Friday, April 17, 2009

Cell Phone Spying

Cell phone questions we receive...
"Can someone...
...listen in on my calls?

...listen to my voice mail messages?
...remotely steal my contacts list?
...send fake texts from my phone?
...activate my microphone 24/7?
...make my phone dial someone else?
...get a text stating the length of my call?
...get a text when I use my phone?
...send me texts using a fake number?
...get my new phone number when I switch SIM cards?
...get a text message with the numbers I call and receive?
...track where I am on a computer map using the phone's GPS?
...track where I am on a computer map even if my phone lacks GPS?
...can they do all this from anywhere in the world?
...record my calls using my phone's own internal memory?

...trick me into installing spyware by making it look like a game?

Isn't this illegal to do in the United States?"
Yes.

See...
(
investigative video news report)
(
more stories about cell phone spying)

Cell Phone Eavesdropping in India

India - Is your mobile under 'unofficial' surveillance? The Intelligence Bureau (IB) has recently sent a report to the Centre about mobile phone companies sharing unauthorised information about clients with influential police officers.

The report says that sensitive and personal information about mobile phone users in Gujarat is being passed on illegally to police officials, without following legal procedures.

The report also hints that duplicate numbers are being made available to cops, allowing them to eavesdrop on conversations real time. (more)

Town Clerk Recall - Illegal Eavesdropping Cited

MI - A former Hamburg Township official has started the process to recall current township Clerk Matt Skiba, a person he says is the most objectionable politician he's ever seen.

Mike Bitondo, a former township trustee, filed recall petition language with the Livingston County Clerk's office on April 9...

Bitondo claims Skiba treats the public and township employees and officials with "disrespectful, accusatory and condescending behavior," that he's demanded employees sign pledges of loyalty to him, that he secretly records conversations he has with employees and the public and that he's used a remote listening device to eavesdrop on other people's conversations. (more)

Lost your clerk's job? Have I got a job for "Q".

Britain's domestic spy agency — MI5 — is hunting for "Q".
MI6's sister organization, which carries out surveillance on terror suspects inside Britain and gives security advice to the government, is searching for someone to lead its scientific work.

"Looking for a chief scientific adviser to lead and coordinate the scientific work of the security service so that the service continues to be supported by excellent science and technology advice," MI5's Web site ad reads....

Mobile phones equipped with sensors for detecting chemical, biological or radioactive agents are already in the works. Others, such as supersensitive eavesdropping devices, will likely be rolled out for the 2012 Olympics in London. (more) (application)

SniffJoke - A Grass Roots Net Protection Effort

SniffJoke is a software you run on your computer that injects randomly generated traffic in your normal one. While it does not affect the normal communication and the content exchanged with a remote host, it has a noisy effect on the operation of a third element eavesdropping on your conversation (be it a sniffer, a passive interceptor or a Chinese trojan).

The data it injects makes the reconstruction of TCP streams very arduous (eg: wireshark, xplico). As in any concealment technique, an expert professional can understand the general flow of the transaction by reading one packet at a time, but this analysis cannot be automated, so: if they’re after you they will get you, but with this software you could consider yourself safe against mass-targeted attacks. (more)

Thursday, April 16, 2009

Anatomy of a TSCM PR Fiasco

Chapter 1 - The Disgruntled Turn TSCM Into a Four Letter Word

Canada - Embattled Vaughan Mayor Linda Jackson used taxpayers' money to have her city hall office swept for listening devices last year, a practice borrowed from her predecessor and archrival, Michael Di Biase.

Through a Freedom of Information request, residents Gino and Mary Ruffolo, former supporters turned Jackson critics, uncovered an invoice showing the mayor's office paid Protech Consult Services $2,730 for equipment and labour for "manual and electronic counter surveillance."

"It appears the taxpayer is paying for Jackson's office to be swept for bugs," Mary Ruffolo said yesterday. "What is going on? Why is the poor taxpayer paying for this?" (more)

"What is going on?"
Yellow journalism. Scandal-mongering. Sensationalism. This is not news.

"Why is the poor taxpayer paying for this?"
Inspections for illegal electronic surveillance (TSCM sweeps) are a generally-accepted security practice. Both governments and businesses routinely conduct inspections for electronic surveillance.

In local government, for example, inspections can prevent fraud in negotiations and bidding; saving taxpayers money.

Not ferreting out illegal electronic surveillance is just negligence.



Chapter 2 - The Opportunistic Smell Blood

Ursula Lebana has a $50 solution to Vaughan Mayor Linda Jackson's political problems – and 2 cents worth of advice.

"People never believe it, but 90 per cent of the time, it's the person you trust the most," says Lebana, who opened Canada's first "spy shop" back in 1991 and can attest to the fact that Cold Wars are still being waged in offices, marriages and even babies' bedrooms around the world.

And for $50, the embattled Jackson, who spent $3,000 in taxpayers' money last year to have her office swept for listening devices, could have rented one of Lebana's do-it-yourself bug detectors.

Lebana has armed everyone from entrepreneurs to parents with electronic surveillance gadgets since she hung a few Bond posters on the walls of her Yonge St. Spy Tech store and created the first Teddy cam to help parents keep an eye on their child's nanny. (more)

If you even remotely think that "one of Lebana's do-it-yourself bug detectors" can help you, then you will definitely be interested in buying this book to go along with it.

Top actress’ cell phone cloned to eavesdrop (update)

Korea - Prosecutors cleared the chief of Sidus HQ, a major entertainment agency, of replicating a cell phone of top actress Jeon Ji-hyun, 27, to track her phone calls and text messages.

