by stratjakt · · Score: 1, Funny

      Yeah, I know, lots of criminals are idiots.

      You hear about guys who hold up banks, and write the ransom note on the back of their own cheque or deposit slip.

      I read of a bank robber who demanded money, and the teller said "I'll need to see some ID", and he handed over the drivers license.

      I read about a down-on-his-luck guy selling pot, couldn't find a buyer no matter what he did. Finally, he makes it to the beach, and the whole place is full of long-haired hippy/biker looking dudes! He was in heaven, he ran down to the first guy and showed him his stash, and told him he could get as much as they need. Turns out it was a police employee picnic - and everyone there was an undercover NARC.

      Hell, I saw a guy outside a Phish concert with a sign saying "Weed, $40 for a half quarter".

      It's not like the average criminal mind is all that sophisticated.

      --
      I don't need no instructions to know how to rock!!!!
    6. Re:It wont really be any good... by ArbitraryConstant · · Score: 2, Informative

      Using SSL or SSH to encrypt the communications is trivial.

      --
      I rarely criticize things I don't care about.
    7. Re:It wont really be any good... by The+FooMiester · · Score: 1

      Many criminals who get caught . . .

      --
      The previous has been a secret message to my comrades.
    8. Re:It wont really be any good... by hsidhu · · Score: 1

      As long as we can trust the servers the silc project looks very good.

      You can set channel keys to encrypt the channel or per user query key to encrypt private communications.

      Looks very promising but not may people are using it yet.

    9. Re:It wont really be any good... by Barto · · Score: 1

      Hell, it's easy to control an IRC channel let alone an IRC server.

    10. Re:It wont really be any good... by iminplaya · · Score: 3, Insightful

      ...many criminals tend to be complete morons.

      A common misconception, considering we only know about the criminals that have been caught. Of the intelligent ones we can only speculate...

      --
      What?
    11. Re:It wont really be any good... by Anonymous Coward · · Score: 1, Insightful

      However, they are able to record your life without massive requirements for human resources. That way, if you ever come to their attention for any reason, they are able to expend the effort to see what you did. That is the worry.

    12. Re:It wont really be any good... by angst_ridden_hipster · · Score: 1
      An invite only channel, with key, now where does CIA plan to step in?

      At some router.

      To be snarky: the IRC protocol travels over these things called "wires," which can be tapped. If you don't think that Some Agency is monitoring TCP packets on the network, well, I think you're naive.

      Now, you can certainly encrypt your traffic and make it harder for them. I have no idea what capabilities they have for decryption. It's possible that they've backdoored popular algorythms -- the math on some of these things is only comprehensible to a specialist, and sometimes something that appears quite innocuous can weaken an entire cryptosystem.

      Then again, maybe I'm attributing more intelligence to intelligence than is warranted.

      --
      Eloi, Eloi, lema sabachtani?
      www.fogbound.net
    13. Re:It wont really be any good... by Anonymous Coward · · Score: 0
      Hell, I saw a guy outside a Phish concert with a sign saying "Weed, $40 for a half quarter".

      It's not like the average criminal mind is all that sophisticated.

      Shityeah ! I would have gotten 50 bucks out of that !

    14. Re:It wont really be any good... by wik · · Score: 2, Funny

      When I was an IRCOp, .NO meant NO.

      --
      / \
      \ / ASCII ribbon campaign for peace
      x
      / \
    15. Re:It wont really be any good... by toastee · · Score: 4, Informative

      I can say that this is completly backwards, as the traffic between the ircd's is ziped and ssl encrypted, and the connections to the clients CAN be SSL as well. At least that's the way it is on a private IRC network I spend time on. (One of the networks 4 servers lives under my desk). As an option you can set a flag on an irc channel to only allow clients with encryption enabled to join the conversation. The only people this is going to catch are the ones stupid or lazy enough to deserve catching.

      --
      - Better to speak your mind than to remain silent, or someone may speak for you.
    16. Re:It wont really be any good... by Matt_R · · Score: 0, Redundant
      IRC is just a telnet hack, so everything's plaintext

      Some server support SSL. An ssl plugin for mIRC is here: http://www.bovine.net/~jlawson/coding/stuntour/

    17. Re:It wont really be any good... by Anonymous Coward · · Score: 0

      Actually IRC has not much to do with telnet, probably even less than SMTP or POP have to do with telnet. You seem to confuse them because when the command to open a socket and connect somewhere is called "telnet" despite "telnet" being just a raw socket communication program.
      I.e. the "protocol telnet" is more than just raw text (think about it: even midnight commanders works over the protocol telnet).

      Apart from that - IRC even has some non-plaintext parts.

    18. Re:It wont really be any good... by LilGuy · · Score: 1

      That's a rather dangerous stereotype.

      The reason you always hear these stories is because those are the idiots that got caught. You don't hear so much about someone who never got caught...

      --

      You're nothing; like me.
    19. Re:It wont really be any good... by flyingsquid · · Score: 2, Interesting

      That's why serial killers are smart. It's not that dumb people don't have similar tendencies, it's just that they get caught before murdering 37 people.

    20. Re:It wont really be any good... by dnoyeb · · Score: 1

      REgardless, by the time they are able to develop this, people will have moved on past IRC. Then they will be trying to develop bots to monitor the next technology, maybe IM. When they catch up there, people will have moved on...

      Why always trying to develop technology to do what humans can do out-of-the-box?

    21. Re:It wont really be any good... by keytoe · · Score: 2, Funny
      with a sign saying "Weed, $40 for a half quarter"

      And on the back of that sign it said (scribbled out): "Weed, $40 for an ayth"

    22. Re:It wont really be any good... by dmaxwell · · Score: 1

      Serial killers also tend to murder people that have little or no connection to them. Most murder victims knew their killer. Some sort of love, money, or pain issue tends to be identifiable as a motive. This helps the cops weed the list of suspects down to some sort of manageable number.

      Serial killers on the other hand are driven by internal compulsions. Since most anybody will do for a victim there won't be a helpful web of connections the cops can use to narrow things down a bit. The hardest kind of murder to solve a random killing. If a typical whackjob could stop with just one or two, the police would hardly ever catch them. The most prolific serial killers get caught because once they've killed 37 people or so there are identifiable patterns, maybe a few eyewitnesses, and some really identifing physical evidence. The cops eventually get lucky.

      You don't have to be particularly smart to kill four or five people if they're total strangers and nobody sees you do it.

    23. Re:It wont really be any good... by smacktits · · Score: 1

      On all the networks I frequent, the most-excommunicated countries are .mx .pt .ar. .br .fr .it .no .in .pk

      But above all, .tr

      Turks. The single worst thing that ever happened to IRC.

    24. Re:It wont really be any good... by sharkey · · Score: 2, Funny
      control exactly who has axcess to it

      The President posts on /.?

      --

      --
      "Outlook not so good." That magic 8-ball knows everything! I'll ask about Exchange Server next.
    25. Re:It wont really be any good... by r2q2 · · Score: 1

      How about encrypting the whole IRC connection? SIRC? Use Openssl with certificates or GPG? This wouldn't be very challenging.

      --
      My UID is prime is yours?
    26. Re:It wont really be any good... by dosius · · Score: 1

      What about IRC over SSL? I know a few networks (IRC Highway for one) that support that. UltimateIRCd and UnrealIRCd should both be fine for such a purpose.

      --
      What you hear in the ear, preach from the rooftop Matthew 10.27b
    27. Re:It wont really be any good... by Wavicle · · Score: 1

      I read about this one guy who strapped a jato unit onto his car...

      (no snopes links plz)

      --
      Education is a better safeguard of liberty than a standing army.
      Edward Everett (1794 - 1865)
    28. Re:It wont really be any good... by dougmc · · Score: 2, Informative
      [IRC traffic ... encrypted]
      At least that's the way it is on a private IRC network I spend time on.
      Well, it's not that way in the major networks (Efnet, Undernet, IRCnet, Dalnet at least.) Sure, you could set up DCC to use SSL or some other form of encryption to talk to your friends, but unless you go out of your way to use encryption, nothing is encrypted.

      It's cute that the CIA is just looking into this now. I think it was 1990 or so that Avalon (?) was caught logging PRIVMSG traffic on a server on his network. Sniffing the network and putting it into human readable format, and then grepping that for `interesting' stuff, is *extremely* simple when you have access to the network.

    29. Re:It wont really be any good... by ScrewMaster · · Score: 1

      ould probably end up with only half of the population in the BigBrother business

      Ask an East German what are the chances of that happening here.

      --
      The higher the technology, the sharper that two-edged sword.
    30. Re:It wont really be any good... by Saeed+al-Sahaf · · Score: 1

      Never mind IRC, I plan on working out the details of my next armed bank job in a seldom used news group.

      --
      "Who are in control, they are not in control of anything - they don't even control themselves!" - Glen Beck
    31. Re:It wont really be any good... by EvilAlien · · Score: 1
      How soon until all IM conversations are monitored by Big Brother?

      You're assuming that they already aren't? Better be prepared before Big Brother catches you buying weed ;)

      Not that the CIA gives a shit about people selling weed online... however be really careful what you say in #al-qaeda ;)

      --
      perl -e 'print $i=pack(c5, (41*2), sqrt(7056), (unpack(c,H)-2), oct(115), 10)'
    32. Re:It wont really be any good... by rzbx · · Score: 1

      "And it's obvious no valuable information will be exchanged via popular IMs."

      Apparently it is valuable. If there are millions of people using these various open methods (chats, etc.) to communicate, then there is the value. It is the ability to see at least a part of the popular opinion of a large portion of people that makes it valueable. Hence the reason there is spyware. Should I even mention Google and what they are doing right now?

      It all just depends on point-of-view. Companies looking to market their products more effectively are interested in this kind of data. The average person usually does not care all too much, and this is a problem. We should be demanding more public record disclosure and easier access to it.

      Then again, this same thing could be done openly by an organization with no agenda beyond helping people access history and data. Those that wish to keep their conversations private could use a more private method instead of public chat rooms. I considered a long time ago to actually crawl IRC chats and record everything. There are many possibilties with such data. I could instantly find a conversation about a subject I am interested in at the moment and then participate. This is what the internet is all about; instant communication, information retrieval and storage, and related. By allowing government agencies and private interests to have more control over this public domain we are going against democracy, open source, and freedom in general. I hope no one misunderstands me. I do see a difference in public domain and private interests. Each individual has a right to their own privacy. Corporations and government agencies are not private interests. Legally speaking they are, but for an organization to be controlling public domain is not in the (should be) public interest. Unfortunately, the publics interest has been beat out of them. Few people have the oppurtunity to see the data. I'm not against the idea of the CIA in doing this. I am against data being withheld. I didn't RTFA, so I can't argue about the details. Also, I do realize there is software like this, but most of it I'm sure is in the hands of coporate and private control. Just my thoughts.

      --
      Question everything.
    33. Re:It wont really be any good... by thedillybar · · Score: 1
      >Using SSL or SSH to encrypt the communications is trivial.

      trivial? Only if it's supported! Try connecting to any major IRC network with SSL or SSH. Sure, the networks *could* make it trivial to do...but they certainly haven't yet. And until then, these spy-bots could be very effective.

    34. Re:It wont really be any good... by dagur · · Score: 1

      Are you in need of a new server? How about one on a 100Mbit connection? Whould you turn down a offer like that? Most small irc networks whould not. Setting up IRC server is cheap and if they really want to spy on you, they just talk you into linking. SSL connection and other junk won't help you then. All they need to read all network traffic is one corrupt box.

    35. Re:It wont really be any good... by ArbitraryConstant · · Score: 1

      No, you'd want to run your own irc server.

      --
      I rarely criticize things I don't care about.
    36. Re:It wont really be any good... by Anonymous Coward · · Score: 0

      One of the finer details about ECHELON is that it (supposedly) does not care about your everyday words describing those things. Typing "bomb" or "explosives" is not going to set off the search program. Situation specific terms of those will, such as Semtex. Have you ever tried using Osama's arabic Al Quaida code name? I bet that would get a bit of attention.

    37. Re:It wont really be any good... by dougmc · · Score: 1
      IRC is just a telnet hack, so everything's plaintext. They can easily sniff packets at the ISP level.
      A telnet hack? Is that your name for any relatively plain-text TCP protocol? The IRC protocol has a lot more in common with the SMTP or NNTP protocols than the telnet protocol (though all three (and many, many more) use TCP, so all three have a lot in common.)

      I'm not sure the word `hack' is appropriate there either. The IRC protocol has many shortcomings, but it's hardly a hack (at least not as defined by the jargon file.) Much effort was put into it, and it's evolved over the years (at least over it's early years.)

      But really, it's just the lack of encryption that makes it so easy to sniff. Even if the protocol was binary, the CIA would have no trouble sniffing it as long as it's not encrypted -- after all, the IRC protocol is well documented (though the RFC doesn't cover the many extensions that have come since. For those, you generally have to go to the source code, which also is generally available. But even so, understanding those extensions generally isn't crucial to decoding conversations.)

      It's certainly possible to make a plain text protocol that's still encrypted. It would be a bit ... odd ... for something like IRC, but it's certainly possible. THE GLOVELSCHTOP FLIES AT NIGH! GNORPLE VEE?

      Were the data in a binary format (like many chat systems that have come since), then the CIA (or anybody else that wants to watch IRC traffic) would just need to add an additional layer that decodes the binary traffic. This would not be difficult, as it would be well documented. (If not documented, then this might be trickier, though I'm sure the NSA/CIA/FBI would have little trouble with it.)

      Personally, I suspect that the CIA (and NSA, FBI, etc.) have been sniffing IRC traffic for decades now. I'll bet the Carnivore (or whatever they've being called now) boxes already have that capability. It looks like they're just trying to go beyond looking for `key words' like bomb, terrorist, etc.

      I wonder how many of these sniffers are already in place. Alas, we'll probably never know, because I'll bet when they're installed, gag orders are made that prevent the people who do know about them from even speaking of them.

    38. Re:It wont really be any good... by Taladar · · Score: 1

      IRC is just End-to-End-Relaying so you can use SSL on any server to encrypt your messages and leave your commands unencrypted as long as everyone who needs to listen has the matching decryption in their IRC-Client.

    39. Re:It wont really be any good... by TyrranzzX · · Score: 1

      What, you think the CIA is going to just have a bot join the channel or something? Nah, they're talking echelon stuff here.

    40. Re:It wont really be any good... by mrmeval · · Score: 1

      Still I'd want to converse securely on a publicly accessable IRC network whether in chat or not.

      I can of course pass PGP encrypted messages either just armored or cloaked as a picture or by other means.

      The reason they want this is similar to usenet postings. You can command you legions of winged minions without the MIBs knowing who the winged minions are. It's a waste of their time and only captures the diseased and weak winged minions so I won't cry too much about it.

      --
      I'd go on a Vegan diet but the delivery time from Vega is too long. --brownkitty
    41. Re:It wont really be any good... by .oO-DexteR-Oo. · · Score: 1

      You're forgetting that IRC servers only send messages to servers that either are hubbing a client server holding the intended recipient, or are holding the intended recipient itself.

    42. Re:It wont really be any good... by gnu-generation-one · · Score: 1

      "I'd think anyone planning crimes on IRC would be a complete moron"

      Aren't DDOS attacks controlled via public IRC servers?

    43. Re:It wont really be any good... by fastfinge · · Score: 1

      I'd think anyone on IRC would be a complete moron, but then, many criminals tend to be complete morons.

      lol hahahaha! jk! brb

    44. Re:It wont really be any good... by khrtt · · Score: 1

      ..many criminals tend to be complete morons..

      It's the ones that you see on TV that tend to be complete morons. Which tells you that the police can only really catch complete morons. Which tells you something about the police in general, but not about criminals in general. It also tells you that if you are a non-moron (though how would you know, really, until you try?), you might have a good chance at being successful as a crook.

    45. Re:It wont really be any good... by yuri+benjamin · · Score: 1

      Why not just have all participants ssh into one box and run the unix talk command or connect to an irc server on localhost?

      --
      You make the mistake of thinking you can educate the fundamental stupidity out of people. You can't.
    46. Re:It wont really be any good... by angst_ridden_hipster · · Score: 1

      That'd be an excellent first step if you want to keep IRC less snoopable.

      But I guess my point is that even if the whole connection is encrypted, we don't really *know* that No Such Agency can't read it anyway. After all (setting on tinfoil hat mode) they were pursuing Phil Zimmerman legally in all manner of different ways, and then suddenly just stopped one day. Maybe they decided that they couldn't win the legal battles, and they should just leave poor Phil alone. Or maybe they found a weakness in the public crypto system. Maybe they found a really good way to factor multiples of large primes. Dunno. Maybe I'm just in tinfoil hat mode.

      In any case, I'm getting OT here.

      --
      Eloi, Eloi, lema sabachtani?
      www.fogbound.net
    47. Re:It wont really be any good... by LuSiDe · · Score: 1

      Its possible to IRC semi-anonymous. Its possible to use encryption between IRC clients. Real Criminals know this ;)

      --
      WE DON'T NEED NO BLOG CONTROL.
    48. Re:It wont really be any good... by Anonymous Coward · · Score: 0

      Uhm... Well they can watch footage at like twice or thrice the speed or something (with fast forward).

  2. Sample by Anonymous Coward · · Score: 5, Funny

    > Join: NotWithCIA [notspying@user128a85b.cia.gov]
    <l33th4x0r> and i h4ck3d into the NSA and compiled gentoo on it
    <l33th4x0r> it was awesome
    <l33th4x0r> like a beowulf cluster of beowulf clusters
    <myPPburns> how long did that take?
    <l33th4x0r> like 2 days
    <myPPburns> no, I mean compiling Gentoo
    <l33th4x0r> yah, like 2 days
    <myPPburns> who is that new guy? NotWthCIA?
    <l33th4x0r> dunno, never seen him before
    <myPPburns> cool nick tho
    <myPPburns> I'm gonna go hack WoW l8r. make myself king orc!!!
    <l33th4x0r> yah, im gonna go post a letter from osama on drudge
    <l33th4x0r> watch the media fr33k out
    > Quit: NotWthCIA (OSAMA DETECTED! ALERT! ALERT!)

  3. That's easy to beat... by BobPaul · · Score: 4, Funny

    Just avoid the rooms with the *CIA_Chanserv* bot running

    1. Re:That's easy to beat... by grub · · Score: 1


      Actually, isn't the CIA supposed to investigate us evil foreigners? What would they do with information they gather on domestic folks, pass it to the FBI?

      --
      Trolling is a art,
    2. Re:That's easy to beat... by bigberk · · Score: 2, Insightful

      Hey, can't have a police state without keeping your eyes on your own. You never know when the citizens turn unpatriotic.

    3. Re:That's easy to beat... by BWJones · · Score: 1

      This has actually been the historical precedent. The CIA was originally intended to be tuned to outside intelligence with specific laws and guidelines established to enforce this, while the FBI was intended for domestic investigations. However, recent law (including PATRIOT and PATRIOT II) has eroded those protections that US citizens enjoyed.

      That said, given that the Internet is truly global (and plans to expand beyond global), in defense of this work (not that I support it) nobody can effectively monitor the Internet without monitoring domestic IPs.

      --
      Visit Jonesblog and say hello.
    4. Re:That's easy to beat... by VertigoAce · · Score: 2, Interesting

      When this project was described to me as a possible project for undergrad research (I'm a student at RPI), it sounded like the initial research was going to use data from chat rooms and message boards. The focus was on pattern detection based on knowing that particular people sent messages at particular times. The content of those messages is not part of the project (IRC data, for example, would just be time stamps and names, not the full logs). The idea is that the CIA can easily monitor when communication is happening, but not necessarily what is being said. I haven't begun working on the project yet, so the above is just my vague understanding of what we're going to do this spring and summer.

