Friday, April 17, 2009

Cell Phone Spying

Cell phone questions we receive...
"Can someone...
...listen in on my calls?

...listen to my voice mail messages?
...remotely steal my contacts list?
...send fake texts from my phone?
...activate my microphone 24/7?
...make my phone dial someone else?
...get a text stating the length of my call?
...get a text when I use my phone?
...send me texts using a fake number?
...get my new phone number when I switch SIM cards?
...get a text message with the numbers I call and receive?
...track where I am on a computer map using the phone's GPS?
...track where I am on a computer map even if my phone lacks GPS?
...can they do all this from anywhere in the world?
...record my calls using my phone's own internal memory?

...trick me into installing spyware by making it look like a game?

Isn't this illegal to do in the United States?"
Yes.

See...
(
investigative video news report)
(
more stories about cell phone spying)

Cell Phone Eavesdropping in India

India - Is your mobile under 'unofficial' surveillance? The Intelligence Bureau (IB) has recently sent a report to the Centre about mobile phone companies sharing unauthorised information about clients with influential police officers.

The report says that sensitive and personal information about mobile phone users in Gujarat is being passed on illegally to police officials, without following legal procedures.

The report also hints that duplicate numbers are being made available to cops, allowing them to eavesdrop on conversations real time. (more)

Town Clerk Recall - Illegal Eavesdropping Cited

MI - A former Hamburg Township official has started the process to recall current township Clerk Matt Skiba, a person he says is the most objectionable politician he's ever seen.

Mike Bitondo, a former township trustee, filed recall petition language with the Livingston County Clerk's office on April 9...

Bitondo claims Skiba treats the public and township employees and officials with "disrespectful, accusatory and condescending behavior," that he's demanded employees sign pledges of loyalty to him, that he secretly records conversations he has with employees and the public and that he's used a remote listening device to eavesdrop on other people's conversations. (more)

Lost your clerk's job? Have I got a job for "Q".

Britain's domestic spy agency — MI5 — is hunting for "Q".
MI6's sister organization, which carries out surveillance on terror suspects inside Britain and gives security advice to the government, is searching for someone to lead its scientific work.

"Looking for a chief scientific adviser to lead and coordinate the scientific work of the security service so that the service continues to be supported by excellent science and technology advice," MI5's Web site ad reads....

Mobile phones equipped with sensors for detecting chemical, biological or radioactive agents are already in the works. Others, such as supersensitive eavesdropping devices, will likely be rolled out for the 2012 Olympics in London. (more) (application)

SniffJoke - A Grass Roots Net Protection Effort

SniffJoke is a software you run on your computer that injects randomly generated traffic in your normal one. While it does not affect the normal communication and the content exchanged with a remote host, it has a noisy effect on the operation of a third element eavesdropping on your conversation (be it a sniffer, a passive interceptor or a Chinese trojan).

The data it injects makes the reconstruction of TCP streams very arduous (eg: wireshark, xplico). As in any concealment technique, an expert professional can understand the general flow of the transaction by reading one packet at a time, but this analysis cannot be automated, so: if they’re after you they will get you, but with this software you could consider yourself safe against mass-targeted attacks. (more)

Thursday, April 16, 2009

Anatomy of a TSCM PR Fiasco

Chapter 1 - The Disgruntled Turn TSCM Into a Four Letter Word

Canada - Embattled Vaughan Mayor Linda Jackson used taxpayers' money to have her city hall office swept for listening devices last year, a practice borrowed from her predecessor and archrival, Michael Di Biase.

Through a Freedom of Information request, residents Gino and Mary Ruffolo, former supporters turned Jackson critics, uncovered an invoice showing the mayor's office paid Protech Consult Services $2,730 for equipment and labour for "manual and electronic counter surveillance."

"It appears the taxpayer is paying for Jackson's office to be swept for bugs," Mary Ruffolo said yesterday. "What is going on? Why is the poor taxpayer paying for this?" (more)

"What is going on?"
Yellow journalism. Scandal-mongering. Sensationalism. This is not news.

"Why is the poor taxpayer paying for this?"
Inspections for illegal electronic surveillance (TSCM sweeps) are a generally-accepted security practice. Both governments and businesses routinely conduct inspections for electronic surveillance.

In local government, for example, inspections can prevent fraud in negotiations and bidding; saving taxpayers money.

Not ferreting out illegal electronic surveillance is just negligence.



Chapter 2 - The Opportunistic Smell Blood

Ursula Lebana has a $50 solution to Vaughan Mayor Linda Jackson's political problems – and 2 cents worth of advice.

