Slashdot Mirror


The FBI Has a Trojan To Watch You

G_of_the_J writes "A man who had cut 18 cables affecting Verizon and Comcast was blackmailing them. He had demanded bank accounts be set up and information be provided on web sites that he specified. Although he used anonymous access to get to the web sites, the FBI had planted a trojan which was downloaded to his computer. The trojan then sent his IP address and other information to the FBI."

372 comments

  1. Magic Lantern by telchine · · Score: 1, Interesting

    Is this Magic Lantern, or something new?

    1. Re:Magic Lantern by Anonymous Coward · · Score: 1, Informative

      It's neither Magic Lantern nor new.

      http://it.slashdot.org/article.pl?sid=09/04/17/0534232

      Fortunately, this isn't quite a dupe. The Computerworld article in today's story is about the Wired article in the previous story.

      Granted, that's actually worse than a dupe, but one finds comfort where one can.

  2. silly muppet by Anonymous Coward · · Score: 0

    he deserved to be caught, and although this seems to be a dig at the FBI ... good for them ... people like this should be locked up, no parole.

    Anon

    1. Re:silly muppet by MRe_nl · · Score: 2, Insightful

      According to the complaint filed against Kelly, he believed that "companies like Comcast and Verizon were indirectly responsible for his unemployment and dire financial situation because they worked with companies that favored foreign engineers over their counterparts and because they had indirectly stolen his intellectual property."

      As part of his sentence in late 2005, Kelly was also ordered to enter a mental health program.

      No parole? He might be a silly muppet, possibly crazy, but treatment sounds more reasonable than prison. Or am i just a European speaking to an American ; ).

      --
      "Kill 'em all and let Root sort 'em out"
    2. Re:silly muppet by Anonymous Coward · · Score: 5, Funny

      Or am i just a European speaking to an American ; ).

      No, just an asshole acting smugly superior.

    3. Re:silly muppet by MightyYar · · Score: 1

      No jail time... we're not all that different.

      From TFA:

      Later that year, Kelly pleaded guilty to extortion, was sentenced to five years probation and ordered to pay Verizon $378,000 for the damage he did.

      In the USA, you only go to jail for drugs :)

      --
      W..w..W - Willy Waterloo washes Warren Wiggins who is washing Waldo Woo.
    4. Re:silly muppet by Anonymous Coward · · Score: 0

      Butthurt American.

    5. Re:silly muppet by sheepofblue · · Score: 2, Insightful

      I would assume he was found not guilty due to mental defect. If not I would be very afraid as his sentence reaks of the thought police. Sadly there is instances now of people's sentences being sent to "fix" their way of thinking.

    6. Re:silly muppet by Anonymous Coward · · Score: 0

      Parole? What do you mean?

      He was found guilty, sentenced to 5 years probation, $378000 fine, and ordered to enter a mental health program. No prison unless he does something to break his probation.

    7. Re:silly muppet by dave1791 · · Score: 1

      You are absolutely correct! After all, didn't arresting him violate his human rights?

    8. Re:silly muppet by oneTheory · · Score: 1

      Being an asshole and being correct are not mutually exclusive.

    9. Re:silly muppet by CherniyVolk · · Score: 0, Flamebait

      According to the complaint filed against Kelly, he believed that "companies like Comcast and Verizon were indirectly responsible for his unemployment and dire financial situation because they worked with companies that favored foreign engineers over their counterparts and because they had indirectly stolen his intellectual property."

      As part of his sentence in late 2005, Kelly was also ordered to enter a mental health program.

      No parole? He might be a silly muppet, possibly crazy, but treatment sounds more reasonable than prison. Or am i just a European speaking to an American ; ).

      And he was ordered to enter a mental health program?

      Comcast and Verizon do in fact outsource. They are companies, and therefore, they do steal intellectual property from engineers and scientists much the same way as the music industry steals compositions and performances from the musicians.

      From this angle, I applaud his efforts to hurt the companies who only serve to hurt their peers by throwing paychecks across the ocean and giving us the finger.

      He was only striking back. Self defense, self preservation, personal dignity, nothing wrong with that.

    10. Re:silly muppet by Anonymous Coward · · Score: 1, Funny

      Being an asshole and being correct are not mutually exclusive.

      If that's the case, then you are absolutely correct.

    11. Re:silly muppet by cbiltcliffe · · Score: 1

      Is all of Europe striving to be as bad as the French?

      I fart in your general direction!
      Your mother was a hamster, and your father smelt of elderberries!
      Now go away, or I shall taunt you a second time!

      --
      "City hall" in German is "Rathaus" Kinda explains a few things......
    12. Re:silly muppet by Khyber · · Score: 0

      Parole and probation are two entirely different things.

      Parole is deferred sentence from prison.

      Probation is issued after you have spent some time in prison.

      --
      Still waiting on Serviscope_minor to wake up to fucking reality and realize that Jessica Price isn't going to fuck him.
    13. Re:silly muppet by deroby · · Score: 1

      IMHO, I think it's a matter of "cultural image" that attracts this kind of remarks.

      It's not that we Europeans truly think to be superior vis-a-vis any other 'group' of the rest of the world, it's more that the USA projects an image off "Our way or the high-way" that makes non-American people ... errr... a bit more susceptible to outing criticism towards them.

      From my personal experience with Americans I'd generalize and say that
          * They have a very limited world-view ... aka, the world ends at the border (country or county, you decide)
          * They are not used to thinking for themselves and will do literally everything according to the book; very contradictory for the country that prides itself for all of it's liberties.
          * They are loud ... (but so are the Dutch, and the German, and the English ... and from what I've heard the Russians... (*))
          * They have this 'inbred' superiority feeling over them and they can't withhold from showing it. I remember a story on Dutch Television where a Dutch politician was visiting Florida during the 2000 elections as some kind of 'witness' and one of the officials sneered at him "You better watch carefully sonny, we'll show you how a proper election is done in a truly democratic country". Well, we all know how that ended.
          * They have a hard time admitting failure...
          * They are completely unable to recognize sarcasm, utterly completely unable. Makes for awkward situations.
          * They have a terribly sounding accent, really, who came up with that nasal sound ?!?
          * They have the weirdest standards on what can be done and what can't be. They'll consider a movie full of gore, blood and violence 'acceptable', yet when a blurred piece of skin comes in the picture they cry outrage !
          * Creationism
          * ... hmm, I'll stop here since I'll probably will overload the ./ system with foe-marks already =)

      That said, every single American I know personally and have talked/worked/played with over the past 15 years I'll describe as a friendly and caring person and an honour to be friends with. (**)
      I also would like to point out that the above is a gigantic generalization (but based on facts and experiences !) and that for most of the above I probably can find plenty of locals here that fit the bill too, albeit it's going to be hard to find one that fits all.

      (*: disclaimer : I'm neither of those... clearly =)
      (**: ok, there was this one guy that I'd gladly put against the wall at times, but in all honesty he had a double nationality (Greek + USA) and I think neither the Greeks nor the Americans wanted him back =)

      --
      If there is one thing to be learned on slashdot, it has to be sarcasm.
    14. Re:silly muppet by Hognoxious · · Score: 1

      They are companies, and therefore, they do steal intellectual property from engineers and scientists

      If ever we needed a '-1 non sequitur' mod, it's now.

      I award you zero points, AMGHMOYS.

      --
      Confucius say, "Find worm in apple - bad. Find half a worm - worse."
    15. Re:silly muppet by Speck'sBacon · · Score: 1

      Parole and probation are two entirely different things.

      Parole is deferred sentence from prison.

      Probation is issued after you have spent some time in prison.

      Actually, it's the other way around.

    16. Re:silly muppet by Anonymous Coward · · Score: 0

      That would be the other way around.

    17. Re:silly muppet by Speck'sBacon · · Score: 1

      "Steal" nothing. Most employment contracts involve signing over the rights to intellectual property created on the company time to your employer. This makes sense: the company has to cover its ass if it's going to make these bits of IP into sellable products. It wouldn't do if they start producing a widget using an employee's invention, only to have that employee leave the company, and promptly try to charge the company loads of money for it when this former employee created the technology using the company's resources.

    18. Re:silly muppet by Khyber · · Score: 1

      No, I have it right. I've been through the system a few times, I should know. Go get yourself a few felonies and come back.

      --
      Still waiting on Serviscope_minor to wake up to fucking reality and realize that Jessica Price isn't going to fuck him.
  3. Really? by Anonymous Coward · · Score: 0

    This is sooo last week.....

  4. top rank on google by Anonymous Coward · · Score: 4, Funny

    Crap. Too bad that website was the top rank on a google search for comcast verizon cut cable blackmail.
    I suppose posting anonymously won't help now.

  5. CIPAV by Psymin · · Score: 5, Informative
    1. Re:CIPAV by Anonymous Coward · · Score: 1, Interesting

      How many more agencies have software like this?

      Anyone have any info on how to detect/remove software like this?

    2. Re:CIPAV by ausekilis · · Score: 5, Informative

      Some more info and other applications can be found here. Linked in that article are 150 pages of documents involving CIPAV, just take a look here. Kinda makes you wonder exactly how some of these things happen, perhaps some cross-site scripting with the company requesting FBI help. It's worth noting that in order to use CIPAV, the FBI has to get court approval after explaining how the software can help stop a crime.

    3. Re:CIPAV by Anonymous Coward · · Score: 1, Interesting

      It might just because I've been skimming, but I haven't been able to find much by way of technical detail on how CIPAV works, namely what vector it uses to infect target machines, and what operating system(s) it "supports."

    4. Re:CIPAV by Phizzle · · Score: 2

      Hey my computer is acting FUNNY since I checked that wiki site about CIPAV.

      --
      I will not be pushed, filed, stamped, indexed, briefed, debriefed or numbered. My life is my own.
    5. Re:CIPAV by Spazztastic · · Score: 3, Insightful

      It's worth noting that in order to use CIPAV, the FBI has to get court approval after explaining how the software can help stop a crime.

      Like that stopped them from wiretapping without a warrant.

      --
      Posts not to be taken literally. Almost everything is sarcasm.
    6. Re:CIPAV by oneTheory · · Score: 4, Funny

      It's worth noting that in order to use CIPAV, the FBI has to get court approval after explaining how the software can help stop a crime.

      +1 funny

    7. Re:CIPAV by Coldmoon · · Score: 3, Interesting

      How many more agencies have software like this?

      Anyone have any info on how to detect/remove software like this?

      I doubt you will get an accurate count. The more successful it is and the longer it remains out of the hands of researchers will determine how many actually adopt its use.

      Detecting it with a scanner will be problematic as it is not something that would be released widely like "traditional" commercial/criminal Spyware. Targeted distribution over short periods of time makes discovery and analysis even harder.

      The first peice of advice here would be to strongly recommend avoiding activities that put you at risk of being targeted by Law Enforcement... For those that may fall on the more paranoid side of the discussion however, imaging and boot-to-restore solutions may offer a means to ensure that your computer is clean. They will not detect or block the program from working, but they can help with the cleanup. Whether restoring an image every time you start your computer makes any practical sense is entirely up to you...

      JMHO

      --
      Coldmoon over Dark water...
    8. Re:CIPAV by DittoBox · · Score: 5, Informative

      I know you're just whoring for karma but I thought I'd point out that it was the NSA that was doing the wiretapping. In addition, we should be applauding the fact that this needs court approval and that they seek that out prior to use.

      I know it's fashionable to hate on Federal law enforcement-and believe me I have plenty of grievances with the way things are done too-but I think you and lot of other folks have the same reactionary emotional response to the Feds that those who think they can do no wrong do, just in reverse.

      --
      Good. Cheap. Fast. Pick Two.
    9. Re:CIPAV by Binty · · Score: 5, Insightful

      Flamebait, seriously? We had a whole debate about this last summer, and some members of Congress actually argued that the President has a Constitutional prerogative to use whatever intelligence gathering methods he wants as long as he has a plausible argument that we're "at war."

      Note, that it doesn't particularly matter that the President argued he had Constitutional prerogative, presidents always assert that they have more power than they actually have. But Congress is supposed to be a branch of government competing with the President for power, they have incentives to check him instead of enable him.

      So it isn't flamebait at all to note that warrants are questionable protection when it comes to surveillance activities.

    10. Re:CIPAV by datapharmer · · Score: 2, Informative

      The "court approval" isn't a warrant though... pen-registers are "court approved" and this has been used in circumstances where that is all what they needed (they weren't tapping information they were just recording coming and going... or in this case the IP address of the person they were after)

      --
      Get a web developer
    11. Re:CIPAV by datapharmer · · Score: 5, Informative

      I mentioned this in another post, but the court approval is often for pen-registers which is not the same as a warrant. See here: http://www4.law.cornell.edu/uscode/uscode50/usc_sup_01_50_10_36_20_III.html Essentially it is ok to do without seeking a warrant because they are just recording the passage of information, not the contents. To use a house analogy - they are allowed to sit outside and record every person that comes and goes without a warrant, but if they want to know what was said by those people when they are inside they need a warrant.

      --
      Get a web developer
    12. Re:CIPAV by Spazztastic · · Score: 3, Insightful

      My Karma is already excellent, I'm not afraid to burn it just to make a point as well. I was simply taking a shot at Federal Government and making a point they (as in all of the three-letter-agencies) have done shady business in the past and just because they were court-approved in their dealings for THIS situation, what makes you think they've done it for every other?

      --
      Posts not to be taken literally. Almost everything is sarcasm.
    13. Re:CIPAV by PitaBred · · Score: 2, Interesting

      Are you sure they need a warrant? Last I heard, both the current and previous administrations have held that they just need to think about thinking you're a "terrist" and they can do whatever they want.

    14. Re:CIPAV by Fred_A · · Score: 2, Funny

      Hey my computer is acting FUNNY since I checked that wiki site about CIPAV.

      Zippy ? Is that you ?

      --

      May contain traces of nut.
      Made from the freshest electrons.
    15. Re:CIPAV by Intron · · Score: 2, Funny

      It might just because I've been skimming, but I haven't been able to find much by way of technical detail on how CIPAV works, namely what vector it uses to infect target machines, and what operating system(s) it "supports."

      This website would like to install an Active-X control. Click yes to allow or no to cancel.

      --
      Intron: the portion of DNA which expresses nothing useful.
    16. Re:CIPAV by dcollins117 · · Score: 5, Insightful

      We had a whole debate about this last summer, and some members of Congress actually argued that the President has a Constitutional prerogative to use whatever intelligence gathering methods he wants as long as he has a plausible argument that we're "at war."

      The problem is that as far as the government is concerned, they are always at "war". Presently you can count the wars in Iraq and Afghanistan, as well as all the wars against US citizens, including, but not limited to, the global war on terror, and the war on drugs, and apparently, the war on privacy.

    17. Re:CIPAV by Austerity+Empowers · · Score: 4, Insightful

      Maybe also when attempting a criminal act, don't use your own machine, and don't use the same machine twice.

    18. Re:CIPAV by GMFTatsujin · · Score: 4, Insightful

      Okay, so if the government wages "the war on privacy" by using invasive techniques, and is justified in doing so by saying "we're at war," then there's obviously no privacy, right?

      So can we say they've won the war on privacy, declare the war over, and thereby rescind the powers it used to wage such a war?

      Whoa. Headspins. Gotta sit down.

    19. Re:CIPAV by cool_story_bro · · Score: 1

      man, VirtualBox gets more and more attractive by the day.

      --
      You must wait a little bit before using this resource; please try again later.
    20. Re:CIPAV by icebike · · Score: 3, Insightful

      And don't use windows at all.

      --
      Sig Battery depleted. Reverting to safe mode.
    21. Re:CIPAV by cayenne8 · · Score: 2, Funny
      "And don't use windows at all."

      Yeah, that was my first thought too.

      I wonder if they have a Linux variant? That would be likely hard to do though, wouldn't it? I mean, unless you were stupid enough to execute a strange file you received from the FBI....

      --
      Light travels faster than sound. This is why some people appear bright until you hear them speak.........
    22. Re:CIPAV by Arthur+Grumbine · · Score: 4, Funny

      I'm sorry but that house analogy dcoesn't work for me, can you explain it using cars?

