Wednesday, February 8, 2017

This Month's SpyCam Darwin Award - Shot While Spycaming

NY - An Erie County man has been arrested after spying on his neighbors with his cell phone.

Investigators said David Schindley's phone had more than 50 videos held closely to the windows of bedrooms, bathrooms or other rooms. The videos go back to this past October.

Schindley was taken into custody on Sunday after he was shot by a homeowner on the 500 block of Bald Eagle Drive. Deputies said the homeowner heard a noise and thought Schindley was trying to break into his home.

Schindley was shot in the leg, the homeowner who shot the suspect was not charged. more

Television-Spying Case - Vizio to Pay $2.2 Million

The Federal Trade Commission said Monday that Vizio used 11 million televisions to spy on its customers.

The company agreed to pay $2.2 million to settle a case with the FTC and the New Jersey attorney general’s office after the agencies accused it of secretly collecting — and selling — data about its customers’ locations, demographics and viewing habits.

“Before a company pulls up a chair next to you and starts taking careful notes on everything you watch (and then shares it with its partners), it should ask if that’s O.K. with you,” Kevin McCarthy, an attorney with the FTC’s Division of Privacy and Identity Protection, wrote in a blog post. “Vizio wasn’t doing that, and the FTC stepped in.”

As part of the settlement, Vizio neither confirmed nor denied wrongdoing. more

All Black's Bugging Scandal - Update

Australia - The security guard accused of fabricating the All Blacks hotel bugging scandal that rocked last year’s Bledisloe Cup has vehemently denied any wrongdoing saying: “I don’t know anything about this ­stupid bloody bug.”

Gravel-voiced Adrian Gard, 51... was charged with public mischief after a listening device was unearthed in the All Blacks’ team meeting room at the InterContinental in Double Bay...

Gard, who has 31 years’ experience in the security industry, is at the centre of a bizarre cloak and dagger scandal after a device similar to that used by law enforcement and spying agencies was discovered in a routine sweep of the team’s meeting room in August ahead of the clash with Australia. It was reportedly found in the foam of a chair...

Police will allege the security chief, who has protected the All Blacks for more than 10 years, claimed he “found” the device but investigators do not believe it was stuffed in a chair.

Gard, from Brisbane, will face court next month for the offence which relates to providing police with false information carrying a maximum 12-month sentence. more

Tuesday, February 7, 2017

Sad Story of the Beaten Bean Counter, or Wiretap Whistleblower Wasted

The Ninth Circuit on Monday dealt a final blow to a career prosecutor whose whistleblower lawsuit claimed the nation’s largest telecommunications bilked the federal government for surveillance services for two decades. 

The Ninth Circuit panel affirmed dismissal of prosecutor John Christopher Prather’s whistleblower suit...

He said the reduced labor should have lowered costs, but that the telecoms began charging law enforcement agencies, including the FBI and the Justice Department, fees 10 times higher than they should have been.

Prather, who reviewed the telecoms’ rate sheets and developed surveillance budgets as part of his duties supervising wiretapping activities, grew suspicious, and filed a qui tam action in 2009 under the False Claims Act. more previously in the Security Scrapbook

All Blacks Bugging: Man Charged

A man, understood to be a security consultant for New Zealand's All Blacks rugby team, has been charged over a listening device found in the team's Sydney hotel room during last year's Bledisloe Cup.

The device — described as similar to that used by law enforcement and spy agencies — was found inside a chair during a routine security search of the team's meeting room at the Intercontinental Hotel at Double Bay ahead of a Bledisloe Cup match against Australia last year.

Adrian Gard, 51, is understood to be a consultant for BGI Security which was contracted by the All Blacks during their Bledisloe Cup campaign.

He has been charged with public mischief over the bugging incident. more

Monday, February 6, 2017

Car Wars: Fifty Years of Backstabbing Infighting And Industrial Espionage (book)

Car Wars - An "astonishing...eye-opening chronicle" (Publisher's Weekly) of backstabbing, infighting, and industrial theft and espionage in the world's biggest business. It makes empires; it destroys economies; it shapes history.

Welcome to the world's biggest business--the automobile industry. A hundred years ago there were six highly experimental cars. Today there are close to 400 million cars on the planet: set bumper to bumper on a six-lane highway, they would stretch well over 200,000 miles, more than eight times around the earth.

With hundreds of billions of dollars at stake, is it any wonder that the major car companies wage a relentless war against one another, where (almost) anything goes? Here is the story of all the schemes and deceits, treacheries and shady deals in the battle for the world's car markets since the dawn of the global economy fifty years ago. more

The James Bond Movie Director Who Actually Was A Spy

That James Bond creator Ian Fleming drew literary inspiration from his wartime work in espionage is relatively well known. But the heroic World War Two exploits of the director of Bond films including Goldfinger and Live and Let Die are less well documented. more

Guy Hamilton's daring exploits can be relived on Inside Out South West on BBC One on Monday 6 February at 19:30 BST and on the iPlayer for 30 days thereafter

Security Director Alert - Check the Security of Your Networked Printers

Following recent research that showed many printer models are vulnerable to attacks, a hacker decided to prove the point and forced thousands of publicly exposed printers to spew out rogue messages.

Stackoverflowin claims to be a high-school student from the U.K. who is interested in security research...

