IIT To Review Carnivore 75
sconeu writes: "Fox News is reporting that the Illinois Institute of Technology will review Carnivore. Fox further reports that 'The Justice Department said in a written statement that it received 11 proposals from various organizations, including the University of California--Davis, and the National Software Testing Laboratory.'" Representatives from a law school (
Chicago-Kent College of Law, not Kent State as previously stated; thanks to corprew for the correction -- tl) will be looking at it as well, and it's slated to start in December.
How long until... (Score:1)
I'll be looking at it. (Score:1)
Let's clarify a couple of points... (Score:1)
Being familiar with IIT, I think there are a couple of points that should be clarified...
1) IITRI is _not_ IIT...they are completely separate institutions that occasionally cooperate in research ventures. IIT staff and students are not even allowed entrance into the IITRI building without an IITRI staff member escorting them. Considering that the Computer Science facilities at IIT are as feeble as they are, it makes sense that they would choose IITRI rather than the university proper...
2) They are also correct in saying that IIT and IITRI are not in the top tier of the available instituitions...anyone who has ever been affiliated with either place would know how true this is...in any case, I wouldn't be hopeful of an informative report...
Re:They're deluding themselves (Score:1)
Oops!
Later information [slashdot.org] made clear that these people did, indeed, sign up to be a rubberstamp committee.
Oh, well. It never hurts to give the benefit of the doubt to people.
daniel
They're deluding themselves (Score:2)
The most telling part of the article is this quote from Kerry Rowe, the senior vp at IITRI who will be overseeing the project, when asked about the clause in the Justice Department's Request For Proposals requiring that the feds be able to edit the report before publication-
Of course they don't expect any major edits. No one is going to willingly sign up to be a meaningless rubberstamp for bad law enforcement. But the edits will come anyway--especially if they discover that the system is exploitable.
They've (meaning the staff of IITRI) convinced themseleves that Justice is serious when they say a "fair and open" review is what is wanted. They've justified and rationalized to themselves that this isn't a political issue--that it's a technical one. It's an understandable mistake to make, we all want to believe that everyone else is acting in good faith.
But I think they'll probably regret this later, when they discover that federal agents are political beasts and they aren't always acting in good faith.
daniel
Oh Damm (Score:1)
Just Look at the email address...
iitri and iit associated only in name (Score:2)
once upon a time, iitri was a big source of money for the school. There used to be a whole load of iit researchers and staff turning out patents (real patents for real physical inventions) left and right. Supposedly back at it's height, there was an entire office of secretaries and bookeeppers to keep track of the patent royalties from just one guy (marvin camras, the inventor of magnetic recording)
now the building is pretty much off limits to students. armed guards patrol most of the floors. it's almost entirely government funded. all of the campus researchers do their research elsewhere. the cs and ece (electrical and computer engineering) people have all their own equipment. the mechanical and aerospace department, as somebody previously mentioned, have their own very advanced facilities, and all of our big name physics professors do their research out at fermi lab.
the law school may be doing a legal review of carnivore (also loosely related. it's on a separate campus downtown) but any involvement by the iit research institute is purely governmental.
as you can probably tell by my email address, i am an iit student. but what im stating here is not really an opinion, so it's not really biased. and while i will readily say my school has some problems (as probably any institution of higher learning does) this issue is really not even related to my school.
Why This Should Scare You (Score:4)
First of all, I attend IIT, so I can clear some stuff up about what is going on.
IITRI is affiliated and also owned by the school. Anyone who has ever been to Comiskey Park in Chicago has seen a big tall ominous building at 35th and state. That's the main IITRI thing. Last year when the government was testing the foam for bioweapons at airports, they tested it on live anthrax there. It should be noted that with 8 blocks to a mile in Chicago, that puts IIT around 4 miles from downtown chicago. One of IITRI's biggest clients is the US government. There are dozens of IITRI labs around the country.
I've had extensive dealings with the Chicago-Kent College of Law. Some of their faculty are very good about legal issues. Other assume because they wrote a paper about cyberspace a couple of years ago they know everthing about it. Then again, it might just be a personal issue with me and the dean.
This is unusal for our institution. The most prominent IIT research that I know of relating to computers is Garbage Collection [slashdot.org] and is being done by Morris Chang. There is also some AI research being done. But not a whole lot else.