      --
      Now that I think about it, I'm pretty sure everything I just said is completely wrong.
    23. Re:CIPAV by Anonymous Coward · · Score: 0

      An interesting article on vendors response to CIPAV:

      http://www.ohmproject.org/index.php?option=com_content&task=view&id=30&Itemid=28

    24. Re:CIPAV by spacefiddle · · Score: 1

      Head hurts...

      Is this only effective against idiots who can't keep their OS / browser patched up, then commit crimes online? Will antivirus / spyware stop them? If you need a warrant (let's pretend law enforcement obeys the law), is it any different than a house search, or physically tailing a suspect to the proverbial dead drop?

      If it's so, is it legal to bar entry to your house if police have a warrant? Is a locked door legal defense against a search warrant when you're not home and don't know? Therefore, is antivirus illegal if you're a suspect..? It's already illegal to wear body armor in most places. What happens if your system detects and kills this thing..?

      Aaargh.

    25. Re:CIPAV by Firethorn · · Score: 1

      Might not help you from this stuff. After all, all it needs to do is call back, and if the virtual machine does, well, you're screwed.

      And the FBI/whoever confiscates the machine to keep the trojan from getting out in the wild.

      --
      I don't read AC A human right
    26. Re:CIPAV by wpiman · · Score: 2, Interesting

      Don't forget the war on poverty....

    27. Re:CIPAV by davester666 · · Score: 0, Offtopic

      Where can you get these condom's with mic's and/or camera's?

      I understand I'll have to post elsewhere to find out if it affect's performance...

      --
      Sleep your way to a whiter smile...date a dentist!
    28. Re:CIPAV by Anonymous Coward · · Score: 1

      I'll take a shot at it

      They are allowed to sit at the border and document all the cars and numbers of people crossing the border, including license plates.

      If they want to know how many illegal aliens, drugs, and weapons are crossing the border, they'll need a warrant.

      Crap, I think I screwed that up...

    29. Re:CIPAV by jc42 · · Score: 2, Interesting

      Don't forget the war on poverty....

      That was my favorite. Especially the part where it ended quickly, as poor people all over the US started asking where they could go to surrender.

      Now if we could figure out an equally clever response to all the other bogus "wars" on abstract concepts.

      --
      Those who do study history are doomed to stand helplessly by while everyone else repeats it.
    30. Re:CIPAV by Lord+Jester · · Score: 1

      Whoosh!!!

    31. Re:CIPAV by severoon · · Score: 1

      I would like to briefly take everyone along for a brief look into the mind of a blackmailer.

      If we look at the logic, the blackmailer must make a compelling enough threat to, in his mind, cause the company to want to comply with his request for money or whatever. However, this is not enough...if that was the end of the blackmailer's plan, it makes no logical sense to carry out the threat against a target that refuses to comply. The moment the threat is carried out, there's no longer any incentive for the target to pay, so there's no possibility of upside there for the blackmailer. However, the downside increases significantly...now the blackmailer has actually done damage and can be held to account for it.

      The only way it makes sense to carry out such a threat is to show the target that the threat was real. The only purpose of doing that, however, is to set up a second stage: another threat, another blackmail attempt. That is the only possible upside that makes it worthwhile to carry out a threat against a non-compliant target in the first go-round.

      So, I wonder what the next threat on the list is...

      --
      but have you considered the following argument: shut up.
    32. Re:CIPAV by Ironica · · Score: 1

      I'm sorry but that house analogy dcoesn't work for me, can you explain it using cars?

      They can follow you around and record where you go without a warrant. If they want to use your OnStar tracking system to listen in on you inside the car, though, they need a warrant... or at least a court order.

      --
      Don't you wish your girlfriend was a geek like me?
    33. Re:CIPAV by soul_on_fire2001 · · Score: 0

      Why not ? Quite possible. Create an instance of Amazon EC2 ? When done, delete the instance.

    34. Re:CIPAV by Anonymous Coward · · Score: 0

      However a good little hacker would block all outgoing traffic from the virtualbox to the proxy he's using...kinda makes the tool useless....and of course only an idiot is going to get caught by this stuff...

    35. Re:CIPAV by Anonymous Coward · · Score: 0

      It's funny how you got modded Flamebait, yet had you simply removed the reference to the current administration you likely would have received an Insightful instead.

      *sigh* There are none so blind as those who refuse to see.

    36. Re:CIPAV by DrLov3 · · Score: 0, Informative

      And ffs, don't use your own internet connection.

      I would suggest war driving around for a non-secure wireless access point, never use the same one twice.

      And when you do it, boot from knoppix live CD or any other downloaded from the web CD/DVD boot OS.

      Also, if possible, change your MAC adress by any means necessary.

      For bonus points : Do use a web proxy service located in russia or something

      Bonus Bonus FBI in WTF land points : Use SkyOS. :)

    37. Re:CIPAV by kasperd · · Score: 3, Funny

      I mean, unless you were stupid enough to execute a strange file you received from the FBI....

      Wait. Are you telling me those emails I received from FBI with an attached program I had to run were actually real?

      --

      Do you care about the security of your wireless mouse?
    38. Re:CIPAV by Zero__Kelvin · · Score: 1

      "Maybe also when attempting a criminal act, don't use your own machine, and don't use the same machine twice."

      This isn't very practical, since mosts computers do not have the tools needed to do any real cracking. Sure, script kiddies can probably get away with it, but a true cracker needs his/her environment including all the tools configured as desired.

      --
      Guns don't kill people; Physics kills people! - John Lithgow as Dick Solomon on Third Rock From The Sun
    39. Re:CIPAV by Somegeek · · Score: 1

      Shouldn't that be

      Vroooooommmm!!

      --
      And as you tread the halls of sanity, You feel so glad to be, Unable to go beyond. I have a message, From another time..
    40. Re:CIPAV by Architect_sasyr · · Score: 1

      Well no, basically any executable code exploit would let you get away with this. Sure, you don't get root but why not just execute a tcp connection back to a webserver that sends an identifiable string - that way you can log case number xxyzzy against IP dot, and have what you are after.

      Any semi intelligent person doing this would have had a hardware firewall (or a *nix bridge) in between them and the internet, forcing them to only use the tor network proxy at one point and letting nothing else through. A good security system should be in place before you start black mailing someone anyway.

      Err. Maybe I shouldn't have said that.

      --
      Me failed English...
      FreeBSD over Linux. If my comments seem odd, this may explain...
    41. Re:CIPAV by Jedi+Alec · · Score: 1

      So can we say they've won the war on privacy, declare the war over, and thereby rescind the powers it used to wage such a war?

      Taking away those powers would clearly be...an act of war, hence starting the whole thing all over again.

      How's the head? :-)

      --

      People replying to my sig annoy me. That's why I change it all the time.
    42. Re:CIPAV by SlashWombat · · Score: 1

      Surely it came with the same FBI warning that you see on Video's and DVD's?

      Pretty funny really, there must be hundreds of ways of protecting against rogue downloads, when you would be expecting a gov agency to at least try something sneaky!

    43. Re:CIPAV by joelmax · · Score: 1

      Yes, however in a virtualbox environment, it means you can use any pc, just have the image on a usb key or dvd, something that can easily be destroyed, then you don't have to worry about the callbacks... pop into an internet cafe, plug in, do the work and leave. If you worry about being caught, destroy the media

    44. Re:CIPAV by The+Cisco+Kid · · Score: 1

      Looks like its a Windows-only tool. Yet one more reason to be glad I don't run Windows. (Not that I expect to be doing anything the FBI would want to track me down for)

    45. Re:CIPAV by sumdumass · · Score: 1

      A lot of that can be accomplished with a custom bootable CD or even apps configured to run from a flash drive or something.

      I'm not sure if it would be ideal or not. But it would be somewhat doable.

    46. Re:CIPAV by sumdumass · · Score: 1

      I'm sorry but that house analogy dcoesn't work for me, can you explain it using cars?

      "they are allowed to sit outside (in a car) and record every person that comes and goes (in their own car) without a warrant, but if they want to know what was said by those people when they are inside (the car) they need a warrant."

      Hope that helps ;)

  6. He's Lucky by Anonymous Coward · · Score: 0

    The Governator didn't get him 1st

  7. It's actually more about jurisdiction... by pmarini · · Score: 1

    as I wrote in my journal.
    The "long arm" of the FBI ? How long ?

    --
    Can I put a spell on those who can't spell?
    Your wheels are loose and they're losing their grip, good you're there.
  8. no wonder he was unemployed.... by Shakrai · · Score: 5, Insightful

    ... if he was stupid enough to visit the "private" website they created for him with such a lax security setup that his computer willingly installed the FBI's trojan.

    --
    I want peace on earth and goodwill toward man.
    We are the United States Government! We don't do that sort of thing.
    1. Re:no wonder he was unemployed.... by Clandestine_Blaze · · Score: 1, Offtopic
    2. Re:no wonder he was unemployed.... by Lumpy · · Score: 4, Interesting

      Exactly. It amazes me the number of buffoons that get caught by the FBI's lame attempt at tracking with their software.

      you have to be a wannabe ankle-biter to download and run anything you don't know exactly what it is.

      --
      Do not look at laser with remaining good eye.
    3. Re:no wonder he was unemployed.... by SpaceCadetTrav · · Score: 5, Interesting

      It doesn't have to be that stupid. My PC is constantly asking me to auto-update components from:

      • Windows Update
      • Adobe Flash
      • Firefox
      • Misc firefox plugins
      • Antivirus
      • etc....

      If the FBI has cooperation from any one of these organizations, it would be trivial to get someone to slip a piece of data into an auto-update for a specific customer.

    4. Re:no wonder he was unemployed.... by Anonymous Coward · · Score: 0

      No doubt...it would have been smart for him to have used wget or even write a simple http user agent (there are many libraries that implement the http spec that could be used so that he could preview the HTML that was returned. Visiting the site with an actual graphical browser that parses the page and pulls in additional resources (images, Flash movies, Java applets) or executes JavaScript/VBScript is just patently stupid.

      As is visiting the site from home...there are plenty of out-of-the-way internet cafes that he could have used instead. If you're doing something like this, you'd want to have 10-20 places that you could use just once each for when you need to interact with the FBI.

    5. Re:no wonder he was unemployed.... by Shakrai · · Score: 5, Insightful

      it would be trivial to get someone to slip a piece of data into an auto-update for a specific customer.

      How would that help them in a case like this where they didn't know who that specific customer was?

      --
      I want peace on earth and goodwill toward man.
      We are the United States Government! We don't do that sort of thing.
    6. Re:no wonder he was unemployed.... by Opportunist · · Score: 5, Insightful

      Hey, you gotta see it from a statistician's point of view. Catching 90% of the criminals takes 10% effort. Catching the other 10% takes 90% effort.

      Now tell me which ones you catch when every single one counts as "one" in your "how many did you catch this year" statistics.

      Bottom line: You only catch the dumb criminals.

      --
      We used to have a Bill of Rights. Now, with the rights gone, all we have left is the bill.
    7. Re:no wonder he was unemployed.... by Opportunist · · Score: 0

      Just do it with all of the customers of a certain area/ISP. Hey, as long as you don't activate it, the rest won't notice, right?

      And, well, could come handy just in case you have another criminal getting ready to do something. Yeah, one or two might actually know what they're doing with their box. So they got a trojan. Hey, their fault, right? They'll get rid of it somehow.

      You don't think the FBI would go out and tell you that they were the ones that launched that trojan, do you? It was some ... dunno, terrorist? Pedophile? Commie? What's the boogieman of the day, I stopped keeping track lacking interest.

      --
      We used to have a Bill of Rights. Now, with the rights gone, all we have left is the bill.
    8. Re:no wonder he was unemployed.... by $1uck · · Score: 3, Insightful

      Um... seriously? If they know the specific customer they wouldn't need to install the trojan.

    9. Re:no wonder he was unemployed.... by TheRaven64 · · Score: 1

      They set up a private web site that only he would access. From this, they would have the IP address he used. They could then use something like Windows Update to send a trojaned update to only that IP. Of course, it's far more likely that they just exploited a browser vulnerability and installed their software...

      --
      I am TheRaven on Soylent News
    10. Re:no wonder he was unemployed.... by Anonymous Coward · · Score: 0

      Well, knowing the recipient wins far more than half the battle in finding the sender.

    11. Re:no wonder he was unemployed.... by SpaceCadetTrav · · Score: 1

      Well they obviously had his IP address. Adobe could have made a "special" update for any auto-update client from that specific IP.

    12. Re:no wonder he was unemployed.... by oneTheory · · Score: 3, Insightful

      Good point. The only reasonable conclusion is to monitor everyone. Then we can find the bad guys easily whenever there's a problem. And we'll never ever misuse these powers, pinky swear.

    13. Re:no wonder he was unemployed.... by amiga3D · · Score: 1

      Anyone engaged in criminal activity should be the most paranoid about computer security. I mean, come on! If you're breaking the law you have to know the cops are looking for you. Take a few precautions! Dumb ass crooks. He should have been running the most locked down computer setup possible. Hell...I bet he was running Windose. Stoopid!

    14. Re:no wonder he was unemployed.... by amiga3D · · Score: 1

      I'm constantly getting upgrade requests from Ubuntu repositories. I don't really worry about it despite the fact that I don't check the source code. I know it's possible to get malware even if it's not likely. But...I'm not breaking the law. If I was I'd be running linux from scratch and compiling all my own software. Then I'd have virtually nothing on the computer but the bare minimum to do the business in question. Everything would be encrypted. The number of security risks you run should be calculated on how much you have to lose. Having said that. I'm glad they got the asshole. He deserves what he got.

    15. Re:no wonder he was unemployed.... by SpaceCadetTrav · · Score: 1

      But...I'm not breaking the law.

      It's impossible for you to know that you aren't breaking any laws. In the U.S., you live under more federal, state, county and city laws than you could read in your lifetime.

    16. Re:no wonder he was unemployed.... by Shakrai · · Score: 1

      If they knew his IP address, why would they need the trojan to identify him? TFA says he was using an anonymizer service of some sort.

      --
      I want peace on earth and goodwill toward man.
      We are the United States Government! We don't do that sort of thing.
    17. Re:no wonder he was unemployed.... by Anonymous Coward · · Score: 0

      Also consider that no OS would be immune from that. With cooperation a trojan could be slipped into Linux, OS X, Solaris, OpenBSD, Trusted<Whatever>. Anything where you're getting software from somewhere else.

    18. Re:no wonder he was unemployed.... by shawn(at)fsu · · Score: 3, Funny

      Okay this is what you need to do. First take off the tinfoil hat. Next is go outside, you really need to get some sunlight.

      --
      500 dollar reward for tip(s) leading to the arrest of the person(s) who stole my sig.
    19. Re:no wonder he was unemployed.... by Kiralan · · Score: 1

      IIRC, the IP address they would see would be the anonymizer's address, not his IP address. The Trojan would 'announce' his local IP address, which would give his 'identity'.

      --
      V for Vendetta: People should not be afraid of their governments. Governments should be afraid of their people.
    20. Re:no wonder he was unemployed.... by skeeto · · Score: 1

      The "update" patch monitors the network/browser for access to the special ransom website. Anyone who accesses it has their information sent along to the FBI.

    21. Re:no wonder he was unemployed.... by neomunk · · Score: 1

      This thread is all about how they got his IP in the first place. They couldn't have arranged a special package for his IP in order to find out what his IP was.

    22. Re:no wonder he was unemployed.... by drinkypoo · · Score: 3, Funny

      Nice. See if you can figure out my identity from my IP address, ignoring of course that it's right there in my email address. Here's my IP:
      192.168.1.42
      Good luck!

      --
      "You're right," Fisheye says. "I should have set it on 'whip' or 'chop.'"
    23. Re:no wonder he was unemployed.... by Anonymous Coward · · Score: 0

      It's still possible to abuse the trust that prople have in their virus scanner, in Adobe Flash, or updates provided by Microsoft to ease the installation of a crooked plugin by hosting it on one of those companys' servers and signing them properly. I'd say the only ones you could more or less rely on for an unknown blackmailer would be Microsoft and Adobe.

