Former FBI Agent Calls for a Second Internet
An anonymous reader writes "Former FBI Agent Patrick J. Dempsey warns that the Internet has become a sanctuary for cyber criminals and the only way to rectify this is to create a second, more secure Internet. Dempsey explains that, in order to successfully fight cyber crime, law enforcement officials need to move much faster than average investigators and cooperate with international law enforcement officials. The problem is various legal systems are unprepared for the fight, which is why he claims we must change the structure of the Internet."
Will the second internet have Third Life?
http://twitter.com/OLDTELEGRAM
"We need a second Internet so we can make it easier to spy on you and track you."
CDE open sourced! https://sourceforge.net/projects/cdesktopenv/
Someone give this guy a VPN.
Is it true that more people vote for the winner of American Idol, than vote for the president? -Ali G.
Sorry, but changing the "structure of the internet" because some former policeman says it would be a good thing just ain't a persuasive argument. If anything, take whatever he says and do the opposite.
"We're too stupid to deal with this interweb thingy, so we need the entire world to change how things are done to accommodate our incompetence."
Yeah, that's going to happen.
-- Will program for bandwidth
"Former FBI Agent Patrick J. Dempsey warns that the Internet has become a sanctuary for cyber criminals
Any time you have a new community or resource to exploit, there will be criminals. However, calling it a sanctuary is hardly apt. I can think of more than a few places that are a sanctuary for criminals, yet you won't see the government razing those neighborhoods and starting anew, would you? Besides, who gets called a criminal?
and the only way to rectify this is to create a second, more secure Internet.
Ummmm, no. What he means is that they want to form a new network that can routinely be filtered, scanned and probed with no means of anonymity (already going away) or flexibility.
Dempsey explains that, in order to successfully fight cyber crime, law enforcement officials need to move much faster than average investigators and cooperate with international law enforcement officials.
How about figuring out how to deploy a network within your own agency first, that agency employees can actually use?
Visit Jonesblog and say hello.
I don't care about your needs to "successfully fight cyber crime" which to me translates to "successfully sniff out rats".
I care about speed, anonymity and integrity of data.
That very annoying "internets" word will be real and I won't be able to threaten to kill a puppy every time sombody that should know better uses it.
Since major cities have more crime than before why don't create new cities.
As opposed to extraditing murderers, mafiaa members etc is easy with respect to "traditional" crimes?Why hire competent people who technology as tools and adapt your law enforcement agency when you change the world around you to adapt to your incompetence?
And for those who says "Think of the children": No law can effectively parent your child for you. Do you damn duty.
When the government or agents of the government ask for something, the opposite is probably in your best interest.
Kwisatz Haderach
Sell the spice to CHOAM
This Mahdi took Shaddam's Throne
... the FBI want's a pony.
What do we do when the second internet is overrun? Building a new internet everytime "cyber-criminals" get on it sounds expensive...
If only we could create a second, more secure Nigeria.
Education is the silver bullet.
There is only so much we can do to secure any network from attack. There will always be ways to spoof identities, and commit illegal acts. Retooling the whole thing won't make a different in that regard. We may up the bar a little, but that won't last for long. People will think of new ways to work around what we can think of today.
On the other hand, I wouldn't mind an overhaul on DNS and SMTP to slow some spammers and other jerks down.
The real problem is the diverse nature of laws between different countries and the strong enforcement in some places and near zero enforcement elsewhere. Think about it, someone in Russia can do almost anything outside their country and not be prosecuted. In other places, we have parts of the Internet filtered because of some lame moral code.
I just wish these people who don't understand the spirit of the Internet would take their marbles and go home.
MidnightBSD: The BSD for Everyone
"If we accept the fact that the greatest hurdle in arresting international cyber criminals is that various legal systems just aren't prepared to address the speed at which these crimes occur or the various nuances that are unique to computer crimes, then the question is: What can we do to fix the problem?"
So, he goes from acknowledging that there's a jurisdictional problem and a speed problem when it comes to law enforcement to creating a new "verified" internet where you have to "prove" who you are? Umm..no.
And he goes on to hit every hot topic in security today: DDOS, identity theft. spam, etc. And then, he makes the claim "the fact is that Internet crimes are almost always international crimes." And he doesn't back it up, rather gives anecdotal evidence of a hacker in Russia using computers in Thailand to steal data.
I am not a security expert (and I'm not pretending to be) but this "sky is falling" mentality is crap. Most identity theft (the act of stealing) is not done over the internet, its done locally. Yes, selling lists of thousands of SSNs and credit card #s happens over the internet, but the thievery itself doesn't.
