Slashdot Mirror


'Project Vigilant' Recruits At Defcon To Track You

angry tapir writes "A secretive volunteer group that tries to track terrorists and criminals on the Internet went to the Defcon hacker conference in hopes of recruiting information security experts, but it will first have to overcome some skepticism. That's because most information security professionals have never heard of the group, called Project Vigilant."

30 of 97 comments (clear)

  1. Why not just call their company "NSAFront"? by elrous0 · · Score: 4, Insightful

    It would be no less obvious.

    --
    SJW: Someone who has run out of real oppression, and has to fake it.
    1. Re:Why not just call their company "NSAFront"? by conspirator57 · · Score: 4, Informative

      As usual, Glenn Greenwald has several interesting things to say, even though he's not that technical and ascribes far too much credence to the technical prowess and savvy of high-level government officials with "cyber" or some variant in their name.

      http://www.salon.com/news/opinion/glenn_greenwald/2010/08/02/privacy/index.html

      --
      "If still these truths be held to be
      Self evident."
      -Edna St. Vincent Millay
    2. Re:Why not just call their company "NSAFront"? by FriendlyLurker · · Score: 4, Informative

      Adrian Lamo worked as an Analyst for Project Vigilant - which specializes in collecting any and all data from major ISP's where the EULA permits third parties (i.e. pretty much all of them).

      Lamo also just happened to turn in chat logs for military whistleblower Bradley Manning. There is already decent evidence to suggest that Lamo never talked to Manning, but was given the logs by this secretive private catch-all spy network "Project Vigilante" and told to turn them in.

    3. Re:Why not just call their company "NSAFront"? by TheJokeExplainer · · Score: 2, Interesting

      Say what you will about Adrian, but his razor-sharp wit is absolutely hilarious. Check out his Q&A at Formspring.me where you can ask him anything (do it now! :D). Unlike other whiny angry h4x0rs, the dude is an absolute geek comedian.

      His candor is pretty refreshing and his comedy rebel streak is a bit reminiscent of Banksy.

      Oh, and he's also to public face of 2600: The Hacker Quarterly on Facebook.

      --
      visit my pal the xkcd explainer!
  2. bogus by bsDaemon · · Score: 5, Informative

    So, I got curious and clicked the link to the article. Then I clicked the link to the project's website, which beyond a splash screen with an INGSOC-esque logo with a half-assed latin slogan, you find a cheap-ass Drupal site which requires an OpenID account to log into. The list of logged-in users includes such gems as a guy named "poopcracker."

    If this is cointelpro, its either extremely terrible, or extremely brilliant for looking so shoddy. Chances are, its just misguided vigilantism by people who read "gray hat python" and now think they can 'hack the Gibson'. I'm not sure which would disturb me more.

    1. Re:bogus by Anonymous Coward · · Score: 5, Informative

      When you say "half-assed latin slogan," I hope you mean "pseudo-Latin slogan" - because that motto is the result of someone who doesn't know Latin trying to come up with something and getting it wrong. I think they were going for "We Watch Together," in which case they certainly shouldn't have used the first person *singular* of vigilo (not to mention misspelling "vigilo"). I think they meant Evigilamus Jugiter, to give the phrase the proper tone of menace (if they meant something less menacing, they should have gone with a variation on vigilamus pro te, which is the motto of the Canadian land forces and a translation of the chorus of O Canada).

    2. Re:bogus by FriendlyLurker · · Score: 4, Informative

      Some of the names behind Project Vigilante:

      ...the list of its officials, which includes Mark Rasch, who headed the DOJ's Internet Crime Unit for 9 years; Kevin Manson, a retired Homeland Security official; George Johnson, who "develop[ed] secure tools for the exchange of sensitive information between federal agencies" for the Pentagon; Ira Winkler, a former NSA official; and Suzanne Gorman, former security chief of the New York Stock Exchange. These are people with extensive, sophisticated expertise in compiling highly invasive data about individuals' Internet activities, and more so -- given their background -- how to package it in a way that can be used by federal agencies.

      From here and here.

      So... perhaps it is a honeypot as well? In any case, the real operation is run backend to your ISP.

    3. Re:bogus by maxwell+demon · · Score: 5, Funny

      Romanes eunt domus!

