F-Secure Calls For "Internetpol" To Fight Crimeware
KingofGnG points out F-Secure's Q3 2008 security summary, in which its Chief Research Officer Mikko Hypponen proposes establishing an "Internetpol," an international organization empowered to target and root out cybercrime anywhere in the world. Hypponen gives examples of why such a supernational force is needed — and these are not hard to find — but provides few details about how such an outfit could get started or how it would work. He does mention the wrinkle that in some countries malware writing, cracking, spamming, and phishing are not illegal or not prosecuted. Is an Internetpol even possible, let alone practical?
I can see some use for this, but I fear like most things it would go after political dissidents and copyright infringers rather than actual criminals. Generally speaking I don't want the government to have /more/ power.
93rd rule of Slashdot: No matter how obvious my sarcasm is, my comment will be taken seriously by someone.
Giving new meaning to the term "you got netcopped"
No, don't write me off as a NEW WORLD ORDER!!!! guy.
Interpol is dangerously close to a one-world-government type deal. If you're into "global democracy" and the entire world under one flag, then an international police on the internet is probably no big deal to you.
But if you're afraid of big, monolithic governments as much as I am, then you'll be deathly afraid of any international police body, as Internet Police isn't just a bad idea, it's also a very dangerous slippery slope to be treading on.
Still not convinced it's not a good idea? A lot of nations have insufferable politically-correct speech laws. Germany, for example; there they censor politically undesirable viewpoints (yes, Nazis, but if you believe that freedom of speech of the individual transcends whatever the masses may think...) and in Australia, they censor games like GTAIV and other 'socially undesirable' expression.
And maybe some people aren't bothered by that. Some people think, "hey, if some majority accepted that, then tough luck for the minority, democracy prevails!" but I am just not one of them and I'll never be comfortable with governments treading on individual freedom whether a single ruler or the many stepping on them.
Is Interpol even relevant? I mean, the only thing I ever know that even mentions Interpol are those stoopid warnings on DVDs. If Interpol has essentially become a copyright enforcement organization, then who even cares?
blah blah blah
They should wear uniforms made from lycra, wear bright red codpieces and a cape. That much power should come with a high level of public humiliation.
Task Mangler
So, are the Russian Mafia types likely to cooperate with this? I think not. Any effort to move towards useful prosecution would be sabotaged.
Oh Fuck No! I hate internet crime as much as the next guy, but I hate the thought of a global government organization policing one of the last bastions of true freedom even more.
We've already lost our freedom. Until we rise against our oppressors and reestablish a government for the PEOPLE, who cares? If they wanted they could kidnap any of us and drag us off to Guantanamo and there isn't a single thing anyone could do about it. We have lost!
We simply need a team of highly skilled assassins. You write a virus? You lose your brainpan. EZ.
Whut? Due Process? Izzat some kind of marmalade?
Are they admitting defeat, that they can't make a good product, or are they asking for the government to create an anti-virus "Oversight Board"???
"My immediate reaction is "WTF? What kind of moron doesn't make things 64-bit safe to begin with?" Linus
This seems to be the beginning of the Turing Authority, as in Neuromancer.
The Attorney General's Office in Washington, United States, and Microsoft recently announced that they are filing new lawsuits targeting scareware purveyors. One of the cases is against James Reed McCreary IV, who is accused with sending incessant pop-ups resembling system warnings to consumers' personal computers. The messages read "CRITICAL ERROR MESSAGE! â" REGISTRY DAMAGED AND CORRUPTED," and instructed users to visit a Web site to download Registry Cleaner XP.
"Consumers who visited the Web site were offered a free scan to check their computer â" but the program found 'critical' errors every time," said Senior Counsel Paula Selis, who leads the Attorney General's Consumer Protection High-Tech Unit. "Users were then told to pay USD 39.95 to repair these dubious problems." Microsoft has said that 50 percent of its customer support calls related to computer crashes can be blamed on spyware.
F-Secure notes that Registry Cleaner XP is just one of the increasing number of rogue security applications which also include Antivirus 2009, Malwarecore, WinDefender, WinSpywareProtect and XPDefender.
Um, maybe if Microsoft hadn't "innovated" the long discredited idea of execute anything downloaded over a wire, this would never have been a problem?
an InterPol, when we have S.P.U.T.U.M.?
For more information, see The Church of the SubGenius.
"Interpol is dangerously close to a one-world-government type deal. If you're into "global democracy" and the entire world under one flag, then an international police on the internet is probably no big deal to you."
UNATCO
Shai Schticks:"You don't make peace with friends, you make peace with enemies"
Somehow I can't see this not being abused or twisted. I'm sure the UK government will happily participate with the current Home Office plans to monitor all emails and phone calls that they're trying to soften us up for. After that, it's a matter of international "harmonisation."
http://rocknerd.co.uk
Stop, I'm an Internetpol polinetwork interperson!
really.. come on.. "the/a government is here to help" b.s. the Internet is as frewheeling as it is for the rest of us, as organizations that cause havoc are formed, equally as well those that can spread advocacy and security will/should just as well rise up. trust me, a bureaucrat will never save you.
