Thursday, February 16, 2023

Spy History: The "Detective Dictograph"

The General Acoustic Company in New York manufactured and sold the "Detective Dictograph" which they patented in 1907--only ten years after Marconi's first successful transatlantic radio transmission.

The "Detective Dictograph" was a neat suitcase with a complete covert electronic audio surveillance system, which included a special carbon microphone for concealment and a long cable to run to the suitcase where the operator would covertly monitor the audio on headphones in the next room.


Yes, people were electronically bugging other people over 100 years ago.




NLRB vs. Employer Surveillance of Employees

A significant concern for managers of remote workers is the ability to engage, manage and monitor performance and productivity
– and some healthcare employers have turned to technologies like tracking employee keystrokes, capturing screenshots, and on-camera requirements for employees during work hours.

This has caught the attention of the National Labor Relations Board’s General Counsel Jennifer Abruzzo, who recently issued a memorandum seeking to broaden of the National Labor Relations Act (the “Act”) and limit the electronic surveillance of employees...

Under well-established law, an employer can be found to violate Section 8(a)(1) of the Act if it implements new monitoring technologies in response to union and other protected activity, uses existing technologies to discover such protected activity, including by reviewing security-camera footage or employees’ social-media accounts; or creates the impression that it is doing such things. more

Possible New Exception to the All Party Consent Wiretap Law

Maryland is currently considering Senate Bill 749, permitting a person to intercept wire, oral, or electronic communication under certain circumstances. The bill was introduced on February 6, 2023, and has been assigned to the Judicial Proceedings Committee. If passed, the bill would amend the existing law prohibiting the interception of any communication without the consent of the parties involved.

Currently, Maryland law states that any person who willfully intercepts or discloses wire, oral, or electronic communication without the consent of the parties involved is guilty of a felony and is subject to imprisonment for up to five years or a fine of up to $10,000 or both. However, Senate Bill 749 would provide an exception to this law, allowing a person to intercept communication without the consent of the parties involved if the person reasonably believes they are in imminent danger of becoming a victim of certain crimes.

The proposed amendment to the law would allow a person to intercept communication if they reasonably believe they are in imminent danger of becoming the victim of a crime of violence, stalking, abuse, or a violation of a protective order. more

The Missing "Key Fob" That Made a Lt. Col. Sweat

An Army officer who leads ROTC at California Polytechnic State University faces criminal charges after a preteen girl found a recording device reportedly belonging to the officer and allegedly containing secretly captured images from multiple retail store dressing rooms.

Police claim Lt. Col. Jacob Sweatland, 39, called the store in Pismo Beach, California, asking whether anyone had found what he called his “key fob.”

Police were investigating the matter after a preteen girl found the device — and local law enforcement reviewed the contents of the device, which included images from dressing rooms from multiple stores. more

Sunday, February 12, 2023

Patent: Adding a Camera to the Apple Watch

Apple was granted a new patent for a detachable watch-based camera retention system...


This new strap-based system is hardly Apple's first attempt at patenting watch-based camera functionality. In 2019, the company was awarded US-10331083-B1 for a watch band with an integrated, flexible optical sensor. If made available, this rotatable camera would allowing photos to be taken without the need to remove the watch from the user's wrist...

While a high-quality embedded camera could have practical use for some, it does raise potential privacy and security concerns for others.

The ability to capture photos covertly by removing the need for a larger, handheld camera or phone opens the door to anything from secret, unauthorized, and compromising photos to increased risk of corporate espionage

The embedded cameras would require a new level of security and awareness to ensure they were not improperly used in areas such as schools, locker rooms, restrooms, or in areas where confidential documents and information are at risk of being captured. more

Believe It or Not: Phone Company Not Taking a Customer's Money

South Africa: Police can’t pay network provider Vodacom for spying services, hampering crime-fighting efforts.

Efforts by the SA Police Service to fight crime were hampered after cellphone network provider Vodacom cut services, such as assisting in locating, intercepting calls and eavesdropping on calls and messages for all the network’s subscribers.

