Slashdot Mirror


Snowden Docs: Brits Hacked Accounts of Belgian IT Admins

An anonymous reader writes "British secret service GCHQ is willing to penetrate the networks of telecoms firms to subsequently use them for spying. German magazine DER SPIEGEL reports GCHQ hacked the machines of Belcacom staff to later use their GRX routers for targeted man-in-the-middle-attacks on people's phones. Belgacom is the biggest telecom in Belgium, and is partly state-owned. DER SPIEGEL publishes three original slides from a GCHQ presentation. They specifically mention targeting 'engineers/systems administrators.'"

126 comments

  1. So we've learned... by TWX · · Score: 0

    ...that all governments spy on all other governments, regardless of the state of cordiality between those nations.

    Didn't we already know this?

    --
    Do not look into laser with remaining eye.
    1. Re:So we've learned... by Serious+Callers+Only · · Score: 5, Insightful

      1. This is not a government spying on another government.
      2. Economic espionage is illegal
      3. Breaching trust like this will lead to all sorts of blowback when partners find out, it's hardly a good idea.

      GCHQ has strayed well over the line from protecting British interests against our enemies to economic and political espionage. This op was probably ordered at the behest of some American service anyway (to whom GCHQ are in hoc to the tune of hundreds of millions of dollars), who knows why or who it benefits, but it certainly isn't the people of the UK.

    2. Re:So we've learned... by Anonymous Coward · · Score: 0

      Another reason to kick the roast beefs out of the EU.
      Go join your ancient colony.

    3. Re:So we've learned... by TWX · · Score: 1

      As far as I've been able to tell, most espionage of a materiel type requires spying on companies, as it's those companies that are the true producers of materiel, not governments themselves.

      --
      Do not look into laser with remaining eye.
    4. Re:So we've learned... by Trepidity · · Score: 2

      in hoc to

      Off-topic pedantry: the expression's in hock to, originating from a Dutch word for a kennel or lock-up or prison, informally used to describe someone in debt. Not related to Latin hoc, meaning "this", and common in phrases like post hoc ergo propter hoc ("after this, therefore because of this"), ad hoc ("for this [occasion]"), etc.

    5. Re:So we've learned... by TheSpoom · · Score: 3, Insightful

      There's no such thing as illegal to a government.

      --
      It's better to vote for what you want and not get it than to vote for what you don't want and get it.
      - E. Debs
    6. Re:So we've learned... by Anonymous Coward · · Score: 1

      who knows why or who it benefits, but it certainly isn't the people of the UK.

      Is that your evaluation based on many years of experience with the intelligence agencies? Or is it the snark of a passing minute on the internet?

      NSA helped foil terror plot in Belgium, documents, officials say
      Police arrest 10 over Belgian 'Islamist terror plot'
      Belgian police raid homes in connection with Syrian terror groups recruits
      Two Belgian "terrorism" suspects detained in Yemen
      Fearing terror attack, Belgium arrests 14

    7. Re:So we've learned... by Njovich · · Score: 1

      And how exactly do you know that all governments do this? That the British are in the same boat as the Americans has long been suspected. I don't see the Belgians mass monitoring Verizon calls in the US, do you?

    8. Re:So we've learned... by Ralph+Wiggam · · Score: 1

      I don't see the Belgians mass monitoring Verizon calls in the US, do you?

      It's all a matter of capability, not interest.

    9. Re:So we've learned... by IamTheRealMike · · Score: 4, Interesting

      A couple of problems here. Firstly a lot of those stories refer to an event in 2008, and Der Spiegel claims GCHQ only got access to Belgacom in 2010. So their spying cannot have been relevant there.

      Secondly, the evidence in those cases was the sort of thing that can be obtained using ordinary court orders or ordinary, limited and carefully controlled wiretaps. The people targeted went to the Afghan-Pakistani border for months and according to one article, some of them were already known criminals in Belgium even before then. Getting a tight, time limited court order for surveillance of these people within Belgium is easily possible - at no point would Britain hacking Belgium have been helpful in such a prosecution and indeed, would have been dangerous - if the evidence was obtained without a warrant and defence counsel found out, the case might have collapsed.

      I strongly dislike this notion that the acts Snowden uncovered are all OK because occasionally, the authorities do manage to catch terrorists. Guess what? They also catch random serial killers, fraudsters, drunk drivers who do hit and runs, all kinds of other criminals .... just using the ordinary tools and strict supervision they are supposed to operate under. Where's the evidence that tightly specified, time limited court orders issued by open courts are insufficient? Can you point me to just one case of a terrorist who successfully blew himself up because a judge mistakenly denied a reasonable warrant request? I've not heard of such a thing, even though occasional mistakes would be expected and not by itself sufficient to conclude what the NSA/GCHQ does is necessary.

    10. Re:So we've learned... by Anonymous Coward · · Score: 0

      Yes dear sir/lady. And the opposite face of the coin is true, when they don't like something they don't wait too much to make it illegal.

    11. Re:So we've learned... by Anonymous Coward · · Score: 0

      http://www.gchq.gov.uk/AboutUs/Pages/Accountability-and-the-Law.aspx

      Apparently there is, I just think they believe because they have the jobs that they have, they are not human and therefore exempt.

    12. Re:So we've learned... by X.25 · · Score: 1

      ...that all governments spy on all other governments, regardless of the state of cordiality between those nations.

      Belgacom is a government?

    13. Re:So we've learned... by Anonymous Coward · · Score: 0

      What!? Does Magna Carta mean nothing to you? Did she die in vain?

    14. Re:So we've learned... by VortexCortex · · Score: 1

      Tell that to the 'illegals'...

    15. Re:So we've learned... by Anonymous Coward · · Score: 0

      Belgacom is a government?

      Belgacom is owned 53.51% be the Belgian state. So no, it's not a government, but it is owned by one.

      Brussels is also the home for the NATO HQ, the European Commission, and the European Parliament. Many staffers from many nations will be using mobile connections on the Belgacom network.

