Slashdot Mirror


Kaspersky Calls For 'Internet Interpol'

angry tapir writes "With cybercrime now the second largest criminal activity in the world, measures such as the creation of an 'Internet Interpol' and better cooperation between international law enforcement agencies are needed if criminals are to be curtailed in the future, Kaspersky Labs founder and security expert Eugene Kaspersky has argued. He said, 'We were talking about that 10 years ago and almost nothing has happened. Sooner or later we will have one. I am also talking about Internet passports and having an online ID. Some countries are introducing this idea, so maybe in 15 years we will all have it.'"

33 of 136 comments (clear)

  1. joy. by Anonymous Coward · · Score: 2, Insightful

    we all lose privacy so that the fucktards can pretend they're a little bit 'safer' from their own idiocy.

    fuck 'internet passports' and 'online ids'. it's time for citizens to quit being chickenshits or eventually everything you do will be tracked back to this. this is different than the past because electronic surveillance completely erodes the natural privacy one has in the physical world. I don't want my every click, every download, every page hit recorded for some bored cop to puruse 20 years after the fact so it can be judged on current standards...all to meet a quota.

    1. Re:joy. by flaming+error · · Score: 4, Informative

      >Then make it illegal
      Yeah. We could even add a constitutional amendment! Something like:

      The right of the people to be secure in their persons, houses, papers, and effects, against unreasonable searches and seizures, shall not be violated, and no Warrants shall issue, but upon probable cause, supported by Oath or affirmation, and particularly describing the place to be searched, and the persons or things to be seized.

      Then all we'll need is to figure out who will enforce this fine law.

    2. Re:joy. by epyT-R · · Score: 2

      Are you that naive? governments make exceptions to due process all the time.. even laws that are well drafted, honed, and focused to begin with get their scopes widened over time by opportunistic politicians selling out to law enforcement and economic lobbies.

    3. Re:joy. by Mikkeles · · Score: 2

      Laws can be changed or ignored. Also, everybody can be found guilty of something.

      --
      Great minds think alike; fools seldom differ.
    4. Re:joy. by cayenne8 · · Score: 3, Insightful

      who will enforce this fine law?

      We will. That's how it works.

      Trouble is...we HAD a nice 4th amendment in the US constitution, however, the Supreme Court just kind fscked us on this one a day or two ago.

      I'm worried when they can blow off the constitution so readily...if they can do that, well, they'll certainly NOT have a 2nd thought about blowing off an internet mandate about using info collected from it ....if the tool is there, the authorities WILL abuse it at some time in the future.

      Their track record shows this....over and over again.

      Remember how RICO was only supposed to be used to go after the mafia? Hmm...well, its being used in new and creative ways all the time.

      If they can now kick down your door without a warrant just because they hear some (non-threatening sounds) and smell weed outside a bunch of apt. doors...they'll have no compunction about tracking your ass down by forced internet ID marked transactions, why wait for using it for criminal investigation, just continuously fishing for information on everyone...someone will slip and we'll get them, even if we have to change the laws and go after them retroactively.

      --
      Light travels faster than sound. This is why some people appear bright until you hear them speak.........
    5. Re:joy. by blair1q · · Score: 2

      Then you'd better vote harder.

    6. Re:joy. by cdrguru · · Score: 3, Insightful

      It isn't the cops you should be worried about. Everything thing you do online has value to someone. It will provide them valuable market information. The fact that you don't click on the CNN link but do click on the Stormfront link is saleable to someone. The fact that you sort things in a list of items on Amazon by "best selling" rather than "lowest price" is worth something.

      Now maybe individually these actions aren't worth much, but if a company can assemble many people's habits and actions together and offer them as a package so that trend analysis and forecasting can be done ... well, how much do you think Google was able to sell the brands of the routers actually be used in Chicago for? Better yet, how much do you think the brand names of routers in Highland Park (an affluent suburb) vs. brand names of routers in Wheeling (a mostly low-income suburb with trailer parks) is worth to DLink or Belkin?

      This information is going to be collected and sold and there is nothing anyone can do about it.

    7. Re:joy. by e9th · · Score: 3, Informative

      In the same vein, the Indiana Supreme Court ruled on Friday that its citizens have no right to resist even unlawful police entry into their homes.

      "We believe ... a right to resist an unlawful police entry into a home is against public policy and is incompatible with modern Fourth Amendment jurisprudence," [Justice] David said, [writing for the 3-2 majority].