In fact, this would make things worse: you're creating a global ID. Once someone steals your global ID they can do whatever they want. And once again, your ID wouldn't be stolen over the "new" internet, it would be stolen because you didn't shred a document and someone went dumpster diving.
This doesn't solve any problems.
.. with blackjack, and hookers!
I won't disagree with the assertion that the internet is a game-changer when it comes to criminal investigations, but the idea that we should castrate it for this reason is ridiculous. The dinosaur who raised this complaint is clearly a digital immigrant. Most of his generation lacks the level of familiarity necessary to effectively investigate crimes involving the internet. The problem goes beyond a simple matter of training. A good investigator needs an intuitive understanding of how people interact with their world, including the internet, more than they need an intimate understanding of protocols.
The next generation of investigators will be digital natives. They'll have grown up with the web, email, blogs, message boards, IM, flickr, youtube, social networking, and the like. They won't all have CCNAs, but they'll have a sufficient understanding of how people use the internet to know when to bring in forensic experts.
The transition will be difficult. The digital immigrants with extensive investigative experience and the digital natives who are novices in their profession will have to cooperate and exchange their knowledge and wisdom, and in the meantime, some criminals will slip through the cracks. That's the price of progress.
There's no failure quite as dissatisfying as a complete and total solution to the wrong problem.
so we can re-use our old forms. It's a bit surprising how effective this is.
--
Patrick J. Dempsey, your post advocates a
(x) technical ( ) legislative ( ) market-based ( ) vigilante
approach to fighting international "cybercrime." Your idea will not work. Here is why it won't work.
(One or more of the following may apply to your particular idea, and it may have other flaws which used to vary from nation to nation.)
( ) spammers can easily use it to harvest email addresses
(x) legitimate Internet uses would be affected
(x) no one will be able to find the guy or collect the money
( ) it is defenseless against brute force attacks
(x) it will protect us for two weeks and then we'll be stuck with it
(x) users of the Internet will not put up with it
(x) microsoft will not put up with it
(x) the police will not put up with it
(x) requires too much cooperation from criminals
(x) requires immediate total cooperation from everybody at once
(x) many users cannot afford to lose business or alienate potential employers
( ) spammers don't care about invalid addresses in their lists
( ) anyone could anonymously destroy anyone else's career or business
specifically, your plan fails to account for
(x) laws expressly prohibiting it
(x) lack of centrally controlling authority for the Internet
(x) open relays in foreign countries
( ) ease of searching tiny alphanumeric address space of all email addresses
(x) asshats
(x) jurisdictional problems
( ) unpopularity of weird new taxes
( ) public reluctance to accept weird new forms of money
(x) huge existing software investment in the Internet
(x) willingness of users to install os patches received by email
(x) armies of worm riddled broadband-connected windows boxes
( ) eternal arms race involved in all filtering approaches
(x) extreme profitability of international crime
(x) joe jobs and/or identity theft
(x) technically illiterate politicians
( ) extreme stupidity on the part of people who do business with criminals
(x) dishonesty on the part of criminals themselves
( ) bandwidth costs that are unaffected by client filtering
( ) outlook
and the following philosophical objections may also apply:
(x) ideas similar to yours are easy to come up with, yet none have ever been shown practical
( ) any scheme based on opt-out is unacceptable
(x) smtp headers should not be the subject of legislation
( ) blacklists suck
(x) whitelists suck
( ) we should be able to talk about viagra without being censored
( ) countermeasures should not involve wire fraud or credit card fraud
( ) countermeasures should not involve sabotage of public networks
(x) countermeasures must work if phased in gradually
( ) sending email should be free
(x) why should we have to trust you and your servers?
(x) incompatiblity with open source or open source licenses
(x) feel-good measures do nothing to solve the problem
( ) temporary/one-time email addresses are cumbersome
(x) i don't want the government reading my email
( ) killing them that way is not slow and painful enough
furthermore, this is what i think about you:
( ) sorry dude, but i don't think it would work.
(x) this is a stupid idea, and you're a stupid person for suggesting it.
( ) nice try, assh0le! i'm going to find out where you live and burn your house down!
When I moderate, I only use "-1, Overrated". That way, I never get meta-moderated!
1. I can't do my job because of X.
2. Changing X would fix that problem.
3. Therefore, we should change X.
With no regard for whether X has any value of its own. Open your eyes and look outside of your own field before you decide to change the world in your favor.
