Liz Hurley Left 'Mortified' After Media Bugged Devices, Court Heard

A PRIVATE investigator hired by a national newspaper bugged Ledbury celebrity, Liz Hurley’s home, a high court hearing has heard. 

Ms Hurley is among celebrities like Elton John and Prince Harry who have taken action against Associated Newspapers the publisher of the Daily Mail and Mail on Sunday newspapers over years of alleged phone tapping and privacy breaches...

David Sherborne, who was representing Ms Hurley said in the written submission that she was left feeling “shocked and mortified” by the alleged targeting. He said a private investigator, acting on behalf of the Mail on Sunday, hacked their phones, tapped landlines, placed “a sticky window mini-microphone on the exterior of her home window” and bugged Mr (Hugh) Grant’s car to obtain “private communications with Mr Grant, her financial details, her travel arrangements and medicals during her pregnancy and birth of her son”. more

High profile individuals commonly have their homes, vehicles and aircraft swept for bugs.

Weird Science - Windows that Prevent and Facilitate Eavesdropping (you decide)

C-Bond Systems (the “Company” or “C-Bond”) (OTC: CBNT), a nanotechnology solutions company, announced today that it has received a purchase order for $220,000 to install specialty defense window film for a government customer.

Radio frequency defense film, also known as RF attenuation window film or anti-eavesdropping film, protects homes or workplaces against radio frequencies and electromagnetic radiation. The RF film that the customer requires meets strict security requirements for facilities handling classified or other sensitive information. The government customer has requested to remain anonymous for security reasons. more 

We've been down this road before, in 2007 and 2009.

•••

Listening & Anti-Eavesdropping Device
(18 years ago this month)
Abstract
A method and apparatus for transmitting information from a conversation in a room to a remote listener comprising selecting a structure (101) in the room which is capable of supporting vibration, selecting an electromechanical force transducer (90) which has an intended operative frequency range and comprises a resonant element (84, 86) having a frequency distribution of modes in the operative frequency range, mounting the transducer (90) to the structure (101) using coupling means (68) whereby the transducer excites vibration in the structure, positioning a sensor to detect vibration in the structure (101), determining information from the detected vibration and transmitting said information to a remote listener. There is also provided an anti-eavesdropping system which is the reverse of the method and apparatus according to the first and second aspects of the invention. (self-licking ice cream cone) more

Flashback - July 1988 - Eavesdropping in America

 July 1988 - Eavesdropping in America

A podcast before there were podcasts. Ted was way ahead of his time.

Tunnel Spy Traps Himself: "But it worked for El Chapo."

A man in northern Mexico had to be rescued after he accidentally trapped himself in a hole that he dug so he could spy on his former girlfriend in violation of a court order to stay away from her, authorities said Sunday.

The Sonora state attorney general’s office said the 50-year-old man had spent days digging the hole in Puerto Penasco, a town on the Gulf of California, only to become trapped and require assistance to get out...

The newspaper El Universal said the man dug a tunnel under the woman’s house. It said the woman told police that over the course of a week, she had heard scratching noises but assumed the noise was cats.

But when the sound grew louder, she investigated and found her former partner of 14 years trapped below, the report said. She said she ended the relationship because her partner was very jealous. more

Smartphone Spying – All They Need is Your Number and You're Pegged

When an Israeli entrepreneur went into a meeting with the infamous spyware vendor NSO, company representatives asked him if it would be OK for them to demo their powerful and expensive spying software, known as Pegasus, on his own phone.

The entrepreneur, who spoke to Motherboard on condition of anonymity because he was not authorized to talk about the meeting, agreed, but said that NSO would have to target his other iPhone, which he brought with him and had a foreign phone number. He gave NSO that phone number and put the phone on the desk.

After “five or seven minutes,” the contents of his phone’s screen appeared on a large display that was set up in the meeting room, all without him even clicking on a malicious link, he said.

“I see clicking on all kinds of icons: email icon, SMS icon, and other icons,” he told Motherboard. “And suddenly I saw all my messages in there and I saw all the email in there and they were capable to open any information that was on my [iPhone].”