"People never believe it, but 90 per cent of the time, it's the person you trust the most," says Lebana, who opened Canada's first "spy shop" back in 1991 and can attest to the fact that Cold Wars are still being waged in offices, marriages and even babies' bedrooms around the world.

And for $50, the embattled Jackson, who spent $3,000 in taxpayers' money last year to have her office swept for listening devices, could have rented one of Lebana's do-it-yourself bug detectors.

Lebana has armed everyone from entrepreneurs to parents with electronic surveillance gadgets since she hung a few Bond posters on the walls of her Yonge St. Spy Tech store and created the first Teddy cam to help parents keep an eye on their child's nanny. (more)

If you even remotely think that "one of Lebana's do-it-yourself bug detectors" can help you, then you will definitely be interested in buying this book to go along with it.

Top actress’ cell phone cloned to eavesdrop (update)

Korea - Prosecutors cleared the chief of Sidus HQ, a major entertainment agency, of replicating a cell phone of top actress Jeon Ji-hyun, 27, to track her phone calls and text messages.

Sidus was investigated for alleged hiring an expert to access phone records and messages of the actress in late November 2007, shortly before her contract with the company was to expire.


Sidus CEO Chung Hoon-tak and two other executives were under investigation for eavesdropping on Jeon, who signed with Sidus while still in high school more than 10 years ago.

The outside expert, who was hired to help copy and rig Jeon's handset, was given a one-year jail sentence last month.
(
more) (background)

3 Skimmers in 1 Week PINed

via Ben Popken...
Three different ATM skimmers were found this week and reported on blogs, raising the question of what the heck is going on considering these are supposed to be a rarity. First, our reader Dan found a skimmer on a WaMu/Chase ATM in LA. Gizmodo picked up the story and subsequently their reader Sean Seibel found a skimmer on a Chase ATM in Manhattan's East Village. Then this kid Nick McGlynn found a setup similar to the one Sean did, also on a Chase ATM. Now, when our reader Dan took the credit-card snagging device skimmer to the police he said they, "got a big kick out of the skimmer, saying they'd never seen one in person." (more) (background)

Security Alert - Be careful at ATMs and gas stations.
• If the card slot 'looks weird' (too big, cheesy, off-color, etc.), skip it.
• Cover your fingers when entering your PIN – to block overhead cameras or telescope voyeurs.
• Think you've been had? Call the branch manager or the cops, quickly.

Need A Gift? Everyone likes spy gear...

On a mission for spy gear?
Find it here...
The International Spy Museum Store features all things espionage for Real spies, Kid Spies, the Spy-curious, and Spy-Wannabes.


Check out these doormats, for example...

Fly Spies - l’Entreprenant & High Flying Lowe

Thinking about all the modern spy drones and insect-like flying surveillance bugs makes minds boggle.

Remember the good old days when spies floated?


The first decisive use of a balloon for aerial observation was performed by the aérostat l’Entreprenant ("The enterprising one") at the Battle of Fleurus in 1794. The following year, during the Siege of Mainz an observation ballon was employed again. However, the French military use of the balloon did not continue un-interrupted as in 1799, Napoleon disbanded the French balloon corps.

The Intrepid was a hydrogen gas balloon or aerostat built for use by the Union Army Balloon Corps for aerial reconnaissance purposes during the American Civil War. It was one of seven balloons constructed for the Balloon Corps and was one of the four larger balloons designed to make ascensions to higher elevations with a larger lift capacity for telegraph equipment and an operator. It was the balloon of choice for Chief Aeronaut Thaddeus Lowe overlooking the Battle of Fair Oaks.

The fateful flight over the Battle of Fair Oaks was instrumental in saving the fragmented army of Union Army General Samuel P. Heintzelman from what would have been sure defeat at the hands of the Confederates. via Wikipedia.com

Wednesday, April 15, 2009

You know some jerk will call Homeland Security.

Robot/People art by Kacie Kinzer...
In New York, we are very occupied with getting from one place to another. I wondered: could a human-like object traverse sidewalks and streets along with us, and in so doing, create a narrative about our relationship to space and our willingness to interact with what we find in it? More impo
rtantly, how could our actions be seen within a larger context of human connection that emerges from the complexity of the city itself? To answer these questions, I built robots.

Tweenbots are human-dependent robots that navigate the city with the help of pedestrians they encounter. Rolling at a constant speed, in a straight line, Tweenbots have a destination displayed on a flag, and rely on people they meet to read this flag and to aim them in the right direction to reach their goal.

Every time the robot got caught under a park bench, ground futilely against a curb, or became trapped in a pothole, some passerby would always rescue it and send it toward its goal. Never once was a Tweenbot lost or damaged. (more with video)
New Yorkers are too cool. Our spies tell us more Flying Dutchman Bots will be appearing on the streets. Updates to follow!

