“Today, we see constant attempts by cyber means to steal the nation’s secrets, as well as information vital to the effective operation of critical national industries and infrastructure, not to mention commercial intelligence and criminal fraud,” said David Irvine, director-general of the Australian Security Intelligence Organisation (ASIO).

“The cyber world will be a principal mechanism of warfare in the 21st century [and] has the potential to reduce the conventional and nuclear weapons advantage of a country.”

Last month Canada’s Treasury Board confirmed there had been an unauthorised attempt to penetrate its networks after broadcaster CBC reported China-based hackers had attacked government computer systems.

This month the French Finance Ministry shut down 10,000 computers after hackers using Chinese internet addresses hunted for documents about the G20 group comprising the world’s biggest economies, which France is this year chairing.

Read more

In what the BBC said is the first deal of its kind, an agreement is expected to be signed later this month that will see US state department money – understood to be a low six-figure sum – given to the World Service to invest in developing anti-jamming technology and software.

The funding is also expected to be used to educate people in countries with state censorship in how to circumnavigate the blocking of internet and TV services.

It is understood the US government has decided the reach of the World Service is such that it makes investment worthwhile.

The US government money comes as the World Service faces a 16% cut in its annual grant from the Foreign Office – a £46m reduction in its £236.7m budget over three years that will lead to about 650 job cuts. The money will be channelled through the World Service’s charitable arm, the World Service Trust.

The deal, which is expected to be formally announced on International Press Freedom Day, 3 May, follows an increase in incidents of interference with World Service output across the globe, according to its controller of strategy and business, Jim Egan.

BBC Persian television, which launched in early 2009 and airs in Iran and its neighbouring countries, has experienced numerous instances of jamming. The BBC Arabic TV news service has also been jammed in recent weeks across various parts of north Africa during the recent uprisings in Egypt and Libya.

“Governments who have an interest in denying people information particularly at times of tension and upheaval are keen to do this and it is a particular problem now,” said Egan.

Another area in which the BBC World Service is expected to use the US money is continuing its development of early warning software.

This will allow it to detect jamming sooner than it does currently where it relies on reports from users on the ground.

“Software like this helps monitor dips in traffic which act as an early warning of jamming, and it can be more effective than relying on people contacting us and telling us they cannot access the services,” said Egan.

The BBC also expects to use state department money to help combat internet censorship by establishing proxy servers that give the impression a computer located in one country is in fact operating in another, thereby circumnavigating attempts by repressive governments to block websites.

“China has become quite expert at blocking websites and one could say it has become something of an export industry for them – a lot of countries are keen to follow suit,” said Egan.

“We have evidence of Libya and Egypt blocking the internet and satellite signals in recent weeks.”

BBC World Service to sign funding deal with US state department
Read more

the very factors that have brought Facebook and similar sites such commercial success have huge appeal for a secret police force. A dissident’s social networking and Twitter feed is a handy guide to his political views, his career, his personal habits and his network of like-thinking allies, friends and family. A cybersurfing policeman can compile a dossier on a regime opponent without the trouble of the street surveillance and telephone tapping required in a pre-Net world.

If Mr. Mubarak’s Egypt has resorted to the traditional blunt instrument against dissent in a crisis — cutting off communications altogether — other countries have shown greater sophistication. In Belarus, officers of the K.G.B. — the secret police agency has preserved its Soviet-era name — now routinely quote activists’ comments on Facebook and other sites during interrogations, said Alexander Lukashuk, director of the Belarus service of Radio Free Europe/Radio Liberty. Last month, he said, investigators appearing at the apartment of a Belarusian photojournalist mocked her by declaring that since she had written online that they usually conducted their searches at night, they had decided to come in the morning.

In Syria, “Facebook is a great database for the government now,” said Ahed al-Hindi, a Syrian activist who was arrested at an Internet cafe in Damascus in 2006 and left his country after being released from jail. Mr. Hindi, now with the United States-based group CyberDissidents.org, said he believes that Facebook is doing more good than harm, helping activists form virtual organizations that could never survive if they met face to face. But users must be aware that they are speaking to their oppressors as well as their friends, he said.

