FBI and Next-Gen P2P Monitoring
AHuxley writes "Can the FBI get funding to create a next-generation network monitoring and database system for P2P networks, web sites, and chat rooms?
Could the FBI's Regional Information Sharing Systems (RISS) network be opened to more law enforcement agents across the USA?
Will the tracking of p2p users via 'unique serial numbers' generated from a person's computer be expanded from its first use in late 2005?
Is your p2p application or plug-in sending back your MAC address, firmware revision, manufacture date, GUID or other details?" Could this story submitter pose any more questions in his submission? Won't someone please think of the ... oh, never mind.
It's not the people who are slow. Their comments are just tied up in the RISS awaiting gov approval.
australian project gutenberg is better than the original.
Seriously though, how difficult is it to use the slashdot search engine with the capitalized words in the title? third hit...
sudo macchanger -r
I'm no computer scientist but isn't it fairly trivial for them to get your mac (or at least that of your router) from your network traffic anyway?
IranAir Flight 655 never forget!
In the olden days, when I was a kid, we happened into dealing with the F.B.I. Subsequently, I know to engage a large supply of salt anytime I read about any investigation that has been tainted by their crime lab. Think of the children and send more money. Yeah. Knowing their proclivity to abuse/disregard the law, I don't really see the upside to this.
The cost of that cleanup, of course, will be borne by taxpayers, not industry.
Heavy on fear, but light on facts... And with so many popular torrent programs open source, all of the sneakiness is no longer possible. No magic serial, or mac address in my torrent program. Oh, and it is encrypted.
AHuxley:
Yes
Yes
Yes
Yes
CmdrTaco:
Yes
Hope that helps everyone.
This guy's the limit!
I think any of those would be quite hard to inject into open source code.
After all, in a p2p app the traffic is the most important thing ... and is going to be watched very closely. Patches that modify what go over the wire will be under considerable scrutiny.
And how are you going to collect those details once they're transmitted? By their nature p2p apps are hard to keep track of.
Not to say it couldn't happen. But I don't think it's much of a risk compared to the simple fact that your IP address is very visible when using a p2p app...
Closed source applications from companies like M$ can't be trusted in this way.
The last time the FBI tried to build a large piece of custom software, a case-file management system, they ended up spending 170 MILLION dollars over 3+ years for software which basically did nothing useful (a complete failure). The only way that this will work is if the FBI contracts someone else to build it for them and even then the chances of failure are high unless they are willing to deal with criminals (i.e. Russian hackers who write the software for worms and spammers) to get it done which will happen about the same time that hell freezes over. The one good thing about governments when it comes to controlling the populace is that they are inefficient. If the government spent our tax money efficiently and effectively on surveillence and authoritarian enforcement actions then we would already be living in 1984.
I think they are globally unique, and since they are 6 bytes long the supply is practically infinite (256^6 = 216x10^12, ie every person can have something like 30,000 mac addresses)
Come to think of it, it's a bit silly that they used 4 bytes for the address that has to be globally unique and 6 bytes for the one that only has to be locally unique...
Here's the actual bill. $60 million per year. 15 cosponsors.
This is another piece of Bush Administration "security theater". Write to your representatives in Congress and your Senators to get them to put this money into fighting spam and computer crime.