As If You Didn't Have Enough To Worry About...
The Market Ticker ® - Commentary on The Capital Markets
Posted 2012-09-04 10:49
by Karl Denninger
in Liberty
Ignore this thread
As If You Didn't Have Enough To Worry About...
 

The following story is making the rounds this morning...

During the second week of March 2012, a Dell Vostro notebook, used by Supervisor Special Agent Christopher K. Stangl from FBI Regional Cyber Action Team and New York FBI Office Evidence Response Team was breached using the AtomicReferenceArray vulnerability on Java, during the shell session some files were downloaded from his Desktop folder one of them with the name of ”NCFTA_iOS_devices_intel.csv” turned to be a list of 12,367,232 Apple iOS devices including Unique Device Identifiers (UDID), user names, name of device, type of device, Apple Push Notification Service tokens, zipcodes, cellphone numbers, addresses, etc. the personal details fields referring to people appears many times empty leaving the whole list incompleted on many parts. no other file on the same folder makes mention about this list or its purpose.

The hacker group that got the file released at least part of it.

Now here's my question -- How did the FBI obtain the file?

That's what you ought to be wondering.  More to the point: Is Apple providing the FBI with every customer's registration and sale details?  And if they're not -- who is?

Let's be real here folks -- 12 million UDIDs is a hell of lot of them.  Are you willing to believe that there was no "official transfer" from "somewhere" to the FBI of that data?

I'm not and you shouldn't be either.

Discussion below (registration required to post)
 

Main Navigation
Full-Text Search & Archives
Archive Access
Get Adobe Flash player





Blogtalk 3:30 CT Mondays
Items To Look At


Discuss The Capital Markets along with daily technical analysis with our Gold Donor program.

Where We Are, Where We're Heading (2013) - The annual 2013 Ticker

Links and Blogroll
Our policy on reciprocal links: Send us an email with your information and why you think your blog or news site would make a good addition - in most cases reciprocal link requests will be granted.
Seeking Alpha Certified
Legal Disclaimer

The content on this site is provided without any warranty, express or implied. All opinions expressed on this site are those of the author and may contain errors or omissions.

NO MATERIAL HERE CONSTITUTES "INVESTMENT ADVICE" NOR IS IT A RECOMMENDATION TO BUY OR SELL ANY FINANCIAL INSTRUMENT, INCLUDING BUT NOT LIMITED TO STOCKS, OPTIONS, BONDS OR FUTURES.

The author may have a position in any company or security mentioned herein. Actions you undertake as a consequence of any analysis, opinion or advertisement on this site are your sole responsibility.

Looking for "The Best of Market Ticker"? Check out
Ticker Classics.

Visit the forum to discuss this and other investing-related topics; see the FAQ on the forum for information about Gold Donor status including access to our technical analysis video server.

Market charts, when present, used with permission of TD Ameritrade/ThinkOrSwim Inc. Neither TD Ameritrade or ThinkOrSwim have reviewed, approved or disapproved any content herein.

Market Ticker content may be reproduced or excerpted online provided full attribution is given and the original article source is linked to. Please contact Karl Denninger for reprint permission in other media.

Submissions may be sent "over the transom" to The Editor at any time. To be considered for publication your submission must include full and correct contact information and be related to an economic or political matter of the day. All submissions become the property of The Market Ticker.

Leads on stories of current economic and political interest are always welcome. Our fax tip line is 850-897-9364; please include contact information with your transmission.

 
Comments.......
User: Not logged on
Login Register Top Blog Top Blog Topics FAQ
Showing Page 1 of 2  First12Last
User Info As If You Didn't Have Enough To Worry About... in forum [Market-Ticker]
Bsfootprint
Posts: 963
Incept: 2011-02-27
Green
Report This As A Bad Post Add To Your Ignored User List
Everything you say can and will be used against you. Apparently.

Edit: The story could be a psyops effort on the part of the hackers, though I doubt it.

----------
When I hear central bankers are blowing bubbles, I like to picture a large, happy and well-endowed male chimp named 'Bubbles'...

Ckaminski
Posts: 1572
Incept: 2011-04-08
Green
Report This As A Bad Post Add To Your Ignored User List
And you're not concerned that the government has a EIN/name mapping for any other cellphone service that isn't a throwaway?