    8. Re:joy. by Teancum · · Score: 2

      In terms of "kicking off the 2nd American Revolutionary War", I think folks at Waco, Texas and Ruby Ridge certainly did plenty to try and get that going earlier. Neither one worked out all that well for those who tried to fight the system through the force of arms.

      I do hope that reason and sanity can prevail, and make sure that you use the four boxes of freedom in the order they were indended:

      The four boxes of freedom: Soap, Ballot, Jury, and Ammo. Please use them in that order. I keep hoping that the Ballot box can still be effective for awhile longer in America.

  2. Re:would that means a bright future for his compan by zippthorne · · Score: 2

    what are you talking about? The "internet ID" and "internet passport" become items of intense personal value that must be protected. The stakes will be even higher to protect your papers under a "papers, please." internet.

    --
    Can you be Even More Awesome?!
  3. How about not? by plover · · Score: 2

    Instead of continually beating our heads on securing systems and people, let's remove the profit motive. If we fundamentally change how financial transactions are executed, security will becomes less of a problem.

    Get the requirements for security out of Windows, and put it into trusted bank-issued smart cards. Separate authentication from authorization from identification. Build system that humans can manually verify without a Windows box being the portal through which this verification happens.

    --
    John
    1. Re:How about not? by mlts · · Score: 2

      Nail, head hit:

      This is how the IBM ZTIC works, although it essentially shows up a confirmation "you seriously want to move $25,000 of your cash from checking to Elbonia?"

      Realistically, the best solution may be an app for the phone. You get a one time key from the app on the phone, use that to log in on the PC, then use the phone to confirm transactions. For a blackhat to get access to the account fully, they would need to compromise both the PC (so they can log in), as well as the cellphone (to approve and generate cards) at the same time.

      Of course, there will be ways around this, but it is a heck of a lot harder to get a rogue app onto an Android or iOS device, make the app get in sync with the user's compromised PC in order to do an account theft. Not impossible, but it would make the average user's bank records attackable via malware, other than the fact that malware sitting passively with screenshots may be able to send off what lies in the account to a remote site.

  4. Internet passports??? by gstoddart · · Score: 5, Insightful

    Wow, I'm afraid I have to conclude this guys is possibly a little too full of himself.

    If we ever get anywhere near a "single secure cyberspace", we're pretty much all screwed.

    Governments will use this to stifle your privacy, your rights, and every other thing they can think of. They'll make sure they monitor everything you do, and ensure you don't do anything they don't approve of.

    Anybody who thinks the solution to cybercrime is to more or less lock down the internet like this ... well, I think they deserve a series of well placed kicks to the groin. I can only see this as more or less fascism -- though I'm sure I'll be accused of hyperbole.

    --
    Lost at C:>. Found at C.
  5. Re:this could all be moot by AdamThor · · Score: 4, Insightful

    I really want a button ... that brings up a full trace to the person who initiated the message...

    You and Gaddafi both.

    --
    -- "Oh. This guy again."
  6. What nonsense by Mashiki · · Score: 2

    That's what interpol's job is supposed to do in the first place in all forms. Coordinate police dept's and services around the world. The real problem isn't so much that police don't talk, it's that the governments don't give them the resources to deal with internet related crime. In Canada, financial crimes under $200k are done on a case by case basis, by local dept's or by the provincial police, if there's enough officers available to take them off traditional crimes. Financial crimes over $250k are looked at only by the RCMP, and the RCMP will not take any case under $200k due to the lack of manpower and resources. And financial crimes under $40k are pretty much written off unless there are officers available. That's not even touching on the training.

    It's a sad state, but the problem is three fold. First people don't think you need more police. The average citizen to cop ratio is between 100:1 and 750:1, though in some parts of the US it's 4000:1. Second, while a lot of younger cops(that's under 40 as the average age here is around 45), see this as an issue but not a pressing one(too much traditional crime, and staff sgt's who have too few resources, or too few inspectors for the job and are on other cases). Third, politics and bureaucratic BS. There are either weak laws, no laws, a mishmash of laws, or politicians and chiefs stuck in 30-40 year old thinking.

    --
    Om, nomnomnom...
    1. Re:What nonsense by Wyatt+Earp · · Score: 2

      1:452 to 1:427 for the United States on average in 2009

      For big cities its 1:426 for LAPD. 1:228 for NYPD, 1:216 for Chicago, 1:219 for Philadelphia.

      Where I live, its 1:724.