Spy Tie

Spy Tie comes with a pocket remote control so you can snap the looks on peoples faces when they see your incredibly ugly new cravat.

Also good for business espionage and private investigator work.


You can find Spy Tie here, right next to the ad for the digital microscope. You know, the one that says お肌・頭皮のチェックに!(Check the skin on the scalp!)

Mobiusly Loopy, Infinitely Idioic or Smart?

We now have spycams watching the people who watch spycams.

"Why???" you may ask...


...because the people watching CCTV images back in the control rooms often have too many screens to monitor at once, and so may miss the criminal or antisocial activities they are there to spot.

To the rescue of Big Brother's limited attention capabilities come Ulas Vural and Yusuf Akgul of the Gebze Institute of Technology in Turkey, who have developed a gaze-tracking camera system that watches the eyeballs of CCTV operators as they work. It then automatically produces a summary of the CCTV video sequences they have missed during their shift. (more)

PIN Crackers Nab Holy Grail of Bank Card Security

Hackers have crossed into new frontiers by devising sophisticated ways to steal large amounts of personal identification numbers, or PINs, protecting credit and debit cards, says an investigator. The attacks involve both unencrypted PINs and encrypted PINs that attackers have found a way to crack, according to the investigator behind a new report looking at the data breaches. (more)

Business Espionage - Software Swipe

NJ - Yan Zhu, also known as “Westerly Zhu”, age 31, a Chinese citizen in the U.S. on a work visa, was arrested this morning by FBI agents at his residence, 9 Victor Street, Apt 26, Lodi, New Jersey, on charges of theft of trade secrets, conspiracy, wire fraud, and theft of honest services fraud announced Weysan Dun, Special Agent In Charge. The investigation, code named “Westerly Winds”, began in November of 2008 based on a complaint from the victim company. (more)

"Wolfgang, this is the wrong funkybuddha club."

UK - Three German journalists breached the tight security cordon around the April 2 Group of 20 summit in London and managed to eavesdrop on the three-hour discussion between heads of governments...

Despite wearing the wrong identification badges Marc Hujer, Wolfgang Reuter and Christoph Schwennicke walked unchallenged into the G20 “listening room”, where government officials were listening in on talks between government heads such as Barack Obama, the US president, and Nicolas Sarkozy, his French counterpart, said one person present during the incident. “It’s not that they sneaked in, they just walked in.”

The reporters went on to write a detailed account of the discussions, which appeared in Spiegel, the weekly magazine, on April 6, detailing the debate that led to the drafting of the final summit communiqué and repeatedly using verbatim quotes from the discussions. (more)

We see similar tactics attempted at corporate off-site meetings we protect. Everything from "blenders" (people who meld with the herd) to pre and post meeting "paper-hunter-gatherers." Make sure you have a knowledgeable counterespionage specialist watching over your meetings. They will do more than just catch bugs.

The Annoy-a-tron 2.0 Strikes Again

Word went out on the wires yesterday to police and private forensic examiners...
Does anyone recognize the device in the attached photograph?


A female RP found it taped under her computer desk in her bedroom. The device is about 1.75" x 2.25". It has 3 batteries, a 2-position switch (on-off?), a 6-position sliding switch (frequency?), a cogwheel (volume or recording level?), a speaker or microphone, and possibly a reset switch. It has no ports and was not connected to anything.

Correct answers (including mine) sprayed in faster than an AA-12 ejecting shells!

Yes! The Annoy-a-tron 2.0 strikes again.

Kinda makes you wonder about forensic geeks :]Dumb-de-dumb-dumb

Monday, April 13, 2009

Take a security hint... from the most profitable company in the world!

via The Wall Street Journal...
The whole country is now worried about the specter of cyber attacks that will bring down the electricity grid.
Big Oil is worried about another kind of cybersecurity: eavesdropping.

Exxon spent $222,985 last year on security for chairman and chief executive Rex Tillerson. The bulk of that went for standard-issue stuff: a car and driver, and residential security. But just over $9,000 apparently went... “for mobile phones and other communications equipment for conducting business in a secure manner.”...

...cor
porate chieftains—especially globe-trotting oil execs–can’t live in a communications-free bubble, which would explain Exxon’s expenditure on Mr. Tillerson’s secure mobile phones.

If you’re a high-profile person, you’re going to be a target. Especially for big oil companies, when so many countries want to know what they are thinking, what their strategy is, it makes sense,” says James Andrew Lewis, senior fellow for technology and public policy at the Center for Strategic and International Studies...