      --
      The Tao of math: The numbers you can count are not the real numbers.
    4. Re:bogus by RobM9999 · · Score: 2, Interesting

      If you like that then check out the linked site for BPH Global. besides being a) the same color. b) the same cheap-ass Drupal. c) even crappier looking (if possible)., click on the Background link and read that. I have read better written spam emails which want to give me millions/make my p3n1s bigger/ sell me v1agra. For thos not wanting to waste your time traveling there, I give you the treasure that is their background:

      -----
      If you audience are in the field of Information Technology, the term "information theory" is almost always attributed to the word of Claude Shannon, but BBHC Global LLC looks into pre-computational information -- as well as the forms which use the measure of content as a relation to entropy. This section will discuss for our audience the various types of "Information Theory" as we best understand them, along with samples to illustrate. From this we look into applications of the various theories.
      ----

  3. EU already did it by ZeroExistenZ · · Score: 4, Informative

    EU already has a simular technology in place.

    You can get the analysis at wikileaks: EU social network spy system brief, INDECT Work Package 4

    "The aim of work package 4 (WP4) is the development of key technologies that facilitate the building of an intelligence gathering system by combining and extending the current state-of-the-art methods in Natural Language Processing (NLP). One of the goals of WP4 is to propose NLP and machine learning methods that learn relationships between people and organizations through websites and social networks. Key requirements for the development of such methods are: (1) the identification of entities, their relationships and the events in which they participate, and (2) the labelling of the entities, relationships and events in a corpus that will be used as a means both for developing the methods."

    --
    I think we can keep recursing like this until someone returns 1
  4. But vigilantes have such a great reputation by Drakkenmensch · · Score: 2, Funny

    Smart money says this is a sting operation to bag hackers who are a bit too keen to use their tech savvy to spy on their neighbours!

  5. Follow the cash and access by AHuxley · · Score: 5, Informative

    Two links with some more reading on Project Vigilant.
    "that it monitors the traffic of 12 regional Internet service providers, hands much of that information to federal agencies, and encouraged one of its "volunteers," researcher Adrian Lamo, to inform the federal government about the alleged source of a controversial video of civilian deaths in Iraq leaked to whistle-blower site Wikileaks in April."..
    but said that because the companies included a provision allowing them to share users' Internet activities with third parties in their end user license agreements (EULAs), Vigilant was able to legally gather data from those Internet carriers and use it to craft reports for federal agencies.
    from:
    Stealthy Government Contractor Monitors U.S. Internet Providers, Worked With Wikileaks Informant
    http://blogs.forbes.com/firewall/2010/08/01/stealthy-government-contractor-monitors-u-s-internet-providers-says-it-employed-wikileaks-informant
    "Elite US cyber team courts hackers to fight terror"
    http://www.google.com/hostednews/afp/article/ALeqM5hKoXQdL-L1HFYObz0_UUHMactSWg

    Top tip, stop chatting to strangers, try a sneaker net gap and again stop chatting :)

    --
    Domestic spying is now "Benign Information Gathering"
    1. Re:Follow the cash and access by brxndxn · · Score: 2, Funny

      Don't cyber snitch.

      --
      --- We need more Ron Paul!
  6. Re:Recruit Anonymous by elrous0 · · Score: 2, Interesting

    You would probably get better results telling the Church of Scientology that this company is out to get Scientology. They would be swarmed with private detectives, character assassins, corrupt cops, and seedy lawsuits within days.

    --
    SJW: Someone who has run out of real oppression, and has to fake it.
  7. Chet Uber? by Sporkinum · · Score: 4, Funny

    He must have the world's most awesome popped collar!

    --
    "He's lost in a 'floyd hole"
    1. Re:Chet Uber? by medv4380 · · Score: 2, Insightful

      The guy is one of the Cyber War nuts 2002 he was running with the business name of Security Posture trying to cater to the conspiracy theory nuts. Everyone already knows that Game Boys emit pilot killing rays.

  8. Pot, meet kettle by esocid · · Score: 3, Insightful

    According to Uber, Project Vigilant also played a role in Iran's Green Uprising last year, operating five Internet proxy servers that helped dissidents circumvent government spying and move information out of Iran and into the hands of dissident groups.

    So when does the US get some of this help to circumvent government^H^H^H^H^H^H^H^H^H^H protective spying and allow the free transmission of information. Oh, wait. I see now.