I'm not saying you're wrong - but really isn't news to those who've been paying attention, and it applies to EVERYONE in the marketplace.
Get_a_grip
Posts: 554
Incept: 2008-10-10
Green
Shoot Your First Zombie - Get the Second One Free
Report This As A Bad Post Add To Your Ignored User List
My unprovable belief is that if these large companies don't "play ball" with the Gov and agree to hand over information that would enable the Gov to easily track, eavesdrop, etc., on the citizens when using the companies devices, that the Gov goes after the companies, such as suing them for anti-competitive practices (Microsoft monopoly case), has the IRS go after them, etc., in an unrelenting and endless fashion unless and until the companies give-in. Again, this is just my guess and is speculation...but...I can see our Gov strong-arming companies like this...

----------
"When plunder becomes a way of life for a group of men living together in society, they create for themselves in the course of time a legal system that authorizes it and a moral code that justifies it" -- Frederic Bastait
Jotapay
Posts: 16726
Incept: 2008-08-26
Silver
Austin, Tx
Report This As A Bad Post Add To Your Ignored User List
Quote:
really isn't news to those who've been paying attention, and it applies to EVERYONE in the marketplace


Right. Everything you do.
Bluebird
Posts: 1381
Incept: 2008-05-02
Silver
Report This As A Bad Post Add To Your Ignored User List
What if a person doesn't find that his UDID was hacked by using the tool
http://thenextweb.com/apple/2012/09/04/h....
Would the tool capture the UDID that are being checked, and then add to the FBI database?

Reason: edited for readability
Lowbeyond
Posts: 16875
Incept: 2008-02-11
Green A True American Patriot!
CO aka West NJ/East CA
Report This As A Bad Post Add To Your Ignored User List
Some still refuse to believe that the The.Government.Is.The.Enemy

Be sure to have a fun time with your pieces of silver.....


----------
Maybe it was a birdy bread-bomber from the future?!
Djloche
Posts: 3273
Incept: 2008-07-07
Silver
In the Mountains
Report This As A Bad Post Add To Your Ignored User List
Bluebird, the released list is only a small portion of the full file. Not finding it doesn't mean you're not on the list

----------
"If we wish to be free, we must fight! I repeat it, sir, we must fight! An appeal to arms and to the God of Hosts is all that is left us! Gentlemen may cry, "Peace! Peace!" -- but there is no peace. The war is actually begun! Our brethren are already in the field! Why stand we here idle?"
Bluebird
Posts: 1381
Incept: 2008-05-02
Silver
Report This As A Bad Post Add To Your Ignored User List
And wouldn't it be possible that the FBI has UDID from other manufacturers in their database?
Bluebird
Posts: 1381
Incept: 2008-05-02
Silver
Report This As A Bad Post Add To Your Ignored User List
@Djloche - I understand there are 12 million in the FBI database, only 1 million UDID released.

What if mine wasn't in the original 12 million. Would my UDID be added to the FBI dabase as a back door for the FBI to gain additional UDID?
Fraudster
Posts: 4173
Incept: 2011-05-10
Silver
Report This As A Bad Post Add To Your Ignored User List
If people think this is just limited to Apple (or even APPL, GOOG or MSFT) you need to get your head examined.

----------
"Let China sleep, for when she wakes, she will shake the world." - Napoleon Bonaparte

"Circulation ceases first at the outer edges [Europe and Japan]. It will take a while yet for the decay to reach the heart [America]." - Foundation & Empire by Isaac Asimov
Lodgerhead
Posts: 559
Incept: 2008-08-26
Green
NC
Report This As A Bad Post Add To Your Ignored User List
Did gov just pay 1 billion dollars to apple (courtesy of Samsung) for this info?
Frat
Posts: 1935
Incept: 2009-07-15
Silver
NKY
Report This As A Bad Post Add To Your Ignored User List
Sigh. What's the proper procedure to take if one takes for granted that they're on the list? Password changes sounds like a woefully inadequate start. :-(

----------
We're ****ed. Where's Henry Bowman when you need him?
Jduwaldt
Posts: 499
Incept: 2010-06-10

Orange County, CA
Report This As A Bad Post Add To Your Ignored User List
"I try to be a cynic but it's so hard to keep up."

----------
It's not an issue of "cooperation" vs "go it alone": it's a question of involuntary vs voluntary relationships.
Edheler
Posts: 13
Incept: 2009-08-27

Report This As A Bad Post Add To Your Ignored User List
Karl Denninger wrote..
Are you willing to believe that there was no "official transfer" from "somewhere" to the FBI of that data?