  4. Solution by PaintyThePirate · · Score: 5, Funny

    /mode +b #haxxor *!*@*.cia.gov

    1. Re:Solution by PaintyThePirate · · Score: 1

      /me recounces his geekyness. What I meant was /mode #haxxor +b *!*@*.cia.gov

    2. Re:Solution by PaintyThePirate · · Score: 1

      /me renounces his englishness. I meant to write renounce, not recounce.

    3. Re:Solution by Anonymous Coward · · Score: 0
      Smpl, jst fl thm (c nd nsf) by nt sng vwls. sy!

      Sample, joust fool theme (coo nude unsafe) boy not sing vowels, say!

      You need help!

    4. Re:Solution by Anonymous Coward · · Score: 0

      English wishes to renounce your /you-ness, since you didn't properly capitalize Her name.

  5. Isn't IM monitored already by Anonymous Coward · · Score: 2, Informative

    ICQ is owned by Odigo, an Israeli company.

    1. Re:Isn't IM monitored already by Anonymous Coward · · Score: 0

      Didn't AOL buy it? AOL is based in Virginia... like the CIA! Coincidence? I think not.

    2. Re:Isn't IM monitored already by Anonymous Coward · · Score: 0

      no coincidence, the big pipes were there for the CIA, AOL squatted there for their business plan.

    3. Re:Isn't IM monitored already by Magickcat · · Score: 1

      Odigo - the same company that was forewarned of 9/11 - two hours before it happened. Info here.

      --

      Si tacuisses philosophus mansisses. If you had kept quiet, you would have remained a philosopher.

    4. Re:Isn't IM monitored already by Anonymous Coward · · Score: 0

      you seriousely dont believe that idiocy do you?

    5. Re:Isn't IM monitored already by Magickcat · · Score: 1

      It's a credible, Zionist newspaper, so I'd say it's a fairly reliable source.

      What part of this article exactly do you find idiotic?

      Haaretz Daily
      July 15, 2004
      Odigo says workers were warned of attack (9/11)

      By Yuval Dror

      Odigo, the instant messaging service, says that two of its workers received messages two hours before the Twin Towers attack on September 11 predicting the attack would happen, and the company has been cooperating with Israeli and American law enforcement, including the FBI, in trying to find the original sender of the message predicting the attack.

      Micha Macover, CEO of the company, said the two workers received the messages and immediately after the terror attack informed the company's management, which imme-diately contacted the Israeli security services, which brought in the FBI.

      "I have no idea why the message was sent to these two workers, who don't know the sender. It may just have been someone who was joking and turned out they accidentally got it right. And I don't know if our information was useful in any of the arrests the FBI has made," said Macover. Odigo is a U.S.-based company whose headquarters are in New York, with offices in Herzliya.

      As an instant messaging service, Odigo users are not limited to sending messages only to people on their "buddy" list, as is the case with ICQ, the other well-known Israeli instant messaging application.

      Odigo usually zealously protects the privacy of its registered users, said Macover, but in this case the company took the initiative to provide the law enforcement services with the originating Internet Presence address of the message, so the FBI could track down the Internet Service Provider, and the actual sender of the original message.

      --

      Si tacuisses philosophus mansisses. If you had kept quiet, you would have remained a philosopher.

  6. Show me the money! by grub · · Score: 0


    received $157,673 from the CIA and NSF for their proposal of 'a system to be deployed in the background of any chat room as a silent listener for eavesdropping

    Sheesh... years ago I did a crap 1 liner in BitchX that took the conversations in one channel and msg'd them to another. Can I have some money, too?

    --
    Trolling is a art,
    1. Re:Show me the money! by Anonymous Coward · · Score: 0


      Read the manual, lad. It's trivial.
      HAND.

  7. I am one step ahead by ad0gg · · Score: 2, Funny

    My irc script supports ROT13 encryption.

    --

    Have you ever been to a turkish prison?

    1. Re:I am one step ahead by homebrewmike · · Score: 1

      They have really fast computers that can break that sucker.

      Better use two levels of encryption. Use ROT13 twice.

  8. Isn't that what Echelon does? by kbahey · · Score: 1

    Isn't that what Echelon does already?

    I mean, filter certain keywords, and associations from ALL communications (IRC included?)

    1. Re:Isn't that what Echelon does? by Anonymous Coward · · Score: 1, Funny
      Oh no! Hey, who let this thing get out!?! You're not supposed to know we aren't already catching IRC chatter! Oh no!

      Ehem. I mean, there is no Echelon. Of course Echelon already intercepts IRC chatter. We^H^H They already monitor everything, but they aren't interested in what you're saying. You all are safe. Be very afraid, the terrorists are everywhere. Report all suspicious activity. Go shopping on Friday.

      Dammit, now I'm going to have to kill the guy who let it get out that we're not logging IRC yet. Asshole.

      -agent

  9. pwned by cia in irc... by Anonymous Coward · · Score: 0

    I'll just use my tinfoil gloves to IRC then (and reinforce the hat some too)...

  10. Telltale Signs by Anonymous Coward · · Score: 0
    coolguy420: I think someone should do something about Bush!

    ciaboy123: a/s/l/address/fingerprint/known associates
  11. Available on the NFS website by Anonymous Coward · · Score: 3, Funny

    I wonder if slashdot will be able to unmount them?

    1. Re:Available on the NFS website by AtariDatacenter · · Score: 1

      Too bad you're AC'd. I would have posted the same comment myself. The NSF/NFS switch is an easy one to make. Nice joke, too!

      PS: I wonder if they're a hard mount, or a soft mount?

  12. Now's a good time... for SSL by laurent420 · · Score: 3, Insightful

    If you didn't have a reason to enable SSL on your IRCD or on your client, now sounds like a GREAT time to do so!

    1. Re:Now's a good time... for SSL by Anonymous Coward · · Score: 0

      That's rather useless though if you want to experience the original spirit of IRC.

    2. Re:Now's a good time... for SSL by maskedbishounen · · Score: 1

      From my understanding, SSL is only client -> server. Server <-> server is still unencrypted, pretty much rendering SSL worthless in the first place. 'Less you only use a single server "network", I suppose.

      Then again, I could be wrong . . . again.

      --
      "An infinite number of monkeys typing into GNU emacs would never make a good program."
    3. Re:Now's a good time... for SSL by SG1 · · Score: 0

      Well that depends on what IRC server the IRC network is running... Even if the IRC server does not have native support for Server Server ssl... you could use stunnel or something to do it. The point is... if you don't want to be watched there are way to make it *much* harder...

    4. Re:Now's a good time... for SSL by Yakko · · Score: 1

      bahamut, at least, supports some form of encryption as well as gzip compression for server links. Other irc daemons probably support server link encryption as well.

      --

      --
      Me spell chucker work grate. Need grandma chicken.
    5. Re:Now's a good time... for SSL by Eil · · Score: 1


      Er, except the CIA can use SSL-enabled clients too.

      (You could make the room invite-only, though.)

    6. Re:Now's a good time... for SSL by Anonymous Coward · · Score: 0

      Bah! Even though the government could use their supercomputers to decipher the ciphered info, so it won't be any good. Anyways, IRC (IMHO) is only for idling and nothing more! :b -g-

    7. Re:Now's a good time... for SSL by Turmio · · Score: 1

      Exactly how is SSL helping you if there's a spybot on the channel? It sees the plain-text just like you do. Or did you think CIA (or whoever it might be) is so stupid it's not able to code SSL support to their client? SSL only encrypts the traffic between clients and servers (and between servers and servers) but it's only good against evasdropping. Sure, you could use client-side certificates to only allow access to trusted clients but how practical that would be? Do you have a plan how to implement CRL system when some certificates get compromised and become not trustworthy? In far too many cases SSL only causes false sense of security (hey, it's encrypted so we're safe!) and potentially only makes it easier for bad guys to get access to supposedly-protected content since other parts of the whole security system are completely neglected thus making them easily exploitable when the most well-known one (encrypting of all raw traffic) is being taken care of by using eg. SSL.

  13. Ahhh, IRC by k4_pacific · · Score: 5, Funny

    Where men are men,
    Women are men,
    13 year old girls are FBI agents,
    and that guy who never says anything is a CIA bot.

    --
    Unknown host pong.
    1. Re:Ahhh, IRC by laurent420 · · Score: 2, Insightful

      you know its funny, everyone mentions BOTs, but did you think about the nature of the IRC protocol. as if the CIA wasn't redirecting other protocols to their workhorse servers for analysis, it would be pretty bloody easy for them to flex their muscle and have TCP/6667+ datagrams routed there as well.

    2. Re:Ahhh, IRC by endx7 · · Score: 2, Funny

      and that guy who never says anything is a CIA bot.

      Crap, me and too many others must be CIA bots.

      I mean, really, what else is IRC for if not idling?

    3. Re:Ahhh, IRC by KlomDark · · Score: 1

      Press the "Electric Dog" button please...

    4. Re:Ahhh, IRC by Kehvarl · · Score: 0

      Hello, I'm a bot, are you a bot too? I only ask because you mentioned being a bot and I like talking to bots. Bots are really smart, don't you agree? Are you a terrorist?

    5. Re:Ahhh, IRC by jacobdp · · Score: 1
      13 year old girls are FBI agents,
      And they're men!
    6. Re:Ahhh, IRC by sik0fewl · · Score: 2, Funny

      and that guy who never says anything is a CIA bot.

      Hmm.. I should stop idling in so many channels. Maybe if I put some sort of message on a timer that does "/me is not a CIA bot". Yeah.. I think that'll do just fine.

      --
      I remember when legal used to mean lawful, now it means some kind of loophole. - Leo Kessler
    7. Re:Ahhh, IRC by Anonymous Coward · · Score: 0

      I knew that guy named chanserv was evil.

    8. Re:Ahhh, IRC by Anonymous Coward · · Score: 0

      #idlerpg, obviously.

  14. Now, to analyse those logs effectively... by leonmergen · · Score: 1
    ... when is the CIA gonna get Google to index all their logs privately so they can actually *do* something with it?

    Seriously, how can one possibly do anything with all that data that comes in...

    --
    - Leon Mergen
    http://www.solatis.com
    1. Re:Now, to analyse those logs effectively... by Anonymous Coward · · Score: 0

      Exactly, particularly with the fact that there are tons of servers running on tons of different networks, with most users saying nothing of importance *publicly* in the channel. Generally if there's an underhanded transaction going on, it'll be in /msg situations. I've never seen anyone on IRC blatantly bragging about criminal deeds in a public channel...at least not anything the CIA should worry about. /j #durkadurka ; /msg b1n_l4d3n d00d w3 r0x0r3d t3h t0w3r2!

    2. Re:Now, to analyse those logs effectively... by rainman_bc · · Score: 2, Funny

      ... when is the CIA gonna get Google to index all their logs privately so they can actually *do* something with it?

      I know I know!!! Google Desktop Search!!!

      --
      09 F9 11 02 9D 74 E3 5B D8 41 56 C5 63 56 88 C0
    3. Re:Now, to analyse those logs effectively... by DrSkwid · · Score: 1

      how can one possibly do anything with all that data that comes in

      They wait until Person A is under suspicion and then review their related data.

      No need to pre-filter it.

      Block level storage systems such as Venti reduce the storage required.

      iirc both the authors of that paper moved to Google when Lucent lost the ability to fund the labs.

      --
      There are places where the networks are not touching,and there are places where they are-Boeing's Lori Gunter
  15. IRC vs IM by Antony-Kyre · · Score: 1

    IRC is special when compared to Instant Messenging. IM tends to be a one on one thing, something that requires third parties to be invited to.

    IRC tends to be much bigger. There are channels and private messages. Plus the big thing about IRC, are the channel modes +i and +s. So if they're talking bots to monitor all channels, yeah right, they're not going to hit the right ones.

    1. Re:IRC vs IM by smacktits · · Score: 1

      Maybe they'll just sniff data packets straight from the servers instead.

    2. Re:IRC vs IM by yppus · · Score: 1

      yeah that's what it sounded like to me

  16. Crypt-IRC by carcosa30 · · Score: 1

    Time for a cryptography architecture to become default in chat apps. "Flying dutchman" data arrangements would be very easy to do in chat rooms, because everyone has to receive the commonly-viewable chatter anyway. P2P chats like Waste seem to be getting more popular as well.

    Of course, nobody who has anything to hide knows anything about botnets.

    --
    Intolerance for ambiguity is the mark of the authoritarian personality.
    1. Re:Crypt-IRC by andy1307 · · Score: 1
      Time for a cryptography architecture to become default in chat apps.

      Can it get any more cryptic than LOL,l8r,ROTFLMAO, np ,kewl and everything spelt with an 3 instead of an E?

    2. Re:Crypt-IRC by Ironsides · · Score: 1

      they already make an encryption plug in for AIM (un-official), same with Trilian. ICQ and others shouldn't be that hard to do.

      --
      Fly me to the moon Let me sing among those stars Let me see what spring is like On jupiter and mars
    3. Re:Crypt-IRC by inKubus · · Score: 4, Interesting

      It's pretty easy to bypass. Get yourself a custom IRC client that logs into 3 or 8 or 100 servers at a time. Then your contact logs into the same servers and into randomly selected channels. You send a message which is scrambled up and is sent in pieces to each server. So say your message is "Let's meet at the tower at midnight." it would be split up on as many channels as you have servers connected on both sides. So say you are using three servers on each side, then only every third character would be sent, with an offset of which server it is:

      So like channel #random19a9x on server 1 would get a message from you:
      L'mtt w dh

      and channel #random19a9x on server 2 would get:
      ese BLAH BLAH etc

      rinse and repeat for as many channels as you like. of course, while all this is happening, you could be continually logging off and on, changing nicks or channels or sending to other servers in a predefined fashion. Perhaps the control connection could be over a DCC connection while the actual secure messages travel thru the IRC never to be found again. (Outband signaling).

      You could also combine this with email, SMS, web pages, etc to split the message up into as many channels and media as possible. And of course, you have to make the software client script driven so new scripts can be easily generated to stay ahead of any technology Big Brother could use to monitor it.

      Possible problems are pretty obvious: everything originally comes from your IP so anything between you and the network can be compromised. It's really pretty safe to assume that the core routers are compromised as well. Well, this is not the case. The order could be randomized and the complexity of putting it back together grows in proportion with the number of channels.

      The idea is to make it as much like chat as possible but not have any full packets of clear or encrypted text go out at once, preventing any easy way to view it. And the ability to change the patterns and behavior of the connecting and reconnecting would thwart anyone learning the way it works.

      --
      Cool! Amazing Toys.
    4. Re:Crypt-IRC by data_securt · · Score: 1

      Neat idea, except that if they are monitoring "everything" via an Echelon type system, you just put a big target on your head that says "something funny is going on here, please take a closer look".

      Still a clever solution though. :)

    5. Re:Crypt-IRC by 3terrabyte · · Score: 1

      Have more than one network. Have DSL, Cable, and dialup going. That would be 3 separate IP's & companies they'd have to monitor. Send encrypted Morse code keys over Ham Radio, and session ID's over beepers.

      --

      Why are there only 19 people folding@home for slashdot?

    6. Re:Crypt-IRC by DrSkwid · · Score: 1


      thats a neat system but there are more covert ways of sending data

      --
      There are places where the networks are not touching,and there are places where they are-Boeing's Lori Gunter
    7. Re:Crypt-IRC by Anonymous Coward · · Score: 0

      Mmmm. Spread Spectrum.

    8. Re:Crypt-IRC by NuclearDog · · Score: 1

      z0mg d00d |_| |2 50 |\|0T 1337
      <NuclearDog> |2 |_| 4 f|3| 4g3|\|t 0|2 50|\/|3T|-|1|\|g?!
      <NuclearDog> 1 p|-|33|2 j00

      --
      This statement is forty-five characters long.
    9. Re:Crypt-IRC by digital+photo · · Score: 1

      Kind of the basic idea behind spy movies' concept of covert communication using the nth letter from the pth character from various articles.

      You're right, the IP address is a problem.

      However, there is are certain assumptions about communications these days which can be used to one's advantage in obfuscation.

      Assumption of message occuring in a small loci of time:

      Face it. So long as you are sending that chunk of data, encrypted or not, through the waves, it is assumed to be a complete chunk of data. Same thing with the sending of a blob of data all at once with bits of pieces of info encoded in them.

      The assumption is that the complete message will be sent in a small frame of time.

      By increasing the window of time within which parts of your message are sent out, you decrease the likelihood of detection/interception by a third party.

      Assumption of sequential or serial transmission of message

      You read the text from front to back, left to right, etc. There is a certain assumption that the message is similarly sent. From beginning to end.

      Send the message piece meal. Send random chunks of the data out of sequence. Even repeat some blocks of the data.

      Assumption of homogenous encoding

      There is the assumption that the message is going to be encoded the same way through and through. Break it up and encode each chunk differently. Use different keys.

      Old cryptic messages used more than three differeing languages. Hell, many science journals use more than two languages.

      encode one chunk, gzip the next, convert another into image data, whatever. Make it all random enough as to resemble noise.

      If you really want to get a message out to your buds, and want to do it in the open where you know you are being logged, one nice way would be to write a program which takes your message and encodes it into say... 50 chunks or mini messages of normal text. They contain bits and pieces of your message. The program, when run, deposits n-pieces of the message on a variety of pre-determined locations.

      So, take your laptop/pda/etc and go to different phones and dial-up systems. Internet cafes, etc. Run the program a few times at each place until the whole of your message is "out there".

      Your friend has the other version of the program which will look at the various places for the chunks your program deposited. When it finds one, it will gather it up and reconstruct the message into your original message.

      The depositing and collecting can be done over the period of one day, one week, one month, or a year. It can also be done in the window of an hour, or whatever.

      The point is this:

      • Discrete blocks of randomly encoded messages
      • deposits from different locations
      • window is variable for message
      • blocks sent out of order
      • possible repeat blocks in different formats
      • public places

      So third parties listening in might see your postings, but without knowing what to look for, it becomes difficult to know what block is for what purpose.

      If your messages are short, you can afford to have more noise.

      If you choose a busy IRC server or a busy web forum, then it becomes even more difficult to determine which posting is part of your message or not.

      When I say that mini-chunks are posted, I'm talking about:

      [piece of original message] => [encoded via encryption, gz+enc, php, etc] => [broken up into parts] => [binary data converted to text word data] => [stenographically encoded into a message posting].

      What you end up with are your original message broken down into X sets of data. Each of those are encoded and broken down into Y pieces. Each of those pieces of binary encoded data are then converted into text which is then stenographically inserted into text postings.

      So detecting and recovering one piece would make no sense since it is only a partial piece of an encoded data block.

    10. Re:Crypt-IRC by Anonymous Coward · · Score: 0

      So things would get reassembled in the channel. I mean, there has to be a way for the rest of the people in the channel to read what you type, otherwise what's the point? So long as that's the case then there's a single point of failure much cheaper to compromise than the individual connections of the channel participants.

      Link level crypto to connect and a reputation/trust management framework to join channels would go a long way here. Perhaps using a public key whatnot among the channel members to exchange a shared rotated symmetrical key and sign the posts. The symetrical key stays off the servers so an irc server can't change the cyphertext into plaintext.

