Wednesday, December 16, 2009

PI claims "I didn't know" & cops a plea ...zzzzz

FL - A private investigator linked to illegal electronic surveillance of some doctors at the Florida Eye Institute in early 2008 has entered a plea that could spare her jail time. Brenda Doan Johnson, of the 3400 block of Atlantic Boulevard, pleaded no contest on Tuesday as part of a deal reached with the State Attorney’s Office, her attorney, Andrew Metcalf said... Outside Hawley’s courtroom, Johnson tearfully said she apologizes to doctors Karen Todd, Val Zudans and Mark Gambee. “I didn’t know this was illegal,” she said. (more)

Illegal Eavesdropping Indictment for Cop

NY - A suspended Schenectady police officer has been indicted on felony charges of eavesdropping, computer trespass, computer tampering, harassment and stalking in connection with a series of incidents between November 2008 and November 2009. As a result of the indictment, Officer John Lewis has been suspended from the department for a period of 30 days without pay, said Sgt. Eric Clifford. (more)

Wiretap World News

Columbia - Last week’s cover story in the leading Colombian newsweekly Semana—known for investigations that have shaken the core of the administration of President Alvaro Uribe Vélez—revealed further evidence of illegal wiretapping of journalists by the Administrative Department of Security (DAS), the country’s national intelligence service. The article, titled “A handbook for threats,” disclosed outrageous details about the intimidation techniques used by the DAS on journalists it considered dangerous. (more)

Turkey - A long-running power struggle between secular elites and the religiously conservative government in Turkey is back on the agenda, as accusations of illegal wiretappings and a controversial court decision have triggered speculations about possible new efforts by the judiciary to close down the ruling party... government critics claim that the AKP has been eavesdropping on judges and prosecutors in an effort to intimidate them. (more)

Indonesia - A meeting between the chairmen of the Corruption Eradication Commission (KPK) and Communications and Information Minister Tifatul Sembiring ends Tuesday with both sides agreeing to keep cooperating in fixing a draft on wiretapping regulation... “There were two matters discussed [in the meeting], court permission [for wiretapping] and [the establishment] of a national interception center... (more)

United States - Warrantless wiretapping of communications and other illegal electronic surveillance operations are continuing under the Obama administration at levels commensurate with those seen during the George W. Bush administration. WMR has learned from informed sources that the Eric Holder Justice Department is also pursuing a criminal indictment against at least one intelligence agency official for leaking details of the National Security Agency’s warrantless wiretapping program with the previous Top Secret code name of “STELLAR WIND.” (more)

The U.S. Supreme Court yesterday agreed to decide whether users of text-messaging services have a reasonable expectation of privacy in the contents of copies of messages the service provider stores on its network. In a brief order, the justices granted certiorari in City of Ontario v. Quon and USA Mobility Wireless v. Quon, 08-1332 and 08-1472. The Ninth U.S. Circuit Court of Appeals ruled last year in those cases that the Ontario Police Department violated the Fourth Amendment rights of one of its officers and three others with whom he had exchanged text messages on a department-issued pager. (more)

Kenya - A section of human rights organisations have proposed a raft of amendments to the Harmonised Draft Constitution on issues of national security, including limiting the powers of the National Security Intelligence Service (NSIS). ...said the draft should enact provisions which will bar the NSIS from tapping into people’s conversations without obtaining court orders. (more)

Guatemala - Supervisor of Presidential Security Detail Assassinated in Guatemala
The attack is the latest in a series of incidents involving the Secretariat for Administration and Security (SAAS). In September, the director of SAAS was detained on espionage charges following the discovery of covert audio and video recording equipment in the president’s offices and residence. (more)

SpyCam Story #564 - Hokey may go to Pokey

Spain - The owner of a wedding venue and disco in Cazorla (Jaén) has been arrested after police discovered spy cams he had installed in the women's toilets.

C.D.M.V. (30), a local resident of Cazorla and owner of El Clan, a popular local disco and restaurant, installed secret cameras in the stalls of the toilets in the Ladies of his establishment "with the intention of procuring indecent images", according to the police report.