    24. Re:no wonder he was unemployed.... by CarpetShark · · Score: 1

      you have to be a wannabe ankle-biter to download and run anything you don't know exactly what it is.

      If you know without doubt exactly what any program is before you've ran it** at least once, I'm impressed by your quite unearthly powers. If you've ran it and know every possible code path it'll take in every other run without a code audit, I'm equally impressed.

    25. Re:no wonder he was unemployed.... by Reziac · · Score: 1

      And doesn't that make you wonder just how many people's computers they installed this trojan on before hitting the right perp??

      --
      ~REZ~ #43301. Who'd fake being me anyway?
    26. Re:no wonder he was unemployed.... by hoggoth · · Score: 3, Informative

      > Also consider that no OS would be immune from that. With cooperation a trojan could be slipped into Linux, OS X, Solaris, OpenBSD, Trusted. Anything where you're getting software from somewhere else.

      He'd probably be pretty safe if he accessed the ransom website from a computer booted from a Live-CD of a less popular distro. We're talking about a guy committing some serious crimes... it would be worth his time to compile Minix or something totally obscure and use telnet to grab the webpage from the ransom site.

      Hell, I just saw a kid browsing a webpage on his DS the other day. There are a lot of ways this guy could have avoided getting caught. I'm glad he got caught of course. But he could have at least tried a little harder :-).

      The real weak link would be whenever and whereever he physically took possession of the money. That's where his real identity must interact with the "chain" the money has followed.

      PS IAACFI (I am a computer forensics investigator).

      --
      - For the complete works of Shakespeare: cat /dev/random (may take some time)
    27. Re:no wonder he was unemployed.... by Shakrai · · Score: 4, Funny

      Hey, that's my IP address! drinkypoo hacked my computer! Where's the FBI when I need them?

      --
      I want peace on earth and goodwill toward man.
      We are the United States Government! We don't do that sort of thing.
    28. Re:no wonder he was unemployed.... by Opportunist · · Score: 1

      I am NOT paranoid!

      Because when you are, THEY notice it immediately!

      --
      We used to have a Bill of Rights. Now, with the rights gone, all we have left is the bill.
    29. Re:no wonder he was unemployed.... by Anonymous Coward · · Score: 0

      It doesn't have to be that stupid. My PC is constantly asking me to auto-update components from:

      [snip]

      • Adobe Flash

      [snip] If the FBI has cooperation from any one of these organizations, it would be trivial... [snip]

      Magic Lantern = Flash.

    30. Re:no wonder he was unemployed.... by Anonymous Coward · · Score: 0

      How does that make sense? The guy tells them to set up a private site to use to communicate with him, and when he visits it all of a sudden he gets notices that there are updates for Flash and Firefox that he needs to install? That wouldn't make someone who's probably already suspicious a little bit uneasy? If they weren't delivering it over a site, but straight to his computer, wouldn't they already need to know his IP so they know who to target? Is this really a post filled with questions?

    31. Re:no wonder he was unemployed.... by VJ42 · · Score: 1

      Here's my IP: 192.168.1.42 Good luck!

      Yeah! well my IP address is 127.0.0.1, hack that!

      --
      If I have nothing to hide, you have no reason to search me
    32. Re:no wonder he was unemployed.... by LoRdTAW · · Score: 1

      If I were him I would use links running off a Knoppix CD for browsing. And for internet it would be smart to use an open wireless AP from a laptop, preferably one that isn't in the same area where you live.

    33. Re:no wonder he was unemployed.... by Anonymous Coward · · Score: 0

      I visited your website. It looks really good. Being that it looks a lot like mine though, I'm biased.

    34. Re:no wonder he was unemployed.... by Tubal-Cain · · Score: 1

      What are my files doing on your PC!?!?

    35. Re:no wonder he was unemployed.... by penguin_dance · · Score: 1

      Well the workarounds to how to do this the "right way" are an interesting exercise, but can I say I'm GLAD the jerk got caught? That criminals are cocky and/or stupid is a GOOD thing!

      OTOH, I'm just glad he didn't shoot up the workplace or take out his family as we've seen so much of lately. Cables can be repaired.

      --
      If you've never been modded as "flamebait" or "troll," you've never tried to argue a minority viewpoint here!
    36. Re:no wonder he was unemployed.... by Dare+nMc · · Score: 1

      they didn't say which IP address. if you could post the result of "tracert cnn.com" or "traceroute cnn.com" pretty good idea someone will have you down to the city or company your at.

    37. Re:no wonder he was unemployed.... by Anonymous Coward · · Score: 0

      The government could have ties to one of these companies, but installing on a specific person's computer would be near imposible but it just may be on everyones computer with software from that softwares company. Big brothers watching and we can't do anything about it.

    38. Re:no wonder he was unemployed.... by rcamans · · Score: 1

      You forgot to tell him how to go outside. You just assumed he had been there before and remembered the route. You have to give him a map, just like in all his video games.

      Route:
      Walk up the basement stairs (in your mama's house).
      Open up the basement door.
      Get sunglasses from your mother.
      Ask her which door leads outside.
      Ask her to unlock that door.
      Open the door.
      Go outside. (probably after ingesting sufficient valiums)

      --
      wake up and hold your nose
    39. Re:no wonder he was unemployed.... by rcamans · · Score: 0, Flamebait

      Um, did they catch Bush? Because I am pretty sure he got away.
      So, I am just saying, they do not even catch all the dummies, just the ones who they have the manpower to, who are not working for them.

      --
      wake up and hold your nose
    40. Re:no wonder he was unemployed.... by Hognoxious · · Score: 0

      In the U.S., you live under more federal, state, county and city laws than you could read in your lifetime.

      While that could well be true in theory, many of those laws will be quite specific.

      It's not difficult to work out that "Kode 97.3.a - wot u haz to doo about gas stations not explaudin" doesn't apply if you don't run a gas station, and "Rool 76.4.3a-c - law wot sez fude preparashun kannet be like all dairty and shittie and stuff" isn't particularly relevant if you don't operate a diner/restaurant etc etc.

      Take that paranoia and trade it in for some common sense, you fucking loon. You can walk down the street without consulting 17 lawyers. Disclaimer: that's not legal advice, VWP, YMMV.

      --
      Confucius say, "Find worm in apple - bad. Find half a worm - worse."
    41. Re:no wonder he was unemployed.... by Hognoxious · · Score: 0

      Catching 90% of the criminals takes 10% effort. Catching the other 10% takes 90% effort.

      Huh? Those figures add up to 100%. Can't be right, this is a government agency we're talking about.

      --
      Confucius say, "Find worm in apple - bad. Find half a worm - worse."
    42. Re:no wonder he was unemployed.... by Gilmoure · · Score: 1

      Evil Mr. Yellowface, it burns!

      --
      I drank what? -- Socrates
    43. Re:no wonder he was unemployed.... by Yvanhoe · · Score: 1

      They only know that the person X will connect on honeypot.fbi.gov, probably through a proxy. Catching this person can require a trojan that will try to send a "I am here" notice without going through the proxy.

      --
      The Wise adapts himself to the world. The Fool adapts the world to himself. Therefore, all progress depends on the Fool.
    44. Re:no wonder he was unemployed.... by mario_grgic · · Score: 1

      You could run it in virtual machine running on computer not connecting to the internet.

      You could disassemble the program (sometimes just looking at strings output of it is indicative of what it is) and analyze it.

      --
      As the island of our knowledge grows, so does the shore of our ignorance.
    45. Re:no wonder he was unemployed.... by camperdave · · Score: 1

      Yes. As if anyone in the government puts in 100% effort. The 10% figure sounds right, though.

      --
      When our name is on the back of your car, we're behind you all the way!
    46. Re:no wonder he was unemployed.... by DJGrahamJ · · Score: 1

      Don't forget I-ANAL...

    47. Re:no wonder he was unemployed.... by Anonymous Coward · · Score: 0

      You make the GP's point for him, you wannabe space cadet. Allow me to paraphrase the GP: "Only a wannabe ankle-biter could POSSIBLY think that he could go up against the FBI while running an operating system known to the world for it's lack of security"

      OBVIOUSLY the moe-ron has no idea what a firewall is used for, or how to set one up, let alone how to monitor it. There are a number of windows-centric software firewalls that a trojan is unlikely to defeat, if set up properly by a paranoid. (Tiny Firewall comes readily to mind - I want to say version 6, but I could be in error on the specific number)

      Does that help you to understand his post any better? Let us suppose that I were to go up against corporate America and the FBI. No Windows Update, no Adobe Flash, Firefox yes, but no plugin updates, no antivirus, no etc. Nor would I connect directly to any site - at the LEAST I would use TOR (developed by the freindly NSA) with all the fringe programs associated with it.

      wannabe ankle-biter sounds about right. In Microsoft he trusts, ROFLMAO

    48. Re:no wonder he was unemployed.... by hviniciusg · · Score: 1

      I think u may be quoting the pareto principle of that states, for many events, roughly 80% of the effects come from 20% of the causes. see http://en.wikipedia.org/wiki/Pareto_principle for more info

    49. Re:no wonder he was unemployed.... by rilles · · Score: 1

      all your base are belong to us.

    50. Re:no wonder he was unemployed.... by Anonymous Coward · · Score: 0

      Tinfoil hats actually amplify the mind control waves...

    51. Re:no wonder he was unemployed.... by VGPowerlord · · Score: 1

      According to the tool I used, your name is Douglas Adams, and you're only PRETENDING to be named Martin.

      --
      GLaDOS for President 2016! "Well here we are again. It's always such a pleasure." -- GLaDOS, 2011
    52. Re:no wonder he was unemployed.... by gooneybird · · Score: 1

      That's funny, my firewall (and hosts file) is constantly denying access to the following programs:

      * Windows Update
      * Adobe Flash
      * Firefox updates
      * Misc firefox plugins
      * Antivirus
      * and many others, etc....

    53. Re:no wonder he was unemployed.... by Anonymous Coward · · Score: 0

      It doesn't have to be that stupid. My PC is constantly asking me to auto-update components from:


      •    
      • Windows Update
      • Adobe Flash
      • Firefox
      • Misc firefox plugins
      • Antivirus
      • etc....

      If the FBI has cooperation from any one of these organizations, it would be trivial to get someone to slip a piece of data into an auto-update for a specific customer.

      And if I was going to try and blackball someone like Verizon & Comcast, I'd do it from an off-camera location in a parking lot of a coffe shop using a laptop purchased from a 2nd hand store with cash (or stolen).
      The information I wanted would be transferred by hand to paper, and the laptop chucked into a river. Oh, and the shop I used would be a very long distance from my home, preferably in another state.

    54. Re:no wonder he was unemployed.... by TheVelvetFlamebait · · Score: 1

      It was some ... dunno, terrorist? Pedophile? Commie? What's the boogieman of the day, I stopped keeping track lacking interest.

      I believe the boogieman du jour is the government, at least here on slashdot.

      --
      You know, there is a difference between trolling and pointing out the flaws in your reasoning. Just saying.
    55. Re:no wonder he was unemployed.... by jc42 · · Score: 1

      In the U.S., you live under more federal, state, county and city laws than you could read in your lifetime.

      Take that paranoia and trade it in for some common sense, you fucking loon. You can walk down the street without consulting 17 lawyers.

      Heh. I've read a number of articles by some of those 17 lawyers explaining in detail why, in most of the US (and probably most other countries), it is technically impossible to not be in violation of some law. There are a number of web sites with collections of weird laws that help in this.

      Just one of many examples from a city where I once lived: Someone pointed out that there was a rather general ordinance forbidding the possession of "gambling devices". It wasn't to specific about what constituted such a device, but the journalists had a bit of fun imagining. For instance, do you have any coins or currency in your pocket? If so, are you familiar with any of the various gambling games that are played with coins or by comparison of the serial numbers on paper money? Those games may be silly, and mostly children's games, but they are obviously "gambling", so if you have any money in your pocket, you're can be arrested under that law. If not, well, you can read the "vagrancy" laws. Not being in possession of money is, in most places, ipso facto evidence of vagrancy, for which you can be arrested and held in jail.

      Now, granted, most of us aren't going to be arrested for such "violations". These are what are commonly called "nuisance laws". That is, if you're making a nuisance of yourself to the people in charge, they can make themselves a nuisance to you by arresting you, holding you overnight, running you out of town, whatever. Such laws are typically designed with the intent of application against someone who they want to arrest and hold but who hasn't committed any serious offense.

      Here in Massachusetts, someone recently discovered that there's a law still on the books that requires all adult men to carry a firearm when they go to church on Sunday. I'd known about the similar law in Georgia ("for protection from the savage Indians"), and it wasn't really that much of a surprise to find that Massachusetts once passed a similar law. The media here also had a bit of fun a few years ago when they discovered that Boston still had a law that forbids Indians from being within the city limits after sundown. (It's not clear whether this applies to Indians from India, or just the native kind. ;-)

      I'm sure others here can contribute some fun laws (typically pairs of laws) in their community that you (or perhaps some special others) can't avoid violating. It's a rare jurisdiction where such laws don't exist, especially since old laws rarely get repealed.

      Anyone here have a favorite "weird laws" site? Extra points for lists of laws that you can't avoid violating.

      --
      Those who do study history are doomed to stand helplessly by while everyone else repeats it.
    56. Re:no wonder he was unemployed.... by Dupedupeshakur · · Score: 1

      >

      The real weak link would be whenever and whereever he physically took possession of the money. That's where his real identity must interact with the "chain" the money has followed.

      PS IAACFI (I am a computer forensics investigator).

      Mostly agreed... but if Somali pirates can get money wired to them anonymously - why not this guy?

    57. Re:no wonder he was unemployed.... by Arceliar · · Score: 1

      1: Connect to proxy server
      2: Visit website
      3: Get infected with trojan
      4: Trojan phones home, they see the proxy's IP again
      5: Disconnect from proxy some time later
      6: Trojan phones home again, they see your real IP
      7: ???
      8: PRISON!

    58. Re:no wonder he was unemployed.... by shird · · Score: 1

      No, they didn't have his IP address.. thats the whole point of the trojan, to get his true IP address. They might have had the IP address of the exit node for the TOR relay he was using... but that's of no use.

      --
      I.O.U One Sig.
    59. Re:no wonder he was unemployed.... by Anonymous Coward · · Score: 0

      Obviously your Arthur Dent!

    60. Re:no wonder he was unemployed.... by jc42 · · Score: 1

      As if anyone in the government puts in 100% effort. The 10% figure sounds right, though.

      Actually, the OP didn't get the old joke quite right. There are actually two versions, the simpler is: The first 90% of the job takes the first 90% of the time; the remaining 10% takes the other 90% of the time.

      There's also the expanded (asymptotic) version: The first 90% of the job takes the first 90% of the time; the next 9% takes the next 90% of the time; the next 0.9% takes the next 90% of the time, ....

      This is a canonical comment when discussing any sort of organizational schedules. It's not just governments; the same phenomenon has been copiously documented in the corporate development environment. It's not how governments work; it's how groups of humans work.

      --
      Those who do study history are doomed to stand helplessly by while everyone else repeats it.
    61. Re:no wonder he was unemployed.... by LostCluster · · Score: 1

      IP address isn't enough to determine identity. But IP address and date/time is enough to get the ISP to tell them who was paying for the service at that time.

    62. Re:no wonder he was unemployed.... by LostCluster · · Score: 1

      They don't arrest suspects as soon as they're identified. They usually let the suspect have his last days of freedom closely monitored so they get caught with enough evidence to get the conviction.

    63. Re:no wonder he was unemployed.... by Maltheus · · Score: 1

      Haha, sucker, I just hacked in to 192.168.1.42 and I'm about to crash your entire network.

    64. Re:no wonder he was unemployed.... by Anonymous Coward · · Score: 0

      I don't know how you got into my office, but when i find you i am going to fucking kill you. /throws chair

    65. Re:no wonder he was unemployed.... by BlueStrat · · Score: 1

      > Also consider that no OS would be immune from that. With cooperation a trojan could be slipped into Linux, OS X, Solaris, OpenBSD, Trusted. Anything where you're getting software from somewhere else.

