Slashdot Mirror


What We Know About the FBI's CIPAV Spyware

StonyandCher writes "What is CIPAV? CIPAV stands for 'Computer and Internet Protocol Address Verifier'; a lengthy term for powerful spyware the Federal Bureau of Investigation can bring to bear on web-based crime. It was used last month in a case where someone was emailing bomb threats regularly to a Washington high school. An affidavit by an FBI agent revealed some of the workings of CIPAV. 'According to the court filing, this is [some of] what the CIPAV collects from the infected computer: IP address, Media Access Control address for the network card, List of open TCP and UDP ports, List of running programs ... Last visited URL. Once that initial inventory is conducted, the CIPAV slips into the background and silently monitors all outbound communication, logging every IP address to which the computer connects, and time and date stamping each.' In a Computerworld article, the author attempts to dissect CIPAV's purpose and raises a number of questions such as: What happens to the data the CIPAV collects? Does the CIPAV capture keystrokes? Can the CIPAV spread on its own to other computers, either purposefully or by accident? Does it erase itself after its job is done?"

207 comments

  1. does it... by russ1337 · · Score: 5, Interesting

    What happens to the data the CIPAV collects? Does the CIPAV capture keystrokes? Can the CIPAV spread on its own to other computers, either purposefully or by accident? Does it erase itself after its job is done?"

    Does it run on Linux?

    sorry, couldn't help myself.... but seriously..... does it?
    1. Re:does it... by Anonymous Coward · · Score: 0

      check the kernal. it may be part of the base.

    2. Re:does it... by Anonymous Coward · · Score: 0
      Good question: TFA:

      If the suspect clicked on the link ...... an exploit for a zero-day vulnerability (or unpatched one on the suspect's PC) would have let the government download CIPAV to the target hard drive. But which vulnerability? We don't know. Conceivably, it could have been the FBI's own super-duper flaw, but Occam's razor says it was probably one of the many effective, yet run-of-the-mill, bugs in the wild. Roger Thompson, chief technology officer at Exploit Prevention Labs, took a guess. "If I had to bet, I'd bet on ANI," Thompson said in an IM interview. Good bet. The animated cursor flaw harks back only to late March, and although Microsoft patched it in an out-of-cycle update on April 2, it's effective enough to still be used by the notorious multistrike hacker exploit kit Mpack as recently as last month, long after CIPAV was deployed. :

      So, in all likely hood, no it doesn't... but they might have some other exploits in their toolbox for other OS's...
    3. Re:does it... by HaeMaker · · Score: 4, Funny

      Let's find out...

      "Mr. Gman from Quantico, VA has sent you an eGreetingCard from Flowers By Irene! Just open this P.D.F. file to view..."

    4. Re:does it... by TWX · · Score: 2, Interesting

      Does it run on Linux?
      Even if it does, if you find one of those last-generation Motorola 68000 machines and compile your entire OS from scratch I doubt that they'll have a binary-compatible version to install on it...

      Of course, be prepared to have one SETI@Home packet take about four weeks to process, and to have a bogomips rating of something like 16.9...
      --
      Do not look into laser with remaining eye.
    5. Re:does it... by mpapet · · Score: 1

      My desktop distro-of-choice doesn't allow exec privileges to email attachments. They'd have a problem with my browser if they sent an evil url too.

      You bring up a good question with a very practical answer. This software was developed like all software, with time and budget constraints. If it's home-grown or COTS it definitely does the bare minimum so the fear mongering is likely unfounded. That is, until version 2.0. Aaaahhhh!!!

      --
      http://www.maxineudall.com/2010/02/should-economists-be-sued-for-malpractice.html
    6. Re:does it... by OrangeTide · · Score: 3, Informative

      insert a new system call in the middle of your syscall list, and recompile everything for it. it will break all static binaries and shell code :)

      My Sparc Classic would takes minutes to establish an SSH2 connection. those big keys take a while, SSH1 was nice and fast. (50MHz no cache, no FPU)

      --
      “Common sense is not so common.” — Voltaire
    7. Re:does it... by NathanWoodruff · · Score: 1

      Just another reason why I am so glad that I still run OS/2 at home.

      Nathan

    8. Re:does it... by Anonymous Coward · · Score: 1, Funny

      yeah well I created my own OS from scratch, and roll all my own applications for it too. Next project will be to create a processor from scratch too.

    9. Re:does it... by morgan_greywolf · · Score: 1

      Current version of Firefox for OS/2 http://releases.mozilla.org/pub/mozilla.org/firefo x/releases/2.0.0.5/contrib/firefox-2.0.0.5.en-US.o s2.zip [mozilla.org] Nathan


      Wow, you're for real.

      What I don't get -- why would you still run OS/2, despite its severe lack of decent applications, incompatibilities with current hardware, complete lack of vendor support. At least with a Linux distro, you have a large developer base, decent hardware drivers for current hardware, and can purchase vendor support if you need it.
    10. Re:does it... by bhtooefr · · Score: 1

      Actually, I hear there's surprisingly good support for ThinkPads (go figure,) and the OS/2 nuts just keep porting all the interesting stuff from Linux back to it.

      Also, you can purchase vendor support for OS/2, as well.

      That said, I'll stick with Ubuntu.

    11. Re:does it... by Anonymous Coward · · Score: 0

      Actually, though it is a large project, some have done exactly that. The CPUs are done with FPGAs.

    12. Re:does it... by dgatwood · · Score: 4, Insightful

      Mod parent down. SELinux is support for more fine-grained rights management in Linux. It's a mandatory access control policy system, basically. Unless parent has proof that there is a back door in there somewhere, I'm pretty sure parent is full of it.

      Just because the software is partially paid for by the government, it does not necessarily follow that it's a back door. Take off the tinfoil hat.

      --

      Check out my sci-fi/humor trilogy at PatriotsBooks.

    13. Re:does it... by NathanWoodruff · · Score: 1

      Yes, I am for real. You say that out of shear ignorance. But, say it all you want. I have yet to find hardware that won't run OS/2. There might be bleeding edge hardware that there is no support for, but, I can always find an add in card as a replacement that has current support. Also, it is very easy to port your linix distro stuff to OS/2. There is also a current version of Open Office for OS/2. When you want to live outside of your comfort windoze zone, you will find nobody really needs Microsoft any more. There are several great alternatives, OS/2 being one of them. Nathan

    14. Re:does it... by Bluesman · · Score: 1

      That's a cool idea, but wouldn't it only break shell code that called syscalls after the one you inserted? Shouldn't you put the new one at the very beginning?

      IIRC, execve() is syscall #11, so wouldn't your inserted syscall have to be before that to do prevent shellcode from executing arbitrary commands?

      --
      If moderation could change anything, it would be illegal.
    15. Re:does it... by GrumpySimon · · Score: 3, Funny

      That is, until version 2.0.


      oh no - it's going to have Ajax and a drop shadow!
    16. Re:does it... by Anonymous Coward · · Score: 0

      From little snippets I have seen on the net I think that all OSs are totally transparent to existing government software.Anything you type in or have in storage is theirs if they want it. Firewalls, high quality passwords and good encryption only mean that extra expense is involved in reading your information. They are using methods that you will not have heard of in the computer community.
                        Here is the best method that I can think of to have some degree of privacy. Use a non networked computer to build any info that you wish to share. Do the encryption on that PC. Burn it to CD or DVD after encryption using a "book code" or "one time pad". Transmit the cd on a networked PC. On the other end download it. Burn it to a CD and then take that cd to a computer that is not on a network of any kind. Decrypt the material and view it. A word of warning is that any commercial encryption, particularly if the code is not open source, may actually have materials within that spy on you. For example take an OS like Win XP. Since you can not view the code it is an ideal spot for governments to install their own spying utilities. Industrial thefts are another area where substantial sums might be spent trying to find really great ways to snag data.

    17. Re:does it... by Anonymous Coward · · Score: 0

      Why do people on slashdot sign their post when their fucking username is RIGHT THERE above their post anyways?

      Nathan

    18. Re:does it... by scoot80 · · Score: 1

      why would you do something silly like that. Do it the good old fashioned way and just use a whole stack of logic gates. http://www.homebrewcpu.com/. Then have a webserver running on it.!

    19. Re:does it... by RLiegh · · Score: 1

      So...why not just use Linux then? Why bother going through all of the bother of sticking to antique cards and porting applications over from Linux when you could simply just install Linux.

      This isn't 1994, there really isn't any advantage to running OS/2 instead of Linux or BSD or hell, even Solaris.... (all of which are free, and all of which are more current than the long-abandoned OS/2).

    20. Re:does it... by OrangeTide · · Score: 1

      sure. you ought to put it to break things like clone, execve, socket, open, etc.

      you could even be worse and just shuffle them around randomly.

      --
      “Common sense is not so common.” — Voltaire
    21. Re:does it... by n_gatherer_z · · Score: 1

      Yeah it's running right now on your MythTv box nzruss.
      Watch what you are watching because they are watching!

    22. Re:does it... by Anonymous Coward · · Score: 0

      Neat idea. I'd thought about doing this, maybe by not using int 0x80 for system calls, but the problem is that it won't affect scripted languages or bytecode programs. I can't think of a good solution for that!

    23. Re:does it... by NathanWoodruff · · Score: 0, Flamebait

      Again, your lack of knowledge is astounding. The latest release of OS/2 was last year(2006). There is another release scheduled for the end of this year or the beginning of next.

      I can find support for almost every add on card on the shelf right now at CompUSA or BestBuy. As a matter of fact, I was adding SATA drives to an older computer of mine and bought an off the shelf CompUSA SATA add in card. The DANI drivers from http://hobbes.nmsu.edu/ supported it.

      The USB drivers for OS/2 support my Linksys 200M wireless USB Ethernet adapter to.

      To further your knowledge on OS/2 why don't you try a live CD of the latest release of OS/2 http://www.ecomstation.com/democd/ It runs on every computer I have tried here at work. Why don't you download it and try to find a computer that it won't run on.

      Sometimes I think it is funny the lack of knowledge people exhibit about OS/2 and then claim to be an authority on it.

      Your lack of knowledge is just sad.

      Nathan

    24. Re:does it... by jwo7777777 · · Score: 2, Funny

      You say that out of shear ignorance. Better than tensile or compressive ignorance.

    25. Re:does it... by Slashcrap · · Score: 1

      My Sparc Classic would takes minutes to establish an SSH2 connection. those big keys take a while, SSH1 was nice and fast. (50MHz no cache, no FPU)

      Are you absolutely positive that it wasn't just trying to do a reverse DNS query for a host that didn't have a reverse DNS entry? That being the cause of multi-minute SSH logon delays in approximately 99.9999% of cases.

      Which is more likely? That SSHv2 uses PKI algorithms so different to SSHv1 that it takes orders of magnitude more time to do the processing? Or that they made reverse DNS lookups the default in v2?

    26. Re:does it... by OrangeTide · · Score: 1

      ssh-keygen took eons to complete too.

      the big keys and big primes on ssh2 seems to benefit greatly from having at least some cache. doing arbitrary precision math was slow in general on it. (bc was none too fast either, but it's never fast)

      I'm only 99.5% positive it was not a DNS issue. I had dhcp and forward and reverse resolve files for my entire class-C lan network. 10.42.69.x 1 to 254 .. A records and PTR records for every one of them. But you do bring up a valid point, unless someone can reproduce this it is possible I had a configuration issue.

      As to why SSH1 would pop instantly on the same box (I just changed the config and used the same daemon) makes me suspect that I am correct.

      --
      “Common sense is not so common.” — Voltaire
  2. What about zombies? by Reziac · · Score: 4, Insightful

    What happens when zombied computers are used to email such threats? who gets the blame in that case? How do you distinguish the innocent zombied-user from the trojan or virus? Would being infected constitute defense? If so, how do you prove intent??

    So many questions raised by this... I'm sure others can think of many more.

    --
    ~REZ~ #43301. Who'd fake being me anyway?
    1. Re:What about zombies? by toleraen · · Score: 5, Interesting

      I think the obvious question would be "How does it get installed?"

    2. Re:What about zombies? by Anonymous Coward · · Score: 1, Interesting

      One would hope that, "because of the war against terrorism", being infected becomes a legal offense.
      That would certainly increase the awareness.

    3. Re:What about zombies? by Reziac · · Score: 2

      How do you prove that you're the innocent victim of a zombie installer, vs. having surreptitiously zombied your own machine? the installer works the same way regardless, and ISTM it's not too difficult to determine and target your own IP address. (Or for that matter, for the gov't to do so.)

      Point being, I'm wondering just how solid this evidence really would be in the eyes of the courts, with or without tech-savvy judges and lawyers.

      --
      ~REZ~ #43301. Who'd fake being me anyway?
    4. Re:What about zombies? by Anonymous Coward · · Score: 2, Informative


      1) re: duration of evidence kept:

      This is either a troll or a rhetorical question.

      Why would they need to erase it? how could you prove they didn't delete it?

