FBI Carnivore Screwup Destroys E-Mail Evidence 305
An Anonymous Coward writes: "The FBI apparently used Carivore in an attempt to collect information on Osama bin Laden't network. Unfortunately they screwed up and collected information on "non-covered targets" (*ahem*, isn't this the sort of thing we weren't supposed to worry about...). Then the FBI tech was "so upset" that he destroyed ALL of the collected email, not only the information that was not covered by the warrant. Here is the SF Gate Story and EPIC's press release."
No backups? (Score:1)
Re:No backups? (Score:5, Interesting)
A Justice Department official, speaking on condition of anonymity, said Tuesday night that the e-mails were not destroyed. The official did not elaborate or try to reconcile the statement with the memo.
Yeah, I'm sure there are backups. I'm sure the FBI is avoiding confirming that there are records somewhere of emails captured from "non-target" subjects, while trying to cover its ass in re: losing evidence.
Totally off topic, but... (Score:1)
-----
Apple hardware still too expensive for you? How about a raffle ticket [macraffle.com]?
Re:Totally off topic, but... (Score:2)
Re:No backups? (Score:2)
better than nothing (Score:1)
Re:better than nothing (Score:1, Interesting)
Floppy disks with PGP keys are used to decrypt the message.
These accounts could be setup WEEKS ago, one for each day. They would be un-traceable.
From one who knows...
Re:better than nothing (Score:1)
Fbi Document (Score:5, Informative)
Re:Fbi Document (Score:2, Insightful)
Re:Fbi Document (Score:2, Funny)
When it doesn't pay to be the tech guy! (Score:2, Funny)
df -k
/dev/hde2 10 000 000 9 900 000 99% \
/mnt/Carnavor data
#Oh crap! All those emails! This is TOTALLY\
illegal!! I'd better restart that piece of crap..
/etc/rc.d/init.d/munch stop
vi
rm -Rf
/etc/rc.d/init.d/munch start
#whew. Legit again. I'm TOTALLY awsome!
Re:When it doesn't pay to be the tech guy! (Score:2)
-b
Re:When it doesn't pay to be the tech guy! (Score:2, Insightful)
is that a foregone conclusion now?
Re:Fbi Document (Score:1)
Yeah right (Score:1)
This is just something to make us feel better. (Score:1)
Yea right.
Damn them! (Score:3, Funny)
Yeah... (Score:1)
Re:Yeah... (Score:5, Funny)
rm -rf
We all know he just typed:
rm -rf
Re:Yeah... (Score:2)
alan@darkstar~$su
root@darkstar:/home/alan#rm -fr
DOH!
[OT] Why did you su? (Score:1)
(Unless the files weren't yours, of course.)
Re:Yeah... (Score:2)
rm -rf
Login as root and do this in
Re:Yeah... (Score:2, Funny)
Carnivore Attacks Gaming Websites Too (Score:2, Interesting)
Re:Carnivore Attacks Gaming Websites Too (Score:2, Funny)
do they have backups of the porn spam? (Score:1)
why can't they track crap like that down too?
check THIS out (Score:5, Informative)
you've got to read it to believe it.
Anyone have Colleen Rowley's Email Address? (Score:3, Insightful)
It's not easy to speak out about what you believe in, but if more people did, the world would be a better place.
Found Rowley's fax# and postal address (Score:2)
Mike
FBI's "outdated" computer systems? (Score:3, Interesting)
Does anyone believe for a second that the FBI's computer systems are outdated? Sounds like a spin job to me....
Later watch the FBI try to attribute their missed tip-offs prior to 9/11 to slow computers. They'll have all kinds of "contributing" factors that'll spread the blame out thin enough so no one loses their job.
Re:FBI's "outdated" computer systems? (Score:1)
IIRC I heard it on CNN.
Re:FBI's "outdated" computer systems? (Score:1)
Re:FBI's "outdated" computer systems? (Score:2, Funny)
Re:FBI's "outdated" computer systems? (Score:5, Insightful)
This is the sort of ignorance that should have been completely destroyed by 9/11. Why do you not believe that the FBI has severely outdated machines? Because the typical Slashdotter has an extremely distorted perception of the scope and extent of governmental power and efficacy. When the CIA starts up a venture capital firm to fund technology ideas to jump start itself in playing catch-up with the private sector, that says something. When the NSA goes on 60 Minutes and says "we're friggin way behind," that speaks volumes. The government USED to have the biggest and the best. Today, the private sector, as far as information technology goes, is WAY ahead of the agencies.
Remember, when Clinton entered office in 93, there WERE NO COMPUTERS in the White House! They still USED TELETYPES. In 93!