      He'd probably be pretty safe if he accessed the ransom website from a computer booted from a Live-CD of a less popular distro. We're talking about a guy committing some serious crimes... it would be worth his time to compile Minix or something totally obscure and use telnet to grab the webpage from the ransom site.

      Hell, I just saw a kid browsing a webpage on his DS the other day. There are a lot of ways this guy could have avoided getting caught. I'm glad he got caught of course. But he could have at least tried a little harder :-).

      The real weak link would be whenever and whereever he physically took possession of the money. That's where his real identity must interact with the "chain" the money has followed.

      PS IAACFI (I am a computer forensics investigator).

      This is the kind of thing where the perpetrator would want to use Anonym.OS Live CD along with connecting from a random cracked wireless router or WiFi hot-spot.

      That would be pretty darned tough to track/crack for law enforcement, given a reasonably-clued perpetrator.

      Strat

      --
      Progressivism (aka US 'Liberalism'): Ideas so good they need a police/surveillance-state to enforce.
    66. Re:no wonder he was unemployed.... by Anonymous Coward · · Score: 0

      that's your internal networking IP! nobody can access your PC from the web with that info!

    67. Re:no wonder he was unemployed.... by Anonymous Coward · · Score: 0

      [Disclaimer: I have no intention of RTFA.]

      All this chat about windows update etc. is a red herring. There are trojans which can be installed simply by visiting a website. There's no need to click links or run programs.

      All the F.I.B. had to do was deliver their trojan in this manner. Job done.

    68. Re:no wonder he was unemployed.... by nog_lorp · · Score: 1

      Sure, until you recognize that it uses a basic modified UPX packer, set a break at the POPAD/JMP to OEP that UPX always has. Then the hidden code midway through the UPX stub installs the trojan and you're fucked.

    69. Re:no wonder he was unemployed.... by Anonymous Coward · · Score: 0

      Stupidity is one way to look at it, and the other is that this was ill informed, criminally insane, or greedy to the point where he was blinded by his own pride. Let us not forget Icarus, the child with wings of wax. Fly to close to the sun, (in this case malicious criminal intent), and you fall to the very hard Earth below. I know we all love the freedom the internet has given us, and while this man (or woman, I didn't read the article, as I wanted to get to a bit of writing), may have loved that freedom, he still couldn't control his conscience. By ignoring right and wrong, we open ourselves up for more regulation, longer sentences, and even assassination, should this have been a case similar to movie, "Harley Davidson and the Marlboro Man," where Don Johnson, and his biker buddies rob a bank truck owned by the mob. The mob systematically kills a bunch of the bikers, who had only agreed to the robbery to save their hangout spot. Rule 1 of being a successful criminal is not to get caught, and to this day, criminals attempting to gamble with their freedom, are finding timt and time again, that the house always wins. Sure they might let you steal a hand here and there, but by the time you turn it into a lawbreaking addiction, your freedom is already gone and the only hand you'll be playing is in the prison rec area, 5 card stud, with thousands of other gamblers. Thus we must realize that the quick and easy, while occasionally profitable, still makes you a target down the line. This black mailing thief walked a very short line, and didn't have enough sense to realize the potential of these networks, where anonymity is a tool to be used for security, but should not be the only thing you have going, especially in the post war-on-terror global internet. To go a bit deeper, keep in mind that while we may often consider the open source tools incredibly useful for securing against hackers and scammers, they are often marginalized by the tremendously large network of monitoring hardware (cams, mics, remote servers doing packet sniffing and trace-routes) and by the vast resources, of an increasingly sophisticated intelligence network. Also ponder, for a moment, the mindsets of the people who run this system (MIT, ITT, Harvard, Yale, the military academies, and even the ROTC groups). They are offered high salaries, and powerful careers, in an effort by the intelligence communities to train and recruit the best of the best. I understand the need to rebel from time to time... such as when you're an adolescent, or during a midlife crisis... but it is a fools endeavor to perpetually fight city hall, while challenging the purse strings of the status quo and by proxy, world markets. Dude should have done what millions of other free people do with his idea: write it as fictional novel, and inspire young people to learn more... not to make the script kiddies, but create the intrigue that many people enjoy. Even hack authors like Tom Clancy make bank. And that's what this comes down to. The computer users need to realize, much like Peter Parker had learned from Uncle Ben, "With great power, comes great responsibility." Spiderman lost his uncle because of a simple error in judgment. While this is an example of fiction, let us now remember all of the fatherless children, who are victims of their own folly, having been incarcerated by a system that feeds on mistakes and thoughtless actions. The human mind makes decisions 7 seconds quicker in the subconscious, than it does in the conscious. Guns, violence, pride, envy, lust, blah, blah, blah... 7 deadly sins that inflict terror onto the world, and all can be avoided by making the conscious decision that logic and order will best serve one's family, one's friends, and one's community. Look at the Masons, demonized by fiction and by history, should you go back to the Friday the 13th where they were hunted as traitors to the church, and you will find that their public face is always that they teach good moral values, and good judgment in any situation; both in their personal lives and in their

    70. Re:no wonder he was unemployed.... by Anonymous Coward · · Score: 0

      Steady on cowboy! Are high levels of encrpytion, still deemed illegal in the US because intelligence agencies cannot spy on you.

      I am just giving you the "heads up" from the UK as anonymous coward, the most spied on nation on earth.

      Carnivore,
      Magic Latern,
      rm-rf */var/logs Why do you need logs anyway? Think about it, either you are that stupid, that you need reminding of how you screwed up! or how bad your programming skills are!

      Eitherway smile, I love you all and I am Spartacus!

    71. Re:no wonder he was unemployed.... by drinkypoo · · Score: 1

      But IP address and date/time is enough to get the ISP to tell them who was paying for the service at that time.

      Mine isn't. Why would his be? Even if I was letting my ISP assign me an address, it would be done by their router at my house, which wouldn't tell them which machine had what lease.

      --
      "You're right," Fisheye says. "I should have set it on 'whip' or 'chop.'"
    72. Re:no wonder he was unemployed.... by Anonymous Coward · · Score: 0

      Can't be, it's mine.

    73. Re:no wonder he was unemployed.... by GlobalEcho · · Score: 1

      Hey, you gotta see it from a statistician's point of view. Catching 90% of the criminals takes 10% effort. Catching the other 10% takes 90% effort. ...
      Bottom line: You only catch the dumb criminals.

      Well, not only, but largely. They caught Ted Kaczynski, after all, but it took them dozens of agents and many years. He is way on the smart end of the criminal scale.

    74. Re:no wonder he was unemployed.... by GWBasic · · Score: 1

      it would be trivial to get someone to slip a piece of data into an auto-update for a specific customer. How would that help them in a case like this where they didn't know who that specific customer was?

      Simple: Microsoft, Mozilla, McAfee, ect, ect, could slip a security hole into an update; and then fix it a few weeks later.

      Now if you excuse me, I need to take my medication before the aliens give me another anal probe!

    75. Re:no wonder he was unemployed.... by Hurricane78 · · Score: 1

      Mine is even cooler: ::1
      Hack that.

      --
      Any sufficiently advanced intelligence is indistinguishable from stupidity.
    76. Re:no wonder he was unemployed.... by Hurricane78 · · Score: 1

      I see what you did there. On a more serious note: We're not the FBI. So us not being able to identify you, would mean nothing for the question if the FBI could do it.

      --
      Any sufficiently advanced intelligence is indistinguishable from stupidity.
  9. Missing from summary by Loadmaster · · Score: 5, Informative

    There is one important aspect missing from the summary. The FBI got a warrant first. It's not an extension of illegal wiretapping.

    1. Re:Missing from summary by ISurfTooMuch · · Score: 4, Informative

      Indeed. As long as a warrant was lawfully obtained, and as long as only the suspect was being targeted, I don't see a problem. From the article, it looks as if the software was passed to him through the private site that he demanded be set up, so it's extremely unlikely, possibly impossible if it was password-protected, that any random person could have stumbled upon it.

    2. Re:Missing from summary by Broken+scope · · Score: 1

      While I like the fact a warrant was obtained, I'm slightly surprised a warrant was required for this.

      --
      You mad
    3. Re:Missing from summary by noundi · · Score: 1

      Can't we just pretend they didn't so all the ill-informed clowns can rant about the constitution this, entrapment that, yada yada ad nauseam like they usually do?

      Yeah because nobody ever abuses anything. We can all just smile happily that everybody is looking out for our best.

      --
      I am the lawn!
    4. Re:Missing from summary by mellon · · Score: 1

      Actually, almost anything can be abused. You seem to be implying that therefore we should never do anything. Obviously, this is a silly conclusion. Often even when something is abused, and no corrective measures are taken, you are better off than if that thing were never used. Sometimes you are not; in those cases, a feedback loop to control the abuse is a good solution. Only when the thing isn't useful, or the feedback loop can't be made to work and consequently the thing does more harm than good, does it make sense to put a stop to it.

      The challenge in this situation is that obviously this is something that *could* do more harm than good. And it's also something that *could* do more good than harm. So it's a classic case for a good citizen's oversight system. And the fact that the EFF was able to get information about it using the FOIA suggests that the situation is not desperate - that the sunshine laws are in fact working in this case.

    5. Re:Missing from summary by Missing_dc · · Score: 4, Funny

      Mental note for future reference...

      when requesting a private website to extort money, post the credentials here or /b/ on 4chan.

      Let them deal with all that was posted AND handle the bandwidth consumption.
      then report the site to another agency for kiddie pics ( or kittie pics, knowing /b/)

      --
      How amazed would you be to suddenly find that you just forgot what I wrote and you needed to reread my post.... again.
    6. Re:Missing from summary by idontgno · · Score: 1

      I'm slightly surprised a warrant was required for this.

      Well, IANAL, but since I'm sure this is leading to a criminal prosecution, I can't imagine otherwise. Arguably, the GWOT has encouraged procedural end-runs on Constitutional protections, but such plays have apparently always foreclosed any legal pursuit after the fact. Unless you imagine the cable-cutting 'tards winding up in whatever replaces Gitmo, the warrant would be a dead-on necessity. Even the most feeble and overtaxed public defender would be able to score big on warrantless datatapping.

      --
      Welcome to the Panopticon. Used to be a prison, now it's your home.
    7. Re:Missing from summary by gnick · · Score: 1

      Yeah because nobody ever abuses anything. We can all just smile happily that everybody is looking out for our best.

      No. People do abuse authority. Except that TFA has nothing to do with that. This is about the FBI very creatively serving a warrant and the method that they used to act on it. Abuses of authority (unless you're challenging the validity of the warrant) belong somewhere else.

      --
      He's getting rather old, but he's a good mouse.
    8. Re:Missing from summary by noundi · · Score: 1

      You seem to be implying that therefore we should never do anything.

      Holy shit I've never seen anybody pull something out of their ass like that. I didn't imply anything even remotely related to what you're bullshitting about. I said:

      Yeah because nobody ever abuses anything. We can all just smile happily that everybody is looking out for our best.

      What I'm implying is very simple. You see, this is called sarcasm, and sarcasm means that the point one is making is the opposite of what one is saying. When we apply this rule to my sentences it becomes very clear:

      People do abuse things. We should not ignore this fact.

      Now go put your words in somebody elses mouth, thanks.

      --
      I am the lawn!
    9. Re:Missing from summary by noundi · · Score: 0, Offtopic

      Thank you for making that clear. We promise to never discuss anything that isn't directly related to TFA ever again. From the bottom of my heart, I'm sorry. Oh and thank you for keeping the streets of /. safe.

      --
      I am the lawn!
    10. Re:Missing from summary by Anonymous Coward · · Score: 0

      What exactly is the price of tea in China these days?

    11. Re:Missing from summary by drinkypoo · · Score: 1

      If you just want the user's browser telltales or something, you can get them to submit a form, you don't need a warrant for that. It's like taking their picture on a public street. If you want to run code on their computer other than some javascript — and arguably, if that code is taking advantage of the user somehow, even then — you're going to need a warrant first.

      --
      "You're right," Fisheye says. "I should have set it on 'whip' or 'chop.'"
    12. Re:Missing from summary by Anonymous Coward · · Score: 0

      Of if you want to be safe and not spend weeks arguing minor technical issues, get a warrant anyway. It's not like it's hard and it's the right thing to do, so why skip it?

  10. Your dog wants zone alarm by Anonymous Coward · · Score: 5, Insightful

    He can spoof ips yet he can't install software to detect unwanted outbound traffic?

    Idiot.

    1. Re:Your dog wants zone alarm by Shakrai · · Score: 5, Informative

      He can spoof ips yet he can't install software to detect unwanted outbound traffic?

      Detecting it would seem to be a phyrric victory. What good is knowing ahead of time that the FBI has discovered who you are and will be along to arrest you within hours, depending on how bad traffic is?

      A wiser course of action would have been to run off a live-cd with firewall rules configured that only allowed outbound traffic to his anonymizer/tor/botnet/whatever he was using. Combine that with a security policy that wouldn't allow software to be installed and you could probably negate threats like these. "Borrowing" someone's unsecured wi-fi network and making sure that you used a throwaway wireless card (or at least changed the MAC) would also be advised. Preferably from a location really far away from where you live.

      Of course an even wiser course of action would be to not engage in criminal activity to begin with, but apparently this guy decided that wasn't right for him ;)

      --
      I want peace on earth and goodwill toward man.
      We are the United States Government! We don't do that sort of thing.
    2. Re:Your dog wants zone alarm by QuantumRiff · · Score: 5, Insightful

      Your own computer can not be trusted anymore. Look at some of the new stuff being included by default in many computers. You can get a computrace chip installed on the motherboard, you can also have an Intel vPro chipset, that can work outside the OS, without the OS knowing what it is doing. Or, any kind of Hyper visor that is installed, or Rootkit. You can not trust any tool on your computer to tell you if your computer is compromised. You need something like a monitoring tool on your router, or in another machine.

      --

      What are we going to do tonight Brain?
    3. Re:Your dog wants zone alarm by Opportunist · · Score: 1

      And why should I trust the machine that is doing the monitoring?

      --
      We used to have a Bill of Rights. Now, with the rights gone, all we have left is the bill.
    4. Re:Your dog wants zone alarm by Capt.DrumkenBum · · Score: 1

      Thats it! I give up! Anyone know were I can get an abacus with 802.11g wireless?

      --
      If I were God, wouldn't I protect my churches from acts of me?
    5. Re:Your dog wants zone alarm by RiotingPacifist · · Score: 1

      Actually its easier to protect against outbound traffic using the windows firewall, iptables usually just locks down ports (making it fairly useless on a home dekstop) but the windows xp firewall will lock down ports to applications too.

      --
      IranAir Flight 655 never forget!
    6. Re:Your dog wants zone alarm by Shakrai · · Score: 1

      Actually iptables can match usernames, process ids and command names as well.

      --
      I want peace on earth and goodwill toward man.
      We are the United States Government! We don't do that sort of thing.
    7. Re:Your dog wants zone alarm by RiotingPacifist · · Score: 1

      It can, that's why i said usually, the problem is AFAICT(can tell),
      *It's a bit tricky to setup,
      *Hard to find documentation on it (command names are not covered my man iptables (debian lenny))
      *Only 1 GUI firewall application supported it (and fireflies, got disconinued due to lack of interest)
      *Locking application->network access should be done using mandatory access controls (tux guardian style)

      Where as on windows xp the default firewall is easier to setup and has a fully functional gui

      --
      IranAir Flight 655 never forget!
    8. Re:Your dog wants zone alarm by Anonymous Coward · · Score: 0

      but even a livecd still has a ramfs that can be "install to" atleast until power down, but even a few minutes could have give the app enough time to gather and send the needed information

    9. Re:Your dog wants zone alarm by blackbear · · Score: 1

      He can spoof ips yet he can't install software to detect unwanted outbound traffic?

      You have to know of a threat to defend against it.

      Non-intuitive threats are common and can be deadly. I would imagine that many of the people reading the article summary (who reads the articles?) would have made the same mistake.

      It's a classic hacker move, and a common mental error. We think of spyware for tracking individuals, but not an individual. Oops!

    10. Re:Your dog wants zone alarm by whoever57 · · Score: 1

      Actually its easier to protect against outbound traffic using the windows firewall,

      XP's firewall doesn't monitor outbound traffic at all Vista's firewall only does so with difficulty.

