See Cruise Headed to Court May Divert to Arbitration

A cruise ship crew member who planted a hidden camera to watch a young girl undress in her cabin may have spied on over 900 passengers, a class action lawsuit alleges. Lawyers who filed the civil lawsuit in a Miami federal court last October want each of those people to be able to hold the company accountable and receive damages. But Royal Caribbean, the world’s second-largest cruise ship company, has pushed back.

Background: Mirasol, a room attendant, regularly cleaned passenger rooms, restocked towels and changed sheets on Royal Caribbean’s Symphony of the Seas, a vessel that carries 5,518 passengers and 2,200 crew members. But that wasn’t all he did, according to court filings and the criminal complaint from the Broward County Sheriff’s office. Searching his electronic equipment including a USB stick device, law enforcement agents found “several videos of naked females undressing in their bathrooms.” One girl seemed to be 10 years old, they said. He’d planted small, secret cameras in passengers’ rooms.

Push Back: Royal Caribbean wrote in a court filing. “Plaintiffs agreed in their digitally signed ticket-contract that all claims for mental or emotional injury must be resolved through arbitration.” Arbitration is a secretive process often favored by companies. (more)

A Load of Code Hits the Road

A former engineering manager misappropriated millions of lines of proprietary source code during the transition period following Elon Musk’s acquisition of the social media platform now known as X... The company reports that it did not become aware of the alleged code exfiltration until nearly two years later. Case Name: X Corp. v. Yue et al. Court Name: U.S. District Court for the Northern District of California Case Number: 4:25-cv-10423 (more)

Three security safeguards recommended: Recording in the Workplace Policy, Storage Media Policy, and Data Movement Monitoring.

Smart Dust Microscopic Spy Sensors...

... Nothing to sneeze at.

In a groundbreaking fusion of science fiction and reality, smart dust technology—tiny, wireless sensors capable of gathering vast amounts of data—promises to revolutionize industries from environmental monitoring to healthcare while raising significant ethical and privacy concerns.

The concept of “smart dust” might sound like something from a science fiction tale, but it’s gradually becoming an integral part of modern technology. Originating as a theoretical proposal for the Defense Advanced Research Projects Agency (DARPA), smart dust has evolved into a promising tool for various industries. From environmental monitoring to intelligence gathering, these microscopic sensors offer a wide range of applications. As they continue to develop, the potential to revolutionize data collection and interaction with our environments becomes increasingly apparent. This article delves into the origins, current developments, and future implications of smart dust technology. (more)

Potty Cam, or Dr. Crapper makes a house call.

Kohler's toilet camera takes things to a new level. The company, which has been developing toilet tech for years, dropped the Dekoda, which aims a camera at the water (and everything else in it) to get various health-related readings...

Once you install the Dekoda and you're ready to use the toilet, you need to sign in. You can do this on the app or you can put your finger on the optional fingerprint scanner. After you use the toilet, the system gets to work on scanning your waste. It develops data related to your gut health and hydration and also detects blood, which can be important to know about...

Of course, it's 2025 and everything has a subscription. To get a look at all of the Dekoda's "insights" and data about your poop on the Kohler Health app, you'll pay a monthly fee. The app is going for $6.99 per month for an individual, or you can play $12.99 a month for the family plan. (more)

Furbo The Robo - Pet Surveillance Camera

Robots don't have to look humanoid. Your pet doesn't care, especially if it tosses treats. Just hope it is not catnip for hackers...

• FULL HD CAMERA WITH 360° ROTATING VIEW 
• REAL-TIME 2-WAY AUDIO & COLOR NIGHT VISION
• FUN ADJUSTABLE TREAT TOSSING
• INSTANT SMART ALERTS
• BARKING SENSOR (Yes, there is a cat version.)
• EASY SETUP, SECURE CONNECTION
• SUBSCRIPTION (wait, what?!?!)

When you can't remote work, remote pet? Next up, a robot that solves the remote walking issue. (more)

10 Years Ago this Month - From the Security Scrapbook

Excellent camera installation. (more)

BTW, infrequent Security Scrapbook posts recently due to working on another project. All ok here.

Spy History - 'The Spy Queen Was A Nympho!" (UPDATE)

On November 23, 2011 the Security Scrapbook featured a post about Martha Dodd. Whatawoman! Well, she is back today with even more juicy background information.

