Carnivore In Living Color 100
joel jaeggli writes: "The Carnivore talk done by Marcus Thomas from the FBI at NANOG 20 is now online... you can retrieve it from: University of Oregon Videolab. This talk was meant for a technical audience, and the discussion and questions from the audience are very enlightening. Major thanks should go to the folks from Merit/NANOG for managing to schedule this talk, to Marcus Thomas and the FBI for their candor, and the NANOG crowd for asking the important questions."
Just curious... (Score:1)
It's only going (Score:1)
A Crack in the Wall (Score:1)
Is it a Start? yes
Will it really make a difference for privacy in the US? This speech won't but Carnivore definently will be felt for a long time down the rode.
Delicious but I still don't trust them... (Score:1)
Of course I hope (Score:1)
Re:Just curious... (Score:1)
Carnivore, et al., can be beaten. (Score:3)
--
382 Megabytes?!?!?! (Score:1)
The largest single file to date that I have downloaded was 110MB (Elite Force demo). That took one hour. There is no way that I'm spending 3.8 hours just to download a 54-minute video.
Seriously, couldn't they have encoded this in DivX? Even though it is frowned upon by the government, it could've reduced the file size even more.
mirrors? (Score:1)
Um, a video codec: (Score:2)
I sorta thought the context of the article made that pretty clear?
<em>and multicast live in h.261, mpeg-1 and mpeg-2</em>
Though I guess it isn't obvious.
The nick is a joke! Really!
Re:Hell no, and it won't be. (Score:1)
wow, large file (Score:1)
[OT]: mirrors (Score:2)
cash and get themselvs a good mirroring system/box?
I think it would be a little more polite than
foisting crowds of data-hungry slashdotters on
an unsuspecting site.
Re:It's only going (Score:1)
Re:It's only going (Score:1)
---
Re:Hell no, and it won't be. (Score:1)
interns.com TRUE / FALSE 1920499140 id 8be836d4
Re:382 Megabytes?!?!?! (Score:1)
Re:A Crack in the Wall (Score:3)
--
Re:wow, large file (Score:1)
Re:Carnivore, et al., can be beaten. (Score:1)
So can phone wiretaps. So what? The point is not that the system is perfect and can never be defeated, it's that it can gather information in the cases where it can. Most criminals are pretty stupid.
--
Re:[OT]: mirrors (Score:1)
-------
Carnivore vs. dsniff (Score:1)
Or (Score:2)
copyright issues (Score:1)
Re:Carnivore, et al., can be beaten. (Score:4)
Yes, people will say, no, that's not what the FBI is doing. They're just putting a black box in at every U.S. ISP so that they can monitor certain people's communications only after receiving a judges signature (by the way, in California the DEA has a deal under the law which allows them to no longer get a courts permission when phone tapping people accused of dealing drugs -- they can sign the warrants themselves). The FBI says they will use this technology sparingly. They say it's for our own good.
Do we really need our Internet communications being monitored? I think not.
I for one do not want a technology in place (at my taxpayer expense) which allows the government the ability to shut down the entire Internet at a moments thought.
--
look at the D&D thing (Score:1)
--
Peace,
Lord Omlette
ICQ# 77863057
Re:Or (Score:1)
Damn, i hope they don't get any bad ideas out of this post...
-Elendale (I'm thinking of sending '1984' or 'Farenheit 451' to gov addresses with the subject 'plans to bomb washington' or something equally ominous)
Where's the real danger? (Score:1)
Re:382 Megabytes?!?!?! (Score:1)
checkhere. [slashdot.org]
Netscape runs just fine. I'm much more a sadist than a machochist. Coinicidentally, this talk is purty kewl - its actually got screenshots of carnivore running.
Carnivoring MPEGs (Score:3)
So the Government wants to have access to whatever "bad elements" send over the network. But will they ever be able to do it? This isn't voice we're talking about, this is data. Any "bad element" can encrypt it and make it unreadable by Govt officials in any useful timeframe.
And the Govt knows this, so clearly this isn't their objective. So what is? Mass scanning of John Doe's traffic? Must be.
Now let's look at their own site. An MPEG. How do you mass-scan MPEG files for BadThings(tm)? How do you mass-scan JPEGs? I'd like to know other people's view on this.
