Monitoring NSA in de VS en erbuiten, deel 7

quote:

Op dinsdag 17 september 2013 20:31 schreef Papierversnipperaar het volgende:

[..]

quote:

Op donderdag 19 september 2013 20:11 schreef polderturk het volgende:

[..]

Waarom luistert de NSA een Braziliaans oliebedrijf af? Om terrorisme te bestrijden?

quote:

Op donderdag 19 september 2013 20:34 schreef El_Matador het volgende:

[..]

Waarom denk je?
Informatie kan goud waard zijn.
En dat is het punt gelijk; al die klagende sukkels dat de VS afluisteren, ja duh!

Opties:
- sluit jezelf af van "het vreselijke internet"
- doe hetzelfde; afluisteren werkt blijkbaar

Dat gejank van die mennekes is als in een oorlog roepen; "hee, jij hebt grotere en betere wapens dan wij, dat is niet eeheerlijk", Calimero, jank jank.

Anonymous - OpNSA Release V John Boehner

SPOILER

Om spoilers te kunnen lezen moet je zijn ingelogd. Je moet je daarvoor eerst gratis Registreren. Ook kun je spoilers niet lezen als je een ban hebt.

quote:

"Nederland opent deur voor NSA"

<sub>zaterdag 21 sep 2013, 09:33 (Update: 21-09-13, 10:02)

Door research-redacteur Hugo van der Parre</sub>

Onder de leden van de Amsterdam Internet Exchange (AMS-IX) is onrust ontstaan omdat het bestuur een filiaal wil openen in de Verenigde Staten. Ze vrezen dat Amerikaanse spionagediensten dan heel eenvoudig in Nederlandse netwerken kunnen grasduinen.

De Amsterdam Internet Exchange is het belangrijkste internetknooppunt van Nederland en het een na grootste ter wereld. Een groot deel van het internetverkeer met het buitenland en het internetverkeer tussen Nederlandse internetproviders verloopt via dit knooppunt. Meer dan 600 bedrijven en organisaties zijn lid van de vereniging AMS-IX. Daaronder zijn alle internet-providers in ons land.

Felle discussie
Het bestuur wil dat de leden volgende week toestemming geven om onder de vleugels van de AMS-IX een vestiging in de Verenigde Staten te beginnen. Dat zou zakelijk aantrekkelijk zijn.

Een aantal leden noemt uitbreiding in de VS levensgevaarlijk. De Amerikaanse overheid kan dan op grond van de Patriot Act en de FISA-wet eenvoudig data verzamelen die via het knooppunt worden verstuurd. Dat betreft vrijwel alles in Nederland. Inmiddels is op internet een felle discussie losgebarsten tussen de leden.

Een van de initiaftienemers van de discussie is Eric Bais. Hij is directeur van A2B, een bedrijf dat netwerkdiensten levert. Bais is bezorgd dat de Nederlandse infrastructuur met een Amerikaanse vestiging van de AMS-IX vatbaar is voor bemoeienis door geheime diensten als de NSA.

Risico's
Dat denkt ook hoogleraar informatierecht Nico van Eijk van de Universiteit van Amsterdam. Van Eijk: "Amerika kan met de Patriot Act inzage eisen in de datastromen. En dat beperkt zich niet tot de vestiging op Amerikaanse grondgebied. Dat strekt zich ook uit tot alle buitenlandse vertakkingen van het bedrijf".

De directie van AMS-IX wil niet reageren op de kritiek van de leden of een toelichting geven op de plannen. Dat gebeurt pas na de vergadering van 27 september. AMS-IX benadrukt dat tot die tijd met een advocaat alle risico's goed worden afgewogen.

quote:

A CEO who resisted NSA spying is out of prison. And he feels ‘vindicated’ by Snowden leaks.

quote:

Just one major telecommunications company refused to participate in a legally dubious NSA surveillance program in 2001. A few years later, its CEO was indicted by federal prosecutors. He was convicted, served four and a half years of his sentence and was released this month.

Prosecutors claim Qwest CEO Joseph Nacchio was guilty of insider trading, and that his prosecution had nothing to do with his refusal to allow spying on his customers without the permission of the Foreign Intelligence Surveillance Court. But to this day, Nacchio insists that his prosecution was retaliation for refusing to break the law on the NSA's behalf.

quote:

http://www.volkskrant.nl/(...)in-Luther-King.dhtml

De Amerikaanse geheime dienst NSA heeft in de late jaren '60 en in de jaren '70 telefoongesprekken afgeluisterd van prominente critici van de oorlog in Vietnam. Onder hen waren Martin Luther King en bokser Mohammed Ali.