The issue of publicly exposed printers is not new and has been exploited before to print rogue and sometimes offensive messages. However, the issue was renewed last week when researchers from Ruhr-University Bochum in Germany published a paper on different attacks against network printers and an assessment of 20 printer models. The researchers also released a Printer Exploitation Toolkit and published a printer hacking wiki.

Users should make sure that their printers can't be accessed through a public Internet Protocol address at all, Stackoverflowin said. However, if they need to do this, they should enforce access rules in their routers and only whitelist certain IP addresses, or set up a virtual private network, he said. more

I occasionally find networked printers are a back door to company networks. The most common issue is unsecured WiFi access. Have your IT department review this post and then double-check the security of the printers. Or, contact me for a complete technical information security inspection (TSCM). ~Kevin

Weird TSCM Science - Tuning Windows to Block Radio Frequency Eavesdropping

A new flexible material developed by engineers at the University of California, San Diego (UCSD) is claimed to be able to tune out various portions of the electromagnetic spectrum while allowing others to pass through, such as being opaque to infra-red but transparent to visible light, for example. This material has the potential to vastly improve the efficiencies of solar cells, or create window coatings that not only let in visible light and keep out heat, but also stop electronic eavesdropping by blocking electromagnetic signals.

Though still very much at the working prototype stage, the researchers intend to further their research by analyzing the effects of different materials, physical arrangements, and semiconductor properties in an attempt to create materials that absorb light at different wavelengths for use in a variety of applications.

The results of this research were recently published in the journal Proceedings of the National Academy of Sciences. more

How to be a Spy

Are you cut out for 00 status?

Rule #1 - Don't look goofy.
In America, spies in trench coats are usually bugging your office and listening in on your phone calls. In Britain, her majesty’s secret servants are busy code breaking between rounds of cricket.

In Vienna, instead, you just spend a day at the coffee house and, if you listen carefully, you will soon be up-to-date about the latest rumors of this city that loves secrets – and even more, to gossip about them on the sly...

Luckily, the city offers everything you need to live the high life of a spy. more

Sunday, February 5, 2017

Even Your Car is Spying on You

You may not know this, but your car is collecting lots of information about your driving habits and history.
Who has access to this data and for what purpose? We speak with Lauren Smith, policy counsel at The Future of Privacy Forum. audio download

Recent Spy Camera News

A radiologist at a private practice has been spared jail after stashing his mobile phone in an air vent to record patients using the unisex toilet. more

An Orleans Parish judge dealt several setbacks late Tuesday to a prominent New Orleans breast reconstruction surgeon who faces rape and video voyeurism charges. Dr. Alireza Sadeghi, 41, is accused of raping and surreptitiously filming his now-estranged wife and of videotaping four nude patients in the operating room without their consent. In at least one instance, prosecutors claim, Sadeghi forwarded the footage to a friend. His trial is scheduled for March 20. more

A Utah man and student at BYU-Idaho has been accused of placing a small camera in the bathroom of a Rexburg apartment where six female students live... Rexburg police say a small camera was found hidden inside a towel hook mounted in the bathroom. more

A handyman who was jailed for 24 weeks after he hid a spy camera in a woman's bathroom after being invited round to fix her banisters is appealing his conviction... The court had heard Burnett, 41, planted the covert device in a vase in the victim's bathroom and could control it using an app on his mobile phone. When the victim went to change the flowers in the bathroom two months later she discovered the device and contacted the police. more

Some Indiana lawmakers suggest drone users with nefarious intentions could be flying under the radar under existing laws. ...the proposal creates a “remote aerial voyeurism” crime and addresses penalties for sex offenders operating drones inappropriately. more

Shaun Turner accessed his victims’ personal webcams but was caught by the Eastern Regional Operations Unit (ERSOU) following a tip-off. Turner, 29, of Race Course View, Cottenham, was used a malware system known as a Remote Access Trojan or ‘RAT’, a court heard. The RATs used by Turner enabled him to download all files held on his victims’ computers – including personal pictures, videos and identity documents. In addition, he deployed software to victims’ computers that streamed live images taken by their webcam to his own computer to view. more

TV News Report: Peeping Toms Go High-Tech with Covert Cameras

When it comes to hidden cameras, cellphones are just the beginning. 12 News had two well-known licensed private investigators show us just how covert cameras have become...

So the question is, with cameras being so available and affordable – is there any way to protect yourself from being spied on without knowing it?

He showed us one of several products they have to detect hidden cameras.

The basic device uses a red strobe light to reflect light off the lens of a camera that may be hidden in an object.

They also sell radio frequency detectors which can help detect any wireless signals.

Still, according to our private investigators, neither detection method is full proof.

“There is no sense of protection in terms of a cure all,” George said, “if somebody wanted to set up a camera without your knowledge and you weren't inquisitive - you would never know it was there.”

He says simple awareness and just being inquisitive is your biggest weapon. more with video report

Learn how to discover covert spy cameras yourself.

Friday, February 3, 2017

Town Supervisor Resigns, Pleads Guilty to Felony Eavesdropping

NY - Geddes town supervisor Manny Falcone has just pleaded guilty to felony eavesdropping for ordering his secretary to illegally listen to conversations among others in the town hall...