I can think of one place where this information could have been collected: border customs.
Nuke_engineer
Posts: 2698
Incept: 2007-08-19
Green
Report This As A Bad Post Add To Your Ignored User List
Quote:
Everything you say can and will be used against you. Apparently.


Assume that will always be the case.

Quote:
And you're not concerned that the government has a EIN/name mapping for any other cellphone service that isn't a throwaway?


One should assume they have a similar DB for every mobile communications device type and your device is in there. That's the unholy alliance.....carriers want contracts to make more money and the government wants them to track you. That's why, unlike Europe, throwaway cellphones are much harder to find here. Oh, and don't forget that your cellphone is ready to serve it master (the carrier) by recording what you say and taking videos and pictures of you under remote control without your knowledge.

Wait until you see what retailers are doing with carriers in their efforts to sell your privacy....be aware that some retailers are actually tracking you and how much time you spend and where in side a store.

Ever noticed that in some casinos, theaters and malls your phone won't work or suddenly uses up its battery more quickly? That's because they are killing your signal to make sure you are focused on what THEY want you to do...gamble, buy and watch the movie. The manipulation of your mind has only just begun.

Quote:
Some still refuse to believe that the The.Government.Is.The.Enemy


If you want to call them an enemy or potential enemy, so be it. However, they are not THE ENEMY, they are ONE OF THE MANY ENEMIES you have monitoring you....which includes the carrier and anyone with enough clout, power and money to get your carrier or a corrupt carrier employee to give them all your data.

Quote:
Bluebird, the released list is only a small portion of the full file. Not finding it doesn't mean you're not on the list


You are on the list. This appears to be a test file for an individual whose responsibilities where that of a regional operator. You have to assume (and take the hacker's word) that it was only 12 million in that database. There's no doubt that ANY Apple device user is compromised and ready to be "experimented on" or worse.

Quote:
And wouldn't it be possible that the FBI has UDID from other manufacturers in their database?


You betcha. Even if you had programmed completely your own personal communications device, the moment is communicates using any US or UK communications carrier you are being tracked, if only by IP address.

Quote:
If people think this is just limited to Apple (or even APPL, GOOG or MSFT) you need to get your head examined.


Very true. All manufacturers should be considered suspect, although the more closed the ecosystem, the better the chances of a more complete penetration once the manufacturer has been compromised or corrupted.


THERE IS NO PRIVACY. THERE IS ONLY THE ILLUSION OF PRIVACY

----------
Trading and investing is understanding about people, emotions and corruption of government, corporations, banks and people using propaganda, lies, mathematics and bankster logic working against you.
Jotapay
Posts: 16726
Incept: 2008-08-26
Silver
Austin, Tx
Report This As A Bad Post Add To Your Ignored User List
Quote:
THERE IS NO PRIVACY. THERE IS ONLY THE ILLUSION OF PRIVACY


Unless you go live in a cave with a ham radio.

Everyone knows their smart meters from the electric company are spying on what you do inside your house, right?
Bsfootprint
Posts: 963
Incept: 2011-02-27
Green
Report This As A Bad Post Add To Your Ignored User List
frat wrote..
Sigh. What's the proper procedure to take if one takes for granted that they're on the list? Password changes sounds like a woefully inadequate start. :-(
THROW AWAY ALL YOUR ELECTRONIC GADGETS. No kidding. Otherwise, assume that everything you do using a connected digital device is recorded, logged, filed, and possibly monitored. That's not paranoia, just good sense based on available information.
nuke_engineer wrote..
Quote:
Everything you say can and will be used against you. Apparently.
Assume that will always be the case.
I always do. I understand that everything I say to another person, write online or speak into a digital communication device could be recited in open court (or closed Star Chamber) and try to act accordingly. Sometimes I lapse, but not without the knowledge that it could happen.

I tossed my mobile phone a while ago. Not out of paranoia, but just found I could live without it. Seriously, why do I need to be 'reachable' instantly no matter where I am? Hey, it's a start.

----------
When I hear central bankers are blowing bubbles, I like to picture a large, happy and well-endowed male chimp named 'Bubbles'...

Snowmizuh
Posts: 1353
Incept: 2009-03-18
Green
Alabama
Report This As A Bad Post Add To Your Ignored User List
Have you all seen this TED talk? Amazing, frightening visualizations.