The entrepreneur added that the NSO representatives accessed the microphone and the camera on his iPhone. That demonstration highlighted the power of an increasingly popular product among governments: software for remotely hacking phones in order to access communications and other data from targets. more

UPDATE
Pegasus malware officially a global brand.

NSO Group's Pegasus surveillanceware has been on the market for around two years, and now researchers say the spyware has a global reach that would make most multinational corporations jealous.

CitizenLab reports that its latest analysis of the malware has found it operating in some 45 countries, usually in the hands of governments looking to keep tabs on its citizens. more
 

Telephone Eavesdropping Prevention - Then and Now

1920's - Hush-A-Phone...

Click to enlarge. Video. More.

2018 - Hushme...

1960 v 2018...

TSCM News: All Blacks Bugging Case Settled

Australia - Adrian Gard, the security consultant at the centre of the All Blacks bugging case, had his public mischief charge dismissed by a Sydney court on Friday.

Gard was accused of making a false statement to police about a listening device found in the All Blacks’ hotel meeting room before the August 2016 match against Australia in Sydney.

The magistrate was unable to rule out that someone else could have planted the bug.

Gard was found guilty of a second charge relating to carrying out a security operation without a license.

The matter, dubbed “bug-gate”, caused much friction between the Australian and New Zealand Rugby unions when it was revealed last year. more

Moral of the story... This all could have been avoided if the All Blacks spent the money to hire a real, reputable (and licensed) technical security consultant. ~Kevin

Security Alert: If Your Phone Says Avaya... ask IT about this.

Internet telephony company Avaya has patched a high-severity vulnerability in its Aura Application Enablement Services product that put phone call and API data running through the server at risk for interception.

Researchers at Digital Defense found a vulnerability where an attacker could, without authentication, abuse Remote Procedure Calls (RPC) into the server and modify input in such a way that they would be granted remote administrative access...

“Anything that passes through that server [would be at risk],” said Mike Cotton, vice president of research and development... “An attacker could send malformed input at the interfaces and take control over the service and any voice data...  “Eventually you can get root command through remote compromise,” he said.

In an advisory updated June 14, Avaya said versions 6.3.1, 6.3.2, 6.3.3 and 7.x are affected. The company said that versions 6.3.1, 6.3.2 and 6.3.3 should install Super Patch 7 and apply AE Services 6.3.3.7 security hotfix. Users on 7.0.x should upgrade to 7.0.1 and install Super Patch 4 and AE Services 6.3.3.7 security hotfix as well. Users on 7.1 should apply AE Services 7.1.0.0.0 Security Hotfix.

“Certainly for enterprises that use the product, this is a high-impact vulnerability,” Cotton said. “The ultimate severity is how many business-critical apps are attached to this thing and where it’s sitting within the network infrastructure. This is something I would prioritize and move to the top of patching lists.” more

NSA’s Leaked Bugging Devices - Reverse Engineered

Radio hackers have reverse-engineered some of the wireless spying gadgets used by the US National Security Agency. Using documents leaked by Edward Snowden, researchers have built simple but effective tools that can be attached to parts of a computer to gather private information in a host of intrusive ways.

The NSA’s Advanced Network Technology catalogue was part of the avalanche of classified documents leaked by Snowden, a former agency contractor. The catalogue lists and pictures devices that agents can use to spy on a target’s computer or phone. The technologies include fake base stations for hijacking and monitoring cellphone calls and radio-equipped USB sticks that transmit a computer’s contents.

But the catalogue also lists a number of mysterious computer-implantable devices called “retro reflectors” that boast a number of different surreptitious skills, including listening in on ambient sounds and harvesting keystrokes and on-screen images. more

Former Fox News Host Sues Network for Allegedly Spying on Her

Andrea Tantaros, once a long-time fixture at the Fox News Channel, filed a suit on Monday alleging that the cable news network spied on her private communications

and utilized information it gleaned via surveillance in an intimidation campaign after she began having disputes with network management.

According to the complaint, Fox News, primarily at the instigation of Ailes and others who formerly worked in his secret “black room” operation, snooped inside of Tantaros’ email and recorded her telephone conversations. They then allegedly provided the information back to Snyder and others who repeated it back to Tantators via anonymous social media accounts in order to dissuade her from taking legal action against the network.  more

Police Chief Pleads Not Guilty to Eavesdropping

CA - David Paul Edmiston, an acting Kern High School District police chief accused of surreptitiously recording his officers, pled not guilty in Kern County Superior Court Wednesday to four counts of misdemeanor eavesdropping.