Falcone admitted he ordered the audio capabilities on a town hall security camera to be activated so he could eavesdrop between February and September 2016. The camera was located in the main entryway of the building. more

Police Chief Pleads Not Guilty to Eavesdropping

CA - David Paul Edmiston, an acting Kern High School District police chief accused of surreptitiously recording his officers, pled not guilty in Kern County Superior Court Wednesday to four counts of misdemeanor eavesdropping.

Edmiston was named acting police chief in August, after Chief Joseph Lopeteguy, who alleged high-level school district administrators were illegally using a sensitive police database, went on medical stress leave. more

Spy History - Secret Radio Eavesdropping 'made operators deaf'

UK - 2 February 1982: GCHQ staff are suing for their loss of hearing after spending decades listening to ‘interesting’ frequencies...

...had been employed “to listen to radio signals — which the makers would not wish other people to listen to. “The desired signals would frequently be found among a large number of other signals — the way that one is accustomed to ‘finding on the ordinary radio particularly outside VHF and particularly in the evening.”

Many signals were “deliberately drowned” to prevent others hearing them. Their volume controls were always the highest pitch in case they missed anything. As a result, operators were listening to relatively faint signals among a barrage of much louder ones. Over a period of years, their hearing had been impaired. All had suffered from ringing in the ears.”

The case was settled a week later with damages of £25,000 paid to the operators. more

North Korea’s Spy Agency Head-less

The head of North Korea’s spy agency has become the most senior victim of another round of apparent purges ordered by the country’s leader, Kim Jong-un, South Korean officials have said.

Kim Won-hong, the state security minister and a close aide to the leader, was sacked in mid-January after being accused of corruption, abuse of power and human rights abuses, according to the unification ministry in Seoul, which handles cross-border issues.

It is not clear whether he has been permanently banished or ordered to undergo “re-education” with a view to being brought back into Kim Jong-un’s inner circle. His removal has not been confirmed by North Korea. more

Wiretap Warrant v. Data Warrant = Kinetic v. Static

A New Jersey appeals court has ruled that law enforcement agencies can view private messages and tweets from private accounts on Twitter if they get a warrant...

The case turned on what type of warrant is needed: a communications data warrant or a wiretapping warrant, which is needed for electronic communications in transit and has tougher legal requirements.

Essex County officials argued they were trying to access audio that had already been transmitted as opposed to live transmissions. The court agreed, ruling that law enforcement could use a data warrant.

According to Assistant Essex County Prosecutor Camila Garces, the court's ruling "ensures that the state can access electronic footprints when conducting a criminal investigation."

Defense attorney Lawrence Lustberg said that investigators should only have a right to see private message if they get a wiretap because they happen in real time. more

The Birth of WiFi — Thank you, Australia

Australian scientific invention — The invention of a new wireless data transmission system in the early 1990s led to modern wi-fi, the most popular way to connect computers without wires.

The prototype test-bed invented by researchers at the Commonwealth Scientific and Industrial Research Organisation (CSIRO) Invention leads to modern wi-fi.

CSIRO’s wireless local area network led to modern wi-fi and liberated the internet from dial-up. It marked a change in communication technology that is comparable to the invention of the telegraph in 1831.

The WLAN allowed instant contact with, and access to, information resources – anytime and anywhere in the world. It solved the main problem of indoor wireless networking – radio waves bouncing off walls and furniture, creating a distorted signal – by transmitting several signals over various frequencies simultaneously, merging into a complete signal at the reception point. more

Thank you, Mike! ~Kevin

Thursday, February 2, 2017

Spy Sites of Washington, DC (book)

SPY SITES OF WASHINGTON, D.C.
By Robert Wallace and H. Keith Melton (with Henry R. Schlesinger)

Spy Sites” could be considered two books in one. It is a capsule history of spying in and around D.C., with crisply written profiles of the major players.

Even intelligence buffs will encounter a few unfamiliar names. Consider, for instance, Thomas Atwood Digges, a Marylander who worked in London to free American sailors imprisoned by the British. Yet he was so sloppy with his accounts that Benjamin Franklin (for whom he was a sometime courier) denounced him as a rogue and scoundrel. But there is a monument to him on the Digges family estate across the Potomac from Mount Vernon.

“Spy Sites” is also a guide book that should be invaluable for weeks of Sunday afternoon spy walks or drives — from downtown to tranquil suburbs. With maps and photos, it enables the reader to view the obscure dead drops that such rogues as Aldrich Ames, John Walker and Robert Hanssen used to pass secrets to the Soviets — “you are there” experiences of the first order.

There are also some seldom-discussed secrets as to how FBI and other counterintelligence officers “spied on the spies.”

Readers can trust the expertise of the authors. Robert Wallace ran CIA’s Office of Technical Services, which invents spycraft equipment for communications and other covert chores. R. Keith Melton, an Annapolis graduate, owns one of the largest collections of spy artifacts in existence.  more

2017 Information Security and Cryptography Seminar — Fundamentals and Applications

June 12-14, 2017 in Zurich, Switzerland | Lecturers: David Basin and Ueli Maurer

This seminar provides an in-depth coverage of Information Security and Cryptography from both a conceptual and application-oriented viewpoint. At the same time, the mathematical, algorithmic, protocol-specific, and system-oriented aspects are explained in a way understandable to a wide audience. This includes the foundations needed to understand the different approaches, a critical look at the state-of-the-art, and a perspective on future security technologies.

