Category: Main Digg

  • ONLINE EXTORTION – E-Mail Scam Includes Hit-Man Threat

    Extortion – criminal offense, which occurs when a person obtains money, behaviour, or other goods and/or services from another by wrongfully threatening or inflicting harm to his person, reputation, or property. Euphemistically, refraining from doing harm is sometimes called protection.

    hit man scam fbi

    The scam e-mail, which first appeared in December, threatens to kill recipients if they do not pay the sender. It’s a scam. FBI officials recommend you don’t reply.

    A new scam cropping up in e-mail boxes across the country is preying not on recipients’ greed or good intentions, but on their fears. The scam e-mail, which first appeared in December, threatens to kill recipients if they do not pay thousands of dollars to the sender, who purports to be a hired assassin.

    About 115 complaints have been filed with the FBI’s Internet Crime Complaint Center (IC3) since the scam emerged, according to special agent John Hambrick, who heads IC3. He said the extortion scam does not appear to target anyone specifically and that IC3 has not received any reports of money loss or threats carried out.

    More on FBI website.

  • Chinese and the Islamic Fundamentalists vs. Social Evolution

    This post is completely OFF TOPIC – I started off writing about the Great Fire Wall of China and then went on an insane religious and political tangent.  I started asking myself, “Why does the chinese government and other nations repress the cutting edge of human social evolution?”  And here is what I came up with. 

    There are a few cultures hopelessly fighting against the social evolution of humanity.  the Chinese government and the Islamic fundamentalist are among the largest and potentially most influential.  In a relatively short period of time humanity has gone from tribalism to nationalism and now to globalism.  Each stage in social evolution has happend faster and faster and now globalization is happening so fast that it is hard to keep up.  Almost every nation is facing immigration, refugee, and security issues as third world conflicts and economic situations leave impoverished people behind forcing them to seek stability in other countries.  So called “first world” countries face immigration issues and are greatly influenced by the globalized economy.  

    Technology, trade and travel have merged humanity and there is nothing any of us can do about it.  To their detriment, the Chinese government and the Islamic fundamentalists are really trying to resist portions of this inevitable social change. 

    The Chinese trade globally and are clearly a leader in the commodities market.  But the chinese government represses its people by greatly filtering the exchange of ideas.  Some how they don’t understand that it is the ideas of the people that are the greatest and most revolutionary asset in any globalized society… or perhaps they do understand this as certain ideas are a threat to their level of communistic control over the people.  They have created what has been coined the Great Fire Wall of China in which they filter certain ideas from the public.  Keywords like “tank man” and “freedom” are blocked.  The greatest part of globalization is the free exchange of ideas.  In the US, this exchange of ideas is making a new breed of middle class who are self-sufficient and becoming very wealthy very quickly.

    Contrary to many elitist beliefs the Arab and Islamic world have made many contributions to science, medicine, mathematics, and technology.  In fact, Arab muslim Ibn al-Haytham is knows as the Father of optics because he formulated “the first comprehensive and systematic alternative to Greek optical theories”.  Many of their contibutions occured between 600 A.D. and 1200 A.D, a period known as the Islamic Golden Age.  All this was done when Europe was still in the Dark Ages.  Many of there discoveries were passed on and further developed by the Europeans during the  Renaissance.  (Note: of course, many of the arab/muslim innovations were built on the systems and inventions of the people they conquered… as is the case with the europeans which makes up we know as modern western civilization.  We owe the bulk of the origins of western civilization to the greeks and egyptians who the Roman got most of their innovations from).

    Bernard Lewis put out a book shortly after 9/11 called, What Went Wrong?  which talks about the clash betwen Islam (civilization based in islam not the Religion itself) and Modernity in the Middle East.    In a discussion about Bernard’s book, Joanne Myers says:

    [Bernard] takes the reader on a journey through history, from the time when Islam was the world’s greatest, most enlightened, and most powerful civilization, to modern times when it has failed to adjust to the challenges brought about by the reformation and the scientific and political revolutions in the West.