    16. Re:So we've learned... by Anonymous Coward · · Score: 0

      I've learned that governments treat the Internet as a lawless no-man's-land. Fine. Just don't come and try to shove any Copyright laws down my throat when I pirate the hell out of everyone.

    17. Re:So we've learned... by vux984 · · Score: 1

      As far as I've been able to tell, most espionage of a materiel type requires spying on companies, as it's those companies that are the true producers of materiel, not governments themselves.

      True. And if you were investing a weapons manufacturer in Syria nobody would blink. But Belgium is an ally.

      This is like breaking into your friends house without provocation, you know, just in case... uh... something... something... terrorism.

    18. Re:So we've learned... by bdwebb · · Score: 1

      This op was probably ordered at the behest of some American service anyway

      I love how every negative thing even other governments do is all our fault. I guess GCHQ is full of retards who can't wipe their ass without being told to by America. What a crock of shit.

      There may be connections and there may have been discussion between GCHQ and NSA as we are allies but I'm tired of hearing how we're assholes for things that other people do. If our government agencies can order your government agencies around, you might as well call yourselves Americans, too.

    19. Re:So we've learned... by Anonymous Coward · · Score: 0

      This is like breaking into your friends house without provocation, you know, just in case.

      Except your friend happens to run a world wide telecom service that is used by many of the people you feel are terrorists.

      I'm not saying what they did was right, but I can see the logic. Hack hundreds of "terrorist" phones or hack the telecom? I know what sounds easier.

    20. Re:So we've learned... by Anonymous Coward · · Score: 0

      Canada?

    21. Re:So we've learned... by Anonymous Coward · · Score: 0

      2. Economic espionage is illegal.

      Economic espionage is not illegal for GCHQ. See the Intelligence Services Act 1994 section 3(2)(b) where "the interests of the economic well-being of the United Kingdom" is listed as an explicit goal for GCHQ.

    22. Re:So we've learned... by HiThere · · Score: 1

      Did these acts take place in Britain, or on the continent? I don't think that British law can legalize something that's illegal in the place where it occurred, so the distinction is significant.

      --

      I think we've pushed this "anyone can grow up to be president" thing too far.
    23. Re:So we've learned... by ahabswhale · · Score: 1

      Way to try and blame it on the Americans. I wish other countries could actually accept responsibility for their own actions once in a while.

      --
      Are agnostics skeptical of unicorns too?
    24. Re:So we've learned... by Anonymous Coward · · Score: 0

      1. This is not a government spying on another government.
      2. Economic espionage is illegal
      3. Breaching trust like this will lead to all sorts of blowback when partners find out, it's hardly a good idea.

      GCHQ has strayed well over the line from protecting British interests against our enemies to economic and political espionage. This op was probably ordered at the behest of some American service anyway (to whom GCHQ are in hoc to the tune of hundreds of millions of dollars), who knows why or who it benefits, but it certainly isn't the people of the UK.

      Sure they benefit, this contributes to strengthening the "special relationship" with the US. <--- In case you missed it, that was sarcasm...

    25. Re:So we've learned... by Anonymous Coward · · Score: 0

      Did these acts take place in Britain, or on the continent? I don't think that British law can legalize something that's illegal in the place where it occurred, so the distinction is significant.

      Not really significant. Pretty much everything (and any type of espionage whether economic or not) that every intelligence agency does is illegal in the country of the target - however if the activity was unambiguously legal for the intelligence agency to do from the perspective of their domestic law then the chance of extradiction or any sort of minimal legal sanctions whatsoever is negligable. In fact, the ISA 1994 did cause a stink with the other European countries when it was passed precisely for this reason, but not enough of a stink to actually achieve anything.

    26. Re:So we've learned... by Anonymous Coward · · Score: 0

      It is wrong, it is turning the Internet into a military war zone, and it isn't helping.

      There is no foundation for claiming that the Belgian government wants to monitor Verizon calls in the US.

      The idea that every government in the world would monitor everything if they could is not true. It is similar to putting forth a notion that every government would invade all territory if they could. I don't see that happening because war costs in terms or prosperity.

      Similarly destroying the Internet by turning it into a military war zone is destroying our prosperity and freedom.

    27. Re:So we've learned... by AlphaWoIf_HK · · Score: 1

      I can't see the logic. This is just typical scaremongering and paranoia from the government.

      The US government molests anyone who tries to get on a plane because there's a 0.000001% chance that they could be a terrorist, or something ridiculous like that. There is no "logic" here; just power-hungry pieces of trash.

      --
      Da derp dee derp da teedly derpee derpee dum. Rated PG-13.
    28. Re:So we've learned... by fatphil · · Score: 1

      Well, UK politicians are all retards who can't wipe their arse without being told to by America, so I see no reason why those in metagovernmental roles should be any less spineless.

      --
      Also FatPhil on SoylentNews, id 863
    29. Re:So we've learned... by alberto_moro · · Score: 1

      Boy, realize the difference between propaganda and reality.

    30. Re:So we've learned... by Xest · · Score: 1

      Yes, the thing that bothers me most about all this though is the fact that the US seems to basically own GCHQ. We already had the story about how the US paid money for access to intelligence and influence on GCHQ but the fact that Snowden was able to pilfer some highly sensitive documents from the NSA about GCHQ is worrying.

      Don't get me wrong, I'm absolutely glad Snowden did what he did but our intelligence services are way too close to and way too open with the US.

      It's pretty clear what was meant now when David Milliband said our courts couldn't be allowed to demand our intelligence services show evidence about their involvement in extraordinary rendition because it would harm our relationship with US intelligence services - it seems they are part of US intelligence services. The irony now is that it was NSA incompetence that got our intelligence data leaked but you don't see our government condemning the US for that incompetence and threatening them to pull out and stop giving them intel do you? This is why our country has such a reputation as being America's lapdog and it stinks.

    31. Re:So we've learned... by Xest · · Score: 1

      Yet that's the exact arguments the UK government uses when it doesn't want to do something.