Derek
Re:FBI's "outdated" computer systems? (Score:2)
I don't consider myself a conspiracy theorist, but I seem to remember something pointing to official reports about what development year the CIA was in computer hardware / software. We (the world outside of the US govt) are in something like development year 35, roughly, or were at the time of this report. Basically that means that we have had the equivalant of 35 years worth of development on computers since they became redily available to the public. This doesn't mean it was 35 years ago or something, computer development has supposedly progressed more development years than real years.
That said, the CIA released at some point they were in development year 87.
~Will
Re:FBI's "outdated" computer systems? (Score:2)
http://www.wired.com/news/business/0,1367,39468
As to the NSA, don't take my word on it. Here's the damn Director of the NSA saying they're lagging behind the private sector:
http://www.computerworld.com/governmenttopics/g
Really, don't you read?
Derek
Re:FBI's "outdated" computer systems? (Score:2)
It is the NSA's job to collect data and analyze data. That's it. Not to go on 60 Minutes for disinformation prop.
Notorious in spy novels. Really, lay off the fiction and conspiracy websites.
Returning to the POINT, the CIA formed a VC firm to capture the dynamism of the private sector technology industry in developing tech. We'll leave off your (totally off point) speculations on what I'm not quite sure.
Derek
Re:FBI's "outdated" computer systems? (Score:2)
Derek
Re:FBI's "outdated" computer systems? (Score:2)
The DIRECTOR of the NSA, said so, to be exact.
http://www.computerworld.com/governmenttopics/g
Derek
Re:FBI's "outdated" computer systems? (Score:2)
And you know this... how, exactly?
The issue isn't whether the NSA has the machines to crunch the numbers to crack an encrypt scheme. Big deal. My desktop can do that, given enough time. The problem is in information analysis and communication systems. Sure the NSA collects terrabytes of data daily, but as the NSA itself has admitted, it simply can't make heads or tails of that data. Our intelligence agencies are great at collecting data, but are lost when it comes to PROCESSING that data into actionable and meaningful INFORMATION.
Derek
Not Destroyed? (Score:5, Funny)
FBI Agent 1: We have a problem... Carnivore was doing its thing, but we got caught grabbing stuff we shouldn't!
FBI Agent 2: Hmmm. I know! We claim that some lowly tech in a spat of moral outrage deletes ALL the material as he is so offended that it captured the, uhh, "non-target" mail, but we actually keep all the files and use them as we see fit.
FBI Agent 1: Perfect!
FBI Agent 2: (Takes long drag off cigarette)
Re:Not Destroyed? (Score:3, Funny)
Re:Not funny. (Score:2)
Consider: If being made fun of online made folks unable to get stuff done, Microsoft's release schedules would slip by years!
Oh, wait...
Re:Not funny. (Score:1)
At least, I hope so, now...
Re:Not Destroyed? (Score:2)
*cough* Robert Hanssen *cough*
Hopefully (Score:1)
one word:.... (Score:1)
:0:
* ^From:.+al-quaida.org
terrorist
Perhaps that's what all the open source debate at
the Pentagon was really about.
Related to recently found memo? (Score:1)
"Whoops. Sorry boss, but I destroyed that damning piece of evidence that links our field office to the overlooked memos regarding the WTC tragedy. I hope this doesn't get me in too much trouble...."
What's all the fuss about? (Score:3, Insightful)
Possible Headline: Kathleen Fent, Do NOT Read... (Score:1, Funny)
Kathleen Fent, do NOT read this story
from the oh-no-our-porn-tapes-are-public-domain dept.
Posted by CmdrTaco
Re:What's all the fuss about? (Score:5, Insightful)
Maybe they should rename it (Score:5, Funny)
Re:Maybe they should rename it (Score:1)
Perhaps... (Score:2, Interesting)
I wonder if this will be the evidence that they need to make them stop using it.
Re:Holy shit! (Score:1)
Re:Perhaps... (Score:4, Interesting)
But if you let them read your emails, you must surely be willing to allow them to listen to your phone calls. If that's the case, you must surely support the government putting camera's everwhere. Since, I mean, you have nothing to hide.
See the problem is not that you don't have anything to hide, but the American system is based on freedom for all individuals. In that, everyone should be treated innocent until proven guilty. That's the basis of this entire system.
Destroyed? (Score:5, Interesting)
The article also notes people who have had their e-mail unintentionally collected are entitled to be informed. Can't wait to see if that happens...
Re:Destroyed? (Score:3)
"The FBI technical person was apparently so upset that he destroyed all the e-mail take, including the take on" the suspect, the memo said.