      I remember sitting in a Computer Law class in the early 80s. One of the things which arose (aside from writing briefs which the chair from the department and a group of landsharks would pick pieces apart & continue until it looked reasonable) One of the things discussed at that time was you could force the FBI to ensure your information is correct. Did they send you a copy of their information and let you correct it? No. You'd send the information which you believe might be outdated or incomplete and they'd update their information with whatever you sent to them.

      2) As far as dealing with the charges + any other issues, remember: there are things which the gov't will prosecute you for, which are top secret and your lawyer isn't given access to the information.

    5. Re:What about zombies? by toleraen · · Score: 3, Interesting

      I was referring more to the question of how the FBI installs the software on your machine. For some reason picturing a guy in a black suit wearing dark sunglasses sending "OMG Pony Screensaver Inside!!1" emails doesn't cut it. If they're going for computer evidence, it seems likely that their targets would be a bit more computer literate: more up to date on patches, firewalls, etc.

      Otherwise, who knows. Maybe their software has to wipe out other possible malware to be effective (wouldn't want that data they're collecting, or even the software they installed going overseas, right?). You'd hope that they would have to show that it was someone typing out the emails locally vs. remotely. But then, who's to say it wasn't the person's little brother writing the email? It doesn't seem like they'd have a lot to stand on...there should be a lot of supporting evidence going with what they collect with that software.

      But in the end, don't they pretty much just have to say "We're the FBI. That's what happened." anyway?

    6. Re:What about zombies? by Anonymous Coward · · Score: 0

      your briefs arose during law class ???

    7. Re:What about zombies? by Anonymous Coward · · Score: 0

      So is it open source? ;-) Couldn't resist.

      Someone needs to start collecting the IP addresses they use so we can firewall off all traffic to/from them.

      Guess I will have to roll my own proxy to protect myself.

    8. Re:What about zombies? by dnormant · · Score: 1

      Installed? Maybe it's an undocumented feature of the Windows product line. "Click here to activate."

    9. Re:What about zombies? by Anonymous Coward · · Score: 0

      I think that's the whole point of this thing. To determine if the user is the initiator or simply a relay. Why else would you see what ports are open, software installed, etc. Monitoring the traffic after being installed could possibly lead back to the originator of the infestation.
      So, if you're going to do something wrong. Infect yourself for plausible deniability

    10. Re:What about zombies? by AmberBlackCat · · Score: 1

      My guess is a Windows Update or whatever the Mac and Linux versions are. So everybody's probably already got it, waiting to be activated.

    11. Re:What about zombies? by Anonymous Coward · · Score: 0

      For the love of god could someone from Rand or Stratfor throw in a couple thoughts here. Some of us can't.

  3. How to identify? by redshirt1111 · · Score: 2, Interesting

    I did read the article, but did not see anything about identification. Other than ensuring there is no spyware running on your machine, anyone have an idea how to detect this particular program?

    1. Re:How to identify? by Opportunist · · Score: 2, Interesting

      Well, there are some ways. Some of them used by trojans, some used by AV kits, some by both.

      You can go ahead and force every program you run to load a DLL of yours, which hooks the relevant calls and alerts you should an application that's not supposed to tries to access things it has no business in. At least that's how I did it.

      It does slow the system down considerably, though, so you might want to use it on a separate machine (real or VM) that you use to do your internet stuff.

      --
      We used to have a Bill of Rights. Now, with the rights gone, all we have left is the bill.
    2. Re:How to identify? by Anonymous Coward · · Score: 0

      I did read the article

      You must ne new here. OH WAIT.... I must be new here. I mean,

      eye muss bee knew hear!

      Damn, it's hard to get the hang of this slashdot thing...

  4. address is 192.168.0.100 by maxwells_deamon · · Score: 3, Funny

    Just look for the guy with that address!

    It most do a trace route/phone home or somthing to actually get a useful address

    1. Re:address is 192.168.0.100 by ArcherB · · Score: 4, Funny

      Just look for the guy with that address!

      It most do a trace route/phone home or somthing to actually get a useful address


      As opposed to the guy at 127.0.0.1! I hacked into his machine once, but that bastard had some sort of active defense daemon running that wiped my drive at the same time I was trying to wipe his!

      Fortunately, I was able to see the porno pics of his wife before I was hit. Man! That bitch was FUGLY!

      --
      There is no "I disagree" mod for a reason. Flamebait, Troll, and Overrated are not substitutes.
    2. Re:address is 192.168.0.100 by houghi · · Score: 1

      127.0.0.1 is so last century. I use http://hackme.houghi.org/ with a much lesser obvious IP adress.

      --
      Don't fight for your country, if your country does not fight for you.
  5. The real threat of "government spyware" by Opportunist · · Score: 5, Interesting

    The core problem is, surprisingly, its correlation with antivirus tools.

    Either the feds don't give AV vendors a heads-up when they plan to use a trojan, i.e. they risk being found. Now, this would double as the "hey stoopid, the feds are onto you" warning.

    So it's likely they do require AV vendors to avoid finding them. This, in turn, would mean, though, that all a potential virus writer has to do is to get his program to match the fed trojan in behaviour and shape, possibly in signature.

    I needn't write more, I guess? Why bother coming up with a rootkit if there are governmental-assisted ways to create undetectable malware?

    --
    We used to have a Bill of Rights. Now, with the rights gone, all we have left is the bill.
    1. Re:The real threat of "government spyware" by Anonymous Coward · · Score: 1, Interesting

      match the fed trojan in behaviour and shape, possibly in signature.

      That's difficult considering that all cia and fed software are signed with a public crypto key that is hidden deep in windows, and used to verify that the binary is indeed a signed goverment trojan.

      The same method is used to send windows trojans to foreign military windows computers as well - that's why many european states does not trust windows to run their battleships or other critical military systems. I was assigned to disassembling the windows core logic when I did my mil svc.

    2. Re:The real threat of "government spyware" by robogun · · Score: 2, Funny

      The AV could just take the middle ground with a generic description like "Suspicious Program: E-card Viewer", it is unlikely it will display as "W.32CIPAV j00 R SO FEDERALLY PWNED"

    3. Re:The real threat of "government spyware" by Opportunist · · Score: 1

      How long do you think 'til you can get a "Warning: Trojan.Crypt.Whatever is a CIA/FBI trojan!" from various mailing lists and boards?

      --
      We used to have a Bill of Rights. Now, with the rights gone, all we have left is the bill.
    4. Re:The real threat of "government spyware" by Opportunist · · Score: 1

      Dunno if that plays a role for Vista, but XP doesn't care too much about what's signed how, anything may be and actually is checked by pretty much every AV kit I know.

      Besides, that only serves as a better way to detect it. I give it 2 days 'til the first detector circulates that looks for exactly THIS crypto key signature.

      --
      We used to have a Bill of Rights. Now, with the rights gone, all we have left is the bill.
    5. Re:The real threat of "government spyware" by orclevegam · · Score: 2, Funny

      it is unlikely it will display as "W.32CIPAV j00 R SO FEDERALLY PWNED"

      No, but that would be awsome. Maybe some of the open source antivirus kits out there (I know there's at least one) should use that as the name if they ever manage to get a signature of CIPAV.

      --
      Curiosity was framed, Ignorance killed the cat.
    6. Re:The real threat of "government spyware" by Jah-Wren+Ryel · · Score: 1

      Baloney. You are referring to the NSAKEY and it is not about executable signing, because until Vista+TPM there was no mechanism for executable signing and authentication in MS Windows.

      --
      When information is power, privacy is freedom.
    7. Re:The real threat of "government spyware" by griffjon · · Score: 1

      What about heuristics engines? Will they get a huge "unless" clause tagged on to them?

      What about people with strong firewalls which monitor outbound traffic?

      I have a hard time believing the USGov is competent enough to do this well.

      --
      Returned Peace Corps IT Volunteer
    8. Re:The real threat of "government spyware" by Anonymous Coward · · Score: 0

      No, that's still having a finger pointed at it.

      Chances are, they would just make the thing dang hard to find, and at most, tell any av company that did find it the stay hush-hush. They would also probably grab the heuristics info for heuristics searches to make the program hard to find via those. And if a heuristics program did find it by chance, it wouldn't know that the program is a government program, so it wouldn't be as big of a threat as having a modules in the AV code to 'ignore' the program

    9. Re:The real threat of "government spyware" by mr_mischief · · Score: 3, Insightful

      By the time you've detected it, it's probably already reported everything. IP, MAC, IP address and HTTP request of last packet to ports 80 (or possibly 443 if it gets its information before the SSL encryption), etc. is not difficult nor time consuming to figure out.

    10. Re:The real threat of "government spyware" by Opportunist · · Score: 1

      Still, usually plenty of time to get rid of everything on the computer that might incriminate you.

      --
      We used to have a Bill of Rights. Now, with the rights gone, all we have left is the bill.
    11. Re:The real threat of "government spyware" by Opportunist · · Score: 1

      As soon as they catch anything but teenagers with it, I will start thinking about it. Until then, I say they have no better tools available than the average trojan writer. Probably they are less free in their choice of tools, rather.

      --
      We used to have a Bill of Rights. Now, with the rights gone, all we have left is the bill.
    12. Re:The real threat of "government spyware" by Geoffreyerffoeg · · Score: 1

      This, in turn, would mean, though, that all a potential virus writer has to do is to get his program to match the fed trojan in behaviour and shape, possibly in signature.

      Er, what if AV programs are configured to ignore programs that connect to (and only connect to) cipav.fbi.gov or somesuch? :-)

    13. Re:The real threat of "government spyware" by herve_masson · · Score: 1

      So it's likely they do require AV vendors to avoid finding them

      What makes you believe that the feds are powerful enough to influence all AV vendors, including the few big ones located in europe ? I have hard time to buy that, but it also means that either the feds are clever enough to remain undetected, or the AV are dumb enough to miss them for a very long time. Strange indeed...

    14. Re:The real threat of "government spyware" by plague3106 · · Score: 2, Informative

      Um, you've been able to sign executable in windows since at least Windows 2000. Its call Authenticode, and XP does read it. Vista takes it a step further by warning you if you run an unsigned application.

    15. Re:The real threat of "government spyware" by Anonymous Coward · · Score: 1, Funny

      If they managed a remote install there will be a prompt on my screen about permitting an unknown application to connect to the internet.

    16. Re:The real threat of "government spyware" by querist · · Score: 4, Informative

      Discretion is the better part of valor.

      One of the differences between the virus that your bog-standard AV will detect and this critter from the FBI is the number of instances out there in the wild. Keep in mind that this FBI thing is intentionally sent to specific targets, and I suspect that it is used sparingly in order to prevent it from being found easily.

      Nearly all AV programs rely on signatures. The way they obtain the signatures is first to obtain samples, and then determine how they can identify the program accurately (Hashes, etc). I've discovered new malware and forwarded it to the proper channels, as have others that I know.

      Therefore, the following (simplified) steps must occur:

      1. become infected with the malware
      2. suspect that the machine is infected
      3. correctly isolate the malware (find its parts, etc)

      Then, once those happen one must also do the following in order to hope that protection will be offered to others:

      4. send the sample to one or more anti-malware application support teams for inclusion
      5. wait until the AV/AM team can create a signature
      6. wait until the AV/AM team distribute the signature
      7. wait until people update their AV/AM signature databases.

      As you can see, there are several places where this process can fail. Think of it like phishing, but sort of in reverse. Phishers send out a large number of messages in hope that even if only a very small percentage of recipients (1/100th of one percent, for example) fall for it, they will be able to profit.

      That works just fine if you send out a few hundred thousand messages.

      If you send out only one message, or ten, or twenty, your odds are very close to zero that even one person will "bite".

      This is the critical difference. I doubt that this program is out there on thousands of machines, or hundreds of thousands of machines all over the place. It is "placed" (I know - some victim effort is required) on specific machines.

      Therefore you have a very small victim base. The odds of this being discovered are quite small, even without collusion from the AV vendors.

      This is more like "spearphishing" (who dreams up these phrases?), being specially targeted for one individual. This increases the odds of that one individual falling for the ruse, and since only one person was the target, this works well.

      Things like this make the lives of us who work in security full time much more complicated.

      -Q

    17. Re:The real threat of "government spyware" by meatspray · · Score: 1

      unless it utilized another already authorized application to connect (IE, Trillian, AV Asoftware Update, Windows Update)

    18. Re:The real threat of "government spyware" by Opportunist · · Score: 1

      Pretty accurate. Though AV companies have quite a few venues to draw from when it comes to getting malware. And they also have fairly reliable test mechanisms in place that can discriminate between programs that are behaving like malware and such that are not. Unfortunately, those tests tend to be quite heavy on the machines (you should see some of the farms dedicating to testing programs, quite amazing), so it's impossible to build something like that into the AV scanners.

      The chance that such a program ends up in the hands of an AV company is pretty high. Though they have a rather limited "catch area", usually it doesn't stretch past the borders of country or continent. Which it needn't, since most sensible AV companies have agreements to share the information.

