Saturday, April 10, 2010

Don't mention the 'explosive' diarrhea you picked up on your trip.

If you are boarding a plane within the European Union you may want to watch what you are saying, as under a new security programme someone is likely to be listening in...
 
The EU is funding a new security program which will be monitoring "suspicious" behaviour on airplanes in Europe. 

The project, designed to combat terrorism, uses a combination of cameras, microphones, explosives detectors and a sophisticated computer system which would give a pilot early warning of any danger. 

Brussels is funding research at Reading University at the moment and the project could be rolled out within the next few years. But the work has alarmed civil liberties campaigners who fear the growth of the big brother state. (more)

Thursday, April 8, 2010

EU Investigates Mystery Buggings

European Union officials have launched an investigation after bugging devices were found at offices used by several delegations - including those of France, Germany and the UK.

Extra security measures have been adopted ahead of a meeting of EU leaders in Brussels on Thursday and Friday.

Spanish, Italian and Austrian offices had also been bugged, officials said...

EU spokesman Dominique-Georges Marro said it was "impossible at this stage" to determine who had planted the devices. (more)

Corporate Espionage: Five Areas Where You Could Be Caught Napping

1. Know Your Company’s Strengths.
While there aren’t many business managers who don’t know where their profit comes from, a significant number will automatically assume that it is only the strengths that drive those profits that someone else might wish to steal. The two do not necessarily equate. What may appear to you to be a minor part of your production chain could be the missing link for a domestic or overseas competitor.

2. Know Your Employees and the Stresses and Strains They’re Under.
The global financial crisis might be only one reason why some of your staff members are desperate for cash.  

3. Physical Security.
Know who’s coming in and out of your firm’s premises. Some companies have no policy on visitors, whether friends, customers or prospective clients. Even inquisitive members of the public sometimes gain access through sheer gall and boldness. Consider the areas to which general staff access should be restricted. Don’t forget to screen your cleaners, caterers, as well as your security guards. Anyone who has access to your premises during or after working hours is a potential threat, either through accessing sensitive information or planting listening devices.

4. Electronic Security.
This is a huge area where every business should regularly seek professional advice on the sort of equipment installed and the ways in which it is used. Anti-virus software and firewalls won’t offer much protection against a concerted attempt to penetrate your operations.
5. Personal Security.
Most employees – through no fault of their own – will lack the sense of security with which you would hope they’re endowed. You need to regularly reinforce for them your company’s security requirements, and the best way to do this is to keep it simple. (more)

Dumpster diving for advice provides far less than it costs...



"The Internet is a city of mental nourishment.

You can pick dumpsters for your food, or you can spend some money and visit a fine restaurant." ~ Chef Kevin

Do-it-yourself bugging (dumpster a la law suit)
"Morally it won’t be correct to eavesdrop on an individual’s personal discussion, but through electronics you can always and every time find a way of fulfilling your wishes no matter whether the act is ethical or not." (more)

Do-it-yourself de-bugging (dumpster a la lie)
"If you find yourself the victim of a nasty lawsuit, industrial espionage, or an intrusive ex-spouse, be on guard against audio surveillance... With proper equipment and the vigilance to use it on a regular basis, you can minimize the risk of electronic eavesdropping." (more)

Eat smart.

Wednesday, April 7, 2010

Meet the Canadians who busted GhostNet

A team of Canadian researchers revealed this weekend a network, dubbed GhostNet, of more than 1,200 infected computers worldwide that includes such "high-value targets" as Indonesia's Ministry of Foreign Affairs and the Indian Embassy in Kuwait, as well as a dozen computers in Canada.

The revelation left government bodies around the world scrambling to determine what sensitive files may have been compromised by the cyber-spy network, which even now continues to spread and infect, its authors apparently undaunted by all the extra attention. (more)

The Smallest SpyCam in the World

Muvi by VEHO – Smaller than the average thumb!

2" x ¾" x ¾" It's the smallest spycam in the world. You can even wear it around your neck and use it as a webcam.