      --
      The real "Libtards" are the Libertarians!
    11. Re:Your dog wants zone alarm by rrohbeck · · Score: 1

      That might be hard to do if it's an HTTP POST (or even GET) to an innocuous address.

    12. Re:Your dog wants zone alarm by BitterOak · · Score: 1

      You need something like a monitoring tool on your router, or in another machine.

      And even that won't help you if the site delivering the payload is SSL enabled.

      --
      If I can be modded down for being a troll, can I be modded up for being an orc, or a balrog?
    13. Re:Your dog wants zone alarm by Anonymous Coward · · Score: 0

      Here is your private extortion site - please login using this little Javascript application.
      Oh, That's your IP!
      Cheers.

    14. Re:Your dog wants zone alarm by Jarik_Tentsu · · Score: 1

      Why would he be using his own home computer anyway? I thought it was almost obvious to use a public terminal, or a laptop on some random's wireless network.

    15. Re:Your dog wants zone alarm by Geminii · · Score: 1
      Good thing that it's impossible to compromise a router, then...

      Best bet - minimise number of contacts. Boot using a different OS CD each time and physically incinerate the CDs after using. Use a series of old, cheap hard drives if the OS needs one, and physically incinerate those at the end of each session too. If you're particularly paranoid, burn your RAM or at least have it on continuous refresh for an hour after each session. Use older hardware - it's less likely to have tracking chips on it. Make all connections via other people's unsecured wireless connections, a different one each time, from locations which are not only away from security cameras but which do not have security cameras between them and your regular haunts. If at all possible, try to automate the connections and have alibis for your whereabouts at the time of the connections. Run the connections through some bit of hardware which will slag itself harmlessly if jostled or opened without the correct wireless key. Have the hardware slag itself anyway after a fixed period of time rather than retrieving it yourself. Pick some disaffected black hat group (preferably international) for your signals to be traced back to if it goes that far. Have a non-IT job which you are good at and make a decent wage at.

      Above all, don't be a 12-to-45 white male citizen of the US with a background or job history in computing, engeering, data service provision, or a related field, and few close friends.

  11. Linux, lynx, and an anonymizer by Reality+Master+201 · · Score: 1

    All he had to do was be more careful, and possibly boot from CD.

    1. Re:Linux, lynx, and an anonymizer by Professor_UNIX · · Score: 5, Funny

      Don't you watch the movies? They would've backtraced his IP address through their firewall with a Visual Basic program within seconds. You need to bounce around the world through at LEAST 15 anonymizing proxies for that to work and give you a minute or two of time to taunt them before you disconnect at the last minute just as the blue blipping blob on their VB.Net trace program is about to pinpoint your location in North America as the program starts zooming in on your location with Google Maps.

      Click! All they know is you're in the northeast, but you told them that already right before you disconnected when you said you were calling them from a payphone across the street. When they rush out of their building all they find is an empty payphone with an acoustic coupler attached to the handset and interfaced to some kind of prepaid cell phone. You put down your binoculars that you've been using to watch the situation from the 5th floor of your hotel down the street and press a button on your computer which detonates the C4 conveniently hidden behind the payphone. Did they really think a silly god damn Windows spyware program was going to take you down so easily?

    2. Re:Linux, lynx, and an anonymizer by ancientt · · Score: 1

      Wow. I've never really wanted to lead a life of crime but this makes it sound tempting.

      Reason for requested leave: Starting an evil empire

      --
      B) Eliminate all the stupid users. This is frowned upon by society.
    3. Re:Linux, lynx, and an anonymizer by torchdragon · · Score: 1

      I think you've just written the best new CSI, Criminal Minds, NCIS, Law & Order, and JAG episode script simultaneously. In fact, I know I've seen an episode or 12 that went exactly like that so I know the public will be excited to see your fresh take on things.

      You should get a producer to sell your idea to every network so that they can all make a version of your tremendously soul-reaching plot. You'll probably want to put in some techno-babble just to give it that extra punch the media execs are looking for these days.

      --
      "Don't feel bad for me child; I'm the monster that hides under your bed."
    4. Re:Linux, lynx, and an anonymizer by Pvt_Ryan · · Score: 1

      Is that before or after you throw a blanket over your subnet? We all know those subnets can get cold.

    5. Re:Linux, lynx, and an anonymizer by Opportunist · · Score: 1

      You may be joking, but something not unlike your scenario has been done in German TV.

      It's in German, sorry, but a brief synopsis: It's a russian server, it's "damn well secured", but lemme quickly slap together a trojan... use your imagination from there. The worse your imagination, the closer to the scene.

      --
      We used to have a Bill of Rights. Now, with the rights gone, all we have left is the bill.
    6. Re:Linux, lynx, and an anonymizer by eam · · Score: 5, Funny

      > Reason for requested leave: Starting an evil empire

      Trust me, it's not as great as it sounds. The overhead is a lot more than you expect. Everyone figures they'll just steal a couple nuclear warheads and they're in business, but they never think about the essentials. Do you know how much toilet paper your evil lair will go through in a week? Even though you have the contribution jar next to the coffee maker, no one ever pitches in unless you happen to be standing there. With the downturn in the economy, you don't have the same staffing issues as you normally do, but finding decent henchmen is always a chore. The ones you do find are all, "We want dental!", "We need flex time!", "Respect me as an equal!", and "Oh God, no, save me, IT BURNS!!!" I mean, come on, what am I your mommy?

      You go through all that, then in the middle of one of your best speeches, some moron running around in a tuxedo blows it all up with a can of hairspray and a laser beam built into a wristwatch.

      Seriously.

    7. Re:Linux, lynx, and an anonymizer by Professor_UNIX · · Score: 1

      I have to admit I may have used some plot points from several of those shows in this example. :-)

    8. Re:Linux, lynx, and an anonymizer by GPLDAN · · Score: 1

      And a love interest. Some incredibly hot early 20s actress who uses a Macbook Pro and wears librarian glasses. In real life, as an actress, she can't even spell kernel correctly. But in this plot, she's writing code so fast it looks like you just cat'ed the source tree to Quake or something. And her terminal should have a black screen, with pink text - to highlight her kick ass femininity.

    9. Re:Linux, lynx, and an anonymizer by oneTheory · · Score: 1

      this is awesome.

    10. Re:Linux, lynx, and an anonymizer by jollyreaper · · Score: 2, Funny

      Don't you watch the movies? They would've backtraced his IP address through their firewall with a Visual Basic program within seconds. You need to bounce around the world through at LEAST 15 anonymizing proxies for that to work and give you a minute or two of time to taunt them before you disconnect at the last minute just as the blue blipping blob on their VB.Net trace program is about to pinpoint your location in North America as the program starts zooming in on your location with Google Maps.

      Click! All they know is you're in the northeast, but you told them that already right before you disconnected when you said you were calling them from a payphone across the street. When they rush out of their building all they find is an empty payphone with an acoustic coupler attached to the handset and interfaced to some kind of prepaid cell phone. You put down your binoculars that you've been using to watch the situation from the 5th floor of your hotel down the street and press a button on your computer which detonates the C4 conveniently hidden behind the payphone. Did they really think a silly god damn Windows spyware program was going to take you down so easily?

      And you were getting a blowjob from Halle Berry the whole time! Add in some more titty and I think we have a blockbuster.

      --
      Kwisatz Haderach
      Sell the spice to CHOAM
      This Mahdi took Shaddam's Throne
    11. Re:Linux, lynx, and an anonymizer by Opportunist · · Score: 1

      What? No car chase and no explosions?

      You didn't see many movies lately, did you? My theory is that they're in there so the movie is loud enough to keep the audience from disturbing the experience by snoring.

      --
      We used to have a Bill of Rights. Now, with the rights gone, all we have left is the bill.
    12. Re:Linux, lynx, and an anonymizer by spacefiddle · · Score: 1

      Teh recursive sarcasm... it burns... I'm not sure if your post is a whoosh, or if me posting a whoosh would require a self-whoosing. Help!

    13. Re:Linux, lynx, and an anonymizer by sootman · · Score: 1

      Don't you watch the movies? They would've backtraced his IP address through their firewall with a Visual Basic program within seconds.

      Actually, it was a TV show. Here's a short documentary on the subject.

      --
      Dear Slashdot: next time you want to mess with the site, add a rich-text editor for comments.
    14. Re:Linux, lynx, and an anonymizer by troll8901 · · Score: 1

      Here's a toy airplane. Please hold it above your head, move it around, and start making "whoosh" sounds.

      Things I've learnt from the movies: During all crime investigations it will be necessary to visit a strip club at least once.

      (Credit: multiple other sources)

  12. Re:Just another... by immakiku · · Score: 5, Funny

    I don't know... Seems to me like another reason not to cut 18 cables and not know how to hide your identity.

  13. Thanks For The Tip: +1, Helpful by Anonymous Coward · · Score: 5, Informative

    About the party responsible for infiltrating government and military computers.

    In case you've been living in Richard B. Cheney's spider-hole, this F.B.I. system is called Ghostnet.

    Yours Seditiously,
    Kilgore Trout

    1. Re:Thanks For The Tip: +1, Helpful by hot+soldering+iron · · Score: 1

      Please try to keep your bad guys straight: Ghostnet is run by the Chinese, and this is CIPAV.

      --
      When you want something built, come see me. If you want correct grammar and spelling, get a F*ing liberal arts student.
  14. Dupe by Anonymous Coward · · Score: 0

    From the 17th
    http://it.slashdot.org/article.pl?sid=09/04/17/0534232

    but i forgot computerworld are desperate for revenue as their site is worthless, only 11 adverts (not including content as advertising) per page !

  15. Fine...any details? by aaaaaaargh! · · Score: 0

    Who would have doubted anyway that the FBI has and uses this technology. For educational purposes, I'd like to see the source code or some nice reverse engineering study of this trojan--that would be more interesting news!

    1. Re:Fine...any details? by tsotha · · Score: 1

      Yeah. The FBI may have had a warrant to do this, but it's hard to believe they didn't already have the trojan ready to go.

    2. Re:Fine...any details? by ISurfTooMuch · · Score: 2, Insightful

      Doesn't seem like it was too complex. Sounds like they simply used some sort of drive-by download to install it on his system, and the program simply phoned home with the infected computer's IP address, MAC address, and a few other identifying pieces of info.

    3. Re:Fine...any details? by ISurfTooMuch · · Score: 1

      Sure they did. If all it had to do was phone home with some standard info, then they could use the same software any time they needed to. All they'd need to do is insert it into the Web site they wanted him to download it from.

    4. Re:Fine...any details? by Anonymous Coward · · Score: 0

      Yeah. The FBI may have had a warrant to do this, but it's hard to believe they didn't already have the trojan ready to go.

      They've had it for years, and have used it before. It says so in the article. It's called CIPAV.

  16. Ya its called windows XP by Anonymous Coward · · Score: 1, Funny

    Ya its called windows XP

  17. Not to watch you* by Nitage · · Score: 2, Insightful

    *unless you tried to blackmail someone over the internet and they call in the FBI, who then - with the authority of a warrant - use a Trojan to find out where you are. Seriously, how stupid is this guy?

  18. Re:Just another... by Shakrai · · Score: 5, Interesting

    ... reason to not use Microsoft products.

    What makes you think they don't have a variant for Linux? User stupidity (i.e: bad/no security) isn't unique to Windows. Off the top of my head, if they are relying on the web as an infection vector combined with user stupidity, why not write it into a Firefox extension?

    Yeah, it wouldn't get your typical /. geek, but most criminals aren't known for their foresight or intelligence. "Oh, the private website with the bank account information needs me to install this software! Ok, what could possibly go wrong?"

    --
    I want peace on earth and goodwill toward man.
    We are the United States Government! We don't do that sort of thing.
  19. FBI master hackers by noundi · · Score: 5, Funny

    "This website requires additional ActiveX components to be installed."

    Hmm...

    *click*

    ...

    Oops.

    --
    I am the lawn!
  20. So We can Assume... by flyneye · · Score: 0, Troll

    So we can assume that the right to keep and bear arms can include the use of trojans for personal reasons.
          Perhaps the Fed would like to tax and license the use of trojans. Only after an approved trojan safety course has been passed, of course.
          Other permits would be required to use a trojan outside of ones home and some public venues could ban the use of trojans in their facilities.
          Soon the local police will be trained and equipped to battle trojan gang activity and will require informants to plant trojans in crip ,blood and latino gang computers,cell phones etc.
            Of course all this will only end in banner ads funded under the table by the corporations whose ads are forced on the innocent citizens and bystanders.
              Thanks a lot O'bama

    --
    *Repent!Quit Your Job!Slack Off!The World Ends Tomorrow and You May Die!
    1. Re:So We can Assume... by DaveV1.0 · · Score: 2, Interesting

      So we can assume that the right to keep and bear arms can include the use of trojans for personal reasons.

      No, for the same reason you do not have a right to keep and bear nuclear devices or chemical and/or biological weapons.

      --
      There is no "-1 offended" or "-1 you don't agree with me" mod options for a reason.
    2. Re:So We can Assume... by Shakrai · · Score: 5, Funny

      So we can assume that the right to keep and bear arms can include the use of trojans for personal reasons. Perhaps the Fed would like to tax and license the use of trojans. Only after an approved trojan safety course has been passed, of course. Other permits would be required to use a trojan outside of ones home and some public venues could ban the use of trojans in their facilities.

      Requiring a permit to use trojans outside of the home wouldn't seem consistent with the Democrats position on sex education ;)

      --
      I want peace on earth and goodwill toward man.
      We are the United States Government! We don't do that sort of thing.
    3. Re:So We can Assume... by AnalPerfume · · Score: 3, Funny

      Bear arms are fine if the bear in question is still attached to them, and in a fit state to fight and clued in enough to the cause to fight FOR you. If not, then the right to bear arms is pointless, you may as well have the right to shit on the moon.

    4. Re:So We can Assume... by Anonymous Coward · · Score: 0

      I DEMAND the right to shit on the moon! I didn't know this was up for discussion, it has been a life long dream of mine!

    5. Re:So We can Assume... by thrillseeker · · Score: 1

      You have any right you can successfully defend - all else is delusion.

    6. Re:So We can Assume... by amiga3D · · Score: 1

      Careful now. Starting to sound like an anarchist.

    7. Re:So We can Assume... by oneTheory · · Score: 1

      The Constitution asserts a man's right to bear arms, and... arm bears, and all points in between. Who ever heard of a gun... or a bear causing problems? --Alex Shrub

    8. Re:So We can Assume... by Opportunist · · Score: 1

      You may have trojans. You must not use them against others.

      Pretty much like firearms, I'd say?

      --
      We used to have a Bill of Rights. Now, with the rights gone, all we have left is the bill.
    9. Re:So We can Assume... by blackbear · · Score: 1

      No, for the same reason you do not have a right to keep and bear nuclear devices or chemical and/or biological weapons.

      But I do have a right to those things. I simply choose to reserve that right in order to gain the benefits of living in an industrialized nation with a very high standard of living who will, for a small annual tax, defend me from others who own those same items. That, and the fact that I couldn't hope to afford, or to effectively deploy any of those items making them useless to me.

      On a serious note, we call fallacious statements such as yours red herring arguments. The chances of an individual ever owning a nuke are so small as to be nearly zero. This makes your use of it in your particular argument a red herring. On the other hand, if you would have said that I don't have a right to own a machine gun, then you would have made an incorrect, but otherwise logically valid statement. I know dozens of people who own machine guns. It used to be more common than it is now, but it's gotten very expensive since the late '80s.

    10. Re:So We can Assume... by flyneye · · Score: 1

      At least someone recognized humor in the parent.
        Some democrat w/ mod points didn't.
      Your response leads me to wonder what position democrats use for sex education and whether or not it conflicts with their gun or birth control issues. Perhaps G. Gordon Liddy could be pulled from retirement to insert his trojan once again in the name of penetrating the Democratic party. Liddy was an FBI man.
              I also question that the name Obama doesn't have an apostrophe. Picture a green derby atop his head and you can see he's as irish as the Lucky Charms guy. It takes the bad edge off his image as someone who could approve the use of software munitions against the citizenry or hire RIAA lawyers to justice dept. posts. He also surely has a plan to keep his stimulating package from indebting our future generations to servitude to China. O'bama surely has a pot of gold at the end of his rainbow coalition to pay for his Leprechaun hijinx.

