'Project Vigilant' Recruits At Defcon To Track You

angry tapir writes "A secretive volunteer group that tries to track terrorists and criminals on the Internet went to the Defcon hacker conference in hopes of recruiting information security experts, but it will first have to overcome some skepticism. That's because most information security professionals have never heard of the group, called Project Vigilant."

Comments

bogus

[bsDaemon]

So, I got curious and clicked the link to the article. Then I clicked the link to the project's website, which beyond a splash screen with an INGSOC-esque logo with a half-assed latin slogan, you find a cheap-ass Drupal site which requires an OpenID account to log into. The list of logged-in users includes such gems as a guy named "poopcracker."

If this is cointelpro, its either extremely terrible, or extremely brilliant for looking so shoddy. Chances are, its just misguided vigilantism by people who read "gray hat python" and now think they can 'hack the Gibson'. I'm not sure which would disturb me more.

Re:bogus

[Anonymous Coward]

When you say "half-assed latin slogan," I hope you mean "pseudo-Latin slogan" - because that motto is the result of someone who doesn't know Latin trying to come up with something and getting it wrong. I think they were going for "We Watch Together," in which case they certainly shouldn't have used the first person *singular* of vigilo (not to mention misspelling "vigilo"). I think they meant Evigilamus Jugiter, to give the phrase the proper tone of menace (if they meant something less menacing, they should have gone with a variation on vigilamus pro te, which is the motto of the Canadian land forces and a translation of the chorus of O Canada).

Re:bogus

[FriendlyLurker]

Some of the names behind Project Vigilante:

...the list of its officials, which includes Mark Rasch, who headed the DOJ's Internet Crime Unit for 9 years; Kevin Manson, a retired Homeland Security official; George Johnson, who "develop[ed] secure tools for the exchange of sensitive information between federal agencies" for the Pentagon; Ira Winkler, a former NSA official; and Suzanne Gorman, former security chief of the New York Stock Exchange. These are people with extensive, sophisticated expertise in compiling highly invasive data about individuals' Internet activities, and more so -- given their background -- how to package it in a way that can be used by federal agencies.

From here and here.

So... perhaps it is a honeypot as well? In any case, the real operation is run backend to your ISP.

EU already did it

[ZeroExistenZ]

EU already has a simular technology in place.

You can get the analysis at wikileaks: EU social network spy system brief, INDECT Work Package 4

"The aim of work package 4 (WP4) is the development of key technologies that facilitate the building of an intelligence gathering system by combining and extending the current state-of-the-art methods in Natural Language Processing (NLP). One of the goals of WP4 is to propose NLP and machine learning methods that learn relationships between people and organizations through websites and social networks. Key requirements for the development of such methods are: (1) the identification of entities, their relationships and the events in which they participate, and (2) the labelling of the entities, relationships and events in a corpus that will be used as a means both for developing the methods."

Salon's Glenn Greenwald on Project Vigilant

[arnott]

He had a detailed post of 'Project Vigilant'.

Uber told Computer World that he decided to divulge his group's role in directing Lamo to turn into an informant because he thought that Lamo's patriotic act was being unfairly disparaged.

Re:Why not just call their company "NSAFront"?

[conspirator57]

As usual, Glenn Greenwald has several interesting things to say, even though he's not that technical and ascribes far too much credence to the technical prowess and savvy of high-level government officials with "cyber" or some variant in their name.

http://www.salon.com/news/opinion/glenn_greenwald/2010/08/02/privacy/index.html

Follow the cash and access

[AHuxley]

Two links with some more reading on Project Vigilant.
"that it monitors the traffic of 12 regional Internet service providers, hands much of that information to federal agencies, and encouraged one of its "volunteers," researcher Adrian Lamo, to inform the federal government about the alleged source of a controversial video of civilian deaths in Iraq leaked to whistle-blower site Wikileaks in April."..
but said that because the companies included a provision allowing them to share users' Internet activities with third parties in their end user license agreements (EULAs), Vigilant was able to legally gather data from those Internet carriers and use it to craft reports for federal agencies.
from:
Stealthy Government Contractor Monitors U.S. Internet Providers, Worked With Wikileaks Informant
http://blogs.forbes.com/firewall/2010/08/01/stealthy-government-contractor-monitors-u-s-internet-providers-says-it-employed-wikileaks-informant
"Elite US cyber team courts hackers to fight terror"
http://www.google.com/hostednews/afp/article/ALeqM5hKoXQdL-L1HFYObz0_UUHMactSWg

Top tip, stop chatting to strangers, try a sneaker net gap and again stop chatting :)

Re:Why not just call their company "NSAFront"?

[FriendlyLurker]

Adrian Lamo worked as an Analyst for Project Vigilant - which specializes in collecting any and all data from major ISP's where the EULA permits third parties (i.e. pretty much all of them).

Lamo also just happened to turn in chat logs for military whistleblower Bradley Manning. There is already decent evidence to suggest that Lamo never talked to Manning, but was given the logs by this secretive private catch-all spy network "Project Vigilante" and told to turn them in.

Re:Wannabe's

[AHuxley]

Kept MS code going for many years :)

This is news?

[Anonymous Coward]

"Seedy company hires hackers to commit felonies" -- Yawn.

"A person or entity providing an electronic communication service to the public shall not intentionally divulge the contents of any communication while in transmission on that service to any person or entity other than an addressee or intended recipient of such communication or an agent of such addressee or intended recipient."

Re:Why not just call their company "NSAFront"?

[Reziac]

Um... there's plenty of evidence that "Adrian Lamo" is nothing more than a high-end con artist:

http://tpmmuckraker.talkingpointsmemo.com/2009/09/american_police_force_hardin_montana.php?ref=fpb
http://www.kulr8.com/home/related/62994352.html
http://www.infowars.com/exposed-american-police-force-is-a-blackwater-front-group/
http://helenair.com/news/local/state-and-regional/article_aac61630-ae5a-11de-a782-001cc4c002e0.html