Muvi has a special VOX mode that lets you start/stop recording using your voice
Inserting the 2GB Micro SD card Micro SD card slot
Despite its size the Muvi records in VGA quality (640x480). Incredible! Videos are stored on the included 2GB Micro SD card (1 hour of recording!), but for those of you who prefer real epics the Muvi can handle cards up to 8GB. (more) (sample videos)

Tuesday, April 6, 2010

Wiretapping + Blackmail = $$$

Turkey - Former Fenerbahçe soccer player Rıdvan Dilmen was arrested on Tuesday as part of a suspected organized crime group that allegedly wiretapped prominent figures, the Anatolia news agency has reported.

Thirty-six people, including Fenerbahçe's legendary player, were arrested in four different provinces in simultaneous operations conducted by the National Police Department.

These detainees allegedly wiretapped prominent figures such as businessmen, celebrities and soccer players. Police have also taken the testimony of another legendary soccer player, Tanju Çolak, under the scope of the operation. (more)

Spybusters' Tip - High profile individuals and prominent executives - Hire a reputable specialist to check for bugs, taps and spycams on a regularly scheduled basis. Be sure to investigate the specialist's background and credentials. You really don't want to hire an organized crime "front company" to conduct your sweep.

Keeping up with privacy news...

Privacy Journal specializes in reporting on the individual's right to privacy.

The monthly newsletter was founded in 1974, before there was an Internet, before there was e-mail, and before there was automated telemarketing. Thus, it's the oldest publication on privacy in the world.

It is always full of news on new technology and its impact on privacy, tips for protecting your privacy, and the latest on court decisions, legislation, professional conferences, and corporate practices.

Robert Ellis Smith, who is recognized as the leading expert on the right to privacy in the U.S., is the publisher. (more

In addition to the journal, PJ is an exceelnt source for specialized privacy information...
Compilation of State and Federal Privacy Laws
Ben Franklin's Web Site. A book about privacy in American history - from our founding to the present.
The Directory of Privacy Professionals
and more.

"I'm gonna super-size your butt, clown!"

NJ - Police have charged a man who they say climbed in a drive-thru at a New Jersey McDonald's because he was tired of waiting for his Filet-O-Fish sandwich.

Rashon East was charged with simple assault and making terroristic threats after he turned himself in to South Brunswick police on Monday. East paid for the sandwich at the first window. Surveillance video then showed the man climbed out of the back seat and into the pickup window.

Police say East felt intense pressure to surrender because of media attention from videotape and pictures that were released. (more
 
Spybusters' Tip - Never underestimate the power of pro-active video surveillance. Logging entry / exit activity at your doors is one good counterespionage deterrent.

Friday, April 2, 2010

21 Technical Secrets (and their solutions)

via pcworld.com  
Here are 21 dangers that the industry is hiding from you--and what you can do about them. 

Don't despair. For every dirty little secret revealed herein, we describe a fix or a way to work around it (if any exists). You don't have to be a victim, if you know what to do.
  • Your Webcam May Be Watching You
  • Your Cell Phone Is a Homing Beacon
  • Your Facebook Apps Are Spying on You
  • Cell Phones Don't Crash Airplanes
  • Your Boss Can (and Probably Does) Monitor Your Computer
  • Your Geolocation Data Is Not Private
  • Your Passport Could Make You a Target for Crime--Wirelessly
  • The Social Web Never Forgets
  • Antivirus Software Won't Protect You 
  • The Cyberwar Is Heating Up (and Uncle Sam Is Losing) 
  • Google Could Rat You Out
  • You Can Escape Almost Any Service Contract Without Penalties
  • Your ISP Is a Copyright CopYou Can Fight the RIAA and Win
  • A 'Cheap' Smartphone Is a Rip-Off
  • The NSA Is Tapping Your Data Stream
  • Pacemakers and Other Implants Can Be Hacked
  • Your PC May Be Killing YouYou're Spending Too Much on Printer Ink
  • End User License Agreements May Not Be Enforceable
  • 'Private' or 'Incognito' Browsing...Isn't
When not polishing his tin-foil hat, Contributing Editor Dan Tynan tends his geek-humor empire at eSarcasm.