The law school (chicago-kent) is pretty distant from the main campus, and they don't do much with actual computer stuff there. So it's going to be a legalistic investigation, which is probably what this means.
To be honest, I'm kinda excited about this, but I wouldn't trust my own school to do it.
Let us hope (Score:1)
Nits to pick. (Score:2)
Fox says "University of San Diego".
They mean University of California, San Diego".
Fox says "Dartmouth University".
Dartmouth is still a college.
Fox needs to improve their vetting.
Re:IIT maybe biased? (Score:1)
The pertinent web page is probably this one. [iitri.com] I looked at their list of customers, and oh my gawd, they do work for the Los Angeles County Metro Authority! They also do work for the DISA, DTIC, DARPA, NIH, and, oh no, the IRS.
These guys look like some of the other not for profit groups out there.
A funky little school (Score:3)
- The IITRI research building on the main campus (well, the main one, the one that's above ground) is the also the tallest building on campus. And...it's entirely bulletproof. Why is this, you ask? Because the entire campus (being located a few miles directly south of The Loop) is smack dab in the middle of some of the most interesting slums/ghettos in the midwest - and the denizens of the housing project towers (yes, towers - they're big-ass buildings) kept taking shots at the researchers through the windows. *giggle*
- There is at least one entire building underground. You normally can't see this (the roof is just ground with grass on it) but in the winter, the snow likes to melt on top of it - and only there.
- The entire campus is connected by fun underground tunnels, from the dorms to the tower. Most of the fun ones have been closed off...and for some reason, it's really hard to get a blueprint of 'em (I tried).
- An unusually large portion of the student body consists of Army, Navy, Chair Force and Marine ROTC scholarship holders (how I got there) - when I was there, there were about 500 ROTC students, which was about 35% of the student body population
- The undergrad physics department is both unusually small and has an unusually large amount of toys for such a small department. Then again, being as closely associated with the collider up there as they are, not too surprising.
- The southern limb of the L goes literally DOWN THE MIDDLE of the campus. About 800 feet from the dorms. If you've ever seen the L (or el, if you wish), or more specifically, *heard* the L, you'd laugh your ass off just as I did the first time "experiencing" a passthrough while outdoors. Thank god my room was on the other side of the dorm complex.
- IIT has one of the most advanced high-speed wind tunnels on the face of the planet.
- Cafe Edelstein. If you've taken undergrad physics, you'll know what I'm talking about. If you're still going to class after the first 3 classes, that is. Hmm, wonder if he's still there/alive.
- It's got some of the weirdest buildings you'll ever see. That's because it used to be (well, still is in some circles) a really high-end architectural school, and Mies Van der Roah (sp?) designed most of the (older) buildings on campus. Think "giant boxes made of slate and glass" and you're really close.
- 'Cuz of the L, you're a short walk away from downtown - which is really cool, because Chicago is a great city (in the summer) to hang out in downtown.
- Chicago was the first time I'd seen bridges with potholes on 'em. Like....damn.
- Nearly half the main campus (engineering and suchlike, for the most part) is foreign nationals - mostly Chinese, Indian and Pakistani. You should see some of the fights between the Indians and Pakistani folk...damn...
- Not a single solitary math professor speaks intelligible English. Oh, wait, that's everywhere, nevermind...
So, all things considered...I find this highly amusing. IITRI "examining" this thing is like asking the whore if she likes her pimp while the pimp is standing there listening.
This is a big dodge... (Score:3)
it says
"All non-relevant data is purged. Opponents of the system fear Carnivore does not discard private or irrelevant information, leading to potential abuses."
That is such bullshit.
Opponents of Carnivore (A) feel the ENTIRE SYSTEM is unconstitutional and (B) oppose the entirely SECRET NATURE of the system.
The FBI's attempt to isolate the point of controversy to a single point in the system is an obvious attempt to reframe the argument.
People are opposed to the entire thing, not just a part of it. People think abuse can happen at any point in carnivore's operation, not only after filtering is done. (The filtering criteria can be corrupt for example.)
This is so lame.