Michael Klare, author of “Rising Powers, Shrinking Planet: The New Geopolitics of Energy,” says
electronic surveillance could touch executives anywhere from Moscow to their home office in suburban Dallas. “It might not only be state competitors that would be using this technology, it could be corporate competitors that would want to listen in on conversations,” he says.

Espionage in the oil business dates back to the industry’s earliest days and hasn’t remitted. Two hard drives belonging to Brazilian oil company Petrobras and containing vital data on giant offshore oil deposits were stolen last year. Brazilian authorities called it “industrial espionage.”

Exxon spokesman Alan Jeffers declined to comment on the specifics of Mr. Tillerson’s phone. All he would say is: “
Security of information is a vital part of our business controls and we take it very seriously.” (more)

Phones are just the tip of their information security iceberg.
Want Exxon-smart protection?

Click here.

Sunday, April 12, 2009

Security Risk: 802.11 FHSS networks

Rob Havelt, practice manager for penetration testing at Trustwave's SpiderLabs unit, will demonstrate how easy it is to attack legacy 802.11 FHSS networks, which are often seen as inherently secure because so few off-the-shelf tools are available for remote eavesdropping.

The 802.11 FHSS technology has been outmoded in most wireless applications, but it is still commonly used in warehousing facilities because it works so well with inventory management equipment, such as handheld bar-code scanners and printers.

Often, no controls are in place between these networks and corporate LAN environments, leaving a large hole for hackers to penetrate, according to the company. (more)

SpyCam Story #525 - Yet another Landlord

ND - Skylar Holte and Heather Sondrol, claim Wahpeton resident Anthony Siemieniweski, their landlord, had placed a camera with a microphone in a heating vent in their bedroom.

Siemieniweski, who lives next door, allegedly ran wires from the camera to his house, which when plugged in, would allow him to view and hear anyone in the bedroom of the rental home. The charges, sworn by Wahpeton Police Officer April Jose, state Siemieniewski set up the camera approximately two years ago.

Siemieniewski is now scheduled to appear in court for a preliminary hearing at 1 p.m. Thursday, May 7. (more)

Mr. Roger's Fascist Neighborhood

AZ - Slow economy pushes sales of spycams at home, work
As the economy teeters and people look for new ways to protect themselves and their property, the hidden surveillance market is booming says Rick Rogers, owner of Extreme Surveillance.

Rogers said his Scottsdale business has seen a 20 percent increase since the economic downturn began.

"If you're doing your job and you're doing what you should be doing, then you shouldn't have any issues with being watched," said Rogers. (more with video)

"By that pseudo line of logic you could dispose of the whole Bill of Rights." James Lawrence Fly - U.S. Senate, Subcommittee of the Committee on the Judiciary, Wiretapping for National Security: Hearings on S. 832, S. 2753, S. 3229, H.R. 8649, 83rd Cong., 2d sess., 1954, 230, 250, 15, 118; U.S. House, Subcommittee no. 3, Committee on the Judiciary, Wiretapping for National Security: Hearings on H.R. 408, H.R. 477, H.R. 3552, H.R. 5149, 83rd Cong., 1st sess., 1953, 4, 86. (more)

Proper Public Eavesdropping Etiquette...

...by Al Kratina, The Gazette
Canada - I worry about Montreal's eavesdroppers. Every week, they provide this very page with the overheard morsels in the box at right, many of which sound like contributors have been hiding under the desk of Gossip Girl script meetings.

But there's an art to eavesdropping, a delicate balance between subtle espionage and outright home invasion. And I'm concerned some of our eavesdroppers might inadvertently blur the lines and end up either imprisoned or nursing a nasty staph infection caused by rifling through a target's refuse.

So, I spent an afternoon testing out a few techniques, and came up with these four helpful pointers...

1. Wear headphones
2. Pick a high-traffic location
3. Don't listen to high school kids
4. Don't dress like a sex offender from a 1930s movie
(more)

Smoke in Pokomoke as they Duke it out

MD - A local blogger was charged with wiretapping after he allegedly recorded a conversation between himself, his wife -- a City Council candidate -- and Pocomoke City Mayor Michael McDermott and later posted it on a Web site.

According to court documents, William Burke -- an auctioneer who along with his wife, Stephanie Burke, publishes pocomoketattler.com -- used a digital recorder March 27 to tape about 37 minutes of a conversation with McDermott on the steps of Pocomoke City Hall...

The attributed post links to a short audio clip of a man saying, "Hey, you know what, I have a plan for you. Why don't you move?" and states the speaker is McDermott.


Burke was charged with wiretapping two days later. If found guilty, he could face a maximum penalty of five years in prison and a fine of $10,000. Burke will go before a judge for a preliminary hearing May 7.