      If such a piece of FBI malware now ends up in the hands of a US based company (which is likely, since it's not very sane of the FBI to employ such a trojan abroad. I'd guess it could be a slight diplomatic problem if they did), I doubt it's hard for the FBI to convince said company that the malware never appeared and that it better isn't including in the info trade.

      --
      We used to have a Bill of Rights. Now, with the rights gone, all we have left is the bill.
    19. Re:The real threat of "government spyware" by Opportunist · · Score: 2, Insightful

      AV programs are amongst the most reversed programs in existance. Malware writers spend hours, days and weeks dissecting AV tools and finding weaknesses in them.

      I think it's fairly secure to assume that one of them would have used a security hole like this in the meantime, e.g. by rewriting the hosts-file, then sending to the (rerouted) cipav.fbi.gov and the AV tool would let it be.

      And this, in turn, would have been detected immediately by an AV company (who is competing with the AV company that lets this leak exist), as soon as they got a sample of that malware.

      Question for 100 bucks: Think we'd have read a blog about it by now?

      Malware writers usually don't care, neither for the FBI nor for the goodwill of AV companies. Actually, they are quite happy when they can piss off both.

      --
      We used to have a Bill of Rights. Now, with the rights gone, all we have left is the bill.
    20. Re:The real threat of "government spyware" by Anonymous Coward · · Score: 0

      If that's the case, then an analysis of current commercial antivirus programs could provide a clue about CIPAV.

      What viruses does McAfee find and then deliberately not report?

    21. Re:The real threat of "government spyware" by GeekZilla · · Score: 2, Informative

      "that's why many european states does not trust windows to run their battleships or other critical military systems. I was assigned to disassembling the windows core logic when I did my mil svc."

      Afraid that Great Britain is more than happy to employ Microsoft software in their warships.

      See this: http://www.theregister.co.uk/2007/02/26/windows_bo xes_at_sea/

      and this:

      http://en.wikipedia.org/wiki/Type_45_destroyer

      --
      Veritas patesco per quaestio questio. Truth is revealed through questions.
    22. Re:The real threat of "government spyware" by Anonymous Coward · · Score: 0

      1. "many" European states. The UK is "one" European state. There are 26 others in the EU, including four which have been officially neutral throughout the cold war (and into the first world war) (IE,SE,AT) and several which ware actually members (or part of members in the CZ/SK case) of the Warsaw Pact (BG,RO,HU,SK,CZ,PL,LT,LV,EE). Slovenia was part of a communist (but ex-Warsaw Pact) state. Finland had an entente with the Soviet Union until the latter collapsed (whereupon the former embraced Norden, that is, the Scandinavian countries, and joined the EU). France quit the operational command of NATO, and has built its independent force de frappe nuclear arsenal, complete with nuclear powered ballistic missile submarines.

      2. The UK has a special relationship with the US, called the MDA (Mutual Defence Agreement), formalized in 1958, and renewed several times since then (most recently in 2004). This commits both parties into a technology and operational sharing scheme with respect to their nuclear arsenals -- legally speaking (and the MDA is a ratified-by-the-Senate treaty), each party will seek out the other's approval to use nuclear weapons. Practically speaking, the UK armed forces purchase many of the same components and systems as the US armed forces do. With the exception of the nuclear warheads themselves (which are a UK design, and manufactured in the UK with UK-produced fissiles), most of what the UK uses in Trident is identical to the systems used in US SSBNs of the same vintage.

      3. Many surface vessels and electronics packages in other weapons platforms are also bought from US-based manufacturers, using mainly the same equiment.

      4. (3) is not unique to the UK; many NATO members do the same. France is the only other declared nuclear power in NATO, and their armed forces pointedly avoid the use of any US-sourced technology. However, even the UK is participating in programmes like Eurofighter, and has invited France to participate in the construction of its forthcoming aircraft carrier, since France will use one of essentially the same design. The computer platforms are likely to differ somewhat, and neither is going to be Windows-heavy (QinetiQ and BAE Systems are the likely sources for everything control critical).

      Sweden (still not in NATO, and not a declared nuclear weapons state, it's fairly obvious why Lise Meitner left Sweden) has a rigorous domestic weapons (interceptor aircraft, submarines, stealth littoral warfare vessels, and so on) industry which uses Swedish software almost exclusively. Sweden's main focus was in dissuading the Soviets from crossing through Sweden on the way to an invasion of Norway, and with the collapse of the Soviet Union, and the recent coziness between NATO and the Baltic states, the threat has waned dramatically.

      It is pretty clear from watching the public back and forth on the topic of sharing the details of the JSF's control systems with the UK armed forces and its primary contractors that any independent state -- allied with the US or otherwise -- operating US-sourced military gear would be wise to "trust, but verify".

      5. Europe is more than just the EU-27. Russia probably uses zero Microsoft products in its military, for example.

    23. Re:The real threat of "government spyware" by Cederic · · Score: 1


      At which point I demand that the UK CPS prosecute the FBI under the Computer Misuse Act, as they'll have broken UK law.

    24. Re:The real threat of "government spyware" by Magada · · Score: 1

      In addition to which, most computers infected with this thing probably end up in the hands of the FBI anyway. I tend to agree with your conclusion.

      --
      Something bad is coming when people are suddenly anxious to tell the truth.
    25. Re:The real threat of "government spyware" by billtouch · · Score: 1

      Are your seriously suggesting that the United States government will call all the German and Russian (etc...) AV writers and tell them to please ignore their sneaky stuff, and actually expect them to do it? You think that wouldn't become the most widely published workaround in history with the AV folks laughing so hard they would be risking a heart attack?

      Might even see a counter program that looks for the footprint and warns people. Someone might pay $29 for that.

      Hmmm....

      Bill

    26. Re:The real threat of "government spyware" by GeekZilla · · Score: 1

      "1. "many" European states. The UK is "one" European state."

      Uh, yeah, I know. I didn't say your facts were wrong, just that GB has chosen to use Windows 2000. GB is one of the European states, hence the comment was relevant (at least I thought so).

      "Practically speaking, the UK armed forces purchase many of the same components and systems as the US armed forces do."

      Not aware of too many military systems being windows based. In fact, I only know of one and it is used in the Naval Coastal Warfare community and that was, uh, sort of recent. We first saw it "upgraded" from a Unix base OS to Windows 2000 in 2002 or 2003. All other systems that I am familiar with in the Navy (no Army, Marine or Air Force experience) are not based on a Windows OS. I have been out of the active duty side of the Navy since 2000 (not counting a recall to active duty since then in late 2001) so I am not as up to speed on what the new US ships are going to be running. I really hope they aren't going to Windows based apps also.

      Of course, my knowledge of computer systems employed on board Navy warships is limited to my experiences and training as an Operations Specialist (http://usmilitary.about.com/od/enlistedjob1/a/os. htm) and being Surface Warfare Specialist qualified. See http://en.wikipedia.org/wiki/Surface_Warfare_Badge and check out the "Enlisted Specialist" section for more information. And, as I mentioned, I am not up to speed on what the U.S. Navy is planning for new ships being built.

      --
      Veritas patesco per quaestio questio. Truth is revealed through questions.
    27. Re:The real threat of "government spyware" by Opportunist · · Score: 1

      He clearly wrote Europe. Not Airstrip One.

      --
      We used to have a Bill of Rights. Now, with the rights gone, all we have left is the bill.
    28. Re:The real threat of "government spyware" by hesaigo999ca · · Score: 1

      whats cool about this process, is that a top notch team of developers can create a single virus signature to send to all AS WELL AS POSTING IT DIRECTLY IN A blackhat underground resource for bots and other malware....and see how quickly people use it to either have their own malware destroy this one or use this and exploit it to create their own mutated version and FORCE the big AV companies to have to cut off all these variants including the FBI's...

      "What if we could all just get along, life would certainly be boring!"

    29. Re:The real threat of "government spyware" by sakasune · · Score: 1

      AV programs are amongst the most reversed programs in existance. Malware writers spend hours, days and weeks dissecting AV tools and finding weaknesses in them.

      I think it's fairly secure to assume that one of them would have used a security hole like this in the meantime, e.g. by rewriting the hosts-file, then sending to the (rerouted) cipav.fbi.gov and the AV tool would let it be.

      And this, in turn, would have been detected immediately by an AV company (who is competing with the AV company that lets this leak exist), as soon as they got a sample of that malware.

      Question for 100 bucks: Think we'd have read a blog about it by now?

      Malware writers usually don't care, neither for the FBI nor for the goodwill of AV companies. Actually, they are quite happy when they can piss off both. Are you the guy constantly making windows appear that tell me my penis needs to be larger or that I should see naked teens get fucked....
      --
      "You're arguing for a universe with fewer waffles in it," I said. "I'm prepared to call that cowardice."
  6. I read the article by Anonymous Coward · · Score: 1, Insightful

    And all I saw was a whole bunch of "Don't know"s and speculation.

    1. Re:I read the article by davidsyes · · Score: 1

      Well, in the vein of "speculation"...

      Then, is this how they brought down mob bosses a few years ago? What is so special about this today than a few years ago?

      Or did they simply use RF/EM surveillance against the keystrokes of that enforcer/boss?

      I've been wondering if a port sniffer/protocol analyzer/keystroke counter were sneaked in via a maintenance person, or flown in by one of those DARPA critters...

      OTOH, depending on the building layout, maybe an "occupant" flushed a stringed bug that deployed lodging arms or self-welded into a pipe at the right spot in the plumbing layout and then went to work...

      Just loose speculations...

      --
      Previously: "Linux... Toward the Sunrise..." Now: "Linux... Toward the-- No, now, part of Every Sunrise"
    2. Re:I read the article by russotto · · Score: 1

      Then, is this how they brought down mob bosses a few years ago? What is so special about this today than a few years ago?


      IIRC, the keyloggers involved there were _hardware_, installed surreptitiously by the FBI.
    3. Re:I read the article by davidsyes · · Score: 1

      SMART criminals (and governments, companies and certain individuals are going to -- for some applications-- start quantum or thermally signature scanning ALL that they bring on premises and real-time comparing known vs suspicious.

      Also, keyboards are cheap, (exposed) wiring is cheap, and many peripherals are, too. Either toss them or get them "debugged".

      Then, turn the premises into a Faraday cage or whatever it takes to keep unwanted, contemptable fracks out ("unwanted, contemptable" being defined by those wanting maximum security/privacy, not by those who perpetrate the spying) of their systems...

      --
      Previously: "Linux... Toward the Sunrise..." Now: "Linux... Toward the-- No, now, part of Every Sunrise"
  7. Nice acronym but... by Statecraftsman · · Score: 4, Funny

    can't we just continue calling this Vista?

    1. Re:Nice acronym but... by Anonymous Coward · · Score: 0

      Brilliant! Couldn't have said it better myself :)

  8. Do they still get spam? by 192939495969798999 · · Score: 2, Interesting

    If they have this amazing tool for tracking people down, do they still get spam at HQ? If so, why not use this to catch the spammers and make them stop? Is it because they're all beyond jurisdiction now?

    --
    stuff |
    1. Re:Do they still get spam? by It+doesn't+come+easy · · Score: 3, Funny

      In the grand scheme of things, spam doesn't rate very high when compared to a bomb threat. Resource limitations dictate that the FBI concentrate on music downloading, bomb threats, and spam, in that order ;)...

      --
      The NSA: The only part of the US government that actually listens.
    2. Re:Do they still get spam? by ScrewMaster · · Score: 1

      On the other hand, if we're talking about big corporate influence on law enforcement priorities, the bandwidth cost of spam is pretty damn high. You would think this would encourage the big boys (the telcos and Comcasts of the country) to spread some money around Washington to motivate the Feds appropriately. They've got more money than God, and AT&T knows its way around Washington like nobody else. That would be one of the few cases where I'd be on the lobbyists' side.

      --
      The higher the technology, the sharper that two-edged sword.
  9. So, if you're a criminal.... by iknownuttin · · Score: 2, Insightful
    MySpace accounts can't receive traditional e-mail, so one hacker standard -- attach the CIPAV to a message and hope the recipient is stupid enough to launch it -- wasn't available. Instead, the most likely tactic would have been to send a URL to the suspect account using MySpace's own instant messaging and/or Web mail system. If the suspect clicked on the link -- it would have had to be enticing, so use your imagination here -- and visited the FBI-owned malicious site, an exploit for a zero-day vulnerability (or unpatched one on the suspect's PC) would have let the government download CIPAV to the target hard drive.

    Don't click on any links sent to you and don't visit any sites sponsored by the FBI.

    I guess if the FBI is targeting you and they know that you like kiddie porn, they would set up a kiddie porn site to get a trojan on your machine.

    --
    I prefer Flambe as apposed flamebait.
    1. Re:So, if you're a criminal.... by Anonymous Coward · · Score: 0

      regardless of its intent, something seems wrong with the FBI *setting up* kiddie porn sites.

    2. Re:So, if you're a criminal.... by Opportunist · · Score: 1

      Well, then I guess they wouldn't really need to install a trojan in your box anymore, would they? They already proved that you tried to access material that's not suitable for you.