W
-------------------
Re:Here's how it got decided (Score:1)
no way to verify integrity of the process (Score:2)
... which will give them plenty of time to remove the parts they don't want "reviewed"
After all, how do we know that the version sent in for "review" is going to be the same software that they put on the machines? We don't.
IITRI - what a joke (Score:1)
AS noted in other threads, IITRI has several ties to the government.
Among other things they run the Joint (as in armed services) Spectrum Center in Annapolis, Maryland, are heavily involed at the Navy's David Taylor Research Lab, also in Annapolis, and the IRS Tax Modernization Insititute in Lanham, Maryland. Funny how an Illinois college has so many facilities in Maryland... so close to Washington DC.
Can we say "unbiased?" No? OK, try "biased."
The IRS center is a joke. You can read about their blunders on your own. As far as the JSC goes, I once worked there. The software development done there is a monument to hacked, undesigned code.
Any findings they come up with... well, I already question the technical veracity of such.
IITRI has very little to do with IIT... (Score:1)
Re:Now we all criminals. (Score:1)
No, just an extremely poor logician.
Typical... (Score:1)
Does it scare you?
Re:Nits to pick. (Score:1)
Dartmouth is still a college.
Yay, somebody besides a dartmouth student knows this!
__________________________________________________ ___
Chicago-Kent college of law, not Kent State (Score:1)
This was inevitable... (Score:1)
So, of course, now a couple of third-rate schools beholden to DARPA grants or hoping for publicity step up to "review" (read rubber-stamp) the FBI's Carnivore system. Their credibility in doing so will be below merely suspect, given that DoJ restrictions to control and edit their findings effectively foreclose any critical questioning. And, they have the technical and legal reviews at two different institutions. How very amusing....
Not that anyone should be surprised, after Janet Reno and Louis Freeh defended their persecution, harassment, and long unjust incarceration of Win Ho Lee, whom they targeted unfairly and so badly abused _for a year_ before finally releasing him.
Thomas Jefferson believed in revolutions every 20 years or so. It's been 200+ years since then....
Re:Oh Damm (Score:1)
What exactly is their argument for such software? (Score:1)
Are they afraid of bugs being exploited, embarrased of sloppy code or just too tied up in the 'you don't need to know' mentality?
Linux has a great, easy to use, fast network filtering feature called netlink. You could filter out only mail traffic and then use a userspace program to do the same thing that carnivore is supposed to do with little more than a perl script!
Re:Here's how it got decided (Score:2)
One of the major reasons why IIT isn't known is because a few years back money was tight, and professors left (forced or not), somewhat due to failing to give tenure. Motorola and Hyat stepped in and its getting back in shape, but I had a professor another university warn me about that. Had great things to say otherwise.
The CS cur. is a bit light, especially first year. But almost every other college is the same, as if you look at CMU's its quite close. The major difference is that CS105/106 is first semester (200). I actually liked ours a little better, as CMU's seemed to be to strict (ie, humanities/philosophies were pre-picked). Course, thts what I remember, and easily could be a bit wrong.
A friend at UCSC seems to have had a worse time then here. The classes sounded as if they taught less and he failed two (quarter, tho, so throuws me off a bit). IIT is nothing like the crap people have been saying on here, as you'd agree. The EE/CPE isn't light, and every night these last two weeks I've been working for 6+ hours studying. The works hard, taught well, and done well.
This guy got it right and most people talking on here just give wild speculations. Slashdot gets reaction, not logical thought.
-----------------------------------------
Re:Here's how it got decided (Score:1)
I hear a lot of people talking about how IIT sucks, IIT is not a good university. Now, maybe I'm bias...but can anyone here provide any actual proof of this? I would love for someone to point it out so I can be well informed just like everyone else is.
Re:IIT is Illinois' homegrown DeVry (Score:1)
Second...why do you believe that IIT is a second rate school?
Third...If you can't provide accurate information, nonetheless proof, I would just shut my mouth.
Re:Here's how it got decided (Score:1)
Retraction (Score:1)
Are these quality institutions? (Score:2)
Damn..Chicago-Kent..this is Sad.. (Score:2)
I can think of a few names, who if involved with this, are totally in it for name recognition and for future job opportunities.
I'll say it know.. no good will come out of this.
Nice reading skills (Score:4)
1. It's not IIT that's reviewing it, it's the Illinois Institute of Technology Research Institute (IITRI). What? It's "affiliated" with IIT? OK, that's all right then.