A Justice Department official, speaking on condition of anonymity, said Tuesday night that the e-mails were not destroyed.
Ya'll would be surprised what forensics software can do. I've worked with it at the government level. I think what the anon source was getting at is that they have recovered the "destroyed" data.
It is almost impossible to destroy data. You pretty much have to run over your hdd with your car. Anyone that thinks otherwise is fooling themselves. The forensics software that governments are using is unbelievable. Deleted, Formatted 8 times and written over 20 times? no problem. You're damn right that destroying the data would be a lengthy job. You have to light the fire that will burn the hdd after all.
Re:Destroyed? (Score:2, Informative)
Your hard drive also does not consist of a clean room with technicians in a bunny suit (think intel) taking apart your hard drive to read the data on the drive =)
Freedom thru massive screw-ups! (Score:1)
Of course, if they *really* wanted to, they could do forensics on the drives and reclaim the data. I bet my Amazon order for "Learn Arabic in 48hours" is probably one of the captured transactions:
Lesson 1:
Translate:
"The tightness of the restraints will negate the need for you to slit my throat"
amazing isnt it... (Score:1)
its almost like they need him to be a mystery and be alive so they can blame him for things...
Re: (Score:1, Offtopic)
I have but one question.... (Score:1, Funny)
bin Laden's ancestory (Score:2, Funny)
Gee, I didn't know Osama was dutch.
Carnivore? What's Carnivore? (Score:2)
Re:Carnivore? What's Carnivore? (Score:2)
+1 Funny: 50 + 1 = 50
+1 Funny: 50 + 1 = 50
+1 Funny: 50 + 1 = 50
-1 Ovrrt: 50 - 1 = 49
-1 Overt: 49 - 1 = 48
-1 Overt: 48 - 1 = 47
+1 Funny: 47 + 1 = 48
+1 Funny: 48 + 1 = 49
And there you have it. Who cares anyway... and if you do care, and your posts are good, you'll be banging your head on the ceiling again in no time.
hmmm (Score:3, Funny)
[modal window]
Drive C:/ is Full.
[/modal window]
followed quickly with a blue screen of death.
Re:hmmm (Score:3, Informative)
At least as of last year, Carnivore/DCS-1000 ran on NT 4.0 (not sure which service pack). Yeah, the poster prbably would be a little embarassed if s/he discovered Carnivore was deployed on Linux, but the poster need not worry. Most people arround here know that Carnivore runson NT 4. That's part of a lot of people's concerns. I'd feel much better if my government used more robust means to collect evidence. If someone cracks a Carnivore box, it comes with nice GUI tools to facilitate blackmail and information theft.
The FBI comes in with the box and hooks it up to the same LAN as the mail server to be monitored. I think it sniffs traffic instead of passing all of the traffic in one NIC and out another.
Easy solution (Score:1)
How is a screwup like this not covered up? (Score:2)
How did they destroy the data? (Score:2, Insightful)
Derelict
Forensic Data Recovery (Score:2, Interesting)
I wonder how important this is... (Score:2, Insightful)
Seriously, it's a pattern. The U.S. just took out a village by accident? Probably didn't hear much about it because everybody's talking about Tora Bora (ever wonder how everybody knows about that location and yet nobody knows what's been accomplished there?) The U.S. bombs 4 Canadians into smithereens? Two days later, a 13-state warning is issued saying that banking outlets are targetted. (Of course, Ashcroft denies that people should avoid banking that day...) Bush actually had information on the attacks before Sept 11th? Whoops, can't talk about that now, because the BIGGEST TERRORIST WARNING EVER where this time they're targeting the STATUE OF LIBERTY!!!!!
Last time I saw, Statue of Liberty's still standing. But that's okay. It makes me feel better knowing that whenever we start thinking for ourselves, the Pentagon's there to put everything back into perspective...
Got war? [mnftiu.cc]
Re:I wonder how important this is... (Score:1)
Destroy (Score:1)
Carnivore v.05a (Score:2)
One would think that they'd have tested the software BEFORE it was installed. That is how it's supposed be done, right?
finally (Score:1)
Don't get me wrong, I was right there with every other slashbot. "Abridgement of libery!" I cried, and more besides.
But that freedom isn't worth a dime in today's world without the security to keep it.
Something to consider.
Anonymous Coward (Score:2)
;-)
The author of "Carnivore"... (Score:3, Informative)
I was forced to work for this pervert for a few months . Everyone knew he was bad news, even before he entered a guilty plea for possession of child pornography [wired.com] including photos of infants.
Why are we letting pedophiles write software to catch criminals?