The Maryland Annotated Code states it is illegal to record a conversation unless "all of the parties to the communication have given prior consent."


University of Maryland Media Law Professor Deborah Nelson said there is a lot of legal gray area with the situation since the recording was made in a public area. (more)

Sacrier Than An Escaped Bumper Car

UK - New CCTV cars that could capture drivers on film using mobile phones or eating at the wheel are being used in a road safety pilot by Greater Manchester Police.

The small smart cars have a 12 foot mast with a camera attached to them to film the behaviour of drivers.


Anyone whose behaviour is considered distracting could face a fine and points on their licence. (
video)

Coronation Street Sweeps

UK - Every star in Coronation Street fears they could get the sack as recession-hit ITV slashes its budget, The People can reveal.

And to add to the panic,
Corrie bosses have launched the biggest mole hunt in the show's 49-year history after a spate of damaging leaks about secret storylines and unrest among the cast.

Senior production staff have been ordered to hand over records of their phone calls while script conference rooms have been electronically swept for bugs...

During the meeting where producers, script editors and other senior staff discuss storylines, they were stunned to see an eavesdropping expert sweep the conference room for BUGGING devices.


And in
another shake-up to keep confidential Corrie info in-house, the meetings previously held in hotels were moved to ITV's Quay Street studio complex in Manchester where the show is filmed. (more)

Wednesday, April 8, 2009

"I'm a Seoul man..."

Listenin' to ya on every mode
Good buggin' I got a truck load
I'm a Seoul man...


S. Korea - The National Intelligence Service (NIS) is engaging in more wiretapping than before. Wiretaps are five times more than what they were eight years ago, and of all government wiretaps, those by the NIS accounted for 98.5 percent. Cases like these cause members of the public to suspect the NIS is abusing its power. This suspicion is leading to a growth of opposition to a bill to revise the Communications Secrecy Protection Act Tong Bi Beop, proposed by the administration of President Lee Myung-bak and his ruling Grand National Party (GNP), which would make it possible to intercept mobile phone and internet communications. (
more)

I park my truck up on a side street
I learned how to bug ya before I could eat
I'm a Seoul man...
In this cartoon, a citizen protest the wiretapping,
however, a member of the National Intelligence Service agency says,
“Don‘t you be curious about this kind of matter.
"


Well grab a phone and I'll pull you in
Steth-o-scope and tie up all the loose ends
Yeah, yeah, yeah, yeah

I'm a Seoul man
You're a Seoul man
I'm a Seoul man
I'm a Seoul man
I'm a Seoul man
I'm a Seoul man

Tuesday, April 7, 2009

Cell Phone - Dead Giveaway

WA - A man who fatally shot his five children and killed himself had just discovered his wife was leaving him for another man, authorities said...

The night before, the father and his eldest daughter went in search of his wife, Angela Harrison. The daughter used a GPS feature in her mother's cell phone to find her with another man at a convenience store in nearby Auburn, said Ed Troyer, spokesman for the Pierce County Sheriff. (more)

Security Director takeaways...
Aside from the eavesdropping and text spyware vulnerabilities, GPS can also be a security issue (for bad or good). Get to know the capabilities of the corporate cell phones you are specifying for your executives.
• Do not give them more features than they really need.
• Make them aware of features which could be used against them. (Google Latitude, for example.)
• Caution them about opening email attachments or temporarily loosing physical control of their phones. Both are opportunities to plant spyware.
• Swap out phones with factory fresh phones on a regular basis for high-value executives. It is cheap insurance against spyware attacks.
• Remember our warning back in December? (this one) Although the news report mentions a cell phone GPS I suspect it is more likely someone slipped a GPS tracker, like Zoombak, into her car. Check your executive vehicles periodically for items like these.

Kyrgyz Base Klaimz

"This station can eavesdrop the whole world -- every fax, every e-mailed letter. Every call from a mobile or landline phone is being recorded and processed. Billions of messages are being intercepted."

Who said it?

A. немного цыпленок (Russian to English)
B. 小的鸡 (
Chinese to English)
C. The official web site. (
more)
D. Russian state television who accused the United States of spying on China and Russia after secretly turning its only remaining air base in Central Asia into a state-of-the-art surveillance center. (
more)

"How to Hack & Spy Through Anyone's Webcam"

Well, not exactly a 'how to' but a funny reality check nonetheless. Beware of Geeks bearing thumbdrive gifts! ~ Kevin (more)

Thus driving intelligence agencies, nuts.