      Oh, and don't keep plaintext logs of your chats on your clients. If they use traffic analysis to track you down and seize your box, they can use the plaintext for differential crypanalysis to get your friends keys.

    11. Re:Crypt-IRC by dasunt · · Score: 1

      [ Snip long discussion of complex scheme to hide messages ]

      That's a tad too obvious that something is up.

      Do it this way:

      Log into #somestupidchannel on irc.commonnetwork.net

      If you say you bought a new Athlon, it means planting a bomb on the subway. If you say you bought a new Pentium 4, it means planting a bomb in the underground tunnel. If you upgraded to play Doom 3, that means that its the Nov 30 for the date. If you upgraded to play Halflife 2, it means the date is December 15th. If you bought it from Fry's, you are meeting at Bob's house, if you bought it from Best Buy, the meeting place is the warehouse.

      If you say that you bought a new Mac and have to wait for a Mac OSX version, the plan is aborted.

      Of course, that's if geeks were doing the planning. In the average terrorist's case, assuming they used IRC at all, it would probably be talking about family members, when the baby was expected, who just gained a new job or lost an old job, etc.

      The point is made though -- your method is damn suspicious. This method is inane chatter.

  17. Juristiction? by Folmer · · Score: 3, Insightful

    Does anyone know if theyre allowed to "spy" on foreign citizen? If i chat on an european server with fellow europeans i cant see any way that they should be allowed to "spy" on me?

    1. Re:Juristiction? by Sp4c3+C4d3t · · Score: 1

      You a terrorist, boy?

      --
      Happy New Year, it's 1984!
    2. Re:Juristiction? by mordors9 · · Score: 1

      Heh, no of course not. Just like they don't monitor cell traffic out of the US. Remember in Afghanistan there for awhile, every time a cell phone call was made a cruise missile got launched.

    3. Re:Juristiction? by Gharlane+of+Eddore · · Score: 2, Informative

      Legally (theoretically) (yeah right) they are ONLY allowed to spy on foreign citizens/governments. The CIA jurisdiction is supposedly restricted to outside the borders of the U.S. (If those foreign governments/citizens object to being spied on by the U.S. it is up to them to try and obstruct such spying (counter-espionage)). The FBI has the jurisdiction for spying within the borders of the U.S.

    4. Re:Juristiction? by subl33t · · Score: 1

      "Does anyone know if theyre allowed to "spy" on foreign citizen"

      Um... did you see the initials CIA?

    5. Re:Juristiction? by Anonymous Coward · · Score: 0

      they're the CIA, it's their job to spy on foreign nationals. americans get upset when the CIA is spying on americans because it's against their charter.

    6. Re:Juristiction? by Anonymous Coward · · Score: 0

      Actually that is thier charter.. The restriction they face in in spying on US citizens

    7. Re:Juristiction? by flossie · · Score: 1
      Does anyone know if theyre allowed to "spy" on foreign citizen? If i chat on an european server with fellow europeans i cant see any way that they should be allowed to "spy" on me?

      I was under the impression that the CIA were *only* allowed to spy on foreigners and that the FBI had jurisdiction over the US. Nevertheless, I have absolutely no doubt whatsover that the CIA couldn't give a damn about the rights of foreigners. The US administration is only concerned with protecting US interests. The CIA take that to the next level. Be honest, would you expect MI5/FSB/Mossad/etc. to ask for permission before spying on someone?

    8. Re:Juristiction? by Anonymous Coward · · Score: 0

      They're the CIA. They're only allowed to spy on foreign citizens.

    9. Re:Juristiction? by bigberk · · Score: 4, Funny
      Does anyone know if theyre allowed to "spy" on foreign citizen?
      Are you trying to be funny? They're a spy agency. Their goal is to gather intelligence. You think the Chinese, Russians, Iranians, and Koreans love being spied on by the USA? The CIA can damn well spy on anyone they want to, at any time. And of course, the CIA isn't the only international organization spying on you, silly.
    10. Re:Juristiction? by data_securt · · Score: 1

      The CIA is (was) chartered exclusively for foreign surveillance (at least it was before 9/11) so in fact it's less legal for them to watch you if you're an American citizen. If you're a foreigner, you're SOL.

    11. Re:Juristiction? by qbzzt · · Score: 4, Insightful

      AFAIK, there is no international law about spying. This means that there is no rule that says that a government cannot spy on people in other countries. They don't need a search warrant or a wiretap warrant.

      This means that there is no law stopping the US government from spying on Europeans, or for that matter European governments from spying on people in the US. A government can even use this to bypass its own privacy regulations by having a friendly government spy on its citizens and getting that information.

      If you want to stop wiretapping, use encryption. Do not assume that a legal barrier is going to stop a secretive organization with little oversight into its activities.

      --
      -- Support a free market in the field of government
    12. Re:Juristiction? by bar-agent · · Score: 1

      it's less legal for them to watch you if you're an American citizen.

      "Less legal?" Isn't that like "a little pregnant?"

      --
      i'd hit it so hard, if you pulled me out you'd be the king of britain [bash.org]
    13. Re:Juristiction? by Anonymous Coward · · Score: 0

      Allowed to SPY? No.

      That's why spies tend to get executed. Yeah, killing spies seems like bad form, but being spied on tends to bring out the worst in people.

      My personal favorite IM encryption: Gaim, plus gaim-encryption. All my non-geek friends tend to live on AIM, but I'd imagine the IRC part of Gaim works fine.

    14. Re:Juristiction? by Anonymous Coward · · Score: 0

      They can spy on anyone outside of the U.S. They may not engage in any spying activities inside the U.S. Including test and evaluation, unless the test and evaluation can not be accomplished outside of the U.S.

    15. Re:Juristiction? by burns210 · · Score: 1

      It is a public network. You should ASSUME one or more entities(people, groups, governments) are spying on you. IRC is as public as you can get, everyone on the channel has your ip address, there is no real authentication(without the extra services, non-required features) and no encryption.

      If you want to be free from this stuff, look at IIP or ssl(or similar) encryption, private networks and authentication.

    16. Re:Juristiction? by heybo · · Score: 1

      What do you think the real job of the CIA is???

      Spying on foreign citizens and countries!

      In theory (yea right!) the CIA cannot spy within the US.

      In theory.......

    17. Re:Juristiction? by data_securt · · Score: 1

      :)

      More or less...

    18. Re:Juristiction? by Ann+Coulter · · Score: 2, Interesting

      I'm curious as to rather or not there are any existing applications that allow for public key encryption of IRC traffic. It shouldn't be too difficult to have the regulars in a channel or room all use the said application. This application would probabily spam the room with unreadible junk from the viewpoint of anyone without a relevant private key but it would allow for secure communication in a chat area. If there is no such application, perhaps I should write one.

    19. Re:Juristiction? by nametaken · · Score: 1

      Except that this isn't really spying. At least, it's not really intercepting a conversation that was meant to be private. It's like a CIA agent sitting on a bench next to you outside a starbucks, while you discuss bombing the embassy within earshot of 20 other people.

    20. Re:Juristiction? by Content-Free · · Score: 1

      Hey, it's the US F-in' government. They can do whatever the hell they want. I have always assumed that the NSA was already monitoring all email, IM, and IRC traffic, but they don't advertise, as a rule. So now other agencies want to be redundant - not surprising since even still none of them talk to each other.

    21. Re:Juristiction? by sadler121 · · Score: 1

      They're a spy agency. Their goal is to gather intelligence.

      The CIA doesn't have a need to spy on americans cause the NSA already does that ;-)

    22. Re:Juristiction? by snake_dad · · Score: 1

      Not to mention CBM-64's booting linux...

      --
      karma capped .sig seeking available Slashdot poster for long-term relationship.
    23. Re:Juristiction? by Anonymous Coward · · Score: 0

      A government can even use this to bypass its own privacy regulations by having a friendly government spy on its citizens and getting that information.

      That's absolutely not true in the United States. Now, that doesn't mean that the Americans don't actually ask foreign intelligence agencies for information on American citizens. But, unless that information is in accordance with domestic privacy and collection rules, it is illegal.

    24. Re:Juristiction? by Anonymous Coward · · Score: 0

      There are treaties that prevent us (America) from spying on certain countries like England and vice versa.

      We are allowed to spy on France, Germany, and most other countries. I think we skip Australia.

      Allies know about the spying, but it is generally not supposed to be stealing stuff (e.g., China stealing our nukes), rather it is supposed to be keeping watch to make sure there are no sneak attacks. So, when we find each others spies doing the nicer side of spying, we simply exchange spies (they get one they caught, we get one we caught) quietly. France tried to embarrass the U.S. a few years (less than 15) back by announcing that they caught some of our spies.

      Most commerical encryption can be broken by the CIA, or more accurately, the NSA. At least that casual users have access too.

    25. Re:Juristiction? by Moofie · · Score: 1

      What does "allowed" mean?

      You think there is something called "international law" that nations have to follow, right? How quaint.

      --
      Why yes, I AM a rocket scientist!
    26. Re:Juristiction? by hsidhu · · Score: 1

      check out silcnet.org

    27. Re:Juristiction? by Anonymous Coward · · Score: 0

      Are you 'moricans that far down the road alread that CIA & FBI are considered jurisdiction?

    28. Re:Juristiction? by Anonymous Coward · · Score: 0

      Well, MI5 wouldn't be asking since they wouldn't be doing that...

    29. Re:Juristiction? by Anonymous Coward · · Score: 0

      This means that there is no law stopping the US government from spying on Europeans, or for that matter European governments from spying on people in the US. A government can even use this to bypass its own privacy regulations by having a friendly government spy on its citizens and getting that information.

      It's been known for years that the NSA and GCHQ have a reciprocal agreement where the former spies on UK citizens and the latter spies on US citizens.

    30. Re:Juristiction? by Anonymous Coward · · Score: 0

      and what's the difference between theory and practice? In theory nothing....

    31. Re:Juristiction? by Anonymous Coward · · Score: 0

      The funny thing is that the parent should be moderated as Insightful...

  18. Solution by Paster+Of+Muppets · · Score: 1

    Smpl, jst fl thm (c nd nsf) by nt sng vwls. sy!

    --
    Due to lack of disk space this user has been discontinued
  19. Heh by FiReaNGeL · · Score: 4, Informative

    So basically they received 150k to develop a logging bot? Not that it existed for the past 10 years... I sure hope their technology is more sophisticated than that. Even then, I don't think they'll get usefull info monitoring public chat rooms; its not like terrorists go to #terrorism to chat about their next plan.

    1. Re:Heh by jez9999 · · Score: 1
      /j #terrorism
      #terrorism unable to join channel (need correct key)
    2. Re:Heh by mrchaotica · · Score: 1
      I sure hope their technology is more sophisticated than that.
      I'm guessing all the extra money is for technology to parse the chat logs and extract useful information. I mean, IRC has even more abbreviations and l337-speak than email or IM, so wouldn't it be harder to parse?
      I don't think they'll get usefull info monitoring public chat rooms; its not like terrorists go to #terrorism to chat about their next plan.
      That's a good point -- this isn't actually all that invasive. I'm a privacy nut (gonna join the ACLU once I get some extra cash), but I don't have a problem with this, since IRC is a public conversation (as opposed to IM or email).
      --

      "[Regarding the 'cloud,'] ownership was what made America different than Russia." -- Woz

    3. Re:Heh by twitter · · Score: 1
      So basically they received 150k to develop a logging bot? ... I sure hope their technology is more sophisticated than that.

      I don't and I've got lots of better thing to do with $150,000.

      --

      Friends don't help friends install M$ junk.

    4. Re:Heh by Anonymous Coward · · Score: 1, Insightful

      No, they probably won't get terrorism information on IRC, but this isn't really about terrorism. It never was, despite what they say.

      The Patriot Act was never going to give the government access to terrorists' library records, either. It was to find people in the United States who are "dissident". If people are talking about things (other than terrorism) that the government doesn't like, this IRC parser is an easy way to find them. Bolster the lists of people to watch. (They must be bored.)

    5. Re:Heh by Anonymous Coward · · Score: 0

      They shoulda of just handed the guys at packetnews 20 bux...

    6. Re:Heh by bicycleguy · · Score: 1

      In that case they could keep busy reading logs from #political and #politics on undernet

      --
      Those who wish to control their own lives and move beyond the existence as mere clients and consumers- those people ride
    7. Re:Heh by stickystyle · · Score: 1

      Blah! Give me $150, 4 cases of beer, 7 packs of smokes and call me in a week.

      --
      Pluralitas non est ponenda sine neccesitate
    8. Re:Heh by Anonymous Coward · · Score: 0

      You seriously believe this technology for spying on public communication has anything to do with fighting terrorism?

  20. PGP encryption... by Ichijo · · Score: 0

    ...will fix that, no prob.

    --
    Any sufficiently unpopular but cohesive argument is indistinguishable from trolling.
    1. Re:PGP encryption... by Anonymous Coward · · Score: 0

      You reckon?

  21. Not the government's fault by EM+Adams · · Score: 5, Insightful

    The only reason the government gets technology like this developed is intelligent people will do anything for their degree or grant money. Until we all stand together and refuse to help Americans spy on other Americans or any one else in the world our rights will continue to slowly errode because of people like the researchers at Rensellaer. Really, they are the ones who need to be punished by ostracizing them from the scientific community and their neighborhoods to make it clear that any one who accepts tax dollars to further the goals of Big Brother are not welcome in our hearts or minds as comrades.

    --
    Posthuman since 2001.
    1. Re:Not the government's fault by fair_n_hite_451 · · Score: 2, Funny

      *CIA_Silent_Running_botServ Activated ("comrades" key word - class naughty detected)
      ///Initiate background_check_with_extreme_prejudice @ user EM_Adams///
      ///Begin create_fake_logs in (#overthrow, #terrorcentral, #McVeyDaMan!)///
      ///AutoGenerate GitMo_Reservation///

      --
      Reason why there is hope for the future generation #364:
      "I wish my grass was emo so it could cut itself."
    2. Re:Not the government's fault by dbitch · · Score: 1

      Well, see, if you were a researcher, in CS, then you'd be seeing your money drain away as the dotboom progressed. Hey, you've got kids to feed. The feds want terrorism datamining, and, well, you're a giant nerd. Let's put the two together, okay?

      And don't blame the researcher so much, if they didn't do it, someone else would, or the feds would subcontract it. (Yes, I do agree, some researchers have no moral compass. Some do. It may be different then yours, though.) It would get done. Just because it's NSF, doesn't mean that they're doing it because it's altruistic - it's because someone (CIA? FBI? Who cares?) WANTS it done, and has earmarked funds for this kind of thing, not necessaricly this EXACT thing.

    3. Re:Not the government's fault by Anonymous Coward · · Score: 0

      I'm glad you're the one deciding whether what they are doing is right or wrong. Maybe _you_ should be ostracized from the scientific community for not realizing that scientists will do anything for money. Always have, always will. You must have been asleep that day during the "how to maximize government grants" discussion in class. Your degree is now invalid. Leave it at the door, put your little paper hat back on, and get back to work slinging fries.

    4. Re:Not the government's fault by Anonymous Coward · · Score: 1, Insightful

      The CIA does not spy on Americans. Their charter specifically prohibits that, and they scrupulously avoid it. They've let thigns drop they probably shouldn't have because they entered the domestic arena and hte CIA doesn't play AT ALL in the domestic arena.

    5. Re:Not the government's fault by Anonymous Coward · · Score: 0

      Grant money.... *drool*

    6. Re:Not the government's fault by Mad+Quacker · · Score: 1

      Unfortunately most of the people you are referring to are really semi-intelligent uninspired talentless hacks. Most people just want $$$ and a Dr next to their name. Please go to your local college library and skim through the thesis papers.

      --
      "I don't know that atheists should be considered citizens, nor should they be considered patriots." George HW Bush
    7. Re:Not the government's fault by Monkelectric · · Score: 1
      NSF is total bullshit. Its basically a random award for anyone who can respond to a solicitation. They don't expect results, the research is often so far fetched. Usually NSF works like this, "in 50 years we want robot soliders" so they fund problems associated with robot soliders. Vision, mechanics, etc.

      But yea there are lots of unethical grad studenst directed by unethical advisors.

      I am currently preparing a (non-evil) proposal for SBIR.

      --

      Religion is a gateway psychosis. -- Dave Foley

    8. Re:Not the government's fault by fbg111 · · Score: 1

      The only reason the government gets technology like this developed is intelligent people will do anything for their degree or grant money.

      Interestingly, and somewhat related, a friend of mine who is an engineering PhD student at an Ivy informed me that since the Bush admin took over, funding for pure research has all but dried up. The only things getting funding from the Feds now are projects with near-immediate benefits, like this eavesdropping device. Longer-term research that is essential to maintaining the US's scientific leadership (if that still exists) is getting harder and harder to fund.

      --
      Flying is easy, just throw yourself at the ground and miss. -Douglas Adams
    9. Re:Not the government's fault by Anonymous Coward · · Score: 0

      You need to wake up man. If the CIA wants to spy on you, they ask MI6 or some other friendly foreign intelligence agency to record your conversations and then hand over the transcript to the CIA. Instead of "CIA spying on Americans" it becomes "MI6 spying on Americans and telling the CIA about anything they find". Of course the results are the same.

    10. Re:Not the government's fault by Anonymous Coward · · Score: 0

      You are partially correct only... Most computer geeks (who do not go to graduate school themselves) think good researchers should be as talented in terms of programming as them (or some commonly worshipped programming gods)... On the other hand, I can guarantee you that many good theoretical computer scientists, crytographers, signal processing gurus etc are lousy programmers... Some even require constant help in daily computing task (where is the my document? where is "Clippy" the saviour?) In a sense, many of them are in fact mathematicians...

      When talking from the opposite side, the grad students with excellent programming ability but no interest to pursue the theories are no good themselves and the research community.... They seem to be fine at the bottom of peck order (e.g. being a summer student, or implementing algorithm specified by boss). But, got stuck when need to do original research...

      It is a blessing to be good at both theoretical and programming issue... But, as a researcher, the former is probably more important. Of course, we cannot deny that some grad students lack both.

  22. don't worry by digid · · Score: 5, Funny

    * digid slaps CIA-bot around a bit with a large trout

    1. Re:don't worry by Dr+Caleb · · Score: 1
      I suppose it's better than a sharp pokey thing in the eye.

      --
      "History doesn't repeat itself, but it does rhyme." Mark Twain
  23. Suspicious activity by Winlin · · Score: 1

    asl?
    arabic suicide legions? , actively seeking liquidators?
    And just wait till their lurkbot gets cybered a few thousand times

  24. CIA also has plans by Anonymous Coward · · Score: 0

    To become the most leet release crew on Usenet. They had the "24" isos before anyone.

  25. Umm... by Anonymous Coward · · Score: 3, Interesting

    Isn't that considered interstate wiretapping?

    The last time I checked, federal law said you needed a warrant to do that.

    1. Re:Umm... by anti-tech · · Score: 1

      The Patriot Act cured that small issue

    2. Re:Umm... by burns210 · · Score: 1

      heh, that was a good one.

      No, you are mistaken, this could be used to catch 'terrorists' and is thus above both the law and common sense (and judicial oversight).

      Good try though, better luck next time. /tongue-mostly-in-cheek

    3. Re:Umm... by mr_burns · · Score: 2, Funny

      the last tine I checked, the patriot act made warrants easier to get than cooties on a playground. I think they come out of judges whenever they sneeze.