      --
      *Repent!Quit Your Job!Slack Off!The World Ends Tomorrow and You May Die!
    11. Re:So We can Assume... by K.+S.+Kyosuke · · Score: 1

      I beg to differ. As I see it, a bear with arms is essentially an armed bear and armed bears are potentially dangerous. By granting the right to bear arms to American public, the US Constitution limits bears' access to bear arms (limited supply) so that they wouldn't become armed bears and endanger the said American public. Or at least that's how they explained the function of US Constitution's Second Amendment to us here in Yurop.

      --
      Ezekiel 23:20
    12. Re:So We can Assume... by AnalPerfume · · Score: 1

      Why do I suddenly feel a "Save BooBoo & Yogi" campaign coming on? How can a an unarmed bear get picinic baskets?

    13. Re:So We can Assume... by Anonymous Coward · · Score: 0

      Assume as much as you want, but there is no way to have a "fit state" if the population is unarmed. The state rots when people are defenseless. That's why the right to bear arms is only second to free speech. That's why there are no "fit states" in Europe. Too bad most Europeans are brainwashed to the point of complete delusion.

    14. Re:So We can Assume... by Jedi+Alec · · Score: 1

      The chances of an individual ever owning a nuke are so small as to be nearly zero.

      Quite frankly, I doubt it's really hard for one of those russian fat cats to get their hands on a couple to use as decoration in the back yard.

      --

      People replying to my sig annoy me. That's why I change it all the time.
  21. All future cable cutters ... by 140Mandak262Jamuna · · Score: 3, Funny

    First read Slashdot and understand all the technical details needed to hide your identity. Then go ahead cut the cable and demand ransom.

    --
    sed -e 's/Chuck Norris/Rajnikant/g' joke > fact
    1. Re:All future cable cutters ... by Anonymous Coward · · Score: 2, Interesting

      or you could just submit a Ask Slashdot and get all the answers to your future crime.

    2. Re:All future cable cutters ... by mpthompson · · Score: 1

      Yes, if he and only submitted his questions to "Ask SlashDot" he could have saved himself a world of hurt. I'm certain he would have gotten a lot of useful (and not so useful) advice on hiding his on-line identity from law enforcement. ;-)

  22. He deserved to get caught. by Lilith's+Heart-shape · · Score: 4, Funny

    If this guy had had half a brain, he would have wiped the computer's hard drive clean by overwriting it with zeroes, and then done everything by using a Linux distribution on a bootable CD that could run entirely in RAM. Instead, he ran Windows and got nailed by a Trojan. Somewhere in the afterlife, J. Edgar Hoover is laughing his panty-clad ass off.

    1. Re:He deserved to get caught. by TheRaven64 · · Score: 1

      But JEDGAR ran on ITS (or MCP, depending on the version), not Linux...

      --
      I am TheRaven on Soylent News
    2. Re:He deserved to get caught. by hacker · · Score: 1

      "If this guy had had half a brain, he would have wiped the computer's hard drive clean by overwriting it with zeroes..."

      And if he had a whole brain, he wouldn't do that, because you can recover the data up to 7 low-level formats deep, and overwriting everything with zeroes makes it VERY easy to recover.

      What he should do is overwrite it with a minimum of 12 passes of truly random data, like the DoD 32-pass wipe, Schneier wipe or similar methods.

      Note to the kids: Don't ever assume that formatting or overwriting with /dev/zero does anything to make it hard to recover your data. It doesn't.

    3. Re:He deserved to get caught. by KZigurs · · Score: 1

      Linux can be pwnd too, no problem. OS is pointless to discuss.
      What is MILES more interesting - how exactly anyone who might have a clue of what fiber is, know 18 locations where to deal with it and actually have some balls and know-how (you now, some of the shit that is used for main fiber lines is far from being just a hacksaw job) how to disable em - how he could be so stupid to do anything from a traceable machine?

      C'moon - anything as simple as prepaid off-the-shelf sim would have made it miles more interesting. Just so... dissapointing.

  23. Note to self... by cortesoft · · Score: 4, Funny

    Always use noscript when doing nefarious shit....

    1. Re:Note to self... by Anonymous Coward · · Score: 0

      Better yet: use lynx ;-)

    2. Re:Note to self... by jgtg32a · · Score: 1

      From a livecd at someone else's house.

    3. Re:Note to self... by Anonymous Coward · · Score: 0

      ...using someone else's internet connection

    4. Re:Note to self... by TheRaven64 · · Score: 1

      Or, better, from a busy Internet cafe. If the IP address is shared by a few hundred people per day, then it's hard for them to find anything about you from the address. It doesn't say in TFA what the 'other information' about him was, but you'd have thought someone doing this kind of thing would use a disposable machine (or, at least, VM) that wouldn't contain any personal information.

      --
      I am TheRaven on Soylent News
    5. Re:Note to self... by Pvt_Ryan · · Score: 1

      You mean EMACS wouldn't be better? LIES!!!!

    6. Re:Note to self... by Anonymous Coward · · Score: 0

      Wrong. That is nowhere near enough.

        - Always boot from an ISO distro with no hard drive device attached - CDROM booted
        - Always use TOR
        - Always disable cookies (don't forget flash cookies too)
        - Always use NoScript if you must use a full browser, but Lynx is better.
        - Always use somebody elses' network

    7. Re:Note to self... by yada21 · · Score: 0

      Clearly a long time since you went to internet cafe's. They ask for 2 id's, one with photo. Even if your only buying coffee.

      --
      I will have a sig when the market demands it.
    8. Re:Note to self... by Anonymous Coward · · Score: 0

      WORD!

  24. Good by SirGarlon · · Score: 4, Insightful

    TFA says the FBI had a warrant. When that is the case, I *want* them to be able to own a suspect's machine.

    --
    [Sir Garlon] is the marvellest knight that is now living, for he destroyeth many good knights, for he goeth invisible.
    1. Re:Good by Cajun+Hell · · Score: 2, Insightful

      TFA says the FBI had a warrant. When that is the case, I *want* them to be able to own a suspect's machine.

      I agree that when the good guys act like good guys, I want them to win.

      Your computer never knows who the good guys are, though. And even if everyone signed their attacks (e.g. this spyware is signed by the FBI), it would never know when there's a warrant and when there isn't. (Just as a DRM scheme never knows whether you're trying to violate copyright vs do something innocent.)

      When you receive a trojan, it might be a lawful attack by the FBI, or it might be Russian spammers wanting to add you to their botnet. You don't know which. So what's the right thing to do: run it? Or don't run it?

      Alas, whatever you do to deal with the bad guys, is also going to work against the good guys.

      So .. do I want the FBI, when working within the law, to be able to own a suspect's machine? Sure, in an idealistic fantasy kind of way. But in real life, I know that question can be rephrased, without losing any meaning, as "Do I want Russian spammers to be able to own anyone's machine?"

      --
      "Believe me!" -- Donald Trump
    2. Re:Good by xous · · Score: 1

      We all have something to hide. You may not know what it is. You may not think it is something worth hiding.

      I do not want the FBI or anyone else near my data even though it's mostly innocent.

      The problem with giving them this ability you have NO control over them using it properly. It WILL be abused.

  25. Ribbed for his pleasure by Orleron · · Score: 1, Funny

    Hopefully the FBI will provide him with a different kind of Trojan after he winds up in jail sharing a cell with "Bubba".

    1. Re:Ribbed for his pleasure by Anonymous Coward · · Score: 0

      Prison rape is so FUNNY!

    2. Re:Ribbed for his pleasure by Anonymous Coward · · Score: 0

      Wow, a cliched homophobic joke... Why don't you make a few racial and ethnic slurs while you're at it?

  26. Cops Catch Criminal. Film at Eleven. by RobotRunAmok · · Score: 4, Insightful

    Dude was a bad guy. FBI's job is to catch bad guys. FBI uses technology to catch bad guy. I'm not feeling the outrage here...

    In a related story, local law enforcement shot a criminal who tried to hold up a 7-11 when he resisted arrest and brandished a knife. Reports say police used their "gun" technology to do this.

    Point being, we know the FBI has the tech to do this stuff. It's only really a rights issue when they use it against non-criminals, or suspected criminals.

  27. Re:Just another... by qoncept · · Score: 5, Funny

    What incredible insight.

    Greta: He knocked over another ATM. This time at knife point. He needs your legal advice.
    Fletcher: [picking up phone and shouting] Stop breaking the law, asshole!

    --
    Whale
  28. Re:Just another... by Anonymous Coward · · Score: 5, Funny

    If you get a call from someone who refuses to identify themselves asking you if you'd be willing to edit a couple hidden configuration files and restart your system, then you have the Linux version.

  29. Duh? by LatencyKills · · Score: 0, Redundant

    No doubt I'm hundred of times less savvy about computers than many people here, but couldn't he have just done this from an internet cafe or a public library or a wireless spot in a hotel lobby or $tarbucks and avoided all these problems? To me it seems like a kidnapper who demands the ransom be delivered to his actual home address.

    --
    Jealously hoarding mod points since 2007.
    1. Re:Duh? by sizzzzlerz · · Score: 1

      You ever watch Cops?

      These guys are not the most intelligent fish in the sea

    2. Re:Duh? by Lumpy · · Score: 4, Interesting

      here are some facts...

      1 - criminals are typically dumb as hell.
      2 - smart criminals are still dumb.
      3 - it is incredibly RARE to have a very smart criminal, when you find one and they do a lot of criminal acts and get away with it, they get cocky and then become a dumb criminal. Example? Kevin Mitnick. he got cocky, then did some really REALLY dumb things to get caught.

      Real professional computer criminals DO exist. and you will never hear about them because they dont get caught. Computer Crime forensics pros are not as good as they all want you to think they are, they may be WIZZES at computers but they are not Wizzes at encryption, obfuscation and stenography, let alone secret squirrel stuff. It is really easy for a 13 year old punk to get and use the same technology that the biggest nations are using for their spies. If a kid is talented enough and has enough self control he can easily elude the entire FBI and NSA together online. it's not technically or technologically hard, it's simply being able to NEVER EVER get sloppy. because the second you get sloppy, you're nailed. The longer you go the harder it is not to get sloppy or accidentally give them a pattern. to the FBI, it's a matter of time... you will screw up, they will get you.

       

      --
      Do not look at laser with remaining good eye.
    3. Re:Duh? by Anonymous Coward · · Score: 0

      People say prisons are just a school for criminals. But I dont' know, would you like to learn from the loosers?

      The really smart criminals don't get caught, the powerful ones become politicians.

    4. Re:Duh? by d474 · · Score: 1

      ...because the second you get sloppy, you're nailed.

      But I thought terrorists only had get it right once and it was the FBI that has to be right 100% of the time.

      So what you are saying is that it's the FBI who only has get it right once, and the terrorists who have to be right 100% of the time?

      Where's Donald Rumsfeld when you need him?

      --
      Authority questions you. Return the favor.
    5. Re:Duh? by Anonymous Coward · · Score: 0

      Yep, Most bank robberies are successful, but most bank robbers are caught.

      They keep doing it until they get caught.

    6. Re:Duh? by Anonymous Coward · · Score: 0

      Did you mean steganography? Or is it just really important that they take good notes?

  30. Sign of the times by iYk6 · · Score: 5, Insightful

    Something is seriously wrong when you have to explicitly state, "The FBI did not commit any crimes in this story." When I read the summary, I felt that the warrant was implied, but with everything that has happened, I also feel that you are completely justified to think that that info was missing.

  31. Have you ever meta dupe? by davidwr · · Score: 4, Funny

    Someone once said "I never meta dupe I didn't like."

    That someone was not me.

    --
    Knowledge is how to play a game, intelligence is how to win, wisdom is knowing what game to play.
    1. Re:Have you ever meta dupe? by Anonymous Coward · · Score: 0

      you've said that before.

    2. Re:Have you ever meta dupe? by davidwr · · Score: 2, Funny

      You talked about me saying that before.

      --
      Knowledge is how to play a game, intelligence is how to win, wisdom is knowing what game to play.
    3. Re:Have you ever meta dupe? by osvenskan · · Score: 1

      Someone once said "I never meta dupe I didn't like."

      That someone was not me.

      It is now!

  32. Downloaded? by Anonymous Coward · · Score: 0

    The FBI went into his house and on his computer to download a trojan... hopefully that state of the art uploaded variety will be out in 2010...

  33. re: But who said it was about "outrage"? by King_TJ · · Score: 5, Insightful

    I think it's an interesting story, but sure ... if a warrant was obtained first, the FBI actually did this the RIGHT way, and that makes me happy.

    That's how law enforcement is supposed to work. Sometimes it seems like we completely forget that, these days, with all the stories of "the law" just doing whatever they please, secretly.

  34. Obligatory In Soviet Russia, with a twist by davidwr · · Score: 0, Offtopic

    In Soviet Russia, KGB trojan watches YOU.

    Oh wait, wrong country.

    --
    Knowledge is how to play a game, intelligence is how to win, wisdom is knowing what game to play.
    1. Re:Obligatory In Soviet Russia, with a twist by hviniciusg · · Score: 1

      In Soviet Russia, YOU watch KGB trojans .

      There, fixed it for you

  35. Re:Cops Catch Criminal. Film at Eleven. by SirGarlon · · Score: 5, Insightful

    Actually, the FBI can't tell the difference between a criminal and a suspected criminal. In the U.S., it takes a jury (or a guilty plea) to do that.

    I think your point though is that it's not a violation of someone's rights if the FBI has reasonable evidence *before* they install the Trojan, and it appears they did in this case (because they had a warrant).

    --
    [Sir Garlon] is the marvellest knight that is now living, for he destroyeth many good knights, for he goeth invisible.
  36. Re: The FBI Has a Trojan To Watch You by Anonymous Coward · · Score: 0

    What dickheads!

  37. KISS by iYk6 · · Score: 5, Funny

    Nice ideas. Here is all I had: Demand that the info be in ASCII text, and download it with wget.

    1. Re:KISS by hoggoth · · Score: 1

      > Nice ideas. Here is all I had: Demand that the info be in ASCII text, and download it with wget.

      Wouldn't want to hurt your wittle brain by ignoring the <tags>

      --
      - For the complete works of Shakespeare: cat /dev/random (may take some time)
    2. Re:KISS by Larryish · · Score: 1

      ...download it with wget...

      RMS, is that you?

    3. Re:KISS by Anonymous Coward · · Score: 0

      I'll do you one better.

      Throw the site they give you onto 4chan and tell everyone it's some CP.

  38. Re:Just another... by CompMD · · Score: 5, Informative

    "What makes you think they don't have a variant for Linux? User stupidity (i.e: bad/no security) isn't unique to Windows."

    This is an excellent statement. Stupidity knows no bounds. Its also dangerous to assume that the FBI doesn't know what it is doing. When I worked in law enforcement, the FBI computer crimes agents I knew were well versed in operating systems other than Windows. The two I worked with most often had a solid knowledge of Linux and Cisco IOS.

  39. the party responsible for Ghostnet by viralMeme · · Score: 1

    "About the party responsible for infiltrating government and military computers. In case you've been living in Richard B. Cheney's spider-hole, this F.B.I. system is called Ghostnet"

    I guess the FBI will have to start investigating itself then :)

  40. OMG: 192.168.0.2 by Gothmolly · · Score: 4, Funny

    That's MY IP address too! Is the FBI hacking my computer as well?

    Remember kids, only criminals use proxies. And only criminals use "an alternate operating system, with a black screen and white characters".

    --
    I want to delete my account but Slashdot doesn't allow it.
    1. Re:OMG: 192.168.0.2 by Phizzle · · Score: 1

      Ok you got me, why black screen and white characters?

      --
      I will not be pushed, filed, stamped, indexed, briefed, debriefed or numbered. My life is my own.
    2. Re:OMG: 192.168.0.2 by Tack · · Score: 1

      It was actually "black screen with white font" but close enough.