      --
      We used to have a Bill of Rights. Now, with the rights gone, all we have left is the bill.
    3. Re:So, if you're a criminal.... by ArcadeX · · Score: 1

      I wonder what a whois on one of these sites would show...

      --
      An I.T. motto in the hands of an idiot is a dangerous thing...
    4. Re:So, if you're a criminal.... by Applekid · · Score: 1

      The idea wouldn't be to stop just the perp but to enbolden them. See who they refer, follow the path of files downloaded as they are redistributed by interested parties. Corrolate time spent hunting for that stuff with time they are on their home computer with the lights off and the curtains closed. Package together a completely undeniable case against them. And if they don't distribute or become brave enough to upload their stash (for the sake of image-hash generating algorithms to quickly let software find kiddie porn), they still pretty much got them anyway. It's a win-win.

      And with any luck they might actually catch a real pedophile instead of some poor shlub that had a virus planted on his machine to explicitly go to those sites without his knowledge for the intentional purpose of getting them busted by the feds. But that's never really been a concern, of course, since that would be bad for the numbers that show the program works.

      --
      More Twoson than Cupertino
    5. Re:So, if you're a criminal.... by dmpyron · · Score: 1

      Alternatively, you make the President's enemies list (any President, now or future). So they install a trojan from any source URI, doesn't have to be anything nastier than a new site to send free e-cards from. Next thing you know, the Feebs are kicking down your door and finding all the kiddie porn "you" downloaded, along with all the traces of kiddie porn "you" uploaded to your friends, all of whom also get busted. Not that I'm paranoid or anything, although I haven't taken my meds in a few days.

    6. Re:So, if you're a criminal.... by vertinox · · Score: 2, Interesting

      Thats why I have always disagreed with the current policy, not because I support the vile people that create such images, but I fear that it would be too easy to frame some one who is innocent.

      There is this Japanese urban legend that when a corporation or Yakuza wants to off someone, they have the sucker win a trip to Indonesia. Then at the airport they slip some drugs in his bag and then give an anonymous tip to the Indonesian authorities.

      The thing is... The penalty for drug possession in Indonesia is death.

      You just got a government to carry out a mob hit for you.

      That said, if you didn't like someone in particular and had a vendetta, putting these images on their machine would be a good way to get rid of them for a long time... Or at least ruin their career and family life.

      I'm surprised the same Russian mob types behind spamming haven't created a scheme to put images on peoples computer and threaten to report them to the FBI if they didn't pay up.

      --
      "I am the king of the Romans, and am superior to rules of grammar!"
      -Sigismund, Holy Roman Emperor (1368-1437)
    7. Re:So, if you're a criminal.... by Torvaun · · Score: 1

      So they send you a link claiming to be a kiddie porn site. When you go there, you find a "Nothing to see here" lookalike with a payload.

      If they can get you to go to the site, what it looks like doesn't matter anymore.

      --
      I see your informative link, and raise you a pithy comment.
    8. Re:So, if you're a criminal.... by Anonymous Coward · · Score: 0

      >> I'm surprised the same Russian mob types behind spamming haven't created a scheme to put images on peoples computer and threaten to report them to the FBI if they didn't pay up.

      That's a great idea! LOL. But old. RIAA and MPAA already do this in some places. Not so long ago their agents ran warez sites in Sweden and were setting people up and busting them for warez and demanding $$$$$.

  10. 60 days after the software had been "activated" by Anonymous Coward · · Score: 0

    Lets stick it to the man by writing an activation crack!!!

    Although that probably won't get us past the FBI update site.

    I guess we will have to slipstream until they crack the Hoover Genuine Advantage program.

  11. But how do they install it?!?! by Daneboy · · Score: 5, Interesting
    How, exactly, do the Men In Black install this uber-spyware on a target system?

    Do they get a warrant, sneak into your home in the dead of night, and install software on your computer?

    Do they mail it to you as a virus, perhaps cleverly disguised as a Nigerian spam scam?

    Do they use the back door that Microsoft agreed to put in all their software in return for being granted Most-Favored Monopoly status by the government?

    Or something else? "You are a suspected pedophile. To clear your name, please click here to install the FBI's internet spyware on your computer"?

    Anyone know?

    --
    /* "Specialization is for insects." -Heinlein */
    1. Re:But how do they install it?!?! by Opportunist · · Score: 3, Interesting

      Maybe it's just a variant of the way MPack infects. Slipping code into inconspicuous pages, redirecting you to an iframe containing an exploit, suitable for your browser, and presto.

      --
      We used to have a Bill of Rights. Now, with the rights gone, all we have left is the bill.
    2. Re:But how do they install it?!?! by Anonymous Coward · · Score: 2, Funny

      Do they get a warrant, sneak into your home in the dead of night, and install software on your computer?

      Yes.
    3. Re:But how do they install it?!?! by mogasm · · Score: 2, Informative

      They have gotten court orders in the past to break into the house for the purpose of installing the spyware

    4. Re:But how do they install it?!?! by BlueParrot · · Score: 2, Funny

      Do they get a warrant, sneak into your home in the dead of night, and install software on your computer?
      You still think they would need a warrant to do so? It is more like:
      try{
      getTarget().addUncostitutionalSpyware();
      }
      catch (SomebodyFoundOutException e){
      getTarget().accuse( new Excuse( Excuse.paedophile , Excuse.terrorist ));
      }
      finally{
      profit();
      }
    5. Re:But how do they install it?!?! by GrievousMistake · · Score: 1

      They could use the ISP. Going beyond passive wiretapping, they could tack the trojan onto any binaries the suspect downloaded. No one really check the checksums anyway... (Incidentally, shouldn't every responsible browser show the checksum of recently downloaded files? And yet I know of no browser that does so...)

      --
      In a fair world, refrigerators would make electricity.
    6. Re:But how do they install it?!?! by alxbtk · · Score: 1

      I don't see how they could use that method to identify someone hiding behind an alias and proxy, though...

    7. Re:But how do they install it?!?! by Anonymous Coward · · Score: 0

      Web browsers don't check checksums, but most distributions' packaging tools do. I don't know about you, but most of my software gets downloaded and installed by "emerge", not by my web browser. It does look at checksums. Of course, that doesn't mean the repository couldn't be subverted. But I don't see how my ISP could do anything to subvert.

    8. Re:But how do they install it?!?! by Anonymous Coward · · Score: 0

      But how do they install it?!?!

      The most common attack vectors are present are how most
      spyware gets on your system.

      ActiveX and javascript.

      Those are the two big offenders presently.

      There are some other vulnerabilities in the MS OS's of course,
      but those are the GIANT GAPING HOLES they refuse to fix.

      Ex-MislTech

    9. Re:But how do they install it?!?! by Anonymous Coward · · Score: 0

      > Slipping code into inconspicuous pages, redirecting you to
      > an iframe containing an exploit, suitable for your browser,
      > and presto.

      That is why one should NEVER connect one's personal machine to
      ANY network. Sure, have an old box connected to the public
      internet if you must go browsing, but all the important work
      must be done off-network.

      Don't tell me you actually generate key-pairs on a machine that
      is connected to the internet...?

    10. Re:But how do they install it?!?! by khundeck · · Score: 1

      > How, exactly, do the Men In Black install this uber-spyware on a target system?

      I'm not sure if you've seen Independence Day, but basically they upload it using a Mac.

      Kurt

  12. Score one for Mac users.. by Anonymous Coward · · Score: 0

    This will be the first time we're glad to hear "Sorry our software doesn't run on MAC's"
    haha

    1. Re:Score one for Mac users.. by Xtravar · · Score: 1

      I think it's safe to say that the Apple demographics don't include people the government wants to go after, aside from maybe fancy pants drug traffickers who the government skims profits from anyway.

      The poor have always been the targets of the government, for whatever socio-political reasons there may be. Everyone knows that rich people rarely get convicted of crimes, as they are least suspect and can afford good lawyers. Poor people are more likely to use PCs, which means "criminals" are more likely to use PCs. Conversely, Macs are status symbols.

      Possession of small amounts of marijuana was a major offense when poor minorities were the only ones caught with it. Then, white suburban kids started to be caught and the penalties were decreased. The government works for the wealthy to suppress the poor because it's the only way to sustain the inequities of capitalism.

      Just playin' devil's tinfoil Marxist advocate! Take with a grain of salt. Have a nice day!

      --
      Buckle your ROFL belt, we're in for some LOLs.
    2. Re:Score one for Mac users.. by Gat0r30y · · Score: 1

      I think it's safe to say that the Apple demographics don't include people the government wants to go after
      Well there just aren't enough rich criminals to make a good demographic. Just goes to show you... crime doesn't pay, at least not well enough for that macbook pro you've been eying.
      --
      Prediction: The real iPhone killer is going to be sex robots from Japan. Think about it.
    3. Re:Score one for Mac users.. by Torvaun · · Score: 1

      It's because rich criminals get their criminal activities legalized.

      --
      I see your informative link, and raise you a pithy comment.
    4. Re:Score one for Mac users.. by Anonymous Coward · · Score: 0

      Homosexuals use Macs more - they also have a higher per capita proportion of molesters so it would make good sense to scan Mac users.

  13. Better question by grasshoppa · · Score: 3, Interesting

    What happens to the first person to get a hold of this software and fully analyze it?

    5 bucks says they get a visit from big men in serious black suits and then are never seen again.

    --
    Mod me down with all of your hatred and your journey towards the dark side will be complete!
    1. Re:Better question by Mattintosh · · Score: 3, Insightful

      That depends on whether they're in the USA or not. If you're in the USA, enjoy your stay at the Gitmo Hilton. If you're not, well, you might not be bothered at all, but don't fly to the USA. Ever.

    2. Re:Better question by Opportunist · · Score: 1

      I'd hold that bet, but it's illegal here to engage in bets when you already know the outcome...

      --
      We used to have a Bill of Rights. Now, with the rights gone, all we have left is the bill.
    3. Re:Better question by gstoddart · · Score: 2, Insightful

      That depends on whether they're in the USA or not. If you're in the USA, enjoy your stay at the Gitmo Hilton. If you're not, well, you might not be bothered at all, but don't fly to the USA.

      Yeah, because the US government has never grabbed someone who is on foreign soil and whisked them away in an airplane late at night when nobody was looking. (No, really.)

      If they want you bad enough, they will send someone to retrieve you. Domestic and international laws be damned. Now, they won't do it for sending spam, but if you seem like a potentially serious enough threat, they will.

      Cheers
      --
      Lost at C:>. Found at C.
  14. Is this really a reliable tool for the FBI? by Vokkyt · · Score: 4, Interesting

    There are many programs out there, such as LittleSnitch for Mac, which are rather adamant about making sure you know everything that is phoning home on your computer. Does the CIPAV have a method of circumventing these road blocks or would the FBI be stumped by the same software that is intended to keep computers safe from malicious software? While I could certainly understand them working with larger developers like Symantec and Microsoft to ensure that their anti-spyware and virus protection software dutifully ignores a product like CIPAV, what about machines running protection applications from smaller developers, or even open source protection, like the ClamAV project?

    Better yet, if programs like CIPAV become more common as a tool for Federal Investigations, does it become a requirement that said programs allow CIPAV and its successors to do their work?

    1. Re:Is this really a reliable tool for the FBI? by BSAtHome · · Score: 1

      Better yet, if programs like CIPAV become more common as a tool for Federal Investigations, does it become a requirement that said programs allow CIPAV and its successors to do their work?
      That would mean mandatory selfincrimination? Don't think that will fly. However, considering the US direction of depleting its freedom resources, who knows.
    2. Re:Is this really a reliable tool for the FBI? by Anonymous Coward · · Score: 0

      Does the CIPAV have a method of circumventing these road blocks or would the FBI be stumped by the same software that is intended to keep computers safe from malicious software? Something tells me they've thought of that...

      One way would be to install an extension to the browser, which could easily open an outbound port 80 request and send the data to some web server.

      This could happen whenever the user accesses any web page, for example. Many existing web pages have links to content such as images that are located at different URL's - by piggy-backing a method "GET" on a normal web page access, the spyware could easily "phone home" without being detected.

      Such a method is nearly transparent and would be silently allowed by the firewall (unless the firewall is blocking all http access, which is highly unlikely)

      Once the o/s is compromised by the trojan, it would be trivial to install a browser extension/plugin to behave similarly to what I've described.

      Of course hooking into the TCP/IP stack directly can also be done, but this would be much more difficult to update without taking down the net system or forcing a reboot...
    3. Re:Is this really a reliable tool for the FBI? by Vokkyt · · Score: 1

      Yeah, but now we're installing two things via Malware; a browser extension and the CIPAV program. That's two things to sneak in, hide, and have run undetected by the computer, and also an assumption that the CIPAV is compatible with the browser used. On top of that, there is still an IP trail in router logs if data is being sent to an unknown location that you never accessed. After that, it's pretty easy to close up access, should the paranoid and disillusioned be watching their router logs carefully.