Quote:
What kind of data is your cell phone company collecting? Malte Spitz wasn’t too worried when he asked his operator in Germany to share information stored about him. Multiple unanswered requests and a lawsuit later, Spitz received 35,830 lines of code -- a detailed, nearly minute-by-minute account of half a year of his life.


http://www.ted.com/talks/malte_spitz_you....
Drench
Posts: 28631
Incept: 2009-11-10
Green
Report This As A Bad Post Add To Your Ignored User List
I suppose now that everyone around us has a cell phone, it would be easier to get along without one. The predominant expectation that everyone should be able to get in touch instantly with everyone else all the time is, in my opinion, a bit rude.

I've been getting along fine without a smartphone for a while now. My cell phone is pretty simple. I think it knows far less about me than a smartphone would.

Bsfootprint
Posts: 963
Incept: 2011-02-27
Green
Report This As A Bad Post Add To Your Ignored User List
Drench wrote..
I've been getting along fine without a smartphone for a while now. My cell phone is pretty simple. I think it knows far less about me than a smartphone would.
Every cell tower your phone connects to (whether you make a call or not) is logged for later use. This can be used to track your movements. Every call you make or take is logged. (This goes for your ISP as well -- your ISP is probably logging elements of some or even all of your activity for tech support and/or legal reasons, and archiving it for later use. Use by whom, and for what purpose? That's the $10e6 question.)

The government doesn't necessarily have access to this information in real time (unless you've been 'marked') but it's there to be used later, once Sauron turns its gaze in your direction. It's the data retention that's the problem.

The digital revolution has also enabled de facto tracking and monitoring. Everything transmitted in the clear is subject to easy automated retrieval and analysis after-the-fact.

Reduce your digital footprint at every opportunity. It's liberating.

smiley If you are really concerned about online privacy, learn about TOR: https://www.torproject.org/ Tails: https://tails.boum.org/about/index.en.ht....

----------
When I hear central bankers are blowing bubbles, I like to picture a large, happy and well-endowed male chimp named 'Bubbles'...

Marvinmartian
Posts: 748
Incept: 2011-03-16
Green
Pasadena, CA
Report This As A Bad Post Add To Your Ignored User List
I just reverted from an Android (Motorola Droid X variety) to an ancient Nokia flip phone.

The Nokia does not have all the location features of the 'droid, but the cell phone tower I'm using at the moment has to know who I am to hand off communications to the next tower in line.

The ancient Nokia is also a pretty good tracking device.

Videopro
Posts: 1895
Incept: 2007-08-03
Green
L.A. Area
Report This As A Bad Post Add To Your Ignored User List
Al Jazeera and RT are both running this as top-of-the-fold stories today.

BTW: It's VERY important to understand the dire implications of this.

During the aborted so-called Iranian Green Revolution in 2009 the IRG and the Basij quickly rolled up what 'was' a massive protest movement that erupted in the wake of the blatantly stolen election by Mahmoud Ahmadinejad.

Estimates of the protest crowd nationwide were in the millions, yet the speed and efficiency of which the movement was crushed was one of the more remarkable instances in world history.

How did they do it?

One only need refer to how the movement itself found it's direction:

a quote from Wikipedia's Green Revolution page:

Quote:
The creation of the Iranian Green Movement was developed during these protests. The events have also been nicknamed the "Twitter Revolution" because of the protesters' reliance on Twitter and other social-networking Internet sites to communicate with each other.


First, the regime resorted to filtering key sites such as Facebook and Twitter, but as the use of web proxies and encryption technologies by the protesters proliferated, tactics by the IRG transformed to reducing network bandwidth to bare minimum to hamper protester communication BUT enough to allow very specific cell device tracking technologies to zero in on the movement leaders.

And, they did so swiftly, brutally and with deadly results.

Dozens were hunted down and executed on the spot. Their location pinpointed without their foreknowledge, until it was too late. Regime authorities stormed college dorms, homes and places of business with mobile devices in-hand, with real-time information on display directing their travel precisely to their intended victims.

The Green Revolution was smashed with the skillful use of mobile technology.

It is vitally important to recognize how the United States is no stranger to these very same technologies and tactics. And now this main-stream revelation has turned the hand on what is held in store. Their willingness to end any opposition to heavy-handed policies may eventually come in the very same manner.