Jesus saves souls and redeems them for valuable cash prizes
Invent an entire agency with a specific task, while having various other more or less capable agencies given parts or all of the same task. It'll work terribly at first because they'll only be learning how to do what they do in the context and restraints forced on them. Then to become more effective, they'll share information and then participate in tasks with these other agencies. Later when the government(s) attempt to get these agencies to merge, if not act together as a single task force, inter-agency rivalry that had already been decried by the people in the agencies and probably brought to light in the media when tasks failed because of it, then the administration will insist on an overseer agency to make them work together. This agency will fail in its task as well as others given it, but it will continue to operate so that people know that their Government is trying to look out for them. As the new agency fails to function effectively and the interdepartmental agency frequentely fails in effectiveness, efficiency and in general spectacularly in public, people will be reminded of its necessity (and its Osama FUD Laden alternative), putting everyone in the path of the agency's progress into the line of fire of the agency's mandated tools of its trade.
This is not a prediction. This is historical recounting. Non-US agencies find themselves acting the same way or else they don't get fed Uncle Sam's infomoney teat and counted among the potential bad naughties on the list the US draws up based on the subordinate reports but only with approval from the administrative, security/defense, and state departments of all the payers in this game.
This is not a new game. The first successful application in which its strategy and tactics outperformed those of the gun toting grunts involved was 230 years ago. The true hero of the action was Poland. It gave its all (ie. national solvency and so ability to defend) depending on Washington et al. to come up with a way to return the favor (an army to protect it, or at least money to pay it). Another national leaders himself led a 600 miles march of unarmed people to carry supplies to Washington, which Washington himself said saved him, his army and the war. They carried corn. The leader was Chief Shenendoah. Having won the war with their assistance, Washington oversaw the creation of the war department, tasked with getting things arranged, but credited for arranging them.
Nothings' changed here in 230 years. Considering the influence we have elsewhere, figure the odds they'll go a different route, or at least, for very long.
And its' one, two, three,
Who are we voting for?
Don't ask me I don't give a damn,
gimme Iraq or Afghanistan.
Well its' five, six, seven,
open up the pearly gates.
72 vigins can't be wrong,
Let have more cops to help make them strong.
"I may be synthetic, but I'm not stupid." -- Bishop 341-B
Yes, if the countries of the world could get together to stamp out this shit it would be great, but let's be realistic. Mikko's a nice guy but we can't get together and stamp out genocide (Darfur et al), arms dealing (see the UN security council's arms sales) or world peace what hope do we have with cybercrime. It's a nice idea, similar to mice getting together to decide to put a bell round the necks of all cats, just who's going to do it?
Hypponen gives examples of why such a supernational force is needed -- and these are not hard to find -- but provides few details about how such an outfit could get started or how it would work. He does mention the wrinkle that in some countries malware writing, cracking, spamming, and phishing are not illegal or not prosecuted. Is an Internetpol even possible, let alone practical?
[snicker] Countries that refuse to punish antisocial 'Net conduct don't get public IPs transmitted over satellites and undersea fiber optic cables, which are US property or property of US [Delaware, probably] corporations. Although some of the tech was put in place via rocketry, this is not rocket science. It's as simple as "play nice, or I kick you off my playground." Yes, it IS mine. I built it and I own it. [my country, that is]
calmofthestorm:
I can see some use for this, but I fear like most things it would go after political dissidents and copyright infringers rather than actual criminals. Generally speaking I don't want the government to have /more/ power.
[shivers] This government is obviously not competent to wield the power it already has!
Following an appeal, Virginia Supreme Court decided that the state Anti-Spam Law violated the First Amendment to the United States Constitution concerning the right to free and anonymous speech.
My copy of the United States Constitution does not include the word "anonymous" in the First Amendment, but I think it's basically a good idea. However, anonymity can be achieved by concealing or withholding identity. Assuming a false identity is not necessary for anonymity, and tends to implicate the individual[s] impersonated, therefore it should not be protected by law, and especially not by the supreme law of the land.
The Court documents show that there was no question about Jaynes' guilt. He used several computers, routers and servers [belonging to other people, thus implicating them, thus committing slander/libel against them, thus criminal and not protected by the Constitution] to send over 10,000 e-mails within a 24-hour period to subscribers of America Online, Inc. (AOL) on three separate occasions. He intentionally falsified the header information and sender domain names before transmitting the e-mails.
The Court confused the right to anonymity with the crime fraud, misrepresentation of identity. Of course, some fault has to be assigned to the advocates, as well, especially the prosecutors. They should make use of statutes prohibiting fraud, not depend on new legislation specific to the Internet. The case is as simple as truth and the right to property, and independent of the medium used to commit fraud.
Obviously, any international "Internet police" should have no greater power than revocation of IP addresses allocated to offending nations, which would literally solve the rest of the world's problems [arising from such cases].
"The Internet has no borders and online crime is almost always international, yet local police authorities often have limited resources for investigations. Even if the locations of online criminals are discovered, the investigations rarely uncover the full scope of the crime. The victims, police, prosecutors and judges cannot see the full picture and therefore don't know the true costs of the crime," says Hypponen.