Visit the
"The problem is various legal systems are unprepared for the fight..."
I think Mr. Dempsey misspelled 'all'...
"Doing law enforcement is getting harder, so let's change the rules"
I see this now in almost every arena of law enforcement... and for good reason. It *is* getting harder to do low enforcement. The thought process is something like this: "As law enforcement, we know we're failing; we can't really stop the criminals, so let's treat everyone as a suspect." Basically enforcing laws is a traditional behavior. It is the way to maintain stability and control on society and in a similar way that traditions maintain cultural norms. Traditional behaviors are the antithesis of innovation.
Technology is changing at a breakneck pace, and increasing in the speed of change. It is hard, nigh impossible for large, bureaucratic, rules-based organizations to keep pace with innovation in technology, and the concomitant adoption by criminals.
The disturbing thing is that instead of law enforcement innovating to keep up with the demands of the job, many in law enforcement have lobbied successfully to change the rules of the game. This is most true in the United States over the last five years with the tired dirge: "give up your liberties or the terrorists will win".
I think the correct solution is to change the way we do law enforcement. Change the people who do it. Make smaller, more nimble organizations. Change the speed with which law enforcement operates. Remove entrenched, non-technical savvy deadweight from organizations. Incorporate the latest technology. Change quickly with the rest of society and keep the fundamental principles that make open society possible and successful.
And for christ's sakes, please stop degrading people by forcing them to take off their clothing and shoes to board an airplane. I know, it seems totally off topic, but the same idea we can't really stop the criminals, so let's treat everyone as a suspect.
Upon reading the article summary, I thought the guy must be nuts.
After reading the article, however, and carefully thinking about his ideas, I've concluded that he is instead an idiot.
Has this man never heard of Metcalfe's Law? His second, registration-only internet will be about as popular as BITNET and Telenet are these days. (Yes, Virginia there were globe-spanning networks before the Internet. It's true!)
While he's at it, he might as well call for a second telephone system, one that only allows people to say nice things.
Dempsey explains that, in order to successfully fight cyber crime, law enforcement officials need to move much faster than average investigators and cooperate with international law:
I call for a second FBI.
It's true no man is an island, but if you take a bunch of dead guys and tie 'em together, they make a good raft.
Actually, the internet is a sanctuary for cyber criminals. You don't find cyber criminals holding up armoured trucks at gun point, regular meat criminals do that, you find cyber criminals on the interwebs. That's why they're cyber criminals. The intertubes are a sanctuary for cyber criminals for exactly the same reason that the FBI is a sanctuary for corrupt FBI agents.
I totally recommend creating a second internet, and a second FBI, a second stock market, a second local primary school. Everything.
No one thing should get all the cred for harbouring criminals. If people want to be paranoid and really stupid, let them be paranoid and really stupid and have a good laugh at their expense.
I don't therefore I'm not.
Yeah, and these newfangled "automobiles" make it so much harder for the cops to catch crooks, since the cops now have to move so much faster, and even cooperate with cops in the next county. Instead of the cops getting automobiles and some radios of their own, we should get rid of automobiles, make them illegal, and instead give everyone some other kind of automobiles that all have cutoff switches in their motors that cops can stop with their radios.
And no criminals will ever figure out how to wire around the cutoff switches. Then cops can just go back to being lazy again. Oh, and by the way, we should let the cops trample all over our rights that we discarded because protecting those rights was too much work.
I feel safer already. Don't you?
--
make install -not war
... where the agents are significantly smarter than this ex First FBI agent.
Seriously, does it surprise anyone that law enforcement wants a more "secure" and hence traceable, internet? The Law is moving in on this frontier; some of the residents demand it, and cops always want more power.
Heinlein wrote about this decades ago - "The Moon is a Harsh Mistress." Great read, and extremely relevant.
Former FBI Official Imaj Oke stated today that We need a new earth due to the massive amounts of crime and terrorism on this one.
"Our current planet is so rife with criminal activity that we need to populate a new planet that will be restricted only to fully law abiding citizens." He said at an interview earlier this afternoon, "Once we have established the new planet the old one will, of course no longer be necessary and will be dismantled for parts."
Oke went on to describe the technical merits of the new planet stating that life on the planet would be fully controlled by benevolent corporate monopoly interests to ensure that nobody's intellectual property is infringed.
Windows is a bonfire, Linux is the sun. Linux only looks smaller if you lack perspective.
Yes, we need a new Good Internet that the FBI, SS, RIAA, etc. will make safe and legal for everyone. The rest of us will stay on this one (to be renamed Evilnet).