    On Sunday, Uber said he was the first person to call the federal government about the sensitive cache of documents allegedly leaked by U.S. Army Intelligence Analyst Bradley Manning, and which was ultimately published on Wikileaks. Manning leaked the documents to Adrian Lamo, who does "adversary characterization" for the group, Uber said.

    --
    Absolute power corrupts absolutely. indymedia
  9. Really? by denzacar · · Score: 2, Funny

    This is one case where it is definitely a good idea to take the blue pill!

    I don't see how will taking Viagra do any good here.

    --
    Mit der Dummheit kämpfen Götter selbst vergebens
    1. Re:Really? by digitig · · Score: 2, Funny

      Do you want to be the one doing the shafting, or the one getting shafted?

      --
      Quidnam Latine loqui modo coepi?
    2. Re:Really? by maxwell+demon · · Score: 2, Insightful

      Do you want to be the one doing the shafting, or the one getting shafted?

      No.

      --
      The Tao of math: The numbers you can count are not the real numbers.
  10. Re:Wannabe's by AHuxley · · Score: 2, Informative

    Kept MS code going for many years :)

    --
    Domestic spying is now "Benign Information Gathering"
  11. Re:Manning/wikileaks connection by thrillseeker · · Score: 2, Funny

    You know, as crazy as this may sound to some of you, working in the US intelligence field or the peripheral fields is not akin to being evil.

    You must be old here.

  12. Re:Manning/wikileaks connection by AHuxley · · Score: 4, Insightful

    "akin to being evil" really depends on the decade? the Church report, Iran contra, Operation Ajax, Room 641A, Sibel Edmond, COINTELPRO ...
    Do you really want unaccountable, hidden, profit driven - mercs, private corporations, individuals and cyber vigilante types doing what the FBI should?

    --
    Domestic spying is now "Benign Information Gathering"
  13. Re:Manning/wikileaks connection by betterunixthanunix · · Score: 4, Insightful

    Was it specifically bad to turn in Manning? No, things are no black and white. From where I sit, though, Wikileaks is doing a good thing by exposing government lies -- we cannot trust the government to be honest about classified documents, which is why we need Wikileaks. If these guys are fighting against Wikileaks, that means they are pitted against those of us who want a more open government.

    What worries me is that these guys are not required to abide by the constitution; they voluntarily collect information, and then turn it over to the government, which allows the government to obtain evidence that it would not otherwise be able to collect. These "fourth party" arrangements have been discussed in the past, and just because they are not hot news items anymore does not mean they are less worrysome.

    --
    Palm trees and 8
  14. This is news? by Anonymous Coward · · Score: 2, Informative

    "Seedy company hires hackers to commit felonies" -- Yawn.

    "A person or entity providing an electronic communication service to the public shall not intentionally divulge the contents of any communication while in transmission on that service to any person or entity other than an addressee or intended recipient of such communication or an agent of such addressee or intended recipient."

  15. Terrorists? by alfredos · · Score: 2, Insightful

    Given the abuse and buzz power that that word has seen in the last couple of years, I tend to treat anything that comes with 'terroris.+' in the subject with a grain of salt. Well, actually more than a grain: I start giving credit starting at the absolute bottom of the scale when that regex matches, and it usually doesn't get very far. There is just too many people out there trying to make a living, if not easy money, out of scaring people and leveraging the politicians with that fear. Take a look at "The power of nightmares", a BBC documentary readily available on YouTube, about the latter.

  16. Re:Manning/wikileaks connection by GooberToo · · Score: 2, Insightful

    You mean the CIA and NSA. The FBI is for domestic intelligence gathering and enforcement only. This is, in fact, why the FBI and CIA/NSA were purposely intended to never have open channels with each other. What everyone called broken following 9/11 was actually by design and for very, very, very good reasons. The reason is simply, its ripe for domestic abuse and violation of the Constitution.

    The FBI was basically considered to be federal police. The CIA/NSA is considered quasi-military, which is exactly why they are frequently ex-military and work extremely closely with the military. They are a major source of intelligence for the military. As such, its actually illegal for them to be used domestically. That all changed with the creation of the homeland security, who's sole job is to view everyone as a criminal, treat them accordingly, while violating the Constitution as much as possible, without getting the public in an uproar.

    Basically the creation of homeland security was a spit in the eye of all our forefathers, violation of pre-existing laws which were in place specifically to prevent this cluster fuck.