      Also, While I do understand what you're saying the the method GET, but that's still an outgoing connection that wasn't initiated by the user. (The web access action was, but the CIPAV extension wasn't) Wouldn't the guardian program still pick that up as suspicious activity?

    4. Re:Is this really a reliable tool for the FBI? by Vokkyt · · Score: 2, Interesting

      Also (sorry to double post, but this just came to mind), what happens if it is blockable. Does using the software to prevent CIPAV from calling home constitute a felony for disrupting a Federal investigation? Or, what happens in the case of a rebuild? Is that also considered to be messing with a Federal Investigation if the target is unaware that they are being monitored?

    5. Re:Is this really a reliable tool for the FBI? by Anonymous Coward · · Score: 0

      My guess would be that the cipav methods for calling home were probably designed with avoiding notice by such programs.

      Since the details of cipav are a "law enforcement sensitive secret" we can't say if it works like a rootkit, if its interactions with windows internals were created with cooperation from MS, or even what its capabilities are. At a guess though the information sent back to HQ is fairly small in byte count, this gives them a large number of options for phoning home. At a guess I'd say they encode and then encrypt the info and then piggyback it on normal network protocols.

    6. Re:Is this really a reliable tool for the FBI? by Anonymous Coward · · Score: 0

      >One way would be to install an extension to the browser, which could easily open an outbound port 80 request and >send the data to some web server.

      Yes. It's called the Anti-Phishing Filter ...

    7. Re:Is this really a reliable tool for the FBI? by Anonymous Coward · · Score: 0

      Could you provide the names of a few decent programs for a few other platforms? Windows and Linux are the particular ones that interest me.

    8. Re:Is this really a reliable tool for the FBI? by Anonymous Coward · · Score: 0

      Presumably it would have to hide at the kernel layer, somewhere between the device drivers for the keyboard, mouse, and network protocol stack and the kernel. It would have to be able to hide itself from being detected by 'netstat -a'. Of course, someone could always set up a firewall to record all communications going outside - maybe the communication could be a simple as visiting a website with the data encoded as an URL.

    9. Re:Is this really a reliable tool for the FBI? by Vitriol+Angst · · Score: 1

      YARTGAM
      (Yet Another Reason To Get A Mac)

      I'm pretty sure that Vista has all this tracking software built in and there is no way for you to remove it. I think there are two things going on with all the Domestic spying;
      1) Since Corporations actually write bills now, there is a lot of tit-for-tat going on with government. The Companies like AT&T and Microsoft, do what the government wants, and in exchange the government doesn't pursue it's obligations towards monopoly oversight. AT&T is buying up more telecom companies again -- including baby bell BellSouth, and we haven't heard a peep about Microsoft forcing computer manufacturers to pay for Windows regardless of what they ship (or they retaliate by not giving them OEM discounts).

      2) Companies may also be getting inside information about competitors. The thing about fascism, is that there are winners and losers -- and so if you aren't already a company in bed with the Gov -- you may be on the menu.

      This virus is probably meant for systems that don't already have "Investigation Inside" -- which is actually a good sign. The FBI wouldn't bother making such a thing for Windows XP if they already had a built in; "tell me everything" system in the OS.

      Looking at our current government, acting pretty much like Hoover's FBI -- I wouldn't be surprised if this FBI tracking virus weren't in place but not turned on in as many computers as possible -- you know, just in case they needed it. They wouldn't get a subpoena to infect your PC -- they'd get the subpoena perhaps to turn it on.

      --
      >>"ad space available -- low rates!!!"
  15. What happens to the data collected? by WillAffleckUW · · Score: 3, Funny

    It's sold to commercial firms so they can advertise to you.

    Duh.

    --
    -- Tigger warning: This post may contain tiggers! --
  16. I wouldn't mind running this by Larry+Lightbulb · · Score: 1

    Well, if they took out the phone home aspect - other than that it seems to be a fairly useful monitoring tool.

  17. What if Crackers modify it for themselves? by denis-The-menace · · Score: 3, Interesting

    If AV companies do let the FBI version go through unchecked,
    what if the virus and worm writers of today get a hold of this and modify it for their own purposes?

    --
    Obama's legacy: (N)othing (S)ecure (A)nywhere and (T)error (S)imulation (A)dministration
    1. Re:What if Crackers modify it for themselves? by tokul · · Score: 1

      If AV companies do let the FBI version go through unchecked, what if the virus and worm writers of today get a hold of this and modify it for their own purposes?
      Antiviruses don't work with programs. They work with signatures. If program is modified, signature might change. Generation of signatures differs betweem antiviruses. If modified binary passes antivirus, is it still recognized as whitelisted application or ignored as unknown application.
  18. A lot of effort for 90 days detention. by AltGrendel · · Score: 3, Insightful
    ...Monday, June 18. On July 15, after he pleaded guilty in juvenile court to charges of identity theft and making bomb threats, the teen was sentenced to 90 days' detention.

    They spent a log of money on that. Sounds to me like it was actually a "test run" to make sure things work as expected. And now that they know it will work...

    --
    The simple truth is that interstellar distances will not fit into the human imagination

    - Douglas Adams

    1. Re:A lot of effort for 90 days detention. by Anonymous Coward · · Score: 0

      ...Monday, June 18. On July 15, after he pleaded guilty in juvenile court to charges of identity theft and making bomb threats, the teen was sentenced to 90 days' detention.

      And you said ...

      They spent a log of money on that. Sounds to me like it was actually a "test run" to make sure things work as expected. And now that they know it will work...

      And I say ...

      If this was a test run, they would have plea-bargained him off and kept the snitchware info secret.

    2. Re:A lot of effort for 90 days detention. by DamnStupidElf · · Score: 1

      They spent a log of money on that. Sounds to me like it was actually a "test run" to make sure things work as expected. And now that they know it will work...

      Actually, it works much better than locking someone up for life. 90 days detention is *far* cheaper than 1 year, or 20. The cost of an investigation and court case is probably dwarfed by incarceration costs after just 5 or 10 years.

      You've heard that adage that crime doesn't pay, right? Well, neither does justice. It's horribly expensive. In economic terms, I'm certain that vigilante justice comes out ahead, which is why the RIAA's antics, private prisons, and police states are becoming more popular.

  19. Hey, this is no fair. by Caspian · · Score: 3, Funny

    I demand a Mac OS X port! And a Linux port! The FBI is being unfair! ;)

    --
    With spending like this, exactly what are "conservatives" conserving?
    1. Re:Hey, this is no fair. by Anonymous Coward · · Score: 1

      Since OS X is closed source, you could (and probably already do) have a copy of it already installed on your computer. You'll never know or be able to find out.

    2. Re:Hey, this is no fair. by Anonymous Coward · · Score: 0

      I demand a Mac OS X port! And a Linux port! The FBI is being unfair! ;)

      We're not being unfair. Rest assured that a port exists for your operating system. You're running it now.

  20. Let's check... by Jeff+Carr · · Score: 5, Funny

    $sudo apt-get remove cipav
    Reading package lists... Done
    Building dependency tree
    Reading state information... Done
    E: Couldn't find package cipav

    Whew, safe!

    --
    The television will not be revolutionized.
  21. Is it copy-protected? by Sloppy · · Score: 1

    Wow, people are worried about it spreading itself to other computers, deliberately or accidentally. It seems like the FBI has a bigger problem here: they're giving a spying tool to exactly the kind of people who, in the FBI's opinion, are less trustworthy than the average citizen. They give it to them, in the hopes that the suspected criminal will install it on their own machine instead of someone else's.

    Think about this series of events: FBI looks into a kiddie porn / pedophile ring, and tries to trick the suspects into installing this spyware. The pedophiles think, "Oh wow, what do we have here?" and forwards the spyware to the kids. Now the pedophiles are logging the kids' keystrokes (or whatever the hell this software does) and learning what websites the kids visit, so as to make easier contact. Thanks, government.

    You shouldn't lose sight of the fact that trojans aren't like other surveillance tools, where the spy does something "to" the spied-upon. With trojans, you have to give the weapon to the person you intend to use it against, and hope that they use it correctly. The Greeks must have been very relieved that the Trojans didn't accept their gift with the words, "Thanks for the bonfire wood; we're gonna have a hell of a party tonight!"

    Obviously, the solution to this is for the FBI to print a special hard-to-photocopy manual that goes with CIPAV, and distribute the manual to the suspects. When the suspect boots their computer, display a prompt, "In order to have your network packets directed to fbi.gov, please enter the third word from the fifth line on page 28." Then keep tabs on making sure the suspects don't somehow find a way to copy the manuals and hand them out to their victims. ;-)

    --
    As copyright owner of this comment, I authorize everyone to defeat any technological measure which limits access to it.
    1. Re:Is it copy-protected? by Anonymous Coward · · Score: 0
      You bring up a potentially valid concern, but you present an absolutely ridiculous scenario:

      Think about this series of events: FBI looks into a kiddie porn / pedophile ring, and tries to trick the suspects into installing this spyware. The pedophiles think, "Oh wow, what do we have here?" and forwards the spyware to the kids. Now the pedophiles are logging the kids' keystrokes (or whatever the hell this software does) and learning what websites the kids visit, so as to make easier contact. Thanks, government.

      Yes, the scary web monsters will log the kid's keystrokes, and once they find out that the target child visits Disney.com they will have that child in their evil clutches in no time! Muwhahahaha! Why scope for a potential victim in their own town when they can gather information and web-habits about a child half a world away?

      Sounds like you've been absorbing a bit too much American (western?) media. Despite what you may hear, sexual predators on the internet are not the greatest current threat to civilization.

    2. Re:Is it copy-protected? by Sloppy · · Score: 1

      Sounds like you've been absorbing a bit too much American (western?) media.
      Well, no, just trying to push popular buttons. Won't somebody think of the children?
      --
      As copyright owner of this comment, I authorize everyone to defeat any technological measure which limits access to it.
    3. Re:Is it copy-protected? by dmpyron · · Score: 1

      Never mind kiddie porn (a specious example, at best). The Feebs are also tasked with domestic spying and enforcement of Federal laws. So they install a copy on Abdullah's machine. Or Vladamir's. Or Vitorio's. But it gets caught (they're all smart enough to run a spyware checker from a non US vendor). Now they have "the perfect tool". Sooner or later this is going to happen.

    4. Re:Is it copy-protected? by Anonymous Coward · · Score: 0

      Obviously, the solution to this is for the FBI to print a special hard-to-photocopy manual that goes with CIPAV, and distribute the manual to the suspects. When the suspect boots their computer, display a prompt, "In order to have your network packets directed to fbi.gov, please enter the third word from the fifth line on page 28." Then keep tabs on making sure the suspects don't somehow find a way to copy the manuals and hand them out to their victims. ;-) The government would like to view everything you do on your computer: Cancel or Allow?

      Seriously, if that came up, you know you wouldn't even let the computer boot if you had infringing evidence, and it would give you time to destroy everything and reformat the drive (I sure as heck would for fear of the RIAA coming to grab 3 grand+ regardless if I win or lose in court)
  22. Moral to this story? by JimDaGeek · · Score: 2, Insightful

    Don't use a MS Windows based OS if you want to do stupid stuff. Odds are that these type of government programs are only targeting the large user base of MS Windows. Use Linux, *BSD or Mac OS X and flip the government the birdie! ;-)

    --
    General, you are listening to a machine! Do the world a favor and don't act like one.
    1. Re:Moral to this story? by JimDaGeek · · Score: 1
      Sorry to reply to myself. I forgot the last line:

      Use Linux, *BSD or Mac OS X and flip the government the birdie! Or don't do stupid stuff


      Oh, I just had another idea. Does anyone know of a list of most of these government sites? Why not just block them at the firewall level? Or for n00bs use something like PeerGuardian.
      --
      General, you are listening to a machine! Do the world a favor and don't act like one.
    2. Re:Moral to this story? by eclectro · · Score: 1

      The same way that they have an unpublished exploit for Windows makes you wonder if they also don't have one for Mac OS and Linux too.

      --
      Take the cheese to sickbay, the doctor should see it as soon as possible - B'Elanna Torres, "Learning Curve"
    3. Re:Moral to this story? by JimDaGeek · · Score: 2, Informative

      Linux is open source, how exactly would they have an "unpublished" exploit? There are a lot more people looking for bugs for Linux than the FBI have searching Linux for some exploit they could take advantage of. Oh, and the FBI would only be able to use a exploit they found first for a few times before it is patched and all through the Linux Community.

      As for MS Windows, if there is an unknown exploit, maybe MS would leave it there with a little nudge and wink from the FBI?

      As for OS X, the core is open source *BSD based, so would be the same there as for Linux. However, the proprietary stuff of OS X could have an unpublished exploit. Though I don't think Apple would be as willing to help out the FBI and keep things under wraps. The thing going for Apple are Apple fans. If Apple really screwed over their fans, their business would collapse.