      "We can't just not hand over Julian Assange because the whole extradition looks fishy because that would be illegal"

      We have separation of our judicial branch from our government for a reason and they can't just pick and choose when they ignore the law even with their attempt at hijacking the judiciary with their politically appointed supreme court.

    32. Re:So we've learned... by Xest · · Score: 1

      "Can you point me to just one case of a terrorist who successfully blew himself up because a judge mistakenly denied a reasonable warrant request?"

      Perhaps somewhat ironically, a number of attacks that have succeeded such as the butchering of a soldier in London earlier this year were by people who were not only known to the security services, but whom the security services tried to recruit.

      You're right, the security services can't even catch people sat right under their own noses when they have all the information and have been granted all the warrants they possible could have been. Giving them permission to snoop beyond those boundaries is only going to give them more information they can't properly use making it even less likely again that they'll catch the real threats.

  2. GCHQ by Anonymous Coward · · Score: 0

    Proving Nigel Farage wrong! Belgium really is relevant!

  3. Well, NATO is based in Belgium, so... by sandbagger · · Score: 0

    Truthfully, if any hub of communication on the continent was going to exploited and counter-expoited, it would be the trunks and infrastructure running into and out of Belgium. SHAEF is there and lots of other stuff. I wonder what will be unearthed about the Russians in Belgium?

    --
    ---- The above post was generated by the Turing Institute. Maybe.
    1. Re:Well, NATO is based in Belgium, so... by Anonymous Coward · · Score: 0

      NATO, you think, would use Belgacom? No.

    2. Re:Well, NATO is based in Belgium, so... by Anonymous Coward · · Score: 0

      NATO, you think, would use Belgacom? No.

      Indeed: Belgian military communications is "Bemilcom", which is not related to Belgacom in any way.

    3. Re:Well, NATO is based in Belgium, so... by karmac0ma · · Score: 1

      Maybe, but how about the European Union and European Commission? Even if those (or NATO) use their own comms system, many employees will have personal phones.

    4. Re:Well, NATO is based in Belgium, so... by Anonymous Coward · · Score: 0

      They're going after the Belgacom network. Not bycatch, not NATO/EU/UN or anyone else they ALSO bug/decrypt/MITMA. It's targeted.

    5. Re:Well, NATO is based in Belgium, so... by Xest · · Score: 1

      Well given that Britain is the second largest military force in NATO after the US you'd think that we'd not need to hack it to find out what was going on.

  4. This was probly at the request of by Chrisq · · Score: 1, Insightful

    This was probly at the request of Nigel Farage, given his opinion on Belgium and attempts to "..be the quiet assassin of European democracy and of European nation states.".

    1. Re:This was probly at the request of by gmuslera · · Score: 1

      If something could end the EU is this kind of actions from UK, how you continue in something based on mutual trust when that trust is not deserved? This century Axis of evil has changed actors, but once again are a few countries (some of them inside Europe, some of them outside) vs the rest of the world, just wait for their next moves if you are still not doped enough.

    2. Re:This was probly at the request of by Em+Adespoton · · Score: 1

      If something could end the EU is this kind of actions from UK, how you continue in something based on mutual trust when that trust is not deserved? This century Axis of evil has changed actors, but once again are a few countries (some of them inside Europe, some of them outside) vs the rest of the world, just wait for their next moves if you are still not doped enough.

      What many people forget is that you can have more than two axes. Along with the Axis of Evil, we've now got the Axis of Fascists, the Axis of Slime, and the Axis of "not as bad as them".

      In other news, China must be laughing, as they don't have to even nudge anything to let all this take place and have everything fall into their lap. Doesn't mean they're not positioning themselves favourably though.

  5. Consequences? by Weezul · · Score: 4, Interesting

    Any chance the GCHQ people will do time in Belgian jails?

    Any chance the U.K. will get an astronomical fine?

    --
    The Christian religion has been and still is the principal enemy of moral progress in the world. -- Bertrand Russell
    1. Re:Consequences? by lordholm · · Score: 2

      Good question, wonder what happens if the Belgian police issues an EAW, does the GCHQ operators have immunity for their crimes in the UK? Does the EAW apply in this case; in my mind it should, it would put some needed control over this crap.

      --
      "Civis Europaeus sum!"
    2. Re:Consequences? by Rich0 · · Score: 2

      Good question, wonder what happens if the Belgian police issues an EAW, does the GCHQ operators have immunity for their crimes in the UK? Does the EAW apply in this case; in my mind it should, it would put some needed control over this crap.

      I would think that as long as they violated a law in Belgium that meets the EAW requirements and there is probable cause they could issue one. I'm not an expert in European law, but it seems like part of the deal in becoming a part of the EU is that you lose your sovereignty to protect your spies who are breaking laws in other member nations. One would think that in joining an alliance like the EU that you're supposed to stop treating other member states like enemies. If they needed to tap a cell phone in Belgium for a legitimate purpose one would think that the EU would have a mechanism for asking the Belgian authorities to do so.

      Maybe if the GCHQ workers were recognized as diplomats by Belgium then they'd be safe via their immunity.

    3. Re:Consequences? by GNious · · Score: 1

      What I'm curious about is whether the recent treaties and agreements about electronic warfare covers this as an act of war, and whether Belgium can request NATO and US support in said war with the UK...

    4. Re:Consequences? by pesho · · Score: 1

      That's really bizarre. If GCHQ wanted to listen to any communication in an EU country all they needed to do is come up with a somewhat plausible reason and simply ask for access. It is beyond me why would they risk exposing their employees for two pages worth of paperwork. Well, unless they were actually spying on their allies, that is.

    5. Re:Consequences? by gl4ss · · Score: 1

      ...it's pretty damn hard to come up with plausible reason to listen to politicians of all EU countries.

      --
      world was created 5 seconds before this post as it is.
    6. Re:Consequences? by Anonymous Coward · · Score: 0

      EAW is only meant for extraditing "trouble makers" on trumped up charges.