The police say that images from as long ago as the 8th of December 2008 were found on the hard drive. The police operation was launched after a woman discovered one of the cameras and notified authorities.

Police are now attempting to discover if the man was working with any organised group or if any of the images have been uploaded to the internet. (more)

Monday, December 14, 2009

Christmas Gift List from Weburbanist.com

"15 Cool Hi-tech Spy Gadgets,
Oh Wait…
Creepy Gifts for Stalkers?"
(more)
Nothing new. The usual spy gadgets we warn you about all year.

SpyCam Story #563 - Fed Up

PA - An FBI security officer who videotaped teenage girls as they undressed and tried on prom gowns at a charity event has been convicted of invasion of privacy.

Thirty-five-year-old Charles Brian Hommema of Buckhannon was sentenced Wednesday to six months in jail, but Marion County Magistrate Hank Middlemas suspended that and imposed a year of probation. (more)

Saturday, December 12, 2009

Wiretapping a Video Teleconference

John Kindervag discusses video teleconferencing wiretapping...
"Now while this technology has some real business value there are also inherent security flaws in video conferencing systems running across a corporate network. Because these internal networks are rarely, if ever, encrypted, it is possible to perform an eavesdropping attack on TelePresence or any other similar videoconferencing system.

Recently I was lucky enough to attend a hands-on VoIP and UC hacking class at VIPER Lab VIPER is run by my good friend and former colleague, Jason Ostrom. Jason and his team have been instrumental in developing new research and tools related to voice over IP (VoIP) and unified communications (UC) security. Their live distro VAST is available on SourceForge and contains several ground-breaking UC security tools.

Using one of the tools UCSniff I was able to recreate a scenario similar to the 30 Rock episode and intercept and view a live videoconference in real time. Here is a screenshot showing the UC Sniff tool intercepting a video call between Jason and me:


Anyone with access to your network can use this tool to eavesdrop on your voice or video conversations. This is why VoIP and UC security is so critical. Any unencrypted call is susceptible to this attack. Imagine that your employees can now listen in as your CEO discusses potential mergers or acquisitions. The risks are real but UC security is often overlooked." (more)

Supper Club Sale Reveals Owner's Bugs

Clarence Hartwig's Gobbler Supper Club, icon of Wisconsin, is heading for auction...
"Whoever buys the building will also get a few dozen gold-colored listening devices that were installed throughout the facility by Hartwig so he could eavesdrop on his employees..." (more)

Throw a dart at the map... Ok, Malmö, Sweden...

Cops bug wrong number. Listen for hours. (more)
Meter Maids put spycams in their caps. (more)

Friday, December 11, 2009

Just when you thought there was no place they haven't thought of for hiding a spycam...

...they present (rim shot)...
The Toilet Brush Hidden Spy Camera with Built-in Digital Video Recorder!

And now, the marvelous copy that could only have been conceived and written in a little factory, around the corner and down the block, somewhere in the Far Far East (rim shot)...
"This is a ultra-small digital spy camera that hidden in a toilet brush, it looks like an ordinary toilet brush, but it has a very powerful function, the most interest is that it internally hides a smallest camera DVR, it does not need any external plug-in card, built in memory 8GB itself, can work up to 4-5hours. there is time date stamp for the record, you can get the most authentic evidence for a variety of illegal behaviour.ideal for CIA agents, police, detector, and spy agency.this products is only developed by omejo for special offers." (more)

Why do I mention it?
So you will know what you are up against.

How to Properly Redact a PDF

When it comes to breaking into protected information, the NSA is the place to go. They know the tricks. They can also tell you how to keep your information secure. In a nutshell: Don't redact, sanitize.

Download their pdf...
Redacting with Confidence: How to Safely Publish Sanitized Reports Converted From Word to PDF - Information Assurance Directorate, National Security Agency

I couldn't find anything redacted in it, but I am still suspicious about the second page.

Tuesday, December 8, 2009

TSA Document Leak - pdf Redaction Problem

Government workers preparing the release of a Transportation Security Administration manual that details airport screening procedures badly bungled their redaction of the .pdf file. Result: The full text of a document considered “sensitive security information” was inadvertently leaked.

