Slashdot Mirror


Carnivore No More

wikinerd writes "FBI has retired the controversial Carnivore software, strongly criticized by privacy advocates for its email capturing abilities. However, it is believed that unspecified commercial surveillance tools are employed now. What does that mean for Internet users' privacy?"

27 of 194 comments (clear)

  1. In other news by detrino · · Score: 5, Funny

    FBI has begun to install its less intimidating sounding "herbivore" software accross the globe. Vegetarians rejoice.

    1. Re:In other news by JPriest · · Score: 5, Interesting

      Exactly, I work for an ISP, we are still installing these things for the FBI. I don't know much about the new version of Carnivore but I can tell you they have some bugs to be worked out still. (eg. they are not entirely passive, and the IP space needs to be added into them.) This makes network changes a PITA because I don't have access to configure new IP blocks into the new Carnivore platform. If they are going to make us install these things they should at least make them work seamlessly :P

      --
      Saying Java is nice because it works on all OS's is like saying that anal sex is nice because it works on all genders.
  2. Yea... by Heem · · Score: 4, Insightful

    If they retired carnivore, it's likely only because now they have something "better".. or "worse" depending on how you look at it.

    --
    Don't Tread on Me
  3. Security update by SilverspurG · · Score: 4, Insightful

    Instead, the bureau turned to unnamed commercially-available products to conduct Internet surveillance thirteen times in criminal investigations in that period.

    How much does it cost? I'm really sick of paying for this crap.

    --
    fast as fast can be. you'll never catch me.
    1. Re:Security update by Mostly+a+lurker · · Score: 3, Insightful

      The cost is not the issue for me. Law enforcement costs money, but a certain amunt of it is necessaey. What I DO object to is law enforcement being allowed to operate without proper controls. That leads to a police state.

    2. Re:Security update by SilverspurG · · Score: 3, Interesting

      Good points but I've progressed past them. In reality, things are just the other way around.

      Objecting to law enforcement operating without proper controls is futile. Proper controls are always argued on a case by case basis anyways, as well they should be.

      Objecting to the cost of law enforcement is the only real consideration. This is the way it works. If we don't object to the cost there will always be a need for more money. Not putting a cap on the cost is inviting corruption.

      --
      fast as fast can be. you'll never catch me.
  4. Instead.... by chipster · · Score: 3, Funny
    they decided to use free alternatives that work better;
    • tcpdump
    • ettercap
    • Ethereal
    • Kismet
    1. Re:Instead.... by tomhudson · · Score: 5, Funny
      FTA:
      However, it is believed that unspecified commercial surveillance tools are employed now.
      Actually, they just bought Gator :-)
  5. No change by kahei · · Score: 4, Funny


    It means no change for Internet user's privacy, but confirms that the FBI weren't up to managing a large project, even in their core area.

    Which leads me to the inescapable conclusion:

    Privatize the FBI! I'm sure Halliburton would love that contract, but McDonald's would surely also be in the bidding. After all, who would suspect a few Ronald McDonalds wandering around the neighbourhood of being agents? Nobody, that's who! And by the time you notice their guns and badges -- TOO LATE, criminal!

    --
    Whence? Hence. Whither? Thither.
  6. Oh, the humanity! by Lisandro · · Score: 4, Interesting

    Check this little image from the article. "Carnivore's official logo shows bload-soaked incisors closing over a stream of data". EVIL!

    It's a packet sniffer that reconstructs data (mail and web sites, as it seems from the article), not a boogieman! I agree, it can be a dangerous tool for privacy in the wrong hands, but still, it's not like you can just put it in your PC and start reading your neighour's mail.

  7. Internet users' privacy? by jbrandv · · Score: 3, Insightful

    HaHaHaHa!

  8. Re:What about encryption? by ThisNukes4u · · Score: 4, Informative

    Not if they don't know what key was used... A better way would be to encrypt the actual e-mail itself instead of relying on the way it is transmitted to keep your content secure. You can never trust the messenger.

    --
    thisnukes4u.net
  9. Atkins is meat. by Doc+Ruby · · Score: 3, Insightful

    The FBI has announced that their universally criticized Carnivore system has been retired. Who wants to bet that it's just been renamed, and expanded with those "commercial" search tools? You are, since you're reading this. And if you're American, you're paying for the casino! Don't you feel safer, with the government lying to you for your own good, to protect you from the terror of $500M FBI projects that don't work?

    --

    --
    make install -not war

  10. It Means by CastrTroy · · Score: 3, Interesting

    It means that it's time to start encrypting your email. 4096 bit public key encryption should suffice. I can't believe this isn't more prevalent in today's world. We need WDIV Chopper News 4 to do an expose on how everyone is spying on your email. Maybe that would get the public's attention. What I'm surprised about is that AFAIK, none of the webmail providers support encrypting email. You could probably get the browser to encrypt it using Javascript or even with a Java applet. Anyway, having the option would be nice.

    --

    Anthropic principle: We see the universe the way it is because if it were different we would not be here to see it.
    1. Re:It Means by tabdelgawad · · Score: 3, Insightful

      There's a tradeoff with encryption. On the one hand, you make your email harder (impossible? do we really know?) to read for unauthorized third parties. On the other hand, given the percentage of people who use encryption, your emails will stick out like a sore thumb to the FBI/NSA/whoever as something worth investigating.