Unlimited growth == Cancer.
Pedo 2: 13, f, nyc. u?
Pedo 1: 12, f, nyc 2! Hmm, a network of only 13-year-olds.... So the real question is, would it be one giant digg?
Can't he just recommend that routers check for the "evil bit"? It would be about as effective and much easier.
"When you have eliminated the unacceptable, whatever is left, however improbable, must be the truthiness" - Holmes
Soooo how are they going to stop people from just layering an anonymous protocol on top of whatever they force on to people?
Soooo how are they going to stop people from encrypting data and obfuscating it?
Soooo how are they going to stop people form implementing a "slow drip" protocol through random nodes which is also encrypted?
There is absolutely no way to police the Internet without significantly impacting response times, etc. QoS will suck and they will still never be able to touch 99.99% of the "criminals".
We are already working on a second "Internet" its called "Freenet" and it aims to eliminate many of the current problems with the Internet such as censorship and accountability.
Segregating the Internet!!!! Why do I get dejavu when I think of that? Oh what that's how it all started.
Honestly this idiot is suggesting we work backwards and devolve the Internet.
~Dan
An SQL query goes to a bar, walks up to a table and asks, "Mind if I join you?"
This has to be the only reason, in fact, and not just one of them. Cybercrime can be stopped without any monitoring!
The article talks about hacking into bank accounts and identity theft etc. So if the government wants to crack down on this, why don't they just mandate that banks have to send their customers a bootable read only flash drive that contains a basic operating system, browser, SSL certificates and a one time pad? It wouldn't matter how badly some clueless moron's computer was trojaned to hell, because the bank would only accept connections from the booted flash drive.
You can't get mugged on the internet. You can't be coerced on the internet. Criminals need YOUR COOPERATION.
The U.S. could also stop using checks like every other civilized country, because they're a ridiculously huge security hole and a huge pain in the ass compared to direct bank transfer. But all of this would make too much sense, because none of it involves more government monitoring of its citizens.
The land of the free. Where no laws must ever tell corporations what to do, but citizens must compensate for their ineptness by being spied upon.
My Sig: SEGV
"You were hiding jews in your house ? Prepare to die !"
Accountability means that you are accountable to someone. That someone can easily abuse his powers; Hell, even the finnish police, the police of the state repeatedly voted the least corrupt in the world, began abusing the kiddie porn filter immediately after it was implemented. There is no authority worth the trust accountability requires.
Unfortunately, in Real Life, accountability is a neccessity. While it inevitably leads to abuses, lack of it means us violent monkeys live up to our murderous nature and rape, kill and loot each other. That's why we have governments, nation-states and courts of law.
However, it is impossible to murder anyone in the Internet. It is just as impossible to rape them, or cut a single hair from their heads. It is impossible to even rob them - altought it is possible to spy on them enough to gain access to their online accounts, which is one of the reasons why I don't have any. In fact it is impossible to do anything except say something nasty to them.
So, why would we need accountability in the Internet ? Who, exactly speaking, is actually being hurt by the spam, botnets or porn ? No one.
No, this "accountability online" is simply a guise for tracking down the people who leak nasty secrets of politicians and corporations, in order to punish them and thus cause a chilling effect. Internet and especially the anonymous protocols working on top of it - such as Tor and Freenet - are every politicians worst nightmare: an information propagation channel they can't block. "The truth shall set you free", so is it any wonder that every overlord in history has tried to prevent it from getting out ?
A democratic society - indeed, any free society - needs an anonymous communication channel with no accountability of what you say. If that is also useful for criminals, then that is simply the price you have to pay. The alternative is freedom of speech a la Soviet Russia: you are free to pee on Lenin's statue while shouting "down with communism", but you'll be sent to a Siberian labor camp for it.
Forget magic. Any technology distinguishable from divine power is insufficiently advanced.
My net is completely safe:
My ISP caps my download so I can't download evil viruses
My ISP throttles my p2p traffic so I can't download music and become infected with the terrorist virus and become one of them like the RIAA video says
My websurfing experience constantly pops up with anticybercrime tools that I can buy for only 19.95, I have 204 of those tools installed so far
I have norton, so my internet apps are all blocked anyways and my computer is too slow to let me experience the web and get terrible cybercrime done to me.
Also, I installed vista SP1 and now my computer boots to a blue screen so it is even safer.
Why another internet?
PS. Without my PC, I decided to go play outside and got hit by a bus. Damn you internet!!!