Brendan McNally wrote a book about her; the only one I know of. It is called, Traitor's Odyssey: The Untold Story of Martha Dodd and a Strange Saga of Soviet Espionage. (Go ahead, buy it.)

Brendan and I crossed paths this month. 

This is his story behind the story...

"When I was a reporter in Prague in 1992, I got to know her secretary. Martha was not a nice person, but she actually helped finance Vaclav Havel and the 1989 Velvet Revolution. Go Figure!

"Having spent altogether too much of my post-adolescence researching Martha, what parting thoughts do I have on her? Well, for someone as incredibly guilty as she was, she wasn't actually guilty of very much. Her intent was all there. She was ready, willing, and able, but the officers of the New York rezidentura* were too busy trying to steal the atomic bomb to even have the spare moment about how she could be used as a spy. It's like a dirty movie where the character can't manage to get anyone to have sex with them. She did everything she could: hosting fun country weekends for everyone at the Soviet consulate, pool tennis courts, pony rides, open bar... but nothing!

"Dora, the colleague of mine who'd worked for her, called Martha Dodd, 'a nobody trying to be a somebody.' In the end, she died inadvertently at the hands of the secret police, who'd gotten it into their heads that she had gold!

"If they ever make a movie about this woman's life, I hope John Waters directs it."

I am still laughing.

* In the context of espionage, a rezidentura is a Russian intelligence station in a foreign country, often located within an embassy, that serves as a base for a group of agents known as resident spies.

Spybuster Tip: How to Set Up and Use a Burner Phone

Obtaining and using a true burner phone is hard—but not impossible. Here are the steps you need to take to protect your mobile communications based on the risks you face.

Burner phones, which are often “dumb” flip phones, can be loaded with prepaid minutes and offer anonymity when rotated frequently, purchased with cash, and siloed from any connections to you or your digital life. The idea is that cops, or other actors, are unlikely to be tracking a fresh burner phone in real time. But the crucial additional layer of protection that properly used burner phones offer is that even if they are—or they later tie communications from a burner phone to activity they are investigating—they can’t use digital ties to establish who was using it. (Full article in Wired Magazine.)

Sextortion with a Twist: Spyware takes Webcam Pics of Users Watching Porn

SEXTORTION-BASED HACKING, WHICH hijacks a victim's webcam or blackmails them with nudes they're tricked or coerced into sharing, has long represented one of the most disturbing forms of cybercrime. Now one specimen of widely available spyware has turned that relatively manual crime into an automated feature, detecting when the user is browsing pornography on their PC, screenshotting it, and taking a candid photo of the victim through their webcam.

Researchers at security firm Proofpoint published their analysis of an open-source variant of “infostealer” malware known as Stealerium that the company has seen used in multiple cybercriminal campaigns since May of this year. 

The malware, like all infostealers, is designed to infect a target's computer and automatically send a hacker a wide variety of stolen sensitive data, including banking information, usernames and passwords, and keys to victims' crypto wallets. Stealerium, however, adds another, more humiliating form of espionage: It also monitors the victim's browser for web addresses that include certain NSFW keywords, screenshots browser tabs that include those words, photographs the victim via their webcam while they're watching those porn pages, and sends all the images to a hacker—who can then blackmail the victim with the threat of releasing them. more

Maybe Minority Report was a Documentary All Along?

Flock Safety’s CEO Garrett Langley told Forbes he believes his surveillance tech company could curb most US crime in the next decade, which is… quite a statement. 

His $7.5B business is actually off to a strong start, though: eight years in, Flock has 80k+ cameras keeping watch over roads and parking lots nationwide. And now they’re upping their dystopian pursuits, rolling out their own drones — with their cameras mounted on them, naturally. 

For now, Flock is mostly reading license plates and detecting gunshots. For now. more

Hackers Are Using AI to Steal Corporate Secrets and Plant Ransomware

In one of the most recent examples, a hacker discovered an exploit in Anthropic’s Claude chatbot that allowed them to “commit large-scale theft and extortion of personal data” at 17 (and perhaps more) organizations in the health care, emergency services, government, and religion industries.

The hacker then threatened to expose that data, demanding ransoms that, in some cases, topped $500,000. (Anthropic did not name any of the 17 organizations that were impacted by the hack.) more

People Are REALLY Mad at These AI Glasses That Record Everything Constantly

Users on social media have responded with horror and outrage to a pair of smart glasses developed by a startup called Halo that its creators, a pair of Harvard dropouts, claim will feed you live AI-powered insights while logging and transcribing every conversation you take part in. So transformative will it prove to the human brain, the twenty-something-year-old inventors promise, that wearers will soon be not just thinking, but "vibe thinking."