    In the discussion Bernard points out that the question “What went wrong?” is so pronounced in the Islamic world that many muslim leaders in the last few hundred years have asked the question.  The answers they’ve come up with range from “There are too many infidels” to “We have not kept up with modernity”. 

    Different things have also been tried in the world of Islam to change:

    Now, for the first time, in Iran they are carrying out what I might describe, without intending any disrespect, as the “Christianization” of Islam, using the word to indicate not doctrines, not morality, but institutions. What you now have in Iran, for the first time in Islamic history, is the functional equivalent of a papacy, a college of cardinals, a bench of Bishops, and, most important of all, an inquisition, and, inch’Allah, they will soon have a reformation too.

    Bernard Lewis does not state a single reason why Islam (as a civilization) has failed to keep up with modernity.  I think Ken Wilber and Robert Keegan are the closest to an explaination when they discusses the the Many faces of Terrorism and Integral politics.  They place the Islamic fundamentalists (particularly fundamentalist) in the Amber stage of consciousness which means that they are ethnocentric conformist.  I would go even further and suggest that they are glued together with flecks of Red (tribalism, sects controled by Imams) Considering their stage of consciousness it seems that (unlike the old dominating amber roman catholic christianity) they have not been broken up diluted enough to accept the bleeding edge of human development.  That is not to say the individuals and small groups within the Islamic world (such as the Bahai’a and Sikhs) are not at the cutting edge.  The core is true hard core amber. 

    I digress a little, the Islamic world HAS been broken up (Sunnis vs. Shia, etc) but it has not been sufficiently diluted yet.  Christianity broke up into Catholic and Protestants.  At one time those were large warring factions of Christiandom (societies built on christianity) but now those two have been broken in to hundreds of denominations and spin-off belief systems.  Islam has different factions but not as diluted and broken up as Christianity.

    Religious denominations are usually created when a member of a certain faith has a spiritual awakening that is so profound they express it to others and start to get a following.  Islam seems to have such a strong fundamentalist (solid Amber and Red) core that any new development is stamped out like a camp fire threatening to become a forest fire.  I believe that reform is happening right now within the Islamic world the result is constant relentless violence. 

  • Go Google Yourself

    Look Who’s Googling

      On a recent flight to Italy, a friend of mine met a guy, hooked up, and assumed that was the end of it. She was, after all, on her way to visit her boyfriend. Unfortunately for her, she failed to take the wondrous powers of Google into account.

      “I only told him my first name and a very general account of what I did for a living,” said *Alison Charles, 26, who, until recently, has been dealing with her “cyberstalker” ever since that fateful flight last summer.

    Google your full name and variations of it and make sure you are not showing up anywhere. Check the online phonebooks, type in your address and phone numbers. Sometimes you’ll be surprised on what you’ll find.

    All a person needs is your first name and last name and they have you. Because if someone wants more information all they have to do is pay about $10 bucks and on a sight like this: Intellius or People Finders and they can get even more info such as your home address. Many times paying a third party company is not even necessary, they can just google you.

    These days even more data can be extracted using the local county. I won’t go in how to do this because most people don’t know about it and I’d like to keep it that way. For some reason Federal and Local governments have a complete disregard for the privacy of citizens.

    The point is that you should never put your personal information online. Use identification proxies such as: a psuedo name, a P.O. Box, an 800 number to keep intouch with your audience if your a blogger. You may trust some of the people you interact with online, but for every 10 people that are decent there is at least one who will want more information than you are willing to give.

    I’ve heard stories of stalkers showing at homes of unsuspecting Internet users, targeted “spear phishing” attacks, and worse. Protect your data.

    Military PII (personally identifiable data):
    The military has resently gotten very serious about protecting PII. PII includes the following data:

      Full name (if not common)
      National identification number
      Telephone number
      Street address
      E-mail address
      IP address (in some cases)
      Vehicle registration plate number
      Driver’s license number
      Face, fingerprints, or handwriting
      Credit card numbers
      Digital identity

    When these bits of data are combined they can be used to gather more and more.