Crime intelligence requires cellphone network providers to spy on criminal suspects so that evidence can be obtained through a call interception process. more

Teacher Taps Her Way Into Their Hearts

PA - Wiretapping Charges - A Laurel Highlands High School teacher is accused of recording a student without his permission and sending the video to another student.

Ashley Thurby-Kolesar, 33, of Uniontown, faces felony charges of intercepting communications, disclosing intercepted communications and criminal use of a communication facility.

According to the criminal complaint, state police began an investigation into Thurby-Kolesar in mid-January amid concerns she was having an inappropriate relationship with a 17-year-old student. more  video

Corporate Espionage Can Be Very Cost-Effective (if undetected)

UK - A traffic clerk at a London warehouse was asked to leak confidential corporate information to a rival in exchange for a £50 payment from a delivery driver, according to an extraordinary corporate espionage claim lodged in the High Court. 

In the claim filed last week, Sheffield-based logistics firm Tuffnells alleged that DX Group employees Tom Middlewood, Jim Sinden and Joe Trappitt — all former employees of Tuffnells — conspired to obtain daily customer service reports. more You may also want to read: The Employee Competitor… and what to do about it

Spy History: Life Imitates Art - The Shoe Bug

...The discovery of a “shoe bug” then prompted SY (US State Department - Division of Security) to modify its ACRs (Acoustic Conference Room)...
In 1969, Harry G. Barnes, Jr., Deputy Chief of Mission in Bucharest, Romania, called a classified conference, which met in the “bubble.” SY officer Lou Grob was monitoring the meeting from another room and heard the conversation. He immediately informed the Administration Officer (the RSO’s superior) that there was a bug in the ACR. After searching, they found something resembling Don Adams’s “shoe phone” from the 1960s television series Get Smart!--the bug was located in the heel of Barnes’s shoe. 

Barnes had had the butler take his shoes out to be modified, and someone had installed the bug in the process. After this incident, SY officers covered ACRs with Reynolds plastic wrap to reduce the radiation of low-power devices such as shoe bugs until the proper security modifications could be made. more  "Psst... Wanna buy some spy shoes? Click this."

Tuesday, February 7, 2023

Balloon Incident Reveals More Than Spying

There is nothing new about superpowers spying on one another, even from balloons. But for pure gall, there was something different this time...

It may be months before American intelligence agencies can compare the audacious flight of a Chinese surveillance balloon across the country to other intrusions on America’s national security systems, to determine how it ranks.

After all, there is plenty of competition.

There was the theft of the designs of the F-35 about 15 years ago, enabling the Chinese air force to develop its own look-alike stealth fighter, with Chinese characteristics. There was the case of China’s premier hacking team lifting the security clearance files for 22 million Americans from the barely secured computers of the Office of Personnel Management in 2015. That, combined with stolen medical files from Anthem and travel records from Marriott hotels, has presumably helped the Chinese create a detailed blueprint of America’s national security infrastructure...
Not surprisingly, now it is coveted by military and intelligence officials who desperately want to reverse-engineer whatever remains the Coast Guard and the Navy can recover. more

Extra Credit: Spy vs Spy: A brief history of balloon spying & Thaddeus S. C. Lowe

NY AG Spikes Spyware

The New York Office of the Attorney General has announced punitive measures against Patrick Hinchy and 16 of the companies he owns, for illegally promoting spyware.


Since 2011, Hinchy has owned and operated numerous companies, including the 16 investigated by the New York OAG, for selling and promoting spyware targeting Android and iOS devices, including Auto Forward, Easy Spy, DDI Utilities, Highster Mobile, PhoneSpector, Surepoint, and TurboSpy.

Once installed on victim devices, the spyware would collect and exfiltrate data such as call logs, text messages, photos, videos, emails, Chrome browser data, location, and data from messaging and social media applications, including WhatsApp, Skype, Facebook, Instagram, and Twitter.

