Slashdot Mirror
Germany Plans To Email Trojans
speardane sends us word of a proposal in the German legislature to make it legal for that government to email spyware to terror suspects. The action comes in response to a court denying prosecutors' requests to break into suspects' computers over the Internet. The German chancellor supports the measure despite considerable outcry from political opponents and rights groups.
It sounds like the honour virus to be honest, "We need to monitor you, if you would wear this covert recording hat whilst doing your illegal stuff it would be fan-diddly-astic".
Will it be illegal to thwart the attack?
Will it become illegal to use an alternative operating system or antivirus software or even just common sense to deflect these payloads?
liqbase
...sincerely,
The Terrorists.
Now wont the terrorists set up their own honeypots for these?
I think it would be pretty cool to get a trojen written by the government, that sends data back to the government and is read by computers in the most secret government areas... imagine what terrorists could do if they find a bug in it?
The leader of your terrorist cell has sent you an e-card! Double-click the attachment to view it!
[Attached: ecard.exe]
...terror suspects will know they are being investigated.
If I were a terrorist, or really any kind of nefarious criminal (because you just know there are foolish people salivating about doing the same to any criminal suspects) I would welcome this decision. If was a bad guy and I was worried that 'they' were on to me, receiving this trojan would be proof positive.
And then I would take the opportunity to feed false information back to the people who sent me the trojan. Hooo boy, what a great way to make trouble for people I don't like, better than falsely reporting them to the IRS.
When information is power, privacy is freedom.
To come up with a way to distribute birth control so efficiently! This would never work in America though, it's difficult enough getting them out of that quarter machine that resides in the restroom at the gas station.
load "$",8,1
Papers that leaked from the German Federal Ministry of the Interior state that legal regulation allowing so called remote forensic searches exist
m -beantwortet-fragen-zur-online-durchsuchung/
- explicitly in Romania, Cypria, Latvia, Spain, and Switzerland,
- implicitly in Slovenia,
and that a similar approach to establish explicit allowance for remote forensic searches is ongoing in Sweden. At least readers in Sweden should contact their members of parliament and do some lobbyism. The current political discussion in Germany only got that public attention beacause some people started what they call nerd lobbyism.
The German papers are available at http://netzpolitik.org/2007/bundesinnenministeriu
It is also noteworthy that an also leaked draft of a new law regarding German federal criminal police (c.f. CCC press release at http://www.ccc.de/updates/2007/bkaterror) lists several other new or extended competencies.
Criticism claims that Germany is on it's way to reinstate a secret police, with the last German incarnations being http://en.wikipedia.org/wiki/Stasi and http://en.wikipedia.org/wiki/Gestapo.
Next they will just email their super duper virus to child porn operators, then tax evaders, then jay walkers. As the DMCA and the Patriot Act have taught us, if it can be abused, it will. It's just human nature, or the nature of people who choose to work for the man, anyway.
"You've got a friend! OsamaBL wants to add you to his friendslist, Cancel or Allow?"
...that the Trojan won't actually be realized. (BBC):
But that depends on a lot of factors. Germany's biggest hacker organization the Chao Computer Club and others are very effectively campaigning against this plans.
In recent news (only german, sorry) the federal police states that it won't be a trojan but what they call "remote forensic software" which they intend to install on the terrorists' computer manually. More like a software version of a bug (in the covert listening device sense).
"Hannibal's plans never work right. They just work." Amy/A-Team
So what are they going to title the e-mail? I mean, they'll have to be really clever, to make sure the terrorists actually open it:
"dude! you'll never believe what Osama said"
"wow, I can't believe you haven't blown yourself up yet"
"this video has your 72 virgins in it!"
How is this different from being allowed to tap someone's phone or plant a bug? As long as warrants are involved [...]
With a warrant you have court approval. This is being done because the court did not grant approval.
From the summary:
The action comes in response to a court denying prosecutors' requests to break into suspects' computers over the Internet.
You'll have a hard time getting that through.
The German government could technically issue a "please do not find" letter. Now, I know a few people with a few AV labs and such a letter would most likely be met (inofficially) immediately with a shady tool on a shady page finding exactly this trojan and nothing else.
But let's just for a moment assume that this won't happen. Instead, KAV gives the German government the finger, citing the "Russia is big, the Czar is far" proverb. Avira would most likely be forced to comply, sitting in Germany, so would probably some other EU-based AV vendors.
They would, though, immediately go to Den Hague and sue for unfair trade disadvantages due to the laws in one member country.
AV writers tend to be a zealous lot. If you think the EFF is hard on GPL violations, you've never seen AV fanatics meet malware proponents.
We used to have a Bill of Rights. Now, with the rights gone, all we have left is the bill.