Slashdot Mirror


EU Gumshoe Chases Internet Villains

Robert Haskins writes "The Pittsburg Post-Gazette is carrying an interesting Wall Street Journal story about a guy who works for Microsoft and chases virus writers, software counterfeiters, spammers and other suspected law breakers. Can companies really make a difference by helping law enforcement like this?" From the article: "Mr. Fifka isn't a cop. He works for Microsoft Corp.'s Internet Safety Enforcement Team. Created in 2002, the group is part of the U.S. software giant's intensifying efforts to combat cyber crime at a time when consumers and businesses are becoming increasingly frustrated with fraud and virus attacks on their personal computers, most of which use Microsoft's Windows operating system. As Internet crime proliferates, law enforcement is relying more on the private sector to help counter it. That's because tracking cyber criminals requires a different set of skills than police have traditionally used. Compounding the challenge is the speed at which new online threats are morphing."

24 of 106 comments (clear)

  1. Not Intimidating Enough? by Anonymous Coward · · Score: 3, Funny

    Well he isn't doing a very good job, maybe he isn't intimidating enough. I hear the reason there are so few Linux viruses is because Tux goes around vigilante-justice-style and beats the hell out of anyone who writes one. I don't know about you but I would crap my pants if opened the door and saw a giant overweight penguin (or an overweight Finnish guy for that matter). Don't even get me started on the BSD devil.

    1. Re:Not Intimidating Enough? by metaphorever · · Score: 2, Funny
      I don't know about you but I would crap my pants if opened the door and saw a giant overweight penguin

      or to quote Linus:

      "Some people have told me they don't think a fat penguin really embodies the grace of Linux, which just tells me they have never seen an angry penguin charging at them in excess of 100mph. They'd be a lot more careful about what they say if they had."

      More seriously, while I'm not saying Microsoft going after virus writers etc. after they've done the damage is a bad thing, perhaps if they focused more energy on preventing them in the first place it wouldn't be as much of a problem.

      --
      If people continue to abuse this feature, I will have to remove it. - Slashdot Comment Box, 1998
    2. Re:Not Intimidating Enough? by Virak · · Score: 2, Funny

      And what, you wouldn't be scared to see a giant, wavy, multicolored window flying at you?

  2. The reason the police do not have the skills by Anonymous Coward · · Score: 3, Insightful


    is they cannot pay 100k+ for dedicated CS people, anybody who has the skills will be working for [somecorp] as they will pay the market rate, cant blame the individual as business is business, why work for the police for 50k when you can earn double in the market.
    Of course if people want to pay more taxes (like corporations for a start) then you will get the police force society needs for a modern world, but until then you will only get alturistic people and alturism is frowned upon in America, greed is good, get rich or die trying

  3. Hmmm... by MightyMartian · · Score: 5, Funny

    It was a hot dark night when she came in. You know the kind of night, and you know the kind of broad. Both could make you sweat, and knock you on your ass.

    I'd sent my secretary home early. I had no cases, but a half-bottle of whiskey and a revolver. When she walked in, I was a little past feeling good and ready to shoot.

    "I'm lookin' for Porn, Sam Porn. You him?" she asked in a voice that made me melt.

    "What's it to ya, lady?" I asked, half-hoping she'd answer, half-hoping she'd leave.

    "I've got this web site, see." she replied. "It's kinky and cute, straight tits and ass. But now somebody's busted in, all kinds of bondage. I need someone with guts and brawn, and maybe some brain. I can pay. Thousand big ones now, five more if you can catch the perv."

    My smarter half said leave this dame alone. She was trouble, and that was for sure. But the rent had to be paid, and I didn't even have half a bottle of whiskey.

    --
    The world's burning. Moped Jesus spotted on I50. Details at 11.
  4. Re:On the futility of treating the symptoms by DrEldarion · · Score: 5, Insightful

    Spyware is usually user-installed (usually disguised as or alongside of a useful program). Any operating system where users are allowed to install software is vulnerable to spyware.

  5. P.I.I. by Foobar+of+Borg · · Score: 4, Funny
    "It was a hot day in Brno and I was hoping to take the day off. I looked out the smudged window of my sixth-story office holding my two best friends in my hands. The first is my .9 mm, I keep it loaded. The other is a bottle of vodka. It keeps me loaded.