Edmiston was named acting police chief in August, after Chief Joseph Lopeteguy, who alleged high-level school district administrators were illegally using a sensitive police database, went on medical stress leave. more

GCHQ Spy Master Quits UK’s Eavesdropping Nerve Centre

UK - GCHQ boss Robert Hannigan only took on the post in April 2014, but on Monday—in a surprise move—

he quit the job, citing "personal reasons."

He won't be handing in his (encryption) keys until a successor is found, GCHQ said.

In a letter to the UK's foreign secretary, Boris Johnson, Hannigan said that he was "proud" of the work he has overseen at the eavesdropping concrete doughnut.

He flagged up the National Cyber Security Centre as one of GCHQ's "achievements" under his tenure.

"While this work must remain secret, you will know how many lives have been saved in this country and overseas by the work of GCHQ," he added in his missive to Johnson. more

State Insurer Caught up in Eavesdropping Scandal

Chinese insurance regulator said that a state insurer used an iPhone and a voice recorder to eavesdrop on inspectors.

China Insurance Regulatory Commission Shandong bureau said Saturday that the eavesdropping devices were found at the Weifang office of Yingda Taihe Property Insurance.

The regulator had been inspecting the Shandong branch.

On Jan. 6, inspectors found the iPhone and voice recorder taped under their chairs. Neither Yingda nor the regulator elaborated on how the tapping devices were found.

"Their purpose was to listen in on the discussions, so that they could obstruct and thwart inspections," sources with the insurance regulator said. more

This is why accounting firms who conduct on-site audits often have their dedicated offices swept for bugs. Smart. ~Kevin

Attorney Indicted for Installation of an Eavesdropping Device

KY - A local attorney was indicted Friday by a Christian County grand jury on charges of eavesdropping, according to court documents.

A summons was issued for Sands Morris Chewning, Hopkinsville, on charges of eavesdropping, second-degree unlawful transaction with a minor and installation of an eavesdropping device. The court documents state the incident occurred Sept. 9, 2016. No other details are available.

Also indicted was Cherie H. Sherrill, Crofton, for eavesdropping, unlawful transaction with a minor and installation of an eavesdropping device. A summons was also issued for Sherrill. more

14 Year Old Kid Violates Wiretap Law ...again

PA - Police say a western Pennsylvania teen who recorded his principal making threatening comments toward him has a history of secretly recording school officials.

Chief Allen Park tells The Pittsburgh Tribune-Review that Churchill police charged the 14-year-old Woodland Hills High School student with violating Pennsylvania's wiretap law earlier this year.

Park says the boy recorded a September meeting called to settle a dispute with another student without permission and then posted the audio on Facebook.

The teen now finds himself at the center of the controversy surrounding Principal Kevin Murray, who was placed on leave Wednesday after the boy produced a recording where Murray can be heard saying he would punch him in the face. more
 sing-a-long

Pennsylvania is a 2-party consent sate, meaning all parties to a recorded conversation must agree to the recording. 

And no, the principal is not me. I live in New Jersey... where the last words recorded might be, "Take him for a ride." ~Kevin

UPDATE - One of our sharp readers from Pennsylvania points out that the kid may not have broken the law after all. An exemption was amended to the state law in 2012...

§ 5704. Exceptions to prohibition of interception and disclosure of communications.

(17) Any victim, witness or private detective licensed under the act of August 21, 1953 (P.L.1273, No.361), known as The Private Detective Act of 1953, to intercept the contents of any wire, electronic or oral communication, if that person is under a reasonable suspicion that the intercepted party is committing, about to commit or has committed a crime of violence and there is reason to believe that evidence of the crime of violence may be obtained from the interception.

The Martini Olive Bug, or who was Hal Lipset?

He was a private investigator in San Francisco, and chief investigator for Sam Dash on the Senate Watergate Committee...

