US Wants Upper Hand In Battling High-Tech Bad Guys
coondoggie writes "The US Department of Justice this week said it was looking to boost the research and development of technology that could significantly bolster new forensic tools for digital evidence gathering. The DoJ's research and development arm, the National Institute of Justice (NIJ) said it was particularly interested in tools targeting forensics for mobile cellular devices; cloud computing environments; VoIP communication and vehicle computer systems."
I want a pony.
Yeah, let's just keep giving the government more and more power.
There's a fundamental reason why tax cuts are good: starve the beast.
As more and more surveillence becomes adapted online less and less recources are put IRL. The smart criminals can even use this survaillence to their advantage. Some stuff you can do:
Let a friend take your phone somewhere while you bust in or do some other crime.
Plaster all kinds of activities on social sites that would make it impossible to do something illegal, while you are doing those crimes.
Send messages where you arrange a fake meeting.
Most important of all, never mention anything illegal while online, ever, anywhere. No matter what encryption you have its more or less useless if someone has access to your cell/comp/accounts. The sad in all this is that its crappy criminals that gets busted while the smart ones have the time of their life. Im also worried about it being misused for personal gain. If history is anything to go by, countless of innocent lives have already been ruined because someone with access to these informations used them for personal gain.
HTTP/1.1 400
That my 35 pass Gutmann wipe I perform every month is now justified? I'm paranoid *and* they are after me?
If the "Justice" departments really wanted to battle "bad guys" in high tech crime, they would be targeting the highest crime rate domains with the biggest losses already. That is phishing and spam/virus networks that already take over $BILLIONS in IT personal property, using it to rob its owners and amass it into bot networks to attack others. Those crimes are committed largely by a relatively small group of crime gangs, largely concentrated in Asia (including Russia) which are also connected to large non-virtual crime in smuggling dangerous drugs, stealing property, counterfeiting brands, slavery, weapons trading (including WMD components), kidnapping, blackmail. The phishing/spam/botnet networks are probably the least bad of their crimes, and the greatest exposure to the public where they could be caught, with most of their traffic passing through the US even if the endpoints are all foreign. They're the obvious place for US law enforcement. Existing law allows US law enforcement to spy on them and catch them, while only small technology innovations might be necessary to do so - even without the PATRIOT Acts and other violations of the US Constitution.
What is required is that US law enforcement actually want to catch "bad guys". Then they'd have the means and opportunity to do everything they say they want.
But evidently they lack the motive. Their motive is to gain ever more power to spy on everyone, regardless of evidence or crimes. They've already been spying on telephone and email comms of every American they can fit on a hard drive, for years. What they want now is just bigger budgets for hard drives, for more secret police, and more laws that violate the Constitution and our rights so they can do so with impunity.
These secret police are the "bad guys".
--
make install -not war
Then it needs to stop treating IT, CompSci, and It security like the plumber and building manager and PAY FOR IT.
Sorry but it's fact. You want to have a crack IT team that keeps all the bad guys out and the company's data secure? Then you have to pay 6 figures each for Highly skilled and experienced IT staff instead of low 5 figures for the Freshly tested MCSE churnouts from University OF Pheonix. You have to have IT managers that have at LEAST 10 years experience in the IT field and IT security field, not some moron with a BSA degree that knows the CEO's daughter.
The US will forever lag behind the world in IT and IT security if you don't start paying for highly skilled and experienced professionals, and TREAT THEM AS SUCH!
Do not look at laser with remaining good eye.
After Ruby Ridge, Waco, and having a sitting president order the execution of an American citizen without even a trial? Your layout is pretty accurate looking to me. Being labeled a terrorist: it's not just for brown people anymore!
As for TFA? They can get ALL they want, they've already lost, as the encryption cat is out of the bag. I have a friend that works at the state crime lab in charge of catching kiddie pron. He keeps trying to recruit me but....eeeew! Not enough brain bleach in the world for THAT job! Anyway he says that other than the social retards on Limewire or some other P2P trading the same crap that has been floating around since the 80s it is damned near impossible to catch them strictly by digital files anymore. Why? Because the bad guys have all discovered 2048 bit crypto, that's why.
So I'd say with mobile devices getting more powerful every day it isn't "the bad guys" that have to worry about this, it is the average Joe. They are the ones that'll be running around with unlocked devices or still using the default password, whereas the bad guys will have everything locked up. Of course that brings me to my second worry, that the US Gov (or the Chinese, can't leave them out either) will simply have back doors installed in the chips. Then you think you are actually securing your data but in actuality they could input one master password and voila! all your security belong to us.
Hell this discussion is probably moot anyway, as working with average folks all day I can say you want to know everything about them just ask FaceBook. Not only is everyone gladly spewing every detail of their lives to them, but using NoScript I've noticed lately FB is hooking into more and more and MORE sites, at a rate that makes Google look like a Mickey Mouse operation. Want to know everything about somebody? Just ask FB.
ACs don't waste your time replying, your posts are never seen by me.
Seriously, why must every attempt to increase security be viewed as the the end of all democracy & privacy?
Because, at least in the model of how the US is supposed to work, the response to a government calling for more power should not be "why not?" but rather "why?"
In this case, that's a very good question to ask. See they [the various three-letter organizations] already have vast powers of surveillance. They have all sorts of legal privileges allowing them to intercept foreign and criminal communications with ease, all contingent on the provision of a warrant (and thus probable cause). Hell, thanks to the last regime, they don't even need that much of the time, especially not to spy on a common citizen like you or I.
So in light of that, the response to a call for even better tools and even more leeway to spy on US citizens should be "Why?" Why do we need these tools? Why are the existing ones inadequate? Can you demonstrate that? What crimes do propose new tools will help you solve -- cite specific examples please, not just "it may us catch some bad guys".
And if the government can't come up with a damn good answer to "Why?", then our answer should be "No."
The real litigious bastards...