The material is presented at three different levels. At the highest level, the basic concepts are presented in detail, but abstractly (e.g., as black boxes), without mathematics. No background is required to follow at this level. At an intermediate level, the most important concrete schemes, models, algorithms, and protocols are presented as well as their applications. Here some minimal mathematical and systems background is assumed. At the deepest level, which is not required to understand the higher levels, different special topics, requiring some mathematical background, are discussed.

The lectures and all course material are in English. more

Make Your Smartphone 007 Smart (book)

via amazon.com
The smartphone in your pocket can easily be turned into a high-tech spy tool and counter-surveillance device to rival anything that Ian Fleming’s Q might have dreamt up.

$2.99 at Amazon
You can communicate secretly, browse the web anonymously, access the Deep Web and hidden networks, view banned content, download privately and continue using Twitter and Facebook if their services are ever blocked locally.

Conversely, mobile devices are not secure unless you make them so. If somebody wants to know where you are at this precise moment, your smartphone will tell them – even if it is turned off...

Rather like spies in a James Bond movie, mobile users have an array of digital tools to call upon, both to mask their identity and to provide real confidence that their correspondence, data and contacts are secure.

There are smartphone apps that let you see in the dark or measure the height of a building. You can film and record without being rumbled; send emails, PMs and SMS that cannot be intercepted or read. You can even take over and control many public and private security cameras. more

The Obama Cybersecurity Report Card

by Taylor Armerding
President Obama is only a couple of weeks out of office, but his legacy on cybersecurity is already getting reviews – mixed reviews.

According to a number of experts, Obama said a lot of good things, did a lot of good things and devoted considerable energy to making cybersecurity a priority, but ultimately didn't accomplish the goal of making either government or the private sector more secure...

As Kevin Murray, director of Murray Associates, a counterespionage consultancy, put it, “government can make as many policies as it wants, but if it doesn’t solve the problem, what good is it?”

Or, as Paul Rosenzweig, founder of Red Branch Consulting, former Department of Homeland Security (DHS) official under President George W. Bush and frequent contributor to the Lawfare blog, put it, “they had the tools, they just chose not to use them when the chips were down. I don’t know why.”...

Finally, Murray said government needs to focus not just on those who hack or steal data, but also on those who let it happen. He said government won’t get better results until it demands accountability. In virtually every case of a failure, including the OPM breach, those in charge are allowed to resign, which means they keep their pension and all other government benefits.

“There’s a lot of hand wringing, but not enough action,” Murray said. “You have to make the people in charge of holding this information accountable. Somebody should get paid a lot of money, but then told, ‘You are going to be held responsible if it leaks out on your watch.’

“You start doing that, and people will start taking it (information security) seriously,” he said.  more

Sunday, January 29, 2017

Congressional Republicans' Private Meeting Bugged & Leaked

Congressional Republicans gathered behind closed doors in a Philadelphia hotel Thursday to discuss their plans to tackle national security, health care and more. Now you, too, can listen in.  

The recordings below were first provided to The Washington Post and other news outlets through an anonymous email sent Friday evening.

The author of that message asked that the recipients not publish the audio files out of concern that the author could lose his or her job.

On Saturday afternoon, the person wrote again and granted permission to publish the files, explaining that he or she had more closely reviewed the recordings and had concluded that they could not be used to identify him or her.

Washington Post reporters who reviewed the files on Thursday and Friday found revealing details within. more

Saturday, January 28, 2017

More Bad Security News for Android

A team from CSIRO's Data 61, University of NSW (Australia) and UC Berkley in the US found a whole bunch of Android VPN apps contain viruses, spyware and other adware.

Researchers analyzed the apps available for Android to look for nasties like trojans, spyware and adware — giving each an "anti-virus rank (AV)" based on what they found. The lower the rank, the better.

They found of the 283 apps they analyzed, 38 per cent contained malware or malvertising (malicious advertising containing viruses). more
-----
Check Point’s mobile security researchers have discovered a new ransomware in Google Play, dubbed Charger. 

Charger was found embedded in an app called EnergyRescue. The infected app steals contacts and SMS messages from the user’s device and asks for admin permissions. If granted, the ransomware locks the device and displays a message demanding payment. more

A tip of the hat to our Blue Blaze Irregulars who submitted these news items. ~Kevin

Friday, January 27, 2017

Android Phone's Pattern Lock - Easy to Guess

Android's pattern lock, which lets you unlock your phone by swiping a specific pattern across the screen, may seem more secure than a password, but that's not always the case...

A study in 2015 suggested that 44 percent of lock patterns start in the upper left (and 77 percent start in one of the corners), and most moved left to right and up to down, just like we'd read a book. The end result? Our pattern lock patterns are pretty predictable.

A new attack makes use of that predictability: there's now an algorithm that can guess 95% of pattern locks within five attempts. This bit of code analyzes video of people using pattern lock to unlock their phones, taken from about 8 feet away with a smartphone camera (or over 29 feet away using a high-quality SLR or DSLR camera). Even without being able to see the screen, the algorithm can watch your hand movements and predict your pattern. more

Riddle: The Spies With Stamps on Their Heads

Problem
Three super spies are caught sending sensitive information to an enemy state. These three double agents are apprehended and taken out to a remote spot in the woods. They are told that one of them will be part of a prisoner exchange, and the other two will be executed.

