Insight On FBI Hacking Ops
New submitter krakman writes "The Washington Post has an interesting story about how the FBI can investigate and collect details from computers over the net, without knowing anything about the computer location. Here's an example of the FBI's network investigative techniques: 'The man who called himself "Mo" had dark hair, a foreign accent and — if the pictures he e-mailed to federal investigators could be believed — an Iranian military uniform. When he made a series of threats to detonate bombs at universities and airports across a wide swath of the United States last year, police had to scramble every time. Mo remained elusive for months, communicating via e-mail, video chat and an Internet-based phone service without revealing his true identity or location, court documents show. ... The FBI’s elite hacker team designed a piece of malicious software that was to be delivered secretly when Mo signed on to his Yahoo e-mail account, from any computer anywhere in the world, according to the documents. The goal of the software was to gather a range of information — Web sites he had visited and indicators of the location of the computer — that would allow investigators to find Mo and tie him to the bomb threats. ... Even though investigators suspected that Mo was in Iran, the uncertainty around his identity and location complicated the case. Had he turned out to be a U.S. citizen or a foreigner living within the country, a search conducted without a warrant could have jeopardized his prosecution. ...But, [a court document] said, Mo’s computer did send a request for information to the FBI computer, revealing two new IP addresses in the process. Both suggested that, as of last December, Mo was still in Tehran.'"
that might have been all he wanted.
N/T
There is a thing as a paragraph tag. Did not read.
Sounds like all "Mo" needed to do was pull his antics via VirtualBox with some firewall rules in place to block any outbound but to Yahoo or whatever his preferred launching pad was for his juvenile noise. Sheesh.
Also can't shake the image of Moe Sizlack, the Simpson's bartender, muttering to himself as he sends off the next faux threat.
"Had he turned out to be a U.S. citizen or a foreigner living within the country, a search conducted without a warrant could have jeopardized his prosecution"
It is almost like there's no possible way they could get a warrant on this guy, right? So, clearly, this is just another example of why the government can completely ignore the 4th amendment for your own protection. Requesting a warrant is WAY harder than writing and distributing a complex piece of malware such as is described and might have slowed them down by about 12 seconds. Of course, the cost is only the destruction of rights for a few hundred million people; no big deal.
I guess people started to forget that Iran is the arch-nemesis of the entire free world. An article to the rescue, about how the infinitely wise and well prepared TLA saved the day by outsmarting a dumb terrorist who is hiding in the darkest corner of the most dangerous country in the world. (No, that's not Chicago, if you wonder.)
Unless this Iranian troll was naive enough to open one of those "e-cards" that required a little "browser helper", this strongly suggests that Yahoo complied with the government's request to push spyware onto a specific member's computer. They could do this through the ad mechanism, or perhaps the all-new Yahoo! Email! has an embedded Patriot! Patch! facility built-in?
The FBI has been able to covertly activate a computer’s camera — without triggering the light that lets users know it is recording — for several years, and has used that technique mainly in terrorism cases or the most serious criminal investigations
... and in LoveINT cases too. If noone watches the watchers they will become stalkers too.
Re: the summary
Maybe it's because of how I have my settings, but the summary shows up as one big giant block of text. How is this readable?
The FBI’s elite hacker team designed a piece of malicious software that was to be delivered secretly when Mo signed on to his Yahoo e-mail account, from any computer anywhere in the world, according to the documents.
This is a bit movie-like and shouldn't generally be technically possible. Is there some misreporting in the article, or what?
who would call himself Mo? I don't think an Iranian or any native Muslim would choose Mo.
It's an insult to the name Mohammad, and a common American shortening of that name.
I'd more happily expect that "Mo" to be a kid from Cleveland.
WTF is point of this article?
So many details, stories about asking for court order when it was reported that agency ignored 1000 times similar requests in the past.
Iran is bad so drums get louder and louder again. So pathetic.
The next level of "Spyware" has arrived. Enjoy.
If Mo was dumb enough to run the spyware, well... moral issues aside, the inevitable will happen.
Seriously, why are people surprised when they run code from an attacker, and then they are attacked? This central idea seems to elude people: do not run software where you don't know what it is and have no reason to trust it. Yes, in this case it was hunting someone with possibly ill intent, but in the next 100000 cases it'll be Joe Sixpack getting his bank account jacked.
It's bewildering. If you cooperate with attackers, you get attacked. News at 11.
Or did Yahoo allow the FBI to compromise their system and allow the FBI to access the mailbox, read though the emails and get an idea on who to send the trojan from so the would open the email.
Well either way Yahoo has compromised mail servers or they allow the FBI to do as they wish with the Yahoo system.
by TheSpoom (715771) Uncaring Linux user here. I have nothing to add to this but please continue. *munches popcorn*
BS
#!/bin/bash
echo "127.0.0.1 mail.yahoo.com" >>
watering hole much?
Warrant? No. Fire them yesterday.
"Even though investigators suspected that Mo was in Iran, the uncertainty around his identity and location complicated the case. Had he turned out to be a U.S. citizen or a foreigner living within the country, a search conducted without a warrant could have jeopardized his prosecution."
Always good for some good old FEAR! UNCERTAINTY! DOUBT!
All of 'em? Really?
---- The above post was generated by the Turing Institute. Maybe.
So they basically wasted all this time and money to confirm something they already suspected; that he was in a country that they couldn't touch.
Wonder how many hundreds of hours of overtime were claimed in pursuit of this valuable slice of information.
expect to see a lot more of these "See, privacy invasion is good for you" articles. Their purpose is to "prove" that all this spying and data collection helps catch some very naughty people in icky foreign countries. some of them with really bad accents or even terrible mustaches (aka "proof of evil").
Terrorist want to cause widespread fear and panic in the US population. So why the Iranian military uniform? I'd be wearing an NFL fan sweatshirt (different cities team for every broadcast) and use a nondescript Starbucks as a background. So the assumption is that he's in country already and Homeland Security goes to code red.
The Iranian uniform and Iranian IP indicates that he's still at home and just stirring the pot. But both the uniform and the IP are easy to spoof. And an Iranian officer would be risking career (and maybe literal) suicide by screwing up ongoing international nuclear negotiations. So I'd consider this as a false flag operation, aimed at making Iranians appear to be unstable. I'd be looking inside Israel for the source.
Have gnu, will travel.
The FBI's not the only one looking for this guy: http://youtu.be/eHHT7dTmw8U?t=57s
Buy your next Linux PC at eightvirtues.com
If he had half-decent technical skills, the FBI would now be looking for him in half the countries in the world. If he were careful about it, he could even keep it plausible - spend a week in one place, spoof an airport, go silent, spoof a different airport...
"The Washington Post has an interesting story about how the FBI can investigate and collect details from computers over the net, without knowing anything about the computer location"
Don't you mean the Post has an interesting story about how easy it is to remotely hack a Windows computer over the Internet, in this case by opening a contaminated email attachment.
about the fact that all of this was warrantless and they pushed this spyware without knowing if Mo was a US citizen? I feel this needs to be highlighted.
The FBI investigated 'Mo' http://www.youtube.com/watch?v=_X11rGNbQ-A
Seriously? Are people really saying that it's too much work to read all that text in the summary? I mean, sure, it could be organized better, but it's not even what I would call an unusually long paragraph. Has twitter and its ilk finally reduced people to this, an entire generation rendered incapable of handling large blocks of information at once? Does this kind of stuff really have to be spoon-fed to you a little at a time before you'll deign to read it?
Why did FBI the NSA. They are for action outside USA
Why did FBI not ask the the NSA. They are for action outside USA