Category Archives: Security

Case against AT&T wiretap to proceed

The EFF reports that a “Judge Denies Government’s Motion to Dismiss AT&T Case”:

AT&T Corp. (which was recently acquired by the new AT&T, Inc,. formerly known as SBC Communications) maintains domestic telecommunications facilities over which millions of Americans’ telephone and Internet communications pass every day. It also manages some of the largest databases in the world, containing records of most or all communications made through its myriad telecommunications services.

The lawsuit alleges that AT&T Corp. has opened its key telecommunications facilities and databases to direct access by the NSA and/or other government agencies, thereby disclosing to the government the contents of its customers’ communications as well as detailed communications records about millions of its customers, including the lawsuit’s class members.

The lawsuit also alleges that AT&T has given the government unfettered access to its over 300 terabyte “Daytona” database of caller information—one of the largest databases in the world. Moreover, by opening its network and databases to wholesale surveillance by the NSA, EFF alleges that AT&T has violated the privacy of its customers and the people they call and email, as well as broken longstanding communications privacy laws.

The lawsuit also alleges that AT&T continues to assist the government in its secret surveillance of millions of Americans. EFF, on behalf of a nationwide class of AT&T customers, is suing to stop this illegal conduct and hold AT&T responsible for its illegal collaboration in the government’s domestic spying program, which has violated the law and damaged the fundamental freedoms of the American public.

UK postcodes under scrutiny

The Guardian has an interesting story about postcodes in the UK:

Nearly everyone has a postal address and most householders assume they “own” it. Unlike in France, say, no law stops us removing our number and calling our home what we like. But as usual with cases highlighted by Guardian Technology’s Free our Data campaign, the truth is not so simple.

During the past seven years, disagreement between different state bodies and state-owned companies over who owns intellectual property has blocked the creation of a definitive national list of addresses. As a result, says geographer and local councillor Robert Barr, emergency responses get sent to the wrong place, council tax goes uncollected and government plans are put in jeopardy.

And apparently the postal codes are, well, encoded:

the postcode file has big gaps. According to Barr, it holds only 60% of buildings in England – the Royal Mail is not interested in structures such as churches, which do not receive mail. Because of the purpose for which they were set up, postcodes may bear little relevance to reality – the initial component, the “post town”, relates to the nearest sorting office rather than the nearest town.

Vishing

It’s about time someone came up with a name for phishing on voice technology…but seriously, here’s the downside to making international automated calling cheaper and easier:

Secure Computing has found a more sophisticated scam that avoids e-mail altogether. Instead the criminals behind this scam have programmed computers to dial a long list of phone numbers and play a recorded message to anyone that answers.

The recorded message warns that a person’s credit card has been used fraudulently and asks them to enter their card number. Significantly, those responding are also asked for the security number found on the rear of the card.

Not to be confused with vichyssoise, the plot of attacks on credit card numbers seems to be getting thicker by the minute.

Identity loopholes

The Boston Globe highlighted a DHS report that says loopholes are being exploited in the US special visa program:

The probe found numerous instances in which groups in the United States falsely claimed to be churches, and visa applicants lied about their religious vocations in order to get into the country . More than a third of the visas examined by investigators were based on fraudulent information.

Whoa. That’s a high-rate of failure but it reminds me of the visas given to Russians to escape religious persecution in the 1980s. I actually met a woman many years ago who confided she practiced Judaism because her family claimed it as their religion in order to emmigrate to the US. They continued practicing after they lived in America out of fear of being deported. Ironic, considering that the US enforced strict quotas that blocked Jews immigrating to the US during the pogroms. The Center for Immigration Studies points out how much the immigration policy has changed:

Until the Refugee Act of 1980, the United States’ definition of a refugee mostly involved persons fleeing Communist regimes. The definition since 1980 stipulated that a refugee is any person who is outside his/her country “and who is unable or unwilling to return … because of persecution, or a well-founded fear of persecution, on account of race, religion, nationality, membership of a particular social group, or political opinion.” Therefore, after 1980, Soviet emigres had to prove to an immigration officer in Rome that they had a well founded fear of persecution. Most managed to do so. Until the late 1980s, United States policy accepted all Soviet Jews as refugees.

Identity is definitely an odd thing since you never know who will define it for you and for what. Hmmm, that almost sounds like something Heidegger might say. Scary. Does the need for a democratic state to close loopholes in identity management outweigh a person’s right to control their destiny?

Homeland Security auditors who reviewed an application for a 33-year-old Pakistani man, for example, could not locate the alleged religious group listed on the petition as his sponsor, and when investigators went to the group’s address they found an apartment complex.

Perhaps we should ask whether a religious group these days would want to be discovered by federal investigators? It’s like that old Far Side cartoon where men dressed in animal pelts and carrying TVs run away from the window to their hut yelling “Quick! The Anthropologists are coming!” Also, given the history of religion in the early US (not to mention the true definition of the word “church”), is it so unusual for a modest home to be a place of practice? Is a mega-stadium of worshippers a more legitimate identity to carry than a small family gathering?