To decide who lives, the guards decide to play a game. They show the captives eight stamps: four red, and four green. They then blindfold the three men and stick two stamps to each of their foreheads. One of the guards puts the remaining two stamps in his pocket.

The guards then take the blindfolds off the captives, who can each see the stamps on the other two men's heads, but not the two stamps on their own head, and not the two stamps in the guard's pocket. These spies are highly intelligent—they're perfect logicians who know they can count on each other to correctly and quickly interpret the information they have.

The guard captain tells them that the first man to figure out the color of the stamps on his own head will be used for the prisoner exchange, and the other two will be executed. If anyone guesses wrong, they will be shot dead on the spot.

The captain then asks the spies in order if they know what color stamps they have on their head. The answers are as follows:
  • A: "No."
  • B: "No."
  • C: "No."
  • A: "No."
  • B: "Yes."
Spy B answers correctly. What color are the stamps on his head, and how does he know?

Hint
Don't forget about the stamps in the guard's pocket. solution

Technical Surveillance Countermeasures To Prevent Corporate Espionage

via Veteran Investigation Services
You're at an important company board meeting discussing a top secret product development project. If this unique product idea gets leaked to your competitors, the consequences could be dire. The key stakeholders are in the conference room or participating via conference call. The meeting goes well and later you find out your competitor has beat you to market with the same product idea. How could this have happened?

Your business or organization could be the victim of corporate espionage. Someone could be collecting competitive intelligence through unethical means, such as listening devices, video surveillance, or even something as basic as rummaging through your trash. Whether the threat comes from bugging devices at a one-time event, or ongoing surveillance at your corporate site, make sure you are aware of surveillance techniques, find the threats, determine who is behind the intelligence gathering and put systems in place to prevent future breaches.

COMPETITIVE INTELLIGENCE GATHERING
Your competitors and corporate enemies want to know what is said at meetings with shareholders, new business partners or clients or new product development teams. They may be seeking information about your financial outlook, or access to your intellectual property. Some companies will stop at nothing to gain that information and for many reasons, it's easier than ever for them to get it.

Today, surveillance is easier than ever. Advanced wireless devices such as covert listening devices, miniature cameras, concealed, wearable recording devices or hidden micro-cameras are just a click away online and can be very inexpensive. Employees or someone on the cleaning crew could be paid to place a device in a conference room or collect paper trash afterwards, or look for computer passwords left on desks or taped under keyboards. Safeguarding your company secrets requires a preventative approach.

The most common surveillance targets are CEO offices, their private conference rooms, and assistant's work area, since these spaces are the most likely locations for strategic meetings where valuable company information is discussed. These areas should be swept for bugging devices before critical meetings and at regular intervals, based on the level of risk.

TECHNICAL SURVEILLANCE COUNTERMEASURES
If you suspect that someone is obtaining company secrets or you've already experienced a damaging leak of information, we recommend screening for potential threats to prevent further leaks. A TSCM (technical surveillance countermeasure) examination can be performed to look for surveillance equipment or detect other risks. These can be done before an important meeting, at an off-site event, or at your site at regular intervals.

A TSCM examination may include such counter surveillance tactics as:
  • Full Radio Frequency (RF) Spectrum Analysis
  • Infrared Spectrum Analysis (IR)
  • Detecting transmitting devices in the electrical system/wiring
  • Computer forensics (for example, searching for emails that mention a sensitive topic after a meeting has taken place to look for leaks).
  • Disrupting laser frequencies with static "white noise" and or window coatings to prevent laser listening systems from gathering micro-vibrations from the surface of a window to listen in on conversations from outside of a room.
  • Conducting a physical search looking for:
    • Idle surveillance equipment that may be turned off or out of batteries.
    • Cameras or microphones in the ceiling.
    • Reflections from camera lenses.
    • Radio transmitters that could broadcast to an external radio.
    • Bugged telephones. Polycom phone systems are easy to turn into listening devices.
    • Easily found passwords left on desks or under keyboards.
    • Computers left on and logged in.
    • Document disposal and inadequate document shredders.
COUNTER SURVEILLANCE TECHNIQUES OFF-SITE
Important business meetings held off-site at hotel convention centers can be easy opportunities for surveillance. Sweeps of the meeting rooms, guest rooms, or bathrooms can be done, and then security staff should maintain custody of the room to ensure the room stays free of bugs until after the meeting. Executive cars can be targeted and especially at risk if using valet parking, as well as executive phones which are susceptible to Trojan horse software that can allow someone to listen in on all the conversations or steal data from email or text messaging.

AFTER THE TSCM EXAMINATION
What happens if listening devices are found during a sweep? If surveillance equipment is found during the TSCM examination, it should not be removed immediately because it can be used as a trap to find out who put it there. The TSCM examination is just the stepping off point for a full analysis and investigation. Suspects need to be interviewed. A full security assessment may be necessary if many problems are found. Systems should be established to prevent this kind of activity. Embedded and dedicated security personnel may be needed to keep security at the forefront of executives' minds, staff who can be there to watch, learn, listen and report on surveillance threats. Everyone in the organization can contribute to prevent leaks. Policies and procedures should be developed and communicated to employees regarding the handling of passwords, access, and confidentiality agreements.