The spyware was sold to ‘customers’ looking to spy on their spouse, colleagues, or other individuals, and was installed on the victims’ devices without their knowledge and without notifying them of the data collection and exfiltration activities...

Collected data, the New York OAG has discovered, was being transmitted in an insecure manner, which exposed it to potential cyberattacks and snooping...

The New York OAG fined Hinchy and his companies $410,000 in penalties and ordered them to modify the software so that it would notify device owners of the data collection activities. more

AT&T Goes to the Dogs... or, Fetch 5GK9

AT&T has partnered with Ghost Robotics to test the many use cases of a fleet of 5G-connected robotic dogs in public safety and first response...

Surveillance
One use case involved robotic dogs with wireless network-connected cameras that were deployed at military bases for patrol. At Tyndall Air Force Base in Florida, video feeds in real-time are sent to base personnel who always track activity on the base.

This same robotic dog could be used in commercial use cases either indoors or outdoors to patrol the perimeter of structures such as warehouses, logistics facilities, shopping malls or fleet centers. more

Thursday, January 19, 2023

Workers Foil Bosses’ Surveillance Attempts

Companies tracking employees’ productivity run up against inventive workarounds.

Lisa Crawford... is wary of her computer falling asleep when she gets up to throw in a load of laundry...Her solution? Sloth TV, a live-cam of a Costa Rican wildlife rescue ranch...Ms. Crawford pulls up the stream on a second monitor. Her computer stays awake...

Mr. Dewan had learned that his computer wouldn’t go to sleep or mark him as “idle” during a presentation...

Mr. Abbas wrapped the cord of his computer mouse around a rotating desk fan. Its motion kept the mouse moving and prevented his computer from shutting down. “I logged on, went to the gym,” he says.

For workers who aren’t as handy, mouse jigglers are for sale on Amazon. “Push the button when you’re getting up from your desk and the cursor travels randomly around the screen—for hours, if needed!” says one review. more

How IBM Trolled East German Spies

In the late 1960's IBM knew its technology was being smuggled into Communist block countries. One designer decided to sent a message etched into one of the circuit boards of the IBM 360 computer. Written in Russian, the message loosely translates to, "When do you want to stop to swipe. Own design is better."


Thanks to one of our readers... Hi Kevin,
Your latest post incorrectly states the name of the U.S. company whose semiconductor engineers put a hidden message in their computers for GDR's Stasi semiconductor spies to see. I said "DEC" in my email because that was the name of Digital Equipment Corporation--not IBM.

Also, the message wasn't "etched into one of the circuit boards of the IBM 360 computer", as you stated--it was microscopically etched onto the silicon die of a DEC memory chip that was used in DEC (not IBM) computers, and could only be seen after someone used acid to dissolve the chip packaging to expose the die for reverse-engineering. I thought all that would be clear to you from the video, so I didn't belabor it.

You might want to correct that info on your website.

Cheers,

Attorney's Wiretap Claims Against Old Firm To Continue

Vrdolyak Law Group LLC must face a proposed class action alleging it recorded the conversations and phone calls of employees without their consent in violation of the Federal Wiretap Act and state laws, a federal court ruled.


Plaintiff Daniel Alholm timely filed his state and federal wiretapping claims against the law firm, Judge Mary M. Rowland of the US District Court for the Northern District of Illinois said Tuesday.

Rowland rejected the firm’s argument that Alholm filed the wiretapping claims after the two-year statute of limitations had run, and denied its motion to dismiss as to those claims. She also dismissed Alholm’s fraud claims against the firm, but affirmed that the court would exercise supplemental jurisdiction over his state law misappropriation of likeness claims.

Alholm alleged that the firm surveilled employees in both its Chicago and Nashville offices, recorded conference calls and employees’ individual calls, and made unethical management and financial decisions. more

Moral: If you are a business that needs to record workplace activity, consult with a law firm that knows the local laws, first.