Slashdot Mirror


The FBI Wants To Know About Your IT Skills

AHuxley writes "The FBI, via the Office of Management and Budget, would like to find out more about your information technology expertise if you are part of InfraGard. Terms like 'practical utility' have been included in a 60-day emergency notice of information collection via the Paperwork Reduction Act of 1995. Is your boss or cubicle colleague part of InfraGard? It's a private, non-profit organization run as a public-private partnership with the Federal Bureau of Investigation. Are they passing info back about you or your company?"

42 of 211 comments (clear)

  1. Echoes of B5's "Night Watch" for IT? by Anonymous Coward · · Score: 3, Insightful

    Maybe it's not that sinister but that's the first thing that popped into my head. Looking at the website, it's initial intentions aren't that sinister but mandating that much sharing of information sounds a bit creepy. You guys are going to be DHS'd/FBI'd to death if you're not careful.

    1. Re:Echoes of B5's "Night Watch" for IT? by IdleTime · · Score: 2, Insightful

      This reminds me of the same program KGB once operated, they just called it "Report anything unusual about everyone!" and it was a disaster then so why do these douchebags think this is a good idea now?

      --
      If you mod me down, I *will* introduce you to my sister!
    2. Re:Echoes of B5's "Night Watch" for IT? by jessecurry · · Score: 3, Insightful

      Conservatives *should* be the champions of small government, and by extension individual liberties... but those calling themselves conservatives in the US these days are way off base.

      --
      Those who know, do not speak. Those who speak, do not know. ~Lao Tzu
    3. Re:Echoes of B5's "Night Watch" for IT? by baboo_jackal · · Score: 5, Insightful

      Just out of curiosity, when *are* you going to start holding Obama accountable for the state of things? It sounds to me like you've set up a perfect moving-goalpost situation where "badness" == "Bush's Legacy" whenever it's convenient.

      I'm definitely not a big fan of Republicans and their degenerate relationship with religious folks these days, but is it really productive to mask the bad behavior of one political party by blaming it on another?

    4. Re:Echoes of B5's "Night Watch" for IT? by NSN+A392-99-964-5927 · · Score: 2, Insightful

      Maybe it's not that sinister but that's the first thing that popped into my head. Looking at the website, it's initial intentions aren't that sinister but mandating that much sharing of information sounds a bit creepy. You guys are going to be DHS'd/FBI'd to death if you're not careful.

      You are quite correct... remember Carnivore and the denial it existed? Then we ended up with Magic Lantern which is still denied even though I have the source code. The CIA are the evil ones, not the FBI. I have had good help from some federal agents in the past and I saved a 13 year old girl from a pedophile in Las Vegas. The fed in question was in California and I am here in the UK, now if it was not for our collaboration and my IT skills I would have never located her and quite possibly she would have been raped and murdered. I also helped break the "Wonderland Pedophile link" and Scotland Yard in London were wonderful, helping me out. http://www.theregister.co.uk/2001/02/13/pedo_porn_ring_gets_slap so what can I say? The point is the FBI do need good IT people, you just have to be very careful about what you do as government intelligence agencies have very sinister motives. Not everyone is friendly in intelligence agencies, but in the words of Sir Arthur C Clarke who was a close freind said "I can no long release future technology as it is likely to be abused to the detriment of mankind". The mind boggles @ the thoughts. love NSN

      --
      All cows eat grass!
  2. Incoming festivity by gmuslera · · Score: 2, Funny

    They want to be ready for the next July 4 just in case they need someone capable to infiltrate into some alien computer system.

  3. First post! by Godji · · Score: 4, Insightful

    The part I don't understand is why anyone would voluntarily become a part of InfraGrad and start "sharing information" about others in the first place.