Anyone who’s interested can read about which passengers are more likely to be targeted for secondary screening, who is exempt from screening, TSA procedures for screening foreign dignitaries and CIA-escorted passengers, and extensive instructions for calibrating Siemens walk-through metal detectors.

The 93-page document also includes sample images of DHS, CIA and congressional identification cards, with instructions on what to look for to verify an authentic pass. (more)

"The Point," for our clients - Be careful when using the redaction feature in Acrobat (especially the earlier versions). Redacted .pdf files can be hacked. Of course, keep your counterespionage strategy up-to-date to reduce leak loophole vulnerabilities.

Wi-Fi Hacker Helper...

...Time to upgrade your Wi-Fi encryption.
For $34, a new cloud-based hacking service can crack a WPA (Wi-Fi Protected Access) network password in just 20 minutes,
its creator says.

Launched today, the WPA Cracker service bills itself as a useful tool for security auditors and penetration testers (and lazy hackers who seek easy access to your system) who want to know if they could break into certain types of WPA networks. It works because of a known vulnerability in Pre-shared Key (PSK) networks, which are used by some home and small-business users. (more)

First Came the Annoying Cell Phone'er

Then came the cell phone detector.
Then came the
cell phone jammer.
Then came the
cell phone jammer detector?!?!
"What next?"

Take Written Notes Next Time

NH - Anthony De La Pena, 37, of 668 Raymond St., Elgin, was arrested Monday on charges of felony eavesdropping and misdemeanor charges of obstructing and resisting a peace officer. De La Pena on Sunday allegedly recorded a verbal exchange between himself and an Elgin police officer without the officer consenting to be recorded, according to police reports. (more)

New Hampshire law requires all parties to a recording to consent to the recording.

Sunday, December 6, 2009

An Information Leak Can Even Make a Nobel Prize Winner Look Stupid

This is about information leaks, not about the global warming debate. Leaks can happen in any organization. The effects can be devastating, as this current event shows...

Cause
A leading climate change scientist whose private e-mails are included in thousands of documents that were stolen by hackers and posted online said Sunday the leaks may have been aimed at undermining next month's global climate summit in Denmark... About 1,000 e-mails and 3,000 documents have been posted on Web sites and seized on by climate change skeptics, who claim correspondence shows collusion between scientists to overstate the case for global warming, and evidence that some have manipulated evidence. (more)

Effect
Climate campaigner Al Gore has canceled a lecture he was supposed to deliver in Copenhagen. The former vice president and Nobel Peace Prize winner had been scheduled to speak to more than 3,000 people at a Dec. 16 event hosted by the Berlingske Tidende newspaper group. The group says Gore canceled the lecture Thursday, citing unforeseen changes in his schedule. (more)

A good counterespionage strategy will help you avoid problems.

Computer Stolen from Blagojevich's Attorney

Evidence in the Rod Blagojevich corruption case may have been stolen when burglars broke into the Chicago law firm representing the former Governor. They got away with eight computers and a safe which could have copies of those secret wiretap recordings provided by the F-B-I.... Blagojevich's attorneys don't think it will impact the June third trial date. (Stop snickering.) (more)

Street crime, or political espionage? You decide.

The Future of GSM Digital Cell Phone Taps

If you're still using a cellphone based on early digital standards, you better be careful what you say. The encryption technology used to prevent eavesdropping in GSM (Global System for Mobile communications), the world's most widely used cellphone system, has more security holes than Swiss cheese, according to an expert who plans to poke a big hole of his own.

Karsten Nohl, chief research scientist with H4RDW4RE, a Sunnyvale, Calif.-based security research firm, is mounting what could be the most ambitious attempt yet to compromise the GSM phone system, which is used by over 3 billion people around the world. Others have cracked the A5/1 encryption technology used in GSM before, but their results have remained secret. However, Nohl, who earned a Ph.D. in computer science at the University of Virginia and is a member of Germany's Chaos Computer Club (CCC), intends to go one big step further: By the end of the year, he plans to make the keys available to everyone on the Internet. (more) (video - search HAR2009 GSM)

"Go to the Principal's office."