    Yep, it was just another boring day until a client showed up. He was all boo-hooing over something that was after his business and acting all irrational, but then clients are like that. It seems some computer virus was out to get his software and I needed this mess like I needed a Windows upgrade. Which made sense in its own twisted sort of way. You see, the client was Bill Gates.

    I'm Peter Fifka, and I'm a Private Internet Investigator."

  6. that's worrisome by cahiha · · Score: 4, Insightful

    As Internet crime proliferates, law enforcement is relying more on the private sector to help counter it.

    That's a big concern. People who work in law enforcement should not also have other kinds of interests. Even without deliberate abuse of power, someone who comes from a corporate environment will bring his own set of prejudices and interests to the table. For example, someone working for Microsoft may be more interested in pursuing piracy using Linux and less interested in tracking down people who write viruses that infect Macintosh. It also may lead to a situation where the primary means of getting the police to do something is to pay someone lots of money; it is even more disconcerting that those someones are ex-police, which really is getting pretty close to outright corruption.

    If you think about it, it is also truly bizarre that companies like Microsoft find it easier to finance a private police force to track down virus writers than to fix their software.

    1. Re:that's worrisome by cheesee · · Score: 2, Interesting

      Even police officers have their own set of prejudices and interests. Everyone does, wether or not they are privately owned.

      And no, it's not bizarre. Is real police tracking down people who break the law bizarre? Why don't they just make it so people can't break the law? See where I'm going here?

      --
      Got Shadowrun? Awakened Worlds
    2. Re:that's worrisome by cahiha · · Score: 2, Insightful

      Even police officers have their own set of prejudices and interests. Everyone does, wether or not they are privately owned.

      The set of personal prejudices and interests individuals may bring to the police force is tightly circumscribed. If they violate the laws, rules, and regulations in those areas, those individuals are reprimanded or let go.

      One of the things police may not have is personal or financial interest in private corporations that are related to their work. The reason those rules exist because otherwise we open the doors to corruption.

      The approach to law enforcement described in the article gets around those rules and regulations by having corporations provide "advisors", and that is a problem.

      Is real police tracking down people who break the law bizarre?

      Real police are public employees; they are required to enforce the law equally for the benefit of everybody. When Microsoft supplies special "advisors" or resources to the police, it biases the police in favor of enforcing laws whose enforcement benefits Microsoft, and that is bizarre. It's not just bizarre, it is unacceptable.

      And it is particularly bad because catching people who take advantage of security holes in Microsoft software just ought not to be high priority for law enforcement--Microsoft should fix their damned software and not burden law enforcement with cleaning up after their programmers.

  7. Considering the results of the highschool hackers by FauxReal · · Score: 2, Interesting

    I think this is a good idea given the ineptitude of most local law enforcement agencies when dealing with high tech crime.

    I could say the same for the FBI, we had a guy post intimate knowledge of a cop killing from our net cafe. The killing wasn't publicised much. The FBI came and bungled the whole computer forensics operation. For one they copied the HDDs w/ some slow crappy program and then took the copies instead of the originals. Luckily some other agents caught the guy after he posted from somewhere else.

  8. That is the problem by Nom+du+Keyboard · · Score: 4, Interesting
    combat cyber crime at a time when consumers and businesses are becoming increasingly frustrated with fraud and virus attacks on their personal computers, most of which use Microsoft's Windows operating system.

    That is the problem.

    A more secure operating system with tools to identify and filter out malware is the solution.

    This is just paint over dryrot.

    --
    "It's the height of ridiculousness to say for those 9 lines you get hundreds of millions."
  9. Re:Stop sending Gwedo to cure crime and... by geekee · · Score: 2, Insightful

    "If Microsoft cannot fix the security holes then they should opensouce it so it gets fixed by the Linux community. Microsoft can still sell software and support.
    "

    Linux software isn't secure. Why do you think Linux programmers can make Windows secure?

    --
    Vote for Pedro
  10. Nextime Gumshoe, Nextime by EmperorKagato · · Score: 4, Funny

    I bet he can't capture Carmen_Sandiego. No one can catch her!

    --
    ----- You know you have ego issues when you register a domain in your name.
  11. In other words by Lifewish · · Score: 2, Insightful

    Half the stuff these guys do would probably not be legal for a policeperson to deal with. This is just another case of outsourcing breaches of rights to the private sector.