ARE YOU AT RISK OF CORPORATE SURVEILLANCE?
Companies are hungry for that competitive edge that will help crush their competition. They may hire corporate surveillance companies to gather company secrets from their competitors, often through unethical means. Low level employees with low moral or low paid personnel from external maintenance services can be paid off to gather intelligence or plant bugs. Most companies are naive and feel that industrial espionage and surveillance does not happen in real life, it only happens in the movies and "cannot happen here." They feel they can trust all of their employees like family. But all it takes is a hungry competitor and a disgruntled employee passed over for a promotion to initiate the leaking of your company secrets that could be devastating to your business. Then, with the preponderance of equipment easily available, your company's most important information and conversations could get into competitors hands in an instant.

What proprietary business information could cause damage to your company if your competitor was able to listen in on your meetings? Have you done all that you can to protect that information?  more

Monday, January 23, 2017

Special TSCM Offer for Executive Protection Professionals and their Clients

Executive Protection Professionals are talented and skilled. They handle:
  • Physical security
  • Intelligence analysis
  • Family office security
  • Transportation security
  • Communications security  
  • Advance travel preparation
  • Estate employee background checks
  • Vetting external vendors and contractors 
 and more.

They are not to be confused with bouncers or scary-looking bodyguard types.

Protection of inside information, and communications privacy, is obviously an important part of the overall EP security strategy.

Founded in 1978, Murray Associates provides these elements of security by being the adjunct technical security consultant.

If you are an Executive Protection Professional, investigate this special get-acquainted offer. Your principal will thank you.

Why the Spy Trade is Such a Booming Industry

The alleged Russian plot that targeted the U.S. presidential election has raised concerns we're headed for Cold War levels of spying, but there's actually plenty of evidence the world soared past that point years ago...

There are now an estimated 120 countries involved in espionage, each trying to infiltrate military, political and economic targets all over the world...

And those are just the official spy operations. Non-state and corporate spies have become much more active, not to mention rogue cyber warriors who sell their wares as independents and major organized crime and terror groups.

More threats, bigger budgets... more

GCHQ Spy Master Quits UK’s Eavesdropping Nerve Centre

UK - GCHQ boss Robert Hannigan only took on the post in April 2014, but on Monday—in a surprise move—

he quit the job, citing "personal reasons."

He won't be handing in his (encryption) keys until a successor is found, GCHQ said.

In a letter to the UK's foreign secretary, Boris Johnson, Hannigan said that he was "proud" of the work he has overseen at the eavesdropping concrete doughnut.

He flagged up the National Cyber Security Centre as one of GCHQ's "achievements" under his tenure.

"While this work must remain secret, you will know how many lives have been saved in this country and overseas by the work of GCHQ," he added in his missive to Johnson. more

Friday, January 20, 2017

"Make Your Phone as Private as a Phone Booth"

The Hush-A-Phone
A voice silencer designed for confidential conversation, clear transmission and office quite. Not a permanent attachment. Slips right on and off the mouthpiece of any phone.

Office quite during phone talks is also assured. The Hush-A-Phone does not allow your voice to escape into the room. It excludes noises from the transmitter, giving a quiet wire and clearer transmission.


Prominent business firms are using it and recommend it as an efficiency promoter.

Tear this (ad) out and mail with your letterhead for free booklet "How to make your phone as private as a booth."

Agents and Salesmen—Write for particulars of our attractive proposition to General Agents and Salesmen.

HUSH-A-PHONE CORPORATION
19 Madison Ave.,
New York City

CIA Divulges Procedures for Information on Citizens

via The Wall Street Journal...
In a rare act of transparency, the Central Intelligence Agency for the first time has published a fully declassified version of its procedures for handling information on “U.S. persons,” a category that includes American citizens in the country or overseas.

The new guidelines, which were published in full on the agency’s website on Wednesday, are meant to address the fact that large amounts of communications and other data are collected when spying on foreigners. The previous guidelines date to 1982 and had been updated through a patchwork of policies, but hadn’t been overhauled for the digital age, CIA officials said.

In the past, intelligence officers could promptly review reports that might contain references to U.S. persons or the contents of their communications, and then decide how to handle that information in line with privacy rules. But today, it’s not always feasible to do that in short order because the CIA is collecting information in far larger volumes. A digital storage device, for instance, can hold thousands of pages of material, which a CIA officer has to review.

The new guidelines require the CIA to purge any especially sensitive information it has stored after five years if it hasn’t been evaluated to see if it contains information about U.S. persons. Such sensitive information includes the contents of any communications, officials said. Information that’s deemed less sensitive, like the business records of a foreign company that aren’t expected to contain information about U.S. persons, must be purged after 25 years if it hasn’t been evaluated. more

Some Days No One Wants to be a Spy

via Kickstarter.com
About this project
Let me ask you…

What if you could actually be the main character in your favorite action or spy movie?

Maybe you always wanted to be James Bond, Ethan Hunt from Mission Impossible, Jason Bourne and or any other “spy”?