MI - Court papers filed in a federal lawsuit against the Bullock Creek School District allege eavesdropping and violations of constitutional rights... The case was filed by Michael Wittbrodt...

Superintendent John Hill and employee Jeffrey Taylor began to intercept and read e-mails... sent by Wittbrodt to a secretary.


The suit accuses the defendants of eavesdropping on private e-mail communications of others and divulging the contents in violation on the Electronic Communications Privacy Act of 1986, the Federal Wiretapping Act, the due process clause of 14th Amendment of the U.S. Constitution and invasion of privacy. (more)

A "Move on" turns into an Eavesdropping Arrest

IL - A Rogers Park neighborhood man was charged with felony eavesdropping after allegedly taping conversations -- including the voices of officers who arrested him -- without permission while selling art for a $1 Wednesday afternoon in the Loop. (more)

Learn how to make real Dollar Art!

Tuesday, December 1, 2009

New Communications Bunghole Opens Today...

...Tap arrives later.
Sweden - The highly discussed and controversial wiretap law takes effect today. But the signal intelligence agency FRA is far from ready with the technical implementation.


The “FRA law” last year was accepted by the Parliament and gives ‘Försvarets radioanstalt’, FRA ( the National Defence Radio Establishment) legal permission to tap communication cables passing the Swedish national borders, this despite protests by a large public opinion and many experts. (more)

More Powerful than a Santa Claus GPS

USA - One phone company "provided law enforcement agencies with its customers' (GPS) location information over 8 million times between September 2008 and October 2009."

How did they do it?

Automation... "a new, special web portal for law enforcement officers."


How did this leak out?

A company employee "who described it during a panel discussion at a wiretapping and interception
industry conference, held in Washington DC in October of 2009. " (more) (video)

FutureWatch...
This will become commonplace.

UN in Geneva Reportedly Bugged

(via Al-Manar TV - unverified)
"A Swiss newspaper said that a number of UN employees in Geneva have concluded that Israel is eavesdropping on UN court sessions. The Neue Zuericher Zeitung (NZZ) added that bugging devices have been found in the organization’s deliberations room in the Swiss capital.

The newspaper pointed that during regular maintenance procedures on the electrical network, three years ago, two bugging devices were found in a room set for the UN Disarmament Committee meetings. It added that ‘secret’ meetings were also held in the room over the Second Gulf War and the assassination of former Lebanese PM Rafik Hariri.

NZZ revealed that other spying devices have also been found in other parts of the building, including courtrooms...

UN security experts estimate that the planting process might have taken at least two days with the collaboration of UN employees...

The Israeli newspaper, Yedioth Aharonoth, quoted Israeli diplomats as denying any connection to the issue." (more)

Sunday, November 29, 2009

The Big House Family Taps Each Other

CO - Felony eavesdropping charges have been filed against three Arapahoe County Jail employees accused of listening in on conversations on the jail's phone system.

Two other employees have been placed on administrative leave and another resigned after jail administrators said they would investigate eavesdropping by jail employees on other employees.

Lt. Chris Manos and civilian employees Sue White and Jaella Rangel were all charged with class six felonies. All are set to appear in court next month. (more)

Just the thing for a Black Friday gift list...

The Official CIA Manual of Trickery and Deception

From Publishers Weekly
...
Intelligence historian Melton and retired CIA officer Wallace (coauthors of Spycraft: The Secret History of the CIA's Spytechs, from Communism to al-Qaeda) reunite for this unremarkable reproduction of a long-lost cold war–era relic.

In 1953, the fledgling CIA hired professional magician John Mulholland to adapt his techniques of stealth and misdirection to the craft of espionage. Mulholland produced two illustrated manuals featuring a range of tricks from placing pills into drinks to stealing documents and avoiding detection.

The classified manuals were believed to have been destroyed in 1973, but the authors discovered a copy in 2007 among recently declassified CIA archives.

Like Grand Theft Auto?

Some Twin Falls teenagers are promising to pay attention to the road. And if the preservation of life isn’t enough of an incentive, they can also win video games...