Sidus was investigated for alleged hiring an expert to access phone records and messages of the actress in late November 2007, shortly before her contract with the company was to expire.


Sidus CEO Chung Hoon-tak and two other executives were under investigation for eavesdropping on Jeon, who signed with Sidus while still in high school more than 10 years ago.

The outside expert, who was hired to help copy and rig Jeon's handset, was given a one-year jail sentence last month.
(
more) (background)

3 Skimmers in 1 Week PINed

via Ben Popken...
Three different ATM skimmers were found this week and reported on blogs, raising the question of what the heck is going on considering these are supposed to be a rarity. First, our reader Dan found a skimmer on a WaMu/Chase ATM in LA. Gizmodo picked up the story and subsequently their reader Sean Seibel found a skimmer on a Chase ATM in Manhattan's East Village. Then this kid Nick McGlynn found a setup similar to the one Sean did, also on a Chase ATM. Now, when our reader Dan took the credit-card snagging device skimmer to the police he said they, "got a big kick out of the skimmer, saying they'd never seen one in person." (more) (background)

Security Alert - Be careful at ATMs and gas stations.
• If the card slot 'looks weird' (too big, cheesy, off-color, etc.), skip it.
• Cover your fingers when entering your PIN – to block overhead cameras or telescope voyeurs.
• Think you've been had? Call the branch manager or the cops, quickly.

Need A Gift? Everyone likes spy gear...

On a mission for spy gear?
Find it here...
The International Spy Museum Store features all things espionage for Real spies, Kid Spies, the Spy-curious, and Spy-Wannabes.


Check out these doormats, for example...

Fly Spies - l’Entreprenant & High Flying Lowe

Thinking about all the modern spy drones and insect-like flying surveillance bugs makes minds boggle.

Remember the good old days when spies floated?


The first decisive use of a balloon for aerial observation was performed by the aérostat l’Entreprenant ("The enterprising one") at the Battle of Fleurus in 1794. The following year, during the Siege of Mainz an observation ballon was employed again. However, the French military use of the balloon did not continue un-interrupted as in 1799, Napoleon disbanded the French balloon corps.

The Intrepid was a hydrogen gas balloon or aerostat built for use by the Union Army Balloon Corps for aerial reconnaissance purposes during the American Civil War. It was one of seven balloons constructed for the Balloon Corps and was one of the four larger balloons designed to make ascensions to higher elevations with a larger lift capacity for telegraph equipment and an operator. It was the balloon of choice for Chief Aeronaut Thaddeus Lowe overlooking the Battle of Fair Oaks.

The fateful flight over the Battle of Fair Oaks was instrumental in saving the fragmented army of Union Army General Samuel P. Heintzelman from what would have been sure defeat at the hands of the Confederates. via Wikipedia.com

Wednesday, April 15, 2009

You know some jerk will call Homeland Security.

Robot/People art by Kacie Kinzer...
In New York, we are very occupied with getting from one place to another. I wondered: could a human-like object traverse sidewalks and streets along with us, and in so doing, create a narrative about our relationship to space and our willingness to interact with what we find in it? More impo
rtantly, how could our actions be seen within a larger context of human connection that emerges from the complexity of the city itself? To answer these questions, I built robots.

Tweenbots are human-dependent robots that navigate the city with the help of pedestrians they encounter. Rolling at a constant speed, in a straight line, Tweenbots have a destination displayed on a flag, and rely on people they meet to read this flag and to aim them in the right direction to reach their goal.

Every time the robot got caught under a park bench, ground futilely against a curb, or became trapped in a pothole, some passerby would always rescue it and send it toward its goal. Never once was a Tweenbot lost or damaged. (more with video)
New Yorkers are too cool. Our spies tell us more Flying Dutchman Bots will be appearing on the streets. Updates to follow!

Spy Tie

Spy Tie comes with a pocket remote control so you can snap the looks on peoples faces when they see your incredibly ugly new cravat.

Also good for business espionage and private investigator work.


You can find Spy Tie here, right next to the ad for the digital microscope. You know, the one that says お肌・頭皮のチェックに!(Check the skin on the scalp!)

Mobiusly Loopy, Infinitely Idioic or Smart?

We now have spycams watching the people who watch spycams.

"Why???" you may ask...


...because the people watching CCTV images back in the control rooms often have too many screens to monitor at once, and so may miss the criminal or antisocial activities they are there to spot.

To the rescue of Big Brother's limited attention capabilities come Ulas Vural and Yusuf Akgul of the Gebze Institute of Technology in Turkey, who have developed a gaze-tracking camera system that watches the eyeballs of CCTV operators as they work. It then automatically produces a summary of the CCTV video sequences they have missed during their shift. (more)

PIN Crackers Nab Holy Grail of Bank Card Security

Hackers have crossed into new frontiers by devising sophisticated ways to steal large amounts of personal identification numbers, or PINs, protecting credit and debit cards, says an investigator. The attacks involve both unencrypted PINs and encrypted PINs that attackers have found a way to crack, according to the investigator behind a new report looking at the data breaches. (more)

Business Espionage - Software Swipe

NJ - Yan Zhu, also known as “Westerly Zhu”, age 31, a Chinese citizen in the U.S. on a work visa, was arrested this morning by FBI agents at his residence, 9 Victor Street, Apt 26, Lodi, New Jersey, on charges of theft of trade secrets, conspiracy, wire fraud, and theft of honest services fraud announced Weysan Dun, Special Agent In Charge. The investigation, code named “Westerly Winds”, began in November of 2008 based on a complaint from the victim company. (more)