    1. Re:First post! by woody.jesus · · Score: 4, Insightful

      Well, if you are a member of InfraGrad and your boss isn't, then he suddenly has to be aware that you might snitch on him at any time. Now he has to treat you with some respect for a change! Or if the boss is already a party member, then as a fellow Infragrader, you'll be preferred for promotions and raises. Maybe you were a weak little sniveling rodent before, but now you're a member of INFOGRAD and you can strut around in your imaginary jackboots because you're just a little bit better than those common people!

      --
      "You never pushed a noun against a verb except to blow up something" (Spencer Tracey, 'Inherit the Wind')
    2. Re:First post! by FooAtWFU · · Score: 4, Interesting

      It seems aimed at big "IT Infrastructure" companies like ISPs, search engines and mail providers: a way to be in touch with these people in the event of "cyberterrorism" and systematic DOS/takeover attempts. It seems like a much better idea than waiting for something to happen and then have no idea who you're supposed to get in touch with about it. Knowing who to call in an emergency shouldn't have to be half the battle.

      --
      The World Wide Web is dying. Soon, we shall have only the Internet.
    3. Re:First post! by gladish · · Score: 2, Insightful

      Sounds a little like the "Hitler Youth" http://en.wikipedia.org/wiki/Hitler_Youth

    4. Re:First post! by Anonymous Coward · · Score: 2, Insightful

      Well, if you are a member of InfraGrad and your boss isn't, then he suddenly has to be aware that you might snitch on him at any time. Now he has to treat you with some respect for a change!

      Or fire you at the first possible chance he gets before you can get the goods on him. It's all great that you'd try to take him to court that you were fired for being in the InfraGrad program, but you'd have to prove it as well. And regardless of the case, after such a case is made public you can kiss your other job prospects goodbye as no employer likes "a troublemaker".

    5. Re:First post! by trapnest · · Score: 4, Informative

      Of the three things you mentioned, only one is an acronym and thus only one should be ALL CAPS.
      Gestapo is a shortened version of "Geheime Staatspolizei"
      and Stasi is a shortened version of "Ministerium für Staatssicherheit"

    6. Re:First post! by Opportunist · · Score: 3, Insightful

      More like The Party. Not only refering to the NSDAP but also to any parties in one party dictatorships. It was not much different in the Soviet states. You were a member of The Party and you suddenly had a much higher chance of promotion, of scientific credibility, of other merits that are credited on the whim of someone or a group of people.

      --
      We used to have a Bill of Rights. Now, with the rights gone, all we have left is the bill.
    7. Re:First post! by ScrewMaster · · Score: 3, Funny

      The part I don't understand is why anyone would voluntarily become a part of InfraGrad and start "sharing information" about others in the first place.

      Because, if you're not in the InfraGuard then you must be an InfraRed.

      --
      The higher the technology, the sharper that two-edged sword.
    8. Re:First post! by Punctuated_Equilibri · · Score: 2, Interesting
      This is a test of your biases. How would you feel if the Democratic Party was trying to create a support organization of volunteering IT professionals? The Republican party? moveon.org?

      If you think the US does not need some organization that does the job of DHS, then you are an idiot. If you accept that the job needs to be done, then you also have to accept the people that you've got, you can't just fire them all and build a new DHS by hiring, say, fine arts majors. At that point you can have a discussion of how to organize and what limits to impose.

      That said, seems to me like InfraGard opens up the process a bit. Instead of only DHS employees and a tightly knit web of contractors and suppliers knowing what is coming up, smaller companies and individuals with a clearance, or who can get one, could potentially get more access to some of this information, and provide feedback. That concept sounds okay to me, if it works.

      --
      In group behavior: 'because they're evil/morons/sheep/crazy' is not 'insightful' it's 'oversimplified'
  4. Sooo, essentially... by tciny · · Score: 2, Informative

    ... the Stasi of the IT world or am I misreading this? The wording seems intentionally diffuse.