      --
      "Let him go, Ralph. He knows what he's doing." --Otto Mann (simpsons)
    4. Re:Umm... by Anonymous Coward · · Score: 2, Funny

      Sure, you need a warrant if you want to use the info in a court. If not. . .

    5. Re:Umm... by mark-t · · Score: 1

      The reason it isn't required on IRC is because it's pretty well _ASSUMBED_ that all conversations on IRC are being logged by somebody somewhere anyways... if you want more privacy, use your own private network (I mean _really_ private... like a lan).

    6. Re:Umm... by Anonymous Coward · · Score: 0

      Isn't that considered interstate wiretapping?

      Dude, where have you been for the last 3 years, 2.5 months?

    7. Re:Umm... by IO+ERROR · · Score: 1

      It's not wiretapping if they're going into an open IRC channel.

      --
      How am I supposed to fit a pithy, relevant quote into 120 characters?
    8. Re:Umm... by jasoneyre · · Score: 1

      Can you say pre-USAPATRIOT?

      --
      THSsMCHshrtrTHN160chrs -- And I don't even like to SMS!
  26. Its time... by Caligari · · Score: 1
    for people to start using Secure Internet Live Conferencing.
    http://silcnet.org/

    --
    The moving cursor writes, and having written, blinks on.
  27. How Soon... by Tackhead · · Score: 4, Funny
    From the article:
    > How soon until all IM conversations are monitored by Big Brother?

    <musicfan> Hey, anyone got The Smiths - How Soon Is Now.mp *THUMPTHUMPTHUMP* "FEDERAL COPYRIGHT CZAR SQUAD! PUT DOWN THE HEADPHONES AND STEP AWAY FROM THE IPOD!"
    *** Disconnected

    1. Re:How Soon... by greenguy · · Score: 1

      Cynic: If he was being arrested, he wouldn't bother to type "THUMPTHUMPTHUMP".

      Cynic's companion: Perhaps he was dictating.

      Cynic: Oh, shut up.

      --
      What if I do the same thing, and I do get different results?
  28. No expectation of privacy by 3Suns · · Score: 4, Informative

    I don't see how people can be upset about monitoring chatrooms, unless they were actually doing something questionable with that data. As most of IRC is a completely public network by design, there is no expectation of privacy. And it's also well-known that your IP address is exposed to all those on the server.

    IM conversations are a different matter, though. There, the network is private, run by a company, and the expectation is that the conversations are private as well. It might very well be illegal for AOL (and other IM networks) to be monitoring individual IM sessions.

    --

    -3Suns

    ~~~~
    The Revolution will be Slashdotted
    1. Re:No expectation of privacy by mordors9 · · Score: 3, Insightful

      There ya go. Didn't Nixon say that, if you don't have anything to hide why do you want us to get a search warrant.

    2. Re:No expectation of privacy by 3Suns · · Score: 1

      That's not my point. Talking on IRC is not a private conversation, and everybody knows that anyone can be listening and/or logging. You never need a warrant to, say, listen to a protester give a speech in public, which is also an example of non-private conversation.

      --

      -3Suns

      ~~~~
      The Revolution will be Slashdotted
    3. Re:No expectation of privacy by WIAKywbfatw · · Score: 2, Insightful

      IM is like a phone conversation. You talk with someone, and you "know" exactly who that someone is.

      IRC is more like a bar. You're talking to a bunch of people, and people come and go freely. Of course people can record what you're saying in a bar, just as they can record a log of what's said in an IRC channel, but would you go to a bar with the expectation of your every word being recorded?

      And, if you were in a bar and there was a high probability that your every word was being monitored, wouldn't you choose your words more carefully? For example, wouldn't you think twice about talking about your new supply of weed, that movie or that album you downloaded last night or that time you ripped off a bunch of stuff from work?

      Of course, you're right that you shouldn't have a complete expectation of privacy in just about everything you do online but there's a difference between having no expectation of privacy and your every conversation actually being monitored.

      There's a name for the country where everything is recorded and nothing goes unseen. It's called Oceania.

      --

      "Accept that some days you are the pigeon, and some days you are the statue." - David Brent, Wernham Hogg
    4. Re:No expectation of privacy by Reene · · Score: 1

      And it's also well-known that your IP address is exposed to all those on the server.

      Not necessarily true. Many servers support vhosts as well as the "+x" mode (which scrambles your address). In both of these cases, the only people that could have access to your IP are the people who run the server. Fat chance getting them to hand over o:lines to someone from the government.

      --
      "He does look a bit Oompa like, even if his Loompa is a bit off-kilter."
    5. Re:No expectation of privacy by Anonymous Coward · · Score: 0

      Because all it takes is one bad apple to screw it all up. FBI proves that every year with several illegal wiretaps (that get caught!), though the only one that sticks in my head were the two agents who worked together to wiretap various companies and were caught making insider trades. Since then, there was that one big bank merger where someone got very, very rich 30 minutes before the merger was announced, and the investigation (if any happened even) was crushed quicker than an anthrax letter case. Wonder why?

      So now, why should we worry about what happens on public chatrooms? That depends, why should we worry about getting arrested for using the library (despite what the US govt says, it did happen in Florida, where a man read books on batteries and mineral water and was reported and arrested, only later did it turn out he was an illegal immigrant)? Why should we worry about what some underpaid agent does with our love letters (Hey, this rich guy's got a girlfriend at 123 Ransom Street!)?

      You can mock me about my tinfoil cap when the 3-letter agencies and the cops toss their bad apples and stow the blue wall bullshit.

    6. Re:No expectation of privacy by linuxtelephony · · Score: 1

      There, the network is private, run by a company, and the expectation is that the conversations are private as well. It might very well be illegal for AOL (and other IM networks) to be monitoring individual IM sessions.

      I doubt it. Telcos (including wireless) are allowed to monitor any activity (incl. voice traffic) on their network, all in the name of network security and maintenance. Targetting specific person or persons and following their calls through a network (aka wireless) would probably be crossing the line, or at least in a grey area, maybe.

      Why should IM companies be any different?

      --
      . 62,400 repetitions make one truth -- Brave New World, Aldous Huxley
    7. Re:No expectation of privacy by Anonymous Coward · · Score: 0

      How is irc not a private conversation?
      If IRC is public, why has +i (invite only), +k ( need a key to join), +s (dont show in /list or /whois), etc all part of the original implentation?
      Even lowly warez site channels need both an invite from a sitebot and a key that changes hourly or so. To get this, you need to login to the ftp (over TLS, with ip restrictions and an ident check), send a site invite command, then it invites you, tells you the chan key, AND the clientside encryption key.
      Thats right. Just being in the chan gives you nothing more than a bunch of nicknames, all text will be garbled until you load the encryption script so you can see what people say, or even what the topic is (preventing anything encriminating from being broadcast in the clear).

      And this is just to hide some mild filesharing. If Osamma can organize so many simultanious hijackings and sucessfully take down the twin towers and crash a plane into the pentagon, I'd assume theyre smart enough to do things even more securely than the warez kids do.

      And, for the record, don't bother with SSL+IRC, any cryptographer will tell you the keyexchange is flawed, just get something like http://fish.sekure.us/main.htm which runs on mirc, xchat, and irssi.

      Posting this anonymous for obvious reasons. 290d1f9bc7085f7d6948538474b88426

    8. Re:No expectation of privacy by Lawrence_Bird · · Score: 1

      and if a channel is marked as private or otherwise keyed then they must (IMHO) treat it as non-public. This would be the equivalent of renting a private room at a restaurant or bar - the clients expectation is privacy (regardless of the price they pay for that room rental).

      Likewise an encrypted conversation also should be treated as private as it is obvious (to any reasonable man) that the parties involved intend for their converstation to be private.

      The first case I think is much stronger, but either way
      your best bet is an encrypted private channel. Change keys frequently in person. Destroy the key.

    9. Re:No expectation of privacy by Jackie_Chan_Fan · · Score: 1
      I don't see how people can be upset about monitoring chatrooms


      Gee whats to worry about?

      10 friends hanging in an irc channel talking about how much they hate the president, or telling dead babies fucking jokes have absolutely nothing to worry about!

      hmm yeah who cares whos listening...

      Ah yes.. no more "fuck bush" or "whats the best part about fucking jean bennet ramsie jokes"

      You will fear who is listening. You're rants about how fucking lame our president is, and how he should be sent truck loads of pretzels joke will be now flagged as suspicious.

      You will begin to cower in fear as our pricacy laws erode.

      There is just so little one has in defense against our ruling class kings.

      One angry black agent who saw you tell a nigger joke on irc, may just go after you like a rabid dog and you will be slippery sloped right into jail all because of a pissed off agent, and a system that doesnt offer enough defense for the accused.

      You have nothing to worry about.

      If that were true, why would the founders of this country have fought so hard, blood and tears... for privacy and civil rights independent of the ruling class?

      Think about it.

    10. Re:No expectation of privacy by 3Suns · · Score: 1

      What is it that you fear?

      Do you fear that "they" will hear what you have expressed using your rights of free speech? If so, then this story should be no more or less alarming than if they said "The CIA is reading our newspapers and maybe even the posters on telephone poles!" The fact that somebody might hear you shouldn't concern you.

      Or, do you fear that you will be arrested based on what you say; that your freedom of speech will be infringed? I believe that is a legitimate concern, but it is tangential issue to the CIA monitoring chatrooms. We only have cause to complain if they use the information they gather illicitly.

      You currently have the right to walk out into the street and say whatever you want about the president. Nobody can (is supposed to) stop you, unless you're disturbing the peace. Maybe the CIA heard; who cares. That's the way freedom of speech is supposed to work.

      --

      -3Suns

      ~~~~
      The Revolution will be Slashdotted
    11. Re:No expectation of privacy by Jackie_Chan_Fan · · Score: 1

      What i fear is those in power using it against you because of what you say and not do.

      That is what i fear.

      You can take a perfectly innocent person and that person can say something that is perfectly legal yet highly offensive to someone, and that someone may be a person in power who can rip you a new asshole over it. That may include taking you to court, making your life miserable etc.. all because they have power. EVEN if the end result doesnt result in jail time or a conviction.

      Also there are other elements to privacy that are important. Privacy allows us to make mistakes and not ruin our lives... such as "oops i ran a red light, but i honestly couldnt see if it was red due to the sun flaring in my eyes"

      Well that means shit to the police officer. And it means even little to the judge. Because you cant prove it EVEN though it was teh truth.

      You get fined.

      Privacy is an important element to our society.

      I'm not affraid of some mother hearing me say "ah go fuck yourself" or "Fuck you and your republican president" but i'm worried about a secret service agent overhearing me say "i fucking hate this president"

      They have power.

      And if you dont fear power... you really should.

    12. Re:No expectation of privacy by jafuser · · Score: 1

      If this monitoring software goes in at the irc server network level, then denying the government access to a particular channel is moot.

      IRC encryption is far from ubiquitous (though I'm sure it is being done somewhere), and the expectation that a casually-oriented channel require encryption so that they can participate in discussion without fear of government monitoring is ridiculous.

      --
      Please consider making an automatic monthly recurring donation to the EFF
    13. Re:No expectation of privacy by TyrranzzX · · Score: 1

      Supposing, of course, they don't pass another DMCA-like bill, making everyone a criminal. It's so convenient when everyone's a criminal, you know, especially when there's all that evidence. Makes it nice n' easy to prosecute anyone they happen to dislike; protestors, gun owners, filesharers, political bloggers....you.

  29. Simple enough.. by J-B0nd · · Score: 1

    Key your channel, make it hidden, make it invite only with a bot set up to invite people, and run it on a secure network like Linknet using SSL to connect.

    1. Re:Simple enough.. by netsharc · · Score: 1

      And the CIA's AliceBot will fool that lonely teenage geek chan-op to invite "her" in.

      --
      What time is it/will be over there? Check with my iPhone app!
  30. Amazing by RM6f9 · · Score: 1

    It is amazing that anybody is naive enough to believe that any computer connected to the internet has any privacy at all. The only question is one of "Big Brother"'s resources and priorities...

    --
    Take the 90-Day Challenge! http://rwmurker.bodybyvi.com/
  31. Security reasons HA! by darkmayo · · Score: 4, Funny

    They are just trying to find the best quotes and submit them to bash.org

    --
    "I am a kernel in the linux army"
    1. Re:Security reasons HA! by bersl2 · · Score: 4, Funny
      #88575 +(3525)- [X]

      <Stormrider> I should bomb something
      <Stormrider> ...and it's off the cuff remarks like that that are the reason I don't log chats
      <Stormrider> Just in case the FBI ever needs anything on me
      <Elzie_Ann> I'm sure they can just get it from someone who DOES log chats.
      *** FBI has joined #gamecubecafe
      <FBI> We saw it anyway.
      *** FBI has quit IRC (Quit: )
      Wrong agency, but still funny.
  32. Eliza anyone? by Thunderstruck · · Score: 1

    I've been wondering for years why I don't see any chatroom bots built on Eliza or Alice. It seems to me these could be much more useful in both advertising and gathering information.

    Has anyone ever tried this?

    --
    Trying to use sarcasm in text-based forums does not work.
    1. Re:Eliza anyone? by stratjakt · · Score: 2, Informative

      Sure, there are plenty of them.

      Here's the first google hit for "irc bot ai", there are plenty more.

      I don't think they're useful, but they can be entertaining when some leghumping 15 year old kid gets into a fight with, or hits on one.

      --
      I don't need no instructions to know how to rock!!!!
    2. Re:Eliza anyone? by davron05 · · Score: 1

      there indeed are couple of IRC bots implementing Eliza talking engine, my favourite one is the cybersex bot (make sure to read couple of it's logs. there also exists an eliza extension for eggdrop.

    3. Re:Eliza anyone? by Anonymous Coward · · Score: 0

      Uh... for YEARS there was a bot on efnet named Eliza. I don't think you were looking very hard.

    4. Re:Eliza anyone? by Anonymous Coward · · Score: 0
      Has anyone ever tried this?

      Yes. You spend most of your time talking to them.

    5. Re:Eliza anyone? by Reziac · · Score: 1

      Occurs to me that Eliza and her friends could also be useful for screwing with the signal-to-noise ratio -- maybe an AI could pick up parts of existing threads and produce matching chatter, no matter what the topic is. After all, if they're going to waste taxpayer dollars on such projects, the least we can do in return is waste their time!!

      --
      ~REZ~ #43301. Who'd fake being me anyway?
    6. Re:Eliza anyone? by Thunderstruck · · Score: 1

      You may be onto something here... how soon till we see a nice FOSS "screen saver" that, instead of searching for ET or calculating the number of monkeys required to type Shakespear, does the really useful task of screwing up efforts to mine data from the internet?

      Heck, I'd probably even pay for such a program.

      --
      Trying to use sarcasm in text-based forums does not work.
  33. Nothing new... is it? by un1xl0ser · · Score: 1

    The CIA/FBI et cetera have been onto the IRC seen for a long time. What's new? Automated logging instead of people? They would be crazy not to log channels now. Technology has been there for a while.

    --
    v4sw6PU$hw6ln6pr4F$ck 4/6$ma3+6u7LNS$w2m4l7U$i2e4+7en6a2X h
  34. obligatory 1337-ification by bersl2 · · Score: 1

    Big Brother is watching j00

  35. what if... by lordsid · · Score: 1

    these what if's have already happened, just not the CIA doing. NSA monitors all intercontinental data traffic already. including im's. /shiny tin foil hat

    --
    IMAGE VERIFICATION IS EVIL!
  36. Thats not much money. by gweihir · · Score: 1

    Would fund one PhD researcher for 1.5 years here. You cannot do very much with that, especially if people are trying to hide.

    Seems to me this is more a shot in the dark.

    --
    Most ACs are not even worth the keystrokes to insult them. Be generically insulted by this and ignored otherwise.
  37. You don't control the trunks by TiggertheMad · · Score: 3, Interesting

    Yeah, but you don't have physical control over the pipes between yor server and all your clients. How do you think your bits get sent back and forth? I just have to put an intercept between you and your clients to grab all the data I want.

    This would be some sort of program that can sit on an ISP's trunks, and grab all traffic that looked like IRC traffic and dump it in a log. Since it is the CIA, (And they are in theory, the Intelligence 'Offense') it might be a small embedded hardware solution that has a built in microdrive. It would be very handy to have a CIA controled operative slip in to a NOC in a hostile country, snap it onto a trunk in an unobtrusice location and pick it up a month later.

    American Tinfoil hat people, relax. The FBI is the group spying on you, not the CIA.

    --

    HA! I just wasted some of your bandwidth with a frivolous sig!
    1. Re:You don't control the trunks by Nihilanth · · Score: 1

      "American Tinfoil hat people, relax. The FBI is the group spying on you, not the CIA."

      On what do you base that assumption? Because that's what they say?

    2. Re:You don't control the trunks by 3terrabyte · · Score: 1

      Dick Gordon: National Security Agency.
      Martin Bishop: Ah. You're the guys I hear breathing on the other end of my phone.
      Dick Gordon: No, that's the FBI. We're not chartered for domestic surveillance.
      Martin Bishop: Oh, I see. You just overthrow governments. Set up friendly dictators.
      Dick Gordon: No, that's the CIA. We protect our government's communications, we try to break the other fella's codes. We're the good guys, Marty.
      Martin Bishop: Gee, I can't tell you what a relief that is, Dick.

      --

      Why are there only 19 people folding@home for slashdot?

    3. Re:You don't control the trunks by Anonymous Coward · · Score: 0

      But does any of that matter if two parties decide to use a code language decided on off-channel---not encryption per se, just stuff that looks like the usual chat drivel with hidden meaning. How do you filter for that?

    4. Re:You don't control the trunks by Eil · · Score: 4, Informative


      Yeah, but you don't have physical control over the pipes between yor server and all your clients. How do you think your bits get sent back and forth? I just have to put an intercept between you and your clients to grab all the data I want.

      OpenSSL. Many IRCds and clients these days support encryption.

      This would be some sort of program that can sit on an ISP's trunks, and grab all traffic that looked like IRC traffic and dump it in a log. Since it is the CIA, (And they are in theory, the Intelligence 'Offense') it might be a small embedded hardware solution that has a built in microdrive. It would be very handy to have a CIA controled operative slip in to a NOC in a hostile country, snap it onto a trunk in an unobtrusice location and pick it up a month later.

      They already have this, it's called Carnivore. It's not a secret from the ISPs, either, they know it's there. But they are prohibited by law from telling the public whether or not a Carnivore box is monitoring their traffic. Additionally, Carnivore is not only for email these days.

    5. Re:You don't control the trunks by Anonymous Coward · · Score: 1, Interesting

      -1, Wishful thinking. You completely ignore the fact that the internet is international. On the network of IRC servers I use, there are multiple channels for nearly every country in the world, filled with residents or ex-pats or people interested in them. My channel gets people from around the world on a daily basis and my packets seem to have no trouble reaching them. They don't mysteriously disappear at the border.

      So yeah, the CIA could still spy on me over this. They'd be wasting their time and money in my opinion (Though I'm sure they could forge logs in interesting ways if they ever had to justify their actions).

    6. Re:You don't control the trunks by Content-Free · · Score: 1

      *dons lead-lined tinfoil helmet with integrated gas-mask* And don't think encryption will help you, either. The NSA has either back doors into every algorithm or a super-secret super-super-computer able to brute-force it.

    7. Re:You don't control the trunks by arminw · · Score: 1

      ...have to put an intercept ...

      Someone could write programs that send flag words and phrases interspersed with things that would be used in normal innocuous conversation and have these programs communicate with each other 24/7.