Dat blijkt uit recent vrijgegeven documenten waarover The Guardian bericht. Het gaat over de periode waarin steeds meer mensen bezwaar kregen tegen de oorlog in Vietnam. Volgens de Britse krant trok de NSA in 'operatie Minaret' alles uit de kast om te proberen het tij te keren. Mogelijk gaat het zelfs om illegale praktijken, aldus The Guardian.

Zo werden telefoongesprekken afgeluisterd van twee Amerikaanse senatoren: de democraat Frank Church uit Idaho en de Republikein Howard Baker uit Tennessee. Overigens was laatstgenoemde juist een groot voorstander van die oorlog. Ook van enkele prominente journalisten werd communicatie onderschept.

Mohammed Ali
In 1967 werd de bokser Mohammed Ali op de spionagelijst geplaatst nadat hij zich openlijk tegen de Vietnamoorlog had gesproken. Ali zat op dat moment in de gevangenis omdat hij weigerde in het leger te dienen. Ook was hij gestript van zijn overwinningen en mocht hij in de VS niet meer vechten. Hij zou in de zes jaar daarna doelwit zijn geweest van de afluisterpraktijken van de NSA.

Ook mensenrechtenactivist Martin Luther King staat op de lijst van mensen die in die periode door de NSA zijn bespioneerd. In totaal gaat het om 1.650 personen, maar van het grootste deel daarvan is de identiteit niet bekendgemaakt.

De afluisterpraktijken kwamen al eerder aan het licht, maar het is voor het eerst dat er namen van mensen die zijn bespioneerd bekend zijn geworden. De NSA deed volgens The Guardian erg veel moeite om de documenten geheim te houden. Alle rapporten werden bijvoorbeeld persoonlijk afgeleverd bij het Witte Huis, nadat ze waren ontdaan van alle logo's en markeringen die ze terug zouden kunnen herleiden naar de NSA. Een aantal topfiguren binnen de NSA zouden de operatie later zelf 'schandelijk, indien niet compleet illegaal' hebben genoemd.

quote:

NSA chief’s admission of misleading numbers adds to Obama administration blunders

The Obama administration’s credibility on intelligence suffered another blow Wednesday as the chief of the National Security Agency admitted that officials put out numbers that vastly overstated the counterterrorism successes of the government’s warrantless bulk collection of all Americans’ phone records.

Pressed by the Democratic chairman of the Senate Judiciary Committee at an oversight hearing, Gen. Keith B. Alexander admitted that the number of terrorist plots foiled by the NSA’s huge database of every phone call made in or to America was only one or perhaps two — far smaller than the 54 originally claimed by the administration.

quote:

Snowden Files: NSA and GCHQ Target TOR Web Browser

quote:

The National Security Agency has made repeated attempts to develop attacks against people using Tor, a popular tool designed to protect online anonymity, despite the fact the software is primarily funded and promoted by the US government itself.

Top-secret NSA documents, disclosed by whistleblower Edward Snowden, reveal that the agency's current successes against Tor rely on identifying users and then attacking vulnerable software on their computers. One technique developed by the agency targeted the Firefox web browser used with Tor, giving the agency full control over targets' computers, including access to files, all keystrokes and all online activity.

But the documents suggest that the fundamental security of the Tor service remains intact. One top-secret presentation, titled 'Tor Stinks', states: "We will never be able to de-anonymize all Tor users all the time." It continues: "With manual analysis we can de-anonymize a very small fraction of Tor users," and says the agency has had "no success de-anonymizing a user in response" to a specific request.

Another top-secret presentation calls Tor "the king of high-secure, low-latency internet anonymity".

Tor – which stands for The Onion Router – is an open-source public project that bounces its users' internet traffic through several other computers, which it calls "relays" or "nodes", to keep it anonymous and avoid online censorship tools.

It is relied upon by journalists, activists and campaigners in the US and Europe as well as in China, Iran and Syria, to maintain the privacy of their communications and avoid reprisals from government. To this end, it receives around 60% of its funding from the US government, primarily the State Department and the Department of Defense – which houses the NSA.

Despite Tor's importance to dissidents and human rights organizations, however, the NSA and its UK counterpart GCHQ have devoted considerable efforts to attacking the service, which law enforcement agencies say is also used by people engaged in terrorism, the trade of child abuse images, and online drug dealing.