Enrollment in the program provides parents with a high-tech method of conducting covert surveillance on their kids’ driving habits. A video and audio unit in the vehicle captures dangerous driving behavior and gives parents access to a “driving report card,” along with tips for improvement. (more)

Coach, is that you Duckman?

At a tense, emotional moment during Denver's crucial 26-6 victory over the New York Giants, McDaniels went nuclear, dropping a verbal bomb on his players. Thanks to an eavesdropping camera and microphone from the NFL Network, the tirade on the sideline was telecast to prime-time viewers across America in all its profane glory. (more)

Jackie Chan - The Spy Next Door

Coming January 15, 2010.
(trailers)

Saturday, November 28, 2009

New Eyes for Spies

Prototype contact lenses developed by Babak Parviz at the University of Washington, in Seattle.

Dr. Parviz’s prototype lenses can be used as biosensors to display body chemistry or as a heads up display (HUD). Powered by radio waves and 330 microwatts of power from a loop antenna that picks up power beamed from nearby radio sources, future versions will also be able to harvest power from a cell phone. (more)

Alright, knock it off with the "See I A" and "eyes buggin' out" jokes.

SpyCam Story #562 - The play is the thing.

Australia - A former drama teacher at a Melbourne girls school has been accused of installing a spy camera to capture students undressing and making child pornography. Mark Stratford, 49, was employed as director of drama at Lauriston Girls School when the alleged offences took place from early last year. He pleaded guilty today in the Melbourne Magistrates Court to possessing child pornography and installing an optical surveillance device. (more)

"Quick. Name the Top Ten Spy Agencies."

We'll give you one...

Now, name the rest.
(answer)

Monday, November 23, 2009

"Every-body wants to get into the act."

via makeuseof.com...
Make 4 Cool Spy Gadgets With Your Windows Mobile Phone...

Have you ever wanted to live like a real spy, even for just a little while? Just to help you inch just a little bit closer to that cloak and dagger lifestyle, I’d like to offer 4 Windows Mobile downloads that you can use to transform your regular mobile phone into an honest-to-goodness cool spy gadget.

• Cool Spy Gadget #1 – A Room Bug To Record Conversations
• Cool Spy Gadget #2 – See In The Dark With Sonar

• Cool Spy Gadget #3 – Disk Encryption Software
• Cool Spy Gadget #4 – Remote Video Streaming (more)
"Good night, Mrs. Calabash, wherever you are."

S.E.C. Enforcement Chief: ‘Creative Investigation Techniques’ Coming

The use of wiretaps and recordings of conversations to help underpin the insider trading case against the Galleon Group hedge fund struck legal experts as unusual, for an investigation involving the Securities and Exchange Commission.

“It is unusual,’’ said Robert S. Khuzami, the director of enforcement at the S.E.C., at a discussion of hedge fund regulation at the Practising Law Institute in New York Monday. But, a year from now, “I hope it’s more common.’’ (more)

Thursday, November 19, 2009

Need a safe place to store your surveillance video...

A new service called Motionbox may be the answer. Unlike Youtube.com, Motionbox makes it easy to share videos with a select group of viewers instead of broadcasting to the world.

There are plenty of other features, too.

You may even want to consider this for personal use. Store all those home videos (and films, once converted to digital video). Allow relatives and others access as you see fit. Even watch your library on your TV...

Motionbox is soon to be a featured Channel on the Roku digital video player. You'll be able to hook the player up to your television and enjoy instant access to all the videos you’ve uploaded to Motionbox. All you need is a TV, a high-speed Internet connection (wired or wireless), and a finger to click the remote! (Win a FREE Roku drawing.)

Like any new business, they want to build momentum quickly. Hence, this special offer aimed at business users...


"I thought that you and the readers of Kevin's Security Scrapbook would be interested. We'll waive the pro-account setup fee for you or any of your readers who sign up - it's a $50 value. There are now 3 levels of Motionbox service - Basic, Premium, and PRO." Lowell Dempsey, Motionbox (more)

For personal use, choose the free Basic package, or the Premium upgrade. ~Kevin

The Real Spy's Guide to Becoming a Spy (update - Book Signing)

Remember this book? The Real Spy's Guide to Becoming a Spy by Peter Earnest with Suzanne Harper. It was listed here last September.