    2. Re:What nonsense by cdrguru · · Score: 2

      Anything that is "local" is going to be up to the local police with no knowledge of how to deal with an "Internet crime". That means any crime that involves use of the Internet at all - like a bank robber sending an email saying "give me all your money or I will kill people."

      Anything that crosses international borders requires a great deal of cooperation and a great deal of interest. Frankly, most 2nd-world governments think they have much better things to do than prevent 1st-worlders from getting defrauded and ripped off. If someone in their country can sell fake meds to people in the USA well, more power to them. It is bringing money into their country and it isn't hurting anyone there. Maybe it is creating jobs in their little part of the world as well so it is a benefit. So (comparatively) rich Americans are losing their money? Boo hoo.

      There is no way there is going to be any cooperation on an international level because of the perception that it isn't a crime and the requirement that people be trained for crimes that are a little more complicated than sticking a gun in someone's face and demanding money.

  7. No, thank you. by pla · · Score: 2

    We were talking about that 10 years ago and almost nothing has happened. Sooner or later we will have one.

    Nothing has happened because we the fucking people don't want it to happen. We the Geeks responsible for implementing these BS control-freak fantasies for Big Brother don't want it to happen. We the citizens of a planet rapidly coming to recognize the meaninglessness of national borders don't want our rights to depend on those available in the most restrictive theocratic dictatorship on the planet.

    Nothing will happen because, for all its flaws, we designed the internet to survive government attempts to control it.

    1. Re:No, thank you. by NeutronCowboy · · Score: 5, Insightful

      Nothing will happen because, for all its flaws, we designed the internet to survive government attempts to control it.

      But we didn't design it to survive corporate attempts to control it. And that's where it will fall apart.

      --
      Those who can, do. Those who can't, sue.
  8. Re:this could all be moot by epyT-R · · Score: 2

    you want the rest of us to give up privacy AND take on the mantle of defending an online id that will automatically be considered legitimate by governmental bureaucracies just so you don't have a large spam folder? Wow..

    Right now, any safety we have online is the fact that online ids are not taken seriously..

  9. rant-like responses to TFS by drb226 · · Score: 2

    With cybercrime now the second largest criminal activity in the world

    Seriously? Way to use vague, scary words to say absolutely nothing.

    better cooperation between international law enforcement agencies are needed if criminals are to be curtailed

    Why do I get the feeling that large American and European corporations will be the ones to benefit most from this "international law enforcement"?

    1. Re:rant-like responses to TFS by gstoddart · · Score: 2

      Why do I get the feeling that large American and European corporations will be the ones to benefit most from this "international law enforcement"?

      And the citizens of pretty much everywhere will be the ones who lose the most.

      The democracies will become even more like surveillance societies. The places with questionable human rights records will be sold this stuff so they can further control their people (by companies who only care about the bottom line). And, the outright dictators will think it's just grand as they can lock down dissent.

      We all lose in a scenario like this ... having everything you do on the internet tied to a single, government issued network ID won't work. And, in fact, it will probably mean that innocent people become even more targeted by cybercrime -- think how valuable of a target those ids will become, and think of how difficult it will be to fix it when they're compromised.

      Not only won't this alleviate crime, it will erode our rights and freedoms. Nothing good will come of this -- this is trying to legislate a solution to a problem which legislation can't possibly hope to find a solution.

      --
      Lost at C:>. Found at C.
  10. Kaspersky's History by Stormy+Dragon · · Score: 3, Insightful

    Anytime Yevgeny Kaspersky profers his advice on how internet security should work, it should be remembered that he is a former KGB officer.

    This is really allow about making it easier for States to control what people do online.

    1. Re:Kaspersky's History by Wyatt+Earp · · Score: 2

      All I can find on this is - "Kaspersky graduated from the Institute of Cryptography, Telecommunications and Computer Science, an institute co-sponsored by the Russian Ministry of Defence and the KGB."

      And - http://www.theregister.co.uk/2008/02/15/kaspersky_profile_mixup/
      http://www.guardian.co.uk/theguardian/2008/feb/13/4
      "The Guardian has apologised to Eugene Kaspersky after mistakingly naming the anti-virus guru as a former KGB officer. Eugene Kaspersky, co-founder and chief exec of the internet security company Kaspersky Lab, was described as a "KGB man" and a lieutenant in the KGB in an otherwise accurate article (The ex-KGB man stalking the cybercriminals since renamed The Russian defence against global cybercrime)."