This guy is NO GENIUS! After all, he thought there really were young girls in an IRC chat room called "Dads & Daughters Sex" and he got caught!
Patrick was supposed to be an Internet Expert, yet he didn't even PGP his kiddie porn!
The Walt Disney Company lost $1Billion dollars investing in Patrick Naughton's company (his college roommate and best friend still works for Disney!). Now the FBI lost hard-earned evidence investing in Naughton's technology.
-Disney paid the price for Naughton's stupidity.
The FBI paid the price for Naughton's stupidity.
And THE AMERICAN PUBLIC did, too! By standing still while "pretty boy" Patrick was able to plea bargain by writing crappy software for the FBI, he got out of jail sooner and he's free to endanger more young girls, maybe even your son or daughter!
Re:The author of "Carnivore"... (Score:5, Informative)
here [about.com] it says he's "helping law enforcement track down pedophiles
and here [newnetizen.com] it says that the FBI's deal to have him write snoop software saved him from jail.
Jeffersonians vs. Hamiltonians (Score:2)
Wooly Mammoths and Sally Hemmings indeed!
The Truth? (Score:2)
They were using the GXP series harddisks for more than 8 hours at a time!
Peace. Love. Linux. Head Crash.
The problem in a nutshell: (Score:2, Insightful)
Not to bash law enforcement, but those among them who aren't completely ignorant of technology often know just enough to be dangerous.
Upset Agent (Score:3, Insightful)
The best part of this article is the fact that an FBI agent was upset at collecting email that wasn't supposed to be collected.
Whether they have backups, whether they collected the information or not, it points out the fact that individuals in the FBI are concerned about privacy issues as much as many of us are.
Re:Upset Agent (Score:2)
You have no basis to say that the FBI agent actually upset - it's not a fact, it is a claim that's been through multiple steps of obfuscation already. You also have no basis to say that if he was upset that is was because he was concerned about privacy issues and not something else (like the possibility of losing his job if something went wrong).
To be really cynical and paranoid: This could have been done on purpose to be used as an argument for allowing Carnivore: "But look, when we did a mistake we deleted ALL the mail, even legitimately intercepted ones just to be sure we didn't violate anyones privacy". Is that likely? Perhaps not, but it's possible, and the article simply isn't enough to rule it out completely.
K, explain how I can feel safe now: (Score:2)
that he destroyed all the e-mail take, including the take on" the suspect, the memo said.
temper temper FBI Guy.
The Justice Department's Office of Intelligence and Policy Review was furious after learning the evidence captured by the e-mail wiretap system was destroyed because of the glitch, the memo states.
temper temper Justice Dept.
Henry Perritt, who led a team authorized by the FBI to review the surveillance system, said he was surprised the technician deleted the e-mails.
Wha? something wrong in the "system"?!
"The collection is supposed to be retained for judicial review," Perritt said. "If an agent simply deleted a whole bunch of files without the court instructing, that's not the way it's supposed to work."
Really? didn't these guys assure us that everything works fine with carnivore? And that we could trust them not to use it improperly?
Now we have hothead FBI techies misdeploying a software package that has the potential to break the laws they are trying to enforce with the help of the "furious" Dept. of Justice to oversee their work?
Somehow I get the feeling I'm gonna be watched by mad men.
Washington Post Story Too (Score:2)
A violation of federal wiretap law? (Score:5, Insightful)
Amendment IV of the U.S. Constitution: The right of the people to be secure in their persons, houses, papers, and effects, against unreasonable searches and seizures, shall not be violated, and no warrants shall issue, but upon probable cause, supported by oath or affirmation, and particularly describing the place to be searched, and the persons or things to be seized.
Notice that the Constitution does not say that illegal searches may be performed as long as any resulting evidence is not used against the persons being illegally searched. It says that it shall not happen. This interception of mail was not just a violation of federal wiretap law, it was a violation of the Bill of Rights. We are supposedly fighting a "war on terrorism" to protect our way of life, but that way of life is rooted in our Constitution. The only way to win the hearts and minds of the rest of the world is to stick to our principles and abide by the highest law of the land which is the U.S. Constitution.
Re:A violation of federal wiretap law? (Score:2)
The first issue, of course, is whether the searches in question were actually illegal. That in turn hinges on whether or not the searches are, in the words of the 4th, "unreasonable".
I'm not claiming that it's a good idea or that the gov't is necessarility justified in what they did, but the fact that you find it distasteful does not necessarily make it unconstitutional or illegal.