      --
      General, you are listening to a machine! Do the world a favor and don't act like one.
    4. Re:Moral to this story? by eclectro · · Score: 1

      Well maybe. There are a couple of things to keep in mind. First, the government has far more resources to accomplish things that even the most dedicated hacker can't think of.

      Secondly, while the linux kernel may not be suspect, the parts around it may be. Such as a driver or bios exploit like ACPI which can be platform independent.

      From a security standpoint, I think it is foolish to rule it out. Just as recently July 19 a security update was released for an exploit with a linux driver that allowed kernel access. Because it is unlikely does not make it impossible, esp. with the money/connections that the government has.

      Windows on the other hand, I consider to be an open door.

      --
      Take the cheese to sickbay, the doctor should see it as soon as possible - B'Elanna Torres, "Learning Curve"
  23. Yes... millions of taxpayer dollars have been... by DaedalusLogic · · Score: 2, Funny

    Spent on a sophisticated solution for detecting your IP address, and the FBI has integrated THIS into CIPAV.

  24. Some More Speculation on Installation Methods by Dreamland · · Score: 5, Interesting

    Some more speculation on installation methods of CIPAV can be found here:

    http://blog.misec.net/2007/07/31/3/

    Specifically, it looks like the FBI may have several ready-made exploits, each targeting a different OS/web browser combination. An interesting question, then, is what they would do if they encountered a system that is fully patched and running a more secure browser such as Firefox. Does the FBI have access to their own zero-day exploits that they can whip out to install this trojan? If so, is it possible they have their own team of hackers set out to find such exploits?

    1. Re:Some More Speculation on Installation Methods by Anonymous Coward · · Score: 0

      Or better yet, what if you are booting from one of those "Live CD" versions of Linux, sending your threats and then booting back to normal for other everyday use, or even using a virtual machine to do this (imagine one modified to report a random MAC each time on top of that) and just throwing out the image and using a backup each time?

      This will catch the stupid, but not the seriously criminal or paranoid.

    2. Re:Some More Speculation on Installation Methods by Anonymous Coward · · Score: 0

      It seems you assume that all operating systems are designed in such a way that breakin is only possible "exploiting" a "vulnerability" that has not been "patched".
      But what if operating systems in wide use simply contain a backdoor for installation of such software?

    3. Re:Some More Speculation on Installation Methods by Anonymous Coward · · Score: 0

      Of course the Feeble Eye employ hackers... Every Gov't agency does! Most larger law enforcement agencies do as well. In fact the NSA employs mostly hackers or cryptography experts. Get with the times. Zero day exploits, malware, viruses, trojans, rootkits, you name it, the feds got some of their own. Even the Canadian law enforcement agencies have teams of hackers and social engineers working for them. In fact the RCMP (Canadian) was the first entity in the world to create computer forensic tools for court purposes and were used exclusively by the FBI until EnCase and FTK came around. I know most people think that law enforcement is behind the curve with tech but they were developing rootkits before most people wrote their first hello world Bash script.

    4. Re:Some More Speculation on Installation Methods by LurkerXXX · · Score: 1

      If so, is it possible they have their own team of hackers set out to find such exploits?

      In a word? Duh.

      They probably don't have their own but call on another 3 letter agency for them. The NSA are the monster intel agency, and they provide many tools and services for the other 3 letter folks. They've made trojan'd printers etc before for invasions of other countries networks. Finding holes in, or clandestinely adding them to software/OSs is probably the full time work of a good sized team.

    5. Re:Some More Speculation on Installation Methods by Jherek+Carnelian · · Score: 1

      They've made trojan'd printers etc before for invasions of other countries networks. No they haven't. It's a hoax.
    6. Re:Some More Speculation on Installation Methods by Anonymous Coward · · Score: 0

      Does the FBI have access to their own zero-day exploits

      The FBI is technically incompetent -- I have seen them in action. The way they are getting this crap installed is by sending porn spam to pedophiles who click on links to the trojan or they get a warrant and break into the home/office/dorm and install it directly on the target system (used numerous times against the Mob).

  25. Maybe... by DaedalusLogic · · Score: 1

    "Always trust sofware from FBI.gov" is turned on by default in some browsers?

  26. don't forget #3 by conspirator57 · · Score: 1

    3) there are things the government won't bother to prosecute you for, but will instead send you either to Cuba, ER countries, or any other varieties of violation of due process that haven't made it to the public ken.

    --
    "If still these truths be held to be
    Self evident."
    -Edna St. Vincent Millay
  27. typical hysterical twit by circletimessquare · · Score: 1

    "If you're in the USA, enjoy your stay at the Gitmo Hilton. If you're not, well, you might not be bothered at all"

    what is this, humor? does anyone actually believe this represents a fair depiction of how dissent, spying, and enemies of the state are handled by the usa, and *laugh* other governments in the world?

    the usa has plenty of problems, don't get me wrong. but if you analyze any other country and the way they handle spying and rights, guess what? the usa doesn't look so bad

    does this excuse the usa? no

    but what it does mean is that those who use the "you're going to gitmo" angle when criticizing the usa's spy actions just sound ignorant

    go ahead and criticize the usa, be my guest. but please try to sound vaguely educated on the subject matter of world governments, rights of citizens, and government abuses and where the usa stands in that spectrum

    you don't bring a critical eye on the usa and its bad behavior, which is what the usa deserves. no, instead you just make those who oppose the usa's spy efforts sound like retards

    --
    intellectual property law is philosophically incoherent. it is your moral duty to ignore it or sabotage it
    1. Re:typical hysterical twit by conspirator57 · · Score: 1

      "but what it does mean is that those who use the "you're going to gitmo" angle when criticizing the usa's spy actions just sound ignorant

      go ahead and criticize the usa, be my guest. but please try to sound vaguely educated on the subject matter of world governments, rights of citizens, and government abuses and where the usa stands in that spectrum"

      Once they violate the various Constitutional protections we had (I mean have; yeah that's it) for one reason, they have precedent to expand their reasons for doing so. It is intolerable to allow the government to break these rules for any citizen for any reason. If you allow it to occur at all, then eventually the government will break any rule for any reason at all. Oh, wait, by my count more provisions of the Constitution are ignored now than at any prior point in our history.

      When Lincoln suspended Habeas Corpus during the Civil War (a time when, unlike now, there was a legitimate threat to the continued existence of the US), his actions were questioned as unconstitutional. How's that for vaguely educated?

      --
      "If still these truths be held to be
      Self evident."
      -Edna St. Vincent Millay
    2. Re:typical hysterical twit by janrinok · · Score: 1

      I think that he still made a valid point. Whether other countries are any better is debatable, but the USA has crossed several boundaries by holding people in Gitmo without due legal process of any kind. There is no justification for it at all. I do not think that the FBI are quite there yet but, from the outside, there doesn't seem to be much that will stop them if that is what they want to do. But the FBI are breaking the law - it is illegal to put software on someone else's computer without their permission - its just that you think that because they are the FBI then it should be OK. Is this done with a warrant? How do you know? Have the FBI ever exceeded their permitted boundaries? (Yes - only a few weeks ago there was a /. post about them having to apologise for other abuses). Has the USA ever detained people in transit through the USA? (Yes). So the GP was stating pretty accurately how the US actions are viewed, rightly or wrongly, by many around the world. Of course you will want to defend the US, but your response didn't convince me that that view is wrong. It simply looked as though it is true but you were a bit pissed about it.

      --
      Have a look at soylentnews.org for a different view
    3. Re:typical hysterical twit by Anonymous Coward · · Score: 0

      the USA has crossed several boundaries by holding people in Gitmo without due legal process of any kind

      but they're terrorists! We already know they're guilty!

    4. Re:typical hysterical twit by Anonymous Coward · · Score: 0

      Hmm. That's just a refined form of the "We're not as bad as North Korea" argument, though.

      I'm not in the US but the US authorities can legally make life very unpleasant for me. My foolish Government signed a one-way extradition treaty with them, which allows the US government to move me to a US prison on US soil for any reason, and I have no legal recourse to stop this.

    5. Re:typical hysterical twit by Anonymous Coward · · Score: 0

      the usa has plenty of problems, don't get me wrong. but if you analyze any other country and the way they handle spying and rights, guess what? the usa doesn't look so bad Who are you comparing with? China? The USA should be compared to the "freer" nations of the world since that is the level it should aspire to and I don't think it's faring very well against those. When comparing on issues like rights of citizens set your standard high, not low.
  28. What difference does it make? by Anonymous Coward · · Score: 0

    So long as they convict someone, they don't care.

  29. Zombie or not, one specimen WILL be found. by arth1 · · Score: 4, Interesting
    Another worry is if someone finds it, how good precautions are there that it's immune to subversion, in multiple ways:
    • Sending false data to the feds. With my knowledge of the bureau, I doubt they would ever question the data they receive. (The healthy paranoid people who might ask questions either get fired, or end up in different government branches).
    • Using the app or information in it to launch an attack to the fed's own clandestine systems. This could include modifying the data sent to try to trigger a buffer over/underflow, or simply brute force DoS the target destination through a botnet.
    • If it contains backdoor functionality, replace it with a honeypot and gain access to passwords and client info of the feds trying to access it.
    • Modifying the app too send data not to the feds but to somewhere else. This would be the holy grail of trojans, as it's likely that most AV software have specific exceptions for ignoring software from the government.

    1. Re:Zombie or not, one specimen WILL be found. by Reziac · · Score: 1

      Good questions all. I've no doubt there are hackers out there who are good enough to disassemble and subvert such an app.

      I'm reminded of this old jape:

      "If the enemy is in range... SO ARE YOU!"

      --
      ~REZ~ #43301. Who'd fake being me anyway?
    2. Re:Zombie or not, one specimen WILL be found. by ScrewMaster · · Score: 2, Funny

      I'm sure they've accounted for the possibilities you've raised (excellent points, by the way.) And, if you were to actually ask the FBI about those issues, I'm sure the conversation would go something like this:

      Brody: The CIPAV is a source of unspeakable power and it has to be researched!

      Eaton: And it will be, I assure you Dr. Brody, Dr. Jones. We have top men working on it right now.

      Jones: Who?

      Eaton: Top men.

      --
      The higher the technology, the sharper that two-edged sword.
    3. Re:Zombie or not, one specimen WILL be found. by Gazzonyx · · Score: 2, Insightful
      Thanks, I didn't want to sleep tonight, anyways.


      Let's up the ante and get this thing going - I'll throw in $10 to the first slashdotter who contains and publishes the 'bins' and/or reverse engineers this piece of code. $20 if you can isolate the signature of executables that it's binded to with a high degree of success (say, =>75% confidence). It's $10 well spent to sleep at night, IMO. I kinda' want to play with this thing and I'm willing to fund the hunt for it. Anyone else wanna' throw in?

      --

      If I mod you up, it doesn't necessarily mean I agree with what you've said, sorry.

    4. Re:Zombie or not, one specimen WILL be found. by Anonymous Coward · · Score: 0

      Eaton: Top men.


      Top men are eaten, yes.
  30. Not My Question by Nom+du+Keyboard · · Score: 1
    What happens to the data the CIPAV collects? Does the CIPAV capture keystrokes? Can the CIPAV spread on its own to other computers, either purposefully or by accident? Does it erase itself after its job is done?

    How about: Which anti-virus/anti-spyware programs detect and remove it?

    And which firewalls successfully block it? (Be funny of PeerGuardian takes it out.)

    --
    "It's the height of ridiculousness to say for those 9 lines you get hundreds of millions."
  31. Is it a work of the US government? by Anonymous Coward · · Score: 0

    If it was written in-house, it is public domain. It may be protected by secrecy laws, but it has no copyright protection. If it was written by an outside contractor, then it might be copyright to someone else.

  32. Third Time Slashdot Has Wrong CIPAV Story Version by Anonymous Coward · · Score: 1, Informative

    This is the third time Slashdot has featured a story on CIPAV, and not one of them has been as thorough as the original story broken by Kevin Poulsen at Wired News. http://www.wired.com/politics/law/news/2007/07/fbi _spyware?currentPage=all Declan McCullagh at News.com simply re-wrote Poulsen's story and introduced errors (slashdotting #1). Heise doesn't write original content (slashdot #2, a clear dupe) and this Computer World article (slashdot #3) looks like a later version of this: http://blog.wired.com/27bstroke6/2007/07/fbi-spywa re-how.html.

    How about some Slashdot love for the reporter who broke the story?

  33. Re: How does it get installed? by RudeIota · · Score: 0

    Internet Explorer... Duh!

    --
    Fact: Everything I say is fiction.
  34. I can answer that ... by ScrewMaster · · Score: 1

    CIPAV stands for 'Computer and Internet Protocol Address Verifier'

    No, it stands for "Covert Information Poaching Automated Virus"

    --
    The higher the technology, the sharper that two-edged sword.
  35. If you find an infected web site ... by PPH · · Score: 1
    .. don't report it or clean it off. Instead:

    1) Get a couple of 'virgin' PCs. Get them infected.
    2) Make up some plausible identities as various members of the Defense Department.
    3) E-Mail back and forth about your plans for the pending military coup. Specifically, how you are going to have to neutralize the FBI.
    4) Sit back and watch the fireworks.