So, for those of you that think somehow we live in a so-called free democratic republic now have yet another piece of the puzzle in place to prove otherwise.





----------
"The Spinning Cyclone Of Deflation Is Fueled By Deficit Spending. An efficient asset destroying storm powered by the printing press". - Me

When the Nazi's broke every law when coming to power, people in later years were asked, how were they allowed to do it? The answer was easy: They Simply Did It.
Duc888
Posts: 7368
Incept: 2008-11-06
Gold
CT, the UNconstitution State
Report This As A Bad Post Add To Your Ignored User List
There was a book written about 15 or so years ago. It was called "Privacy for sale". It's a good read. Went in depth about back door(s) into Microsoft products used by FEDGOV.

----------
...burp
Abn0rmal
Posts: 9261
Incept: 2009-01-10
Green A True American Patriot!
Report This As A Bad Post Add To Your Ignored User List
Videopro wrote..
It is vitally important to recognize how the United States is no stranger to these very same technologies and tactics.

http://nplusonemag.com/leave-your-cellph....
Quote:
Resnick: What should we know about cell phones? It’s hard to imagine going to a protest without one. But like all networked technologies, surely they are double-edged?

Appelbaum: Cell phones are tracking devices that make phone calls. It’s sad, but it’s true. Which means software solutions don’t always matter. You can have a secure set of tools on your phone, but it doesn’t change the fact that your phone tracks everywhere you go. And the police can potentially push updates onto your phone that backdoor it and allow it to be turned into a microphone remotely, and do other stuff like that. The police can identify everybody at a protest by bringing in a device called an IMSI catcher. It’s a fake cell phone tower that can be built for 1500 bucks. And once nearby, everybody’s cell phones will automatically jump onto the tower, and if the phone’s unique identifier is exposed, all the police have to do is go to the phone company and ask for their information.

Resnick: So phones are tracking devices. They can also be used for surreptitious recording. Would taking the battery out disable this capability?

Appelbaum: Maybe. But iPhones, for instance, don’t have a removable battery; they power off via the power button. So if I wrote a backdoor for the iPhone, it would play an animation that looked just like a black screen. And then when you pressed the button to turn it back on it would pretend to boot. Just play two videos.

Resnick: And how easy is it to create something like to that?

Appelbaum: There are weaponized toolkits sold by companies like FinFisher that enable breaking into BlackBerries, Android phones, iPhones, Symbian devices and other platforms. And with a single click, say, the police can own a person, and take over her phone.

Resnick: Right—in November of last year, the Wall Street Journal first reported on this new global market for off-the-shelf surveillance technology, and created “Surveillance Catalog” on their website, which includes documents obtained from attendees of a secretive surveillance conference held near Washington, D.C. WikiLeaks has also released documents on these companies. The industry has grown from almost nothing to a retail market worth $5 billion per year. And whereas companies making and selling this gear say it is available only to governments and law enforcement and is intended to catch criminals, critics say the market represents a new sort of arms trade supplying Western governments and repressive nations alike.

Appelbaum: It’s scary because [accessing these products is so] easy. But when a company builds a backdoor, and sells it, and says trust us, only good guys will use it… well, first of all, we don’t know how to secure computers, and anybody that says otherwise is full of ****. If Google can get owned, and Boeing can get owned, and Lockheed Martin can get owned, and engineering and communication documents from Marine One can show up on a filesharing network, is it realistic to assume that perfect security is possible? Knowing this is the case, the right thing is to not build any backdoors. Or assume these backdoors are all abused and bypass them so that the data acquired is very uninteresting. Like encrypted phone calls between two people—it’s true they can wiretap the data, but they’ll just get noise.

When Hillary Clinton and the State Department say they want to help people abroad fight repressive governments, they paint Internet freedom as something they can enable with $25 million. Whereas in reality the FBI makes sure that our communications tech isn’t secure. This makes it impossible for people like me to help people abroad overthrow their governments because our government has ensured that all their technology is backdoor ready. And in theory, they try to legitimize state surveillance here, and there they try to make it illegitimate. They say, “In over-there-a-stan, surveillance is oppressive. But over here, it’s okay, we have a lawful process.” (Which is not necessarily a judicial process. For example, Eric Holder and the drones . . . sounds like a band, right?)
Login Register Top Blog Top Blog Topics FAQ
Showing Page 1 of 2  First12Last