  5. Why is this necessarily a bad thing? by mc1138 · · Score: 3, Interesting

    While I'm against snooping without cause, something of this in a collaborative model isn't necessarily a bad thing, though it does open up for potential abuse. There are lots of times when I call up buddies ask them what sort of IT issues they're having with security, spam, etc, and this just seems to formalize it a bit, and get the circle of trust a little bigger. Companies too often seek to distrust the authorities for crimes because it will make their companies look weak. As such criminal will get away with things solely because no one reports them. This doesn't look like a secret "Stone Cutter" type group, just a way to get to know some local colleagues and keep more ears to more ground looking for potential threats.

    1. Re:Why is this necessarily a bad thing? by betterunixthanunix · · Score: 4, Insightful

      What I find striking is the utter lack of information that the FBI's website gives about what Infragard is really about. They give few details about what sort of information they are looking for, and what sort of information they give back to their members. That alone makes it difficult for me to trust...

      --
      Palm trees and 8
  6. Funny stuff by oh2 · · Score: 4, Funny

    Lol, "Self-identified as IT specialists" indeed. Thats one funny document. What would they need that kind of information for ? To evaluate bragging rights ?

    --

    Now the world has gone to bed, Darkness won't engulf my head, I can see by infra-red, How I hate the night.

    1. Re:Funny stuff by finitimi · · Score: 4, Informative

      I am a member of InfraGard. In the past, our local FBI office has asked members of our chapter to self-identify their expertise in a particular IT specialty. I and others did so, and subsequently assisted them in a couple of criminal investigations. I think the FBI just wants to broaden and formalize their inventory of IT subject matter experts.

    2. Re:Funny stuff by The+FBI · · Score: 5, Funny

      The FBI has never contacted you in any way, shape or form, other than through this post. You are advised to retract your statement and apologize, otherwise legal action will be brought against you. Thank you.

      Have a nice day.

  7. IT skillls lisdted bellow: by Anonymous Coward · · Score: 3, Funny

    Wekl, fwirstly, my tyuping sklills are spoty on.

  8. How much do informers get paid? by AliasMarlowe · · Score: 2

    Cash, that is, not just "influence" which might backfire. I heard that Stasi rates were rock bottom, but the US screwy agencies have deeper pockets. Hey, in these challenging times lots of folks would be willing to snitch (perhaps even inventively) on their colleagues and other obstacles to job security or promotion (=boss).
    Not being a citizen of any NATO country, they'd probably offer me less, the bastards.

    --
    Those who can make you believe absurdities can make you commit atrocities. - Voltaire
  9. An end run around warrants? by Anonymous Coward · · Score: 2, Interesting

    So, if the FBI wants to ask for certain records they have to get a warrant.

    But, if a member of InfraGard decides to provide the FBI with records without the FBI asking then it's a private citizen reporting "suspicious behaviour"

    Or, would a member of InfraGard be considered an officer of the government, making any records they had access to inadmissable?

    I'm guessing it's pretty clear that I'm not a lawyer.

  10. Re:GeekSquad for the FBI? by TheGratefulNet · · Score: 2, Insightful

    I don't see any domestic surveillance embedded in what's online.

    this gov org isn't as dumb as you think. or, restated, they aren't total idiots and don't fully disclose their actual intent and purpose.

    not all gov agencies are as dumb as bush. in fact, bush's dumbness was a cover. no human could be THAT moronic and rise to the level of the most powerful man in the world if he's truly an idiot.

    one of the smartest moves is to act dumb and it requires a certain kind of talent to pull it off. bush had that, innately.

    operation TIPS is alive and well; just below the radar. things like this never go away. are you kidding me??

    --

    --
    "It is now safe to switch off your computer."
  11. Am I missing something? by Callandor · · Score: 5, Interesting

    From the information provided, which is very little, it appears that the FBI is requesting information from people who have voluntarily joined an organization of IT professionals not just sponsored by but directly affiliated with the FBI. Why is this getting everyone's hackles up? It does not say that the information will be required of all members, nor does it say that members will be required to inform on their coworkers or companies. The ACM asks you about your IT skills, too. How is this different?