Francis Ford Coppola considered the implications of the professional eavesdropper when he made The Conversation... It should come as no surprise that Hal Lipset was hired as technical consultant for the picture.

Lipset spoke in Congress using the famous "bug in the martini olive" and other secret surveillance devices that he and his staff pioneered...

In 1964, Time Magazine wrote, "Hal Lipset, a seasoned San Francisco private eye, maintains a laboratory behind a false warehouse from where his eavesdropping ‘genius,' Ralph Bertsche, works out new gimmicks such as a high-powered bug that fits into a pack of filter-tip cigarettes..."

His first chance to go public on the national scene occurred the previous year when he was invited to testify before the Senate Constitutional Rights Subcommittee... "First I thought I’d dazzle them with an array of miniature devices they had never seen before; then I would surprise them by playing back my own testimony from a recorder I had hidden before the hearing."

The great idea worked too well. Lipset’s appearance was seen as a clever but ominous sign of   snooping running amok.
... the next time he was invited to Washington to speak before a Senate subcommittee - this one in 1965 to hear testimony specifically on eavesdropping - he renewed his efforts...

"We came up with the "bug in the martini olive" idea, it didn’t seem all that unusual. The martini glass was simply another example of how ingenious these devices could be."

The glass held a facsimile of an olive, which could hold a tiny transmitter, the pimento inside the olive, in which we could embed the microphone, and a toothpick, which could house a copper wire as an antenna. No gin was used - that could cause a short.

It was the bug in the martini olive that made Lipset "the real star of the day," as UPI reported. Hardly an ominous indication of private snoopers taking over the world, this little olive with its toothpick antenna became a "playful" and charming toy.
                                  ---
This is the very condensed version of his story. The full story is here,  as excerpted from his biography, "The Bug in the Martini Olive," by Patricia Holt, Little Brown, 1991 ~Kevin

Telephone Eavesdropper Learns The Beatles Were Right

UK - A multi-millionaire property developer strangled a burlesque dancer after bugging her home
and learning that she was planning to “fleece him”, a court heard yesterday.

Peter Morgan, 54, had been paying Georgina Symonds, a 25-year-old single mother, up to £10,000 a month to stop seeing other men after meeting her while she was working as an escort.

He decided to murder her after listening in to a telephone conversation in which she told a male friend that she was planning to leave Mr Morgan, a jury was told. more sing-a-long

Brooklyn Prosecutor Allegedly Wiretapped Cop Love Interest's Cell Phone

NY - A Brooklyn assistant district attorney was arrested this week for allegedly wiretapping two cell phones so she could hear conversations between a cop love interest and another woman.

According to a criminal complaint, Tara Lenich, 41, forged judges' signatures to authorize the wiretapping of the aforementioned unidentified cop's cell phone, as well as a phone belonging to an unidentified woman. Lenich, who was in charge of the Violent Criminal Enterprises Bureau at the DA's office, may have been romantically attached to the cop, and tabloid reports speculate the wiretapped woman was his new love interest.

The complaint says Lenich forged warrants related to the wiretapping at least 20 times, using different judges' names, between August 20, 2015 and November 25, 2016. Lenich allegedly called the wiretapping a "secret outside investigation" when discussing it with colleagues. more

The Most Intrusive Spying Powers in the “History of Western Democracy.”

Britain’s Investigatory Powers Bill, voted through Wednesday, 

gives the government what critics claim will be some of the most intrusive spying powers in the “history of Western democracy.”

U.K.-based Internet service providers will be expected to keep full records of every customer’s browsing history, stretching back a year, and the statute will provide enough legal clout for the government to force companies to decrypt data on demand as well as create security backdoors on the devices they sell in order to facilitate spying. more

Shazam, You're Bugged!

Shazam Keeps Your Mac’s Microphone Always On, Even When You Turn It Off

What’s that song? On your cellphone, the popular app Shazam is able to answer that question by listening for just a few seconds, as if it were magic. On Apple’s computers, Shazam never turns the microphone off, even if you tell it to.

When a user of Shazam’s Mac app turns the app “OFF,” the app actually keeps the microphone on in the background.

For the security researcher who discovered that the mic is always on, it's a bug that users should know about. For Shazam, it’s just a feature that makes the app work better. more