    --
    Have gnu, will travel.
  36. Not sure what the Issue is... by dippitydoo · · Score: 1

    By the time this came out, they have moved onto something else. Kinda like the military equipment. They were using cordless phones and walkie talkies loooong before they came out on the market for consumers. Dude, it's in the cheese! During a full moon, the cheese radiates an .ANI exploit to surrounding computers and downloads the CIPAV from ebay. Simple as PIE. Or they use that crazy device in a van outside your house to view everything you are doing on the computer. Only on /.

  37. This is Slashdot, people! by TheVelvetFlamebait · · Score: 2, Funny

    Since when did we ever let little things like evidence or common sense get in the way of a nice bit of conspiracy theorising?

    --
    You know, there is a difference between trolling and pointing out the flaws in your reasoning. Just saying.
  38. does it...Sealing in the juices. by Anonymous Coward · · Score: 0

    "Just because the software is partially paid for by the government, it does not necessarily follow that it's a back door. Take off the tinfoil hat."

    Sorry, but the tinfoil hat has a backdoor in it. Something to do with letting out steam during the cooking process.

    1. Re:does it...Sealing in the juices. by ozbird · · Score: 1

      I can't believe they still fall for that one... Tinfoil hats are antennas designed to increase the reception of mind-control beams, not block them.

  39. Re:willfull ignorance by anti-malware vendors by morethanapapercert · · Score: 1

    What you said made me think of a (somewhat) related topic. Several people have posted about the possibility of the big AV vendors and such excluding "official" malware from detection signature libraries. Several mechanisms have been suggested, ranging from voluntary participation to being required by secret Homeland Security legislation. I see several potential problems with the idea of the AV crowd secretly ignoring *any* official malware for *any* reason.
    1) Even under the threat of Star Chamber "justice", you could never get 100% compliance from the security community.
          a) I am NOT a security type, but it seems to me that much of what these surveillance wares do exhibits the exact same behaviors as many existing threats. (In fact, the article suggests they are based on existing and known flaws.) AFAIK; not all threats are detected by the signature of the files involved (Whether it be created, changed or moved). Some are detected purely by behavior. Even if $AV-VENDOR1 *did* create an update that ignores the tool, until ALL of the users (legit and pirate alike) had that update, there is a risk that the so-called "out of date" suite on a targets computer might detect the surveillance-ware based on behavior.
          b)OK, so you got $AV-VENDOR1 and $AV-VENDOR2 to play ball with the Feds, what about $AV-VENDOR 3, 4, ..., n ? How quick can you get every US based vendor up to speed and have updates pushed to all of their customers?
          c)Not every security company is subject to US law or the FBI's powers of persuasion. What about European companies? (Although that also raises the possibility of Euro AV folk cooperating with Interpol I guess.)
    2) To hide something like this would require the involvement of many people scattered all over the place. Sooner or later, someone would spill the beans.
    3) How specific is it? from the little I actually read, it sounds like a highly Windows-centric and highly focused tool. TFA mentions the possibility of putting one version after another onto a Myspace site until the target is successfully infected. Are *all* the versions going to be officially invisible as far as the AV crowd is concerned?

    It strikes me that there are analogies to make regarding surveillance-ware and malware authors to the closed source vs open source thing. Consider this, the malware threat out there is huge, there are many skilled (and not so skilled) who stand to make a lot of money by owing your machine. Thus there are the black hat "many eyes" scrutinizing code trying to find a new and exploitable flaw compared to comparatively few white hat workers trying to exploit the same code to uphold the law. And even more white and gray hats finding these flaws so they can fix them first. The open source supporters claim that many eyes make for more secure code bases and I agree. But by the same reasoning, more black hats looking for exploits than cops means the black hats will have a better arsenal at their disposal.
      For now at least, the security community seems to be holding it's own against the black hats. Without the complicity of the security community, surveillance developers would have a damn hard time coming up with something that the crackers haven't already done and the security guys haven't already fixed. Anyone who is possessed of sufficient clue to do what I consider routine maintenance for computers (updated security suite, properly configured firewall, patched OS) is going to be a tough target for this sort of thing.

    --
    I need a wheelchair van for my son. Help me get the word out. https://www.gofundme.com/wheelchair-van-for-jj
  40. Re: What We Know About the FBI's CIPAV Spyware by herve_masson · · Score: 1

    There are known knowns. These are things we know that we know. There are known unkowns. That is to say, there are things we know we don't know. But, there are also unknown unknowns. These are things we don't know we don't know.

  41. you sound upset about that by circletimessquare · · Score: 1

    how upset are you about this?

    do you have a human conscience on the issues of basic human rights?

    or do you just have an american conscience?

    the world doesn't revolve around the usa. why do you?

    --
    intellectual property law is philosophically incoherent. it is your moral duty to ignore it or sabotage it
  42. i understand by circletimessquare · · Score: 1

    there is a road to fascism and ignoring human rights. and although some countries are a mile down that road, we're going to scream bloody murder only because the usa has moved a yard down that road

    http://www.nytimes.com/2007/08/02/world/middleeast /02iran.html

    how do you feel about this story this morning?

    i mean, do you care about the universal human issue of basic human rights? or does the concept only enter your mind when the usa is involved somehow?

    do you have a human conscience? or an american conscience?

    the world doesn't revolve around the usa. why do you?

    --
    intellectual property law is philosophically incoherent. it is your moral duty to ignore it or sabotage it
    1. Re:i understand by janrinok · · Score: 1

      I am NOT an American. I do NOT revolve around the USA, nor do I believe that the world does either. Although I have many American friends I do not like the way that the USA is throwing its weight around at the moment. If you care to read my posting history you would learn something of my views.

      I do not like the story from Iran, but it does not mean that the USA does nothing wrong. I care quite passionately about human rights which is why I, like many others, do not approve of gitmo, rendition, or the gradual erosion of human rights. I do 'scream bloody murder' about abuses which occur in other countries, but I do not do it on /. because this is not the appropriate forum. I'll make my voice heard where it might have some effect, but not here just to please you.

      "Every journey begins with a single step". The fact that the US has taken the first few steps down the road to abusing human rights, but perhaps will go no further, does not mean that I believe that it is already as bad as some other countries. On the other hand, the fact that Iran (as reported in the link that you gave me) has the death penalty is something that both it and the USA have in common. Many civilised countries have abolished the death penalty completely. But, in this instance, I would say that you have probably quoted the wrong article to me because all you have done is convince me that both the USA and Iran are, in some ways, very similar to each other. They both carry out barbaric executions under the guise of 'justice'. Now, tell me again please, how does that help your argument against the original post that you criticised?

      --
      Have a look at soylentnews.org for a different view
  43. so let me get this straight by circletimessquare · · Score: 1

    there is a road to fascism and ignoring human rights. we both understand that. you allude to a slippery slope

    so when the usa moves a yard down that road, you are going to get your panties in a twist and scream bloody murder

    but when other countries are a MILE down that road, we're not going to say one peep

    that's my problem with you

    http://www.nytimes.com/2007/08/02/world/middleeast /02iran.html

    just picked that story from this morning, out of many i could have picked over many days and many countries

    how do you feel about this story?

    i mean, do you care about the universal human issue of basic human rights? or does the concept only enter your mind when the usa is involved somehow?

    do you have a human conscience? or an american conscience?

    the world doesn't revolve around the usa. why do you?

    i have a problem with people who scream bloody murder when the usa infringes rights (and it does, and it needs to be criticized for that)

    but i never hear a peep from that crowd when other countries do far, far worse

    why is that?

    --
    intellectual property law is philosophically incoherent. it is your moral duty to ignore it or sabotage it
  44. Because we make claims by conspirator57 · · Score: 1

    Iran does not make claims that align with your (or my) worldview of human rights.

    We do. Constantly. Even while at the same time infringing (or trampling) those rights.

    It's called hypocrisy. And we can little afford it in the country that claims (there's that word again) to be the beacon of freedom.

    True, occasionally one of these countries makes some claim or other about valuing freedom or about how the US is worse than they are and most of us scoff because of their lack of credibility and move on.

    I have a conscience. It's rooted in the principle of free will and self determination. See Immanuel Kant's works for a dry, but good read. What right have I got (or have we as a country got) to interfere in the affairs of a group of people who (mostly) consent to be governed by and agree with their current political situation? Yes it's different from us! While I empathize and wish dearly that more of the world would see our (for the most part) example and want the freedoms we value and often possess, it is slavery to impose it on them against their aggregate will.

    Is it conscionable of you to impose your beliefs on a group of people who by and large reject them?

    And personally, I do take issue with things that occur in other countries, but I'm somewhat limited in my impact. For instance I avoid Chinese products as often as possible because of their record for killing and enslaving peaceful protesters. (Remember Tiannamen Square? I do. The problem is that few of us do, and our media is so caught up in the sensationalist now that they ignore history, even as it relates to that now.)

    Again, I am, as was George Washington and many brighter persons than I or our current leadership in either authoritarian party, opposed to involving ourselves in entangling foreign alliances. That being said, the part of the reasoning for taking out Saddam that I agreed the most with as a *putative* UN action, before we went in without the UN was his ill treatment of large numbers of his people.

    --
    "If still these truths be held to be
    Self evident."
    -Edna St. Vincent Millay
  45. let's see if you can by circletimessquare · · Score: 1

    wrap your mind around this concept:

    the only morally and intellectually defensible position on human rights is a global one

    because we're talking about human rights. not american rights. not iranian rights

    so when you criticize one country more than another, and the former does far less abuses than the latter, you don't have a human conscience. your level of criticism must match the level of abuse

    otherwise, you have an american conscience: an obsession with america... which is fine, actually. just admit that you don't care about human rights. you only care about rights within your ethnic enclace. you could care less how bad things are elsewhere in the world

    in your mind, human rights ends at the rio grande, the rock of gibraltar, the straights of bosporus. what happens beyond that is not your concern. no matter how many are hurt how badly

    but if something bad happens within those bounds. my god, we must scream bloody murder

    i wish it worked that way. it would make life easier. unfortunately, in today's world of the internet and jet air travel, you can not divide the world and your concern for abuses in it so conveniently. what happens in kandahar matters in downtown manhattan. what happens in riyadh has an effect on barcelona. what happens in canberra makes a difference in bali

    this is the new truth of our global world. you need to update what you consider your moral conscience. right now, you don't have one. you have an ethnic, tribally driven obsession with only one part of the world, and you are all to happy to ignore abuses outside of your little enclave

    doesn't work that way any more friend

    the only morally and intellectually defensible position on human rights is a global one

    think about it, and update your words

    --
    intellectual property law is philosophically incoherent. it is your moral duty to ignore it or sabotage it
    1. Re:let's see if you can by conspirator57 · · Score: 1

      I've wrapped my mind around that drivel and rejected it. Who decides what rights are ascribed to the set of human rights?

      If it's done by the culture with the most population, then it'll be a knock-down, drag-out between the Chinese and Islam. Personally, I don't want to live under either of their ideas of human rights.

      How many people will you deprive of their rights to freedom and possibly life in pursuit of your view of their rights?

      And you obviously didn't get to the point in my previous post where I alter my behavior to avoid doing business with countries I consider evil.

      --
      "If still these truths be held to be
      Self evident."
      -Edna St. Vincent Millay
  46. got it by circletimessquare · · Score: 1

    look, that guy is littering

    better scream high holy indignation

    look, that other guy is stabbing someone

    but i can't criticize him, because that guy is a little further away from me

    i have a human conscience

    --
    intellectual property law is philosophically incoherent. it is your moral duty to ignore it or sabotage it
    1. Re:got it by conspirator57 · · Score: 1

      that's a pretty trivial, oversimplified, and tangentially related reductio ad absurdam, so I won't go any further on it.

      As i asked above, what is the source of the values in your "human conscience"?

      Judeo-Christian?
      Evolutionist (Social or Biological)?
      Hindu?
      Muslim?
      Shinto?
      Communism?
      Buddhism?
      Something Else?

      If it is a synthesis, how will you resolve differences?

      Population supporting a given belief?
      Your divine right to impose your belief on others?

      How can you not see that imposing your beliefs on others contradicts your alleged beliefs?

      --
      "If still these truths be held to be
      Self evident."
      -Edna St. Vincent Millay
    2. Re:got it by circletimessquare · · Score: 1

      http://www.un.org/Overview/rights.html

      please tell me your objections to the imposing of these beliefs anywhere, and why you think there should be an area of the world where slavery should exist, for example, or people should be forced into marriage

      you can't impose something that is universally recognized as your right

      if, for example, you dismantled a government that egregiously abuses rights, that's not an imposition of anything, that's a liberation

      how can i impose on you something you already agree is your right? couild you explain that to me?

      the only thing that can be "imposed" is the removal of those who abuse your rights

      and of course the group that is doing the abusing will kick and scream bloody murder and oppose their dismantling with great anger

      but it would pretty silly to side with the "rights" of the government that abuses its citizens, and not the citizens themselves

      right?

      please educate me on what i don't understand here

      --
      intellectual property law is philosophically incoherent. it is your moral duty to ignore it or sabotage it
    3. Re:got it by conspirator57 · · Score: 1

      So, the UN is your moral compass... I think you could have chosen better, given the trouble its own members have in abiding by those... and the political variance in enactment and enforcement of violations by members.