  12. Did any of you actually READ the link? by cravey · · Score: 4, Insightful

    They only want information about the IT skills of their own members. How else would they process ONLY 28,000 responses at 2 minutes each? This doesn't even seem to apply to all Infragard members, only:

    "Public and private professionals
    self-identified as having information technology expertise."

    This would also be why it's called:
    "InfraGard Knowledge/Skills/
    Abilities Profile"

    IT seems kindof obvious that they might want to know what the skills of their own members are if they need assistance on something. Not like the FBI knows anything about technology.

    Perhaps they're looking for resources for the next time they have an IT issue/project they need to not fuck up. According to their website, you need a background check to join. Seems like a good way to build a database of IT professionals that you don't need to do background checks on after the fact.

    1. Re:Did any of you actually READ the link? by Svartalf · · Score: 5, Informative

      Most people didn't. They panicked when they saw the headline.

      I've known about InfraGard for a while now. It's more of a group of security consulting people, gathered together to try to get a solid handle on securing the infrastructure of the country.

      I might be in the minority here, but this request is probably more in line with gathering a list for the FBI to go contact when they need an independent contractor for something. Like you said...while there's some aspects of tech they've got a handle on, there's others including this sort of thing that they just simply don't- and I'm thinking they thought it might be useful to get a list of that class of individual and what they do so they know who to turn to for help when they need it.

      --
      I am not merely a "consumer" or a "taxpayer". I am a Citizen of the State of Texas
    2. Re:Did any of you actually READ the link? by Tisha_AH · · Score: 4, Informative

      I have taught classes to an InfraGuard chapter in my area, it is quite different than the scary statements that have been made by many.

      It is about being aware of your vulnerabilities and developing contingency plans and fairly basic security procedures to make it less easy for someone to mess with your infrastructure. Most of the folks who attend the InfraGuard monthly meetings are already in middle management and have been tasked with the chore of improving security. While pretty much anyone can participate there are levels to it. Some information is compartmentalized on a need to know basis when it comes to specific incidents or threats.

      --
      Tisha Hayes
  13. So? by Anonymous Coward · · Score: 4, Informative

    Disclaimer; I'm an Infragard member (have been for about 7 years). Why are they collecting this? Easy, they're public/private partnership that focuses on emergency response. "In the event", they want to know who within there membership has skills that may be needed. Don't like it, don't join (or quit). Don't want them to have your data, make them remove it (you have the legal right to do so). No conspiratorial aspect here.

    1. Re:So? by Svartalf · · Score: 2, Interesting

      Shame you had to post anon there, but I understand. And I'd have to concur- that was the read I got on this whole thing once I saw the request text on Cryptome.

      Because of all the BS that went on prior to today within the Government, people are unfortunately hypersensitive of this sort of thing. What's sad about that, though, is that there ARE things to be up in arms about, even now, with stuff that the Government is doing (and in some cases, isn't...) in regards to "security" that goes unnoticed because we're worrying about things that don't need the concern and the other stuff slips by.

      --
      I am not merely a "consumer" or a "taxpayer". I am a Citizen of the State of Texas
    2. Re:So? by littlewink · · Score: 2, Interesting

      Did they also give you permission to shoot to kill when martial law is declared?

  14. It's not what you collect, but what you do with it by PolygamousRanchKid+ · · Score: 3, Insightful

    The Stasi were very good at collecting information. In fact, they were too good. They collected so much that their analysts couldn't effectively evaluate even a fraction of it. They lacked IT resources (when compared to Western agencies) and the Stasi leadership should have shifted more manpower from spying to analyzing.

    The FBI has access to unlimited IT resources, and the US intelligent community if very effective at evaluating the information that they have collected. Just look at how they stopped the underwear bomber . . .

    . . . uh-oh . . . never mind . . .

    --
    Schroedinger's Brexit: The UK is both in and out of the EU at the same time!
  15. InfraGaurd's IT skills by wonkavader · · Score: 3, Funny

    I note that the web developers of InfraGaurd don't know how to change their favicon.ico from the sun logo.