Peter Earnest is former CIA and the founding executive director of the International Spy Museum, located in Washington D.C.

Get signed copies... for you, and every shady character (or future shady character) on your holiday gift list.

• Have you ever wondered what spies really do?
• What kind of training is involved?
• How do you live your “cover”?

• How does your work life affect your relationships with your friends and family?

Join the International Spy Museum's Founding Executive Director and Former CIA Operations Officer, Peter Earnest, as he discusses his new book The Real Spy's Guide to Becoming a Spy. This fascinating, fact-filled book answers these questions and more while providing a historical timeline, definitions of key terms, suggestions for further reading, an index, quizzes, and exercises to see if you have the right spy stuff. The author will be available for book signing and informal Q&A.

FREE. No registration required.

Saturday, November 21, 2009
1:00 PM - 3:00 PM

The International Spy Museum
800 F Street, NW, Washington, DC 20004, USA

Spy Tip: A good spy knows the ropes. Use the secret password "I SPY" and get a 25% discount to the museum. Also enter to win a basket of top-secret spy tools and a one-year museum membership!

Some Courts Raise Bar on Reading Employee Email

via The Wall Street Journal...
US - Companies Face Tougher Tests to Justify Monitoring Workers' Personal Accounts; Rulings Hinge on 'Expectation of Privacy'

Big Brother is watching. That is the message corporations routinely send their employees about using email.

But recent cases have shown that employees sometimes have more privacy rights than they might expect when it comes to the corporate email server. Legal experts say that courts in some instances are showing more consideration for employees who feel their employer has violated their privacy electronically. (more)

Wednesday, November 18, 2009

Amazing Surveillance Video

Train track inspector almost gets smooshed... twice!

Just when cell phone companies inched past used car dealers in the "who do you trust more" race.

UK - Staff at mobile phone company T-Mobile passed on millions of records from thousands of customers to third party brokers, the firm has confirmed...

Christopher Graham said brokers had sold the data to other phone firms, who then cold-called the customers as their contracts were due to expire. (more)

Suggestion... Find out who keeps the data key at you company. Review the security checks and balances. Let them know you are minding the store.

This just in!
Used car dealers take the lead...

NY - Starting next week, Verizon will double the early-termination fee for smartphones... "David, I read your posts about how the cell carriers are eating up our airtime with those 15-second 'To page this person, press 5' instructions, but I think Verizon has a bigger scam going on: charging for bogus data downloads.

"Virtually every bill I get has a couple of erroneous data charges at $1.99 each—yet we download no data.

"Here's how it works..." (more)

Tuesday, November 17, 2009

Quote of the Week

"A surprising number of otherwise smart people find themselves remarking on the phone that they hope the line isn't tapped."
~Ann Woolner, Bloomberg News, commenting on federal wiretaps investigating insider trading.
(more)

Other great quotes we hear...
"I hope the room isn't bugged."
"I hope you're not recording this."
"I hope there are no hidden cameras here."

Of course, 'hoping don't help'.
You need this.

SpyCam Story #561 - The New Miranda Warning

FL - A woman who is suing her former landlord over allegations he secretly set up a spy camera in her bedroom is asking a judge to add punitive damages to her claim.

Miranda Goldston, 26, filed her lawsuit seeking compensatory damages against Kenneth Ryals, 59, in December 2007, three months after she discovered the spy camera hidden inside a DVD player in her bedroom. (more)

Illegal Wireless Phone Tap Found

Israel - Knesset security officials are concerned over what may be a case of illegal wiretapping of phones of the Ravitz family of Beitar Illit.

It appears the concerns began with “strange noises” heard on the phone by members of the family. A routine inspection into the cause of the noise revealed a wireless eavesdropping device.

According to the Chareidim report, those involved are more than a bit curious as to who is eavesdropping on the phone of Yitzchak Ravitz, who heads Degel HaTorah in the community, or perhaps the eavesdropping is intended to listen in on the conversations of his daughter Rivke, who is Knesset Speaker Reuven Rivlin’s bureau chief. She has been an employee of Speaker Rivlin for over a decade. (more) (Update: Rivke is his wife; not his daughter.)