Carnivore is an acronym? (Score:1)
Re:look at the D&D thing (Score:1)
Now, the question of why Akamai's network gave me a link to a New Zealand server when I first looked at the trailer from New York City, well, that's one for another day. Obviously Akamai's system for picking servers "near" to people needs a little work.
--
Re:Carnivore, et al., can be beaten. (Score:2)
Is that the kind of thinking which Republicans for Bush are reduced to? My God that's pathetic. How about this: The people are more important than the party OR the man... Personal freedom is #1. Vote Green!
It's deliberately inaccessible (Score:1)
Re:THE CAP ON KARMA (Score:1)
asdf (Score:1)
I wonder how far the U.S. thinks it can bend our rights.
Ignore the Anonymous Pissant trolls !!!
Re:look at the D&D thing (Score:1)
You know, for a multi-million dollar website, slashdot is not the most responsive...
Mirror (Score:1)
Re:Carnivore, et al., can be beaten. (Score:1)
Personal freedom is #1. Vote Green!
You want personal freedom, therefore you advocate voting for Socialists? Here's a hint: socialism and freedom are mutually exclusive.
It's posts like this that make me wonder whether people actually look at what the parties believe.
--
Re:THE CAP ON KARMA (Score:1)
Re:THE CAP ON KARMA (Score:1)
What happens is the score of the article is increased so that readers will find such a valuable comment easily. This is the whole point of the moderation system, to give scores to comments NOT to users.
mirror (Score:1)
ftp://vec.mellender.org/pub/nanog-20-carnivore-
Clay
Re:mirrors? (Score:1)
ftp://vec.mellender.org/pub/nanog-20-carnivore-
Sorry for delays, it will take a while for this big puppy
Clay
Re:It's only going (Score:1)
transcripts? (Score:1)
i'm wondering if anybody asked about the free and open source reimplementation of carnivore, or like, why does carnivore have to be a locked down hardware box that only the fbi has access to? maybe they just want to sell hardware?? uhuh.
security through obscurity is my guess. in which case somebody will steal a box, or obtain illegal access, break the undoubtedly flimsy security (why else would they need to hide it?) and obtain the ability to bypass carnivore, or poison it, and not tell anybody, except perhaps the terrorists that are funding them.
if they want to do this i'd rather see an open competition like the AES selection process.
this post is being monitored (Score:2)
that'll slow those terrorist bombers down
beep beep beep -- this HTTP link is being monitored by the FBI -- beep beep beep
i wuzn't gonna say anything about my neighbor makin' hootch in his basement, anyway..
beep beep beep -- don't even THINK about using encryption -- beep beep beep
I'm startin' to get used to it already, fnord.
Re:Carnivore, et al., can be beaten. (Score:1)
Re:asdf (Score:2)
Yes, and there is such thing as a search warrant. Many of them are even justified, based on probable cause. In such cases, the FBI needs the tools to get the right information.
We should certainly worry that they are abusing their power, or that some black hat will subvert the technology. But you cannot expect them to do their jobs without access to modern tools.
My mom is not a Karma whore!
Re:382 Megabytes?!?!?! (Score:1)
Yup ... I'm a machochist OK. I arrived at the link without any video capapbility and I decided to remedy that.
About 5 minutes later I clicked on the .mpg link and watched a long video at 640x480 ... pretty cool really.
Yes I do like my cable.
So I had to grab one set of binaries and one set of source code, link the binaries to the path, make the source, link the binaries to the path and click on the .mpg link ... about three min really.
Did you notice how the far left panel in the 1.3.whatever Carnivore was never gone over...everything but that. Looked like stuff to control archieving. Brought back memories of w2k I ran for a while to cause I built a bunch boxes that needed to dual boot. Not what I want in an OS that's for sure. Ugly clunky thing, slow too. Ah well to each his own.
CC
Re:asdf (Score:1)
Ignore the Anonymous Pissant trolls !!!
Mirrors? (Score:2)
I tried to set one up but after 30 tries I still couldn't get onto the FTP. Hope someone else is having better luck!