    --
    For the love of God, please learn to spell "ridiculous"!!!
  12. Electronic Crimes Task Force by xorowo · · Score: 5, Interesting
    In specific response to these types of issues, the Secret Service established the Electronic Crimes Task Force. I had the opportunity to tour their Los Angeles operations center and was impressed by their technical resources and capability.

    They described how they act as an intermediate body for all law enforcement agencies involved in computer crime. From forensic analysis to crime-scene procedure, they were designed to both advise and participate. I can't speak to any specific crimes that they had been involved in, but it seemed like the idea, if handled properly, was a good one.

    When I visited in 2003, they were just ramping up. They had already been assisting local law enforcement, but seemed to still be moving in. Most of the "tech" was in place, including massive file servers and clean rooms, but the individual offices looked sparse, with boxes still unpacked. I was half expecting it to look like something out of the movies - darkened, secretive, maybe in a cave somewhere - but it was just on the 13th floor of a standard downtown office building with all the harsh amenities of a 30-year old downtown high rise.

    I would certainly hope that what they spared in decoration was made up by the effectiveness at solving these crimes.

  13. Re:Title has't anything to do with article text by moonbender · · Score: 3, Insightful

    Yeah, I was confused, too. I thought he was actually an EU official, in fact he doesn't really have anything to do with the EU. Apparently EU was just used to meant Europe, not the European Union, the governmental body or even the European Union, the geographic entity.

    Which is interesting, because people around here (inside the EU) routinely make the opposite "mistake" (if you want to call it that way), referring to Europe when they actually mean the EU, or even part of the EU. Although the EU does encompass a large part of Europe these days. Kind of like talking about "America" when you're actually referring to either North America or the USA.

    --
    Switch back to Slashdot's D1 system.
  14. Next he'll be chasing.. by postgrep · · Score: 3, Funny

    Firefox users, those ones with that tricky "unfindable" cache. Surely they are the virus writers since they don't use IE, the number 1 cybersleuth recommended product!?

  15. Tracking this spammer almost impossible by DavidPatterson · · Score: 2, Interesting

    A bot of some sort came by one of our clients web sites and found a hole in the 'contact us' page. I'm guessing this bot used some sort of a Google search to find likely pages. It submitted the contact us from 5 times, with various values in the fields...each time, trying to send a bcc: email to an aol address. It worked on one of the posts...they found a hole. Later that night, we had a few thousand emails sent through our server via carefully crafted posts to our contact us form. Tracing back the ip addresses, one came from a wide open proxy server in Vietnam...not much of a way to trace that one back to the source. Amazing how this whole process is probably automated. (BTW, the spam worked. It was for a particular penny stock that doubled in price over the last few days. Someone just doubled their money.)

    1. Re:Tracking this spammer almost impossible by Motherfucking+Shit · · Score: 2, Interesting
      (BTW, the spam worked. It was for a particular penny stock that doubled in price over the last few days. Someone just doubled their money.)
      That someone needs to get into hot water, as pump-and-dump schemes are illegal. If you happen to have a copy of the spam, forward it to the Securities and Exchange Commission; they can track down who sold off a big chunk of the hyped company around the date of the spam. Whether or not they'll punish him is another matter, but at least you did your part.

      The address to report the spam is enforcement(@)sec.gov. Same goes for any "stock tip" spam you get.

      --
      "BSD: Free as in speech. Linux: Free as in beer. Windows 10: Free as in herpes." --Man On Pink Corner in #52607549.
  16. Re:On the futility of treating the symptoms by petermgreen · · Score: 2, Interesting

    there aren't as many worms as e-mail viruses but those that there are still produce a significant background noise that serves to infect any unpatched windows box that gets directly connected to the internet.

    --
    note: i'm known as plugwash most places but i screwd up registering that here somehow in the past and now can't register
  17. Obligatory old one... is Windows a virus? by Stormwatch · · Score: 2, Funny

    Is Windows a Virus?

    No, Windows is not a virus. Here's what viruses do:

    - They replicate quickly - okay, Windows does that.

    - Viruses use up valuable system resources, slowing down the system as they do so - okay, Windows does that.

    - Viruses will, from time to time, trash your hard disk - okay, Windows does that too.

    - Viruses are usually carried, unknown to the user, along with valuable programs and systems. Sigh... Windows does that, too.

    - Viruses will occasionally make the user suspect their system is too slow (see 2) and the user will buy new hardware. Yup, that's with Windows, too.