Privacy and human rights groups have been concerned about the security of Tor following revelations in the Guardian, New York Times and ProPublica about widespread NSA efforts to undermine privacy and security software. A report by Brazilian newspaper Globo also contained hints that the agencies had capabilities against the network.

While it seems that the NSA has not compromised the core security of the Tor software or network, the documents detail proof-of-concept attacks, including several relying on the large-scale online surveillance systems maintained by the NSA and GCHQ through internet cable taps.

One such technique is based on trying to spot patterns in the signals entering and leaving the Tor network, to try to de-anonymise its users. The effort was based on a long-discussed theoretical weakness of the network: that if one agency controlled a large number of the "exits" from the Tor network, they could identify a large amount of the traffic passing through it.

The proof-of-concept attack demonstrated in the documents would rely on the NSA's cable-tapping operation, and the agency secretly operating computers, or 'nodes', in the Tor system. However, one presentation stated that the success of this technique was "negligible" because the NSA has "access to very few nodes" and that it is "difficult to combine meaningfully with passive Sigint".

While the documents confirm the NSA does indeed operate and collect traffic from some nodes in the Tor network, they contain no detail as to how many, and there are no indications that the proposed de-anonymization technique was ever implemented.

Other efforts mounted by the agencies include attempting to direct traffic toward NSA-operated servers, or attacking other software used by Tor users. One presentation, titled 'Tor: Overview of Existing Techniques', also refers to making efforts to "shape", or influence, the future development of Tor, in conjunction with GCHQ.

Another effort involves measuring the timings of messages going in and out of the network to try to identify users. A third attempts to degrade or disrupt the Tor service, forcing users to abandon the anonymity protection.

Such efforts to target or undermine Tor are likely to raise legal and policy concerns for the intelligence agencies.

Foremost among those concerns is whether the NSA has acted, deliberately or inadvertently, against internet users in the US when attacking Tor. One of the functions of the anonymity service is to hide the country of all of its users, meaning any attack could be hitting members of Tor's substantial US user base.

Several attacks result in implanting malicious code on the computer of Tor users who visit particular websites. The agencies say they are targeting terrorists or organized criminals visiting particular discussion boards, but these attacks could also hit journalists, researchers, or those who accidentally stumble upon a targeted site.

The efforts could also raise concerns in the State Department and other US government agencies that provide funding to increase Tor's security – as part of the Obama administration's internet freedom agenda to help citizens of repressive regimes – circumvent online restrictions.

Material published online for a discussion event held by the State Department, for example, described the importance of tools such as Tor.

"[T]he technologies of internet repression, monitoring and control continue to advance and spread as the tools that oppressive governments use to restrict internet access and to track citizen online activities grow more sophisticated. Sophisticated, secure, and scalable technologies are needed to continue to advance internet freedom."

The Broadcasting Board of Governors, a federal agency whose mission is to "inform, engage, and connect people around the world in support of freedom and democracy" through networks such as Voice of America, also supports Tor's development, and uses it to ensure its broadcasts reach people in countries such as Iran and China.

The governments of both these countries have attempted to curtail Tor's use: China has tried on multiple occasions to block Tor entirely, while one of the motives behind Iranian efforts to create a "national internet" entirely under government control was to prevent circumvention of those controls.

The NSA's own documents acknowledge the service's wide use in countries where the internet is routinely surveilled or censored. One presentation notes that among uses of Tor for "general privacy" and "non-attribution", it can be used for "circumvention of nation state internet policies" – and is used by "dissidents" in "Iran, China, etc".

Yet GCHQ documents show a disparaging attitude towards Tor users. One presentation acknowledges Tor was "created by the US government" and is "now maintained by the Electronic Frontier Foundation (EFF)", a US freedom of expression group. In reality, Tor is maintained by an independent foundation, though has in the past received funding from the EFF.

The presentation continues by noting that "EFF will tell you there are many pseudo-legitimate uses for Tor", but says "we're interested as bad people use Tor". Another presentation remarks: "Very naughty people use Tor".

The technique developed by the NSA to attack Tor users through vulnerable software on their computers has the codename EgotisticalGiraffe, the documents show. It involves exploiting the Tor browser bundle, a collection of programs, designed to make it easy for people to install and use the software. Among these is a version of the Firefox web browser.