Will encryption be outlawed? (Score:1)
Apart from the NSA itself, which employs very good cryptologists (and probably a couple of Deep Crack machines... or is it a couple hundred?), the infrastructure for intercepting communications is there (*cough* Digital Telephony bill *cough*). Perhaps the plot from "Enemy of the State" isn't too absurd after all.
Re:A Crack in the Wall (Score:1)
Re:Where's the real danger? (Score:1)
Mirror here... (Score:2)
but please be nice, will ya:
http://mirror.swma.net/carnivor/nanog-20-carniv
If you blow the box I blow the file
Michael
Re:asdf (Score:1)
The U.S. gov lies about everything. There is no
telling really.
Ignore the Anonymous Pissant trolls !!!
Re:this post is being monitored (Score:1)
Re:mirror (Score:1)
Re:Carnivoring MPEGs (Score:2)
The really, really SMART bad people will be even more sophisticated than that.
No, Carnivore won't be used primarily against terrorists, any more than phone taps are now. Mostly it will be used against the average dumb Joe selling some pot or other contraban.
Re:asdf (Score:1)
Re:Mirror here... (Score:1)
Re:Mirrors? (Score:1)
Re:Carnivore, et al., can be beaten. (Score:1)
Freedom to what, stripmine national parks? Beat flag-burning hippies to death? Throw away millions of dollars in other people's savings gambling away the entire contents of your S&L, on junk-bonds & blow jobs?
Or maybe you're just talking about the more prosaic freedom to make of billions of dollars producing completely useless high tech whim-whams, eg the Star Wars system?
That's not personal freedom, it's corporate freedom. they're kinda different.
Yeah, it's true, democrats suck. They're nearly as bad as republicans, what with continuing the insane War on Drugs & the whole general atmosphere of constant surveillance it's led to. But, you've got to get your shit straight about this "freedom" word you're throwing around.
Republicans have always, in principle, been fiscally conservative (as long as you're rich, you should pay fewer taxes/get more Corporate Welfare/ etc.) But- they've also always been *socially* conservative-- which means, you're free to be as much like a straight white middle class suburban male as you'd like, but if you differ in any way from the percieved norms, you're completely fucked.
I can't believe that anybody who'd lived through any Reagan-Bush, or had even _heard_ of Nixon (who was & will always be the prototypical Republican, to me- I find it safer to regard them as Evil than Stupid) cd espouse such views, that's why I wonder if you're too young to know better.
What's the right right? (Score:3)
You have the RIGHT not to give evidence against yourself.
Prior to actual charges being filed you have the RIGHT to protect yourself in any way possible from intrusion into your affairs. You may encrypt, code, obfuscate, and outright destroy anything you want to, for any reason. It is your RIGHT to have it assumed that all such actions are innocent of any wrong doing. You have a RIGHT to be secure * against government intrusion * into your papers.
Once charges have been actually filed you have the RIGHT to * shut the hell up. * This right to shut the hell up includes the right not to tell them your password, not to give them any key codes, the right not to tell them where you hid stuff, the right not to give a statement, the right not to utter one single blessed word. Speak ONLY to your lawyer.
Use your rights. Encrypt everything. Your laundry list. Your cat's birthday. Your phone conversations. Everything. Use as much personal jargon that will be meaningless to anyone but the intended recipient, ( which could be noone but yourself), as possible. Learn to use steganography and encrypt and code things before you embed them. Use assorted DIFFERENT encryption and encoding techniques.
Destroy everything that is of no more use to you. Don't just delete, destroy. Everytime you reinstall an operating system write 0's to the entire HD first. Eat memos. Just because you now have the power and the space to document your life in exquisite detail dosn't mean it's a good idea. Keep your house, real and virtual, squeaky clean. Throw away old phone bills. Throw away all financial records that current law, ( unconstitutionally), does not require you to retain. Throw away all reciepts except for those things that you WISH to be able to prove ownership of. When I say throw away I don't mean throw away or shred, I mean BURN.
Use cash. They hate that. They're making it illegal by bits.
If called before a grand jury or civil court where it is currently held that the fifth ammendment dosn't apply get a really, REALLY bad memory. Repeat after Reagan. " I don't recall, I don't recall, I don't recall."