    Nice to see they're using Sun and Unix, I suppose, but who leaves the sun logo there?

  16. Re:missing tags by Savage650 · · Score: 3, Interesting

    Bigbrother, snoop, and even Stasi perhaps but KGB, Gestapo? No, as tempting as it may be, the FBI is not rounding up all IT people and sending them to the showers....

    For now, they are just recruiting "volunteers" to watch for "suspicious behaviour" and report "unreliable elements".

    Just the most obvious problems (as mentioned in other posts)

    • how long until "not volunteering" is deemed "suspicious behaviour"?
    • how long until people wronly accuse others for financial gain or just for fun?
    • how long until you'll have to prove your "reliability" by filling your snitching quota?

    Another thing to keep in mind: The so-called "War on Terror" can be used to outlaw anything and anyone.

    Soon after a high-profile Cyber-Attack all knowledge of critical infrastructure(tm) will become classified. Too bad for those lacking the official clearance for things they already know. The state will have to place such persons in "protective custody" camps to keep the terrorists from expoliting their knowledge. Unfortunately, even a short time spent in a such a camp will disqualify you from ever getting back to your former life: While they could'nt prove any previous contacts to "unreliable elements", now they know where you have met them. Finally, once the "unrecovereable elements" are confined to the camps it wont be long until some politician wants the money wasted on their upkeep be spent on his constituency instead. That is where the "showers" come in ..

  17. Re:Jesse Ventura by surmak · · Score: 5, Insightful

    I sometimes wonder if I am the only one who when passing through an airport security checkpoint is the only one who is more afraid of the TSA than I am of the terrorists. I have a far greater fear of getting arrested for forgetting to remove a leatherman from my bag or not emptying my water bottle than I am afraid of the plane getting blown up be some nutcase.

  18. Re:Jesse Ventura by hjrnunes · · Score: 2, Insightful

    Yeah well you're not getting the same news I am buddy. Which is really not surprising... Try watch something other than Western media. Islam wants to rule the world? Riiight...

    What about this: US does rule the world - most of it anyway - and the islamists are the only ones with enough balls to put up a fight. Why don't the radical extremists terrorize more liberal muslim countries that don't apply Shariah law then like Jordan and Turkey if they really want Shariah law everywhere? Those should be easier to change...

    You don't have the slightest clue of what you're talking about. It's because of people with such absurd opinions like yours that eat whatever crap mainstream media feeds them that there are terrorists in the first place and we almost have to get naked when traveling by airplane. If at least the victims were all people like you, the problem would settle quickly...

    As for England and Netherlands, well it's price of globalization. Wasn't it supposed to be a good thing anyway?

  19. Re:Jesse Ventura by Cassius+Corodes · · Score: 2, Informative

    I would accept this if terrorists where actually poor people who have no other options in life and the only thing they can do is use their life to strike against their oppressors (as is possibly the case in other parts of the world). In reality the folk that attack western countries seem to be the well off folk who are radicalised beyond all rationality. They just make life worse for the rest of their people.

    And for the question of if they have legitimate grievances against the west - they do but they exaggerate and combine legitimate ones with crazy conspiracy theories which frankly a child could debunk. They are not honest about the atrocities they commit - ie atrocities in darfur and sudan are all western propaganda etc and the popular belief that jews organised 9/11 even within al-quada. There is just no common acceptance of realty that would make negotiations feasible.

    --
    Control is an illusion, order our comforting lie. From chaos, through chaos, into chaos we fly
  20. Petty Partisanship by dbIII · · Score: 2, Insightful

    Ignore the names and parties for the moment.
    You can't blame the new guy for what the previous guy set up - that is just being childish and petty. What you can do is blame the new guy for taking a long time to fix the problems left by the previous guy. IMHO it hasn't been a long time yet
    In this case I think Jerry Doyle is being childish and petty about where he is laying the blame.
    New problems that arise are of course a completely different story but that's not what we are talking about, all this creeping authoritarionism because due process takes too long or requires expensive training of competatant people is well and truly a G.W. Bush legacy. It's not even about the party since McCain actively opposed the more extreme portions of it. It was alway more about things like Wolfowitz getting his girlfriend a better paying job than Rice with less responsibility than actually doing anything to benefit the USA.