Skype has become the world's single largest provider of international calls, surpassing even incumbent telcos like AT&T. (more)
Skype's strong encryption has been providing the illusion of "untappable" communications to many groups security agencies would like to monitor. (more)

Spooks Speak... once a year

...advance notice for next year...
According to organizers, a former Central Intelligence Agency officer, an FBI special agent, an investigator for the Naval Criminal Investigative Service, a British historian, and a former Member of British Parliament will be the headliners this year for the sixth annual International Spy Conference... "This year it's about the role of lady spies who were responsible for many of the most daring intelligent operations of the modern era - while others played a notorious role working against the US," added Reeves. "And the role of sex in real-life spy adventures has been center stage though the ages." (you just missed it)... The Raleigh Spy Conference has been a unique convention that is known across the world for bringing espionage experts and former spies together in one place. (more)

The role of sex in real-life spy adventures...

"Appearing at next year's Raleigh Spy Conference..."
Germany - A German spy has been arrested for treason after allegedly giving away important secrets to his Kosovar translator
with whom sources say he was having an affair.

The 42-year-old man, named only as Anton Robert K., was working in the Balkans when he developed an ‘intimate’ relationship with translator Murat A., 28, according to a report in Der Spiegel magazine.

He was arrested last Tuesday near Stuttgart, the magazine said, after returning from Pristina, where until 2008 he had been working undercover in a German government office. (more)

Friday, April 3, 2009

Well, ain't that a kick in the (thunk) Ow, my toe!!!

This just proves... if you can dream it, it can be. Remember, Flubber?
A unique goo-like substance
, which upon strong impact immediately locks itself into a solidified form and then back into goo, was created by a British company. The material, which was dubbed “d3o,” is already being used in a range of shock-absorbing products, including footwear and ski attire. The company has recently been granted 100,000 pound by the UK Ministry of Defense for the development of impact-proof helmets fitted with d3o which should be able to reduce the kinetic energy of a bullet or piece of shrapnel by half.


The material was engineered using something called “intelligent molecules.” "When moved slowly, the molecules will slip past each other, but in a high-energy impact they will snag and lock together, becoming solid. In doing so they absorb energy,” explained Richard Palmer, the inventor of the substance who created the company d3o (which now sells the goo like substance with the same name). Once the pressure is relieved, the material restores itself to its original flexible state. (more) (video - 21st Century Black Adder hits Baldrick with shovel) (Weekend project with your kids. Make your own Flubber!)

"Mickey Big Ears" Snoops On The Polizei

Free, with Mickey Maus, Issue 12 - A police band radio! Hold on...
Issue 12 of the German Mickey Maus magazine came bundled with a Chinese-made novelty radio. The problem: said radio was reportedly able to tune into the normally secure police-band channels.

The German police were first alerted to this rather odd eavesdropping through concerned parents, who were wondering why Mickey was calling an Alle Punktnachricht (All Points Bulletin).

A copy of the white mini-radio, about the size of two matchbooks, was picked up by several of Hamburg's finest so that they could conduct further tests on the radio's limits. (more)

I will be in Hamburg on assignment in 3 weeks and will look into this further. Need anything inspected in the EU? Call me now. ~ Kevin

Spy School

OH - Sinclair Community College begins offering classes designed to help students land jobs as intelligence analysts, either with the government or defense contractors.

The courses for the spring quarter are titled Introduction to Intelligence Community and Fundamentals of Remote Sensing in Intelligence. Each has already attracted 29 students in advance registration, said Surinder Jain, Sinclair's interim associate dean for science, mathematics and engineering. Students seeking to take the courses must be U.S. citizens, Jain said.

Jain said he is encouraged by the student interest and hopes to have additional, related course offerings in place this fall.

It is the latest Miami Valley college to offer such courses in partnership with the Advanced Technical Intelligence Center for Human Capital Development. The Beavercreek school is leading the region's effort to train a new generation of intelligence analysts to help U.S. authorities keep an eye on what the nation's enemies are doing. (more)

Eavesdropper-Stopper Copper Fired - Hits Jackpot

MI - For the second time in two years, a former Iosco County sheriff's deputy has sued his department and landed a six-figure settlement.

Anthony Eno receives $215,000 in the most recent agreement, reached last month. The sum is to be paid by Iosco's insurance carrier, county officials say.

Eno sued the Iosco sheriff department in 2008 after then-Sheriff Michael Fischer fired him for ''substantial charges of misconduct,'' the department said at the time.

Eno denied any misconduct, alleging instead that his dismissal was an act of retaliation for his role as ''whistle blower'' in a previous case. In that 2006 case, Eno helped investigators prosecute a former undersheriff for eavesdropping. (more)

Airbusted

Germany - Aircraft maker Airbus has admitted to spying on its staff in an attempt to uncover potential corruption. It is the second high-profile case this year of a company admitting to snooping on its workers in Germany.