These are your rights, use them or lose them
Ummm, you scare me. (Score:1)
But I am afraid of you. The views you espouse in your post show that you are only a few steps shy of being involved in the next Waco, Ruby Ridge, or Columbine. I can only hope that when they do come and get you, for whatever it is you're doing that you don't want the FBI to see, that they don't hesitate and that they don't miss. The FBI exist to protect people like me from people like you. I like that.
BTW, the best and brightest minds are not working on the web - they're working for the military. On weapons. Isn't it great to know that our nations best minds are busy right now contemplating a more complete and clean means of mass and self destruction?
Re:transcripts? (Score:1)
However, things will get really funky once the FBI key or the NSA backdoor key(aka "key recovery technology") will be broken - all the documents that were deemed secure will suddenly become readable.
Historians, Peeps, ARCHIVE NOW, and read later.
Re:Carnivoring MPEGs (Score:2)
Ever heard of traffic analysis? You can extract plenty of useful information out of monitoring encrypted messages.
Re:this post is being monitored (Score:1)
2. If you can follow a EZ form that most middle schoolers can read, and you actually paid your taxes, and you didnt embellish anything on the 10-40 that you knew was really false (its just a white lie...) anyway, what do you care if the IRS pays a visit? One of the fun things about following the law is that when things like that happen, you can slam it down their throats. There's nothing like getting pulled over for a traffic violation, arguing with the cop because he's an idiot, proving you're right, and then speeding away without a ticket. But I digress...
3. Your son doesnt make it into the army. Trust me, you don't want your son in the army anyway.
4. First off, its loses, not looses. So your brother loses his contract. See what happens when you run your big f*cking mouth. But thats the political game. Policitians either scratch each others backs, or stab each other there. Not a secret, not a surprise, not necessarily right, but thats the way it is.
5. So you ran your big mouth, your rectum got audited, and your brother is out some potential money. See what happens when you open your pie hole? But look at what else happened. The FBI caught that guy, just down the block from you, the one who would be molesting your daughter right now, only he's in jail, getting molested himself. And they caught those two teenagers, who go to that same high school where your son lost his scholarship. Theyre in juvy now, cuz they were planning to blow up the school.
Carnivore really sucks. That is, if you are not a good, honest, positive, can-do, hard-working person. Those bastards have it easy, because they have nothing to fear.
Re:Or (Score:1)
Re:Carnivoring MPEGs (Score:1)
I beleive it is a switch. The can silence anyone in a fraction of second.
Don't like the content of that web site ? Blam, 404 not found.
Wanna shut down this individual ? Blam, connection failed.
Wanna slow down the connection of someone, suppress its ability to go somewhere ? It ability to send mail to someone ? To recieve a confirmation of its emails ? Just a couple of clics away.
There are other things, like monitoring:
Wanna know who connects to this info ? Wanna know what this guy internet pattern use is [Which sites, how often, who he mail to, who he receive mail from] ? Wanna know who, in the people that had communication with him, have a similar pattenr use ? Clic, clic, clic. Done
Very usefull for threats, too. Wanna get this guy receiving illegual material ? No problem. Now he is officialy on underground illegual mailing lists, its browser went to a couple of illegual sites (If your HTML pass via my machines, I can do very neat things).
And, well, with the info you grab, it will be a very easy game to crack its machine if needed...
Sure, Carnivore won't do that now, but I bet it'll be used for that in a not-so-far future.
Cheers,
--fred
Re:What's the right right? (Score:1)
Good start, but definitely not sufficient. You can find tools for secure deletion at secutiryfocus
http://www.securityfocus.com/templates/tools_categ ory.html?category=73 [securityfocus.com]
Cheers,
--fred
1.3 Gigs over ISDN... (Score:1)
Search warrants (Score:2)
From what I've heard, the number of actual wiretaps is going up, while the number of times those wiretaps actually contribute to a prosecution is going down.
In fairness to law enforcement, the mere fact that the number of wiretaps is going up is not in and of itself a bad sign, since the amount of communications is going up. However, one would hope that the ratio of (wiretaps that generate evidence used in a prosecution)/(wiretaps) would be holding constant or increasing. From what I've heard, the actual ratio is plummetting - the government is fishing more and more, and getting less and less for it.