The Eves Drop a Dime

India - Wiretaps, hidden listening devices and binoculars may be the usual paraphernalia to maintain surveillance over Commonwealth Games delegates, participants and spectators. But there may be more. Games authorities have devised a novel method to eavesdrop: Use thousands of eves.

An estimated 5,000 trained private security girls are likely to provide intelligence cover to the 2010 Commonwealth Games, one of the biggest sporting events that India will host after the 1982 Asiad Games...

“They will comprise women from all linguistic backgrounds, and with suave and comely personalities who will be responsible for a dual preemptive and protective role,” said Singh, a former Intelligence Bureau officer who was appointed a security consultant for the 1982 Asiad by Indira Gandhi.

While CCTVs will keep a watch on the movements of people entering stadia, the security girls will play an undercover role to snoop on conversations around them. They have been instructed to pick up interesting nuggets of conversations that will help the authorities nip any mischevious activity in the bud. (more)

Monday, November 16, 2009

Compliance departments on red alert for insider trading

In the wake of the alleged insider-trading ring involving hedge fund manager Galleon Group, compliance departments at asset management firms and broker-dealers are stepping up their vigilance.

As regulators increase their scrutiny of insider trading, firms are actively reviewing their compliance policies, making sure that employees understand them and conducting more audits of their trading patterns to make certain that nothing is potentially amiss...

The main worry at firms is that employees could be sharing information and unwittingly contributing to an insider-trading scheme...

Compliance departments also are making sure employees are careful with how they use other forms of media, such as voice-over-Internet, social-networking websites such as Twitter, and blogs.

“People need to understand that the law is the law, no matter what communication medium they are using,” said Ralph “Chip” MacDonald, a partner at Jones Day. (more)

An unpublicized element of this due diligence are Eavesdropping Detection Audits (TSCM).

Mobile Phone Bug Allows Wiretapping

Fact or Netmyth?
You decide.
Report back.

Summary
Erricson's WAP, Wireless Application Protocol, suffers from a security flaw that allows attackers to listen into other WAP sessions traveling on the cellular carrier wave.

Details
Erricson Mobile Phone allows attackers to wiretap other lines. This attack is limited, since you cannot choose which number to wiretap on, and you cannot talk at the same time that you are wiretapping a line. This vulnerability shows the lack of security of WAP as it is offered in today's cellular networks.

IMPORTANT NOTE: Wiretapping is illegal. The following information is just a proof of concept that shows a potential vulnerability in Erricson's WAP implementation.

How to wiretap from an Erricson Cell Phone:
1) Type 904059
2) Menu
3) Yes
4) 1
5) RCL
6) Yes
7) 8300**
8) Yes
9) 86
(Instead of the ** you can write any number you wish, except for the number 00)

To stop the wiretapping:
1) Type RCL
2) 3
3) Yes
(via)

Our spies report back...
"I am with cellular operator and today I asked my technical staff about this method. They replied
this is very old news, about year 2001. This bug was on very old Ericsson (before Sony Ericsson) phones and modern phones do not respond to this code sequence."
Thank you!

Eat Like a Spy

Next time your mission brings you to The Big Apple (aka New York City), and you need a little comfort food, come in from the cold.

Shake your tail (a quick double-back through Stuyvesant Town should do it) and head to The Village (you can leave this one). Duck into the
Northern Spy Food Co.

They know spies need to stay fit. Northern Spy co-owner Chris Ronis calls his seasonal menu, "very homey but not heavy—not the fat-fried explosion that gets all the attention."


Psst... Chris, ixnay onway ethay explosionway alktay. It makes the patrons nervous.