      That aside, historically there have been legitimate cultural variances from those ideals that are generally amenable to the members of the cultures in question. Most arise in matters of justice.

      e.g. in some cultures, the family of a murder victim is entitled to the fruits of the murderer's labor. In our society, this is done by means of a civil law suit. In other countries, this is done by indentured servitude, or yes, slavery. Sometimes the servitude has been to the state and other times to the family. Aside from risk of vigilantism on the part of the victims family, at the end of the day, what is the functional difference between garnishing wages to satisfy a civil law judgement and having to work (in)directly for someone? In both scenarios the result is less freedom and worse living conditions. Both are accepted by their respective cultures.

      Besides which there are some cultures that do not accept a variety of these tenets out of hand.

      You, sir, are an "Arrogant American."

      Enforce your will for change in other cultures economically, I guarantee you'll see better results in the long haul. Enforcing your will by removing obstacles (as you refer to existing governments) by force will be counterproductive (in that people [even many of the oppressed] will not want your liberation) and every bit as bloody as those you despise.

      Net result: you == those you hate.

      --
      "If still these truths be held to be
      Self evident."
      -Edna St. Vincent Millay
  47. i'm not arguing that the usa shouldn't improve by circletimessquare · · Score: 1

    i'm arguing that your time and critical energies are better spent focused on the laggards than focused on the middle or the front of the pack

    what is the point of making sure minor human rights are improved in places where human rights are generally sound, and not looking at or criticising places where human rights are regularly and horribly abused

    it would be ok if in this world people's critical energies were focused in proportion to the extent of human rights abuses

    but we live in a world where a ton of criticism is heaped on places where abuses are moderate or small, and small to scant to no criticism is heaped on places where abuses are huge

    doesn't that strike you as wrong?

    i mean, we need a HUMAN conscience. not a european conscience, or a japanese conscience, or an american conscience

    the only morally and intellectually defensible position on any human rights abuse in this world is a global one, not a local one

    --
    intellectual property law is philosophically incoherent. it is your moral duty to ignore it or sabotage it
  48. i think that by circletimessquare · · Score: 1

    if, in order to win your argument, you have to defend slavery, i think you've lost the argument

    i say that slavery should be fought everywhere in the world

    this is not arrogant

    and this is not american

    "Net result: you == those you hate"

    yes, i hate slaveholders

    this makes me a citizen of the world, and it means i have a human conscience

    how about yourself?

    --
    intellectual property law is philosophically incoherent. it is your moral duty to ignore it or sabotage it
    1. Re:i think that by conspirator57 · · Score: 1

      i didn't have to defend slavery, i merely pursued a line of reasoning that I had hoped would lead you to understand part of why your "world liberation army" concept would backfire.

      and parroting your self-reassurance as armor against reason is quite weak.

      BTW: where do you get your world citizen's passport?

      ""Net result: you == those you hate"

      yes, i hate slaveholders"

      You're a slaveholder? I think that's illegal in America. You might not want to admit that in a public forum, it might attract unwanted police attention.

      --
      "If still these truths be held to be
      Self evident."
      -Edna St. Vincent Millay
  49. i'm not arguing with you dude by circletimessquare · · Score: 1

    you go ahead. go to an area of the world where there is slavery, and tell the slaves: sorry, you can't help them, because it is a cultural difference that you respect that they should remain slaves

    then go have a mint julep with the local slaveholders, telling them you are not like those "arrogant americans" who want them punished

    nevermind the "arrogant finns" or "arrogant brazilians" or "arrogant ghanians" who might want the slavery stopped? i guess not liking slavery anywhere in the world makes you an american

    huh, you learn amazing things on teh intarweb

    (snicker)

    --
    intellectual property law is philosophically incoherent. it is your moral duty to ignore it or sabotage it
    1. Re:i'm not arguing with you dude by conspirator57 · · Score: 1

      Dude, I don't support slavery: it is abhorrent to my worldview, but I also don't support policing the world.

      Since you do, go join the Team UN World Police, you know the UN version of Team America, World Police.

      Then you can see first hand how much indigenous people hate it when you destroy their country's economic and cultural heritage in your pursuit of their rights.

      I'm sure their condition will be greatly improved by your warfare with their existing governments.

      All i'm saying is: think gloablly, *ACT* locally.

      Don't buy stuff made in countries whose perspective on human rights is inconsistent with yours and mine.
      Discourage your government from doing business with or providing aid to those countries.
      Meanwhile, strive for perfection lacally, so others can see and desire and be motivated to work towards having the same freedoms as we do.

      Thanks for the ad hominem insults.

      Enjoy your ignorance.

      --
      "If still these truths be held to be
      Self evident."
      -Edna St. Vincent Millay
  50. heyman, you go on with your bad self by circletimessquare · · Score: 1
    if someone says that slavery is their cultural heritage, you will not criticize their slavery

    did i misread you?:

    in some cultures, the family of a murder victim is entitled to the fruits of the murderer's labor. In our society, this is done by means of a civil law suit. In other countries, this is done by indentured servitude, or yes, slavery. Sometimes the servitude has been to the state and other times to the family. Aside from risk of vigilantism on the part of the victims family, at the end of the day, what is the functional difference between garnishing wages to satisfy a civil law judgement and having to work (in)directly for someone?


    please, by all means, tell me how i misread you. tell me, as you now say "I don't support slavery: it is abhorrent to my worldview"

    good! i'm glad!

    so if a society has slavery, do you criticize it?

    and if you criticize that society for having slavery, doesn't that make you, in the way you critice of me, the same as me? by criticizing slavery in another country, doesn't that make you an "arrogant american"?

    which is it now honey: criticize that country's slavery, and you're an ugly american. or don't criticize it, thereby making you a hypocrite when you criticize the usa for anything!

    because the validity of your criticism should be based on the CONCEPTS, the VALUES, that all people hold, not ethnocentric tribalism: "i criticize you because you're american" versus "i criticize you because you support slavery" see? tribalism versus concepts. one is far superior morally than the other point of view. and you have tribalism as your promairy motivator, not concepts

    see in my weird wacky world, murder is wrong. murder is wrong in afghanistan. it is wrong in argentina. it is wrong in japan

    but you seem to be telling me that murder is wrong in the usa... but somewhat LESS wrong in say, jordan, because honor killings are a cultural aspect of that place, or in say LESS wrong in papua new guinea, where cannibalism might still be going on in the hinterlands

    so we respect cannibalism? because it is the culture of papua new guinea? i have no right to condemn cannibalism there because that makes me an arrogant american? well doesn't that also mean you are condemning someone to death?! (the guy being eaten) which is a GREATER crime than telling papuan new guineans their culture is wrong

    see, you see me as imposing american values, say, everyone has to eat mcdonalds, or drive an SUV

    why are you so fucking retarded?

    this is a hysterical reading of my position

    what i am actually saying, from a HUMAN stand point (not an american one, a HUMAN one, a standpoint an indonesian or egyptian would agree with... do you get that?) is that slavery is wrong, for example, EVERYWHERE, ALL THE TIME

    not says me, the american, but says me, the HUMAN BEING

    let's bring up another example: cliterectomy

    should we tolerate it? or condemn it?

    aren't you an ugly imperialist western aggressor if you criticize it?

    no, because you aren't doing it in the name of jolly england or the motherland of france

    you are criticizing it because it is wrong from a HUMAN point of view

    do you understand?

    or do you still think your tribal, ethnocentric way of looking at the world is intellectually or morally valid in any way?

    --
    intellectual property law is philosophically incoherent. it is your moral duty to ignore it or sabotage it
  51. I thought you weren't going to argue with me... by conspirator57 · · Score: 1

    I never said I wouldn't criticize slavery, just as you never answered the question contained in the excerpt you quoted.

    I do criticize other nations or cultures. I don't advocate invading them to stop behavior I disagree with. Your arguments all along have tended to imply that this was a logical and desirable end to pursue. It's not. Bone up on your readings on "Justifiable War." Hint: there is a huge burden to overcome before initiating a war.

    As to HUMAN values, I would contend that there are large subsets of HUMANITY that disagree with you on what those values ought to consist of. I'm not saying that I'm one of those people, but I am saying that if there is disagreement, then there is room for change, and further that changes might be inconsistent with what you or I believe should be the case.

    By minimizing those who do or say things you don't like by calling them "tribal, etc." you are at once denying their humanity and denying responsibility for whole tracts of possible bad outcomes of your eventual direct intervention in their affairs.

    Jefferson said, and I think it's reasonable, that freedom is not the natural state of humanity. Given that, don't you think we ought to defend the few relative bastions of freedom in the world as zealously as possible so we do not lose the light those nations shine into the rest of the world?

    By the way, just because a UN rep from a given country claims to support something (say human rights) doesn't necessarily mean he or his country or culture actually do. It can also mean that he acknowledges that such a worldview is held by the current hegemony. Look for example at your famous UN whose ever changing human rights commission consistently lambasts Israel while ignoring or minimizing abuses committed elsewhere, say Africa or in Muslim nations... hmm... seems like reality isn't living up to your expectations as a world citizen.

    --
    "If still these truths be held to be
    Self evident."
    -Edna St. Vincent Millay
  52. freedom is a universal human right by circletimessquare · · Score: 1

    "Given that, don't you think we ought to defend the few relative bastions of freedom in the world as zealously as possible so we do not lose the light those nations shine into the rest of the world?"

    the few relative bastions of freedom is called the planet earth

    why do you see magic walls at say, the rio grande, across which, in your mind, human beings suddenly become less valuable to fight for?

    in my mind, an indian, a brazilian, an american: equal in value, equal in need to have their rights fought for

    in your mind: an african is less valuable than an american, a mexican is less valuable than a european. that is a DIRECT result of YOUR way of thinking

    you're tribal. you're yesterdays' way of thinking. i am the future. i am a global standard of justice. you are like the french aristocracy before the frnech revolution, or south slave holders before the american civil war: you don't see the future, and you laugh at it as idealism

    and you will, of course, hear "american standard of justice" when i say "global standard of justice"

    which is of course the ultimate jusgment of how much you just don't fucking get it

    why is that? when i say "global standard" why do you hear "american standard"?

    so you're telling me an indian or a chinese or an african doesn't understand they have a right not to be a slave? and you call me arrogant? it is a universal standard everyone understands

    except the entrenched asshole powers that need to be destroyed

    that your point of view defends!

    in your mind, human rights can only exist in the usa, in the west

    you are obviously tribal, 100%

    and you are also ethnocentric at best, and racist at worst

    you lose

    --
    intellectual property law is philosophically incoherent. it is your moral duty to ignore it or sabotage it
    1. Re:freedom is a universal human right by conspirator57 · · Score: 1

      "i am a global standard of justice."

      Any person who claims to be a standard of justice is:

      1. a megalomaniac
      2. not to be trusted to determine standards of justice for anyone.

      I am not ethnocentrist or racist. If I were either I would have your viewpoints regarding interference in other's affairs. You continually seem to be looking for opportunities to use the most loaded words possible in order to avoid the subject at hand. You are abusive and immune to logic.

      You are an imperialist looking, like so many before you, for a global empire to rule "justly" as a "benevolent" and loved dictator. You are not the future: you are the past coming around again. If you ever get to do any of the things you espouse, your failure will be written in the blood of those you claim to want to liberate. See the leaders of the French Revolution for an example of yourself.

      I am a realist and a believer in the concept of free will. Perhaps you've heard the old canard "you can lead a horse to water, but you can't make it drink." I see the possibility for and yearn for all the world to be free, but unlike you I've learned the lessons history has taught. As such, I know that your proposed methods are doomed to failure.

      --
      "If still these truths be held to be
      Self evident."
      -Edna St. Vincent Millay
  53. i HAVE, not i AM, sorry for the typo by circletimessquare · · Score: 1
    --
    intellectual property law is philosophically incoherent. it is your moral duty to ignore it or sabotage it
    1. Re:i HAVE, not i AM, sorry for the typo by conspirator57 · · Score: 1

      i'd still have to agree with that partialpeople bloke commenting on your first story. By the way, pointing to your own postings as fact or as unbiased stories is perhaps still a touch megalomaniacal. http://www.urbandictionary.com/define.php?term=meg alomaniacal&defid=1285064

      --
      "If still these truths be held to be
      Self evident."
      -Edna St. Vincent Millay
  54. Buttons on baseball caps do to by one0them · · Score: 1

    Tinfoil hats are antennas if there are no MK waves, then they just amplify brain frying cellphone & wifi waves.

    People with baseball caps don't laugh too hard, those little metal buttons do the same