I believe that the government should be required to place a specified time limit on any wiretap warrant (time <= 6 months), and at the end of that time either
This would force the government to be more careful in selecting targets to tap. As it is now, if "Murry the Snitch" says I'm selling drugs (because he's on the hot spot and needs to give a name, any name, to the police), and they tap me for a few years and find nothing, then they quietly bury the data without so much as a by your leave. If they had to present to me the data so gathered, and the source of the information leading to the search warrant (does "the right to confront your accusor" ring a bell?), then I could (hell, would) bring suit against the the law enforcement agency involved as well as "Murry".
Of course, this has about as much chance of being passed into law and enforced as freezing a pot of water by placing it on a hot stove.
Re:Carnivore, et al., can be beaten. (Score:1)
My understanding is that Carnivore is a packet sniffing device that is attached to a network, but does not act as a gateway. It is capable of listening to everything on the segment, but cannot alter the information. (And I agree that trusting the FBI with that much snoop power is a strong motivation to use GPG on your email.)
http://www.gnupg.org/ [gnupg.org]
Transcript? (Score:2)
Carnivore - the point is moot! (Score:1)
Because Carnivore is totally domestic (there's no "wink and nod" agreement with the Brits to spy for us to make it "legal", like Echelon) the discussion should be on the class action lawsuit ISP users should file to stop its use or to disclose the full capabilities of it in its current incarnation.
I believe the Digital Telephony and Wire Act made government backdoors into new comm technology a requirement, but the net was already old tech when that was passed.
Domestic spying is illegal, and a buck from every user on a major ISP would be enough to fund the legal procedings to force the government's hand on this. They work for us, and they must prove that everything is above board.
UO offers warez to view carnivore (Score:1)
Re:look at the D&D thing (Score:1)
--
Peace,
Lord Omlette
ICQ# 77863057
Re:asdf (Score:1)
Ignore the Anonymous Pissant trolls !!!
Re:Carnivore, et al., can be beaten. (Score:1)
Yeah, what's your point? I've read it before. One of the most frightening and oppressive documents I've ever read. Proving, of course, that socialism != freedom.
--
Re:Carnivore, et al., can be beaten. (Score:1)
Jesus, what are you, twelve years old? Are people's memories that short, that they can even put the word "republican" in the same _sentence_ with "personal freedom"?
Congratulations, you have bought into every cliche the Democrat party has ever made. Nope, my memory is not short. Are Republicans perfect? That would be a big N-O. But they are infinitely preferable to Democrats. All freedom begins with economic freedom, and Democrats are anti-economic freedom.
You mention Nixon, but curiously neglect to mention Clinton. In my mind, Clinton is far, far worse than Nixon. The difference is that Clinton never got caught with enough evidence, except for preying upon his female subordinates.
why I wonder if you're too young to know better.
Again, no, I've been around the block a few times. On the other hand, perhaps you haven't mentally evolved beyond the 60s "flower" mentality. I'm reminded of the old saying: "If you're young and Republican, you have no heart, if you're old and Democrat, you have no brain." So true.
--
Re:asdf (Score:1)
In NYC, when the police are walking around the streets, crime goes down. When the police drive around in cars all day, the crime goes up.
Maybe the FBI are incompetent because they sit in front of computers all day in Washington DC. They could do more undercover operations, which were quite successful in bringing down the mafia. They could leave their offices. But that would be dangerous, wouldn't it? Far better to hide scared behind a computer and monitor everyone's communications.
Re:UO offers warez to view carnivore (Score:1)
Re:this post is being monitored (Score:1)
I'm a good, honest, positive, can-do, hard-working person. I also smoke marijuana in my free time. Unfortunately, this small act which causes large amounts of personal satisfaction (and stress relief from all that can-do, hard-working) is considered to be criminal behavior by the powers that be -- Not because of its inherent dangers. Not because of damage it does -- but because it is politically viable to keep it this way.
As a morally upstanding individual, how do I reconcile my own desire to pursue my right of freedom and happiness with the desire of my government to be my mommy?