Airbus ordered checks on all staff working in Germany from 2005 to 2007, the company acknowledged. The checks were to see if workers' bank account numbers matched those of suppliers. No wrongdoing was found.

The head of Germany's national rail operator Deutsche Bahn resigned this week after the company also admitted to spying on thousands of its employees. (more)

World Leader 'unaware' of alleged Chinese spying

Australia - Prime Minister Kevin Rudd says he has not been told that Chinese spies tried to infiltrate his email and listen to his phone calls when he visited Beijing for last year's Olympics.

The Australian newspaper is reporting Chinese spies have repeatedly tried to tap into the Prime Minister's email and mobile phone communications, Government and business IT networks and foreign embassies in Canberra.

The newspaper reports that China directly targeted Mr Rudd last August, saying he and his staff were under constant cyber attack from Chinese authorities trying to access laptop computers and mobile phone calls. (more with full audio report)

What's wrong with this story?
A. Mr. Rudd had been properly briefed, but diplomatically downplayed the incident.
B. Mr. Rudd needs a more open channel with his intelligence staff.
C. Like many leaders (public and private sector), naive arrogance blinds caution.

In case there is any doubt that spying is very real, look at some of my first-hand experiences, here and here. ~ Kevin

Wednesday, April 1, 2009

Security Director Budget Booster - CCTV TLC

via Fred D. Miller - CPP, CHS L-III, SRG Security Resources Group...
"It’s amazing how many times we are asked for specifications to replace an older camera system when just a little TLC is needed to dramatically improve its performance.

We’re not talking about trying to revive a totally dead horse or the complete upgrade of an old system to perform like new, which can be as costly as total replacement. But rather spending a modest amount to coax a couple more useful years out of a legacy if not ailing system. With today’s economy that kind of economics makes good sense to us
.

So, here are a few tweaks that may help to resurrect a dying system which you may be able to do in-house. I would note though, that PM [preventive maintenance] should be conducted at regular intervals even on brand new equipment.

• Make a list of all equipment, where it is located and what it views. Note its apparent operating condition or problem. For example; camera #1, main lobby door, washed out view.

• Physically inspect every camera, component and connector, particularly if co- axial cable is used, as even slightly corroded connections will result in poor video. If in doubt at all, replace the connection with new.

• Thoroughly clean camera housings – particularly if they were located in an area where they were apt to accumulate dirt, dust, smoke film etc.,

• Clean camera lenses with lens cleaner [not a window cleaning product which may remove or damage the lens coating] If it is a varifocal lenses [auto iris etc] readjust as necessary. “Exercise” the lens motor or mechanism to assure it works freely,

• Check the placement of the camera so that it is not washed out by lighting, sunlight, or glare from nearby glass [curtain] walls,

• Make sure cameras view what you intended them to view and readjust their mounts if need be.

• If VCRs are being used, purchase good quality head cleaning tapes. Use them initially and then on a scheduled basis. If you are using a DVR, dust and heat are among the more common enemies of this equipment, so good ventilation [cooling] and housekeeping are important.

Whether you are using VCRs or DVRs refer to their respective operating manuals before attempting any PM maintenance on your own . . . it's delicate equipment."

Fred Miller is a well-known independent security consultant. His firm, SRG Security Resources Group, is located in Lafayette Hill, PA.

For more tips like this one, sign up for his newsletter.
Need help fast... call him right now. 1-610-834-0884
His services include:

– Risk Assessments
– Site Security Evaluations
– Security Master Planning
– Security Procedures
– Contingency and Emergency Plan Review
– Supply Chain Security
– Computer Security
– Security Awareness Training for Employees
– System Design
– RFP and Bid Documents
– C-TPAT Guidelines and Cargo Security

Big Business Espionage - Espionage Business Big

via the REI newsletter...
So how big is the problem and who’s at risk? Tim Barker of the Orlando Sentinel in his article “Are you safe from corporate spies” summed it up this way, “There is an easy way to figure out if you might be a target: If you sell anything worth buying, you’ve got something worth stealing.”

A recent article by Kevin Greenberg at Forbes.com tells of a study by Purdue’s Krannert School of Management where CIOs were surveyed about the loss of intellectual properties in 2008. The value of lost information is staggering. Of the 119 respondent CIOs, the value of stolen information last year was $559 million or $4.6 million per company. (more)

Brazilian Cell Phones Smuggled

Brazil - Police say inmates are using carrier pigeons to smuggle cellphones onto a prison farm in southeastern Brazil.