    7. Re:Consequences? by Anonymous Coward · · Score: 0

      Nope, no change.

      But I believe it's time to throw the U.K. out of the European Union. The U.K. is demanding party itself I believe.
      Their citizens and their politicians are disrespectfull entering European soil and even thier government agancies.
      They don't believe in it and this story shows you can't hardly trust them. This doesn't look like the action of a so called friendly country.

      This is more like an ancient imperium trying to keep the uperhand.

      Times are changing.

    8. Re:Consequences? by Anonymous Coward · · Score: 0

      Any chance the GCHQ people will do time in Belgian jails?

      European Arrest Warrant certainly thinks so.

    9. Re:Consequences? by lefke123 · · Score: 1

      Any chance the GCHQ people will do time in Belgian jails?

      Any chance the U.K. will get an astronomical fine?

      As a Belgian, I'm going to speculate that the GCHQ people will probably have to murder a couple of people before they'll be put into jail. They could get a house arrest, and maybe a fine, tops. Our jails are overcrowded and our legal system avoids jailing people if it's not absolutely necessary. Fun fact: It's not illegal to break out of jail in Belgium.

      --
      "I never liked the ocean, it ought to be paved over."
    10. Re: Consequences? by Anonymous Coward · · Score: 0

      "an ancient imperium trying to keep the upper hand"

      Are you refering to the EU?

  6. Such attacks should be anticipated by guanxi · · Score: 1

    The rule of security is: Make it more expensive for the attacker than it's worth to them.

    How much is it worth to spy agencies to have root access to telecom providers? Quite a bit, is my amateur guess. The telecom providers (and ISPs, etc.) should anticipate attacks proportional to the value, and implement security proportional to the anticipated attacks. (But do they really have a chance of holding off the NSA, GCHQ, etc.? Perhaps their own national intelligence agency could help, if their citizens can trust them).

    How much would it be worth to attackers to access Barack Obama's phone? A general in the military? Warren Buffet? Depending on who you are, the answer ranges from billions to life-and-death (e.g., an enemy in war's survival might depend on access to a U.S. military general's communications). With stakes so high, can such things really be secured?

    1. Re:Such attacks should be anticipated by king+neckbeard · · Score: 1

      The corollary is that securing your infrastructure isn't worthwhile if it's more expensive to do so than the value of ensuring your infrastructure isn't compromised. There's no sense in buying a $500 safe to protect a $20 tool.

      --
      This is my signature. There are many like it, but this one is mine.
    2. Re:Such attacks should be anticipated by Anonymous Coward · · Score: 0

      There is if it is subsequently used to beat you to death.

    3. Re:Such attacks should be anticipated by gmuslera · · Score: 3, Interesting

      NSA (& associates) made that equation worthless when started to require to manufacturers to insert backdoors and timebombs into their products and spread privileged access over too much people.

      So a single person or a group of them (either being insider, or finding how to access those backdoors deployed everywhere) with the right motivation can access most of world's critical information, including US one, and Snowden is a proof of that, the one that decided to go public, for good. What you don't know is how many in the past, present or future will abuse that privilege, or just will make a security mistake giving access to that information to the wrong people.

  7. Sounds like Revenge... by canadiannomad · · Score: 3, Insightful

    I could be way off base, but I bet this particular type of information was sought out from the leaks by Greenwald to dissuade GCHQ from behaving the way it did again...

    --
    Hmm, the humour and sarcasm seem to have been be lost on you.
    1. Re:Sounds like Revenge... by fsagx · · Score: 3, Interesting

      In response to the detention of Miranda, he said something along those lines:

      the UK and US governments believe that tactics like this are going to deter or intimidate us in any way from continuing to report aggressively on what these documents reveal, they are beyond deluded. If anything, it will have only the opposite effect: to embolden us even further.

      http://www.theguardian.com/commentisfree/2013/aug/18/david-miranda-detained-uk-nsa

  8. Re:All this for waffles. by Anonymous Coward · · Score: 0

    They dont. Belgians arent bullies who try to intimidate everyone.

  9. GRX Router? by Anonymous Coward · · Score: 0

    Could someone explain to a non-networking person what exactly a GRX router is?

    1. Re:GRX Router? by Anonymous Coward · · Score: 0

      Do you need us to explain what wikipedia is?

  10. How do we know this stuff is real? by Anonymous Coward · · Score: 0

    What proof do we have of the authenticity of what Snowden is leaking? It could all or mostly be bullshit. In any good psyop you need a small element of truth to add authenticity to the bulk of propaganda. He needs to survive somehow so how do we no that this seemingly endless supply of highly classified documents are not fabricated? There is certainly financial motivation on his part, the Globe and other news outlets to keep the story going.

    1. Re:How do we know this stuff is real? by Anonymous Coward · · Score: 0

      What proof do we have of the authenticity of what Snowden is leaking?

      Yeah: if you can't shoot the messager, you can at least discredit him.

    2. Re:How do we know this stuff is real? by Anonymous Coward · · Score: 1

      So you think the US charged Snowden with theft of government property, and two espionage offenses of disseminating classified material to someone without a security clearance, and revealing signals intelligence as part of "psyop" operation? Pray tell, I'm intrigued with this theory. Could you elaborate on who the operation is targeting, and what its ultimate goal is? What outcome of this operation would constitute a successful mission?

    3. Re:How do we know this stuff is real? by alberto_moro · · Score: 1

      It's about the German election and the Euro. The NSA/GCHQ thing is a "diversionary fire" so that the Euro-crimes are not in the public conscience.

    4. Re:How do we know this stuff is real? by Anonymous Coward · · Score: 0

      He gave up a $200k per year job and a supermodel girlfriend to blow the whistle, in what possible way has he personally profited? Where is this "financial motication" you speak of, fool?

      This is slashdot. Sell your brain-dead ideas to the Fox News crowd, they may be stupid enough to believe your horse shit, fool. Now go away, Mr. Clapper.