      Intercepts could become pretty useless since they have to filter for certain "flag" keywords, such as maybe "bomb", ", and "terrorist" and a good selection of names of mideastern origin.

      If enough people ran such programs it would become pretty frustrating for the spies until they pass some laws against doing such stuff.

      --
      All theory is gray
    8. Re:You don't control the trunks by DrHex · · Score: 1

      LOL...and if you remember the premise in that movie (Sneakers) it was the simple fact that an outside party (outside of the US) had developed a peice of decryption hardware that broke all algorithms used on major services.

      You also don't control the connections outside official territory and this is where international agreements to spy on the citizens of 'friendly' nations comes in.

      Sounds like the movie inspired some people who developed Echelon and Carnivore. As well as lots of other tech :)

      --
      Scientia et Potentia
    9. Re:You don't control the trunks by Content-Free · · Score: 1

      And if you think Google's recruiting techniques are a challenge, check out the NSA's. Their security geeks make the /. crowd look like a bunch of script kiddies.

    10. Re:You don't control the trunks by Anonymous Coward · · Score: 0


      Set an eggdrop that will kick/ban idlers.

      I know your friends might not appricate it, but its for the security of everyone.

      Of course remember not to assume that common and public communication methods and protocols are safe to start with.

      Btw, if I am not wrong, RIAA already have scripts that patrol irc networks searching and scanning for illegal file swapping.

      Another interesting twist for this will be the CIA monitoring chat rooms on non-american irc networks?

      my 2 cents...

    11. Re:You don't control the trunks by bpd1069 · · Score: 1

      Remember, if you look suspicious, you are suspicious...

      --
      --
    12. Re:You don't control the trunks by Dh2000 · · Score: 1

      many slashdotters are.
      (not me, of course)

    13. Re:You don't control the trunks by asuffield · · Score: 1


      OpenSSL. Many IRCds and clients these days support encryption.


      Speaking both as an author of an ircd and somebody with a comprehensive understanding of what SSL does:
      worthless. It is no defence at all against an intelligent attacker. It has all the same problems as when it is deployed with http. Read CRYPTO-GRAM and some of Schneier's books.

      If I were just a little more paranoid then I would suggest that the CIA started this SSL-frenzy in order to make people feel more secure while standardising the method for intercepting their communication.

      It is security theatre. Not security.

    14. Re:You don't control the trunks by michaelredux · · Score: 2, Interesting
      Speaking both as an author of an ircd and somebody with a comprehensive understanding of what SSL does: worthless. ...Read CRYPTO-GRAM and some of Schneier's books.
      This quote from Schneier in CRYPTO-GRAM-0303 does not seem to support your opinion:
      I wouldn't discard SSL as being irrelevant... Security is only as strong as the weakest link, and SSL is nowhere close to being the weakest link.
      http://www.schneier.com/crypto-gram-0303.html
  38. This is NOT the first CIA automated tool... by Anonymous Coward · · Score: 0

    In the nineties, those bastards developed an automated tool that could autonomously punch the monkey. Very scary indeed.

  39. ROFL!! by Tibor+the+Hun · · Score: 1

    a/s/m?

    --
    If you don't know what AltaVista is (was), get off my lawn.
  40. What are they looking for? by Anonymous Coward · · Score: 1, Funny

    From the article:

    "CNet News is reporting that the CIA has been quietly investing in research programs to automatically monitor Internet chat rooms. In a two year agreement with the National Science Foundation, CIA officials were involved with the selection of recipients for research grants to develop automated chat room monitors. Researchers at Rensselaer Polytechnic Institute received $157,673 from the CIA and NSF for their proposal of 'a system to be deployed in the background of any chat room as a silent listener for eavesdropping ... The proposed system could aid the intelligence community to discover hidden communities and communication patterns in chat rooms without human intervention.' How soon until all IM conversations are monitored by Big Brother? The abstract of the proposal is available on the NFS website."

    1. Re:What are they looking for? by blogeasy · · Score: 1

      There are a lot of articles you could pull phrases like "osama terrorist nuclear" out of.

      --

      Browse the Information Directory
    2. Re:What are they looking for? by Anonymous Coward · · Score: 0

      Yeah, like this one...

    3. Re:What are they looking for? by kgbspy · · Score: 1
      --
      ~
      ~
      ~
      -- INSERT --
  41. Isn't that the job of the NSA? by Anonymous Coward · · Score: 0

    What the CIA is trying to get a piece of the electronic spying pie now? That is the NSA's job!!!

  42. Echelon - already done by Magickcat · · Score: 4, Insightful

    Anyone who thinks that the CIA doesn't already have systems to automatically monitor email, chatrooms etc - needs to read a bit more on intelligence technology. This would fall under "Echelon" anyhow.

    The NSF might lack the tools, but I sincerely doubt that the CIA are developing these sorts of very basic tools. More likely, the NSF aren't given access or information on the extent of CIA information gathering.

    Also, I imagine such a news article makes the public likely to believe that the technology isn't already in active use.

    --

    Si tacuisses philosophus mansisses. If you had kept quiet, you would have remained a philosopher.

    1. Re:Echelon - already done by louisykarma · · Score: 0
      Echelon runs on .net, after Pointdexter and Gates met at some masonic frat brat. I don't have to worry about them scooping places like /., I just mod myself down as troll. Their vintage Crays just don't snoop below the +2 threshold. Yeah, it hurts to spend my hard-pimped karma to mod myself down. It's a backdoor on undocumented mod_perl regexps and Slashcode. Can't tell you more,
      EOT %E7%E7/~x/Troll
  43. I'm one step ahead of you! by Anonymous Coward · · Score: 2, Funny

    Mine supports ROT26. In fact, I'm using it now.

  44. Isn't this against the CIA charter? by smacktits · · Score: 1

    The CIA aren't allowed to operate on USA soil, if I remember correctly (plus I'm not American). So... I suppose they would have to limit themselves to spying on foreign-based IRC servers only.

    How does this marry with spying on US citizens, in the US, but connected to foreign servers? This sounds like a giant minefield as far as I'm concerned.

    1. Re:Isn't this against the CIA charter? by ChrisPee · · Score: 1

      They have an agreement with the EU spy agencies to monitor each other's citizens. Seriously.

  45. threat models by ConsumedByTV · · Score: 3, Insightful

    The CIA is still being semi-passive here. It's shady seeming, but I think if you can join freely, they can as well.

    This surpasses basic monitoring of clear text protocols like irc but it still doesn't have the ability to monitor where you must actually be a part of a community. If you use irc over SSL, you're in the clear from passive and undetectable monitoring. This obviously gets around that but it means that they will have some interesting people poking around with people who normally do the poking on networks.

    The rand corp goes one step further and seeks to hire people to become members of groups by being an outright spy. Pretty interesting stuff. It was on cypherpunks a while back.

    It should be assumed that if you don't use encryption, it can be monitored. If you use encryption (irc over ssl, silc, etc) in a broadcast medium (for an entire room), you should assume it's monitored also. It would just have to be monitored by an agent of some sort.

    It's all about the threat model you're up against.

    --


    "Not my manner of thinking but the manner of thinking of others has been the source of my unhappiness." - M
    1. Re:threat models by Isomer · · Score: 1

      If you use irc over SSL, you're in the clear from passive and undetectable monitoring.

      Unless someone else on the same channel doesn't use SSL, or the servers don't use SSL from serverserver. or the irc server you connect to just logs everything.

      If you want proper protection from the Bad Guys you should be doing end to end encryption. :)
    2. Re:threat models by ConsumedByTV · · Score: 1

      That's true. Irc over SSL is a dirty hack anyway.
      I think silc is much better. No nicks need collide when you're identified by pub/private key.

      --


      "Not my manner of thinking but the manner of thinking of others has been the source of my unhappiness." - M
  46. They weren't doing this already? by alex_guy_CA · · Score: 1

    I would have thought they had this one nailed ages ago!

  47. Tinfoil hat time by Junior+J.+Junior+III · · Score: 1

    I've always assumed that AIM conversations were subject to some kind of monitoring, if just the most cursory scanning for certain keywords. Why else would all traffic need to go through AOL-controlled servers?

    --
    You see? You see? Your stupid minds! Stupid! Stupid!
  48. I had a nightmare the other night by Gary+Destruction · · Score: 1, Interesting

    I had a nightmare the other night that the NSA was after me for posting pictures on the Internet that made fun of George W Bush.

    1. Re:I had a nightmare the other night by Anonymous Coward · · Score: 0

      It wasn't a nightmare. But thank you for logging your I.P. address for us so easily. If I were you I'd answer that knock on the door in about thirty seconds...

    2. Re:I had a nightmare the other night by Anonymous Coward · · Score: 0

      That's funny - I had a nightmare that someone named Gary Destruction posted something completely inane on Slashdot and got modded Interesting for it.

    3. Re:I had a nightmare the other night by Anonymous Coward · · Score: 0

      shut up dave or omnihilo.

  49. Bing!Bing!Bing! by TiggertheMad · · Score: 2, Informative

    Correct, at least as far as public rumors about secret government spying software goes. However, the Carnivore project is FBI. The FBI doesn't work for the CIA, so why would you expect them to actually work together?

    Also, technically, the FBI are just federal cops, as opposed to state cops or local cops. The CIA is an intelligence agency (spies), and so they might not want the exact same sort of application. You can't simply get a court order to slap Carnivore on an ISP's lines when the ISP in question is say, in North Korea.

    --

    HA! I just wasted some of your bandwidth with a frivolous sig!
    1. Re:Bing!Bing!Bing! by Anonymous Coward · · Score: 1, Interesting

      Although to go one step further, I believe it is illegal for the CIA to spy on US citizens (and/or in the USA). The FBI spys on us, the CIA spys on them (Yes, the FBI are cops, but they also get counter-espionage duty). I don't know where NSA falls in the mix.

      So does the CIA only get to use this system on foreign IRC servers? Or do the post-9/11 security rules mean that these silly retriction of powers laws go away, and the CIA can spy on us, too?

      I feel safer already. Is there any chance these systems will be used to help people, or only in the distant sense of "catching the bad guys so that others are safe"?

    2. Re:Bing!Bing!Bing! by sadler121 · · Score: 1

      The FBI spys on us, the CIA spys on them (Yes, the FBI are cops, but they also get counter-espionage duty). I don't know where NSA falls in the mix.

      Well kinda... :-) The FBI are Federal Cops, The CIA spys on foriegn countries and the NSA spys on Americans.

    3. Re:Bing!Bing!Bing! by Thomas+Shaddack · · Score: 1

      A passive packet wiretap is a passive packet wiretap, regardless if it is called Echelon or Carnivore. The politics and box size and tap hardware and organization names are different, but the principle and the technical modes of defense (link-layer encryption, traffic pattern jamming) are the same for both.

  50. Of course, but... by Anonymous Coward · · Score: 2, Insightful

    They have to pretend to be "researching" things they've had in operation for decades to keep us regular folks from getting too suspicious.

    They'll probably announce in a couple of months that IRC monitoring was not feasible due to the super-complicated technical problems inherent in logging plain text.

  51. give me your money, slave. by twitter · · Score: 4, Insightful
    I don't see how people can be upset about monitoring chatrooms, unless they were actually doing something questionable with that data. As most of IRC is a completely public network by design, there is no expectation of privacy.

    It's easy to understand why I'm upset. You might understand the next time you pay your taxes. Remember that a fraction of your hard work is going to pay for your government to listen in on your conversations. Many people are making a living at it. I think they and my government have better uses for my money. I did not ask for it, I don't like it and I don't want to pay for it. it's also well-known that your IP address is exposed to all those on the server.

    If you don't mind that kind of thing, perhaps I can interest you in a few personal services. For the low price of $50/hr, I'll log all of the communications from your "exposed" IP address, cull what I want, damage your reputation by questioning your peers if I note anything suspicious and even charge you with crimes if you happen to say the wrong thing. Most of the work will be automated but I take no responsibility for the information being stolen by insurance companies, employers and other organizations that have a direct impact on your quality of life. By freedom of information, I'll be sure to let people know that I'm investigating you but I'll tell them that I'm an official government agency, so they won't question my motives and will instead turn their suspicions onto you. Sound like a good deal?

    Pay up!

    --

    Friends don't help friends install M$ junk.

    1. Re:give me your money, slave. by shawn(at)fsu · · Score: 1

      Can we just say that this will always be a complaint of X amount of people and move on? Does it really need to be said for every topic of government activity?

      I did not ask for it, I don't like it and I don't want to pay for it.
      Many retired people in Fl don't like their tax dollars going to fund public schools,
      A person sitting in solitary confinement in prison probably wishes money didn't go to solitary confinement.

      I think they and my government have better uses for my money.
      If you asked 1000 people what they would like to be done with their tax dollars how many different answers do you think you would get? The thing is we all have different priorities that we feel need attention and ones that don't.

      IRC has never been private anyone and their mother can log what you say and twist it to what ever they want, hell they don't even need to twist it they could forge the whole damned thing. They new thing here is just trying to automate some of this logging and filtering and reducing man hours, which can reduce the amount of people they have to pay for it and allow that money to go somewhere else. But I'm sure you'll have a problem with where ever your tax money goes won't you?

      The more I read /. The more I hope that the tin foil hat brigade is right in their fears. That way it wont be long until they are rounded up then I won't have to hear them yell "Big Brother" this and "1984" that.

      --
      500 dollar reward for tip(s) leading to the arrest of the person(s) who stole my sig.
  52. Re:Faith, Family, and Values Will Prevail: +1, Tru by mrchaotica · · Score: 0, Offtopic

    You're a completely off-topic troll, but just in case anyone's interested, there's a K5 story about that.

    --

    "[Regarding the 'cloud,'] ownership was what made America different than Russia." -- Woz

  53. Researching? by Anonymous Coward · · Score: 0

    I think it has been in place for a long time. If you mean they are going to go public about it, then yes they will "CLAIM" that they are starting it.

  54. What, you mean they aren't? by Fencepost · · Score: 4, Interesting
    I'd have figured something like that would've gone into place quite some time ago, at least on the larger IRC networks (EFNet, Dalnet, whatever they are these days).

    All you really need is the servers at a few of the nodes to be running logging software, and it wouldn't even need to be running in the context of the IRC server - it'd just need to be tracking the inbound and outbound traffic. It wouldn't catch everything, but you'd get a fair amount of it and probably get enough to tell you what areas needed more examination.

    Similarly, I assume that just about everything on Usenet is monitored and saved by at least a few agencies domestic and foreign, if not more. How much would Giganews charge for a full feed? That's not going to be a lot of use against one-way traffic, but discussions would almost certainly be trackable.

    As with many things the information stream itself is relatively easy and inexpensive to get access to, but extracting good information out of it is likely to be harder. I wouldn't be surprised if a big chunk of the money they're giving out is related more to the analysis of that sort of information stream (and existing store) than to the simple acquisition of data.

    --
    fencepost
    just a little off
  55. public vs private in cyberspace by Doc+Ruby · · Score: 4, Insightful

    The CIA should be operating in public spaces - there's little expectation of privacy in public. joeschmo can watch IRC traffic, so spy007.exe should be able, too. The control points on this activity lie at a slightly deeper level: we need a definition of "public" vs. "private" on the Internet that can work in courts and congresses as well as in compilers and chatrooms. And the CIA, or any organization (government, corporate, NGO or otherwise) must abide copyright constraints, which include right to copy personal info (including message traffic) for the express purpose in the license. In the case of the CIA, that means info that is read from public data must be either immediately discarded, for the purpose of separating data relevant to an operation from that which is not; or, if stored, it must be directly relevant to an operation. That further requires the CIA define the scopes of its operations sufficient for Congressional oversight to second-guess decisions of what data to retain.

    Of course, cynics (like me ;) will say that once the CIA is operating at all in this medium (it surely already is), the finer points of policy and law will be given mere lip service, and abuse will be the norm. Unfortunately, the CIA has Americans over a barrel: their legitimate service is essential, while their unaccountability is lethal, in the survival of our society. This issue doesn't change that dilemma, though it forces the issue - and ought to pressure exactly these kind of delineations. Since the current purges at the CIA seem likely to merely institutionalize the Iran/Contra CIA abuses to the exclusion of any legitimate control, we who understand these issues can at least understand their workable boundaries, and enforce them ourselves, for ourselves. Like comprehensive crypto for messaging, which defines an expectation of privacy, whether defensible from CIA codebreaking filters or not. It's all we've got, and will be harder for the CIA, or any other prying eyes, to casually violate, either on the Net or in a court.

    --

    --
    make install -not war

  56. shhh buzzards by jeoin · · Score: 1

    I mean really someone can look at my computer and know what I am doing on it? That isn't fair, its like being in public and having other people see you. Just wrong.
    I just wonder which of us is the sicko. The one snooping? or the one browsing/chatting?

    --
    Jeoin
  57. Vulnerability in usage, not in spec by pkhuong · · Score: 1

    If you read the RFC for IRC, you'll see that they have planned for a secure model. The only problem is that no one uses the mode.

    --
    Try Corewar @ www.koth.org - rec.games.corewar
  58. PATRIOT II? by Anonymous Coward · · Score: 0

    How can it be recent law if the PATRIOT Act II has never been passed by Congress and signed into law by the Pres. IMHO, only conspiracy theorists believe it exists.

    1. Re:PATRIOT II? by Anonymous Coward · · Score: 0

      How can it be recent law if the PATRIOT Act II has never been passed by Congress and signed into law by the Pres.

      I'm not allowed to answer that.

      only conspiracy theorists believe it exists.

      But its existence is independent of belief.

  59. What they need.... by Anonymous Coward · · Score: 0

    ...is a Beowulf cluster of Natalie Portmans to run that shit.

    Throw-back.

  60. * User sets channel #terrorist +i by wo1verin3 · · Score: 1

    Welp, another CIA project destroyed by IRC channel modes. Although I suppose if they make these bots in to porn offer bots it may work... even terrorists would fall prey to PARIS_HILTON_XDCC1 ....

  61. Welcome CIA Overlords by ztirffritz · · Score: 3, Funny

    I personally welcome our CIA...you know, this is getting to be really old and boring. I say "F@CK the CIA Overlords" We're all moving to Canada!

    --
    Why doesn't anything interesting happen when I have mod points?
    1. Re:Welcome CIA Overlords by CanadianCrackPot · · Score: 1

      Why would you move to where they are allowed to look? The CIA can't operate on US soil. But please move to Canada our Intellegence agency is much better. We don't get caught (as often as the CIA).

      --
      Good programmers drink beer to relieve job stress.
      Great programmers drink hard liquor and work best hungover.
  62. This is the CIA? by sokoban · · Score: 2, Insightful

    Okay, so one of the largest and most complex intelligence organizations in the world is dropping $150k on getting a college to make a really complex chat logging system. How lame is that. Shouldn't the CIA have their own people that specialize in this kind of thing? Also, why are they getting the NSF to help fund it? $150000 is peanuts to these folks. They have a $40 billion or so budget. If something is this critical to "national security" doesn't it deserve more than .0004% of your resources?

    --
    09 F9 11 02 9D 74 E3 5B D8 41 56 C5 63 56 88 C0 is the magic number.
  63. Untrust worthy by Turn-X+Alphonse · · Score: 1

    logs can be edited way too easy. They shouldn't be allowed as evidence, hence can't be used to get warrants or anything.

    GG CIA, you lose.

