Slashdot Mirror
The Feds Cracked El Chapo's Encrypted Comms Network By Flipping His System Admin (gizmodo.com)
With signs that the New York trial of notorious Mexican drug lord and alleged mass murderer Joaquin "El Chapo" Guzman is entering its end phase, prosecutors on Tuesday played copies of what they said were audio recordings of Guzman the FBI obtained "after they infiltrated his encrypted messaging system" with the help of Colombian and former cartel systems engineer Cristian Rodriguez, Reuters reported. Gizmodo reports: As has been previously reported by Vice, Colombian drug lord Jorge Cifuentes testified that Rodriguez had forgot to renew a license key critical to the communications network of Guzman's Sinaloa Cartel in September 2010, forcing cartel leaders to temporarily rely on conventional cell phones. Cifuentes told the court he considered Rodriguez "an irresponsible person" who had compromised their security, with a terse phone call played by prosecutors showing Cifuentes warned the subordinate he was in "charge of the system always working."
But on Tuesday it was revealed that the FBI had lured Rodriguez into a meeting with an agent posing as a potential customer much earlier, in February 2010, according to a report in the New York Times. Later, they flipped Rodriguez, having him transfer servers from Canada to the Netherlands in a move masked as an upgrade. During that process, Rodriguez slipped investigators the network's encryption keys. The communications system ran over Voice over Internet Protocol (VoIP), with only cartel members able to access it. Getting through its encryption gave authorities access to roughly 1,500 of Guzman's and other cartel members' calls from April 2011 to January 2012, the Times wrote, with FBI agents able to identify ones placed by the drug lord by "comparing the high-pitched, nasal voice on the calls with other recordings of the kingpin, including a video interview he gave to Rolling Stone in October 2015."
But on Tuesday it was revealed that the FBI had lured Rodriguez into a meeting with an agent posing as a potential customer much earlier, in February 2010, according to a report in the New York Times. Later, they flipped Rodriguez, having him transfer servers from Canada to the Netherlands in a move masked as an upgrade. During that process, Rodriguez slipped investigators the network's encryption keys. The communications system ran over Voice over Internet Protocol (VoIP), with only cartel members able to access it. Getting through its encryption gave authorities access to roughly 1,500 of Guzman's and other cartel members' calls from April 2011 to January 2012, the Times wrote, with FBI agents able to identify ones placed by the drug lord by "comparing the high-pitched, nasal voice on the calls with other recordings of the kingpin, including a video interview he gave to Rolling Stone in October 2015."
This shows that the FBI doesn't need to force key escrow or any other form of weakened encryption on the public.
If they really want the crypto keys, they can get them.
Indeed. If the possibility of a horrible violent death for you and your family does not keep you loyal nothing will.
Especially now knowing that the FBI will rat out their informers.
Now that everyone knows sysadmin Cristian Rodriguez betrayed drug cartel, I wonder what is the plan to keep him alive.
"Don't talk to the cops" is doubly true for the FBI, whether as an informer, a suspect, or even as a decent human being. Those guys are rather messed up.
"First they came for the slanderers and i said nothing."
I mean, Jesus H. Christo - it is goddamned *tough* to find competent IT support. If they can't do it with automatic weapons and methamphetamine torture parties, what hope do the rest of us have?
Offer a good wage and free skills training and you can find lots of competent IT people. Be a cheap bastard and shun people because of their age and you get what you get.
Anons need not reply. Questions end with a question mark.
Fascinating that this kind of organization trusts proprietary software. Too easy to sneak in back doors.
But I guess if this shop were well run the headlines wouldn't be what they are.
My God, it's Full of Source!
OUTSIDE_IP=$(dig +short my.ip @outsideip.net)
A long time ago I worked as a security sysadmin for a well known Wall Street company. As part of my work I was given access to the master passwords for ALL the financial systems.
At the same time, they paid me so little (by Manhattan standards) that I had to live with two roommates. So obviously I was living far below a comfortable middle class lifestyle. While holding the master keys to a system that processed billions of dollars a day...
As it happens, I was young, and I'm an honest man from a good family. So I did nothing dishonorable. But WHAT THE FUCK WERE THEY THINKING?
Just goes to show that most rich folks are inbred half-wits who would be flipping burgers at McDonald's if they'd been born commoners like the rest of us.