lawful interception Archive

After being outed for massive hack and installing an NSA "rootkit," Yahoo cancels earnings call

What do you do if your ailing internet giant has been outed for losing, and then keeping silent about, 500 million user accounts, then letting American spy agencies install a rootkit on its mail service, possibly scuttling its impending, hail-mary acquisition by a risk-averse, old economy phone company? Just cancel your investor call and with it, any chance of awkward, on-the-record questions. (via /.)  …

Yahoo secretly built a tool to scan all email in realtime for US spies

In 2015, Yahoo CEO Marissa Meyer ordered the company’s engineers to build a tool that scanned Yahoo Mail messages in realtime for “characters” of interest to a US security agency, either the FBI or the NSA. As far as we know, the move was unprecedented in US tech history, and it triggered the departure of then-CSO Alex Stamos (previously), now CSO for …

Leaked catalog from UK surveillance arms-dealer full of gadgets sold to US cops

Cobham PLC is a surveillance vendor who sells to some of the world’s most egregious human rights abusing governments; in 2014, they provided a catalog of cyberweapons and spy tools to Florida Department of Law Enforcement, from whom it leaked. The catalog is part of the ongoing transfer of military/nation-state style weapons and tools to local law enforcement departments — the surveillance …

EFF and partners reveal Kazakh government phished journalists, opposition politicians

At Defcon, researchers from the Electronic Frontier Foundation, First Look Media and Amnesty International, revealed their findings on a major phishing attack through which the government of Kazakhstan was able to hack opposition journalists and arrange for an opposition politician’s extradition from exile in Italy to Kazakhstan. Irina Petrushova and Alexander Petrushov, publishers of the independent newspaper Respublika, had exposed programs of kidnapping …

1 billion computer monitors vulnerable to undetectable firmware attacks

A team led by Ang Cui (previously) — the guy who showed how he could take over your LAN by sending a print-job to your printer — have presented research at Defcon, showing that malware on your computer can poison your monitor’s firmware, creating nearly undetectable malware implants that can trick users by displaying fake information, and spy on the information being sent to …