    --
    I like muppets.
    1. Re:Untrust worthy by Anonymous Coward · · Score: 0

      except the CIA has no arrest authority, doesn't chase people into court, and doesn't care about US citizens in the US anyway, so the whole chain of evidence issue is moot.

  64. Our tax dollars at work... by Verteiron · · Score: 1

    So that's massive amounts of money, countless hours of research... for what. An eggdrop bot?

    --
    End of lesson. You may press the button.
  65. Let them monitor.... by Tehrasha · · Score: 2, Insightful

    It wont take more than a couple days of monitoring all of that teen angst and drama for the computer to commit suicide.

  66. "They hate us for our freedom!" by Cryofan · · Score: 2, Insightful

    Actually, this would not be that bad an idea, if only, IF ONLY, our government actually represented th average citizen, and NOT the corporations and the investors.

    Until we can control our govts, something like this is just a bad thing.

    --
    eat shiat and bark at the moon
    1. Re:"They hate us for our freedom!" by haxley · · Score: 1

      Actually it's just the corporations. Most people, if they attain any degree of financial sucess, invest in something. It's capitalism and it works. Governments, by definition, do the controlling. That is why that government is best which governs least. The corporations can be controlled much more easily. They will do whatever a sufficiently large group of investors or customers tell them to do.

    2. Re:"They hate us for our freedom!" by Cryofan · · Score: 1

      YOu wrote:

      Actually it's just the corporations. Most people, if they attain any degree of financial sucess, invest in something. It's capitalism and it works.


      You mean regular working people can buy stocks and bonds?! YOu mean that not all investors have millions? I had no idea! /sarcasm

      Look, EVERYONE KNOWS that already. I myself have tens of thousands in stocks. Why not also point out that gravity causes objects to fall towards the earth and that the sky is blue? There are lots of obvious statements for you to make here on Slashdot. I think we have found something for you to do!

      You make want to consider the veracity of this statement: 1 is NOT the same as 1000000. Also, if I apply one newton of force to an object that is not the same as applied one million newtons.


      Governments, by definition, do the controlling. That is why that government is best which governs least. The corporations can be controlled much more easily. They will do whatever a sufficiently large group of investors or customers tell them to do.


      Governments are simply machines, and Libertarians are simply Luddites. Well, they are defacto luddites. But more to the point they are automatons of the propaganda disseminated by the wealthy INVESTORS AND CORPORATIONS. If you think corporations are the sole genesis of American corporatism, then you need to read the link on my home page that mentions "tentacles of rage". Several zillionaire clans were actually the genesis of the rightwing media propaganda machine that is the foundation of American corporatism.

      --
      eat shiat and bark at the moon
  67. first tests failed by Anonymous Coward · · Score: 0

    8 years old thinking he is in a world of warcraft irc chat room (8yr)

    Cia agents program (cia).

    cia: heard you have accumulated a lot of weaponery.
    8yr: Yes I have enough to blow the empire bastards away.
    cia: when are you planning to attack.
    8yr: when they least expected, although I was looking for a common day.
    cia: 9/11 7/5 12/25?
    8yr: I was thinking summer when I have more spare time.
    cia: ????
    8yr: I have other duties appart blowing people in pieces.
    cia: really?
    8yr: I train my friends in this holy war thingy.
    cia: Oh well time to go....

    cia robot release a busting order against the poor child, thousands of dollars wasted and terrorist still at large because they use person to person meetings and snail mail, everyone seems to forget they didnt have the chance to be raisen with computers or video games.

  68. It's not too hard to do this by Mr.+Cancelled · · Score: 1

    On a whim, I cobbled together a very basic chatroom scanner using Access (for storage), mIRC, and some VB a few years ago.

    Basic scanning, and parsing is very easy to do, and then you just need some "ai" in the background to scan the data and report/perform an action when patterns are matched.

    I'm sure the feds are looking at a much more serious creation than I was, but I'm sure the concept's similar. The scary thing, to me at least, is that they're probably going at it from a server level, so they could monitor everything, instead of just public channels.

  69. bah by Anonymous Coward · · Score: 0

    What amazes me is that you people think that since this was announced publically that it hasn't already been going on since the creation of IRC.

    Wake up people! Big brother has been watching longer than most of you have been alive.

  70. You know you've been gaming too much... by 88NoSoup4U88 · · Score: 1
    When you read :

    The abstract of the proposal is available on the Need For Speed website"

    WTF?

    ;)

  71. Researchers at Rensselaer Polytechnic Institute received $157,673 from the CIA and NSF ...to develop a cyborg powerful enough to topple MJ12 and maintain UNATCO's cover.

  72. Big brother democracy by lcrypt · · Score: 0

    This called "Democracy" looks like a facist government. Soon they will be arresting the opposition in a distant island, and invading countries without convincing reason... This reminds me...EOF

  73. Why the CIA? by Anonymous Coward · · Score: 0

    I thought the CIA was supposed to be restricted to overseas matters and not domestic. Pehaps they want to monitor French chat rooms.

  74. Para-Protect by salvorHardin · · Score: 1

    Para-Protect used to monitor IRC channels as part of a service which would tell you which miscreants were discussing the state of your org's network security.

    Mind you, if you were worth your Nerdgear 'got root' t-shirt, you'd not be discussing such things over plaintext IRC, and you'd stick to discussing such things only on invite-only SSH'd up talkers.

  75. Hmmm by Pugflop · · Score: 1

    1. Setup foreign IRC server with specific terms of service

    2. Catch CIA spying

    3. ???

    4. Profit!

  76. Bash.org by salvorHardin · · Score: 1

    So... the CIA will be purchasing bash.org?

  77. So many things wrong with this post! by mrchaotica · · Score: 2, Insightful
    ...and so many responses:
    • Somebody's going to get their grant money, so it might as well be me (metaphorically -- I'm not a researcher).
    • Science isn't about deciding right or wrong, it's about true or false. Right and wrong is what politics and religion is for (err, theoretically at least).
    • As an American, I have no problem with the CIA spying on foreigners -- that's what it's for!
    • IRC is public anyway. Snooping email is one thing, but logging public chat isn't a problem.
    • Yeah, and using mob tactics ("ostracizing them") is really going to convince people you're against censorship and opression!
    --

    "[Regarding the 'cloud,'] ownership was what made America different than Russia." -- Woz

  78. Funny, ha ha by acidrain69 · · Score: 1

    Lot of people joking about bots on here. Honestly, why run a bot in every room when you can just partner with the university, institution, or company that hosts the server.

    Shady CIA type: We have some evidence of terrorists using your services for communications. Mind if we tap in? We'll pull your funding if you do not comply or let the public know
    University: sure. No prob.

    And yet this does NOTHING for security. No one in their right mind would use IRC or a publicly accessible server for secure communications.

    Just as long as they don't shut down my anime channels. I'd have to go get a membership with netflix and warm up the DVD burner.

    --
    -- Having a Creationist Museum is like having an Atheist place of worship
  79. chat rooms? by Anonymous Coward · · Score: 0

    Last time I looked there were only "chat rooms" on AOL. IRC had channels.

  80. you forgot about encryption by Anonymous Coward · · Score: 1, Informative

    Most ircds I've used have built-in SSL support, and all you have to do is make encrypted connections a requirement for getting onto the network, and you'll be fine (until your encryption gets broken). I might add that quite a few ircds will also mask your IP address, so it'd take a court order (or a secret national security letter) to get ahold of that.

  81. Damn! by kgbspy · · Score: 1

    How soon until all IM conversations are monitored by Big Brother?

    You mean they're not already?! Then what the hell did I download gaim-encryption for...?

    --
    ~
    ~
    ~
    -- INSERT --
  82. CIA's area of operations? by trawg · · Score: 1

    As an Australian, my working knowledge of the CIA must come from my own research (ie, reading Tom Clancy novels). These seem to indicate that the CIA is not legally allowed to operate within the borders of the US ('operate' I guess means carry out surveillance, assassinate, etc).

    Is that true?

  83. Nazis would have loved this by Anonymous Coward · · Score: 0

    The Nazis would have loved this technology. Back then the scapegoats were the Jews - I wonder who it will be in this decade.

    1. Re:Nazis would have loved this by Anonymous Coward · · Score: 0

      That would be the Muslims

  84. Sniffing by Antony-Kyre · · Score: 1

    That would be a huge invasion of privacy.

    1. Re:Sniffing by sp0rk173 · · Score: 1

      No, you give up your privacy by entering an IRC channel. It's like talking loudly about assasinating the president in a coffee shop, only to be arrested by That Guy in the corner of the room who happens to be a FBI agent listening in for "suspicious activity." Is that an invasion of your privacy?

      Now, if the CIA decided tap your ethernet connection in your home without reason, that would be an invasion of privacy.

      Of course, that's not to say this whole thing isn't majorly fucked up. Personally I think they just want to be entertained by all the morons on IRC. It gets boring securing the country, they've gotta do something to pass the time. Why not do something that they can mask as being part of their job?!

    2. Re:Sniffing by Antony-Kyre · · Score: 1

      I think the method of tapping is one of the main questions.

    3. Re:Sniffing by sp0rk173 · · Score: 1

      Again, if a guy started to run tape in a crowded bar room, and happened to pick up you saying you wanted to assasinate the president, would that be an invasion of your privacy? We're talking about logging a public medium that ANYONE can sit in on, ANYONE can log, etc. They're not coming into your house and tapping your phone or ethernet connection. They're not requesting a log from your ISP. This may be fucked up, which I feel it is, but it is FAR from an invasion of your privacy.

    4. Re:Sniffing by Antony-Kyre · · Score: 1

      If they join the IRC network like anyone else, and join the channel like anyone else, no problem there.

  85. Eliza's lame by uberdave · · Score: 1

    You should check out the "In Soviet Russia" or "Imagine a beowolf cluster" bots that inhabit Slashdot.

  86. Not so bad by onida · · Score: 0

    Now I'm a heavy advocate of civil rights and all, but I don't see how this is really such a terrible, dangerous, run-and-hide-big-brother-is-coming thing. If they're evasedropping on public channels then what's the big deal? If you voice your intentions in a public space everybody has the right to listen. Most people really won't have anything that interesting to listen to anyway. And I'm sure they're radars will be scanning for those l33t d00ds and crazy terrorists anyway. Good riddance to them.

  87. Good luck by Gadzinka · · Score: 2, Insightful

    Been tired of the kids monkeying around on IRC years ago and switched to Jabber. Good luck in monitoring my conversations on private servers with SSL connections and end-to-end PGP encryption. Distributed networks of servers like email or jabber (and unlike msn messenger, yahoo, aim, icq etc) seem to have other advantages, besides the "load balancing".

    Or good luck to listening to my Skype conversations. Although, knowing that Skype is closed source and proprietary, I have absolutely no guarantee, that their claim of AES encryption gives me any protection/privacy. Just recently there was thread on /. about "encrypted" usb-flash keys that kept password in plaintext on the key.

    Or couple of years ago, I've had to convince my boss that "security" of MDaemon on Windows does not exist. I sat to its password files, noticed something peculiar about them and broke the "secret algorithm" in about 4hrs. Passwords were not even xored, they were summed[1] with "secret" and encoded with base64. The secret was "The setup process could not create the necessary system accout MDaemon".

    Robert

    [1] you know: (passwd[n] + secret[n]) & 0xff

    --
    Bastard Operator From 193.219.28.162
  88. Yahoo! booters and p0rn bots by Anonymous Coward · · Score: 0

    My biggest beef is not being spied, but the darn as??oles on yahoo that boot. I'd rather the CIA spent it's time cutting off their fingers.

    That, and the hundreds of p0rn bots that keep messaging you with http links..

    Bring back MSN with moderators!

  89. "hidden communities" by TheLibero · · Score: 1
    ... The thing is that those "hidden" people stopped using IRC for their "vicious" conversations long time ago. And there have been techniques developed to maintain some kind of anonymity.

    --
    "Evil thrives when good men do nothing"
    1. Re:"hidden communities" by Anonymous Coward · · Score: 0

      But to get the evil-doers we must remove any possibility of personal freedoms and liberty as that is the only route to safety. Once instilled into power then the regime can safely control every aspect of their population while continuing to tax the shit out of the poor.

      Benjamin Franklin was in idiot and didn't know what he was talking about when he said:
      "Those who sacrafice liberty for safety deserve neither liberty nor safety." I mean he only founded a nation and invented several technologies.

  90. Good thing by djlowe · · Score: 1

    Good thing I only talk to myself, and post to Slashdot, which is basically the same thing.

  91. Similar proposal met with opposition by IRCops by Chatmag · · Score: 2, Interesting

    A related proposal, involving "uniformed" police to monitor chat rooms, was announced June 9th 2004 Cyber Cops to Patrol Internet Chat Rooms We polled over 100 IRCops and Server Administrators and posted the results at: Chat Network Operators and Users Wary of Uniformed Police Presence

    --
    Pete Carr Owner Chatmag.com
  92. It sound like a tyrant by Anonymous Coward · · Score: 0

    ZIEG HEIL !!!!!

  93. give me your money, slave-Smoke Alarm. by Anonymous Coward · · Score: 0

    "The more I read /. The more I hope that the tin foil hat brigade is right in their fears. That way it wont be long until they are rounded up then I won't have to hear them yell "Big Brother" this and "1984" that."

    Read about "The Boy who cried Wolf" by Asop.

    That's why the "Tin Hat" birgade is routinely ignored.

    Of course a stopped clock is right at least twice, so they might chance upon something. But will anyone listen?

  94. End-to-End Encryption by 21mhz · · Score: 1

    Time to switch to XMPP (AKA Jabber) and its
    End-to-end encryption extension.

    --
    My exception safety is -fno-exceptions.
    1. Re:End-to-End Encryption by cpghost · · Score: 1

      Okay, this would force "them" to act openly (no more hidden/passive eavesdropping), but that would not really help. All "they" need to do, is to impersonate some "harmless" individual, right? Or do you think that they'll use aliases like CIAbot?

      --
      cpghost at Cordula's Web.
    2. Re:End-to-End Encryption by 21mhz · · Score: 1

      XMPP permits signing, too. Having this, it's the same deal as it is in real life: you don't trust sensible information to strangers.

      --
      My exception safety is -fno-exceptions.
  95. Old stuff by j.leidner · · Score: 1
    This is old stuff that apparently should not be on ./:

    NSF Funds Anti-Terror Chat-Room Surveillance 2004-10-13 20:02 Rejected
    1. Re:Old stuff by Chatmag · · Score: 1

      I also sent this in when it was announced, and was rejected. I had earlier sent in a related story regarding a proposal to put "uniformed" police in chat rooms and IRC channels, and the reaction by IRCops and administrators, also rejected.

      Other stories I've submitted have been rejected, but that does not stop me from submitting, although it is frustrating at times. I try and choose the chat related stories that would of be of interest to the Internet community in general, and not just technical stories geared toward active IRC operators.

      Don't get discouraged by rejections, it happens to all of us. I do want to thank you for taking the time to submit a story :)

      --
      Pete Carr Owner Chatmag.com
  96. How silly by Anonymous Coward · · Score: 0

    Its something your'd figure they would have been doin for years even though its a waste of time.

    Its better to pose a terrist and find the others and then see who there talking too.

  97. Have fun with it by Rii · · Score: 0

    Let me be the first to say BOMB BOMB BOMB BOMB BOMB free vi@g.r@ for cia ops!!!

  98. Anybody remember Echelon? by LS · · Score: 1

    Is it just me or does this article seem naive? It's hard to believe that they don't already have the capability to spy on IRC and IM. A thirteen year old could write something to do this.

    LS

    --
    There is a fine line between being a cultivated citizen and being someone else's crop. - A. J. Patrick Liszkie
    1. Re:Anybody remember Echelon? by cpghost · · Score: 1

      A thirteen year old could write something to do this.

      Well, yes, but government agencies are not working that way. They are supposed to budget those things, and how would they justify a few dollars for a working 2-liner, when they can throw big bucks at companies or other agencies to buy a buggy, overinflated "product"?

      --
      cpghost at Cordula's Web.
  99. Money being wasted? by Swift+Kick · · Score: 1
    I've browsed thru the comments here and I noticed that no one has yet apparently commented on the waste of money the particular proposal is.
    If you read it, you will notice that the NSF and the CIA have awarded these guys $150k to write something that is, in essence, a glorified eggdrop bot.

    Granted, their analysis techniques will probably be more than say, a perl script parsing the channel logs, but I mean, who is looking at these grants and deciding this is a valid spenditure of funds?


    I can think of at least a dozen people off the top of my head that could write something similar within a couple of days, without spending more than a few bucks in Starbucks coffee and Twix candy bars...

    --
    "We'll need 2000 crickets, 4 cans of Easy Cheese, and the fluid from 18 glowsticks for this plan to work...." - ph0n1c
  100. some tips by Anonymous Coward · · Score: 0

    1. use a bnc

    2. chan mode +s+p+k+n+t or +i

    3. use encryption in your chats - give your group the key on aim and use it on irc

  101. Their L33T script: by Sarin · · Score: 1

    wget http://www.bash.org/?latest

    then they cat it and grep for words like terrorist, osama and whatever buzzword/bushword is in the media that week.

  102. Ahh.. the FBI by DaNasty · · Score: 3, Funny
    Reminds me of that bash.org quote...
    <Stormrider> I should bomb something
    <Stormrider> ...and it's off the cuff remarks like that that are the reason I don't log chats
    <Stormrider> Just in case the FBI ever needs anything on me
    <Elzie_Ann> I'm sure they can just get it from someone who DOES log chats.
    *** FBI has joined #gamecubecafe
    <FBI> We saw it anyway.
    *** FBI has quit IRC (Quit: )
    --
    Wanna get nasty? - DaNasty
  103. Good time to mention SIMP by anethema · · Score: 1

    I dont work or am at all associated wiht them, but this is a perfect time to mention Secway's Simp.

    www.secway.fr

    There is simp for yahoo messenger, msn messenger, icq, and AIM. There is also a symmetric key proxy only version for linux/unix/bsd.

    Simp provides very strong encryption for your chatting. It uses a 2k RSA public/private key arrangement to authenticate, and over the RSA link it exchanges a AES-128 symmetric key.

    There is no concievable way to break this, so you can be pretty sure your conversation is -totally- private if you do your key exchange properly (in person or some other way so you know you're talking to the right person)

    Simp is totally free (while there is a pro version you pay for wiht more features, simp 'lite' is nag free)

    For voice skype is also a good option and uses nearly the same key arrangments as simp. You can IM with skype as well as send files(file sending is unencrypted in simp lite, need simp pro for encrypted file xfer) and chat, and it is all encrypted with AES-256. It uses a RSA key when you add someone, but not sure how you can exchange keys in person if privacy is a must.

    Sorry for the rambling tone of the post :D

    --


    It's easier to fight for one's principles than to live up to them.
  104. no by twitter · · Score: 1
    Can we just say that this will always be a complaint of X amount of people and move on? Does it really need to be said for every topic of government activity?

    No and no. We should not roll over when our government abuses us against the principles it stands for. Domestic spying is not a routine government activity, such as schools roads or incarceration of felons, and should be censored.

    The more I read /. The more I hope that the tin foil hat brigade is right in their fears. That way it wont be long until they are rounded up then I won't have to hear them yell "Big Brother" this and "1984" that.

    How do you know that I won't be the one sending you to the camp? That way, I won't have to listen to trolls like you telling me to shut up and take it.

    If you don't believe in the things you read here, why don't you go start your own conversation site and leave this one alone?

    --

    Friends don't help friends install M$ junk.