    1. Re:Petty Partisanship by dbIII · · Score: 2, Insightful

      It looks like it hasn't sunk in yet so i'll put it more clearly. Change in large organisations takes time. Where huge government departments are involved it takes more time and they seem to delight in that. That is why I'm talking about looking around you at other examples and getting off the specifics of a new President - nobody has the magic wand to change things instantly now matter who they are.
      The British comedies "Yes Minister" and "Yes Prime Minister" make fun of some of these circumstances in a very entertaining way. Even though it is very British your country has inherited a lot of the things it satirises.

  21. Infragard is not nefarious by Dman33 · · Score: 2, Informative

    I am an Infragard member. I was working for a university research group and was required to join Infragard as a part of this research. I did not like the idea of being forced to join an organization I knew little to nothing about so I did research into the organization first. I read up on all of the conspiracy theories about Infragard and spoke with some members before joining.

    The conspiracy theories link this organization to "big brother" programs that encourage people to spy on their neighbors. This is not actually the case with Infragard - as far as I can tell.

    From what I can see, this organization is put into place for very good reasons. Look into the Russian action in Georgia last year - a large component of that military action was cyber-based. The Russians took over the Georgian infrastructure (electric, news and radio) far before tanks rolled into Georgian territory. If the US is ever attacked on a large scale, our infrastructure will be the first strike. Infragard allows a secured group of IT professionals to be "in the loop" on potential threats that cannot be made widely public yet. It also allows these professionals to collaborate on security issues in real time - as they happen.

    Say a new worm was propagating across major infrastructure networks. An administrator at the water company finds evidence of this worm and sends a message to Infragard asking if anybody else has seen it. A person working at the electric company reads that message and notices that it matches something they are addressing as well. The issue may be quickly escalated and addressed appropriately. If these individuals had to deal with conventional reporting then the link between two critical infrastructure networks experiencing the same problem at the same time may be missed.

    In my experience Infragard does not care a bit about individuals ripping a CD or something. This is about bridging the gap between law enforcement and IT professionals in order to minimize the time it takes to address a potential cyber threat on critical infrastructure.

    Registering your IT skills with Infragard is optional, not mandatory. This is not as evil as it sounds and I see much more upside to this than downside.

  22. Re:Jesse Ventura by DRAGONWEEZEL · · Score: 2, Insightful

    oh, I agree.

    I'm actually afraid that TSA will blow up an airplane by mistake. Here's a small example.

    I take a lot of pictures when I'm traveling for fun. I usually carry about 16hrs worth of batteries (which is about 1 AA / hour at the rate I shoot.) So I go to security w/ my batteries all nicely packaged tight. 4 in the cam, (A cannon S5IS, a good cam for my poor budget) and 3 sets of 4 in my camera bag. Each set is stable, all positives up, all in different locations in the bag. In the camera bag I have a micro tripod, a few lenses & cleaning cloth, and the charger for these batteries.

    Some idiot at TSA takes them ALL and dumps em into a big ziplock. Loose, then tried to hand them to me. I just about shit a brick. I'm like hey, you can start a fire... (2650mah rapid discharge cells, not the strongest out there, but nothing to dismiss either) Whoops, I said the magic word. That led to a 20 minute wait while they determined that the batteries and camera posed no risk after they used "TSA tape" to tape them all together in a giant brick. This only after an interview about why I had the batteries and how they could catch fire. (by throwing them all in a bag loose!)

    I'd shudder to think how they treat R/C lipos, where mishandling WILL cause a fire vs. might if things are just right...

    To those who have never experienced a loose battery setting something on fire, it's not a fun experience.

    --
    How much is your data worth? Back it up now.