    More on PII at CDT.org

  • How to Clean up Windows Spyware Infestation

    Jeff Atwood at Coding Horror put together a detail Howto on getting rid of Spyware infestation using something called “systeminternals“.

  • Troubles with video

    I’ve had trouble with getting video on my blog until now. If you’re having problems check out Jack Humphrey’s video about the subject.

  • What is Information Assurance – The Video

    Information Assurance is not just information security. Information Assurance is managing the risk associated with the confidentiality, integrity and availability of information.

  • DISA IA Boot Camp (June 2007)

    About two weeks ago I attended the DISA IA Boot Camp.  The training was run by two guys who had removed all of their childhood memories and replaced them with DODD 8500.01E and DODI 8500.2.  They knew information assurance like nobodies business.

    I would recommend this class to ALL Information Assurance Officers (IAO) and Information Assurance Managers (IAM).  The level of the material stays right in the middle – its not really technical and backs off of some of the intricate details of a specific organization’s implementation of something like the DIACAP.  Which brings me to the most controversial and frustrating part of the training.

    These guys were saying that the DIACAP was rejected (as of mid-2006/beginning 2007 time frame) by a few key organizations (namely the Inspectors Generals office) because the method in which it was approved did not comply with regs.  The irony is like a knife stabbing itself.

    Anyway, they emphasized the importance of maintaining with the IA Controls indicated in both the DIACAP and DITSCAP.  Beyond the mountain of documentation and mind numbing bureaucracy, it is MOST important to secure the systems.
    What guys out in the field are doing is implementing the DITSCAP’s SSAA package as a supplement (artifact.. whatever you want to call it) in the DIACAP package in order to cover all tracks.

  • US National ID Card: Security or Citizen Tracker

    Most American citizens violently oppose a National ID card.  The federal government can get around this in two ways: 

      1. Don’t call it a national ID card 
      2. Don’t put the federally controlled database in a federal building

    The U.S. government is doing both of these things (as up 2007, should be complete by 2009).

    According the the Department of Homeland Security’s FAQ on REAL ID it is NOT a national ID card & the feds will not create a national database:

    “Is this a National ID card?

    No. The proposed regulations establish common standards for States to issue licenses. The Federal Government is not issuing the licenses, is not collecting information about license holders, and is not requiring States to transmit license holder information to the Federal Government that the Government does not already have (such as a Social Security Number). Most States already routinely collect the information required by the Act and the proposed regulations.”

    “Will a national database be created that stores information about every applicant?

    No. The REAL ID Act and these regulations do not establish a national database of driver information. States will continue to collect and store information about applicants as they do today. The NPRM does not propose to change this practice and would not give the Federal government any greater access to this information”  

    Well piss on my back and tell me its raining! The government is NOT creating a national ID card.  The only problem with the above statements issued by the DHS is that they are bullshit. 

    Imagine.  ME, a security guy of all people, opposed to a National ID Card?  But I’m not the only one.

    First off, what is this National ID Card REAL ID Card?

    On March 1, the Department of Homeland Security (DHS) released draft regulations [PDF] for implementing REAL ID, which makes states standardize drivers licenses and create a vast national database linking all of the ID records together. Once in place, uses of the IDs and database will inevitably expand to facilitate a wide range of tracking and surveillance activities. — EFF

    As stated above, the National ID Card for the U.S. would be based on existing State I.D. Cards and driver’s license programs.  The main issue is linking all state databases together so that the federal government can track citizens.  

    Now you may be wondering: Does this sound like something an illegal immigrant and/or criminal would not be able to falsify?  (and even if they are caught current laws for illegal immigrants are not enforced)  If illegal immigrants are not going to abide by the law, does this law really enhance the nation’s security?  