Police inspector Celso Soramiglio says that guards at a prison near the city of Sorocaba caught a pigeon last Wednesday with components of a small cellphone inside a bag tied to one of its legs.

A day later, another pigeon was found with a bag containing a cellphone charger.

The birds apparently were bred and raised inside the prison, smuggled out, outfitted with the cellphone parts and then released to fly back.

Soramiglio noted that pigeons "instinctively fly back home — always." (more)

To our Washington, DC readers: Read the headline again. It's not as many cell phones as you're thinking.

15 Employees Fired for Snooping...

...and another eight hospital employees disciplined for improperly accessing Nadya Suleman's files!

A Kaiser Permanente hospital located in a Los Angeles suburb has fired 15 employees and reprimanded eight others for improperly accessing the personal medical records of Nadya Suleman, the California woman who gave birth to octuplets in January.

The unauthorized accessing of Suleman's electronic records at the medical center in Bellflower, Calif., violated a California law designed to safeguard the privacy of health care data, according to Kaiser spokesman Jim Anderson, who said the snooping incidents have been reported to the California Department of Public Health...

An Associated Press story published today quoted Suleman's attorney as saying that she has no plans to sue Kaiser over the data breaches. (yet) (more)

Extortionography: Activists vs. Planned Parenthood

AZ - An anti-abortion group's hidden-camera video is raising questions about whether Planned Parenthood facilities in Arizona are meeting their legal duty to report sexual abuse of minors.

Planned Parenthood Arizona says its commitment to the health of women remains its guiding principle. It calls the videos "edited propaganda."...

But the question of accountability is unclear. The videos are based on a fabrication. The women in the videos are adults, not young teens, and they're not pregnant. (more) (Extortionography)

Crikey, they're tapping Bikie!

Australia - Federal Attorney-General Robert McClelland says the Commonwealth Government will consider changing the federal law governing phone taps in a bid to help states crack down on bikie gangs and organised crime.

Mr McClelland says he will discuss the need for a nationally consistent framework to tackle bikie gangs when he meets with the state attorneys-general next month.
..

The current laws say phones can be tapped if police suspect someone of a crime which could attract a seven-year jail sentence, but Mr McClelland says that could be lowered to five years. (
more)

Soufflé Dream Car - James Bond's Aston Martin

Spy fantasists can now buy their very own James Bond car, complete with hood-mounted machine gun cannons and rocket launchers secreted by the front grille, for just $125,900 U.S. -- and it's even street legal. (WOW!)

The ultimate spy car edition includes: Front grill rockets, machine gun cannons, revolving license plate and other must have accessories. (YES!)

"The weaponry is fake, of course, (ah, man!) so it doesn't work but it looks realistic," says Cloverdale businessman Mark Stuzka, who has teamed with Exclusive Motor Cars to produce the Ultimate Spy Car.

"Neither can it be operated when the ignition is switched on, as the last thing we want is people ahead being frightened to death at the sight of a cannon in their rear-view mirror." (sez-who?!?)

The revolving license plate also won't flip while driving, so don't think you can beat that speeding ticket by displaying a phony number! (PHOoowwwzzz...) (more)

Monday, March 30, 2009

Update: CEO to be run out of town on a rail?

Yes.
Germany - The head of Germany’s state owned rail operator resigned today following a series of scandals over the company’s attempts to spy on its staff...


Describing himself as a “tough man,” he told a press conference in Berlin: “The prejudgement, suspicion and speculation have reached dimensions that are no longer bearable even for me.

This is not about a data protection scandal but rather a campaign to change the firm’s direction,” he added, stressing that investigators have found no evidence of illegal activity by DB’s management. He denied any wrongdoing. “My conscience is clear,” he said. (more) (background)

Super-Secret Spy Lens (oldie but goodie)

from the seller's website...
People have a sixth sense for knowing when someone's taking their photo. Especially so when you've got an SLR and a big lens pointed right at 'em.


Our
Super-Secret Spy Lens is the answer.

It's the ultimate accessory for kids, the photo-shy, street photography or any time you want natural, unposed shots." (more)

Business Espionage - Valspar Corp.

IL - A former Valspar Corp. employee was accused by U.S. prosecutors of stealing trade secrets from the paint maker, then packing his belongings for a one-way trip to China, where a new job in the same business awaited him.

David Yen Lee, 52, appeared Friday before U.S. Magistrate Judge Sidney Schenkier in Chicago, one day after FBI agents said they arrested him in possession of a pocket-sized computer "thumb drive" containing Valspar data. (more)

Can't say we haven't been warning you...
Warning 1
Warning 2
Warning 3
Warning 4
Warning 5
Warning 6
Warning 7

Warning 8