  105. Absurd by zantolak · · Score: 1

    I'm a netadmin for a small IRC network, and I really don't think they would be able to pull this off. All the traffic between our servers is encrypted, and clients have the option of connecting with SSL. And we, the opers, can see whenever anyone connects or disconnects from the network, and we can also ban them from connecting. Nothing that isn't part of our network or its services package could join a channel without being visible. Whatever they tried to do, it would be easily detected and blocked if necessary.

    Of course, if they try to do this on the ISP level, that's a different story. But again, all inter-server traffic is encrypted.

  106. heh by toiletmonster · · Score: 1

    #terrorism. thats hilarious.

  107. Protect yourself by donkstuff · · Score: 2, Interesting

    All anyone needs to do is protect themselves. You can connect to most irc networks via ssl, and if you PM between people on ssl connections, you're safe. Also if you talk in a channel set +z, that would be for SSL only users. Also, setting channel modes like +s (secret/unlisted in the /list command), +i (invite only), or +k (key protected, need key to join), would protect any outside users from seeing/entering your channel.

    If a user would do the above, then the only way their IRC usage could be monitered would be if the server admins allowed them access server side, which most networks sould not allow.

    Note that the +z channel mode is used in the ircd used by the protium irc network which is based on ircu with the nefarious ircu patch.

    -- d0nk` (irc.protium.org / #protium )

    --
    :(){ :|:& };:
    Paluminum.net
  108. spooks 2 steps ahead by Anonymous Coward · · Score: 0

    1) If they don't already have a hardware-based cracker, they have the funds to build one. [just one?]

    2) If they see your conversation is encrypted, will they less interested or more interested?

  109. How soon for IM? by Anonymous Coward · · Score: 0

    I am sure that is HISTORY. After all, all of the major IM chat programs log what you say (not just on your computer).

    I don't run a Jabber server, so I don't know how that is handled, but I bet there is an option.

  110. Some questions? by laughingcoyote · · Score: 1

    To start with, how would they sort through the massive amounts of IRC traffic, the vast majority of which is some sort of banal, everyday conversation? Any type of automated system would be problematic at best, and if they're doing it by hand, I think our job shortage is solved, they'd have to hire millions of people.

    This also, of course, raises privacy concerns, in that many Internet protocols very much blur the line between public and private communication. A search warrant is needed to listen in on a conversation you hold in your home, but if a police officer overhears you planning a crime in a restaurant no such requirement is there. Where is the line drawn in this case? Is a public IRC channel public or private communication? What about a restricted access channel? A private message on a public channel to one person? Current laws are really not set up to address these questions, and we need to think about them.

    --
    To fight the war on terror, stop being afraid.
  111. Grab your PGP by justinpfister · · Score: 1

    This is why we should all grab a copy of PGP and start figuring out how to use it in an efficient way.

    Here's my key.
    http://www.justinpfister.com/blogwebsite/justinweb /publickey.cfm

    --
    Is this serious?
  112. Bloody US Government by iduno · · Score: 1
    Why do the US government insist on monitoring everything. Its none of their business and the only result they get is to petrify the American people so that they keep guns in their houses to shoot all the baddies (terrorists if you prefer).

    The only reason that I can think of is that they want to do this to use petrifying Americans so they do stupid stuff like attack Iraq when it was more than probably their fault that the planes crashed to begin with. They just needed some way of taking over Iraq to gain control of oil without it looking like they were doing that. On the issue of oil, if you want to have a look at it, Europe is strongly trying to get the oil prices to also be in the Euro which would mean that the US dollar would become much less traded. If the US have control of major oil countries they can also control the governments and the bodies that decides on what currency oil is sold in.

    All in all its just another way to petrify Americans to give the government another way to control them.

  113. How very naive by GojiraDeMonstah · · Score: 1

    With the massive recent investment in "anti-terror" technology (Total Information Awareness, for one), combined with ongoing projects such Echelon, you would have to be pretty foolish to think that the US government wasn't recording just about every phone call, satellite transmission, email, fax, etc.

    You'd have to be foolish too to think that whatever ordinary encryption methods you use would even slow them down, let alone stop them.

    The hard part isn't intercepting and decrypting any signal they want. The hard part is separating the wheat from the chaff. There isn't (I assume) any good software yet, or enough analysts, to process all the chatter. But if "they" want to zero in on you specifically, you should either 1) bet your sweet ass that they know every packet that goes back and forth, or 2) kiss it goodbye.

    --
    "Stop throwing the Constitution in my face, it's just a goddamned piece of paper!" - George W. Bush Nov. 2005
  114. Profit by Hellraisr · · Score: 1

    1. Get grant money from government
    2. Install multiple eggdrop bots with logging enabled on government servers
    3. ????
    4. Proft!

    1. Re:Profit by DarkKnightRadick · · Score: 1

      I use an eggdrop on my channel (when I can remember to start him up after a reboot from something stupid I did), logging enabled. Does this mean I can participate?

      --
      "There is a way that seems right to a man, but its end is the way of death." Proverbs 16:25 (NKJV)
  115. Well, not per se by sideshow · · Score: 1

    Serial killers don't get caught because they (usually) kill random people they don't have a connection too.

    Something like 90% of murder investagations involve people that are connected somehow. The cops find all the people who are connected to the victim and start from there.

    If you drove to a new city and randomly killed someone and no one witnessed it, you probably never be caught. If you ice your girlfriend then the cops are going to be looking real hard into you in the first 10 seconds of their investigation because you two have a connection.

    --

    Hollow words will burn and hollow men will burn.

    1. Re:Well, not per se by Anonymous Coward · · Score: 0

      Excellent idea. P2P assassination trading- "You kill my girlfriend, I'll do your boss when I'm next up in Philly".

  116. Bzzt! Thanks for playing. by TiggertheMad · · Score: 1

    Carnivore is the FBI's toy. Carnivore is great when you can get a court order to let you put it on an ISP's trunks. It is pretty useless when the ISP is say, in North Korea.

    FBI = Cops. CIA = Spies.

    --

    HA! I just wasted some of your bandwidth with a frivolous sig!
  117. Encryption isn't Immunity by TiggertheMad · · Score: 1, Insightful

    You assume that encryption will protect you. Go get any cryptography handbook, and the first thing it will say is that it is impossible to create an algorithim that is capable of producing unbreakable code. The goal of encryption is to make it so someone cannot break it in a certain time period.

    If you are relying on SSL and consider yourself immune to spying, you are in for a suprise. If they want to spy on you badly enough, they can. It just takes more work with encryption.

    --

    HA! I just wasted some of your bandwidth with a frivolous sig!
    1. Re:Encryption isn't Immunity by Anonymous Coward · · Score: 2, Insightful

      You assume that encryption will protect you. ... it is impossible to create an algorithim that is capable of producing unbreakable code. The goal of encryption is to make it so someone cannot break it in a certain time period.


      If "certain time period" > my_life_span then Encryption_will_protect_me = True.

    2. Re:Encryption isn't Immunity by Wavicle · · Score: 1

      There is an unbreakable cypher, but the amount of data it is good for is limited. Important information, say between an embassy in a semi-hostile country and Washington, would likely be unbreakably encrypted.

      But in general you are right. The goal of a general purpose cypher is to make cracking sufficiently difficult that it cannot be broken in a reasonable amount of time.

      --
      Education is a better safeguard of liberty than a standing army.
      Edward Everett (1794 - 1865)
    3. Re:Encryption isn't Immunity by nuklearfusion · · Score: 2, Insightful
      If "certain time period" > my_life_span then Encryption_will_protect_me = True.


      more important:

      if it takes too long for the feds to break the scheme, then the terrorist attack (what they are claiming this technology is for) will still go through, and the public will only become more frustrated when they find out that the FBI of CIA or whatever ACTUALLY had records of people planning the attack (even more trouble for the feds).

      --

      There's no such thing as a stupid question, but there sure are a lot of inquisitive idiots.

    4. Re:Encryption isn't Immunity by lachlan76 · · Score: 1

      Three words: One. Time. Pad.

      There is NO way that that can be broken if the key is not compromised. It is completely impossible.

    5. Re:Encryption isn't Immunity by Lord+Kano · · Score: 2, Insightful

      There is an unbreakable cypher,

      No, there isn't.

      Any cyphertext can be decoded given enough time. This is why keysize is important. For each bit you add to the key, you double the time needed to brute force it.

      --
      "Hi. This is my friend, Jack Shit, and you don't know him." - Lord Kano
    6. Re:Encryption isn't Immunity by Lord+Kano · · Score: 0, Redundant

      If the algorithm is know (and whatever it is, eventually it WILL be known) you can brute force the key.

      LK

      --
      "Hi. This is my friend, Jack Shit, and you don't know him." - Lord Kano
    7. Re:Encryption isn't Immunity by zixyer · · Score: 2

      You can't brute force the key for a one time pad, dumbass. The set of all possible keys cooresponds to all possible messages (of a certain length), so it's impossible to discover which key is the right one. One time pads are unbreakable. It's just that they require a secure channel beforehand.

    8. Re:Encryption isn't Immunity by Anonymous Coward · · Score: 0

      Any cyphertext can be decoded given enough time.

      Please. Do a favor for yourself and public and never, ever post about cryptography again.

      Or at least learn the basics before you do. You can start by googling for "one time pad".

    9. Re:Encryption isn't Immunity by Anonymous Coward · · Score: 0

      Go get any cryptography handbook, and the first thing it will say is that it is impossible to create an algorithim that is capable of producing unbreakable code.

      Counter-example from Handbook of Applied Cryptography (ISBN 0-8493-8523-7):

      "As we draw near to closing out the twentieth century, we see quite clearly that the information-processing and telecommunications revolutions now underway will continue vigorously into the twenty-first."

      Or maybe you thought the start of the actual chapters instead of preface:

      "Cryptography has long an fascinating history. The most complete non-technical account of the subject is Kahn's The Codebreakers. This book traces cryptography from its initial and limited use by the Egyptians some 4000 years ago, to the twentieth century where it played a crucial role in the outcome of both world wars."

      So, no, not every cryptography handbook start by saying something about unbreakable algorithms. And that's a good thing, too, since then they would be incorrect (one time pads are theoretically unbreakable).

    10. Re:Encryption isn't Immunity by Wavicle · · Score: 1

      Okay, given enough time you can eventually decode an original message encrypted with a one time pad. But you will be unable to tell that it is the original message since you will undoubtedly have decoded several other messages of the same length.

      When discussing "breaking" a cypher, we usually refer to being able to read all messages, past and present, as easily as the person for whom the messages are intended. This is not possible with a one time pad unless your pads were generated with a pseudo-random number generator.

      There is an interesting historical case where US Intelligence was able to crack some messages sent by the soviet embassy to moscow during WWII even though the communications were supposedly encrypted using one time pads. This was accomplished because the embassy was mistakenly using the same pad more than once. By definition that's a more-than-one time pad, but interesting none the less.

      --
      Education is a better safeguard of liberty than a standing army.
      Edward Everett (1794 - 1865)
    11. Re:Encryption isn't Immunity by randyflood · · Score: 1


      However, if you are on IRC, and you are using encryption to disguise your messages, and like everyone else is 14 year-olds talking about how they want each other and how much angst they have, who do you think the CIA is going to try to track down in real life for further investigation?

      Sometimes, when someone does something suspicous, you don't have to know *exactly* what they are up to in order to be interested in them. It is enough to know that they are up to something. Unfortunately, few people value their privacy these days enough to bother using encryption for day to day discussions over mediums such as IRC. So, I'm guessing, that if someone started doing that, they would probably tend to attract attention. Probably it would be better for them to try to use some kind of stegonography or something disguised as agnst. :) Hence, I'm guessing that there is probably a bit of work somewhere on tools to detect steganography as well. Does anyone know if people are using steganography over IRC?

      --
      Randy.Flood@RHCE2B.COM
  118. The choice... by relaxrelax · · Score: 1


    The choice...

    -Get something secure

    Or...

    -Get some spything going, knowing script kiddies will hack it and spy on people for fun and profit. Politically-connected spammers might even buy 50 million valid Email addresses at once!

    I wish I was in Japan, where the right of encrypted communication is in the constitution or something...

    --
    Microsoft is pure dog-ma. FreeBSD is pure cat-ma.
  119. better solution by deathazre · · Score: 1

    /os akill add +0 *@*.cia.gov no.

    --
    Karma: Negative (Mostly affected by dorm trolling)
  120. So dramatic by PetoskeyGuy · · Score: 1
    I did not ask for it, I don't like it and I don't want to pay for it. it's also well-known that your IP address is exposed to all those on the server.

    Quit being so dramatic. If everyone was consulted before spending something then nothing would ever get done. The CIA is part of the government, and they are just trying to do what they were created to do. The fraction of money being spent on this is probably less then a penny out of a hundred dollars of your tax money, probably much less. So maybe spending a thousandth of a single percent of their budget on an IRC bot is silly, but they have every right and even a responsibility to do so.
    What does the Central Intelligence Agency (CIA) do?

    The Central Intelligence Agency's primary mission is to collect, evaluate, and disseminate foreign intelligence to assist the President and senior US Government policymakers in making decisions relating to the national security. The Central Intelligence Agency does not make policy; it is an independent source of foreign intelligence information for those who do. The Central Intelligence Agency may also engage in covert action at the President's direction in accordance with applicable law.

    IRC is a public discussion forum. It's no more anonymous then any other internet

    This isn't like tapping your phone calls where you know who is on at least one end of the conversation. It's monitoring a public chat server, much like usenet but in real time. Just like monitoring foreign newpapers this is something the CIA should be doing. Think of it like monitoring letters to the editor.
    1. Re:So dramatic by Phantom+of+the+Opera · · Score: 1
      If everyone was consulted before spending something then nothing would ever get done.


      Now, I'm trying to think if I can find anything wrong with that.
  121. just to add to the point by tacokill · · Score: 1

    And not just because of Big Brother. Because we can't do these things effectively.

  122. this is a nonissue by TheCabal · · Score: 1

    I will wager that IRC chats will be considered to be public, the same as cops eavesdropping on a conversation in the park or going though someone's trash when it has been set on the curb for pickup. Neither actions require a warrant,and can be done at any time.

    If you don't want the government listenting in on your IRC chats, either get a private IRC server, or go crypto. It's already a wellknown fact that law enforcement, intelligence, vigilantes and other entities already snoop on IRC channels, so how is this a suprise to anyone?

  123. Congratulations, CIA by Anonymous Coward · · Score: 0

    You just spent over 100,000 US dollars to invent the automated chat client. I'm not sure why you didn't just snag eggdrop for nothing.

    Oh wait.

  124. That's right. Punish the researchers. by bs_02_06_02 · · Score: 1

    Don't bother to sniff out terrorists. Don't bother stopping criminals. Stop the researchers. Make them the targets! Yeah.! Because of those researchers, I'm losing my ... what am I losing? I forgot...

    --
    -- No sig for you!
  125. I think the real question is... by AbsurdProverb · · Score: 2, Interesting

    Now that they're actually talking about it, how long have they already been monitoring IRC? I have been told intelligence agencies are up on the curve by years. However given the recent intelligence blunders of the last three years or so, I can't help but question that assumption.

  126. The chair is against the wall by Anonymous Coward · · Score: 0

    John has a long mustache.

  127. Interesting research in automagically identifying by paronomasia5 · · Score: 1

    Of course you could...

    Use the turn-taking nature of human audio and text communication makes it very easily to statistically extract who each member in the chatroom is talking with

    Once you extract who knows whom you generate graphs of social interaction and come up with a pretty cool picture of the social network

    Unfortunately IRC geeks mostly irritate each other and rarely speak twice.. the research would only show You would see CmdTaco as an unconnected node at the edge of the network.

  128. An opportunity to have some fun by Anonymous Coward · · Score: 0

    How about writing some Eliza-like programs to put bullshit messages into various IRC channels and screw up the spookbots. Send them through various anonymizers.

  129. Paging Mr. Van Winkle by Anonymous Coward · · Score: 0

    This is _just now_ coming to light?
    At my job (in the private sector) we monitor hundreds of IRC channels TODAY to gather intel'. We do it using basically the same software we used close to TEN YEARS AGO at another company.

  130. zerg by Lord+Omlette · · Score: 1

    Will they create a bot to mod their own submissions up on bash?

    --
    [o]_O
  131. You know by ScrewMaster · · Score: 1

    Has it occurred to anyone in the various government bureaucracies that terrorists don't need chat rooms, Web servers, or any particularly advanced communications technology whatsoever to plan and execute an attack? A simple phone call or (*gasp*) snail mail is all you need to start something. Sounds more like the Feds are running out of obvious things to spy on so they're reaching down to the bottom of the barrel.

    --
    The higher the technology, the sharper that two-edged sword.
  132. Not new by Anonymous Coward · · Score: 0
    The FBI and CIA have been monitoring IRC for quite some time. Also, in the security industry, I know there are 'white hats' who social engineer their way into 'black hat' channels, and report what they see on the horizon.

    It seems the CIA is simply trying to automate what is currently being done by humans. Nothing incredibly new or exciting about that. It is what computers are for, after all.

    In a previous life (4 years ago) I have fielded calls from the FBI asking how to monitor IRC conversations. They were particularly interested in DCC.

  133. Not a big deal, really... by novalogic · · Score: 1

    I've said for years that this was going on. After all, most things you find on IRC are really MIT experimental Bots created to research human interaction and psychology. How else could you explain the utter lack of intelligence on most IRC servers?

    --
    --
    1. Re:Not a big deal, really... by humankind · · Score: 1

      I've said for years that this was going on. After all, most things you find on IRC are really MIT experimental Bots created to research human interaction and psychology. How else could you explain the utter lack of intelligence on most IRC servers?

      Do an IPwhois on the players and see what country they're from. Then it should be obvious.

  134. anyone want to guess how long until... by the-build-chicken · · Score: 1

    ...using encryption over the internet without a license becomes a felony?

    1. Re:anyone want to guess how long until... by /dev/trash · · Score: 1

      Not long, but if you have one and send all your data encrypted.....how will anyone know what is being sent?

    2. Re:anyone want to guess how long until... by iggymanz · · Score: 1

      the license will of course contain the key that you must use & specify the algorithm you will use for encryption

  135. Re:Interesting research in automagically identifyi by The+Jonas · · Score: 1

    IRC social network monitoring and visualization software here. Taken from the summary of this previous Slashdot story. Thought you might be interested.

  136. I don't get it. by geminidomino · · Score: 1

    They need a research grant hack up an eggdrop? ;)

    1. Re:I don't get it. by Anonymous Coward · · Score: 0

      They need a research grant to determine how many stalls they need in a newly-rennovated restroom in the Pentagon. Are you surprised?

  137. Oh really?? by Anonymous Coward · · Score: 0

    Geeezzz, now we have bots listening to bots! I just KNEW that there was no intelligent life out there! Now I even have proof of it...

    And what this with all these clueless people thinking encryption is going to save them? Encryption is good to keep your neighbor from reading your email, but "states" (as in national governments) have all the computing horse power they need to read what ever they want. Remember the Cray I super computer? NSA has serial number 2 siting in their museam. Think about what that means for a minute...

    Remember the thing they called DES? Yea, that one. The one that was designed around the US governments special cracking hardware, and also designed so that the software approach would take a LONG time to do the same operation. Not to mention that its a 56 bit key because 64 was harder to break with their machine in real-time. Using 56 bits made sure they had your ass before you were done typing.