    3. Re:OMG: 192.168.0.2 by Anonymous Coward · · Score: 0

      Remember kids, only criminals use proxies.

      Oh ho! What a hilariously ironic and sarcastic sentence! Because everyone knows anonymizing proxies in a real-world scenario are actually only used by criminals, spammers, trolls, assholes, jerks, pirates, tinfoil hat paranoids, and once in a while if you're lucky someone might have a legitimate need for its privacy (at a rate of maybe one per every twenty thousand users of proxies)!

      Therefore, the sarcasm was apparent in that everything past the first in that list isn't technically criminal! Ho ho! What hilarity!

    4. Re:OMG: 192.168.0.2 by Pvt_Ryan · · Score: 1

      Because a black screen with green characters is sooooo last century...

    5. Re:OMG: 192.168.0.2 by Anonymous Coward · · Score: 0

      Phew...I've been using orange characters!

    6. Re:OMG: 192.168.0.2 by Archon-X · · Score: 1

      Slashdot article. Student's computers seized because he was using 'black screen with white characters' - and recently courts decided using proxies in a crime will make it more severe.

    7. Re:OMG: 192.168.0.2 by Anonymous Coward · · Score: 0

      dos ?

  41. Re:Just another.. to read" known criminals" by kubitus · · Score: 1
    known criminals are pardonned by the President of the US

    or they are too clever to be recognised as such

    And BTW anybody surprised? Bundestrojaner of Germany, maybe there is some cooperation?

  42. They could do it without a trojan... by (H)elix1 · · Score: 4, Interesting

    They could do it without a trojan, if they had the right signing key. I forget which worm it was, but a few years back there was a major vulnerability that Microsoft patched, which triggered the automatic reboot. The issue was the patch went ahead and updated the machine even if you had the system set to "download, but notify" rather than automagically patch. Similar deal here where an update did something it should not have.

    Were I the FBI, I'd make Microsoft 'digitally sign' such a beasty, and then send it via an unannounced update.

    Always helps to have stupid criminals, however.

    1. Re:They could do it without a trojan... by Anonymous Coward · · Score: 0

      Were I the FBI, I'd make Microsoft 'digitally sign' such a beasty, and then send it via an unannounced update.

      Well then it's a goddamned good thing you're not the FBI. Carpet bomb all Windows users to catch your thug? Really? And Microsoft is going to help with that? Again, if the FBI knew which specific computer to target, they wouldn't need the trojan in the first place, would they?

    2. Re:They could do it without a trojan... by kilo242 · · Score: 1

      If they send out an unannounced update, everyone will get the program, and they won't know the suspect from the clutter. If they know his specific computer to send the update to, they wouldn't need it in the first place.

  43. Re:Just another... by Anonymous Coward · · Score: 0

    Yes because no root kit has ever existed in the history of linux. Nope not a single one. LALALALALALALALALA CANT HEAR YOU.

  44. LOL. by MRe_nl · · Score: 0, Troll

    Thanks for playing!

    --
    "Kill 'em all and let Root sort 'em out"
  45. MS certified career criminal .. :) by rs232 · · Score: 2, Funny

    Just goes to show that you shouldn't try your hand at being a career criminal, armed with nothing more than a MSP credential.

    --
    davecb5620@gmail.com
  46. No Jail Here by maz2331 · · Score: 1

    This case resulted in a sentence of 5-years probation, restitution, and mental health counseling.

  47. Finally by SupremoMan · · Score: 1

    An article displaying competence of the authorities. Good for them.

  48. Can TOR even be trusted? by Anonymous Coward · · Score: 0

    Slightly related:

    The last time I tried to use TOR, there were a realtively small number of servers - I don't remember exactly, but in the range of 20-60.

    What would prevent that intelligence services are behind 90% of these? I would imagine TOR servers are a costly pain to run, given the massive number of users and even idiots trying to download DVDs through TOR. The cost however would probably not be more than the annual salary of an intelligence official.

    So why not? Can TOR be trusted given how easy it is to coopt?

    1. Re:Can TOR even be trusted? by Anonymous Coward · · Score: 0

      TOR exit nodes are few and far between. In most areas around the world, the node owner can be held civilly and criminally responsible for some diaper sniper downloading pictures with that node's IP in web logs.

      So, its almost a sure thing that TOR nodes are being watched, if not operated by people curious about what traffic is running through.

  49. lynx by eatvegetables · · Score: 1

    I don't know... Seems to me like another reason not to cut 18 cables and not know how to hide your identity.

    should've known how to 'cut' modern browsers out of his master plan. ...Lynx

  50. Re:Just another... by Anonymous Coward · · Score: 0

    "What makes you think they don't have a variant for Linux? User stupidity (i.e: bad/no security) isn't unique to Windows."

    This is an excellent statement. Stupidity knows no bounds. Its also dangerous to assume that the FBI doesn't know what it is doing. When I worked in law enforcement, the FBI computer crimes agents I knew were well versed in operating systems other than Windows. The two I worked with most often had a solid knowledge of Linux and Cisco IOS.

    Yup. Back in the day NSA/CSE/GCHQ could hack into anything, intercept anything from faxes to corporate email and ran a kickass datacenter of supercomputers running every crypto attack under the sun...

  51. thats nothing by nimbius · · Score: 1

    theyve been secretly evesdropping on me through satellites that communicate with a receiver in my fillings since 1996....and theyre also using fluoridated water to ensure i comply with the patriot act.

    --
    Good people go to bed earlier.
    1. Re:thats nothing by Anonymous Coward · · Score: 0

      Ron Paul, is that you?

      Or maybe it's Glenn Beck?

    2. Re:thats nothing by Anonymous Coward · · Score: 0

      You too, huh?

  52. In Ancient Greece, the horse beguiles the Trojans by smdm · · Score: 1

    In America, the force exploits the Trojans. Um, any ideas about Soviet Russia?

  53. Deedle deedle deedle by wsanders · · Score: 1

    and it has to make deedle deedle deedle noises. While launching a Matrix screensaver.

    Although I did see a '24' episode where the computer whiz had nothing up on his desktop other than about two dozen xterm windows. Someone did their homework.

    --
    Give a man a fish and you have fed him for today. Teach a man to fish, and he'll say "WHERE'S MY FISH, YOU IDIOT?"
    1. Re:Deedle deedle deedle by Opportunist · · Score: 1

      I was also quite pleasantly surprised to see nmap as the hacking tool in Matrix... it was far from accurate, but also at least far from the usual graphical gimmicks.

      Problem is, hacking is not TV-compatible. It's simply no spectator sport. You don't really "see" a lot if you don't know what you're looking for, if you don't know what the output means, you cannot understand why some "random" crap spewed out by a tool can mean so much joy to a person trying to overcome someone else's defense. There is no big "you got access" window flashing fullscreen. More often than not, there's a command line prompt. Not really something to show off on TV, is it?

      And most of all, it does not beep and pling. It doesn't spin and flash. The only thing flashing, if that, is the cursor.

      --
      We used to have a Bill of Rights. Now, with the rights gone, all we have left is the bill.
  54. use a throw away computer on an open net by Anonymous Coward · · Score: 0

    Yea, I don't get it. If I were to do something like this, I'd want to use a disposable computer (one that was never used before and never used again) on an open network, far from my home.

  55. download to? uploaded to by Anonymous Coward · · Score: 0

    "which was downloaded to his computer"

    it was uploaded to his computer
    OR
    it was downloaded by his computer

    Pick one or the other.

    "Hey, can you borrow me some money."

    1. Re:download to? uploaded to by justinlee37 · · Score: 1

      "Hey, can you borrow me some money."

      Sure thing boss, I'll see the loan shark tomorrow.

  56. Re:Cops Catch Criminal. Film at Eleven. by TheRaven64 · · Score: 1

    This is a technology site. In case you haven't noticed, technology used by law enforcement (and the military) is of interest to a lot of the readers here. If this were a gun site, then stories about the use of a new kind of gun in the apprehension of a criminal would be similarly relevant.

    --
    I am TheRaven on Soylent News
  57. Then brag about it by Anonymous Coward · · Score: 0

    The brag about it on the one place where people will think you are just making it up.

  58. Re: But who said it was about "outrage"? by Cro+Magnon · · Score: 4, Insightful

    Yeah, it's sad that law enforcement actually doing their job the RIGHT way is news.

    --
    Slow down, cowboy! It has been 4 hours since you last posted. You must wait another few hours.
  59. Technology appropriate to the crime by gillkm · · Score: 1

    Federal Bureau of Investigation actually conducts investigation using technology appropriate to the crime. News at 11!
    Seriously, is anyone actually surprised that the FBI would actually adapt to the 21st century and develop new means of gathering evidence? A circa 1960's bug under the desk isn't going to be very useful when all you hear is typing. Provided the bureau used this lawfully (with a warrant, etc), this is not really news...

    --
    I don't like sigs... I don't use it...
  60. Multiple OS by PersianTech · · Score: 1

    I wonder if they have multiple types of Trojans that could affect any type of OS. For example Max OSX, the government could get some code from Apple and infect you in a certain way, you wont even know. Overall its stupid for someone to use the OS they run everyday for "hacking"...

  61. Re:Just another... by Anonymous Coward · · Score: 0

    From the article:
    "The documents, which are heavily redacted, do not detail the CIPAV's capabilities, but an FBI affidavit in the 2007 case indicate it gathers and reports a computer's IP address; MAC address; open ports; a list of running programs; the operating system type, version and serial number; preferred internet browser and version; the computer's registered owner and registered company name; the current logged-in user name and the last-visited URL."

    The OS type suggests there could be non-windows versions

  62. FBI ? come on, don't mock us by billcopc · · Score: 3, Interesting

    Is it just me, or does it seem rather contrived that the FBI would (successfully) use a trojan to catch a criminal who is at least someone technically proficient ? Presumably the con would be surfing through a proxy at the very least, and is probably not the kind of user who runs unsolicited downloads from public web sites.

    Call me crazy, but I'd say this smells like a piece of theatre. Now I'm not saying the FBI hired the con, but sometimes I wonder... In an increasingly complex tech world, maybe they feel the need to put on a show, to make people believe the FBI still has things under control.

    --
    -Billco, Fnarg.com
  63. Internet privacy simply do not exist by DJRumpy · · Score: 2, Insightful

    The article indicates that warrants were requested and issued each time they used this. It would be rather useless for the trojan to inject other malware onto a system that the FBI was likely to seize said equipment shortly after the trojan was planted.

    This doesn't concern me in the slightest as long as they continue to follow the law and request a warrant to plant this trojan. If your a law abiding citizen, then you should never show up on their radar and I see this as no different than a blackmail case where they bugged someone's phone with a warrant or put them under 24/7 observation. I would imagine they injected the trojan via the web site that the guy demanded Verizon set up for him via some known (or unknown) exploit.

    The two known instances of the FBI using this were both done via warrant (this one in 2005 and the latest in 2007).

    That's not to say they don't use this elsewhere, but any person on the internet should consider their activities traceable no matter what hoops they go through. Especially when the telecoms willingly rolled over when requested by the government and most folks get their internet access via said telcoms.

    1. Re:Internet privacy simply do not exist by cayenne8 · · Score: 4, Insightful
      "That's not to say they don't use this elsewhere, but any person on the internet should consider their activities traceable no matter what hoops they go through. Especially when the telecoms willingly rolled over when requested by the government and most folks get their internet access via said telcoms."

      Well, there are ways to be about 99.99% anonymous on the internet. One way is to set up a nym account, that bounces through serveral remailers like Mixmaster...and basically have the final hop on those to be one of the anon groups on USENET. That way, they don't know who it is reading one of thousands of pgp encrypted emails out there.

      However, when it comes time for the internet to intersect 'meatspace', like when you want to get money. Well, now that part is gonna be a little tougher to do...much easier to track the money.

      --
      Light travels faster than sound. This is why some people appear bright until you hear them speak.........
    2. Re:Internet privacy simply do not exist by DJRumpy · · Score: 1

      lol. If they haven't copyrighted 'meatspace' yet, you should hop on that. I LOVE it ;)

    3. Re:Internet privacy simply do not exist by tpwch · · Score: 2, Informative

      That's a relatively well-known term among computer geeks who also likes reading fiction. It's used in multiple books/novels in the genre 'cyberpunk'.

      --
      Posted by a Debian GNU/Linux user
    4. Re:Internet privacy simply do not exist by MooseTick · · Score: 2, Insightful

      It would be easier to connect to the site form an free wireless connection. Where I live, some McDonalds, coffee shops, Duncan Donuts, and other places offer free wifi. Just goto one of those, connect with a VM of whatever you like and do your business. When done, revert to your snapshot of how it looked before and whatever virus or trojan they pushed on you should be eradicated.

    5. Re:Internet privacy simply do not exist by triffid_98 · · Score: 1

      This doesn't concern me in the slightest as long as they continue to follow the law and request a warrant to plant this trojan.

      I thought St. Obama had already declared federal agencies could claim "sovereign immunity" (U.S. can never be sued for spying that violates federal surveillance statutes), or is this different since it involves planting something on their PC?

    6. Re:Internet privacy simply do not exist by PingXao · · Score: 2, Funny

      I've seen the word "meatspace" in use for almost a decade. Welcome to the world.

    7. Re:Internet privacy simply do not exist by cayenne8 · · Score: 1
      True, that all helps, but, for interactive communications, it would help to keep you anon.

      Keeping the email pure txt, and not using something like Outlook with possibly identifying info in the email headers...well, that's obviously something you want to avoid.

      Again, just for safety, I'd avoid windows for anything, and for goodness sake, don't send a MS Word doc....

      --
      Light travels faster than sound. This is why some people appear bright until you hear them speak.........
  64. Comodo anyone? by GPLDAN · · Score: 2, Informative

    I have mixed feelings about Comodo:

    http://personalfirewall.comodo.com/

    On one hand, in Proactive security mode, it will tell you anytime a process it doesn't know does anything. Accessess a registry key, tries to open a socket, tries to piggyback outbound placing a HTTP connection via the IE object, what .dll is getting linked for anything it doesn't know. It's miles ahead of Zonealarm, and it's free.

    On the other hand, if CIPAV has an exception deep in the executable, then it's pointless.

    I wish Comodo was distributed open source and you could compile it yourself using Visual Studio.

  65. Other ways by hey · · Score: 1

    I am not a bad guy but its interesting to think about other ways to get the info from Verizon.

    I recall some old movies where a message was planed in the classified section of a newspaper. It would be pretty hard for the FBI to trace that.

    If you want to do the same thing online, tell the blackmailee to post some info in the corner of their very busy homepage.

    Why not setup that offshore bank account yourself, tell the backmailee the account number and have them deposit the money.

     

  66. Hmm... Magic Lantern... by Anonymous Coward · · Score: 1, Interesting

    Warning... Tinfoil hat alert...

    The front page of Slashdot was an interesting read for me today... We see here the top story is about "Magic Lantern," and just two stories down one about the potential of "Adobe Flash TV's." Coincidence? :-O

    Maybe, and I'm speculating, there is a dual meaning to Adobe's "Flash" product?

    The news about this seems to indicate that it the exploit works with any OS. So, the mechanism of infection must be must be common...

    Flash is closed-source and almost ubiquitous -- it runs on Linux, Mac, BSD and Windows. It also has a track record of being vulnerable, but... it's also owned by a US company... What if the US government were to offer a contract to Adobe -- or, perhaps (post 911) an offer that they couldn't refuse?

    1. Re:Hmm... Magic Lantern... by oneTheory · · Score: 1

      I know it's april 20th, but geez that stuff has got you bugging.

      Our fellow geeks who have router-based firewalls and logging would surely have noticed network activity that they didn't initiate and trace it back to its source.

    2. Re:Hmm... Magic Lantern... by PPH · · Score: 1

      Our fellow geeks who have router-based firewalls and logging would surely have noticed network activity that they didn't initiate and trace it back to its source.

      Do you really think so?