What if there was a way you could actually become your favorite action star in a real life-role playing experience?

I’m not talking about going with all the other “adventure companies” who charge you to…

Sit around in some garage, property or warehouse , drive around a track, “train” to be a spy, climb walls and shoot some targets. Or…

Some boring adventure where you sit around and pretend you’re in a mission, with some instructors by your side the whole time. You See…

I am talking about a totally unique experience…

Become The Action Star of Your Own Real Life-Fast Paced Spy Adventure…

Eliminating the “bad guys”…Saving the “girl”, and or Rescuing the “world” by completing a mission only you can do. This Is You…

Being Involved In Heart-Pumping Thrills… more

This has to be a joke, or a scam. Can you imagine the liability for letting customers run across airplane wings? ~Kevin

Corporate Espionage: Chinese v. Chinese

Police have arrested Huawei’s six top executives for allegedly leaking vital information to its rival company, LeEco.

Huawei is one of the major phone makers in China...

Back in September 2013, HTC’s top executives had been arrested for stealing next generation software interface and were accused of selling them to the Chengdu city government. Those executives were jailed, and it was clearly one of the worst years for HTC.

Corporate espionage looks exciting in movies, but is certainly not pleasing when it is between leading companies. more

Wednesday, January 18, 2017

Cautionary Tale - Why You Need an Industrial Espionage Protection Strategy

by Rhiannon Williams
The world of good business has always been driven by rivalry... 


Razer's hefty three-screened gaming laptop is still at large is still at large. Chief executive Min-Liang Tan called the theft “industrial espionage”, and proffered a $25,000 reward for information to secure the arrest and conviction of the culprit(s)...

As for the Razer laptops, they’re still at large. Knock-off versions have already surfaced online, and several auctions claiming to list the stolen items have started in China and Singapore, which, if real, should lead authorities straight to the thieves. Maybe Razer should spend the reward money on new security. more

Quick, Call Guinness - “Most Wiretapped Individual” on Earth

Philippines - Senator Leila de Lima on Wednesday earned a new title as the “most wiretapped individual” on earth. 

Now zipped lipped.
This title was given to her in jest by Senator Panfilo “Ping” Lacson before she interpellated him on the floor on the proposed Expanded Anti-Wiretapping Act.

Lacson made the remark when De Lima asked permission if he would yield to some of her questions about the measure.

Responding to De Lima’s query, Lacson said: “Gladly and willingly to probably the most wiretapped individual on planet earth.”

“Thank you for acknowledging that,” De Lima answered. more

Ex-Boyfried Charged - Common Smartphone Eavesdropping

NY - A Rome man has been charged with felony eavesdropping,

according to the Oneida County Sheriff's Office.

Deputies charged Anthony Swancot, 33, after an investigation revealed he installed an app on his ex-girlfriend's cell phone that tracked her location and forwarded copies to his cell phone of each text message she sent from her phone, authorities said.

The app was allegedly installed on Nov. 3, without the victim's knowledge, officials said. more

Simple Tips for Thwarting Common Smartphone Eavesdropping

At Secure Network in Armory Square they actually don't get a lot of people calling about their phone being hacked-because they don't always know its happening.

The president of Secure Network says these "eavesdropping" apps are common. but they are not marketed that way. ...he says you should be the only one using your phone.

"I wouldn't relinquish your phone to somebody who started putting apps on your phone or downloading things on your phone," said Steve Stasiukonis, "be conscious of what's on your phone if things are obviously if they appear out of place you know the suspect in question it." You can also look to see if your data plan is getting more expensive. more

• Make sure your phone requires (good quality) password or fingerprint access. 
• If you suspect a problem, do a full factory reset, and don't reload your backup. ~Kevin

Sunday, January 15, 2017

Industrial Espionage and Technical Surveillance Counter Measurers

Industrial Espionage and Technical Surveillance Counter Measurers (book)
Authors: Androulidakis, Iosif, Kioupakis, Fragkiskos – Emmanouil

Discusses how industrial espionage and technical surveillance affect companies, organizations and individuals.

This book examines technical aspects of industrial espionage and its impact in modern companies, organizations, and individuals while emphasizing the importance of intellectual property in the information era. The authors discuss the problem itself and then provide statistics and real world cases.

The main contribution provides a detailed discussion of the actual equipment, tools and techniques concerning technical surveillance in the framework of espionage. Moreover, they present the best practices and methods of detection (technical surveillance counter measures) as well as means of intellectual property protection.

Number of Illustrations and Tables
65 b/w illustrations, 9 illustrations in colour

Topics:
  • Communications Engineering, Networks
  • Systems and Data Security
  • Security Science and Technology
  • Forensic Science
Springer | Signals & Communication | March 12, 2016 | ISBN-10: 331928665X | 126 pages | pdf | 5.58 mb

TV Gardening Expert Digs Dirt Using Spycam

UK - A TV gardening presenter faces jail after he admitted using a camera hidden in an air freshener to film women tenants showering. 

Stephen Brookes faces jail after capturing footage of women on his iPhone. Stephen Brookes, 55, set up the camera to capture footage that could be downloaded to an app on his iPhone.