Many were quick to raise alarm over the obvious nightmare this would be for personal privacy — not just for the wearers, crucially, but anyone they interact with. more

Security Director Alert: Employees Are Packing

This media advice to employees may lead to corporate espionage. BOLO

Worried About Losing Your Job? Pack a Digital Go Bag

It’s now more common for layoffs to happen through account lockouts. Every employee needs to download their most important files from work, and update them periodically.

What Is a Digital Go Bag?
A digital go bag or virtual go bag is an electronic version of a traditional go bag—a bag you pack ahead of time that has everything you need in case you have to leave in a hurry—and it's meant specifically for work. If you got laid off or fired without notice, what documents and information would you most want to keep hold of? 

How to Make a Digital Go Bag
First, identify the documents you want to take with you. Second, decide how often you need to download the items in order to keep your go bag up to date. Some, like performance reviews and tax documents, might only be updated once per year. Others, such as emails between you and your supervisor, might pile up quickly enough that you decide to download them quarterly. more

Spybuster Tip: iPhone 'secret code' reveals if someone is spying on your text message

Apple has a little-known security feature, often described as a hidden 'secret code,' that can reveal if someone is snooping on your private conversations. 

Every iMessage chat generates a unique security code, like a digital fingerprint. If you and your contact see the same code, your messages are safe and fully encrypted.

To make this process easier, Apple introduced Contact Key Verification, found under Settings and Apple ID, which displays a verification code that you and your iMessage contacts can compare. 

If the codes line up, you can tap Mark As Verified, which saves the code to that person's contact card. more

Recent Spy Camera News

• Student’s Federal Suit Claims URI Defamed Her After She Was Victim of Video Voyeurism in Bathroom

A University of Rhode Island (URI) student has sued the school, after she says a man in a unisex bathroom on campus recorded her while she was showering - and that the university subsequently “defamed” her...She has filed the lawsuit as “Jane Doe,” and she is seeking “an order that the Defendants make whole the Plaintiff with appropriate compensation for emotional and physical distress, loss of consortium, and interest, in amounts to be proved at trial, and other affirmative relief necessary to eradicate the effects of their conduct.” more

• London teacher banned from classroom after changing room voyeurism conviction
UK - A teacher who tried to take photos inside some female changing rooms has been banned from the classroom indefinitely. Christopher Arnold, 40, was convicted of a voyeurism offence and placed on the sex offenders register for five years in 2022 after holding up his phone camera to the window of some changing rooms, but maintains he did not actually manage to photograph anyone. more

• Stalker escapes jail after installing covert camera in his ex-wife’s home

NI - A Co. Antrim man whose “appalling behaviour” saw him cable-tie a tracking device to his ex-wife’s car and install a covert camera in her home during a two-month stalking campaign escaped jail today...The stalking was uncovered in April last year when his ex-wife found a tracking device attached to her car. Initially there was no evidence linking Dougan, but two days later she produced proof the device had been cable-tied behind her rear wheel.

• Five MSPs 'filmed by spy cam hidden in parliament toilet

UK - At least five MSPs along with several journalists and staff have been contacted by police over alleged secret toilet recordings in Parliament. Detectives have begun interviewing people already identified in footage understood to be from a covert camera hidden in a cubicle in the Holyrood building. more

• Hidden camera in the women’s toilets at his workplace

Greece - The case came to light when a 50-year-old female coworker at the office in Pallini, in eastern Athens, discovered the device and filed a complaint with local police. Officers recovered a memory card from the camera containing footage of the man adjusting the device. (doh! Darwin Award) more

• Police arrest man after recording device found in North Grenville daycare

Canada - Ontario Provincial Police are investigating the discovery of a recording device inside a daycare in North Grenville.

Police say officers with the Grenville County OPP Detachment received a report on Aug. 20 that a recording device was found and an investigation was launched into the “apparent act of voyeurism.” 

more

•  Foot Cam Man

Australia - A man has been charged after allegedly filming teenage girls with video cameras hidden inside his shoes (photo) in Sydney’s inner west. Police allege the 49-year-old man placed modified cameras within the lacings of his shoes and filmed teenage girls in public without their consent. The girls were believed to be aged between 12 and 15, police said. more