Spotlight Again Falls on Web Tools and Change – NYTimes.com

– hence the return of internet in all things cypherpunk

Read more

There’s a special irony when Google CEO Eric Schmidt suggests—as he did in a speech to the Council on Foreign Relations last November—that China’s government will find it impossible to censor “a billion phones that are trying to express themselves.” Schmidt is rich because his company sells precisely targeted ads against hundreds of millions of search requests per day. If Google can zero in like that, so can China’s censors.

Calling China’s online censorship system a “Great Firewall” is increasingly trendy, but misleading. All walls, being the creation of engineers, can be breached with the right tools. But modern authoritarian governments control the web in ways more sophisticated than guard towers.

This isn’t just theory. The Kremlin is allegedly soliciting proposals for data-mining social networking sites. The police in Iran and Belarus reportedly browse such sites in order to find connections between opposition figures and dissidents. China tried to launch Green Dam, a technology that studies the browsing habits of its users before deciding to block access. And contrary to what Eric Schmidt believes, authorities do have the ability to locate and monitor mobile phone users, as well as censor their messages.

Why all the tricky techniques? Superpowers like China have to engage with the global economy. So for them, the best censorship system is the one that censors the least. Millions of people already disclose intimate social data on Facebook, LinkedIn, Delicious, and their Russian and Chinese alternatives—and that’s all the data governments need to pick the right target. Online friends with an antigovernment blogger? No access for you! Spend most of your day surfing Yahoo Finance? Browse whatever you want. Satisfied Chinese investment bankers will have access to an uncensored web; subversive democracy activists get added to the government watch list.

Can the Internet empower dissidents and pro-democracy activists? Yes. But it can also strengthen existing dictatorships and facilitate the control of their populations. Washington’s utopian plan to liberate the world one tweet at a time could also turn American innovation into a tool for the world’s subjugation.

Read more

Considering that the backbone of the Tunisian Internet is full of state run filters and firewalls designed to block access, configuring one to log the GET commands with the harvested data would be trivial. But is this a government sponsored action?

The likelihood that a group of criminals compromised the entire Tunisian infrastructure is virtually nonexistent. Code planting on this scale could only originate form an ISP. With their history of holding an iron grip on the Internet, ATI is the logical source of the information harvesting.

There is an upside however, as the embedded JavaScript only appears when one of the sites is accessed with HTTP instead of HTTPS. In each test case, we were able to confirm that Gmail and Yahoo were only compromised when HTTP was used. For Facebook on the other hand, the default is access is HTTP, so users in Tunisia will need to visit the HTTPS address manually.

The information surrounding the embedded JavaScript came to our attention thanks to a user on the IRC server where supporters for Anonymous’ Operation: Tunisia gathered to show support for Tunisian protesters. When word spread of embedded code and account hijackings, Anonymous offered Tunisian users help via Userscripts.org, with a browser add-on that strips the added JavaScript code.

via Tunisian government harvesting usernames and passwords

Read more

So it looks like Stuxnet achieved pretty much what an air strike would have achieved, only at much less cost, without known fatalities, and without a full-blown war in the Middle East.

Read more

Mega has over 100 million registered users,” Lam continued, “over 45 million daily unique visitors, employees of over 70% of the worlds fortune 500 companies have accounts with us.
We host over a billion legitimate files. Documents, backups, photos, everything. If Mastercard turns against Megaupload they will have a problem, not us.

Read more

“This is just the beginning,” Hunteman said. The advanced hackers who built Stuxnet “did all the hard work,” and now the pathways and methods they developed are going to filter out to the much larger group of less talented coders. Copycats will follow.

Read more

Put another way, thumbing your nose at an entire world’s population of crackers is usually a lousy idea.

Read more

The forces of Anonymous have taken aim at several companies who are refusing to do business with WikiLeaks. 4chan’s hordes have launched distributed denial-of-service attacks against PayPal, Swiss bank PostFinance, and other sites that have hindered the whistleblowing site’s operations.

A self-styled spokesman for the group calling himself “Coldblood” has said that any website that’s “bowing down to government pressure” is a target. PayPal ceased processing donations to the site, and PostFinance froze WikiLeaks founder Julian Assange’s account. The attacks are being performed under the Operation: Payback banner; Operation: Payback is the name the group is using in its long-running attacks on the RIAA, MPAA, and other organizations involved with anti-piracy lawsuits. (via 4chan rushes to WikiLeaks’ defense, forces Swiss banking site offline)

Read more