  11. interpolnet by islon · · Score: 2

    their logo will be a cat

  12. Re:would that means a bright future for his compan by mlts · · Score: 2

    Bingo. Someone manages to get ahold of someone's "internet credentials" can go to town, and the owner of the creds would be nailed, both civilly and criminally for this.

    Remember, we have people who are unable to tell the difference between an IP address and a person. Think about the havoc someone can reach with forged credentials.

    Of course, this would make the AV company fear campaigns be able to go up a notch by telling people the consequences of someone stealing their "internet passport", and how consumers need their CPU-hogging, OS-crashing, I/O intercepting, expensive [1] crap, when in reality, something like AdBlock is what actually will get the job done.

    [1]: $30 to $50 per computer per year. There is just no real point to paying that, unless you have a business, and if you have a business, you should use ForeFront or SEP which doesn't care about subscriptions.

  13. Re:Privacy concerns by vlm · · Score: 2

    I guess an optimistic paranoid is hoping that the next security technology is better than the one before, but never really trusting anything or anyone.

    There are numerous unknown enemies out there trying to get me, and my known enemies (such as the merger of govt and big business being given 1984 style tools of oppression) would of course do awful things, but its always possible to optimistically define something worse that isn't (yet) happening.

    --
    "Science flies us to the moon. Religion flies us into buildings." - Victor Stenger
  14. In Soviet Russia... by Kamiza+Ikioi · · Score: 2

    ...we bring the Information into the Government Age!

    --
    I8-D
  15. I dunno by Charliemopps · · Score: 2

    Last time I checked, the majority of the criminal activity on the internet was perpetrated by Governments... what good would creating an international agency to patrol criminal activity when it would have to report to the criminals themselves?

  16. Re:Resources by Anonymous Coward · · Score: 2, Interesting

    As someone who's livelihood comes from the prosecution of child porn, you have no idea.

    First off, child porn is something that can be prosecuted. The botnet creator in Romania cannot be prosecuted and is actively being protected by their government. No point in trying to go after them.

    Then there are the credit card theives. They get your number and use it and you have to ... cancel the card. Well, because you're not out anything, the merchant has insurance and the credit card companies don't want to prosecute there is no point. So nobody is going after them either.

    Then there are the folks selling fake pills and claiming to be in Canada when they are really in Indonesia. Well, if the Indonesian government isn't interested and is likely going to shield them, there isn't any way to go after them.

    It goes on an on. Either there is nobody to prosecute or it is happening across borders with a disinterested government at the other end. The FBI has plenty of weight to throw around, but before they bring all of their focus on some international perp everyone needs to be on board with it being the "right" target - and that is very difficult to achieve. Unless of course the guy is out there on IRC bragging.

    Well, I guess that leaves child porn and a few other things, like massive copyright violation. That is the day for an FBI forensic examiner. Mostly it is child porn because there is so much of it out there and nobody wants to stand up for someone involved in it. Especially when they start taking pictures and distributing them, which is how many people are caught. Forgetting to turn off the geotagging on your iPhone can be really, really embarassing. Especially when you answer the doorbell and find an FBI agent with a GPS receiver saying "Yes, it was right here" to his partner.

  17. The one thing worse than Cyber Crime... by Vitriol+Angst · · Score: 2

    ... that I can certainly guarantee;

    Is a system so secure and able to identify you, that it CANNOT allow for crimes to be committed.

    Reasonable security is good. But we want a system that NEEDS the will of the governed. If people are treated fairly -- and there is a system in place where Identity can MANUALLY be ascertained, than real security is through the GOOD WILL of the people.

    Also, you need people who react, rather than waiting for some authority to come by -- but that's another discussion.

    --
    >>"ad space available -- low rates!!!"
  18. What we need is for Interpol to have the tools by RobertLTux · · Score: 2

    We already have a structure in place for law enforcement across borders we just need for them to have the tools they need to work in "cyberspace"

    I just wonder why Interpol does not have
    1 a facebook group
    2 a set of twitter accounts
    3 a region in SecondLife

    im sure that the companies involved would be more than happy to certify that these accounts are actually held by the REAL agents.

    --
    Any person using FTFY or editing my postings agrees to a US$50.00 charge
  19. Product Placement by Kittenman · · Score: 2

    Lady Gaga commented that cybercrime also is one of her concerns. There you go, that will pull in a few more search-engine hits.

    --
    "The greatest lesson in life is to know that even fools are right sometimes" - Winston Churchill