      I know this is not fair; I don't have to be doing something criminal in order to want privacy. But I really wouldn't be surprised if encrypting your email nowadays raises a red flag in whatever carnivore-replacement program they're running.

      --
      Imposing Libertarian views on everyone online since 1992.
  11. why call it carnivore? by budcub · · Score: 4, Funny

    You'd think they'd name it something like "Perfectly harmless investigating program that would never ever violate your privacy"

    Calling it Carnivore was asking for an uproar.

    1. Re:why call it carnivore? by Anonymous Coward · · Score: 3, Funny

      They're probably replacing it with Fluffy Bunny Instant Search-Bar Software. Who'd be afraid of FBI'S-BS?

  12. Conspiracy theory! by Black+Parrot · · Score: 4, Interesting


    Hmmmm. MS gets into the anti-spyware business, and the FBI suddenly decides it doesn't need its custom spyware anymore...

    --
    Sheesh, evil *and* a jerk. -- Jade
  13. What about the budget by digitalgimpus · · Score: 3, Interesting

    They budgeted quite a bit of hard cash to develop Carnivore...

    so who is going to be held responsible for that wasted cash due to bad planning?

    IMHO that's a ton of money that can be used for many useful things... it was taken from our taxes... and now just sits on some cvs server (assuming they save it).

    That cash could have been used to pay for some armor for troops deployed in Iraq. Or perhaps fund development of improved airline security equipment... something that would be beneficial.

    Why the hell did this get approved if commercial equivilants were in the works? What seriously ill planning went into that?

    If the FBI were a company... heads would roll. This wouldn't be acceptable.

    BTW: This page has a small image of the carnivore logo (for anyone interested).

    1. Re:What about the budget by sam_handelman · · Score: 3, Insightful

      Someone is perhaps unaware of how the economy *actually* works.

      The FBI paid to develop carnivore - and then the developers took side jobs developing these commercial equivalents, which they sold to the FBI. These commercial equivalents would never have come into existence if the Feds hadn't taken on the cost of the initial phase of development, and, from the look of things, provided an initial customer base for this software. The exact same thing happened with total information awareness (now a product being sold out of a cayman islands holding corporation or the like), in case you were not paying attention.

      You may not like this sort of arrangement, but in that case you must really hate all the money the Feds wasted on information technology, automation, container shipping, or avionics, all of which were developed more-or-less the same way.

      Of course, you can approve of this sort of arrangement without approving of it's use in this particular case, but that isn't the objection you raise.

      If the FBI were a company... heads would roll. This wouldn't be acceptable.

      How adorable! A Capitalist! Does woo believe in the free market? Does woo? Yes woo does!

      --
      The good and new comes from no quarter where it is looked for, and is always something different from what is expected.
  14. We have never been at war with Eurasia. by Anonymous Coward · · Score: 3, Insightful

    We have always been at war with Eastasia.

  15. Carnivore has offshoots by itpr15061 · · Score: 5, Informative

    Carnivore relied heavily on a product called SilentRunner. SilentRunner was purchased by Computer Associates and given a new name, Network Forensics.

    http://www3.ca.com/Solutions/Product.asp?ID=4856

    It has the ability to decode email on the fly. I have the product and while it does have some "wow" factor, the usability and stability is atrocious. Another fine cobbled together product from CA.

    1. Re:Carnivore has offshoots by ScrewMaster · · Score: 5, Funny

      It can decode ASCII plaintext in real-time? Wow, now that is impressive.

      --
      The higher the technology, the sharper that two-edged sword.
  16. Ok, but now will they by pair-a-noyd · · Score: 3, Funny

    Open Source it or give it abandonware status?
    That would be fun!

  17. steganography by whovian · · Score: 3, Interesting

    So ... the trick is to use some form of plain-text encryption that doesn't appear to be anything but a somewhat long-winded normal message discussing the weather or the latest playoffs.

    Something like text based steganography (demo 1, demo 2)? Slashdot has covered steganography before.

    --
    To-do List: Receive telemarketing call during a tornado warning. Check.
  18. Fuggedaboudit by handy_vandal · · Score: 3, Funny
    What does that mean for Internet users' privacy?

    Privacy? What privacy?

    Do you want criminals running your life?
    Of course not!

    But the world is full of criminals who want to run your life.
    What you need is police, to protect you from criminals.
    Magic Lantern + Organized Crime

    Scarfo + keystroke logging
    Then there's the problem of police protecting themselves from criminals -- or not, as the case may be -- but that's another story.

    -kgj
    --
    -kgj
  19. Re:try china by Tackhead · · Score: 4, Funny
    > i hear the goverment over there have lots of experience in "monitoring" its "public" networks
    >
    > perhaps they may have some ideas for your FBI

    Where the fuck do you think we're running the live beta and the scalability tests? Soviet Russia? :)

    I'm only half in jest. Soviet Russia was the alpha test for both the surveillance system and the sociopolitical system. It failed - two coups, and economic collapse.

    China was the beta. It succeeded. One attempted coup - crushed instantly, because the Chinese learned how to deal with dissidents. Political stability is rock-solid, and economic growth is stellar.

    The full system goes live, planet-wide, within 10 years. You're free to choose whether or not to buy in now, but it's a limited time offer.

    I bought in because steak tastes better than dog food, a plasma-screen TV made by slave labor beats making plasma-screen TVs for $0.01/h, and because winning is just plain more fun than losing.

    I kinda like your slogan. "Try China". I did. And I liked it.