  11. Hercule by mynameiskhan · · Score: 1

    So what more have we learnt about Poirot?

    1. Re:Hercule by Anonymous Coward · · Score: 0

      Hopefully the secret to his exquisite moustache trimming.

  12. We already know by randomErr · · Score: 2

    We already know that something between 1984 and the NAZI regime was being built. Snowden just brought it to everyone's attention.

    The best thing we can do is either unplug all together or create custom P2P networks that breaks from the standard networks. We need to use disruptive technologies like CB, Zigbee, enhanced versions GPG, faxs, face to face communication, hell even FIDOnet would offer a level of privacy you usually can't get today.

    --
    You say things that offend me and I can deal with it. Can you?
    1. Re:We already know by Anonymous Coward · · Score: 0

      Don't forget that it was also revealed that even 'secure fax machines' bought by some big government organisations were found to have back doors (EU ? UN? something like that).

      So you sure about going back to fax?

    2. Re:We already know by VortexCortex · · Score: 1

      Oh, if only "store and forward" weren't specifically outlawed by the FCC... Then you could buy an ISP device once, and never pay anything more than maintenance and electricity to join the encrypted mesh network. Instead we only allow corporations to do this, and charge by the bit. Wireless Plans, indeed.

      Colocation? Bandwidth Problems? Hack because IPv4/6 lacks automatic caching of store and forward... And TCP is dumb.

    3. Re:We already know by alberto_moro · · Score: 1

      You can use ANY machine securely with your self-made One-Time-Pad. It just requires less laziness than you currently display.

      You can turn off your phone ANY time. You can leave your WLAN open and if everybody does it, they will have a hard time to perform traffic analysis.

      Finally, you can use a watch and meet people in meat space at a certain time and certain place.

    4. Re:We already know by HiThere · · Score: 1

      You don't even *need* all that, unless you really need security. If you just really don't want to be snooped on, a diversity of communication channels makes it more difficult to monitor all of them, so it decreases the probability of any one communication being snooped on. Which is why the G.P..s reference to fidonet was reasonable.

      OTOH, this same diversity makes it difficult for you to contact a wide diversity of people. For that you need standardized approaches, like e-mail and web pages (depending on how targeted you want to be, and how you target).

      P.S.: It's already been suggested that one might use actions in a game as a protocol layer for the transmission of messages. This would be a bit difficult to implement, and you might need to choose the game carefully, but... And more practical is steganography applied to porno movies. If nothing else the package should serve as a distraction from the message. (And if you're doing that, be sure to include some bursts of noise in the message, so they'll be sure to study the package carefully.)

      --

      I think we've pushed this "anyone can grow up to be president" thing too far.
  13. Re:Dear GCHQ by Anonymous Coward · · Score: 0

    Where is the time when British people knew how to use avoid using indecent language...

  14. Re:All this for waffles. by Anonymous Coward · · Score: 1

    The bombs in Belgium are under American control.

    Hey, we're allies! Please treat us as such.

  15. Re:All this for waffles. by Anonymous Coward · · Score: 0

    They dont. Belgians arent bullies who try to intimidate everyone.

    Yeah, well except that minor unpleasantness in the late 19th century where their King was responsible for the murder and genocide of between 2 and 15 million people in the Congo.

    One has to wonder if the "boring Belgians" stereotype was encouraged by the Belgians themselves, since it's probably preferable to being associated with a King who seems- by all accounts- to have been the forerunner of Adolph Hitler. Or maybe it just didn't count as much back then (and now?) when it was Africans being killed in that manner.

  16. yeah, yeah by Anonymous Coward · · Score: 1

    Getting rather sick of just overview articles that tell what intelligence agencies are doing, but doesn't explain HOW they are doing it, or everything that they are doing with the collected data. Basically, the journalists have now become the gatekeepers of information deciding what the affected masses should see. Give us (tech community) specific details on who/what has been compromised so that mitigation can take place while we wait for legal and political solutions (if they ever come) to address the criminality and policies of these organizations. The journalists are already on the hook if governments decided to prosecute them for disseminating classified material to individuals without security clearances, so what difference does it make if they release a some details about specific OS vulnerabilities implanted by developers cooperating with, or even paid by the NSA, et al.

    1. Re:yeah, yeah by HiThere · · Score: 1

      The journalists don't tell you how it's done, because they don't understand the explanations. This isn't being a gatekeeper. This is being a "narrow passage".

      P.S.:

      It's been 4 minutes since you last successfully posted a comment

      Chances are, you're behind a firewall or proxy, or clicked the Back button to accidentally reuse a form. Please try again. If the problem persists, and all other options have been tried, contact the site administrator.

      Why don't they say how long you need to wait?

      --

      I think we've pushed this "anyone can grow up to be president" thing too far.
    2. Re:yeah, yeah by Anonymous Coward · · Score: 0

      Well, Glenn Greenwald has consulted and shown the documents with Bruce Schneier, who does understand the technical aspects and their implications, so I don't think he could use that as an excuse for not providing more details in his reports. Look, if non-tech journalists won't publish stories focusing on the how's of the surveillance scandal because they don't understand the techy stuff, then they should turn the data over to tech journalists that do have experience dealing with classified tech information, assuming you can find some that aren't already too cozy with the intel community.

  17. So is political espionage by Anonymous Coward · · Score: 0

    They got hold of Belgacoms routers, which route smartphone data for it's users, which lets them intercept the smartphones connected to belgacom's network, including all the roaming. Including Brits in Belgium.

    Belgacom's users being people like the EU Parliament, EU Commission, visiting politicians who roam through Belgacom. Including British politicians, journalists, etc. SWIFT, and other international organizations are based in Belgium.

    European arrest warrant should be issued as soon as they find out who was involved, and for the head of GCHQ for ordering it, and the UK police should not side with the MET/GCHQ. This is a crime, clear and simply. A major crime at that, it is not legal in the UK to hack computer systems.