Any agency that offers computer forensics as requested and does not presume to dictate to sovereign nations would obviously be appreciated. Anything more authoritarian should be refused, but will probably be forced on the world by corporatists, especially within the US, UK and Germany.
"I can't imagine how things could get any worse!" (some guy) "That could just be failure of imaginatioÂn on your p
Mikko's a nice guy but we can't get together and stamp out genocide (Darfur et al), arms dealing (see the UN security council's arms sales) or world peace what hope do we have with cybercrime.
Cybercrime is easier to stop, not harder, than crime or warfare in meatspace. Cybercrime is easier to commit, too, of course, but it's not like the FBI & CIA are working with 50kg mice & keyboards preventing them from being as agile as criminals. They're just less motivated and less competent, and "complexity" is a pathetic fig leaf which we citizens must all stop granting our "protectors" ASAP.
"I can't imagine how things could get any worse!" (some guy) "That could just be failure of imaginatioÂn on your p
Yeah but this New Cop should close all Anti-virus companies and arrest it's employees and directors since they are the Virus Writers.
Anti Virus Companies == Virus Writers
...they'd spend their entire existence sucking fat salaries and occasionally managing to bust one or two half-wit script kiddies with barely enough knowledge to download the tools from a warez site and sneer at people who ask questions on Linux sites.
I've calculated my velocity with such exquisite precision that I have no idea where I am.
As an information security professional, I can assure you the Secret Service and the FBI have been fighting this for years. It is a very high priority but due to the fact a large percentage of the big fish are located in Russia and many forums/services requiring Russian translators, the process is slowed down massively. It is further exacerbated by the levels of corruption within many of these countries. Its a very complicated and very infuriating business they're in. Not a job I would want.
Mikko Hypponen is right about one thing at least - the crime and fraud over the Internet is rising. The entire usage of e-commerce is based on trust. Without trust, nobody will use it (or decreasing users) and it all falls apart.
It's one thing to have a group dedicated and resourced to track down criminals and take action but when users are able to hide within a country that effectively supports their activities, law enforcement are really hamstrung.
I'm waiting for Russia to attempt to join the WTO (since WIPO is all but a joke now). Only then will we really start seeing a change in the current state of play.
A short analogy ...
1) gas needed
2) gas needed (wouldn't wait for a 3rd time)
3) flyer inbetween windshield wiper and window
4) Carjackers
5) Shady Garagists
Actually ... there are laws against shady practices, still these shady people exist ... ... do we need a Carpol now ?
Same goes to carjackers
--- I am known for the ones who want to find me on the net. Is that a privacy risk or a privilege? One might wonder..
but it makes more sense to be supranational. i'm sure jackwads like preznit bush would back any kind of extra-national force that could impose penalties on individuals who commit crimes over the intertubes. NOT
Remember kids, if you're not paying for the service, YOU ARE THE PRODUCT THAT IS BEING SOLD.
Leav it to anon
Simply make Fraud, SPAM, Kiddie Porn etc a crime wherein
perpetrators have their genitalia (dick and balls) cut off and their
eyes removed. Then the word PEDO is branded on their foreheads.
We would see a great diminishment of these things fast. Word gets out.
Add people who respond to these things to the equation. Stupidity will disappear shortly.
Give cash rewards for reporting this stuff. Soon it will go away, when the idiots KNOW
people will report them and PROFIT!!!
Rewards are useful. Naturally, wearing a headband to hide the word PEDO should be
a capital offense.
Watch the fun ensue.
I can envision an internet fork where the safe provision of multimedia entertainment is the primary goal. People who care can then argue about "net neutrality" all that they want, but most of the eyeballs will go to the eye candy--and the eye candy will be provided by the copyright-clad establishment media.
In that 'multimedia entertainment net,' security and control will be prime considerations. Commerce will flock there. It will be stringently policed and censored. There will be little need for an "internet police force" because the source of any security breach will have its access cut off with no concern for individual rights (because the applicable rights will have been defined by contract). Anybody who doesn't like that can dwell in the "wild west internet."
This kind of future-model makes more sense to me than the drivel about an internet police force. Prosecutors and Police are busy enough with violent crime; taxpayers are NOT going to pay the very real money to effectively police the internet. Citizens always want more criminal justice than they are willing to pay for.
F-Secure has the nice habit of filling the disk with it's update files, about 5 Gigabyte per week on a normal school workstation.
We had one virus infection (that wasn't even caught by F-Secure), but every week our administrator has to clone at least 5 workstations from their master images. F-Secure provided a patch, that removes all the update files, but fails to repair the glitch, so a week later it's the same problem.
Hey, I thought of a clever name... internetpol. It's like interpol but for the intern... Wait, that's a pretty cool idea isn't it? Let's run with it.
fuk u. i got mah 9 an mah botnet and nigga u best not fuk wid me or i bust a ddos on yo azz and chek out som sick sploits, no wut im sayin dog?