    Oppose the Real ID Act of 2005 

    My main reason for opposing a US national ID card is that I don’t trust the federal government with a consolidated view and control of all of our information.  I think all the information they gather will eventually fall into the wrong hands (on purpose or by negligence).  I was in the military, so the feds already have my data and the feds have lost MY {privacy act protected} information more than once.  A branch of the U.S. government lost 25.6 million account including the Social Security Numbers for Veterans more than once. They kept this information secret from the victims for 19 days.  19 days is ample time for someone to steal an identity once they have the information they need.  In one case the data was supposedly recovered and deemed by the FBI forensics as un-tampered with.  Supposedly they are not creating a seperate national database… but the linked state system WILL be the national database from which the feds will feed.  Its a play on words and I wish people would wake up screaming about this.

    There seems to be a disregard for protecting the privacy and security of citizens.  The resources that would normally be used to protect us are being wasted and sent to serve other purposes.  In my oppinion security is still NOT being done because illegal immigrant laws are not being enforced despite the fact there is a “war on terrorism”.  Now if you don’t think something is seriously wrong about the protection of our borders at a time when their is a “war on terrorism” read the story of Border Patrol Agent Ignacio Ramos being jailed for shoot a drug dealer trying to enter the country. The DHS officials lied to congress about these agents (and got caught).  Drug smuggler Osbaldo Aldrete-Davila is a free man.  Meanwhile, other border patrol agents are being deployed to Iraq.  I believe there is a reason that the law is not enforced but I leave that speculation up to you.

    Privacy Clearing House has a chronological list of data breaches starting from 2005.  The more databases of large organizations (schools, federal/state, credit cards) our personal information is in, the greater the risk of ID theft and financial fraud we face.  ID theft is currently the fastest growing crime in the US and UK.  And its been the fastest growing for a long time.  I attribute this to organizations putting security last when it should be implemented from the very begining and maintained aggressively. 

    So, a national card REAL ID registry databases at the federal level may only add to on-going issues of personal security of US citizens which the US government does not seem to worried about too much. 

    To the credit of the U.S. federal government, the Department of Homeland Security’s Chief Privacy Officer, Hugo Teufel III, issued a Privacy Impact Assessment (PIA).  According to the document the National ID card would be difficult to falsify. 

    Other issues addressed in the PIA:

    The PIA addresses the key privacy issues posed by the Act: (1) Does the REAL ID Act create a national identity card or database; (2) How will personal information required by the REAL ID Act be protected in the state databases; (3) How will the personal information stored on the machine readable technology on the driver’s licenses and identification cards be protected from unauthorized collection and use; and (4) Do the requirements for a photograph and address on the credential and the DMV employee background check erode privacy.

    The REAL ID method will extend the life and legitamacy of the Social Security Number as a national ID number.

    The DHS PIA document is exactly right when it states:

    Some of the public concern about the REAL ID stems from the history surrounding the expansive use of the SSN beyond its original purpose of recording the information necessary to provide a public pension benefit.

    The original purpose of the Social Security Number was to track taxation and payments for social programs under Roosevelt’s New Deal created in the 1930s following the Great Drepression.  These days the Social Security number is a de facto national ID number issued to all citizens and you really can’t do anything signifigant without it (i.e. get a job… unless your are an illegal immigrant.. i guess people in the US have privacy after all).  BTW – Collecting Social Security after age 65 is a joke… it is program that will not support the “baby boomer” (but that is a different issue all together). 

    The DHS Privacy Impact Assessment goes through most general concerns the the REAL ID act posses to the privacy of U.S. citizens thoroughly…. except for one. Put on your tin-foil hats for this one.  The government works so closely with private companies (namely lobbyists pushing and paying for certain policies, bid and no-bid contracts, laws and regulations) that I believe that they would give out our con$olidated information for the right price. Realistically, a national database in some form or another already exists (social security).  But the REAL ID database would make it possible to have a REAL-time view of all transactions.

    DHS PIA pg. 6: “financial institutions, retailers, hotels, health-care providers, and others may consider the REAL ID credential”. 

    It sounds like the ultimate consolidation of all personal data.  It will merge your social, driver’s license, and possibly finacial and medical info. 