The trick, detailed in a top-secret presentation titled 'Peeling back the layers of Tor with EgotisticalGiraffe', identified website visitors who were using the protective software and only executed its attack – which took advantage of vulnerabilities in an older version of Firefox – against those people. Under this approach, the NSA does not attack the Tor system directly. Rather, targets are identified as Tor users and then the NSA attacks their browsers.

According to the documents provided by Snowden, the particular vulnerabilities used in this type of attack were inadvertently fixed by Mozilla Corporation in Firefox 17, released in November 2012 – a fix the NSA had not circumvented by January 2013 when the documents were written.

The older exploits would, however, still be usable against many Tor users who had not kept their software up to date.

A similar but less complex exploit against the Tor network was revealed by security researchers in July this year. Details of the exploit, including its purpose and which servers it passed on victims' details to, led to speculation it had been built by the FBI or another US agency.

At the time, the FBI refused to comment on whether it was behind the attack, but subsequently admitted in a hearing in an Irish court that it had operated the malware to target an alleged host of images of child abuse – though the attack did also hit numerous unconnected services on the Tor network.

Roger Dingledine, the president of the Tor project, said the NSA's efforts serve as a reminder that using Tor on its own is not sufficient to guarantee anonymity against intelligence agencies – but showed it was also a great aid in combating mass surveillance.

"The good news is that they went for a browser exploit, meaning there's no indication they can break the Tor protocol or do traffic analysis on the Tor network," Dingledine said. "Infecting the laptop, phone, or desktop is still the easiest way to learn about the human behind the keyboard.

"Tor still helps here: you can target individuals with browser exploits, but if you attack too many users, somebody's going to notice. So even if the NSA aims to surveil everyone, everywhere, they have to be a lot more selective about which Tor users they spy on."

But he added: "Just using Tor isn't enough to keep you safe in all cases. Browser exploits, large-scale surveillance, and general user security are all challenging topics for the average internet user. These attacks make it clear that we, the broader internet community, need to keep working on better security for browsers and other internet-facing applications."

The Guardian asked the NSA how it justified attacking a service funded by the US government, how it ensured that its attacks did not interfere with the secure browsing of law-abiding US users such as activists and journalists, and whether the agency was involved in the decision to fund Tor or efforts to "shape" its development.

The agency did not directly address those questions, instead providing a statement.

It read: "In carrying out its signals intelligence mission, NSA collects only those communications that it is authorized by law to collect for valid foreign intelligence and counter-intelligence purposes, regardless of the technical means used by those targets or the means by which they may attempt to conceal their communications. NSA has unmatched technical capabilities to accomplish its lawful mission.

"As such, it should hardly be surprising that our intelligence agencies seek ways to counteract targets' use of technologies to hide their communications. Throughout history, nations have used various methods to protect their secrets, and today terrorists, cybercriminals, human traffickers and others use technology to hide their activities. Our intelligence community would not be doing its job if we did not try to counter that."

quote:

Cabinet was told nothing about GCHQ spying programmes, says Chris Huhne

Ex-minister says he was in 'utter ignorance' of Prism and Tempora and calls for tighter oversight of security services

quote:

Cabinet ministers and members of the national security council were told nothing about the existence and scale of the vast data-gathering programmes run by British and American intelligence agencies, a former member of the government has revealed.

Chris Huhne, who was in the cabinet for two years until 2012, said ministers were in "utter ignorance" of the two biggest covert operations, Prism and Tempora. The former Liberal Democrat MP admitted he was shocked and mystified by the surveillance capabilities disclosed by the Guardian from files leaked by the whistleblower Edward Snowden.

quote:

Op dinsdag 8 oktober 2013 11:26 schreef andreas612 het volgende:

[..]

volgens mij is dat echt zo'n ruimte als in de serie '24' allemaal geeks jan en alleman te checken met satelieten en shit

quote:

Op dinsdag 8 oktober 2013 13:55 schreef Eyjafjallajoekull het volgende:
Zou me niks verbazen als dat ding gewoon eigenlijk al operationeel is

quote:

Op dinsdag 8 oktober 2013 15:31 schreef andreas612 het volgende:

[..]

Die met will smith toch? zo kan het ook inderdaad

quote:

Op dinsdag 8 oktober 2013 18:44 schreef Revolution-NL het volgende:
Wat ik met nog steeds zit af te vragen is wat voor techniek ze gebruiken voor de opslag van alle data. Met conventionele storage lijkt mij dit praktisch onmogelijk.