Friday, November 13, 2009

New - GSM Audio Video Bug

from the manufacturer's advertising...
Specifications
• See your monitoring place anywhere, anytime by your mobile phone

• Wire tap your monitoring place by your mobile
• Know the urgent things in first time by your mobile
• Wireless installation, can move freely
Can control the camera with your mobile to get the monitoring place image by MMS anywhere
Successfully combine moving detect technology and GSM wireless network transmission technology apply in defense and security area, it break the distance and electrical wire restriction compare with normal defense and security products
Any changes or dangerous in the monitoring place, camera will notify you by calling, SMS, or MMS
Can dial the preset emergency number once the sensor active
With cute appearance, practical functions, and bright design
Applicable in family, office, factory, store etc place, especially for garage, stock house, and more where fixed lines are hard to reach
With monitor, can see your home any time, know your child arrive home in first time, and know your office is safe during holiday

Functions:

Mobile alarm: capture images and send to your mobile phone by MMS
SMS remote control: control the camera by sending SMS commands
Real time audio: call the camera and listen in
Motion detection: detect any motion within the monitoring area and send alarm
External connection: connect wireless sensors (maximum of 15), such as door magnet, PIR sensor, smoke sensor, gas sensor, and more
Camera can report alarm from all sensors connected
Infrared light: built-in IR light enables the camera to capture images in dark environment
Resolution: 300 pixels CMOS camera
Watch images directly
(more)

Why do I mention it?
So you will know what you are up against.

Warning: industrial espionage on the rise

Denmark - Companies are being warned by both an industry organisation and the national intelligence agency that industrial spies are ever present.

Jakob Scharf, head of the Danish Security and Intelligence Service (PET), recently warned that industrial espionage has been growing steadily in the last number of years and Danish companies are not impervious to it. (more)

UK - Universal Knowledge?

UK - The British government has decided to go ahead with its plans under what it calls the Intercept Modernisation Programme to force every telecommunication company and Internet service provider to keep a record of all of its customers' personal communications, showing who they have contacted, when and where, as well as the web sites they have visited, according to the London Telegraph and various other British papers.

The information gathered, the Telegraph says, will be able to be accessed by 653 public bodies, "including police, local councils, the Financial Services Authority, the ambulance service, fire authorities and even prison governors."

"They will not require the permission of a judge or a magistrate to obtain the information, but simply the authorisation of a senior police officer or the equivalent of a deputy head of department at a local authority," the Telegraph says. (more)

Thursday, November 12, 2009

Number Six, Number Two & Rover are back

The 1960s sci-fi phenomenon, The Prisoner TV series, is back. AMC and British network ITV re-made the cult show into a six-part mini-series that will begin airing this Sunday.

Patrick McGoohan co-created the original Prisoner series, directed it, and starred in it as well. The show centers on the imprisonment of a resigned British secret agent (McGoohan) in a seemingly serene and beautiful village of unknown location.

The captive agent, renamed Number Six (all prisoners in the village are numbered), is constantly interrogated, manipulated and tormented by sinister figures known only as Number Two.

In addition to being a psychological thriller that was way ahead of its time, The Prisoner demonstrated a number of political metaphors for the corruption of power, struggl
es for freedom, and the enslavement of the masses by commercial/political interests.

Sir Ian McKellen will take on the role of the evil Number Two and James Caviezel will play persecuted Number Six. It’s rumored that McGoohan (who died January 13, 2009) may have a cameo in the remake as well. (AMC)

Tuesday, November 10, 2009

Charity President Fired for Bugging

Feed The Children President Larry Jones was fired Friday from the charity he founded 30 years ago. ... He and his wife, Frances, were the main fundraisers, making repeated, often heart-wrenching televised pleas for money to help starving children in Africa and elsewhere.

The firing came after Jones admitted to the charity’s investigator and to police that he authorized the installation of hidden microphones in three executives’ offices last April. "I did nothing wrong there. … I knew what the law was… They used wiretapping as the excuse,” Jones said Friday.

Jones in April had hidden microphones installed in the offices of his daughter, the chief financial officer and the chief operating officer before they returned to their jobs, according to two of his attorneys.

Oklahoma City police became involved Aug. 19 after a private investigator found "remnants of wiretapping devices” in the ceilings of the three offices. The owner of the company that installed the microphones told police his employees never could get a recorder to work.

Jones has been the face of the Oklahoma City-based Christian relief organization. It reports collecting more than $1 billion in donations a year. (more)

PTL deja vu.