The expert, who has appeared on BBC radio as a guest, spied on seven women between November 2015 and September last year at his home in Stratford-upon-Avon...

Police discovered 300 files, including videos taken near a shower and toilet, after seizing a memory card, iPhone and iPad belonging to Brookes.

Brookes was known as “Mr Rotavator” in the 1990s and has broadcast live from London’s Chelsea Flower Show.  more

UPDATE (2/8/17) - Stephen Brookes, a gardening expert, has also been ordered to register as a sex offender for seven years... (and) has been jailed for 12 months for using a hidden camera to spy on young women in a bathroom. more

State Insurer Caught up in Eavesdropping Scandal

Chinese insurance regulator said that a state insurer used an iPhone and a voice recorder to eavesdrop on inspectors.

China Insurance Regulatory Commission Shandong bureau said Saturday that the eavesdropping devices were found at the Weifang office of Yingda Taihe Property Insurance.

The regulator had been inspecting the Shandong branch.

On Jan. 6, inspectors found the iPhone and voice recorder taped under their chairs. Neither Yingda nor the regulator elaborated on how the tapping devices were found.

"Their purpose was to listen in on the discussions, so that they could obstruct and thwart inspections," sources with the insurance regulator said. more

This is why accounting firms who conduct on-site audits often have their dedicated offices swept for bugs. Smart. ~Kevin

Police Bang Wang for Spycam - Again

CT - A Hartford man was arrested for allegedly videotaping over a dozen women in the unisex bathroom at UConn’s Law School law library has been arrested on similar charges in Vernon.

Yiyan Wang, 30, was arrested on voyeurism charges for offenses that happened on June 15 and 26 in 2016. He was arrested on Wednesday. He was released on $5,000 bond. He is scheduled to appear in court on January 24.

On October 12 Wang was charged with 15 counts of voyeurism, one count of disorderly conduct – which encompasses “peeping tom” incidents in the state of Connecticut – and one count of attempting to commit voyeurism. more

Friday, January 13, 2017

If You Need an In-House TSCM Manager Copy This Job Posting

 If in-house is not practical for you, call me. This is what we do. ~Kevin

JOB DESCRIPTION:

Abbott Laboratories is seeking an experienced Senior Technical Security Counter Measures (TSCM) professional to serve as a program manager in charge of providing support towards the implementation and management of protecting the companies Intellectual Property and maintaining product integrity.

TSCM duties include but are not limited to the following tasks:
  • Conducting TSCM surveys and inspections to monitor for evasive radio frequency signals, and perform a wide variety of physical and technical security related functions at Abbott facilities as well as inspecting for technical penetrations, hazards, and physical security weaknesses that could result in the unauthorized access to sensitive material and proprietary Intellectual Property belonging to Abbot Laboratories. TSCM sweeps are to be conducted for the 200 Abbott facilities located domestically and abroad.
  • Pre-Construction Advisory Services: Providing assistance and guidance to Abbott leadership prior to new construction or modification of an existing space to safeguard areas from vulnerabilities associated with technical hazards and/or penetrations that can occur during facility construction or modification. Coordinate projects associated with security enhancements or downgrades as well as new facility construction requirements.
  • Conference Support: Onsite monitoring of Abbott sponsored conferences to safeguard against surreptitious monitoring when the area used for discussion of sensitive Intellectual Property is not properly constructed, security measures are not maintained, or when deemed necessary to safeguard information or personnel. Analyze all voice and data communications schemes, systems, circuits, and equipment for susceptibility to interception and compromise.
  • Technical Security advice and assistance: Brief Security Division managers on programmatic security issues that could have institutional impact as well as conduct TSCM threat and awareness briefings to Abbott management and employees as necessary. Providing comprehensive, risk‐based technical security advice, guidance, and general security support to offices and activities the TSCM Office supports; preparing written correspondence and after-action reports to include TSCM inspection findings and recommendations reports, analytical reports, technical security awareness briefings, technical briefings, and vulnerability reports; conducting analysis and recommending solutions to a variety of complex technical surveillance, and counter-surveillance detection or other technical vulnerabilities. Conduct initial laboratory analyses and/or evaluation of any suspect surveillance device discovered, and coordinate with the appropriate Law Enforcement Agencies as appropriate.
  • Follow Up Inspections: Coordinating with Security Managers and facilities management in supported areas to correct deficiencies (i.e., technical hazards, technical vulnerabilities and Standard Operating Procedures that affect technical security) and guide implementation of recommended solutions and technical countermeasures.
Perform other related duties and functions as assigned.  more

Security Director Alert - Peeping Tom Drone - A Cautionary Tale

NH - Two women who live in the same building say they spotted a drone flying over their skylights last weekend and fear the device’s operator could be spying on them.

The women said they immediately told their landlord they feared someone was using drones to spy on them. The landlord was concerned a “Peeping Tom” may be in the area...

Police say if the drones were spying on the women, the operator could face charges because it would be an invasion of privacy. more

Security Directors: News reports about Peeping Tom drones are plentiful. That's because they see people, and people see them. 

What is not so publicized are drones peering through office windows to collect intelligence... like posted passwords and conference call numbers. 

An after-hours clear desk, clear whiteboard policy is more important than ever now. If corporate culture won't support that, how about a close the blinds at the end of the day policy. ~Kevin