Stare Bear "I don't want him daddy, he's creepy."

via ThinkGeek...
"The Tell Me Your Secrets Bear is an adorable plush that will be your wee geek's closest confidante. When hugged, he'll profess his love for your child, and stress that friends always share their secrets. He'll ask, "Do you have a secret, best friend? You can tell me anything." When the bear completes a trigger phrase, the audio and video turns on, recording your child's secrets, which are then wirelessly transmitted to you via email (or Twitter). Of course, mostly you'll hear things like, "I really wish Mommy would cook more bacon" or "Is this real life?" but every once in a while, you'll get valuable intelligence that will help you become a more casually despotic parent. We guarantee it." (more) (funny video)

Wednesday, March 31, 2010

Poll Results - Would you sell your employer's secret information? (assume you would not be caught)

Apparently, our readership is pretty honest. Not surprising, you're not the typical employee. You have an interest in security.

However... considering the makeup of the group, the dishonest results are alarming — 29% admit they do, or might, commit espionage! 

Numbers lie. I suspect many who answered "Heck, I do that now" have a sense of humor like mine.

But what about that 8%? And, would that number be higher in the general (non-security minded) population? 

Thought... If your organization doesn't have a counterespionage strategy yet, you had better visit your local strategy shop.

GPS Tracker (with audio eavesdropping) Update

About 3 years ago the Security Scrapbook alerted you to a tracking device with eavesdropping capabilities

The folks at GoPass Technology Corp. have been really busy since then...

Their latest real time GPS trackers – with eavesdropping capabilities – can now...
  • Store data when out of cell range, and burst it back when it comes back in range.
  • Can send to two different computers. (Convenient home and office surveillance.)
  • Automatically snitch when the vehicle is moved.
  • Locate with assisted GPS. (Garage parking won't save you.)
  • Remotely immobilize the vehicle. (By killing the ignition... or the oil pump, which they suggest, but "don't recommend" in an Eddie Izzard sort of way.)
  • Send back data based on the preset time internal or based on the distance driven.
  • Read the voltage data by SMS message inquiry.
  • Get position data via a phone call. 
  • Set a timetable to send back data automatically. 
  • Snitch mode. (Teens will hate this.) Only sends data when a preset speed limit is exceeded.
  • And, a remote Sleep Mode. 
Need a "personal" tracker (with eavesdropping capabilities)? GoPass has you covered. "Don't leave home without it."

Why do I mention these things?
So you will know what you are up against.
P.S. Suspect you have something like this on your corporate vehicle (car, plane or boat)? Give me a call. I can help.

Saturday, March 27, 2010

Contest - You vs. the Swiss Army (USB)

Carl Elsener Jr, the current president of the Swiss army knife maker Victorinox and grandson of the company's founder, was in London this morning to promote the company's latest product: a secure USB flash drive.

And when he says secure, he doesn't appear to be mucking around. Victorinox is so confident of the combination of encryption and fingerprint security built into the drive that it has offered a reward to anyone who can crack it.

Think you've got what it takes to crack the Victorinox code? If you succeed, be prepared to walk away $100,000 richer. It's that simple.
Click here to to send us your registration by email!
View Rules and Regulations (PDF)

PS - If you screw it up, the data self-destructs!

Print Center Blues

Want to know what expenses your boss claimed last month? How much your colleague makes? What the co-worker down the hall is really working on? 

Forget about hacking their computers – you might want to hit the nearest photocopier instead... copy machines in your office keep a wealth of copied data on a hard drive that anyone can hack. 

In the age of everything digital, the photocopier is probably the one workplace item you never thought to worry about. It's just making a copy of a document, right? How risky could that be?

Very risky, as it turns out. (more)

Most print center manufacturers have add-on security software; one option worth opting for.