2. It's not Kent State [kent.edu] (which is in Ohio), but Chicago-Kent College of Law [kentlaw.edu], which is part of IIT in Chicago.
--
Can't be done (Score:1)
For those of you who don't know, a referendum is when the voters vote directly for a law as opposed to electing representatives/leaders/idiots.
America is not a pure democracy. A pure democracy would be rule by majority and the minority's rights would always be at risk. The founding fathers valued individual rights before majority rule.
Would you want to live in a country where the majority dictated law? Where they censor our libraries? Where they supress minorities?
I sure wouldn't.
University Based Reviewing System (Score:3)
-- Moondog
Yahoo Article (Score:2)
Re:Here's how it got decided (Score:1)
Hey, for a school based in a third-world country (AKA the neighborhood of the Chicago Housing Projects), second rate is not half bad.
Re:Just use Altivore (Score:1)
Meow
Re:Here's how it got decided (Score:1)
Let's see, would you like the answer from the point of view of your typical undergrad or a CS major? I can provide both...here goes:
- We go to school in a warzone. You cannot venture away from campus without genuine fear of being shot.
- There is no culture. We have like 6 frats, where everyone gets drunk. There are no businesses around the campus. We have a 7-11 and an overpriced, incompetant bookstore.
- For being an institute of technology, it is pretty low-tech. Until recently, we couldn't even register for classes on line.
- The dorms smell. They are infested with rodents. They overbooked the freshmen class this year, so we have people sleeping in the boiler room (yes, you read that right).
Now, as a CS major:
- We are not tought programming or computer science. We are tought C++. At IIT, there is no notion of other languages.
- I was a TA one semester, where I had a student tell me "Why should I have to turn in my work on time? This is a CS class, right? Nobody turns in their work on time in a CS class..."
- There are no UNIX labs on the campus, save one cluster of 6 year-old SGI Indys.
- People in a third-year Algorithms course have never heard of quicksort.
- People come out of a data structres course without knowing what a Hash Table is.
- All the classes stress the use of MS Visual C++ on windows. There are graduate students who have never used UNIX for God's sake!
- There is not a compilers class at any level. We do not have a modern software engineering class (What's UML again?)
- They force us to take a class where we write book reports as a graduation requirement (It's called Computers in Society).
- I could go on and on and on...
Get the point yet?
Re:Here's how it got decided (Score:1)
CS445, CS488, CS521 are not currently offered. I took CS487, we did not mention UML once. We use an archaic text by Robert Pressman and we spend our time drawing DFD's.
Find me a class that actively teaches you PERL or VHDL in the curriculum right now - you can't. As far as MIPS assembly, you are tought a small subset of it that is not useful in practical situations.
I have plenty of books, and I have done a lot to advance my body of knowledge. Contrary to what you may think, I understand a great deal about the inner workings of the department. Whether or not you choose to believe me is your concern -- it does not matter to me.
If I am the "dumbest bastard alive", then I am forced to wonder what you are by posting such blatant flamebait. Go write some real code, work on a project or two in the real world. Get some experience, then you will know what you are talking about.
No review at all.... (Score:4)
"Jeffrey Schiller, a security expert and network manager at the Massachusetts Institute of Technology, said the fine print in the DOJ's request for review would place numerous unacceptable restraints on the process, including giving the department the right to read, edit and even junk the report before the public saw it.
In other words, any negative feedback from scientists could be cut out -- while the DOJ would still be able to claim that those scientists, and the universities associated with them, reviewed the software."
So this isn't going to be any kind of review at all. With the knowledge of the DOJ's control over the "review" I don't see how any intelligent soul could believe the final report. If that aint sad enough the university has to pay to review it!
Anyone got a mole inside IIT? I'd love to see the source leaked!
What's the point of keeping the source closed? (Score:3)
The FBI claims that they need to keep the source closed to prevent criminals from figuring out how to evade Carnivore. But it seems to me that any criminal who is technically skilled enough to do this from reading the actual source code could also figure it out just from the descriptions the FBI has freely given to the press. I mean, either there vast subtleties I'm missing about checking the TO and FROM fields of email messages, or the FBI has something they want to hide.