    You see, the REAL ID system would not just be used in the police but with PRIVATE agencies.  On military installations you can’t do much of anything without a certain government ID card.  The data on this REAL ID will be the cream of the crop.  Particularly if is collects data on where you’ve been.  But conspiracy theories on new American corporate facism aside, people need to know that this is happening.  A wake up is long over due for Americans.  I just hope this cancerous apathy doesn’t kill the priciples of the country I love.

    Check out the last line of the DHS Privacy Impact Assessment:

    The public is encouraged to comment on the NPRM and on the privacy issues associated with implementation of the Act in order to ensure that the final rule reflects robust public input on these important issues.

    Links:

    Facial Recognition to deter ID Theft

    DHS Privacy Impact Assessment REAL ID Act – Chief Privacy Officer, DHS

    Four State Oppose RealID (New Hampshire, Oklahoma, joined Montana, Washington – as of 10 Jun 2007)

    (New Hampshire, Oklahoma, joined Montana, Washington – as of 10 Jun 2007)Ron Paul oppinion on Amnesty for illegal immigrants and the National ID

    (New Hampshire, Oklahoma, joined Montana, Washington – as of 10 Jun 2007)

    (New Hampshire, Oklahoma, joined Montana, Washington – as of 10 Jun 2007)New World Ord… I mean other things that didn’t make it into the REAL ID ACT:

    (New Hampshire, Oklahoma, joined Montana, Washington – as of 10 Jun 2007)

    (New Hampshire, Oklahoma, joined Montana, Washington – as of 10 Jun 2007)

    Original legislation contained one of the most controversial elements which did not make it into the final legislation that was signed into law. It would have required states to sign a new compact known as the Driver License Agreement (DLA) as written by the Joint Driver’s License Compact/ Non-Resident Violators Compact Executive Board with the support of AAMVA which would have required states to give reciprocity to those provinces and territories in Canada and those states in Mexico that joined the DLA and complied with its provisions. As a part of the DLA, states would be required to network their databases with these provinces, territories and Mexican states. The databases that are accessible would include sensitive information such as Social Security numbers, home addresses and other information. The foreign states and provinces are not required to abide with the Drivers Privacy Protection Act (DPPA) and are free to access and use the sensitive information as they see fit.  – REAL ID wiki

    The UK is fighting the same battle of liberties. 

    If I trusted the government, I suppose this would not be that big a deal.

    Bonus: Total “Terrorism” Information Awareness – TIA 

     Multiple standardized computing environments can be monitored and controlled using Open Grid Service Architecture (OGSA).  If the federal government is not using this technology togather data from the DMV systems I would be very surprised.

     

     

     

     

  • Symantec acquired IMlogic the anti-spim

      

    Symantec has acquired IMlogic to get into IM and email security:

    LAS VEGAS, NV–(Marketwire – June 13, 2007) – Symantec Vision 2007 — Symantec Corp. (NASDAQ: SYMC) today announced the newest version of Symantec Information Foundation, an integrated Information Risk Management (IRM) product suite that builds on the company’s Security 2.0 strategy. Symantec Information Foundation delivers advanced controls to safeguard companies against data loss with unified protection for e-mail, Web and instant messaging (IM). The new solution, expected to be available this summer, enables information entering or exiting the organization to be archived, audited and discovered through a validated process that ensures proper chains of custody.

    With IMlogic’s technology they will also be able to battle “SPIM” Spam on Instant Messanger which can get pretty bad. 

  • How a Thief Can Use Just a Little Info To Do A Lot of Damage

    “Be careful how you list names on your cell phone!

    This lady has changed her habit of how she lists her names on her mobile phone after her handbag was stolen. Her handbag which contained her mobile, Credit card, purse…etc…. was stolen. 20 minutes later when she called Her Hubby, from a pay phone telling him what had happened, hubby says “I’ve Just received your text asking about our Pin number and I’ve replied a little while ago.”

    read more | digg story