FBI Sought Approval To Use Spyware Through FISC 92
An anonymous reader writes "Wired is reporting that the FBI sought approval to use its custom spyware program, CIPAV, from the secretive Foreign Intelligence Surveillance Court in terrorism or spying investigations. Affidavits prepared for the court are among 3,000 pages of documents gathered, but not yet released, in response to a Freedom of Information Act request from Wired. The FBI hasn't answered any questions about its use of the CIPAV since the program's existence became widely known in July. The FISC is generally regarded as a rubber stamp; it approved over 4,000 surveillance requests in 2005 and 2006[PDF], rejecting none."
Government Spyware (Score:4, Interesting)
However I am sure there methods of getting it installed are probably a little more sophisticated than most users are used to dealing with...
But I'm sure they should be using this very lightly, as once the right person figured out it was on their computer and released details to the curious masses, how much good would it do then? As most criminals are well aware they are doing something illegal. All it would take is a little extra effort on the part of the person who fears they could be under surveillance to discover it with proper information/tool, etc..
Re:Not surprising (Score:5, Interesting)
Why did it reject four in 2003 is what I want to know. Who was being investigated that it would decide to deny the application after 23 years?
Re:Not surprising (Score:5, Interesting)
That's not necessarily a bad thing. It could be that the government only goes to the FISA court when they have solid evidence that supports a warrant. There isn't enough information available to determine what is going on with FISA.
By comparison, most people who are charged with a crime are actually guilty - that's also a good thing. It means that most of the time, the police charge people with a crime when they actually committed the crime.
Now, that doesn't mean that everyone charged with a crime is guilty; police do make mistakes, and certainly some police are corrupt. But most people charged with a crime are guilty. Would you rather live in a country where most people charged with a crime are innocent?
Re:Meh, IT reporting these days... (Score:1, Interesting)
http://blog.wired.com/27bstroke6/2007/07/thank-you-for-y.html [wired.com]
Re:Government Spyware (Score:3, Interesting)
Re:Government Spyware (Score:3, Interesting)
Well, they could "lean on" anti-spyware vendors and "request" that they not publish signatures that identify their CIPAV. Who's to know that they haven't done this ?
Or maybe Microsoft might provide them with some useful information that isn't readily available.
Re:Government Spyware (Score:2, Interesting)
not news (Score:3, Interesting)
This can't be a problem (Score:3, Interesting)
Surely they have a mechanism to roll back code updates, it would be borderline insane if they didn't... so, you've got the code (wireshark, tcpdump), the key (embedded in CPU), and the mechanism (kernel support code) - are you implying that this isn't enough to reverse engineer any/or revert microcode changes? I don't know the first thing about it, but this should be reversible for the same reason that DRM doesn't work - they have to give you the ability and the key if they want to run it on your machine.
Please correct me if I'm wrong.