  18. Re:Dear GCHQ by Anonymous Coward · · Score: 1

    Dear Anonymous Coward,
    We, being the fine people of the United Kingdom of Great Britain and Northern Ireland, wish to inform you that we have retained our ability to avoid the use of foul language. We also wish to inform you that your assumption that it has gone belies a spectacular lack of awareness on your part. So much so that I would wager my pet parrot against you in matters of general knowledge. Which is saying a lot, because my pet parrot died last week.
    Sincerely,
    A loyal subject of Her Majesty The Queen.

    P.S., Fuck you, arsehole.

  19. Major source of driveby downloads by stewsters · · Score: 1

    "It appears to be a method with which the person being targeted, without their knowledge, is redirected to websites that then plant malware on their computers that can then manipulate them."
    So that's who keeps doing that. And I was blaming flash gaming sites that my mother-in-law goes to.

  20. Re:All this for waffles. by Anonymous Coward · · Score: 0, Flamebait

    They dont. Belgians arent bullies who try to intimidate everyone.

    Yeah, well except that minor unpleasantness in the late 19th century where their King was responsible for the murder and genocide of between 2 and 15 million people in the Congo.

    One has to wonder if the "boring Belgians" stereotype was encouraged by the Belgians themselves, since it's probably preferable to being associated with a King who seems- by all accounts- to have been the forerunner of Adolph Hitler. Or maybe it just didn't count as much back then (and now?) when it was Africans being killed in that manner.

    Don't go throwing the first rock if you don't want it thrown back at you :

    American indian genocide + slavery up until the 1960's is something to be proud of ?
    British inventing the "concentration camp" and carrying out wars of conquest/genocide all over the world is something to be proud of ?
    French colonialism is not something to be proud of.
    Even the Germans have dirty hands.
    And the Cinese, and the Japanese and Russians and Turks and the Spanish and Portuguese and the Italians and the Austrians.
    You want redress in this world ? Get the southern hemisphere to wipe out the entire northern hemisphere where all of these countries are.

  21. Sir Arthur Bonsall by Anonymous Coward · · Score: 0

    It was 2010, so Sir Arthur Bonsall was the director of GCHQ at the time.
    The crime he committed, is Belgiums anti hacking law. There is no immunity for GCHQ in Belgium, he is just a criminal like any other.
    Presumably the GCHQ/NSA PR machine and astroturf will be out and about telling us it was all for Belgium's interests... just like it hacked into Brazil Petroleum and claimed it was 'to detect economic instability...' what claptrap. It was just more spying.

    The European arrest warrant means Belgium should be able to force Britain to hand him over for trial. CIA nearly lost their chief to Italy, who prosecuted for illegal rendition. Instead of defending himself, he just ignored it, and hoped his political masters would protect him. They didn't. So Bonsall is expendable, and easy to arrest in mainland Europe. He will cross European airspace sooner of later.

    I assume Cameron and William Hague will offer him their full support, (i.e. a sacrificial lamb).

    1. Re:Sir Arthur Bonsall by alberto_moro · · Score: 1

      Change your weed. The current one makes you delusional. He will get a "legion of honor" or something from the Belgian King. Belgium is an Anglosaxon Bitch like everyone else in the "west".

    2. Re:Sir Arthur Bonsall by Anonymous Coward · · Score: 0

      He will get a "legion of honor" or something from the Belgian King.

      Legion d'Honneur is French.

      Belgium had the Order of Leopold, Order of the Crown & Yet Another Order of Leopold.

  22. Re:Snowden fatigue by pesho · · Score: 1

    Nah, that one is pretty good in the context of EU.

  23. Foreign office tapped to by Anonymous Coward · · Score: 0

    Not just Nato, EU is based in Belgium, all those smartphones owned by EU politicians tapped, all the secrets of their visiting family members, all that political leverage. Since Belgacom is a big roaming provider, all the *visiting* politicians would also be tapped too while in Belgium. So UK politicians visiting the EU Parliament with their smartphones, all the German politicians visiting the EU Commission.

    In related news, the Belgium Foreign office was tapped:

    http://www.deredactie.be/cm/vrtnieuws.english/News/130919_hacking

    "public prosecutors are investigating a break-in into the computer network employed by the Belgian Foreign Ministry."
    "The news that malware was discovered on computer systems operated by the Belgian Foreign Ministry has been confirmed by an official.
    "The discovery of the malware was made at the end of 2011. Joren Vandeweyer: "The computer programme was not designed to cause any damage, but rather to copy data."
    "We immediately changed our security system and contacted the Defence Ministry and informed the Prime Minister."
    "The public prosecutor’s office is now investigating whether the American intelligence service NSA is behind the hacking."

    I notice below people are saying NATO comms doesn't use Belgacom, which is false and misleading. All the Generals have their phones, all those smartphones roam through Belgium's telecoms infrastructure.

    1. Re:Foreign office tapped to by alberto_moro · · Score: 1

      It's unfixable. Because "fixing" would mean to develop a Belgian, serious IT security capability and probably dumping MS Windows.

      That's expensive and will infuriate American Money. So this will never happen.

    2. Re:Foreign office tapped to by Em+Adespoton · · Score: 1

      Belgacom also services N. Africa and parts of the middle east, not just Belgium itself and people roaming in Belgium. So the network is a juicy target for anyone wanting to indiscriminately sift through calls to/from these areas as well as those in Belgium itself.

  24. "willing to penetrate" by OrugTor · · Score: 1

    Well, I am "willing to penetrate" certain young female celebrities. Doesn't mean I did. Doesn't even mean would. Certainly won't get the opprtunity.

  25. Re:All this for waffles. by Anonymous Coward · · Score: 3, Informative

    They dont. Belgians arent bullies who try to intimidate everyone.

    Yeah, well except that minor unpleasantness in the late 19th century where their King was responsible for the murder and genocide of between 2 and 15 million people in the Congo.

    The Royal House of Belgium was imposed on the Belgians by the English and the Germans, who were affraid of too much French influence in the country.