    Until now it seems Windows is a virus but there are fundamental differences: viruses are well supported by their authors, are running on most systems, their program code is fast, compact and efficient and they tend to become more sophisticated as they mature.

    So Windows is not a virus.

    It's a bug.

  18. Re:Good news by Antique+Geekmeister · · Score: 2, Insightful

    Please. Rent a clue. It's much cheaper to hire one person to "assist" the police and help them feel "secure" about their own Windows purchases, to leave law enforcement dangling and angry and much more happy to get subpoenas against you and refuse to use your fundamentally insecure products on a governmental level.

    There are certainly good people who do such even work: this guy may be one of them. But with Microsoft's long history of patent theft, copyright theft, and major criminal anti-trust behavior, it's clear that Microsoft's focus is ot on protecting its users. This is worsened by Microsoft's history of adding features at the expense of security, including the changes in .NET that caused Peter LaMacchia to reason from the project after writing Microsoft's book on the software.

  19. NEVER EVER HELP THE PIGS -IMPERITIVE READ MY STORY by Anonymous Coward · · Score: 2, Interesting

    This guy is a fool. You never help the pigs. You never talk to the pigs. Anyone who has lived in the ghetto knows that. You fight the pigs with everything you have. The pigs are interested in one thing and one thing only. Projecting power. If everyone hasn't figured it out by now, the justice system is simply a smokescreen and a farce behind which that is done.

    I'm not from the getto. I'm a middle class American computer guy. But I learned a lot about the ghetto, and you're about to hear my story and why this guy needs to be sent to prison himself as a wake up call to meet the SOB's face to face he thinks he's helpoing.

    I'm a typical computer guy like the rest of you. I saved up $350 for my first C64 and knew how to program it before I got it home, by programming on them in the stores. I went through Macs, building my own PCs, Linux, BEOS, QNX, programming, shell scripting, webdesign, gimp editing, running a bbs, emulators, builing my own wifi repeater... you name it I've done it.

    For 5 years I ran a charity that collected PCs from schools and universities, refurbished them, and gave them to the poor. It was the second largest in my state and my URL was all over the net.

    Then one day, boom, it ended. Someone made an accusation against me, and I had to fight for my life to prove I was innocent. They had nothing more than an accusation... no evidence... and their story didn't even make sense. It didn't matter, and I got the shock of my life when I lost. The judge said "12! do 7... meaning 12 years, do 7... basically, a death sentence"

    You don't understand. The courtroom isn't a courtroom, its an abatoir (a place where sheep are brought to be slaughtered, dazed and bewildered, like jews stepping off the train into a concentration camp). These people are masters at the slander game. They can paint you any way they want you. And they will, while you sit there quietly like a deer in the headlights being pleasant and nice not speaking a word

    I spent two years in an American prison. It was absolute hell. I was tortured. I was locked in a sensory deprivation box, I was systematically deprived of sleep, deprived of food, roasted alive in a steel tin building, drilled like I was in the military, yelled at, attacked, locked in cells with two consecutive different roommates who were pyschopathic butch thugs (read flaming gay dangerous). I begged, I wrote grievances, I pleaded, please move me anywhere, and nobody lifted a finger.

    I had a job, I worked

    Two doors down from me was an RFDI engineer, who was in for... get this... adultery. I nicknamed him Marconi. My nickname was Einstein. A black guy stuck that one on me, because the average grade level was 6... I tested out at 13th... the highest the test went. I was always helping people spell letters, or write letters home, or helping with GED algebra which I know inside out (calculus even). I worked in the library shelving books.

    I spent my time avoid all the stupidity in there, writing, making webpages on paper. I made a little harddrive out of paper and set it on my shelf for inspiration even once, it was something to know my webserver was still out there serving documents to the world. I dreamed when I got out of that hell hole of posting to slashdot on the main page... I'm not joking, for real, I've got it scanned somewhere now.

    After two years, I won my appeal. That's how long the process takes, minimum, and your chances are slim at best even then. Once they have you, they are making 40K off of you a year, 90% of which goes to guard salaries, innocent or guilty, your a cash cow. America is a police state, under the surface, a huge business. I was in warehouse after warehouse where you could see heads for as far as you could see...

    Esp. in the cafeteria. Imagine that scene in Star Wars Episode III, on the planet where the Genoseans are cloning Bobba Fet the bounty hunter, and all the Bobba Fet clones are eating... that is exactly what it looked like... packed in like