Suppose you were an idiot. And suppose that you were a member of Congress. But I repeat myself.
December? (Score:1)
Re:No review at all.... (Score:1)
Now we all criminals. (Score:2)
Then why does their agreement with the review boards allow them to alter the final report?
The only part that may go unreleased, she said, is the software's source code, which would be the proprietary information of the company that developed it, and which could also help criminals evade Carnivore.
I want to evade Carnivore. Does that make me a criminal?
--
Re:Now we all criminals. (Score:2)
--
Yeah... Whatever (Score:1)
When they release it to the public, we will think that Carnivore is a perfectly fine system. I'm not sure that this "Review" of carnivore is really going to go like it should.
They need to have a system where the university can say anything they want about it, or people won't be able to see how bad it is... never mind, thats exactly what the government doesnt want.
I think I'm turning into one of those conspiracy theory people. I need to get out more.
Re:How long until... (Score:1)
while (<>) {
!/fbi|cia|atom-bomb|saddam hussien/i && next;
print;
}
Re:How long until... (Score:1)
#!/usr/bin/perl
while (<>) {
print if
}
or even better:
$ perl -ne 'print if
Re:IIT maybe biased? (Score:1)
Re:University Based Reviewing System (Score:1)
Re:When are we going to get serious? (Score:1)
It's interesting, I just had this conversation with someone the other day. They thought it was quite humourous that certain hacker types were so vehement about the misuse of the net and infringement of freedoms on the net.
"[they'll] just go build another one!" I was told. Does anybody else recognize that as a line from Atlas Shrugged?
There are a lot of people right now busily tearing down internet freedoms and functionality who sleep soundly at night because they are certain that the 'hackers', the people who built the net and make it continue to function, cannot do otherwise; the powers that be are quite certain that if they fsck it all up, you will just go build another one, and when you do, they will take that one from you, too.
Now THAT is an intellectual property issue.
0x0000
Re:Retraction (Score:1)
Submit that to referendum... (Score:2)
How about a real democracy at home?
Since this Carnivore thing is going to have a long term effect on all Americans, and all other countries' population as well, isn't it fair to submit the question to the whole population for a referendum?
And let's see whether we want it or not. I don't like the idea that some FBI guys decide for me.
IIT, IITRI, from a student (Score:2)
AFAIK, and in my opinion, it is a pretty top-rate institution, with a nearly top rate reputation. I think that degree is, and should be, as good as any other degree qualification for employment. This said I don't recommend going there unless you like pain and suffering, because in my experience they do a bad job of making a good quality of life university experience. I should stipulate that this was at least an order of magnitude less true when I left (May) as it was when I started there. So maybe it's better now... If they keep going at that rate the place would truly rock in another 6 or so years, but I think it gets harder to make that size of gain.
It is apparently at least as famous or moreso in the rest of the world, and does have a large foreign student population.
ROTC: the ROTC #s there have been in decline since 95. Army especially so. The AROTC students there tend to win a disproportionate number of awards in the Fire Battalion (IIT's AROTC program is a satellite of UIC's)
There are professors in every department who speak English natively. In the Math and CS classes I took, that only served to demonstrate that they were either incompetent or just terribly confusing and disorganized people (which I could actually tell WASN'T true of some of the people I couldn't undertand) I have a BS in Mechanical Engineering, and that department actually had many professors who spoke English quite understandably AND knew what they were talking about. Still a couple of bastards, of course, but that's life.
I should point out that some of the militarization of IIT's campus in general is due to the extremely bad neighborhoods on 3 sides (the fourth is an expressway. Across the expressway is a neighborhood that isn't too bad, as long as you are white) IIT works very hard for safety there, and does a generally good job (although changing away from the IIT Police was a bad, bad move, imho.)
IITRI is the big tower at the south (most dangerous) side of campus. It is across from some Public Housing towers. Recently there was a multiday shootout between the public housing people (across from IITRI) and the police admin building (across the other street from the PH) involving at least one tripod mounted automatic weapon in the PH. At least one security guard in the IITRI lobby has been shot from the PH tower, and I've heard rumors that there was once a grenade used. (They've improved the glass since the sniper, I'm told)
This isn't the primary security reason. IITRI does some extremely sensitive work. I strongly doubt you'll see leaked source code. A friend of mine who had classes in IITRI (doesn't happen anymore, only in the Design school) reported getting off on the wrong floor and found himself facing M16 bearing military guards.