PLEASE READ THIS (Score:2)
I can see from your comment and others that many people are reading "unreasonable" as something which is debatable. It is important that people understand the the terms "reason" and "cause" have specific legal meanings and they are synonyms in this context. Saying that NO searches will take place WITHOUT reason is the same as saying that searches will ONLY take place WITH reason, which is exactly what they say in the following clause when they specify that a narrowly defined warrant MUST be issued first and a warrant can ONLY be issued when the evidence shows that a crime has PROBABLY been committed.
I know you weren't trolling. I wish I had replied sooner so that more people might have seen this because it seems that quite a few people are misinterpreting based on "conversational" English. And this is an incredibly important point today judging by the way things have been headed lately.
Article: Why You Should Use Encryption (Score:2)
When you're done with that, consider also reading Is This the America I Love? [goingware.com]
Thank you for your attention.
Now with valid HTML and correct links (Score:2)
I ran it through the W3C HTML validator [w3.org] and found quite a few problems with the HTML, and have fixed them. The page now validates as HTML 4.01 transitional.
Also I have long had a bad link to a page called "Email Encryption Made Simple", and several people have written in over the last couple years to give me an updated URL, but I never got around to fixing it. Now the link works.
Finally, I urge the use of PGP on the page. But Network Associates no longer supports PGP. I thought it would be helpful to mention GNU Privacy Guard, which is actually what I use these days. I added links to it and will try to elaborate on it in the discussion sometime in the next week or so.
Terror Wars (Score:2, Funny)
There, OsamaBin Ladoni wields the Death Jet, a Jet with the power to destroy an entire building.
Will OsamaBin be able to rescue the FBI from the clutches of those Terrorist Privacy Advocate Infidels?!?!? Will Saddam learn that yuppie ex-president Ronald Reagan is his father? Will Arafat appear on the show Friends as rumored? Stay tuned.
How did it happen? (Score:2, Interesting)
Sure, there are -probably- back-ups. But then if the tech makes those backups, whats to say he didnt delete them as well?
Personally, it sounds more like a case of someone trying to abuse a tool they have access to (Tech sneeks a look at other peoples emails) and then messing up covering their tracks.
Then he avoids getting attacked by putting a moral spin on it, and comming out a hero. (maybe)
Another Computing First?? (Score:3, Funny)
Is this the first time that a piece of software was defended when it did its' job-- but not what they told people-- by claiming "That's a bug, not a feature"?
Then I noticed my tinfoil hat was maladjusted. So I guess they really did goof, Carnivore is just a powerful (if maladjusted) tool for law enforcement, and my fears to the contrary are just their attempts to discredit my typical insights into their foul ways with an insidiously sublte use of their orbital mind control rays.
"If you're not doing anything wrong..." (Score:2)
Well, this is clearly one thing we should worry about. What happens when the government, which is composed of fallible humans, goofs in its actions and accidentally destroys the citizens' property? Now no one could say that "that wouldn't happen."
Not the version of Carnivore reviewed (Score:2, Informative)
As a recap of our report, we pointed out that the accuracy of Carnivore collection was highly dependent on the correct setup of the filtering rules. We also pointed out that it was quite easy to make a mistake setting up those rules which would cause an over collection. The memos which were released do not indicate whether the overcollection was due to a filter setup mistake or some other bug that may have existed in a version prior to the one that we tested.
As stated earlier, I am not trying to defend Carnivore, but you must put these documents into context with the time period in which they were produced.
Deletining files illegal? (Score:2)
And don't do a "Tab"!
Re:I seem to remember... (Score:2, Insightful)
I don't think this argument can hold any weight. I honestly think that the majority of
Before 9/11 carnivore was such an absurd system that it was absurdity. I do not agree to any form of blanket-wiretap, if such a tap existed, I would have my telephone lines encrypted. I do not have anything to hide, BUT they do not have any reason to know that. I severly doubt that anyone who has any respect in this world would dare to put terrorist-like messages in thier emails post 9/11, it's simply not kosher in this era of post-crisis nationalism.
I would guess that carnivore instead accidently collected *all* emails/communications that passed through it, weither they were the target or not. This was not the intended behavor, so they made a big deal about it and tried to cover it up. Typical behavior (I'm not for/against it, I'm just stating this is likley what happeend).
I have no objection to the type of wiretap they imposed against mafiaboy (he could only get one of a set of ip's, they tapped his phone line, very specific packet sniffing), I am against this sort of blanket 'big brother is watching' actions.
Before you reply, I'd like to make it very clear, I am 100% for selective wiretaps with a judges approval. I am not for the ability to bypass the judge, and I am not in any way supportive of the police acting in thier own authority when it comes to extended spying.