    Leopold I van Saxen-Coburg was born in Coburg (Bavaria, Germany), he was the uncle of Queen Victoria (who was also part of the Saxe-Coburg family, they changed their name into Windsor to sound less German).

    Congo was the _personal property_ of his son, Leopold II. After the outrage on how he treated the Africans, he "donated" it to the Belgian state as a colony. As a Belgian colony, Congo was not worse of than any other colony at the time (which is bad enough).

    a King who seems- by all accounts- to have been the forerunner of Adolph Hitler

    Leopold II did not want to exterminate the Africans (unlike Hitler who wanted to exterminate all Jews, Gypsies, gays and the mentally ill); he just wanted to make as much profit as possible. His way to make profit was cruel; but as much as I (an anonymous Belgian) hate him, comparing him to Hitler is trivializing the holocaust.

  26. Re:All this for waffles. by Anonymous Coward · · Score: 0

    Two wrongs don't make a right, and I was addressing the OP who stated that "Belgians arent bullies who try to intimidate everyone". Which is transparently wrong in a historical sense.

    Also- yes, the British widely used the *phrase* "concentration camp" as something of a euphemism during the Boer War. But I don't think they invented the term, and they certainly didn't invent the concept from scratch. And whatever the rights and wrongs of such camps, they were never in the same league of wrongdoing as the Nazis' forced labour and extermination "concentration camps" with which the term became synonymous decades later.

    By invoking the term in this (genocidal) context, you clearly associate it with its modern (Nazi-fied) meaning and its horrors, but it was the Nazis who were responsible for that- not the British. Yes, they've done some pretty disgusting things in their time, but they're not responsible for that.

    And none of it exonerates the Belgians.

  27. Ok so is anyone else getting suspicious? by Sycraft-fu · · Score: 0

    Not of the NSA (I mean seriously, you weren't already?) but of these leaks? I am starting to have doubts that this one contractor had access to all this varied data, about various programs, and now even about non-American agencies.

    I am seriously starting to wonder if he, or others, are making up some shit for their own ends. I just have trouble buying that he has all this disparate data, on all this stuff, particularly given the compartmentalization of highly classified data.

    1. Re:Ok so is anyone else getting suspicious? by neo-mkrey · · Score: 1

      Yes, I believe he does. This is based on the extreme reaction by those from whom the data was taken.

    2. Re:Ok so is anyone else getting suspicious? by Sycraft-fu · · Score: 1

      I'm quite sure his original stuff about the NSA's prism program is accurate. It is some of the later stuff I'm questioning. I don't doubt that he had access to classified data, and it certainly seem like it is at least somewhat, if not completely, accurate given the reaction. But then there keeps being more and more leaks that are less and less related, which do not seem to be generating much reaction.

      It is just causing me to wonder on their veracity.

    3. Re:Ok so is anyone else getting suspicious? by VortexCortex · · Score: 1

      Let me just clear up all your lack of access concerns: Omivore / Carnivore ran on Unix, it was ported to MS Windows when they made ECHELON, thus Windows is the platform PRISM runs on too.

      The only thing suspicious about the reports is that the Chinese hackers who bust up all the SCADA and Windows-Ran Energy grid aren't corroborating the reports... You credit the NSA too highly. Where do you think they higher hackers from? That same group that makes a game out of getting root on Windows and other OSs? So, you're suspicious of the REPORTS, that the least secure operating system in the world, which is regularly exploited so much that a black-market full of exploits exists for, could possibly grant an unprivileged user access to information they shouldn't have had access to?

      Personally, with that kind of thinking, I'm more suspicious of YOU.

    4. Re:Ok so is anyone else getting suspicious? by Anonymous Coward · · Score: 0

      The powers that be are not denying the reports anymore.
      The UK is trying to sweep it under the carpet.
      The big companies initially denied the reports but changed their tune. Now it's all "badly managed".
      Good enough to almost start a war to create a diversion.
      Good enough for Brasil to cancel official visits and for BRICS to start planning a completely new communications infrastucture to bypass the US. (Is last week and this week Recent Enough?)

      If it were bogus, they'd just produce counter-evidence, not smear, diversion and panicked Presidents, Prime MInisters and Secretaries of State.

    5. Re:Ok so is anyone else getting suspicious? by alberto_moro · · Score: 1

      What if the Snownden thing IS the DIVERSION ? They have plenty of things they don't want in the public conscience. The Euro, the dollar, public debt spiralling...

      I consider the Syria war a diversion, too. France is in deep economic shit, so they clamour for a new war. Then, there's an election in Germany this weekend.

    6. Re:Ok so is anyone else getting suspicious? by Xest · · Score: 1

      The official line is that Snowden was just some basic contractor who was a network administrator but other sources that have done some digging seem to think he was one of the NSA's hired hackers contracted to attack other nation state's infrastructure.

      Only it seems he turned on the NSA and hacked them instead, hence the access to all this data.

      The problem is that the NSA was likely using the very algorithms and systems it had put backdoors into assuming that no one else would know about the backdoors so it wouldn't be problematic for them. It also meant that someone like Snowden who'd been informed of all the back doors he could use could exploit the same backdoors inside the NSA itself which would've made things trivial for him.

      The US has placed way too much trust in it's staff but most importantly it's contractors for too long. It was first obvious with Manning, one might wonder why a near bottom of the ladder analyst sat in Iraq would have access to every diplomatic cable across the globe for example but for some reason he did.

      They've had the balance between sharing of intel to allow analysts to make fast optimal decisions and keeping it secure wrong for a while now but that's not something that can be quickly fixed either. This likely stems from the post-9/11 expansion of the security services where all these new security agencies, contractors and staff were all demanding access to various bits of information so they just opened it up to everyone as it was the only way they could fulfil all the requests.

  28. Re:All this for waffles. by Anonymous Coward · · Score: 0

    Comparing [Leopold II] to Hitler is trivializing the holocaust.