I don't want the government looking over my shoulder no matter what. It's not what they are or aren't doing with the system now, but the potential for abuse that has most of us up in arms.
-The Reverend (I am not a Nazi nor a Troll)
Re:382 Megabytes?!?!?! (Score:1)
Re:Carnivore is an acronym? (Score:1)
Re:this post is being monitored (Score:1)
1- I suppose that if you politics don't square with your boss's that should be grounds for firing too. Or if you worship a different god. Or your skin is darker than his. To paraphrase your earlier statements, you're walking proof that your right to express yourself in no way means that you have an opinion worth sharing with the rest of the world.
2- "What do you care if the IRS pays a visit?" You've got to be kidding me. The IRS is one of those few people who can casually say, "You owe us $20,000. Pay us now or go to jail. If we made a mistake we'll let you know in 4-5 years, after you've spent $150,000 in legal fees".
3- relevance? Actually that's true of your whole post.
4- see 1.
5- Look at what else happened... your son is in a federal lockup being raped daily by big burly men because he sent a friend a question about smoking pot. Your daughter has been fired from her job because you opened your big yap and your whole family's blackballed, so she has to sell her 17-year old body in the streets to make ends meet. Meantime everytime you drive down the street there's a cop on your tail ready to bust your tail lights and arrest you for it.
You strike me as the kind of guy with a $5000 PC and a $0.25 head controlling it.
Carnivore is really lovely... that is, if you're a mindless drone willing to goose-step to the dictates of the latest presidential edict. Those idiots have it easy, because they don't have minds to make up for themselves.
Re:Carnivoring MPEGs (Score:1)
I don't know. However Echelon does it, I guess.
Re:Where's the real danger? (Score:1)
Like it or not, there's are thousands of hard working Americans within our government whose job it is to give people like you the freedom, prosperity, and peace-of-mind it takes to sit around all day dreaming up your bizarro fantasy world. "But there are bad people in the government!" you say. Yes, that's nice. We've heard that countless times before and I think we all understand that. THERE ARE BAD PEOPLE OUT THERE. Let's all acknowledge that, and move on with a little less talk and a little more action.
Re:Ummm, you scare me. (Score:1)
So what'choo goan do when dey come fo' you?
Seriously. What happens when you let a government steadily encroach on the rights of its citizenship? The end result is a police state, where thinking against the party line (see the USSR about 10 years ago) is punished swiftly, severely and in many cases, permanently. Once that happens, what will *YOU* do if the people who make it into power don't follow *YOUR* ideology? What will you do when *YOUR* private activities become the "problem?"
-The Reverend (I am not a Nazi nor a Troll)
Re:asdf (Score:1)
Richard Jewel - absolutely wrongly accused. Saw a TV special on him during the Olympics. He's living a very happy life now as an Atlanta cop. No harm, no foul.
Unabomber - yup, he was hard to find.
World Trade Center - they definitely fucked up. They had prior knowledge it was going to happen; they could have prevented in. Still doesnt mean the FBI set the bomb.
Waco - 79 people who were loco killed themselves. Yummy, there's nothing like Koresh-kabobs.
Re:this post is being monitored (Score:1)
How many times can you say the same thing? (Score:1)
Thank you, drive through.
-The Reverend (I am not a Nazi nor a Troll)
Some points (Score:2)
Why they can do this (Score:1)
For example: when someone accesses John Doe's email account, he doesn't get all worried and scared. But, if someone reads one of his snail mail letters, from his dear old aunt, you can bet that he'll be on the phone to the FBI, CIA and NSA demanding that they launch a twelve part investigation into the entire US Mail System.
This may be a slight exaggeration, but you get my drift. I think that the public needs to wake up, and to realize that physical assets are not the most important things anymore; but that information is now the international currency. They need to realize that it is not control of gold or land or weapons that determines who has the power; but it is those that hold the information that control the power.
After all, it may be a cliche, but it is finally true: Knowledge is power. (Incredible, frightning, unlimited power.)
--Cheesethegreat
Re:Ummm, you scare me. (Score:1)
Re:Where's the real danger? (Score:1)
Re:this post is being monitored (Score:1)
Re:this post is being monitored (Score:1)
Re:Carnivore is an acronym? (Score:1)