Category Archives: Security

Weapons Flow into Darfur

I have discussed this for years in terms of international security, and now Amnesty International is claiming they have proof of Chinese directly fueling the conflict in Sudan:

The human rights group says Russia and China have transferred arms and ammunition to Sudan “aware that many such arms are being deployed… for direct attacks on civilians”.

It cites 2005 trade figures as showing China sold $24m and Russia $21m of military material to Sudan.

Amnesty says it is “dismayed that certain governments, including two permanent Security Council members are allowing ongoing flows of arms to parties in Sudan”.

Of course the Sudan government insists there is no connection between the arms arriving and their use in Darfur.

It makes sense that the Chinese are involved in weapons supply to insurgencies around the world, as conflict regions become their research and development labs for countering US technology. Who knows if they are behind the Syrian chemical weapon tests as well. The big difference about this compared with the Russians is the quality of technology and Russian concern with links to guerrilla fighters close to home.

It is important to note that the US has continued to supply weapons to troubled regions as well, and appears to want to exclude itself from any efforts against proliferation of illegal arms including explosives. Here are the additional sources of arms for Sudan that were identified by the human rights group:

Amnesty has also accused Kuwait, Saudi Arabia and Belarus of supplying arms.

Belarus? That is obviously a Russian connection. Although a bit dated, the FAS small arms study explains from where the former two countries get their supplies:

Saudi Arabia is America’s top customer [according to 2002 data]. Since 1990, the U.S. government, through the Pentagon’s arms export program, has arranged for the delivery of more than $39.6 billion in foreign military sales to Saudi Arabia, and an additional $394 million worth of arms were delivered to the Saudi regime through the State Department’s direct commercial sales program during that same period.

The proliferating arms trade clearly needs better controls if anyone is to establish a proper connection. The eye-witness accounts and testimony are important since much of the records are probably faked, or at least there is a serious problem reported with regard to denial:

Switzerland exported small arms valued at $4.3 million (SFr5.3 million) to war-torn Sudan in 2002, according to a report presented to the United Nations.

The report, from Geneva’s Institute of International Studies, claims that Switzerland was the second-largest supplier of such weapons after Iran.

The Small Arms Survey 2004 describes the deliveries from Switzerland as “military weapons�. Swiss legislation forbids the export of war materiel to countries at war or to conflict areas.

But an official in Bern said the figures were either false or referred to arms exported illegally. They came as a complete surprise to the State Secretariat for Economic Affairs (Seco).

The head of Seco’s export controls and sanctions, Othmar Wyss, said on Saturday that the figures had apparently been supplied by the Sudanese government. “Either these figures are incorrect, or these are weapons exported illegally,â€? he said.

Iran too, eh? Incidentally, SFr5.3 million is apparently about half of what the Swiss pledged in humanitarian aid to Sudan for the same year.

But again this goes beyond small arms, as heavy weaponry and aircraft are often cited by human rights organizations that work in the region.

“When I was in Chad in February, I collected a number of testimonies from refugees from Darfur who specifically identified MiGs as having been involved in the bombings of villages and so on,” said Leslie Lefkow, a researcher for Human Rights Watch who has interviewed people caught up in the conflict. “They drew pictures of what the planes looked like.”

Uninstalling JRE 1.6.0_01

I don’t know about you, but the latest release of the Java Runtime Environment is screwing up some apps for systems I deal with. After troubleshooting a bit, I decided I would remove it. Major dilemma, since it has some fixes I want, but functionality is broken.

Since remotely navigating Windows GUI is such a pain, here’s the fancy CLI shortcut suggested by Sun:

MsiExec.exe /x{3248F0A8-6813-11D6-A77B-00B0D0160010} /qn

Just in case you are curious, the versions are easy to insert for any other recent release. Note the difference in the 1.5.0_11 command:

MsiExec.exe /x{3248F0A8-6813-11D6-A77B-00B0D0150110} /qn

WARNING: uninstalling the JRE can remove all the associated Java applications.

Kansas recovery hampered

Interesting to find the Governor of Kansas indirectly criticizing the President and Iraq war:

Kansas Governor Kathleen Sebelius also visited the town, which lies about 120 miles (200km) west of Wichita in southern Kansas.

She said the state’s response would be negatively affected because emergency equipment such as trucks, tents and trailers had been sent to Iraq.

“Not having the National Guard equipment, which used to be positioned in various parts of the state, to bring in immediately is really going to handicap this effort to rebuild,” she said, the Associated Press news agency reports.

Compare this sentiment with how she prepared the state with a news release from 2003:

As your governor, I would like you to know that we are taking every possible step to protect Kansans in every corner of the state. At the conclusion of the President’s remarks Monday night, the Homeland Security Alert level in Kansas was raised to “High” or “Orange.” In accordance with that higher level of alert, I have increased the activity and visibility of the National Guard and Highway Patrol, paying special attention to important locations in the state, such as public buildings, bridges, and power plants. We are also constantly monitoring our vast agricultural resources, including our crops and our livestock, to ensure they remain productive and secure. And we need our public health systems to stand ready to respond.

Kansans should not take these steps as cause for alarm, but rather as prudent steps in a time of war. I have been briefed by the Secretary of Homeland Security, Tom Ridge, and have been assured that currently there are no specific threats to Kansas. We have no particular reason to believe we are in danger. But we must always be vigilant and prepared. I call on all Kansans to be aware of their surroundings, to report suspicious activities, and to fully cooperate with law enforcement officers as they perform their important additional duties.

No terrorist attacks in Kansas yet, so the system must be working.

Shame about those natural disasters that seem to happen regularly, have advance warning, and (usually) have trained responders with equipment nearby. No need for resources to deal with those when the absence of terrorist threat is a top priority.

Seems to me Sebelius should have labeled tornadoes some kind of terrorist plot, or maybe even a terrorist group (the infamous “Al Tornadoes”). Then the state would have been awash with Halliburton contractors and the Blackwater fundamentalist mercenaries looking to lend a hand on the federal taxpayer’s dollar. Of course, that brings other risks, perhaps even worse than natural disasters:

The former New York Times Mideast Bureau chief warns that the radical Christian right is coming dangerously close to its goal of co-opting the country’s military and law enforcement.

[…]

This effort signals the final and perhaps most deadly stage in the long campaign by the radical Christian right to dismantle America’s open society and build a theocratic state. A successful politicization of the military would signal the end of our democracy.

I bet someone is saying the incompetence of the Bush administration proves that private armies in America could do a better job of securing the citizens. Abe Lincoln must be rolling in his grave.

Axis Camera Remote Exploit

The ActiveX control provided for Axis surveillance cameras has a critical vulnerability due to a buffer overflow, according to US-CERT note #355809:

Axis Communications provides an ActiveX control for viewing motion JPEG streams in Microsoft development tools and Microsoft Internet Explorer. The ActiveX control, provided by AxisCamControl.ocx, is known as “CamImage” or “Axis Camera Control.” The SaveBMP() method of this control contains a stack buffer overflow.

Axis Communications lists the following products as being affected

AXIS 2100, AXIS 2110, AXIS 2120, AXIS 2130 PTZ, AXIS 2420, AXIS 2420-IR, AXIS 2400, AXIS 2400+, AXIS 2401, AXIS 2401+, AXIS 2411, AXIS Panorama PTZ

Options are to install a new version, disable it, or disable ActiveX entirely. Expect more of these vulnerabilities in surveillance systems as the physical and information security worlds continue to collide.