      I recall an incident about a decade ago where the DNS resolution for the name of a very prominent Redmond based software company broke, or was hacked. This condition lasted for only a matter of hours, but we (I worked for another very large corporation with its own intranet) noticed a strange phenomena. Since the s/w vendor's domain name had effectively 'disapeared', our firewalls began logging DNS resolution errors. When the number of errors spiked (something like 10^5 or more per hour), an investigation ensued. It turned out that most of the connection attempts were generated by users simply starting one of this vendor's applications. Each app 'phoned home' when started with a live Internet connection.

      Now the interesting thing was that, prior to this DNS error episode, nobody noticed the connection events. Our IT security 'experts' were completely unaware of their existence. And this is a company that supposedly has security in place needed to comply with DoD contract requirements.

      So I really wonder if the average geek-run firewall would be any more successful at picking suspect traffic out of a log, what with the growth in ad banner services, Javascript popup crap, application's checking in with license servers, etc. we have today. If the FBI is smart, they've got a contract with some adware outfits to handle the return data.

      --
      Have gnu, will travel.
  67. Re:Just another... by Anonymous Coward · · Score: 0

    I don't think that the FBI has written that trojan themselves, they have most likely outsourced this work to some security company/consultant. The knowledge to write a reliable, current remote exploit just isn't something an FBI agent needs, and I consider it unlikely that any of them actually has up-to-date knowledge.

  68. How He Was Duped by CyberSlammer · · Score: 1

    He had an ad on his website that blared "Congratulations! You have been selected to win a free Apple IPod!"...he couldn't resist clicking it.

  69. Re:Cops Catch Criminal. Film at Eleven. by sootman · · Score: 2, Funny

    Actually, the FBI can't tell the difference between a criminal and a suspected criminal. In the U.S., it takes a jury (or a guilty plea) to do that.

    I was watching some show that had a car chase filmed from a helicopter. Guy had a semi and was wreaking havoc, driving through roadblocks, ramming police cars, going so far as to use his truck to push other cars out of the way when he hit some stopped traffic on the freeway. Finally he's off the road, surrounded by police cars, gets out of his truck, starts fighting, the police eventually get him into the back of a cruiser, the whole thing has been filmed, and the reporter comes on the mic and says "the police are now taking the SUSPECT into custody"... it always floors me when I see something like this and hear the word "suspect." I know, I know: legal terminology, due process, reporter CYAing so he doesn't get sued for slander or libel (I always forget--whichever one doesn't need to be printed) but still, it just makes me laugh out loud every time.

    --
    Dear Slashdot: next time you want to mess with the site, add a rich-text editor for comments.
  70. Re:FBI ? come on, don't mock us by Anonymous Coward · · Score: 0

    You have to remember: normal people find legal ways to make money, normal smart people find legal and smart ways to make more money; your average criminal isn't mentally equipped to do either of these.

    In short, non-political criminals are dumber or more broken than average, so they do dumber and less logical things than you'd expect. And that's how they get caught.

  71. Re:FBI ? come on, don't mock us by PPH · · Score: 1

    Is it just me, or does it seem rather contrived that the FBI would (successfully) use a trojan to catch a criminal who is at least someone technically proficient ?

    Technically proficient? The guy was an engineer, granted. But one laid off and (supposedly) replaced with foreign labor. So perhaps he wasn't the brightest bulb in the marquee after all, trying to pull a stunt like this.

    --
    Have gnu, will travel.
  72. Re:Just another... by powerlord · · Score: 2, Informative

    The OS type suggests there could be non-windows versions

    Fine, then play the Intelligence game and feed them disinformation.

    Set your user agent to IE while running Linux, and disable JavaScript/Java and any other extensions so they think you're running one OS, and have no way of pulling info to request more information.

    For extra points run on a VM that you can strip down to the bare essentials, configure once, and then wipe after each "communication".

    If the only ports its allowed to get to is the anonymizer's website/port, and its feeding wrong information about what it is, and not letting anything run, then its about as secure as you can make it ... and still let it connect to the internet.

    --
    This space for rent. All reasonable inquiries will be entertained at proprietors discretion.
  73. Re:In Ancient Greece, the horse beguiles the Troja by rob1980 · · Score: 1
  74. As long as by Orion+Blastar · · Score: 2, Insightful

    #1 There was a warrant for the wiretapping.
    #2 The guy really did something wrong and against the law.
    #3 He was stupid enough to click on whatever installed the trojan.
    #4 He was stupid enough to cut Internet cables and demand blackmail and ransom from the ISPS.

    We'll just call it an Own Goal for this guy whomever he is.

    As long as the majority of the population who don't do these things aren't domestically spied on, it should be alright.

    If the FBI wants to see what my Traveller RPG group is doing, we could use another Game Master and a few more players as our Game Master is working a job that requires him to travel and cannot GM any more and a few players had quit. No need to plant a trojan on our computers and read our email.

    --
    Remember, Slashdot does not have a -1 disagree moderation, and no, troll, flamebait, and overrated are not substitutes.
  75. Lighten up, Francis. by Anonymous Coward · · Score: 0
  76. Re:Just another... by Anonymous Coward · · Score: 0

    If you get a call from someone who refuses to identify themselves asking you if you'd be willing to edit a couple hidden configuration files and restart your system, but screams "RTFA" when you ask how to locate those files, then you have the Linux version.

    Fixed that for you.

  77. Re:Cops Catch Criminal. Film at Eleven. by Anonymous Coward · · Score: 0

    > Reports say police used their "gun" technology to do this.

    ok, what type of gun? Rifle, pistol, howitzer?

    Also ENG guys don't use film anymore these days!

  78. so what? by Anonymous Coward · · Score: 0

    This just in - law enforcement agencies recently admitted to having in their possession tools that allow them to "fire" projectiles at very high velocities. These "guns" can and have been used to kill people.

    So the fear here is that law enforcement has tools that can be used in a bad way. But by all accounts (including the poster's) they were used in this instance specifically to detect the identities of people visiting a private web site specifically set up by the demand of someone strongly suspected of doing something illegal?

    It seems it is the belief of most here that government be is untrustworthy that it be dissolved completely, or at the least be handcuffed and incapacitated to the point of being ineffective of doing anything, good or bad, for the fear of it doing bad. Have you strongly considered the alternative? Is anarchy really all that much better?

    I know /. is anti-government to the point of being institutionally paranoid, but isn't this a bit much?

  79. Re:Just another... by cerberusss · · Score: 1

    If you get a call asking you if you'd be willing to [...] restart your system, then you have the Linux version.

    Restart your system? And ruin my uptime? OOooooh I wish I would get a call like that. I would lecture said person ad nauseam about the foolishness of rebooting, when you can just restart the service in question, whether he was a M$ lackey, how he could explain the reboot to his senior sysadmin, et cetera. Without so much as a breath, I'd then continue and venture into the GNU/Linux question, how great Samba is, Sony's questionable activities, the intricacies of the CC attribute-blah-blah license et cetera et cetera.

    Oh BOY, please SOMEONE CALL ME and tell me to REBOOT my SYSTEM!

    --
    8 of 13 people found this answer helpful. Did you?
  80. Moron by nurb432 · · Score: 1

    A simple drive to the local starbucks with a spoofed mac address would have solved that problem.

    --
    ---- Booth was a patriot ----
  81. Will McAffee remove this trojan? by Anonymous Coward · · Score: 0

    I wonder if the popular antivirus programs are capable of detecting and removing this trojan?

    I wonder if coding them to do so would be against the law, and expose the antivirus vendor to some kind of obstruction-of-justice, or terrorism, charge.

    Anyone know?

  82. The obligary lolcat by Anonymous Coward · · Score: 0
  83. Re:Just another... by Ironica · · Score: 1

    If you get a call from someone who refuses to identify themselves asking you if you'd be willing to edit a couple hidden configuration files and restart your system, but screams "RTFA" when you ask how to locate those files, then you have the Slashdot version.

    Fixed that for you.

    Fixed that for you.

    --
    Don't you wish your girlfriend was a geek like me?
  84. Dragnet approach? by w0mprat · · Score: 1
    How many other PCs are infected just to get this one guy? They did post it on a website, nonetheless, its seems in this case they specifically targeted the suspect:

    (wired) "In several of the cases outlined, the FBI hosted the CIPAV on a website, and tricked the target into clicking on a link." "The CIPAV will be deployed via a Uniform Resource Locator (URL) address posted to the subject's private chat room on MySpace.com.""

    You have to wonder though, in such use this trojan must end up on the PCs of people who are not Suspects, and the data is handed back to the FBI.

    Any one really think they do not have a Linux version? It's harder, but not impossible, and certainly desirable.

    --
    After logging in slashdot still does not take you back to the page you were on. It's been that way for 20 years.
  85. Re:Just another... by Cadallin · · Score: 1

    Yeah, it wouldn't get your typical /. geek, but most criminals aren't known for their foresight or intelligence. "Oh, the private website with the bank account information needs me to install this software! Ok, what could possibly go wrong?"

    Correction: Most criminals that are known, aren't known for their foresight or intelligence.

  86. Re:Just another... by Anonymous Coward · · Score: 0

    Can I have some synergy to go with your vector?

    Go PHB elsewhere.

  87. Been "at war" since American Revolution. by Anonymous Coward · · Score: 0

    It's why everything is "United States" this and "United States" that. It has nothing to do with the American states of the republic.

  88. Re:Cops Catch Criminal. Film at Eleven. by LittleNegative · · Score: 1
    That's not the point - local law enforcement doesn't need a warrant to use a gun.

    In this case, the FBI did catch a "bad guy". They needed a warrant to do it, however, because without it they set a legal precedent that they can install a trojan on anyone's machine.

  89. And when visiting that link by ronmon · · Score: 1

    Ten, yes 10! That's how many scripts computerworld tried to run just to read a cheesy article. Screw them.

  90. FUnny, that's the same IP address by DRAGONWEEZEL · · Score: 1

    I have on my Net enabled suitcase...

    --
    How much is your data worth? Back it up now.
    1. Re:FUnny, that's the same IP address by El_Oscuro · · Score: 1

      Hey! Thats my root password....

      --
      "Be grateful for what you have. You may never know when you may lose it."
  91. That wouldn't work!!!!! DON'T TRY IT!!! by DRAGONWEEZEL · · Score: 1

    Not that I know how this happens, but the IP address could be x-reffed w/ the offenders time online. That get's x-reffed w/ video surveilance and you got your guy.

    --
    How much is your data worth? Back it up now.
    1. Re:That wouldn't work!!!!! DON'T TRY IT!!! by TheRaven64 · · Score: 1

      Assuming that they were on camera. Quite a few places around here have free WiFi which extends outside and out of the range of their cameras. You can always program your computer to connect at a specific time and make the download, then leave it in your car parked close by, walk away, and get caught on CCTV cameras at the opposite end of town while the download happens. Do this at a busy time and the CCTV will record a lot of people who are online at that time, but none of them will be you.

      --
      I am TheRaven on Soylent News
    2. Re:That wouldn't work!!!!! DON'T TRY IT!!! by DRAGONWEEZEL · · Score: 1

      I had thought of that too, but I didn't want to tip anyone off before I go .... oh I shouldn't talk about that here...

      8')

      --
      How much is your data worth? Back it up now.
  92. That's EXACTLY how I have gotten away by DRAGONWEEZEL · · Score: 1

    With speeding for the last 8 years. I have to say, while some parts are a lot easier (spot checks become instinctual, if it's not one of you, it's one of them, etc..)

    There are other parts that get very difficult. Recently traffic enforcement officers have cars w/ cloaked light bars, and stock paint jobs. They can now use li / radar /laser while moving. I still refuse to get a detector as I feel it makes you sloppy, complacent.

    I recently got caught cause I was on my cell phone (luckily I got out of the ticket), not paying attention, and that's why I am all for the ban.

    --
    How much is your data worth? Back it up now.
  93. Re:Cops Catch Criminal. Film at Eleven. by Anonymous Coward · · Score: 0

    In a related story, local law enforcement shot a criminal who tried to hold up a 7-11 when he resisted arrest and brandished a knife. Reports say police used their "gun" technology to do this.

    This is offtopic but, the police should be using their TAZER technology here rather than a gun, unless there wasn't one available and they needed to take immediate action to stop him.

  94. collateral damage by shentino · · Score: 1

    How can they be sure they hackt he right guy?

    More importantly...how do they make sure they DON'T hack the WRONG guy?

  95. I saw this in the news the other week by Anonymous Coward · · Score: 0

    - it was called PIFTS.exe

  96. Trojan gets to the root of the problem by hdon · · Score: 1

    Um... seriously? If they know the specific customer they wouldn't need to install the trojan.

    It's not disclosed how the "trojan" is loaded onto the perpetrator's system, however getting that system to request and execute your code cuts through what is potentially a very hairy situation: who knows how many layers of abstraction the perp is using to hide from traces.

  97. Re: But who said it was about "outrage"? by gilbert644 · · Score: 1

    It's only news on Slashdot and that speaks more to slashdot paranoia rather than police corruption. Cue someone calling me naive.

  98. Microsoft National Security Update by Anonymous Coward · · Score: 0

    hmmmm.

    The idea of any expectations of privacy have long ago been eclipsed by the need for security.

    The last havens of private conversation are the
    stroll on the beach, hike in the woods and the
    exchange of a used book.

    Shall we play a game?

  99. Got yer IP! by mizzouxc · · Score: 0

    This link explains it all! (NSFW)

    http://www.youtube.com/watch?v=cP1SsfnSFDs

  100. Only if you surf the web as root/administrator ... by MadMaverick9 · · Score: 1

    Well - only if one is foolish enough to surf the web and check email and do your other daily computer chores, while being logged in as root/administrator to your computer ...

    rootkits, malware, trojan, etc. still require root/administrator rights to install themselves.

    http://kareldjag.over-blog.com/article-1232530.html
    http://technet.microsoft.com/en-us/library/bb456992(loband).aspx
    http://technet.microsoft.com/en-us/library/cc700846(loband).aspx

    The above is old school on Unix (and applies to any OS) - only login as root/administrator if you need to do system maintenance.

    For everything else use a Least Privilege User Account.

    And - first install and run software in an isolated virtual machine with InstallWatch running and see what is being installed/executed. If the installer/software is doing anything suspicious, simply do not install it on your real machine. As simple as that ...

  101. Re:Just another... by MadMaverick9 · · Score: 1
    Then you better read again ... http://en.wikipedia.org/wiki/Rootkit

    The term rootkit or root kit originally referred to a maliciously modified set of administrative tools for a Unix-like operating system that surreptitiously granted root access. If an intruder could replace the standard administrative tools on a system with a rootkit, ...

  102. Sweet, but... by grikdog · · Score: 1

    corroboration?

    --
    ``Tension, apprehension & dissension have begun!'' - Duffy Wyg&, in Alfred Bester's _The Demolished Man_
  103. Re:Just another... by CompMD · · Score: 1

    You've got the order backwards; the way the FBI is handling computer crimes these days, they don't turn agents into hackers, its the other way around. I'm dead serious. Of the two agents I worked with the most, one was specifically an IT guy whose work history included being a corporate sysadmin. They have far more up to date knowledge than you might expect, and an excellent network of civilian consultants for the things that they do need help with.

  104. Pyrrhic by Anonymous Coward · · Score: 0

    Pyrrhic victory, as in Pyrrhus the Greek general.

    Please tell me you've been pronouncing it as "Firric" all this time!

  105. I take it back. I have to backtrack. ;-) by Anonymous Coward · · Score: 0

    I concede your point. I'm not sure what I was thinking. I probably shouldn't post when I'm drunk ;-)

  106. Re: But who said it was about "outrage"? by Anonymous Coward · · Score: 0

    if a warrant was obtained first, the FBI actually did this the RIGHT way, and that makes me happy.

    Serious? That's all you need? When a warrant can be "obtained" for any reason? I'm not saying all/most/some warrants are unlawful, but there are still exceptions. To blindly say, "as long as they had a piece of paper, whatever they do is fine with me!"

  107. Re:I take it back. I have to backtrack. ;-) by Zero__Kelvin · · Score: 1

    I don't know how the above was posted as anonymous coward. I'm not even drunk! In any case, the post was from me, for the record.

    --
    Guns don't kill people; Physics kills people! - John Lithgow as Dick Solomon on Third Rock From The Sun