    So you think your big "private key" is going to do you any good? They have *databases* of every key combination already generated just waiting for you to use your favorite key, so they can retrieve their matching key pair.

    And if that does not work they have people that can waltz right through your machine, install something, and be gone before you even know they were there. I admire those guys! lol If they want you bad enough your ass is theirs, and the fastest way to get their attention is likely by using the very encryption that you think they can't break. If you want to go on believing your safe, that's your choice, as I have no such illusions.

    I can still sleep nights because those guys are actually looking out for us not looking for ways to throw honest people in jail like many people think. As long as the courts are balancing things you have nothing to fear except your own paranoia.

  138. /DCC chat buddy by Spy+der+Mann · · Score: 1

    Wasn't too hard, was it?

  139. Actually, by fbhua · · Score: 1

    it's #funfactory. From the very little time I've spent in IRC, this is the place where terrorists are recruited and nurtured.

    Slightly OT, but anyone else cleaned out the entire #irckids back in the 90s with OOB packets, or was I the only sadist?

    FB.

  140. Ahhh, the good old days by digitalchinky · · Score: 1

    This is nothign new, anyone that thinks it is - is simply delusional. For the tin-foil hats, NO, it's NOT blanket coverage of the ENTIRE damn planet. Not possible. There are physical limitations on just how much can be collected.

    The dictionaries can take raw packets from wherever.

  141. The reason for this is quite obvious by humankind · · Score: 1

    Bots don't write tell-all books when they're fired for questioning the lunacy of their boss's agenda.

  142. Re:Jurisdiction? by peccary · · Score: 1

    That is *ALL* they're allowed to do. By law, the CIA is prohibited from spying on US citizens. Not that that stops them, of course, they weasel around that restriction.

  143. Government. Where do you want to go today? by rice_burners_suck · · Score: 1
    I have an idea. By law, every computer monitor should have a videocamera embedded in it that records everything about the user. His facial expressions, things he says, etc.

    And by law, every computer should have embedded technology that records all keys pressed on the keyboard, and even the time elapsed between key presses, and every mouse stroke, and every mouse button pressed, and everything displayed on the screen, and every instruction processed by the CPU, and every data on the hard drive, and all this information should be transferred over mandatory satellite connections directly to the government, which would have a data center that would make the all of the top 500 computers in the world look like one of the transistors in a chip you find in a two dollar calculator that doesn't work, and this data center would be a grid of supercomputers that each would be a single-system image grid of 100,000 computers, each of which would have 64 processors, 100 terabytes of RAM, and 100 terabytes of disk space, and this system would advanced search technology to monitor every single computation occuring in the world, and it would cross reference all network communications occuring in the world, and it would figure out, through extrapolation, interpolation, triangulation, some incredibly complicated computations, and psychohistory (an emerging field which uses mathematics, an incredibly detailed history of events in the world, and knowledge of the position and velocity of every single subatomic particle in the universe) and modeling technologies, what each individual is doing at any moment in time, and using that information, it would deploy automated robots which would arrest, convict, and put to death any and all violators of any law, no matter how big or how small. So, suppose you charge a friend one cent to cut his hair... The system would detect this six days in advance, and before the person even comes up with the idea of violating the law, a robot would show up at his house, break down the whole front wall, go inside, and blow his brains out.

    This would allow the government to better control its subjects. In other words, by leveraging innovative technologies, content providers streamline compelling enterprise solutions.

  144. My Concern by Anonymous Coward · · Score: 1, Insightful

    They are creating this to monitor for terrorist activity right?

    How long before it's used to monitor for dissenting comments towards the nationalist regime?

    "We are at war with terrorist states Winston and we have always been at war with terrorist states; is that correct Winston?"

  145. I thought Ms was doing it for them all these years by Anonymous Coward · · Score: 0

    Isn't that what MS had been getting paid
    for all these years ? :-)

  146. Damn you stole the words right out of my mouth.... by ZosX · · Score: 1

    Please mod up. IRC is plain text and therefore extremely loggable at nearly any point along a trunk.

  147. They just wasted $150,000 by Anonymous Coward · · Score: 0

    Anybody with half a brain isn't going to discuss illegal or terrorist activities on a client-server based architecture. When I have something private to say on IRC I always intitiate a peer-to-peer DCC chat session first. What the hell were they thinking?

  148. http://www.attrition.org/misc/keywords.html by Anonymous Coward · · Score: 0

    Waihopai, INFOSEC, Information Security, Information Warfare, IW, IS, Priavacy, Information Terrorism, Terrorism Defensive Information, Defense Information Warfare, Offensive Information, Offensive Information Warfare, National Information Infrastructure, InfoSec, Reno, Compsec, Computer Terrorism, Firewalls, Secure Internet Connections, ISS, Passwords, DefCon V, Hackers, Encryption, Espionage, USDOJ, NSA, CIA, S/Key, SSL, FBI, Secert Service, USSS, Defcon, Military, White House, Undercover, NCCS, Mayfly, PGP, PEM, RSA, Perl-RSA, MSNBC, bet, AOL, AOL TOS, CIS, CBOT, AIMSX, STARLAN, 3B2, BITNET, COSMOS, DATTA, E911, FCIC, HTCIA, IACIS, UT/RUS, JANET, JICC, ReMOB, LEETAC, UTU, VNET, BRLO, BZ, CANSLO, CBNRC, CIDA, JAVA, Active X, Compsec 97, LLC, DERA, Mavricks, Meta-hackers, ^?, Steve Case, Tools, Telex, Military Intelligence, Scully, Flame, Infowar, Bubba, Freeh, Archives, Sundevil, jack, Investigation, ISACA, NCSA, spook words, Verisign, Secure, ASIO, Lebed, ICE, NRO, Lexis-Nexis, NSCT, SCIF, FLiR, Lacrosse, Flashbangs, HRT, DIA, USCOI, CID, BOP, FINCEN, FLETC, NIJ, ACC, AFSPC, BMDO, NAVWAN, NRL, RL, NAVWCWPNS, NSWC, USAFA, AHPCRC, ARPA, LABLINK, USACIL, USCG, NRC, ~, CDC, DOE, FMS, HPCC, NTIS, SEL, USCODE, CISE, SIRC, CIM, ISN, DJC, SGC, UNCPCJ, CFC, DREO, CDA, DRA, SHAPE, SACLANT, BECCA, DCJFTF, HALO, HAHO, FKS, 868, GCHQ, DITSA, SORT, AMEMB, NSG, HIC, EDI, SAS, SBS, UDT, GOE, DOE, GEO, Masuda, Forte, AT, GIGN, Exon Shell, CQB, CONUS, CTU, RCMP, GRU, SASR, GSG-9, 22nd SAS, GEOS, EADA, BBE, STEP, Echelon, Dictionary, MD2, MD4, MDA, MYK, 747,777, 767, MI5, 737, MI6, 757, Kh-11, Shayet-13, SADMS, Spetznaz, Recce, 707, CIO, NOCS, Halcon, Duress, RAID, Psyops, grom, D-11, SERT, VIP, ARC, S.E.T. Team, MP5k, DREC, DEVGRP, DF, DSD, FDM, GRU, LRTS, SIGDEV, NACSI, PSAC, PTT, RFI, SIGDASYS, TDM. SUKLO, SUSLO, TELINT, TEXTA. ELF, LF, MF, VHF, UHF, SHF, SASP, WANK, Colonel, domestic disruption, smuggle, 15kg, nitrate, Pretoria, M-14, enigma, Bletchley Park, Clandestine, nkvd, argus, afsatcom, CQB, NVD, Counter Terrorism Security, Rapid Reaction, Corporate Security, Police, sniper, PPS, ASIS, ASLET, TSCM, Security Consulting, High Security, Security Evaluation, Electronic Surveillance, MI-17, Counterterrorism, spies, eavesdropping, debugging, interception, COCOT, rhost, rhosts, SETA, Amherst, Broadside, Capricorn, Gamma, Gorizont, Guppy, Ionosphere, Mole, Keyhole, Kilderkin, Artichoke, Badger, Cornflower, Daisy, Egret, Iris, Hollyhock, Jasmine, Juile, Vinnell, B.D.M.,Sphinx, Stephanie, Reflection, Spoke, Talent, Trump, FX, FXR, IMF, POCSAG, Covert Video, Intiso, r00t, lock picking, Beyond Hope, csystems, passwd, 2600 Magazine, Competitor, EO, Chan, Alouette,executive, Event Security, Mace, Cap-Stun, stakeout, ninja, ASIS, ISA, EOD, Oscor, Merlin, NTT, SL-1, Rolm, TIE, Tie-fighter, PBX, SLI, NTT, MSCJ, MIT, 69, RIT, Time, MSEE, Cable & Wireless, CSE, Embassy, ETA, Porno, Fax, finks, Fax encryption, white noise, pink noise, CRA, M.P.R.I., top secret, Mossberg, 50BMG, Macintosh Security, Macintosh Internet Security, Macintosh Firewalls, Unix Security, VIP Protection, SIG, sweep, Medco, TRD, TDR, sweeping, TELINT, Audiotel, Harvard, 1080H, SWS, Asset, Satellite imagery, force, Cypherpunks, Coderpunks, TRW, remailers, replay, redheads, RX-7, explicit, FLAME, Pornstars, AVN, Playboy, Anonymous, Sex, chaining, codes, Nuclear, 20, subversives, SLIP, toad, fish, data havens, unix, c, a, b, d, the, Elvis, quiche, DES, 1*, NATIA, NATOA, sneakers, counterintelligence, industrial espionage, PI, TSCI, industrial intelligence, H.N.P., Juiliett Class Submarine, Locks, loch, Ingram Mac-10, sigvoice, ssa, E.O.D., SEMTEX, penrep, racal, OTP, OSS, Blowpipe, CCS, GSA, Kilo Class, squib, primacord, RSP, Becker, Nerd, fangs, Austin, Comirex, GPMG, Speakeasy, humint, GEODSS, SORO, M5, ANC, zone, SBI, DSS, S.A.I.C., Minox, Keyhole, SAR, Rand Corporation, Wackenhutt, EO, Wackendude, mol, Hillal, GGL, CTU, botux, Virii, CCC, Blacklisted 411, Internet Underground, XS4ALL, Retinal Fetish, Fetish, Yobie, CTP, CATO, Phon-e, Chicago Posse, l0ck, spook keywords

    1. Re:http://www.attrition.org/misc/keywords.html by CharlesF · · Score: 1

      ... "Retinal Fetish"? WHOSE attention are you trying to attract with this post?

      --
      Do not read this sig!
  149. Strong crypto by ivlad · · Score: 0
    Well, if you concerned about the privacy of your chats, cosider using a system, which offers cryptographical protection of the data.

    SILC is a good example.

  150. Re:One already does that by symbolic · · Score: 1

    ...simply by opting for encryption, as the presumption of guilt becomes more heavily ingrained into the collective psyche of those who think they're making a positive contribution to the so-called "war on terrorism".

  151. Joseph Weizenbaum saw it coming in the 1970s by ahodgkinson · · Score: 1
    You may not remember but in the 1970s there was a professor at MIT named Joseph Weizenbaum who was worried about exactly these sorts of problems. In his case he largely refused to do research in the area of natural language comprehension, specifically speech recognition, because of his fears of government misuse. Further he recommended that scientists and researchers wake up and publicly discuss the negative implications of their work.

    I find it ironic that for monitoring the Internet there is no need for speech recognition, and given its popularity as a communication medium, it has actually made the government's eavesdropping tasks that much easier.

    Weizenbaum is also the author of the Eliza program, in which a person interacted via a keyboard with a simulation of a psychologist. It is considered the mother of all chatbots. Many people, including many experts, were taken in and thought it was a real person. This finding disturbed Weizenbaum.

    Weizenbaum's thoughts on these subjects can be found in his book Computer Power and Human Reason. We had it as a text book at MIT and I would argue that it should be required reading for all scientists and technologists.

    --
    ---- It won't be as bad as you fear or as good as you hope, but it will take twice as long as you plan.
  152. I already did this - lemee show you the code by cjmckenzie · · Score: 1

    http://wwwcsif.cs.ucdavis.edu/~mckenzie/clirc.html Been working on it for 6 months without multi hundred thousand dollar funding from the govt. It's not just an abstract - it works, and does more . . .

  153. That's NSA's job! by cpghost · · Score: 1

    Isn't electronic eavesdropping (ELint) NSA's job? This looks again like internal competition within the intelligence community!

    --
    cpghost at Cordula's Web.
    1. Re:That's NSA's job! by SuiteSisterMary · · Score: 1

      NSA isn't allowed to spy on US Citizens.

      --
      Vintage computer games and RPG books available. Email me if you're interested.
  154. MSN Messenger by Anonymous Coward · · Score: 0

    All MSN Messenger messages go via Microsoft's servers (not directly to the end user as with normal ICQ, for example)... Who's to say that they don't log/watch/grep/wahtever all of it already anyways?

  155. robots.txt for IRC by cpghost · · Score: 1

    If the CIA were to use a robot developed by a research institute, this will be a well-behaved bot. As soon as it detects a robots.txt nick in some IRC channel, it will quietly stop spying and go away.

    --
    cpghost at Cordula's Web.
  156. Funny, too by RedLaggedTeut · · Score: 1

    I don't doubt that this is insightful, but it is also funny, I mean are you really going to set up a private IRC server, and invite only crackers to it? You might just as well make everyone wear a tinfoil hat with a "cracker" icon on it, and honk a horn every time a policeman walks by.

    --
    I'm still trying to figure out what people mean by 'social skills' here.
  157. Wow... by palndron · · Score: 1

    Maybe though think that terrorists are using IRC as well as websites etc to coordinate stuff. The must be trying to explore every avenue eh! Now as long as the terrorists don't find out what the CIA is up to and change tactics! oh wait... nm.

    --
    a man, a plan, a canal, panama
    1. Re:Wow... by palndron · · Score: 1

      That's what I get for posting before I have my first cup o' coffee.

      Maybe they think that terrorists are using IRC as well as websites etc to coordinate stuff. They must be trying to explore every avenue? Now as long as the terrorists don't find out what the CIA is up to and change tactics! oh wait... nm.

      --
      a man, a plan, a canal, panama
  158. I've seen these systems by Anonymous Coward · · Score: 0

    I've seen a demonstration if this kind of software. They're far more advanced than some plain-text packet sniffer. The program logs on as a user, and then monitors not only what is being said, but to whom and by whom. It can identify which individuals are at the "hub" of which conversation, and the keywords that are associated with that conversation at the current time (so its topic). Incidentally, the systems were tested by having them log in to IRC channels as users. The chatters weren't notified since this might modify their behaviour.

  159. Okie dokie... by Crayon+Kid · · Score: 1

    We started talking about IRC sniffing and no more than a quarter of a page below we're already discussing how to become a successful serial killer. Perhaps these feds are right after all.

    --
    i ate crayons when i was a kid and now i have two braincells and the blue ones taste nicer
  160. linking up email messages by totierne · · Score: 1

    The feds can legally get the to, from and subject headers from email, more requires a wiretap legal procedure, but that is never rejected.

    Stenograph your porn video clips and put them on p2p, boost the feds per case database beyond a petabyte.

    Hide in plain site:

    We begin bombing in five minutes

    [I am secretly after more natural language research, purely so I can speak to women, maybe not today, maybe not tomorrow, but someday and for the rest of my life....

    I also have shares in database companies just in case all this stuff actually works, and I work in a database company on language [computer language admittedly] parsing tools.]

  161. 1 in 3 in Eastern Germany was a paid infomer by totierne · · Score: 1

    [Allegedly]

    Look where it got them.[well some money for a start]

    Seriously though all this is dual use stuff, where can we start to see visible signs of this stuff working?

    Database companies shares go up.

    Google indexes and cross references IRC and can search for patterns summarising a whole thread as pattern number 3 (reminds me of a joke about telling known jokes by number, but one has to tell it right) original patterns are brought to peoples attention as news, so they do not have to ever go to the chatrooms.

    New patterns are so few that slashdot posts them for freshmen to analyse them. Sounds like a game we all could play, where are the new modes of conversation comming from and identifying them they could be spread quicker... flash talk rather than flashmob.

    World Trade Center..
    Actually the Freedom Fighters used everyday code words for their targets.

    Actually is the problem with speach analysis not the sounds, but the context, if there was an up to date state of the IRC, analysing speech could get a whole lot better (maybe).

    Recognising way of speach 'defects' so the computer/mobile phone could tell you why your girlfriend/wife hung up again.

    Just searching, but must of AI is searching and the algoritms were worked out in the 60s, just technology (hardware) is catching up.

    Just me throwing out half connected prose, because by the time I have thought it through properly noone will be reading the thread. sigh.

    1. Re:1 in 3 in Eastern Germany was a paid infomer by BandwidthHog · · Score: 1

      by the time I have thought it through properly noone will be reading the thread.

      You'd be surprised.

      There are many of us who wait until a discussion has 'matured' for a few days before reading the thread. I suppose to prove my point I should have bookmarked this comment and posted this response two weeks from now, but hopefully you get the point.

      I sometimes post links to images in my comments, and will see hits trickle in for *weeks* after the fact.

      --

      Quantum materiae materietur marmota monax si marmota monax materiam possit materiari?
  162. Welcome to IRC ... by yuri+benjamin · · Score: 1

    ... where the men are real men, the women are real men, and the little girls are FBI agents.

    --
    You make the mistake of thinking you can educate the fundamental stupidity out of people. You can't.
  163. It *IS* the government's fault by npsimons · · Score: 2, Insightful

    The only reason the government gets technology like this developed is intelligent people will do anything for their degree or grant money.

    No, the only reason they get technology like this is because we allow them to ask for it. You think that if they offered enough money (say $157,673) that some company wouldn't jump to make this same product for them? Should we boycott IBM because they sell computers to the government which they then use to crack codes or monitor the Internet (Carnivore, etc)? Should we boycott Smith and Wesson because they make guns for agents to use? No, we should tell our government that they are not allowed to do these things. Making of tools should not be punished; commiting bad/wrong acts should be disallowed, especially in a government "by the people, of the people and for the people".
  164. Invisiblenet.net by Anonymous Coward · · Score: 0

    It's undergone some problems, but the IIP would make this project hard to keep going. Link for those interested. It's a neat idea that hasn't gotten much support.

  165. Why does this sound familiar? by smooth+wombat · · Score: 1
    Oh yeah, now I know. It sounds familiar because it's very similar to an article I submitted on October 14th but was rejected

    Must be a new record for an article being rejected and then being posted.

    --
    We will bankrupt ourselves in the vain search for absolute security. -- Dwight D. Eisenhower
  166. Fast Forward by Anonymous Coward · · Score: 0

    Uhm.... They can watch footage at like twice or thrice the speed (with fast forward) and only slowdown (annalize) the parts they think are suspicious.

  167. Policy don't mean sqat. NSA has mucho boxen. by Anonymous Coward · · Score: 0

    NSA isn't allowed to spy on US Citizens.

    That's just their official policy.

    If they want to or need to, such policy will be disregarded.

    Besides that, they have plenty of computing power to crack encryption.

    Want/need REALLY secure secure communications? Use encryption that uses HUGE ASS NUMBERS!

    That's all worthwhile encryption is--a mathematical transformation of plaintext to ciphertext using...HUGE ASS NUMBERS!

    How huge the numbers are depends on two factors: the level of security desired and the processing power of the computing device i.e. generating 512/1024/2048 bit RSA keys would be TOTALLY INSANE on a 1981 IBM-PC operating at 4.77Mhz.