I've also heard that on the old USSR list of what to nuke, IITRI was the 3rd ranking civilian institution in terms of importance (this obviously excludes any military institution, including any of our nukes, Crystal Mountain, and any place the pres or a successor might be, since he's the military commander-in-chief) to destroy, because of the large body of military research done there.
IITRI is basically like having Lockheed review it, except they seem to by trying to use the fact that IIT is an educational institution to add credibility. I don't think the source will get out. I do think it'll probably be competently reviewed. I don't think we'll ever HEAR about any problems they find.
I'll be happy to communicate via email with anyone interested in IIT.
Re:University Based Reviewing System (Score:1)
To be honest, how many schools are known for their educational programs? Most are known due to their sports programs. IIT does a lot a research, it is just in fields that most people here are not interested in.
Let's wait until the review is done before making charges of conspiracy.
Bias. (Score:1)
Well, along with all the other matters to send off to my Rep and Senators, we can now add the 'independent' review of Carnivore. Anyone who isn't totally disturbed by Freeh and his department's lack of respect for the court order should make it plain and apparent to their congress grunts, as well as the key folks on the Senate and House Judiciary committees that the continued recalcitrance is injustifiable.
You basically need to fight with letters.
Re:Interactive Carnivore (Score:1)
When are we going to get serious? (Score:1)
contract? (Score:1)
Re:2 consecutive YRO stories, a new record. (Score:1)
"They don't stop to think whether the *government* thinks they should"
Re:How long until... (Score:1)
Interactive Carnivore (Score:2)
Interactive Carnivore Source (Score:2)
Ummmm...
I am learning more and more about this country as each day passes.
IIT maybe biased? (Score:3)
Understanding that MIT and University of California, San Diego "turned down the Justice Department's review request earlier this month, saying they were being asked to rubber stamp the Carnivore system," I am disturbed by a CNN article [cnn.com] in which the senior vice president at IITRI and manager of the advanced technology group, said "he was unaware of the concerns expressed by other academic institutions."
I don't buy IIT's statements suggesting that they don't know what Carnivore is. Unfortunately, I doubt most of the populous will care or understand the extent of abuse by Carnivore or an apparent conspiracy with selecting IIT as the reviewer.
Re:Kent State (Score:1)
Just use Altivore (Score:1)
Re:IIT maybe biased? (Score:1)
Its all in this video [batv.com]
This non-profit expects to generate $150 million in profit this year
No doubt this independent review has already been written
2 consecutive YRO stories, a new record. (Score:2)
Re:IIT maybe biased? (Score:1)
And, quite honestly, I doubt anyone heavily involved in the IT field has not heard of the Carnivore system at this point. The Sr. VP of IITRI's asserations that he is unaware of other institutions' opinions is pretty thin. This has gotten a lot of press in various ways. I've seen stuff on CNN, Headline news, and on MSNBC.com. To not be aware of the general opinions of Carnivore, you'd have to deliberately be unaware and ignorant on purpose.
Frankly, it doesn't surprise me that some of the institutions don't want to weigh in on Carnivore, but it bothers me when some profess ignorance on this scale.
Kierthos
Re:Submit that to referendum... (Score:1)
As another poster suggested, the best way to effect change is to send letters to your representatives in Congress. If you are really passionate about the issue, follow up with a phone call.
<flamebait>I don't think postings on /. will really get law enforcement to change their behavior or people in Congress to change their votes.</flamebait>
Re:IIT maybe biased? (Score:1)
you are not going to convince me that anybody with a metallurgy lab in Huntsville does not have a DoD contract... and I can see a lot of my own private communication being considered "relevant"
Attention to detail... (Score:1)
Open Source is the only way to go. (Score:1)
"// this is the most hacked, evil, bastardized thing I've ever seen. kjb"
$175,000!! (Score:1)
That's Just Incredible. Can someone explain why it cost this much for a few people to look at this computer? Add an E- to anything and it's worth a fortune. E-Hotdogs! $2000! It Just Amazes Me.
It's just bureaucracy. (Score:1)