    On the contrary; while I don't intend getting into a "most evil" argument (*), the fact that you think even vaguely implying a comparison between the two (despite the deaths of between 2 and 15 million people- even if that was for reasons of personal greed rather the hatred) could somehow "trivialize" the holocaust- as if the former were not even remotely as important- ironically trivializes *that*.

    (*) This would probably end up trivializing both, distracting and polarizing people away from the true issues. Yes, I would say that the "holocaust" *was* worse for the reasons you gave; but this should not be used to trivialize Leopold's conduct in the Congo either.

  29. Brussels: location of EU headquarters by Lieutenant_Dan · · Score: 2

    If you want to know more what each party is discussing with their national governments, can't think of a better place than hacking Belgian telecom.

    This is why they did it.

    --
    Wearing pants should always be optional.
  30. Re:All this for waffles. by Em+Adespoton · · Score: 1

    The Royal House of Belgium was imposed on the Belgians by the English and the Germans, who were affraid of too much French influence in the country.

    Leopold I van Saxen-Coburg was born in Coburg (Bavaria, Germany), he was the uncle of Queen Victoria (who was also part of the Saxe-Coburg family, they changed their name into Windsor to sound less German).

    Congo was the _personal property_ of his son, Leopold II. After the outrage on how he treated the Africans, he "donated" it to the Belgian state as a colony. As a Belgian colony, Congo was not worse of than any other colony at the time (which is bad enough).

    a King who seems- by all accounts- to have been the forerunner of Adolph Hitler

    Leopold II did not want to exterminate the Africans (unlike Hitler who wanted to exterminate all Jews, Gypsies, gays and the mentally ill); he just wanted to make as much profit as possible. His way to make profit was cruel; but as much as I (an anonymous Belgian) hate him, comparing him to Hitler is trivializing the holocaust.

    Just a reminder that another one of the colonies was Rwanda -- the situation there shows that Leopold II did not want to exterminate Africans, but he DID take a nation and separate the people there into two "races" based on looks and set up a "genetic" breeding program. Those Rwandans with European-looking features were allowed to marry each other and hold positions of power; those without European-looking features (darker skin, flatter nose, lower cheekbones, more protruding forehead) were excluded from this society and were pretty much only allowed to work as grunt labourers. And so we got the Tutsis and Hutus, and the bloody carnage the country is still recovering from.

  31. No, no -- read the slide! by zooblethorpe · · Score: 1

    in hoc to

    Off-topic pedantry: the expression's in hock to...

    No, no, it's not in hock, although that does rhyme -- read the slide! It says MyNOC .

    It makes perfect sense. Chewing on the cables.

    Cheers,

    --
    "What in the name of Fats Waller is that?"
    "A four-foot prune."
  32. Re:Long term plan by Anonymous Coward · · Score: 0

    Liberal scum!!

  33. Re:Dear GCHQ by lordholm · · Score: 1

    British are not citizens, they are subjects.

    --
    "Civis Europaeus sum!"
  34. Re:All this for waffles. by Stoutlimb · · Score: 1

    You had me until your last line. You actually believe that people in the southern hemisphere are somehow morally superior?

  35. Re:Dear GCHQ by Anonymous Coward · · Score: 0

    My passport says clearly: Citizen of the United Kingdom

  36. P3RF1D3 4LB10N! by Geste · · Score: 1

    Brilliant move, Britannia.

  37. Re:All this for waffles. by oobayly · · Score: 1

    He's right - Belgians aren't bullies. They were bullies, but then as he pointed out, nearly every developed country has been a bully at some stage in the past, and some still are.

  38. Re:Snowden fatigue by fustakrakich · · Score: 1

    What fucking troll? And it's very much the topic. People are just going to lose interest until they hear or see something they didn't already suspect. And besides, this will have little to no effect on the next set of elections. You're still going to see nothing but republicans and democrats in power. And they sure don't care what the EU thinks. Their politicians are on board anyway. This is going nowhere fast. "Where's the beef?" What's going to be done about it? A big fat nothing, what's what. And certainly not anything with the current set of bums in office. Just a lot of chatter and nothing else.

    --
    “He’s not deformed, he’s just drunk!”
  39. Re:All this for waffles. by Anonymous Coward · · Score: 0

    They dont. Belgians arent bullies who try to intimidate everyone.

    The opposite of "bully" is NOT "pacifist".

  40. Re:All this for waffles. by turgid · · Score: 1

    Bombs?ÂBuns, surely?

  41. Re:Dear GCHQ by Anonymous Coward · · Score: 0

    On 1 January 1983, upon the coming into force of the British Nationality Act 1981, every Citizen of the United Kingdom and Colonies became either a British Citizen, British Dependent Territories Citizen or British Overseas Citizen.
    Use of the term British subject was discontinued for all persons who fell into these categories, or who had a national citizenship of any other part of the Commonwealth. The category of British subjects now includes only those people formerly known as British subjects without citizenship and people born in Ireland before 1949. In statutes passed before 1 January 1983, however, references to British subjects are interpreted as if they referred to Commonwealth citizens.

    The above is from Wikipedia, The use of the British Subject is now nothing more than a stereotype and for future reference, it would be wise that you do not use this anymore.

  42. Re:Dear GCHQ by Anonymous Coward · · Score: 0

    Indeed, it seems that there are still people out there that refuse to learn.

  43. But but but by nurb432 · · Score: 1

    Everyone ( the idiots anyway ) say its only the USA that does this.. this cant be true..

    --
    ---- Booth was a patriot ----
  44. Re:Dear GCHQ by Anonymous Coward · · Score: 0

    Who cares what it says. Bottom line is we have lost control of our bloated state. They are a bunch of bastards doing whatever they like.

    And we can't vote them out because all the major parties are afraid of MI* and GCHQ. Plus both Cameron and Milliband are scumbags who don't see any problem with this sort of thing.

    I'd love to see someone invade Britain having bombed GCHQ back to the stone age and rounded up the entire civil service. They would be greeted as liberators.