  17. Re:BBHC Global L.L.C. by JWSmythe · · Score: 3, Interesting

    From the whois info for projectvigilant.us:

    Steven Ruhe
    BBHC Global LLC
    4828 North Kings Highway #126
    Fort Pierce, Florida 34951
    Phone: +1.7723326988
    Fax: +1.8667288650
    Email: steven.ruhe@bbhc-global.com
    Registered: Mon Sep 21 23:36:10 GMT 2009

        From the whois info on bbhc-global.com

    Ruhe, Steven chet.uber@mac.com
    BBHC Global LLC
    5817 Sunberry Circle
    Fort Pierce, Florida 34951
    United States
    +1.7729401858 Fax -- +1.8667288650

    The address "4828 North Kings Highway" is "Indrio Crossing Pack N Ship", a mail drop.

    The address "5817 Sunberry Circle" is a 2,800 sq/ft 5br/3ba residence, purchased in 2004 for $205,000.

    There are two businesses registered at this address:

    Bbhc Global L.L.C. Registered by Steven E Ruhe in 2009
    M J Jones, Inc. Registered by Jimita Johnson-Jones in 2004, with the fictitious name of "Today's Window Fashions"

    There is a drivers license record for Chet Lee Uber (47yo male, other ethnicity) at the Sunberry Circle address. He is a registered voter, affiliated to the Democratic party.

    There is a Barbara Uber (66yo white female) with a listed phone number at the same address.

    hahahahahaha! Either this guy is living up the cougar lifestyle, or he's living with his mom. :)

    I couldn't find a drivers license record for Mr. Steven E Ruhe. There is a Steven R Ruhe (58yo white male) in Merrit Island, FL, but probably isn't him.

    Jimita Johnson-Jones (32yo black female) has a drivers license record in Orlando, FL.

    Let the jokes about living in his mothers basement commence! ... and all information gathered for this post was available through public resources. No electronic trespass was committed in the gathering of this data.

    --
    Serious? Seriousness is well above my pay grade.
  18. Re:BBHC Global L.L.C. by JWSmythe · · Score: 2, Interesting

    Follow the trail.

        projectvigilant.us is registered to Steven Ruhe steven.ruhe@bbhc-global.com of BBHC Global LLC in Fort Pierce, Florida

        bbhc-global.com is registered to Ruhe, Steven chet.uber@mac.com in Fort Pierce, Florida. Specifically 5817 Sunberry Circle Fort Pierce, Florida 34951

        The article specifically cites Chet Uber in Fort Pierce, FL.

    That's because most information security professionals have never heard of the group, called Project Vigilant. The group's director, Chet Uber, ...

        The Florida DMV database shows no Steven Rhue in the area. It does show a Chet Lee Uber at the address the domain is registered to.

        It doesn't take a lot of brain power to put that together. Everything matches the information provided. The "Steven Ruhe" is an alias. Well, a decoy if you will. If people are looking around for a Steven Ruhe, they are less likely to identify him as Chet Uber, even though there is significant crossover between the two identities.

        It's possible you could find more people named "Steven Ruhe" or "Chet Uber" around the country, which may be what you found. I know if I search for either my real name or alias, I find lots of people all around the world with my name, some matching my general physical description.

        I'd give the DMV database priority over anything from sources like Linkedin or Plaxo. Those places don't require any proof of who you are, where the DMV is a bit pissy about proving who you are. I just renewed my Florida drivers license, and needed my old drivers license, birth certificate, social security card, and two other proofs of your home address. I guess more importantly, he has two Chet Uber's listed as connections on Plaxo, each in different areas. Either he has two friends with the same name, or there's clearly no real validation of a persons identity.

    --
    Serious? Seriousness is well above my pay grade.
  19. Wait, what??? by schwaang · · Score: 2, Insightful

    According to Uber, one of Project Vigilant's manifold methods for gathering intelligence includes collecting information from a dozen regional U.S. Internet service providers (ISPs). Uber declined to name those ISPs, but said that because the companies included a provision allowing them to share users' Internet activities with third parties in their end user license agreements (EULAs), Vigilant was able to legally gather data from those Internet carriers and use it to craft reports for federal agencies.

    Wait, so a dozen large ISPs are handing private user data to Project Vigilant which in turn hands it to parts of the US gov't, and this is "legal" because the ISPs have EULAs which allow sharing with unspecified third parties???

    Way to bury the lede, slashdot. Some mainstream journo needs to find out which ISPs are participating.